ctive_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2716.263589] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2716.268506] CPU: 0 PID: 8003 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2716.268541] lowmem_reserve[]: [ 2716.275956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2716.275960] Call Trace: [ 2716.275981] dump_stack+0x1b2/0x281 [ 2716.275992] dump_header+0x178/0x82f [ 2716.276008] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2716.276017] ? ___ratelimit+0x2cd/0x530 [ 2716.276026] oom_kill_process.cold+0x10/0xb18 [ 2716.276043] out_of_memory+0xe3e/0x1190 [ 2716.276054] ? oom_killer_disable+0x1c0/0x1c0 [ 2716.276061] ? mutex_trylock+0x152/0x1a0 [ 2716.276072] __alloc_pages_nodemask+0x23e1/0x2720 [ 2716.276091] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2716.276117] alloc_pages_current+0x155/0x260 [ 2716.276128] filemap_fault+0xea3/0x1980 [ 2716.276148] ext4_filemap_fault+0x84/0xb0 [ 2716.276159] __do_fault+0xfa/0x380 [ 2716.276168] __handle_mm_fault+0x2497/0x4620 [ 2716.276179] ? vm_insert_page+0x7c0/0x7c0 [ 2716.276190] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2716.276199] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2716.276219] handle_mm_fault+0x391/0x860 [ 2716.276231] __do_page_fault+0x549/0xad0 [ 2716.276244] ? spurious_fault+0x640/0x640 [ 2716.276253] ? do_page_fault+0x60/0x500 [ 2716.276261] ? page_fault+0x2f/0x50 [ 2716.276269] page_fault+0x45/0x50 [ 2716.276277] RIP: 0000:0xb358f8 [ 2716.276282] RSP: 8367cab:000000c00003df00 EFLAGS: 00438920 [ 2716.280411] Mem-Info: [ 2716.288966] 0 [ 2716.293951] active_anon:16965 inactive_anon:58821 isolated_anon:0 [ 2716.293951] active_file:30 inactive_file:10 isolated_file:23 [ 2716.293951] unevictable:0 dirty:2 writeback:0 unstable:0 [ 2716.293951] slab_reclaimable:13181 slab_unreclaimable:111338 [ 2716.293951] mapped:35477 shmem:60173 pagetables:829 bounce:0 [ 2716.293951] free:13962 free_pcp:0 free_cma:0 [ 2716.298390] 2717 [ 2716.302761] Node 0 active_anon:67460kB inactive_anon:219028kB active_file:116kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):92kB mapped:141904kB dirty:8kB writeback:0kB shmem:224308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2716.316117] 2718 [ 2716.321147] Node 1 active_anon:400kB inactive_anon:16256kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2716.331093] 2718 [ 2716.336095] Node 0 [ 2716.348410] 2718 [ 2716.353092] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2716.381084] lowmem_reserve[]: [ 2716.384994] Node 0 [ 2716.389278] 0 [ 2716.398477] DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:67932kB inactive_anon:219028kB active_file:376kB inactive_file:252kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:3244kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2716.399716] 2717 [ 2716.405429] lowmem_reserve[]: [ 2716.407819] 2718 [ 2716.411532] 0 [ 2716.442843] 2718 2718 [ 2716.442854] Node 0 DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:67932kB inactive_anon:219028kB active_file:376kB inactive_file:252kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:3244kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2716.442879] lowmem_reserve[]: [ 2716.479228] 0 [ 2716.518916] 0 [ 2716.541156] 0 [ 2716.554561] syz-executor.0: [ 2716.570121] syz-executor.3: [ 2716.590899] 0 [ 2716.610700] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2716.610724] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2716.610746] CPU: 1 PID: 29485 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2716.610752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2716.610756] Call Trace: [ 2716.610776] dump_stack+0x1b2/0x281 [ 2716.610791] warn_alloc.cold+0x96/0x1cc [ 2716.610803] ? zone_watermark_ok_safe+0x220/0x220 [ 2716.610814] ? usleep_range+0x130/0x130 [ 2716.610824] ? try_to_free_pages+0x23f/0x6e0 [ 2716.610834] ? _find_next_bit+0xdb/0x100 [ 2716.610845] ? run_timer_softirq+0x5a0/0x5a0 [ 2716.610862] __alloc_pages_nodemask+0x2127/0x2720 [ 2716.610879] ? lock_acquire+0x170/0x3f0 [ 2716.635609] page allocation failure: order:0 [ 2716.638945] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2716.644033] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2716.651922] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2716.651938] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2716.651957] alloc_pages_current+0x155/0x260 [ 2716.651971] ion_page_pool_alloc+0x118/0x1b0 [ 2716.661398] 0 [ 2716.663934] ion_system_heap_allocate+0x133/0x8c0 [ 2716.667572] 0 [ 2716.671515] ? ion_alloc+0x187/0x810 [ 2716.676527] (null) [ 2716.680303] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2716.684739] 0 [ 2716.688758] ? ion_system_contig_heap_create+0x130/0x130 [ 2716.698097] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2716.698111] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2716.698124] ion_alloc+0x204/0x810 [ 2716.698143] ? ion_dma_buf_release+0x40/0x40 [ 2716.702144] syz-executor.0 cpuset= [ 2716.706553] ? __might_fault+0x177/0x1b0 [ 2716.706568] ion_ioctl+0xea/0x1f0 [ 2716.706579] ? ion_query_heaps+0x360/0x360 [ 2716.706593] ? lock_acquire+0x170/0x3f0 [ 2716.711424] / [ 2716.718528] ? lock_downgrade+0x740/0x740 [ 2716.723071] Node 0 [ 2716.728446] ? ion_query_heaps+0x360/0x360 [ 2716.728458] do_vfs_ioctl+0x75a/0xff0 [ 2716.728474] ? ioctl_preallocate+0x1a0/0x1a0 [ 2716.732880] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2716.737286] ? lock_downgrade+0x740/0x740 [ 2716.737300] ? __fget+0x225/0x360 [ 2716.737310] ? do_vfs_ioctl+0xff0/0xff0 [ 2716.737320] ? security_file_ioctl+0x83/0xb0 [ 2716.737330] SyS_ioctl+0x7f/0xb0 [ 2716.739157] mems_allowed=0-1 [ 2716.743981] ? do_vfs_ioctl+0xff0/0xff0 [ 2716.754580] lowmem_reserve[]: [ 2716.757591] do_syscall_64+0x1d5/0x640 [ 2716.759367] 0 0 [ 2716.764929] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2716.764938] RIP: 0033:0x45e219 [ 2716.764944] RSP: 002b:00007ffa3780bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2716.764956] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2716.784579] 0 [ 2716.786482] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2716.790526] 0 [ 2716.793963] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2716.793970] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2716.814587] 0 [ 2716.814869] R13: 00007ffdb287bf9f R14: 00007ffa3780c9c0 R15: 000000000119bf8c [ 2716.830150] 0 [ 2716.878292] CPU: 0 PID: 29484 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2716.884685] page allocation failure: order:0 [ 2716.888746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2716.891932] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2716.899622] Call Trace: [ 2716.899644] dump_stack+0x1b2/0x281 [ 2716.899656] warn_alloc.cold+0x96/0x1cc [ 2716.899668] ? zone_watermark_ok_safe+0x220/0x220 [ 2716.899677] ? usleep_range+0x130/0x130 [ 2716.899686] ? try_to_free_pages+0x23f/0x6e0 [ 2716.899695] ? _find_next_bit+0xdb/0x100 [ 2716.899710] ? run_timer_softirq+0x5a0/0x5a0 [ 2716.909160] 0 [ 2716.916066] __alloc_pages_nodemask+0x2127/0x2720 [ 2716.916084] ? lock_acquire+0x170/0x3f0 [ 2716.916098] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2716.916109] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2716.916127] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2716.925209] ? check_preemption_disabled+0x35/0x240 [ 2716.925228] alloc_pages_current+0x155/0x260 [ 2716.925243] ion_page_pool_alloc+0x118/0x1b0 [ 2716.925253] ion_system_heap_allocate+0x133/0x8c0 [ 2716.925264] ? ion_alloc+0x187/0x810 [ 2716.925273] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2716.925283] ? ion_system_contig_heap_create+0x130/0x130 [ 2716.925292] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2716.925303] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2716.925314] ion_alloc+0x204/0x810 [ 2716.925328] ? ion_dma_buf_release+0x40/0x40 [ 2716.934050] (null) [ 2716.934484] ? __might_fault+0x177/0x1b0 [ 2716.942745] Node 0 [ 2716.943551] ion_ioctl+0xea/0x1f0 [ 2716.951530] syz-executor.3 cpuset= [ 2716.955847] ? ion_query_heaps+0x360/0x360 [ 2716.955861] ? lock_acquire+0x170/0x3f0 [ 2716.955871] ? lock_downgrade+0x740/0x740 [ 2716.955878] ? ion_query_heaps+0x360/0x360 [ 2716.955889] do_vfs_ioctl+0x75a/0xff0 [ 2716.955900] ? ioctl_preallocate+0x1a0/0x1a0 [ 2716.955907] ? lock_downgrade+0x740/0x740 [ 2716.955920] ? __fget+0x225/0x360 [ 2716.955929] ? do_vfs_ioctl+0xff0/0xff0 [ 2716.955939] ? security_file_ioctl+0x83/0xb0 [ 2716.955948] SyS_ioctl+0x7f/0xb0 [ 2716.955955] ? do_vfs_ioctl+0xff0/0xff0 [ 2716.955967] do_syscall_64+0x1d5/0x640 [ 2716.955984] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2716.968082] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2716.972440] RIP: 0033:0x45e219 [ 2716.975123] lowmem_reserve[]: [ 2716.978682] RSP: 002b:00007fa6a8664c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2716.982655] 0 [ 2716.987501] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2716.987507] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2716.987516] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2716.987521] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2716.987526] R13: 00007ffdb3664baf R14: 00007fa6a86659c0 R15: 000000000119bf8c [ 2717.012221] Node 1 [ 2717.016113] / [ 2717.037976] Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:400kB inactive_anon:16256kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2717.042840] mems_allowed=0-1 [ 2717.068401] lowmem_reserve[]: [ 2717.070931] 0 [ 2717.074500] 0 [ 2717.079048] 0 [ 2717.090709] 0 [ 2717.102975] 0 [ 2717.119046] 0 [ 2717.130666] CPU: 1 PID: 29498 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2717.141053] 0 [ 2717.142806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2717.147776] 0 [ 2717.150646] Call Trace: [ 2717.180730] dump_stack+0x1b2/0x281 [ 2717.180745] warn_alloc.cold+0x96/0x1cc [ 2717.180757] ? zone_watermark_ok_safe+0x220/0x220 [ 2717.180771] ? usleep_range+0x130/0x130 [ 2717.183970] Mem-Info: [ 2717.187047] ? try_to_free_pages+0x23f/0x6e0 [ 2717.187057] ? _find_next_bit+0xdb/0x100 [ 2717.187072] ? run_timer_softirq+0x5a0/0x5a0 [ 2717.187090] __alloc_pages_nodemask+0x2127/0x2720 [ 2717.194834] Node 0 [ 2717.196590] ? lock_acquire+0x170/0x3f0 [ 2717.203842] DMA: [ 2717.211148] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2717.211161] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2717.211176] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2717.211191] ? check_preemption_disabled+0x35/0x240 [ 2717.218529] active_anon:16953 inactive_anon:58821 isolated_anon:0 [ 2717.218529] active_file:13 inactive_file:12 isolated_file:0 [ 2717.218529] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2717.218529] slab_reclaimable:13151 slab_unreclaimable:111233 [ 2717.218529] mapped:35452 shmem:60173 pagetables:731 bounce:0 [ 2717.218529] free:13878 free_pcp:59 free_cma:0 [ 2717.225760] alloc_pages_current+0x155/0x260 [ 2717.225779] ion_page_pool_alloc+0x118/0x1b0 [ 2717.225790] ion_system_heap_allocate+0x133/0x8c0 [ 2717.225802] ? ion_alloc+0x187/0x810 [ 2717.233093] Node 0 active_anon:67412kB inactive_anon:219028kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141808kB dirty:0kB writeback:0kB shmem:224308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2717.235311] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2717.235324] ? ion_system_contig_heap_create+0x130/0x130 [ 2717.235333] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2717.235345] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2717.235357] ion_alloc+0x204/0x810 [ 2717.237075] 0*4kB [ 2717.264844] ? ion_dma_buf_release+0x40/0x40 [ 2717.264857] ? __might_fault+0x177/0x1b0 [ 2717.264868] ion_ioctl+0xea/0x1f0 [ 2717.264881] ? ion_query_heaps+0x360/0x360 [ 2717.268013] Node 1 active_anon:400kB inactive_anon:16256kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2717.271084] ? lock_acquire+0x170/0x3f0 [ 2717.272855] Node 0 [ 2717.274646] ? lock_downgrade+0x740/0x740 [ 2717.274657] ? ion_query_heaps+0x360/0x360 [ 2717.274666] do_vfs_ioctl+0x75a/0xff0 [ 2717.274679] ? ioctl_preallocate+0x1a0/0x1a0 [ 2717.274691] ? lock_downgrade+0x740/0x740 [ 2717.276513] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2717.278288] ? __fget+0x225/0x360 [ 2717.280067] lowmem_reserve[]: [ 2717.281902] ? do_vfs_ioctl+0xff0/0xff0 [ 2717.289811] 0 [ 2717.291565] ? security_file_ioctl+0x83/0xb0 [ 2717.300993] 1*8kB [ 2717.302741] SyS_ioctl+0x7f/0xb0 [ 2717.305334] (U) [ 2717.308955] ? do_vfs_ioctl+0xff0/0xff0 [ 2717.312908] 6*16kB [ 2717.317753] do_syscall_64+0x1d5/0x640 [ 2717.317772] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2717.317781] RIP: 0033:0x45e219 [ 2717.317790] RSP: 002b:00007fa35386fc68 EFLAGS: 00000246 [ 2717.321796] 2717 [ 2717.324186] ORIG_RAX: 0000000000000010 [ 2717.324195] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2717.328643] 2718 [ 2717.332671] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2717.337108] 2718 [ 2717.341902] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2717.341912] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2717.344158] 2718 [ 2717.348120] R13: 00007ffc07929f4f R14: 00007fa3538709c0 R15: 000000000119bf8c [ 2717.355940] 0 [ 2717.377988] (U) [ 2717.452769] Node 1 [ 2717.458817] 9*32kB [ 2717.462327] Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:400kB inactive_anon:16256kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2717.465666] Node 0 [ 2717.470518] lowmem_reserve[]: [ 2717.474002] DMA32 free:17700kB min:36200kB low:45248kB high:54296kB active_anon:67412kB inactive_anon:219028kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2852kB bounce:0kB free_pcp:228kB local_pcp:112kB free_cma:0kB [ 2717.482771] 0 [ 2717.485358] (U) [ 2717.488328] 0 [ 2717.492539] 3*64kB [ 2717.524960] 0 [ 2717.532275] lowmem_reserve[]: [ 2717.545418] 0 [ 2717.693207] 0 [ 2717.792156] (U) 3*128kB (U) 7*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 10952kB [ 2717.834791] Node 0 DMA32: 1351*4kB (UME) 976*8kB (UMEH) 330*16kB (UME) 38*32kB (UME) 15*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20796kB [ 2717.870373] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2717.929892] Node 1 Normal: 2*4kB (ME) 1*8kB (E) 2*16kB (ME) 3*32kB (UE) 491*64kB (U) 33*128kB (UE) 27*256kB (UE) 48*512kB (UM) 80*1024kB (U) 72*2048kB (U) 11*4096kB (U) = 341712kB [ 2717.957320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2717.974796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2717.995586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2718.008433] 0 0 0 0 [ 2718.015005] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2718.016328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2718.065582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2718.074397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2718.104861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2718.145064] device bridge_slave_1 left promiscuous mode [ 2718.149413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2718.150646] bridge0: port 2(bridge_slave_1) entered disabled state [ 2718.161047] lowmem_reserve[]: 0 0 0 0 0 [ 2718.188834] Node 1 Normal free:54704kB min:53696kB low:67120kB high:80544kB active_anon:900kB inactive_anon:16256kB active_file:2380kB inactive_file:2640kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:220kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 2718.211873] syz-executor.4: [ 2718.223895] syz-executor.3: [ 2718.234665] 0 [ 2718.234758] 60492 total pagecache pages [ 2718.237840] page allocation failure: order:4 [ 2718.239660] 0 pages in swap cache [ 2718.243465] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2718.258910] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2718.264763] Swap cache stats: add 0, delete 0, find 0/0 [ 2718.273829] Node 0 [ 2718.275003] device bridge_slave_0 left promiscuous mode [ 2718.283989] bridge0: port 1(bridge_slave_0) entered disabled state [ 2718.292400] DMA: 0*4kB 1*8kB (U) 6*16kB (U) 9*32kB (U) 3*64kB (U) 3*128kB (U) 7*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 10952kB [ 2718.298393] Free swap = 0kB [ 2718.310190] Total swap = 0kB [ 2718.310200] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2718.316799] 2097051 pages RAM [ 2718.318702] (null) [ 2718.322904] lowmem_reserve[]: [ 2718.323800] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2718.323824] CPU: 1 PID: 29498 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2718.323829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2718.323832] Call Trace: [ 2718.323849] dump_stack+0x1b2/0x281 [ 2718.323864] warn_alloc.cold+0x96/0x1cc [ 2718.323876] ? zone_watermark_ok_safe+0x220/0x220 [ 2718.323911] __alloc_pages_nodemask+0x2127/0x2720 [ 2718.323930] ? lock_acquire+0x170/0x3f0 [ 2718.323947] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2718.323966] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2718.323979] ? __mutex_unlock_slowpath+0x75/0x770 [ 2718.329718] 0 pages HighMem/MovableOnly [ 2718.332216] alloc_pages_current+0x155/0x260 [ 2718.332233] ion_page_pool_alloc+0x118/0x1b0 [ 2718.332245] ion_system_heap_allocate+0x133/0x8c0 [ 2718.332259] ? _raw_spin_unlock+0x29/0x40 [ 2718.332269] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2718.332281] ? ion_system_contig_heap_create+0x130/0x130 [ 2718.332292] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2718.332304] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2718.332315] ion_alloc+0x27a/0x810 [ 2718.332331] ? ion_dma_buf_release+0x40/0x40 [ 2718.332344] ? __might_fault+0x177/0x1b0 [ 2718.332357] ion_ioctl+0xea/0x1f0 [ 2718.332369] ? ion_query_heaps+0x360/0x360 [ 2718.347688] 0 [ 2718.349634] ? lock_acquire+0x170/0x3f0 [ 2718.349643] ? lock_downgrade+0x740/0x740 [ 2718.349655] ? ion_query_heaps+0x360/0x360 [ 2718.349666] do_vfs_ioctl+0x75a/0xff0 [ 2718.349678] ? ioctl_preallocate+0x1a0/0x1a0 [ 2718.349687] ? lock_downgrade+0x740/0x740 [ 2718.349701] ? __fget+0x225/0x360 [ 2718.349712] ? do_vfs_ioctl+0xff0/0xff0 [ 2718.349723] ? security_file_ioctl+0x83/0xb0 [ 2718.349734] SyS_ioctl+0x7f/0xb0 [ 2718.349745] ? do_vfs_ioctl+0xff0/0xff0 [ 2718.382383] 0 [ 2718.383996] do_syscall_64+0x1d5/0x640 [ 2718.388904] 363840 pages reserved [ 2718.392826] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2718.414763] 0 [ 2718.415516] RIP: 0033:0x45e219 [ 2718.420955] 0 [ 2718.425959] RSP: 002b:00007fa35386fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2718.425969] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2718.425974] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2718.425978] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2718.425983] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2718.425988] R13: 00007ffc07929f4f R14: 00007fa3538709c0 R15: 000000000119bf8c [ 2718.431432] CPU: 1 PID: 29485 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2718.442109] 0 pages cma reserved [ 2718.442854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2718.442859] Call Trace: [ 2718.442877] dump_stack+0x1b2/0x281 [ 2718.442892] warn_alloc.cold+0x96/0x1cc [ 2718.442904] ? zone_watermark_ok_safe+0x220/0x220 [ 2718.442929] __alloc_pages_nodemask+0x2127/0x2720 [ 2718.442948] ? lock_acquire+0x170/0x3f0 [ 2718.442965] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2718.442986] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2718.467441] Out of memory (oom_kill_allocating_task): Kill process 8003 (syz-fuzzer) score 0 or sacrifice child [ 2718.468586] ? __mutex_unlock_slowpath+0x75/0x770 [ 2718.481543] 0 [ 2718.484684] alloc_pages_current+0x155/0x260 [ 2718.484700] ion_page_pool_alloc+0x118/0x1b0 [ 2718.484711] ion_system_heap_allocate+0x133/0x8c0 [ 2718.484725] ? _raw_spin_unlock+0x29/0x40 [ 2718.484735] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2718.484745] ? ion_system_contig_heap_create+0x130/0x130 [ 2718.484755] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2718.484765] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2718.484775] ion_alloc+0x27a/0x810 [ 2718.484789] ? ion_dma_buf_release+0x40/0x40 [ 2718.484802] ? __might_fault+0x177/0x1b0 [ 2718.494693] Killed process 28692 (syz-executor.2) total-vm:85024kB, anon-rss:1732kB, file-rss:4kB, shmem-rss:0kB [ 2718.496564] ion_ioctl+0xea/0x1f0 [ 2718.496576] ? ion_query_heaps+0x360/0x360 [ 2718.496589] ? lock_acquire+0x170/0x3f0 [ 2718.496597] ? lock_downgrade+0x740/0x740 [ 2718.496605] ? ion_query_heaps+0x360/0x360 [ 2718.496615] do_vfs_ioctl+0x75a/0xff0 [ 2718.496627] ? ioctl_preallocate+0x1a0/0x1a0 [ 2718.496636] ? lock_downgrade+0x740/0x740 [ 2718.496649] ? __fget+0x225/0x360 [ 2718.496659] ? do_vfs_ioctl+0xff0/0xff0 [ 2718.496670] ? security_file_ioctl+0x83/0xb0 [ 2718.496680] SyS_ioctl+0x7f/0xb0 [ 2718.496688] ? do_vfs_ioctl+0xff0/0xff0 [ 2718.496701] do_syscall_64+0x1d5/0x640 [ 2718.496718] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2718.502387] RIP: 0033:0x45e219 [ 2718.502392] RSP: 002b:00007ffa3780bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2718.502402] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2718.502407] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2718.502412] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2718.502417] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2718.502422] R13: 00007ffdb287bf9f R14: 00007ffa3780c9c0 R15: 000000000119bf8c [ 2718.517013] Node 0 [ 2718.584836] Node 0 [ 2718.592549] warn_alloc_show_mem: 2 callbacks suppressed [ 2718.592553] Mem-Info: [ 2718.614787] DMA: [ 2718.623006] DMA32: [ 2718.659787] 0*4kB [ 2718.664642] device veth1_macvtap left promiscuous mode [ 2718.690251] 3*8kB [ 2718.702672] active_anon:16602 inactive_anon:58817 isolated_anon:0 [ 2718.702672] active_file:175 inactive_file:1800 isolated_file:0 [ 2718.702672] unevictable:0 dirty:12 writeback:0 unstable:0 [ 2718.702672] slab_reclaimable:13114 slab_unreclaimable:111278 [ 2718.702672] mapped:28240 shmem:60165 pagetables:716 bounce:0 [ 2718.702672] free:49398 free_pcp:373 free_cma:0 [ 2718.734815] (U) [ 2718.744873] device veth0_macvtap left promiscuous mode [ 2718.764866] 8*16kB [ 2718.788768] 330*4kB [ 2718.842089] (U) [ 2718.880763] Node 0 active_anon:65556kB inactive_anon:219012kB active_file:496kB inactive_file:4216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109912kB dirty:28kB writeback:0kB shmem:224276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2718.888709] device veth1_vlan left promiscuous mode [ 2718.952994] 9*32kB (U) 3*64kB (U) 3*128kB (U) 7*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 11000kB [ 2718.958898] device veth0_vlan left promiscuous mode [ 2718.976429] Node 1 active_anon:852kB inactive_anon:16256kB active_file:404kB inactive_file:3084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3048kB dirty:20kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2719.014169] Node 0 DMA32: 313*4kB (UMEH) 696*8kB (UMEH) 160*16kB (UMEH) 3207*32kB (UMEH) 241*64kB (UM) 52*128kB (UM) 16*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 138692kB [ 2719.024863] (MEH) 485*8kB (UMEH) 3246*16kB (UMEH) 2180*32kB (UMEH) 96*64kB (UM) 51*128kB (UM) 16*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 144176kB [ 2719.040906] Node 0 [ 2719.044951] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2719.064943] DMA free:11080kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2719.090800] Bluetooth: hci2 command 0x0406 tx timeout [ 2719.096958] Node 1 Normal: 447*4kB (UME) 642*8kB (UME) 693*16kB (UME) 498*32kB (UE) 452*64kB (UM) 62*128kB (UME) 27*256kB (UME) 40*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 98204kB [ 2719.097466] Node 0 [ 2719.114318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2719.126887] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2719.132693] Node 0 DMA32 free:117612kB min:36200kB low:45248kB high:54296kB active_anon:65556kB inactive_anon:219012kB active_file:1096kB inactive_file:3604kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2748kB bounce:0kB free_pcp:840kB local_pcp:620kB free_cma:0kB [ 2719.146194] Normal: [ 2719.163631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2719.175907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2719.185682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2719.194278] 62249 total pagecache pages [ 2719.199543] 0 pages in swap cache [ 2719.203007] Swap cache stats: add 0, delete 0, find 0/0 [ 2719.212637] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2719.213795] lowmem_reserve[]: [ 2719.222578] Free swap = 0kB [ 2719.231513] Total swap = 0kB [ 2719.234597] 2097051 pages RAM [ 2719.238872] 0 0 0 0 0 [ 2719.241427] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2719.247398] Node 1 [ 2719.272252] 0 pages HighMem/MovableOnly [ 2719.281139] 363840 pages reserved [ 2719.289326] 0 pages cma reserved [ 2719.304930] Normal: 447*4kB (UME) 642*8kB (UME) 693*16kB (UME) 498*32kB (UE) 452*64kB (UM) 62*128kB (UME) 27*256kB (UME) 40*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 98204kB [ 2719.320795] lowmem_reserve[]: 0 0 0 0 0 [ 2719.326010] Node 1 Normal free:98080kB min:53696kB low:67120kB high:80544kB active_anon:852kB inactive_anon:16256kB active_file:1204kB inactive_file:2280kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:116kB bounce:0kB free_pcp:696kB local_pcp:692kB free_cma:0kB [ 2719.330545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2719.356325] lowmem_reserve[]: 0 0 0 0 0 [ 2719.368980] Node 0 DMA: 5*4kB (U) 7*8kB (U) 6*16kB (U) 7*32kB (U) 3*64kB (U) 4*128kB (U) 7*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 11084kB [ 2719.389031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2719.398040] device hsr_slave_1 left promiscuous mode [ 2719.407353] device hsr_slave_0 left promiscuous mode [ 2719.411047] Node 0 DMA32: 289*4kB (MEH) 495*8kB (MEH) 147*16kB (UMEH) 1121*32kB (UMEH) 245*64kB (UM) 52*128kB (UM) 18*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 70796kB [ 2719.430086] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2719.433824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2719.444912] Node 1 Normal: 447*4kB (UME) 642*8kB (UME) 693*16kB (UME) 498*32kB (UE) 452*64kB (UM) 62*128kB (UME) 27*256kB (UME) 40*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 98204kB [ 2719.468856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2719.477976] team0 (unregistering): Port device team_slave_1 removed [ 2719.478846] 62250 total pagecache pages [ 2719.504939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2719.513811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2719.519631] 0 pages in swap cache [ 2719.523894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2719.527241] Swap cache stats: add 0, delete 0, find 0/0 [ 2719.536033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2719.544752] team0 (unregistering): Port device team_slave_0 removed [ 2719.550644] 62228 total pagecache pages [ 2719.569883] 0 pages in swap cache [ 2719.573387] Swap cache stats: add 0, delete 0, find 0/0 [ 2719.579234] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2719.586417] Free swap = 0kB [ 2719.589444] Total swap = 0kB [ 2719.592474] 2097051 pages RAM [ 2719.594967] Free swap = 0kB [ 2719.601722] Total swap = 0kB [ 2719.604762] 2097051 pages RAM [ 2719.613449] 0 pages HighMem/MovableOnly [ 2719.613460] 0 pages HighMem/MovableOnly [ 2719.617510] 363840 pages reserved [ 2719.617514] 0 pages cma reserved [ 2719.654937] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2719.660057] 363840 pages reserved [ 2719.682549] 0 pages cma reserved [ 2719.736925] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2719.770105] bond0 (unregistering): Released all slaves [ 2719.771579] systemd-journal cpuset=/ mems_allowed=0-1 [ 2719.776607] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2719.789312] CPU: 1 PID: 27831 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 2719.800543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2719.809899] Call Trace: [ 2719.812493] dump_stack+0x1b2/0x281 [ 2719.816120] dump_header+0x178/0x82f [ 2719.819862] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2719.824964] ? ___ratelimit+0x2cd/0x530 [ 2719.828960] oom_kill_process.cold+0x10/0xb18 [ 2719.833474] out_of_memory+0xe3e/0x1190 [ 2719.837470] ? oom_killer_disable+0x1c0/0x1c0 [ 2719.841965] ? mutex_trylock+0x152/0x1a0 [ 2719.846023] __alloc_pages_nodemask+0x23e1/0x2720 [ 2719.850873] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2719.855744] ? cache_grow_begin+0x41/0x630 [ 2719.859979] cache_grow_begin+0x91/0x630 [ 2719.864054] ? cache_grow_begin+0x91/0x630 [ 2719.868325] fallback_alloc+0x207/0x2c0 [ 2719.872311] kmem_cache_alloc+0x1e5/0x3c0 [ 2719.876463] getname_flags+0xc8/0x550 [ 2719.880282] user_path_at_empty+0x2a/0x50 [ 2719.884428] SyS_faccessat+0x21b/0x680 [ 2719.888326] ? SyS_fallocate+0x80/0x80 [ 2719.892216] ? do_syscall_64+0x4c/0x640 [ 2719.896186] ? SyS_faccessat+0x680/0x680 [ 2719.900246] do_syscall_64+0x1d5/0x640 [ 2719.904153] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2719.909345] RIP: 0033:0x7f042496f9c7 [ 2719.913053] RSP: 002b:00007ffe04998cb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 2719.920776] RAX: ffffffffffffffda RBX: 00007ffe0499bbd0 RCX: 00007f042496f9c7 [ 2719.928058] RDX: 00007f04253e0a00 RSI: 0000000000000000 RDI: 000055fde966e9a3 [ 2719.935324] RBP: 00007ffe04998cf0 R08: 0000000000000000 R09: 0000000000000000 [ 2719.942592] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 2719.949856] R13: 0000000000000000 R14: 00007ffe0499bbd0 R15: 00007ffe049991e0 [ 2719.995360] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2720.000548] CPU: 0 PID: 29484 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2720.008434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2720.011371] Mem-Info: [ 2720.017790] Call Trace: [ 2720.017814] dump_stack+0x1b2/0x281 [ 2720.017827] warn_alloc.cold+0x96/0x1cc [ 2720.017839] ? zone_watermark_ok_safe+0x220/0x220 [ 2720.017860] __alloc_pages_nodemask+0x2127/0x2720 [ 2720.017869] ? io_schedule_timeout+0x140/0x140 [ 2720.017886] ? lock_acquire+0x170/0x3f0 [ 2720.017900] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2720.020359] active_anon:16598 inactive_anon:58818 isolated_anon:0 [ 2720.020359] active_file:72 inactive_file:0 isolated_file:0 [ 2720.020359] unevictable:0 dirty:21 writeback:0 unstable:0 [ 2720.020359] slab_reclaimable:13114 slab_unreclaimable:111164 [ 2720.020359] mapped:26882 shmem:60166 pagetables:706 bounce:0 [ 2720.020359] free:13783 free_pcp:1 free_cma:0 [ 2720.022891] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2720.026788] Node 0 active_anon:65540kB inactive_anon:219016kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107376kB dirty:64kB writeback:0kB shmem:224280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2720.030460] ? __mutex_unlock_slowpath+0x75/0x770 [ 2720.035725] Node 1 active_anon:852kB inactive_anon:16256kB active_file:168kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152kB dirty:20kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2720.040136] ? retint_kernel+0x2d/0x2d [ 2720.044720] Node 0 [ 2720.048695] alloc_pages_current+0x155/0x260 [ 2720.048711] ion_page_pool_alloc+0x118/0x1b0 [ 2720.048721] ion_system_heap_allocate+0x133/0x8c0 [ 2720.048734] ? _raw_spin_unlock+0x29/0x40 [ 2720.048742] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2720.048752] ? ion_system_contig_heap_create+0x130/0x130 [ 2720.048763] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2720.048775] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2720.053648] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2720.086822] ion_alloc+0x27a/0x810 [ 2720.086839] ? ion_dma_buf_release+0x40/0x40 [ 2720.086851] ? __might_fault+0x177/0x1b0 [ 2720.086863] ion_ioctl+0xea/0x1f0 [ 2720.086871] ? ion_query_heaps+0x360/0x360 [ 2720.086883] ? lock_acquire+0x170/0x3f0 [ 2720.086892] ? lock_downgrade+0x740/0x740 [ 2720.086900] ? ion_query_heaps+0x360/0x360 [ 2720.086909] do_vfs_ioctl+0x75a/0xff0 [ 2720.086920] ? ioctl_preallocate+0x1a0/0x1a0 [ 2720.086927] ? lock_downgrade+0x740/0x740 [ 2720.086939] ? __fget+0x225/0x360 [ 2720.086955] ? do_vfs_ioctl+0xff0/0xff0 [ 2720.086967] ? security_file_ioctl+0x83/0xb0 [ 2720.086978] SyS_ioctl+0x7f/0xb0 [ 2720.086986] ? do_vfs_ioctl+0xff0/0xff0 [ 2720.086999] do_syscall_64+0x1d5/0x640 [ 2720.087017] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2720.087026] RIP: 0033:0x45e219 [ 2720.087032] RSP: 002b:00007fa6a8664c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2720.087043] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2720.087049] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2720.087055] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.087061] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2720.087067] R13: 00007ffdb3664baf R14: 00007fa6a86659c0 R15: 000000000119bf8c [ 2720.140764] warn_alloc_show_mem: 1 callbacks suppressed [ 2720.140768] Mem-Info: [ 2720.231835] lowmem_reserve[]: [ 2720.234981] syz-executor.3: [ 2720.243478] 0 [ 2720.248687] page allocation failure: order:0 [ 2720.250659] syz-executor.2: [ 2720.254877] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2720.263958] 2717 [ 2720.269335] (null) [ 2720.271858] 2718 [ 2720.275047] syz-executor.3 cpuset= [ 2720.285491] page allocation failure: order:0 [ 2720.288700] / [ 2720.290466] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2720.295716] mems_allowed=0-1 [ 2720.295750] CPU: 0 PID: 29498 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2720.295755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2720.295759] Call Trace: [ 2720.295779] dump_stack+0x1b2/0x281 [ 2720.295796] warn_alloc.cold+0x96/0x1cc [ 2720.315142] 2718 [ 2720.321558] ? zone_watermark_ok_safe+0x220/0x220 [ 2720.350231] (null) [ 2720.351088] ? usleep_range+0x130/0x130 [ 2720.354173] syz-executor.2 cpuset= [ 2720.357183] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2720.357197] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2720.357206] ? run_timer_softirq+0x5a0/0x5a0 [ 2720.357223] __alloc_pages_nodemask+0x2127/0x2720 [ 2720.357238] ? lock_acquire+0x170/0x3f0 [ 2720.357252] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2720.357264] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2720.357279] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2720.359129] / [ 2720.363468] alloc_pages_current+0x155/0x260 [ 2720.371770] 2718 [ 2720.373559] ion_page_pool_alloc+0x118/0x1b0 [ 2720.396548] ion_system_heap_allocate+0x133/0x8c0 [ 2720.396562] ? _raw_spin_unlock+0x29/0x40 [ 2720.396572] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2720.396581] ? ion_system_contig_heap_create+0x130/0x130 [ 2720.396591] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2720.396602] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2720.396613] ion_alloc+0x27a/0x810 [ 2720.396626] ? ion_dma_buf_release+0x40/0x40 [ 2720.399826] mems_allowed=0-1 [ 2720.407607] ? __might_fault+0x177/0x1b0 [ 2720.407623] ion_ioctl+0xea/0x1f0 [ 2720.407634] ? ion_query_heaps+0x360/0x360 [ 2720.407646] ? lock_acquire+0x170/0x3f0 [ 2720.407654] ? lock_downgrade+0x740/0x740 [ 2720.407661] ? ion_query_heaps+0x360/0x360 [ 2720.407671] do_vfs_ioctl+0x75a/0xff0 [ 2720.407683] ? ioctl_preallocate+0x1a0/0x1a0 [ 2720.407691] ? lock_downgrade+0x740/0x740 [ 2720.407705] ? __fget+0x225/0x360 [ 2720.407714] ? do_vfs_ioctl+0xff0/0xff0 [ 2720.407724] ? security_file_ioctl+0x83/0xb0 [ 2720.407733] SyS_ioctl+0x7f/0xb0 [ 2720.407746] ? do_vfs_ioctl+0xff0/0xff0 [ 2720.422397] Node 0 [ 2720.423309] do_syscall_64+0x1d5/0x640 [ 2720.440809] DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:65540kB inactive_anon:219016kB active_file:44kB inactive_file:72kB unevictable:0kB writepending:64kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2708kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2720.443797] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2720.460300] lowmem_reserve[]: [ 2720.463252] RIP: 0033:0x45e219 [ 2720.500254] 0 [ 2720.503473] RSP: 002b:00007fa35386fc68 EFLAGS: 00000246 [ 2720.540808] 0 [ 2720.542234] ORIG_RAX: 0000000000000010 [ 2720.583556] 0 [ 2720.583718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2720.587190] 0 [ 2720.591028] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2720.593243] 0 [ 2720.597115] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.597120] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2720.597125] R13: 00007ffc07929f4f R14: 00007fa3538709c0 R15: 000000000119bf8c [ 2720.604331] active_anon:16598 inactive_anon:58818 isolated_anon:0 [ 2720.604331] active_file:14 inactive_file:15 isolated_file:1 [ 2720.604331] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2720.604331] slab_reclaimable:13095 slab_unreclaimable:111043 [ 2720.604331] mapped:26818 shmem:60166 pagetables:706 bounce:0 [ 2720.604331] free:13918 free_pcp:35 free_cma:0 [ 2720.625792] syz-executor.4: page allocation failure: order:0 [ 2720.636651] Node 0 active_anon:65540kB inactive_anon:219016kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107272kB dirty:0kB writeback:0kB shmem:224280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2720.645063] CPU: 1 PID: 29499 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2720.652204] Node 1 active_anon:852kB inactive_anon:16256kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2720.659189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2720.659194] Call Trace: [ 2720.659216] dump_stack+0x1b2/0x281 [ 2720.659229] warn_alloc.cold+0x96/0x1cc [ 2720.659240] ? zone_watermark_ok_safe+0x220/0x220 [ 2720.659254] ? usleep_range+0x130/0x130 [ 2720.661049] Node 0 [ 2720.668314] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2720.668329] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2720.668339] ? run_timer_softirq+0x5a0/0x5a0 [ 2720.668356] __alloc_pages_nodemask+0x2127/0x2720 [ 2720.670154] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2720.677410] ? lock_acquire+0x170/0x3f0 [ 2720.677427] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2720.677438] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2720.677451] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2720.677475] alloc_pages_current+0x155/0x260 [ 2720.677487] ion_page_pool_alloc+0x118/0x1b0 [ 2720.677500] ion_system_heap_allocate+0x133/0x8c0 [ 2720.687963] lowmem_reserve[]: [ 2720.692062] ? _raw_spin_unlock+0x29/0x40 [ 2720.725243] 0 [ 2720.731021] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2720.765035] 2717 [ 2720.766657] ? ion_system_contig_heap_create+0x130/0x130 [ 2720.793404] 2718 [ 2720.802807] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2720.802821] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2720.802836] ion_alloc+0x27a/0x810 [ 2720.802850] ? ion_dma_buf_release+0x40/0x40 [ 2720.805457] 2718 [ 2720.809058] ? __might_fault+0x177/0x1b0 [ 2720.813020] 2718 [ 2720.818824] ion_ioctl+0xea/0x1f0 [ 2720.818835] ? ion_query_heaps+0x360/0x360 [ 2720.818847] ? lock_acquire+0x170/0x3f0 [ 2720.818857] ? lock_downgrade+0x740/0x740 [ 2720.818869] ? ion_query_heaps+0x360/0x360 [ 2720.825081] do_vfs_ioctl+0x75a/0xff0 [ 2720.825093] ? ioctl_preallocate+0x1a0/0x1a0 [ 2720.825103] ? lock_downgrade+0x740/0x740 [ 2720.825116] ? __fget+0x225/0x360 [ 2720.830224] Node 0 [ 2720.835929] ? do_vfs_ioctl+0xff0/0xff0 [ 2720.835940] ? security_file_ioctl+0x83/0xb0 [ 2720.835950] SyS_ioctl+0x7f/0xb0 [ 2720.835958] ? do_vfs_ioctl+0xff0/0xff0 [ 2720.835972] do_syscall_64+0x1d5/0x640 [ 2720.840385] DMA32 free:18200kB min:36200kB low:45248kB high:54296kB active_anon:65540kB inactive_anon:219016kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2708kB bounce:0kB free_pcp:144kB local_pcp:8kB free_cma:0kB [ 2720.845228] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2720.845238] RIP: 0033:0x45e219 [ 2720.845243] RSP: 002b:00007fb0c943dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2720.845258] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2720.870795] lowmem_reserve[]: [ 2720.874739] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2720.879620] 0 [ 2720.884056] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.884066] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2720.889547] 0 [ 2720.893921] R13: 00007ffeec1ccc1f R14: 00007fb0c943e9c0 R15: 000000000119bf8c [ 2720.898367] 0 [ 2720.904414] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2720.938292] 0 [ 2720.947049] 0 [ 2720.947167] (null) [ 2720.953347] syz-executor.4 cpuset= [ 2720.986402] Node 0 [ 2720.989667] Node 0 [ 2720.991882] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2720.995919] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2720.995923] lowmem_reserve[]: 0 0 0 0 0 [ 2721.025077] lowmem_reserve[]: [ 2721.041309] / [ 2721.180898] Node 1 Normal free:410704kB min:53696kB low:67120kB high:80544kB active_anon:852kB inactive_anon:16256kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:116kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2721.185217] 0 [ 2721.295112] lowmem_reserve[]: 0 0 0 0 0 [ 2721.301038] Node 0 DMA: 8*4kB (U) 8*8kB (U) 6*16kB (U) 7*32kB (U) 8*64kB (U) 6*128kB (U) 6*256kB (U) 3*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 11936kB [ 2721.315115] 0 0 0 0 [ 2721.318045] Node 1 Normal free:454096kB min:53696kB low:67120kB high:80544kB active_anon:852kB inactive_anon:16256kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:116kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2721.365121] Node 0 DMA32: 1318*4kB (UME) 507*8kB (UME) 143*16kB (UME) 200*32kB (UME) 3428*64kB (UE) 1439*128kB (U) 248*256kB (U) 31*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 500960kB [ 2721.437766] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2721.449930] Node 1 Normal: 60*4kB (UM) 38*8kB (UM) 553*16kB (UM) 517*32kB (UM) 2492*64kB (UM) 498*128kB (U) 325*256kB (U) 140*512kB (U) 150*1024kB (U) 53*2048kB (U) 1*4096kB (U) = 670288kB [ 2721.455196] lowmem_reserve[]: [ 2721.488426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2721.500485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2721.515179] 0 0 0 0 0 [ 2721.517719] Node 0 DMA: 8*4kB (U) 8*8kB (U) 6*16kB (U) 7*32kB (U) 10*64kB (U) 6*128kB (U) 6*256kB (U) 3*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 12064kB [ 2721.518270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2721.544832] mems_allowed=0-1 [ 2721.548030] CPU: 1 PID: 29485 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2721.555912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2721.565359] Call Trace: [ 2721.567963] dump_stack+0x1b2/0x281 [ 2721.571607] warn_alloc.cold+0x96/0x1cc [ 2721.575589] ? zone_watermark_ok_safe+0x220/0x220 [ 2721.580431] ? usleep_range+0x130/0x130 [ 2721.584405] ? try_to_free_pages+0x23f/0x6e0 [ 2721.585134] Node 0 [ 2721.588811] ? _find_next_bit+0xdb/0x100 [ 2721.588813] DMA32: 3520*4kB [ 2721.591133] ? run_timer_softirq+0x5a0/0x5a0 [ 2721.602616] __alloc_pages_nodemask+0x2127/0x2720 [ 2721.607474] ? lock_acquire+0x170/0x3f0 [ 2721.611454] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2721.615137] (UME) [ 2721.616323] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2721.616326] 2413*8kB (UME) [ 2721.618470] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2721.622970] 3665*16kB [ 2721.625901] alloc_pages_current+0x155/0x260 [ 2721.625917] ion_page_pool_alloc+0x118/0x1b0 [ 2721.625933] ion_system_heap_allocate+0x133/0x8c0 [ 2721.647527] ? _raw_spin_unlock+0x29/0x40 [ 2721.651679] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2721.655143] (UME) [ 2721.656607] ? ion_system_contig_heap_create+0x130/0x130 [ 2721.656610] 2044*32kB (UME) [ 2721.658753] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2721.658767] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2721.664228] 3585*64kB [ 2721.667241] ion_alloc+0x27a/0x810 [ 2721.667256] ? ion_dma_buf_release+0x40/0x40 [ 2721.667268] ? __might_fault+0x177/0x1b0 [ 2721.667282] ion_ioctl+0xea/0x1f0 [ 2721.695049] ? ion_query_heaps+0x360/0x360 [ 2721.699312] ? lock_acquire+0x170/0x3f0 [ 2721.703283] ? lock_downgrade+0x740/0x740 [ 2721.707461] ? ion_query_heaps+0x360/0x360 [ 2721.711705] do_vfs_ioctl+0x75a/0xff0 [ 2721.715147] (UE) 1483*128kB [ 2721.715506] ? ioctl_preallocate+0x1a0/0x1a0 [ 2721.715519] ? lock_downgrade+0x740/0x740 [ 2721.718535] (U) [ 2721.722940] ? __fget+0x225/0x360 [ 2721.732474] ? do_vfs_ioctl+0xff0/0xff0 [ 2721.736537] ? security_file_ioctl+0x83/0xb0 [ 2721.740947] SyS_ioctl+0x7f/0xb0 [ 2721.744312] ? do_vfs_ioctl+0xff0/0xff0 [ 2721.745149] 386*256kB (U) [ 2721.748285] do_syscall_64+0x1d5/0x640 [ 2721.748302] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2721.751129] 66*512kB [ 2721.755004] RIP: 0033:0x45e219 [ 2721.766193] RSP: 002b:00007ffa3780bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2721.773905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2721.781183] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2721.785161] (U) [ 2721.788462] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2721.788471] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2721.790439] 1*1024kB [ 2721.797696] R13: 00007ffdb287bf9f R14: 00007ffa3780c9c0 R15: 000000000119bf8c [ 2721.816107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2721.824715] 60195 total pagecache pages [ 2721.832066] 0 pages in swap cache [ 2721.835610] Swap cache stats: add 0, delete 0, find 0/0 [ 2721.840968] Free swap = 0kB [ 2721.843973] Total swap = 0kB [ 2721.850346] warn_alloc_show_mem: 1 callbacks suppressed [ 2721.850350] Mem-Info: [ 2721.858239] 2097051 pages RAM [ 2721.861338] 0 pages HighMem/MovableOnly [ 2721.868663] 363840 pages reserved [ 2721.872128] 0 pages cma reserved [ 2721.875573] active_anon:16598 inactive_anon:58818 isolated_anon:0 [ 2721.875573] active_file:14 inactive_file:15 isolated_file:0 [ 2721.875573] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2721.875573] slab_reclaimable:13087 slab_unreclaimable:110959 [ 2721.875573] mapped:26818 shmem:60166 pagetables:706 bounce:0 [ 2721.875573] free:382078 free_pcp:364 free_cma:0 [ 2721.912639] Out of memory (oom_kill_allocating_task): Kill process 27831 (systemd-journal) score 0 or sacrifice child [ 2721.923526] Killed process 27831 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:2744kB [ 2721.947599] oom_reaper: reaped process 27831 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2744kB [ 2721.948256] (U) [ 2721.965336] Node 0 active_anon:65140kB inactive_anon:219016kB active_file:36kB inactive_file:236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107372kB dirty:0kB writeback:0kB shmem:224280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2721.975189] 0*2048kB [ 2721.998976] Node 1 active_anon:852kB inactive_anon:16256kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2722.049140] Node 0 DMA free:12084kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2722.088692] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2722.105297] 0*4096kB = 710328kB [ 2722.108634] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2722.145520] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2722.148430] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2722.160582] Node 0 DMA32 free:993580kB min:36200kB low:45248kB high:54296kB active_anon:65140kB inactive_anon:219016kB active_file:436kB inactive_file:4736kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2560kB bounce:0kB free_pcp:1352kB local_pcp:656kB free_cma:0kB [ 2722.165616] systemd[1]: Stopped Journal Service. [ 2722.193911] lowmem_reserve[]: 0 0 0 0 0 [ 2722.205224] Node 1 Normal: 329*4kB (UM) 325*8kB (UM) 696*16kB (UM) 615*32kB (UM) 2472*64kB (UM) 624*128kB (UM) 335*256kB (U) 149*512kB (U) 152*1024kB (U) 53*2048kB (U) 1*4096kB (U) = 703148kB [ 2722.208932] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2722.254902] lowmem_reserve[]: 0 0 0 0 0 [ 2722.285247] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2722.294243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2722.318784] Node 1 Normal free:984748kB min:53696kB low:67120kB high:80544kB active_anon:852kB inactive_anon:16256kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:116kB bounce:0kB free_pcp:1400kB local_pcp:668kB free_cma:0kB [ 2722.385267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2722.394271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2722.438247] systemd[1]: Starting Journal Service... [ 2722.466699] 62113 total pagecache pages [ 2722.470827] 0 pages in swap cache [ 2722.474275] Swap cache stats: add 0, delete 0, find 0/0 [ 2722.489648] lowmem_reserve[]: 0 0 0 0 0 [ 2722.493708] Node 0 DMA: 3*4kB (U) 10*8kB (U) 6*16kB (U) 6*32kB (U) 12*64kB (U) 6*128kB (U) 6*256kB (U) 3*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 12156kB [ 2722.495287] Free swap = 0kB [ 2722.549526] Node 0 DMA32: 11141*4kB (UE) 5071*8kB (UME) 11032*16kB (UME) 5391*32kB (UE) 5183*64kB (UME) 1997*128kB (UM) 601*256kB (U) 100*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 1227564kB [ 2722.550443] Total swap = 0kB [ 2722.571494] 2097051 pages RAM [ 2722.576943] 0 pages HighMem/MovableOnly [ 2722.592535] 363840 pages reserved [ 2722.595509] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2722.597443] 0 pages cma reserved [ 2722.635021] Node 1 Normal: 362*4kB (UM) 491*8kB (UM) 526*16kB (UM) 410*32kB (UM) 2722*64kB (UM) 599*128kB (UM) 386*256kB (U) 221*512kB (U) 355*1024kB (U) 119*2048kB (U) 21*4096kB (U) = 1183008kB 12:07:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x0, 0x1}) 12:07:39 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) [ 2722.699165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2722.739233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2722.747995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2722.771107] systemd-journald[29520]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2722.778635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2722.817830] 64221 total pagecache pages [ 2722.821877] 0 pages in swap cache [ 2722.838181] Swap cache stats: add 0, delete 0, find 0/0 [ 2722.843575] Free swap = 0kB [ 2722.857815] Total swap = 0kB [ 2722.860867] 2097051 pages RAM [ 2722.863965] 0 pages HighMem/MovableOnly [ 2722.885344] 363840 pages reserved [ 2722.888828] 0 pages cma reserved [ 2722.893615] systemd-journald[29520]: /dev/kmsg buffer overrun, some messages lost. [ 2723.415687] systemd[1]: Started Journal Service. [ 2724.241970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2724.259339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2724.287107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2724.293849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2724.302995] device bridge_slave_1 left promiscuous mode [ 2724.309197] bridge0: port 2(bridge_slave_1) entered disabled state [ 2724.317223] device bridge_slave_0 left promiscuous mode [ 2724.323048] bridge0: port 1(bridge_slave_0) entered disabled state 12:07:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:07:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) [ 2724.334660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2724.342213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2724.351000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2724.358635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2724.367892] device bridge_slave_1 left promiscuous mode [ 2724.373480] bridge0: port 2(bridge_slave_1) entered disabled state 12:07:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @empty}]}, &(0x7f0000000080)=0x10) [ 2724.382751] device bridge_slave_0 left promiscuous mode [ 2724.388985] bridge0: port 1(bridge_slave_0) entered disabled state [ 2724.400433] device veth1_macvtap left promiscuous mode [ 2724.405973] device veth0_macvtap left promiscuous mode [ 2724.411341] device veth1_vlan left promiscuous mode [ 2724.417589] device veth0_vlan left promiscuous mode [ 2724.423619] device veth1_macvtap left promiscuous mode [ 2724.430128] device veth0_macvtap left promiscuous mode 12:07:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:07:41 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:07:41 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) [ 2724.436042] device veth1_vlan left promiscuous mode [ 2724.441206] device veth0_vlan left promiscuous mode 12:07:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:07:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:07:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:07:41 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) [ 2724.857190] device hsr_slave_1 left promiscuous mode [ 2724.886035] device hsr_slave_0 left promiscuous mode [ 2724.943104] team0 (unregistering): Port device team_slave_1 removed [ 2724.972614] team0 (unregistering): Port device team_slave_0 removed [ 2725.000600] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2725.035361] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2725.186089] bond0 (unregistering): Released all slaves [ 2725.357373] device hsr_slave_1 left promiscuous mode [ 2725.429023] device hsr_slave_0 left promiscuous mode [ 2725.476654] team0 (unregistering): Port device team_slave_1 removed [ 2725.516002] team0 (unregistering): Port device team_slave_0 removed [ 2725.537703] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2725.559933] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2725.682796] bond0 (unregistering): Released all slaves [ 2726.341354] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2726.341452] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2726.362523] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2726.406917] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2726.413459] CPU: 1 PID: 29539 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2726.421368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2726.421855] syz-executor.3 cpuset= [ 2726.430724] Call Trace: [ 2726.430747] dump_stack+0x1b2/0x281 [ 2726.430761] warn_alloc.cold+0x96/0x1cc [ 2726.430777] ? zone_watermark_ok_safe+0x220/0x220 [ 2726.437942] / [ 2726.440516] __alloc_pages_nodemask+0x2127/0x2720 [ 2726.449095] mems_allowed=0-1 [ 2726.449284] ? __schedule+0x893/0x1de0 [ 2726.462811] ? lock_acquire+0x170/0x3f0 [ 2726.466876] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2726.471732] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2726.477211] ? __mutex_unlock_slowpath+0x75/0x770 [ 2726.482088] alloc_pages_current+0x155/0x260 [ 2726.486520] ion_page_pool_alloc+0x118/0x1b0 [ 2726.490936] ion_system_heap_allocate+0x133/0x8c0 [ 2726.495783] ? ion_alloc+0x187/0x810 [ 2726.499507] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2726.504960] ? ion_system_contig_heap_create+0x130/0x130 [ 2726.510411] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2726.515426] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2726.520269] ion_alloc+0x204/0x810 [ 2726.523817] ? ion_dma_buf_release+0x40/0x40 [ 2726.528232] ? __might_fault+0x177/0x1b0 [ 2726.532294] ion_ioctl+0xea/0x1f0 [ 2726.535762] ? ion_query_heaps+0x360/0x360 [ 2726.540020] ? lock_acquire+0x170/0x3f0 [ 2726.543995] ? lock_downgrade+0x740/0x740 [ 2726.548153] ? ion_query_heaps+0x360/0x360 [ 2726.552382] do_vfs_ioctl+0x75a/0xff0 [ 2726.556179] ? ioctl_preallocate+0x1a0/0x1a0 [ 2726.560587] ? lock_downgrade+0x740/0x740 [ 2726.564742] ? __fget+0x225/0x360 [ 2726.568200] ? do_vfs_ioctl+0xff0/0xff0 [ 2726.572183] ? security_file_ioctl+0x83/0xb0 [ 2726.576592] SyS_ioctl+0x7f/0xb0 [ 2726.579955] ? do_vfs_ioctl+0xff0/0xff0 [ 2726.583940] do_syscall_64+0x1d5/0x640 [ 2726.587825] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2726.593005] RIP: 0033:0x45e219 [ 2726.596201] RSP: 002b:00007fa6a8664c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2726.603943] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2726.611215] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2726.618516] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2726.627616] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2726.634915] R13: 00007ffdb3664baf R14: 00007fa6a86659c0 R15: 000000000119bf8c [ 2726.642204] CPU: 0 PID: 29541 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2726.650119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2726.659478] Call Trace: [ 2726.662076] dump_stack+0x1b2/0x281 [ 2726.665708] warn_alloc.cold+0x96/0x1cc [ 2726.665762] syz-executor.3 cpuset= [ 2726.669703] ? zone_watermark_ok_safe+0x220/0x220 [ 2726.669705] / mems_allowed=0-1 [ 2726.673254] __alloc_pages_nodemask+0x2127/0x2720 [ 2726.686144] ? lock_acquire+0x170/0x3f0 [ 2726.690130] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2726.694984] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2726.700447] ? __mutex_unlock_slowpath+0x75/0x770 [ 2726.705302] alloc_pages_current+0x155/0x260 [ 2726.709747] ion_page_pool_alloc+0x118/0x1b0 [ 2726.714163] ion_system_heap_allocate+0x133/0x8c0 [ 2726.719019] ? ion_alloc+0x187/0x810 [ 2726.722735] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2726.728213] ? ion_system_contig_heap_create+0x130/0x130 [ 2726.733692] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2726.738716] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2726.743584] ion_alloc+0x204/0x810 [ 2726.747131] ? ion_dma_buf_release+0x40/0x40 [ 2726.751542] ? __might_fault+0x177/0x1b0 [ 2726.755606] ion_ioctl+0xea/0x1f0 [ 2726.759079] ? ion_query_heaps+0x360/0x360 [ 2726.763312] ? lock_acquire+0x170/0x3f0 [ 2726.767287] ? lock_downgrade+0x740/0x740 [ 2726.771453] ? ion_query_heaps+0x360/0x360 [ 2726.775688] do_vfs_ioctl+0x75a/0xff0 [ 2726.779489] ? ioctl_preallocate+0x1a0/0x1a0 [ 2726.783893] ? lock_downgrade+0x740/0x740 [ 2726.788076] ? __fget+0x225/0x360 [ 2726.791527] ? do_vfs_ioctl+0xff0/0xff0 [ 2726.795497] ? security_file_ioctl+0x83/0xb0 [ 2726.799908] SyS_ioctl+0x7f/0xb0 [ 2726.803288] ? do_vfs_ioctl+0xff0/0xff0 [ 2726.807354] do_syscall_64+0x1d5/0x640 [ 2726.811253] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2726.816439] RIP: 0033:0x45e219 [ 2726.819623] RSP: 002b:00007fa35386fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2726.827444] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2726.834986] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2726.842291] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2726.849553] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2726.856840] R13: 00007ffc07929f4f R14: 00007fa3538709c0 R15: 000000000119bf8c [ 2726.864123] CPU: 1 PID: 26377 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2726.872011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2726.881362] Call Trace: [ 2726.883956] dump_stack+0x1b2/0x281 [ 2726.887584] dump_header+0x178/0x82f [ 2726.891298] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2726.896422] ? ___ratelimit+0x2cd/0x530 [ 2726.900400] oom_kill_process.cold+0x10/0xb18 [ 2726.904904] out_of_memory+0xe3e/0x1190 [ 2726.908884] ? oom_killer_disable+0x1c0/0x1c0 [ 2726.913407] ? mutex_trylock+0x152/0x1a0 [ 2726.917471] __alloc_pages_nodemask+0x23e1/0x2720 [ 2726.922340] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2726.927201] alloc_pages_current+0x155/0x260 [ 2726.931612] filemap_fault+0xea3/0x1980 [ 2726.935626] ext4_filemap_fault+0x84/0xb0 [ 2726.939775] __do_fault+0xfa/0x380 [ 2726.943316] __handle_mm_fault+0x2497/0x4620 [ 2726.947765] ? vm_insert_page+0x7c0/0x7c0 [ 2726.951909] ? lock_downgrade+0x740/0x740 [ 2726.956074] handle_mm_fault+0x391/0x860 [ 2726.960148] __do_page_fault+0x549/0xad0 [ 2726.964222] ? spurious_fault+0x640/0x640 [ 2726.968375] ? do_page_fault+0x60/0x500 [ 2726.972370] ? page_fault+0x2f/0x50 [ 2726.976000] page_fault+0x45/0x50 [ 2726.976755] warn_alloc_show_mem: 1 callbacks suppressed [ 2726.976759] Mem-Info: [ 2726.979468] RIP: 0002:0x32 [ 2726.979473] RSP: 0bb8:00000000002994a1 EFLAGS: 0000003a [ 2727.054049] active_anon:17478 inactive_anon:60850 isolated_anon:0 [ 2727.054049] active_file:13 inactive_file:14 isolated_file:0 [ 2727.054049] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2727.054049] slab_reclaimable:13117 slab_unreclaimable:109661 [ 2727.054049] mapped:52588 shmem:62214 pagetables:797 bounce:0 [ 2727.054049] free:25067 free_pcp:0 free_cma:0 [ 2727.110371] Node 0 active_anon:68456kB inactive_anon:227132kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113776kB dirty:0kB writeback:0kB shmem:232456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2727.171962] Node 1 active_anon:1456kB inactive_anon:16268kB active_file:24kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96576kB dirty:0kB writeback:0kB shmem:16400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2727.400560] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2727.405895] Bluetooth: hci3 command 0x0409 tx timeout [ 2727.535889] Mem-Info: [ 2727.538364] active_anon:17478 inactive_anon:60850 isolated_anon:0 [ 2727.538364] active_file:7 inactive_file:1 isolated_file:0 [ 2727.538364] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2727.538364] slab_reclaimable:13117 slab_unreclaimable:109661 [ 2727.538364] mapped:52588 shmem:62214 pagetables:797 bounce:0 [ 2727.538364] free:25065 free_pcp:3 free_cma:0 [ 2727.605864] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2727.610935] Node 0 DMA32 free:35948kB min:36200kB low:45248kB high:54296kB active_anon:68456kB inactive_anon:227132kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2364kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 2727.753747] Node 0 active_anon:68456kB inactive_anon:227132kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113776kB dirty:0kB writeback:0kB shmem:232456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2727.839331] lowmem_reserve[]: 0 0 0 0 0 [ 2727.843367] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2727.890376] Mem-Info: [ 2727.892839] active_anon:17478 inactive_anon:60850 isolated_anon:0 [ 2727.892839] active_file:31 inactive_file:0 isolated_file:0 [ 2727.892839] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2727.892839] slab_reclaimable:13117 slab_unreclaimable:109661 [ 2727.892839] mapped:52588 shmem:62214 pagetables:797 bounce:0 [ 2727.892839] free:25065 free_pcp:0 free_cma:0 [ 2727.995998] Node 1 active_anon:1456kB inactive_anon:16268kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96576kB dirty:0kB writeback:0kB shmem:16400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2728.071003] lowmem_reserve[]: 0 0 0 0 0 [ 2728.075148] Node 1 Normal free:53260kB min:53696kB low:67120kB high:80544kB active_anon:1456kB inactive_anon:16268kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:824kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2728.190320] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2728.282906] Node 0 active_anon:68456kB inactive_anon:227132kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113776kB dirty:0kB writeback:0kB shmem:232456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2728.295821] lowmem_reserve[]: [ 2728.420552] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2728.449887] 0 0 0 0 0 [ 2728.488390] Node 0 DMA: 2*4kB (M) 0*8kB 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (E) = 11080kB [ 2728.496871] Node 1 active_anon:1456kB inactive_anon:16268kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96576kB dirty:0kB writeback:0kB shmem:16400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2728.520747] Node 0 DMA32 free:35992kB min:36200kB low:45248kB high:54296kB active_anon:68456kB inactive_anon:227132kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2364kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2728.638752] Node 0 DMA32: 1473*4kB (UME) 785*8kB (UME) 293*16kB (UME) 290*32kB (UME) 58*64kB (ME) 26*128kB (M) 9*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35996kB [ 2728.734713] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2728.789313] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2728.832031] Node 1 Normal: 115*4kB (UM) 199*8kB (UM) 73*16kB (UM) 34*32kB (UM) 21*64kB (M) 6*128kB (UM) 3*256kB (M) 2*512kB (UM) 2*1024kB (M) 1*2048kB (M) 10*4096kB (U) = 53268kB [ 2728.893494] lowmem_reserve[]: 0 0 0 0 0 [ 2728.923392] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2728.985096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2728.989146] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2729.002649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2729.062178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2729.068398] Node 0 DMA32 free:35992kB min:36200kB low:45248kB high:54296kB active_anon:68456kB inactive_anon:227132kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2364kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2729.072288] lowmem_reserve[]: [ 2729.135780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2729.248946] 62252 total pagecache pages [ 2729.253266] 0 pages in swap cache [ 2729.283180] lowmem_reserve[]: 0 0 0 0 0 [ 2729.284566] 0 [ 2729.290507] Swap cache stats: add 0, delete 0, find 0/0 [ 2729.319894] 0 0 0 0 [ 2729.322375] Node 1 Normal free:53260kB min:53696kB low:67120kB high:80544kB active_anon:1456kB inactive_anon:16268kB active_file:20kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:824kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2729.333157] Node 0 [ 2729.368190] Free swap = 0kB [ 2729.374162] Total swap = 0kB [ 2729.397019] 2097051 pages RAM [ 2729.405519] 0 pages HighMem/MovableOnly [ 2729.449141] 363840 pages reserved [ 2729.466026] 0 pages cma reserved [ 2729.471291] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2729.497780] lowmem_reserve[]: 0 0 0 0 0 [ 2729.550036] Node 0 DMA: 3*4kB (UM) 1*8kB (U) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (E) = 11076kB [ 2729.646138] Bluetooth: hci3 command 0x041b tx timeout [ 2729.674473] Node 0 DMA32: 1510*4kB (UME) 797*8kB (UME) 293*16kB (UME) 292*32kB (UME) 60*64kB (UME) 28*128kB (UM) 9*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36688kB [ 2729.698645] lowmem_reserve[]: 0 0 0 0 0 [ 2729.702928] Node 1 Normal free:53268kB min:53696kB low:67120kB high:80544kB active_anon:1456kB inactive_anon:16268kB active_file:0kB inactive_file:108kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:824kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2729.776148] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2729.852147] Node 1 Normal: 115*4kB (UM) 199*8kB (UM) 73*16kB (UM) 34*32kB (UM) 21*64kB (M) 6*128kB (UM) 3*256kB (M) 2*512kB (UM) 2*1024kB (M) 1*2048kB (M) 10*4096kB (U) = 53268kB [ 2729.923343] lowmem_reserve[]: 0 0 0 0 0 [ 2729.961114] Node 0 DMA: 3*4kB (UM) 1*8kB (U) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (E) = 11076kB [ 2729.980332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2730.040964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2730.065899] Node 0 DMA32: 1510*4kB (UME) 797*8kB (UME) 293*16kB (UME) 292*32kB (UME) 60*64kB (UME) 28*128kB (UM) 9*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36688kB [ 2730.077475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2730.164416] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2730.216247] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2730.225336] 62255 total pagecache pages [ 2730.235230] Node 1 Normal: 115*4kB (UM) 199*8kB (UM) 73*16kB (UM) 34*32kB (UM) 21*64kB (M) 6*128kB (UM) 3*256kB (M) 2*512kB (UM) 2*1024kB (M) 1*2048kB (M) 10*4096kB (U) = 53268kB [ 2730.308368] 0 pages in swap cache [ 2730.312075] Swap cache stats: add 0, delete 0, find 0/0 [ 2730.338134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2730.380851] Free swap = 0kB [ 2730.384334] Total swap = 0kB [ 2730.405411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2730.429457] 2097051 pages RAM [ 2730.447392] 0 pages HighMem/MovableOnly [ 2730.451686] 363840 pages reserved [ 2730.455233] 0 pages cma reserved [ 2730.456871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2730.460698] Out of memory (oom_kill_allocating_task): Kill process 26377 (syz-executor.3) score 0 or sacrifice child [ 2730.482512] Killed process 29541 (syz-executor.3) total-vm:93348kB, anon-rss:156kB, file-rss:34816kB, shmem-rss:0kB [ 2730.502637] oom_reaper: reaped process 29541 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2730.513621] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2730.528394] 62250 total pagecache pages [ 2730.532070] IPVS: ftp: loaded support on port[0] = 21 [ 2730.532802] 0 pages in swap cache [ 2730.544796] Swap cache stats: add 0, delete 0, find 0/0 [ 2730.550698] Free swap = 0kB [ 2730.553989] Total swap = 0kB [ 2730.557093] 2097051 pages RAM [ 2730.560218] 0 pages HighMem/MovableOnly [ 2730.564612] 363840 pages reserved [ 2730.569039] 0 pages cma reserved [ 2730.657411] syz-executor.5 invoked oom-killer: gfp_mask=0x14002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=(null), order=0, oom_score_adj=0 [ 2730.672767] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2730.679413] CPU: 0 PID: 29533 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2730.687943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2730.697652] Call Trace: [ 2730.700346] dump_stack+0x1b2/0x281 [ 2730.704120] dump_header+0x178/0x82f [ 2730.707959] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2730.713551] ? ___ratelimit+0x2cd/0x530 [ 2730.718651] oom_kill_process.cold+0x10/0xb18 [ 2730.723432] out_of_memory+0xe3e/0x1190 [ 2730.727514] ? oom_killer_disable+0x1c0/0x1c0 [ 2730.732295] ? mutex_trylock+0x152/0x1a0 [ 2730.736461] __alloc_pages_nodemask+0x23e1/0x2720 [ 2730.741324] ? __lock_acquire+0x5fc/0x3f20 [ 2730.745792] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2730.750648] ? fs_reclaim_release+0xd0/0x110 [ 2730.755167] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2730.760540] ? __kmalloc_node+0x38/0x70 [ 2730.764525] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2730.769951] alloc_pages_current+0x155/0x260 [ 2730.774565] __vmalloc_area_node+0x40a/0x680 [ 2730.779138] ? __vmalloc_node_range+0x150/0x150 [ 2730.783813] ? __get_vm_area_node+0x27d/0x340 [ 2730.788553] ? ebt_register_table+0x1dd/0xc50 [ 2730.793130] vmalloc+0xc3/0x150 [ 2730.796513] ebt_register_table+0x1dd/0xc50 [ 2730.801212] ? broute_net_exit+0x40/0x40 [ 2730.805286] ops_init+0xaa/0x3e0 [ 2730.808667] setup_net+0x22f/0x530 [ 2730.812361] ? rtnl_net_dumpid_one+0x240/0x240 [ 2730.817185] ? kmem_cache_alloc+0x35f/0x3c0 [ 2730.821957] copy_net_ns+0x19b/0x440 [ 2730.826226] create_new_namespaces+0x375/0x720 [ 2730.831785] unshare_nsproxy_namespaces+0xa1/0x1d0 [ 2730.836826] SyS_unshare+0x308/0x7f0 [ 2730.840571] ? walk_process_tree+0x2a0/0x2a0 [ 2730.845309] ? task_work_run+0xfd/0x190 [ 2730.849475] ? do_syscall_64+0x4c/0x640 [ 2730.853616] ? walk_process_tree+0x2a0/0x2a0 [ 2730.858402] do_syscall_64+0x1d5/0x640 [ 2730.862648] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2730.868356] RIP: 0033:0x460ce7 [ 2730.871997] RSP: 002b:00007ffc51e93b58 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 2730.880163] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000460ce7 [ 2730.888172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2730.896499] RBP: 00000000000000f8 R08: 0000000000000000 R09: 0000000000000005 [ 2730.904326] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc51e93ba0 [ 2730.913522] R13: 00007ffc51e93df8 R14: 0000000000000000 R15: 0000000000000000 [ 2730.934435] Mem-Info: [ 2730.945630] active_anon:17454 inactive_anon:60850 isolated_anon:0 [ 2730.945630] active_file:13 inactive_file:13 isolated_file:0 [ 2730.945630] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2730.945630] slab_reclaimable:13115 slab_unreclaimable:109256 [ 2730.945630] mapped:52588 shmem:62214 pagetables:797 bounce:0 [ 2730.945630] free:13780 free_pcp:20 free_cma:0 [ 2730.983277] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2731.011564] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2731.016680] Node 0 active_anon:68452kB inactive_anon:227132kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113776kB dirty:0kB writeback:0kB shmem:232456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2731.031356] CPU: 1 PID: 29541 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2731.059057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2731.066334] Node 1 active_anon:1364kB inactive_anon:16268kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96576kB dirty:0kB writeback:0kB shmem:16400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2731.069025] Call Trace: [ 2731.098232] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2731.100951] dump_stack+0x1b2/0x281 [ 2731.100966] warn_alloc.cold+0x96/0x1cc [ 2731.128227] lowmem_reserve[]: [ 2731.131925] ? zone_watermark_ok_safe+0x220/0x220 [ 2731.135956] 0 [ 2731.139066] ? usleep_range+0x130/0x130 [ 2731.139076] ? try_to_free_pages+0x23f/0x6e0 [ 2731.139085] ? _find_next_bit+0xdb/0x100 [ 2731.139094] ? run_timer_softirq+0x5a0/0x5a0 [ 2731.139113] __alloc_pages_nodemask+0x2127/0x2720 [ 2731.144453] 2717 [ 2731.146269] ? lock_acquire+0x170/0x3f0 [ 2731.150305] 2718 [ 2731.155098] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2731.159285] 2718 [ 2731.163664] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2731.168628] 2718 [ 2731.170850] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2731.177046] ? __sanitizer_cov_trace_pc+0x2d/0x50 [ 2731.177060] alloc_pages_current+0x155/0x260 [ 2731.177075] ion_page_pool_alloc+0x118/0x1b0 [ 2731.177086] ion_system_heap_allocate+0x133/0x8c0 [ 2731.183312] Node 0 [ 2731.185374] ? ion_alloc+0x187/0x810 [ 2731.189917] DMA32 free:17544kB min:36200kB low:45248kB high:54296kB active_anon:68448kB inactive_anon:227132kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2364kB bounce:0kB free_pcp:80kB local_pcp:0kB free_cma:0kB [ 2731.192020] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2731.197659] lowmem_reserve[]: [ 2731.202788] ? ion_system_contig_heap_create+0x130/0x130 [ 2731.207227] 0 [ 2731.211729] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2731.216784] 0 [ 2731.218996] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2731.222718] 0 [ 2731.252641] ion_alloc+0x204/0x810 [ 2731.252657] ? ion_dma_buf_release+0x40/0x40 [ 2731.252670] ? __might_fault+0x177/0x1b0 [ 2731.252682] ion_ioctl+0xea/0x1f0 [ 2731.258640] 0 [ 2731.261980] ? ion_query_heaps+0x360/0x360 [ 2731.267882] 0 [ 2731.270989] ? lock_acquire+0x170/0x3f0 [ 2731.277997] ? lock_downgrade+0x740/0x740 [ 2731.278009] ? ion_query_heaps+0x360/0x360 [ 2731.278018] do_vfs_ioctl+0x75a/0xff0 [ 2731.278031] ? ioctl_preallocate+0x1a0/0x1a0 [ 2731.278042] ? lock_downgrade+0x740/0x740 [ 2731.284768] Node 0 [ 2731.286803] ? __fget+0x225/0x360 [ 2731.286813] ? do_vfs_ioctl+0xff0/0xff0 [ 2731.286823] ? security_file_ioctl+0x83/0xb0 [ 2731.286833] SyS_ioctl+0x7f/0xb0 [ 2731.286843] ? do_vfs_ioctl+0xff0/0xff0 [ 2731.290507] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2731.295085] do_syscall_64+0x1d5/0x640 [ 2731.299281] lowmem_reserve[]: [ 2731.302703] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2731.304662] 0 [ 2731.309001] RIP: 0033:0x45e219 [ 2731.309006] RSP: 002b:00007fa35386fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2731.309015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2731.309020] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2731.309024] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2731.309029] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2731.309034] R13: 00007ffc07929f4f R14: 00007fa3538709c0 R15: 000000000119bf8c [ 2731.321753] Mem-Info: [ 2731.347151] 0 [ 2731.354570] active_anon:17454 inactive_anon:60850 isolated_anon:0 [ 2731.354570] active_file:13 inactive_file:13 isolated_file:0 [ 2731.354570] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2731.354570] slab_reclaimable:13115 slab_unreclaimable:109256 [ 2731.354570] mapped:52588 shmem:62214 pagetables:797 bounce:0 [ 2731.354570] free:13818 free_pcp:20 free_cma:0 [ 2731.375702] 0 [ 2731.394438] Node 0 active_anon:68452kB inactive_anon:227132kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113776kB dirty:0kB writeback:0kB shmem:232456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2731.411907] 0 [ 2731.421509] Node 1 active_anon:1364kB inactive_anon:16268kB active_file:20kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96576kB dirty:0kB writeback:0kB shmem:16400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2731.434942] 0 [ 2731.443874] Node 0 [ 2731.464243] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2731.512331] Node 1 [ 2731.531319] lowmem_reserve[]: [ 2731.587013] Normal free:26852kB min:53696kB low:67120kB high:80544kB active_anon:1364kB inactive_anon:16268kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:824kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2731.595510] 0 2717 2718 2718 2718 [ 2731.631575] Node 0 DMA32 free:18200kB min:36200kB low:45248kB high:54296kB active_anon:68448kB inactive_anon:227132kB active_file:20kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2364kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2731.637372] lowmem_reserve[]: [ 2731.668878] lowmem_reserve[]: 0 0 0 0 0 [ 2731.676251] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2731.680884] 0 [ 2731.709385] lowmem_reserve[]: 0 0 0 0 0 [ 2731.715489] Node 1 Normal free:26852kB min:53696kB low:67120kB high:80544kB active_anon:1364kB inactive_anon:16268kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:824kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2731.721194] 0 [ 2731.747313] Bluetooth: hci3 command 0x040f tx timeout [ 2731.758009] lowmem_reserve[]: 0 0 0 0 0 [ 2731.762134] Node 0 DMA: 3*4kB (UM) 1*8kB (U) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (E) = 10964kB [ 2731.765457] 0 [ 2731.791438] Node 0 [ 2731.791548] 0 [ 2731.793577] DMA32: [ 2731.796200] 0 [ 2731.804360] 1327*4kB (UME) 545*8kB (UME) 190*16kB (ME) 34*32kB (UME) 41*64kB (UME) 15*128kB (UM) 0*256kB 0*512kB [ 2731.832471] Node 0 DMA: 3*4kB (UM) 1*8kB (U) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (E) = 10964kB [ 2731.836136] 0*1024kB [ 2731.859315] Node 0 DMA32: 1327*4kB (UME) 545*8kB (UME) 190*16kB (ME) 34*32kB (UME) 41*64kB (UME) 15*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18340kB [ 2731.863043] 0*2048kB [ 2731.888344] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2731.892673] 0*4096kB [ 2731.913150] Node 1 Normal: 59*4kB (M) 47*8kB (M) 28*16kB (M) 26*32kB (UM) 24*64kB (UM) 5*128kB (M) 3*256kB (M) 1*512kB (M) 3*1024kB (UM) 1*2048kB (M) 4*4096kB (U) = 26852kB [ 2731.919077] = 18340kB [ 2731.943163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2731.949355] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2731.954485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2731.980076] Node 1 Normal: 59*4kB (M) 47*8kB (M) 28*16kB (M) 26*32kB (UM) 24*64kB (UM) 5*128kB (M) 3*256kB (M) 1*512kB (M) 3*1024kB (UM) 1*2048kB (M) 4*4096kB (U) = 26852kB [ 2731.983184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2732.012578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2732.014184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2732.039626] 62240 total pagecache pages [ 2732.043127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2732.043847] 0 pages in swap cache [ 2732.065941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2732.069679] Swap cache stats: add 0, delete 0, find 0/0 [ 2732.088337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2732.093686] Free swap = 0kB [ 2732.104519] Total swap = 0kB [ 2732.109764] 62240 total pagecache pages [ 2732.114063] 0 pages in swap cache [ 2732.116111] 2097051 pages RAM [ 2732.125118] 0 pages HighMem/MovableOnly [ 2732.125960] Swap cache stats: add 0, delete 0, find 0/0 [ 2732.142611] 363840 pages reserved [ 2732.146642] Free swap = 0kB [ 2732.149774] Total swap = 0kB [ 2732.152950] 0 pages cma reserved [ 2732.152997] 2097051 pages RAM [ 2732.163145] Out of memory (oom_kill_allocating_task): Kill process 29533 (syz-executor.5) score 0 or sacrifice child [ 2732.170985] 0 pages HighMem/MovableOnly [ 2732.181994] Killed process 29533 (syz-executor.5) total-vm:93220kB, anon-rss:76kB, file-rss:33276kB, shmem-rss:0kB [ 2732.184753] 363840 pages reserved [ 2732.209047] 0 pages cma reserved [ 2732.245328] oom_reaper: reaped process 29533 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2733.159686] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2733.172584] oom_reaper: reaped process 29539 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2733.174675] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2733.190529] CPU: 1 PID: 29541 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2733.198589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2733.208142] Call Trace: [ 2733.210750] dump_stack+0x1b2/0x281 [ 2733.214400] warn_alloc.cold+0x96/0x1cc [ 2733.218397] ? zone_watermark_ok_safe+0x220/0x220 [ 2733.223582] __alloc_pages_nodemask+0x2127/0x2720 [ 2733.228734] ? lock_acquire+0x170/0x3f0 [ 2733.232845] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2733.237934] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2733.243548] ? __mutex_unlock_slowpath+0x75/0x770 [ 2733.248582] alloc_pages_current+0x155/0x260 [ 2733.253104] ion_page_pool_alloc+0x118/0x1b0 [ 2733.257535] ion_system_heap_allocate+0x133/0x8c0 [ 2733.262517] ? _raw_spin_unlock+0x29/0x40 [ 2733.266793] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2733.272087] ? ion_system_contig_heap_create+0x130/0x130 [ 2733.278119] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2733.283607] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2733.289141] ion_alloc+0x27a/0x810 [ 2733.292718] ? ion_dma_buf_release+0x40/0x40 [ 2733.297243] ? __might_fault+0x177/0x1b0 [ 2733.301522] ion_ioctl+0xea/0x1f0 [ 2733.304997] ? ion_query_heaps+0x360/0x360 [ 2733.309258] ? lock_acquire+0x170/0x3f0 [ 2733.313250] ? lock_downgrade+0x740/0x740 [ 2733.317409] ? ion_query_heaps+0x360/0x360 [ 2733.321661] do_vfs_ioctl+0x75a/0xff0 [ 2733.325480] ? ioctl_preallocate+0x1a0/0x1a0 [ 2733.329899] ? lock_downgrade+0x740/0x740 [ 2733.334072] ? __fget+0x225/0x360 [ 2733.337537] ? do_vfs_ioctl+0xff0/0xff0 [ 2733.341545] ? security_file_ioctl+0x83/0xb0 [ 2733.345977] SyS_ioctl+0x7f/0xb0 [ 2733.349358] ? do_vfs_ioctl+0xff0/0xff0 [ 2733.353372] do_syscall_64+0x1d5/0x640 [ 2733.356671] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2733.357517] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2733.357527] RIP: 0033:0x45e219 [ 2733.371848] syz-executor.0 cpuset= [ 2733.377271] RSP: 002b:00007fa35386fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2733.377281] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2733.377286] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2733.377291] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2733.377296] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2733.377301] R13: 00007ffc07929f4f R14: 00007fa3538709c0 R15: 000000000119bf8c [ 2733.382725] Mem-Info: [ 2733.384402] / [ 2733.392491] active_anon:17426 inactive_anon:60850 isolated_anon:0 [ 2733.392491] active_file:43 inactive_file:27 isolated_file:0 [ 2733.392491] unevictable:0 dirty:39 writeback:0 unstable:0 [ 2733.392491] slab_reclaimable:13124 slab_unreclaimable:111496 [ 2733.392491] mapped:43942 shmem:62214 pagetables:749 bounce:0 [ 2733.392491] free:13886 free_pcp:0 free_cma:0 [ 2733.402889] mems_allowed=0-1 [ 2733.410861] Node 0 active_anon:68616kB inactive_anon:227132kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114000kB dirty:0kB writeback:16kB shmem:232464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2733.421757] CPU: 0 PID: 29539 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2733.424651] Node 1 active_anon:1068kB inactive_anon:16268kB active_file:88kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61784kB dirty:120kB writeback:24kB shmem:16400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2733.430750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2733.430754] Call Trace: [ 2733.430775] dump_stack+0x1b2/0x281 [ 2733.430789] dump_header+0x178/0x82f [ 2733.430801] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2733.430811] ? ___ratelimit+0x2cd/0x530 [ 2733.430823] oom_kill_process.cold+0x10/0xb18 [ 2733.430843] out_of_memory+0xe3e/0x1190 [ 2733.435851] Node 0 [ 2733.470923] ? oom_killer_disable+0x1c0/0x1c0 [ 2733.470935] ? mutex_trylock+0x152/0x1a0 [ 2733.470946] __alloc_pages_nodemask+0x23e1/0x2720 [ 2733.470962] ? lock_acquire+0x170/0x3f0 [ 2733.470976] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2733.470988] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2733.471002] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2733.471017] ? alloc_pages_current+0x73/0x260 [ 2733.471032] alloc_pages_current+0x155/0x260 [ 2733.476778] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2733.504666] ion_page_pool_alloc+0x118/0x1b0 [ 2733.504678] ion_system_heap_allocate+0x133/0x8c0 [ 2733.504688] ? ion_alloc+0x187/0x810 [ 2733.504699] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2733.504708] ? ion_system_contig_heap_create+0x130/0x130 [ 2733.504717] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2733.504729] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2733.504740] ion_alloc+0x204/0x810 [ 2733.504754] ? ion_dma_buf_release+0x40/0x40 [ 2733.504765] ? __might_fault+0x177/0x1b0 [ 2733.504777] ion_ioctl+0xea/0x1f0 [ 2733.504787] ? ion_query_heaps+0x360/0x360 [ 2733.504800] ? lock_acquire+0x170/0x3f0 [ 2733.504809] ? lock_downgrade+0x740/0x740 [ 2733.504822] ? ion_query_heaps+0x360/0x360 [ 2733.534097] lowmem_reserve[]: [ 2733.542535] do_vfs_ioctl+0x75a/0xff0 [ 2733.542549] ? ioctl_preallocate+0x1a0/0x1a0 [ 2733.542558] ? lock_downgrade+0x740/0x740 [ 2733.542571] ? __fget+0x225/0x360 [ 2733.542579] ? do_vfs_ioctl+0xff0/0xff0 [ 2733.542590] ? security_file_ioctl+0x83/0xb0 [ 2733.542600] SyS_ioctl+0x7f/0xb0 [ 2733.542607] ? do_vfs_ioctl+0xff0/0xff0 [ 2733.542619] do_syscall_64+0x1d5/0x640 [ 2733.542639] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2733.559189] 0 [ 2733.559358] RIP: 0033:0x45e219 [ 2733.563083] 2717 [ 2733.568317] RSP: 002b:00007fa6a8664c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2733.568327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2733.568332] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2733.568337] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2733.568341] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2733.568346] R13: 00007ffdb3664baf R14: 00007fa6a86659c0 R15: 000000000119bf8c [ 2733.580012] Mem-Info: [ 2733.587330] 2718 [ 2733.592514] active_anon:17392 inactive_anon:60848 isolated_anon:0 [ 2733.592514] active_file:20 inactive_file:15 isolated_file:0 [ 2733.592514] unevictable:0 dirty:34 writeback:0 unstable:0 [ 2733.592514] slab_reclaimable:13131 slab_unreclaimable:111411 [ 2733.592514] mapped:43924 shmem:62214 pagetables:700 bounce:0 [ 2733.592514] free:14093 free_pcp:25 free_cma:0 [ 2733.592535] Node 0 active_anon:68548kB inactive_anon:227136kB active_file:12kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113936kB dirty:0kB writeback:0kB shmem:232472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2733.604123] 2718 [ 2733.613692] Node 1 active_anon:1020kB inactive_anon:16256kB active_file:68kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61760kB dirty:136kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2733.626647] 2718 [ 2733.633113] Node 0 [ 2733.674611] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2733.688068] Node 0 [ 2733.696852] lowmem_reserve[]: [ 2733.705258] DMA32 free:18156kB min:36200kB low:45248kB high:54296kB active_anon:68548kB inactive_anon:227136kB active_file:12kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2312kB bounce:0kB free_pcp:100kB local_pcp:100kB free_cma:0kB [ 2733.706500] 0 [ 2733.713169] lowmem_reserve[]: [ 2733.721153] 2717 [ 2733.733493] 0 [ 2733.737944] 2718 [ 2733.742448] 0 [ 2733.743682] 2718 [ 2733.751990] 0 [ 2733.760283] 2718 [ 2733.766226] 0 [ 2733.783480] 0 [ 2733.784540] Node 0 [ 2733.807768] DMA32 free:18156kB min:36200kB low:45248kB high:54296kB active_anon:68548kB inactive_anon:227136kB active_file:12kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2312kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 2733.820853] Node 0 [ 2733.828943] lowmem_reserve[]: [ 2733.863973] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2733.901104] 0 [ 2733.926722] lowmem_reserve[]: [ 2733.960605] 0 [ 2733.986513] 0 [ 2733.997248] 0 [ 2733.999764] 0 [ 2734.003216] 0 [ 2734.003384] 0 [ 2734.005131] 0 [ 2734.007447] 0 [ 2734.072336] 0 [ 2734.083201] Node 0 [ 2734.085431] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2734.089361] Node 1 [ 2734.093549] lowmem_reserve[]: [ 2734.116658] Normal free:27260kB min:53696kB low:67120kB high:80544kB active_anon:1020kB inactive_anon:16256kB active_file:164kB inactive_file:32kB unevictable:0kB writepending:136kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:488kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2734.129002] 0 0 0 0 0 [ 2734.163418] Node 1 Normal free:27260kB min:53696kB low:67120kB high:80544kB active_anon:1020kB inactive_anon:16256kB active_file:164kB inactive_file:32kB unevictable:0kB writepending:136kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:488kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2734.169078] lowmem_reserve[]: [ 2734.199133] lowmem_reserve[]: 0 0 0 0 0 [ 2734.206266] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 15*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10956kB [ 2734.226600] Node 0 DMA32: 1217*4kB (UME) 486*8kB (UME) 155*16kB (UME) 219*32kB (UME) 0*64kB 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18500kB [ 2734.229011] 0 [ 2734.247360] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2734.262116] Node 1 Normal: 55*4kB (M) 50*8kB (UM) 35*16kB (M) 29*32kB (UM) 23*64kB (M) 13*128kB (M) 6*256kB (UM) 28*512kB (UM) 2*1024kB (M) 0*2048kB 1*4096kB (M) = 27260kB [ 2734.270884] 0 [ 2734.280481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2734.291172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2734.301895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2734.302921] 0 [ 2734.310902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2734.310908] 62281 total pagecache pages [ 2734.310917] 0 pages in swap cache [ 2734.310923] Swap cache stats: add 0, delete 0, find 0/0 [ 2734.310926] Free swap = 0kB [ 2734.310930] Total swap = 0kB [ 2734.310938] 2097051 pages RAM [ 2734.345081] 0 0 [ 2734.345427] 0 pages HighMem/MovableOnly [ 2734.349192] Node 0 [ 2734.351111] 363840 pages reserved [ 2734.351120] DMA: [ 2734.353336] 0 pages cma reserved [ 2734.364285] 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 15*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10956kB [ 2734.376746] Out of memory (oom_kill_allocating_task): Kill process 29539 (syz-executor.0) score 0 or sacrifice child [ 2734.385315] Node 0 [ 2734.390025] Killed process 29539 (syz-executor.0) total-vm:93348kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2734.402861] DMA32: 1217*4kB (UME) 486*8kB (UME) 155*16kB (UME) 219*32kB (UME) 0*64kB 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18500kB [ 2734.404473] syz-executor.0: [ 2734.425406] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2734.439089] Node 0 [ 2734.441067] (null) [ 2734.460809] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2734.475672] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2734.483933] , order=0, oom_score_adj=0 [ 2734.490109] Node 1 Normal: 56*4kB (UM) 52*8kB (UM) 37*16kB (M) 29*32kB (UM) 23*64kB (M) 13*128kB (M) 6*256kB (UM) 28*512kB (UM) 2*1024kB (M) 0*2048kB 1*4096kB (M) = 27312kB [ 2734.496620] syz-executor.0 cpuset= [ 2734.505929] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2734.525248] CPU: 0 PID: 8006 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2734.528995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2734.532692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2734.550878] Call Trace: [ 2734.553469] dump_stack+0x1b2/0x281 [ 2734.557096] dump_header+0x178/0x82f [ 2734.558927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2734.560811] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2734.574521] ? ___ratelimit+0x2cd/0x530 [ 2734.578521] oom_kill_process.cold+0x10/0xb18 [ 2734.583049] out_of_memory+0xe3e/0x1190 [ 2734.587024] ? oom_killer_disable+0x1c0/0x1c0 [ 2734.589462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2734.591525] ? mutex_trylock+0x152/0x1a0 [ 2734.605034] __alloc_pages_nodemask+0x23e1/0x2720 [ 2734.609978] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2734.614836] alloc_pages_current+0x155/0x260 [ 2734.618951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2734.619249] filemap_fault+0xea3/0x1980 [ 2734.631805] ext4_filemap_fault+0x84/0xb0 [ 2734.635958] __do_fault+0xfa/0x380 [ 2734.638981] 62269 total pagecache pages [ 2734.639498] __handle_mm_fault+0x2497/0x4620 [ 2734.643466] 0 pages in swap cache [ 2734.647876] ? vm_insert_page+0x7c0/0x7c0 [ 2734.647884] ? __might_fault+0x177/0x1b0 [ 2734.647900] handle_mm_fault+0x391/0x860 [ 2734.647912] __do_page_fault+0x549/0xad0 [ 2734.647923] ? spurious_fault+0x640/0x640 [ 2734.647930] ? do_page_fault+0x60/0x500 [ 2734.647940] ? page_fault+0x2f/0x50 [ 2734.647947] page_fault+0x45/0x50 [ 2734.647957] RIP: ac480:0x200 [ 2734.669054] Swap cache stats: add 0, delete 0, find 0/0 [ 2734.671807] RSP: 0001:000000c0000b9e70 EFLAGS: 00000003 [ 2734.675772] Free swap = 0kB [ 2734.689872] / mems_allowed=0-1 [ 2734.713965] CPU: 0 PID: 29539 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2734.721846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2734.731073] Total swap = 0kB [ 2734.731204] Call Trace: [ 2734.734227] 2097051 pages RAM [ 2734.736817] dump_stack+0x1b2/0x281 [ 2734.736831] warn_alloc.cold+0x96/0x1cc [ 2734.736843] ? zone_watermark_ok_safe+0x220/0x220 [ 2734.736860] ? wait_for_completion_io+0x10/0x10 [ 2734.736872] __alloc_pages_nodemask+0x2127/0x2720 [ 2734.736890] ? lock_acquire+0x170/0x3f0 [ 2734.736905] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2734.740518] 0 pages HighMem/MovableOnly [ 2734.744153] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2734.771035] 363840 pages reserved [ 2734.771542] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2734.775494] 0 pages cma reserved [ 2734.779994] ? alloc_pages_current+0x73/0x260 [ 2734.780005] alloc_pages_current+0x155/0x260 [ 2734.780021] ion_page_pool_alloc+0x118/0x1b0 [ 2734.780032] ion_system_heap_allocate+0x133/0x8c0 [ 2734.780042] ? ion_alloc+0x187/0x810 [ 2734.780052] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2734.780062] ? ion_system_contig_heap_create+0x130/0x130 [ 2734.780072] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2734.780085] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2734.835064] ion_alloc+0x204/0x810 [ 2734.838621] ? ion_dma_buf_release+0x40/0x40 [ 2734.843045] ? __might_fault+0x177/0x1b0 [ 2734.847120] ion_ioctl+0xea/0x1f0 [ 2734.850585] ? ion_query_heaps+0x360/0x360 [ 2734.854833] ? lock_acquire+0x170/0x3f0 [ 2734.858843] ? lock_downgrade+0x740/0x740 [ 2734.863001] ? ion_query_heaps+0x360/0x360 [ 2734.868120] do_vfs_ioctl+0x75a/0xff0 [ 2734.871958] ? ioctl_preallocate+0x1a0/0x1a0 [ 2734.876385] ? lock_downgrade+0x740/0x740 [ 2734.880565] ? __fget+0x225/0x360 [ 2734.884030] ? do_vfs_ioctl+0xff0/0xff0 [ 2734.888017] ? security_file_ioctl+0x83/0xb0 [ 2734.892527] SyS_ioctl+0x7f/0xb0 [ 2734.895903] ? do_vfs_ioctl+0xff0/0xff0 [ 2734.899980] do_syscall_64+0x1d5/0x640 [ 2734.903925] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2734.909122] RIP: 0033:0x45e219 [ 2734.912314] RSP: 002b:00007fa6a8664c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2734.916891] syz-executor.3: [ 2734.920033] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2734.920044] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2734.923068] page allocation failure: order:0 [ 2734.930331] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2734.930337] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2734.930342] R13: 00007ffdb3664baf R14: 00007fa6a86659c0 R15: 000000000119bf8c [ 2734.940895] Mem-Info: [ 2734.969137] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2734.977240] Mem-Info: [ 2734.979687] active_anon:17392 inactive_anon:60848 isolated_anon:0 [ 2734.979687] active_file:42 inactive_file:8 isolated_file:0 [ 2734.979687] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2734.979687] slab_reclaimable:13131 slab_unreclaimable:111372 [ 2734.979687] mapped:43924 shmem:62214 pagetables:700 bounce:0 [ 2734.979687] free:13957 free_pcp:60 free_cma:0 [ 2734.989028] syz-executor.3 cpuset= [ 2735.018399] active_anon:17392 inactive_anon:60848 isolated_anon:0 [ 2735.018399] active_file:42 inactive_file:1 isolated_file:0 [ 2735.018399] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2735.018399] slab_reclaimable:13131 slab_unreclaimable:111372 [ 2735.018399] mapped:43924 shmem:62214 pagetables:700 bounce:0 [ 2735.018399] free:13957 free_pcp:60 free_cma:0 [ 2735.024052] Node 0 active_anon:68548kB inactive_anon:227136kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113936kB dirty:12kB writeback:0kB shmem:232472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2735.086868] / mems_allowed=0-1 [ 2735.090125] CPU: 1 PID: 29541 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2735.095018] Node 1 active_anon:1020kB inactive_anon:16256kB active_file:136kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61760kB dirty:88kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2735.098700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2735.098705] Call Trace: [ 2735.098726] dump_stack+0x1b2/0x281 [ 2735.098739] warn_alloc.cold+0x96/0x1cc [ 2735.098754] ? zone_watermark_ok_safe+0x220/0x220 [ 2735.126165] Node 0 [ 2735.135501] ? usleep_range+0x130/0x130 [ 2735.135512] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2735.135524] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2735.135534] ? run_timer_softirq+0x5a0/0x5a0 [ 2735.135551] __alloc_pages_nodemask+0x2127/0x2720 [ 2735.138171] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2735.141756] ? lock_acquire+0x170/0x3f0 [ 2735.145694] lowmem_reserve[]: [ 2735.150543] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2735.150556] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2735.150571] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2735.150594] alloc_pages_current+0x155/0x260 [ 2735.152810] 0 [ 2735.156778] ion_page_pool_alloc+0x118/0x1b0 [ 2735.161906] 2717 [ 2735.166887] ion_system_heap_allocate+0x133/0x8c0 [ 2735.166907] ? _raw_spin_unlock+0x29/0x40 [ 2735.166919] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2735.171953] 2718 [ 2735.176810] ? ion_system_contig_heap_create+0x130/0x130 [ 2735.202455] 2718 [ 2735.206407] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2735.209539] 2718 [ 2735.214354] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2735.224299] ion_alloc+0x27a/0x810 [ 2735.228730] Node 0 [ 2735.230488] ? ion_dma_buf_release+0x40/0x40 [ 2735.234880] DMA32 free:18056kB min:36200kB low:45248kB high:54296kB active_anon:68548kB inactive_anon:227136kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2312kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2735.236920] ? __might_fault+0x177/0x1b0 [ 2735.236935] ion_ioctl+0xea/0x1f0 [ 2735.236945] ? ion_query_heaps+0x360/0x360 [ 2735.236958] ? lock_acquire+0x170/0x3f0 [ 2735.236968] ? lock_downgrade+0x740/0x740 [ 2735.241807] lowmem_reserve[]: [ 2735.245956] ? ion_query_heaps+0x360/0x360 [ 2735.250901] 0 [ 2735.252912] do_vfs_ioctl+0x75a/0xff0 [ 2735.258369] 0 [ 2735.260401] ? ioctl_preallocate+0x1a0/0x1a0 [ 2735.266463] 0 [ 2735.268523] ? lock_downgrade+0x740/0x740 [ 2735.268536] ? __fget+0x225/0x360 [ 2735.268545] ? do_vfs_ioctl+0xff0/0xff0 [ 2735.268556] ? security_file_ioctl+0x83/0xb0 [ 2735.268573] SyS_ioctl+0x7f/0xb0 [ 2735.273400] 0 [ 2735.276932] ? do_vfs_ioctl+0xff0/0xff0 [ 2735.276944] do_syscall_64+0x1d5/0x640 [ 2735.276961] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2735.276976] RIP: 0033:0x45e219 [ 2735.279211] 0 [ 2735.283608] RSP: 002b:00007fa35386fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2735.315951] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2735.319435] Node 0 [ 2735.323611] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2735.323620] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2735.327644] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2735.331716] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2735.331726] R13: 00007ffc07929f4f R14: 00007fa3538709c0 R15: 000000000119bf8c [ 2735.334819] lowmem_reserve[]: [ 2735.471864] Node 0 active_anon:68548kB inactive_anon:227136kB active_file:32kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113936kB dirty:12kB writeback:0kB shmem:232472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2735.516383] Node 1 active_anon:1020kB inactive_anon:16256kB active_file:48kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61760kB dirty:88kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2735.550234] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2735.584511] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2735.589648] Node 0 DMA32 free:18056kB min:36200kB low:45248kB high:54296kB active_anon:68548kB inactive_anon:227136kB active_file:12kB inactive_file:28kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2312kB bounce:0kB free_pcp:192kB local_pcp:52kB free_cma:0kB [ 2735.625517] lowmem_reserve[]: 0 0 0 0 0 [ 2735.629651] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2735.662833] 0 0 0 0 0 [ 2735.665370] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:1020kB inactive_anon:16256kB active_file:48kB inactive_file:60kB unevictable:0kB writepending:88kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:488kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2735.700858] lowmem_reserve[]: 0 0 0 0 0 [ 2735.704884] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:1020kB inactive_anon:16256kB active_file:148kB inactive_file:32kB unevictable:0kB writepending:88kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:488kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2735.740682] lowmem_reserve[]: 0 0 0 0 0 [ 2735.744724] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 15*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10956kB [ 2735.779105] lowmem_reserve[]: 0 0 0 0 0 [ 2735.783408] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 15*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10956kB [ 2735.816985] Node 0 DMA32: 1216*4kB (UME) 490*8kB (UME) 154*16kB (ME) 208*32kB (UME) 0*64kB 2*128kB (U) 0*256kB 0*512kB 7*1024kB (U) 0*2048kB 0*4096kB = 25328kB [ 2735.832106] Node 0 DMA32: 1092*4kB (UME) 490*8kB (UME) 154*16kB (ME) 208*32kB (UME) 0*64kB 2*128kB (U) 0*256kB 0*512kB 47*1024kB (U) 0*2048kB 0*4096kB = 65792kB [ 2735.866547] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2735.882797] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2735.916988] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 14*32kB (M) 24*64kB (UM) 13*128kB (M) 6*256kB (UM) 27*512kB (UM) 456*1024kB (UM) 48*2048kB (U) 8*4096kB (UM) = 617060kB [ 2735.947016] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 14*32kB (M) 24*64kB (UM) 13*128kB (M) 6*256kB (UM) 27*512kB (UM) 529*1024kB (UM) 49*2048kB (U) 8*4096kB (UM) = 693860kB [ 2735.987505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2735.996391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2735.996977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2736.047690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2736.056305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2736.079336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2736.098995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2736.127298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2736.135906] 63120 total pagecache pages [ 2736.147004] 63120 total pagecache pages [ 2736.151035] 0 pages in swap cache [ 2736.154494] Swap cache stats: add 0, delete 0, find 0/0 [ 2736.169403] 0 pages in swap cache [ 2736.172883] Swap cache stats: add 0, delete 0, find 0/0 [ 2736.197035] Free swap = 0kB [ 2736.197062] Free swap = 0kB [ 2736.200078] Total swap = 0kB [ 2736.203088] Total swap = 0kB [ 2736.206089] 2097051 pages RAM [ 2736.237077] 2097051 pages RAM [ 2736.240213] 0 pages HighMem/MovableOnly [ 2736.244199] 363840 pages reserved [ 2736.269171] 0 pages HighMem/MovableOnly [ 2736.273197] 363840 pages reserved [ 2736.276648] 0 pages cma reserved [ 2736.289164] 0 pages cma reserved [ 2736.292564] Out of memory (oom_kill_allocating_task): Kill process 8006 (syz-fuzzer) score 0 or sacrifice child [ 2736.347180] Killed process 29558 (syz-executor.1) total-vm:85024kB, anon-rss:1732kB, file-rss:0kB, shmem-rss:0kB [ 2736.396225] oom_reaper: reaped process 29558 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2739.183433] IPVS: ftp: loaded support on port[0] = 21 [ 2739.286889] IPVS: ftp: loaded support on port[0] = 21 [ 2739.364195] chnl_net:caif_netlink_parms(): no params data found [ 2739.466020] chnl_net:caif_netlink_parms(): no params data found [ 2739.586851] bridge0: port 1(bridge_slave_0) entered blocking state [ 2739.595195] bridge0: port 1(bridge_slave_0) entered disabled state [ 2739.603016] device bridge_slave_0 entered promiscuous mode [ 2739.610396] bridge0: port 2(bridge_slave_1) entered blocking state [ 2739.616807] bridge0: port 2(bridge_slave_1) entered disabled state [ 2739.624969] device bridge_slave_1 entered promiscuous mode [ 2739.643755] bridge0: port 1(bridge_slave_0) entered blocking state [ 2739.652264] bridge0: port 1(bridge_slave_0) entered disabled state [ 2739.659903] device bridge_slave_0 entered promiscuous mode [ 2739.674221] bridge0: port 2(bridge_slave_1) entered blocking state [ 2739.681361] bridge0: port 2(bridge_slave_1) entered disabled state [ 2739.688825] device bridge_slave_1 entered promiscuous mode [ 2739.696443] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2739.706555] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2739.742802] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2739.750245] team0: Port device team_slave_0 added [ 2739.756745] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2739.765321] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2739.773433] team0: Port device team_slave_1 added [ 2739.788849] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2739.810761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2739.817030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2739.845712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2739.860413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2739.866682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2739.897398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2739.920752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2739.929702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2739.937315] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2739.944668] team0: Port device team_slave_0 added [ 2739.951560] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2739.959006] team0: Port device team_slave_1 added [ 2739.993489] IPVS: ftp: loaded support on port[0] = 21 [ 2739.995577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2740.005084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2740.030607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2740.042693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2740.049447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2740.075403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2740.091109] device hsr_slave_0 entered promiscuous mode [ 2740.096859] device hsr_slave_1 entered promiscuous mode [ 2740.107036] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2740.115023] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2740.125896] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2740.132922] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2740.185775] device hsr_slave_0 entered promiscuous mode [ 2740.192484] device hsr_slave_1 entered promiscuous mode [ 2740.210052] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2740.224935] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2740.417210] chnl_net:caif_netlink_parms(): no params data found [ 2740.456867] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2740.491426] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2740.540823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2740.574705] bridge0: port 1(bridge_slave_0) entered blocking state [ 2740.581611] bridge0: port 1(bridge_slave_0) entered disabled state [ 2740.590281] device bridge_slave_0 entered promiscuous mode [ 2740.599255] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2740.607437] bridge0: port 2(bridge_slave_1) entered blocking state [ 2740.613940] bridge0: port 2(bridge_slave_1) entered disabled state [ 2740.621436] device bridge_slave_1 entered promiscuous mode [ 2740.645916] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2740.655377] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2740.681519] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2740.689139] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2740.696412] team0: Port device team_slave_0 added [ 2740.702248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2740.709482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2740.720345] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2740.726432] 8021q: adding VLAN 0 to HW filter on device team0 [ 2740.734536] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2740.742087] team0: Port device team_slave_1 added [ 2740.766638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2740.773334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2740.799741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2740.811763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2740.818386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2740.847952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2740.860673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2740.869745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2740.877109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2740.885671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2740.893772] bridge0: port 1(bridge_slave_0) entered blocking state [ 2740.900206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2740.907831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2740.916135] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2740.926296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2740.932898] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2740.951557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2740.959664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2740.967283] bridge0: port 2(bridge_slave_1) entered blocking state [ 2740.973735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2740.992212] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2741.001170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2741.014658] device hsr_slave_0 entered promiscuous mode [ 2741.021002] device hsr_slave_1 entered promiscuous mode [ 2741.027602] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2741.035327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2741.045276] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2741.053733] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2741.061835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2741.071351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2741.079545] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2741.085754] 8021q: adding VLAN 0 to HW filter on device team0 [ 2741.095562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2741.112033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2741.119635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2741.127450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2741.136215] bridge0: port 1(bridge_slave_0) entered blocking state [ 2741.142708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2741.150369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2741.160710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2741.171908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2741.181700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2741.190155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2741.198413] bridge0: port 2(bridge_slave_1) entered blocking state [ 2741.204787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2741.214074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2741.222676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2741.232560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2741.247805] Bluetooth: hci3 command 0x0409 tx timeout [ 2741.253740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2741.261871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2741.269955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2741.277571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2741.285512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2741.293522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2741.309014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2741.319864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2741.328422] Bluetooth: hci4 command 0x0409 tx timeout [ 2741.329471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2741.344811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2741.352542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2741.361165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2741.369143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2741.376668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2741.384838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2741.393081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2741.401623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2741.429347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2741.441156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2741.453296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2741.464773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2741.477425] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2741.487547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2741.509255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2741.516966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2741.528574] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2741.537102] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2741.546422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2741.553643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2741.560818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2741.568920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2741.584083] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2741.590717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2741.615714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2741.630533] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2741.643886] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2741.651863] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2741.660261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2741.667029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2741.680431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2741.734839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2741.745370] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2741.759199] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2741.765408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2741.782596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2741.792734] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2741.799795] 8021q: adding VLAN 0 to HW filter on device team0 [ 2741.810795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2741.818284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2741.826757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2741.836023] bridge0: port 1(bridge_slave_0) entered blocking state [ 2741.842475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2741.850608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2741.860824] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2741.870947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2741.880349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2741.889352] Bluetooth: hci5 command 0x0409 tx timeout [ 2741.889417] bridge0: port 2(bridge_slave_1) entered blocking state [ 2741.901014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2741.911555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2741.922424] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2741.933694] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2741.941741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2741.950894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2741.959452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2741.969082] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2741.979171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2741.989511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2741.996547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2742.005253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2742.013286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2742.024121] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2742.032717] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2742.040662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2742.049119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2742.059701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2742.069138] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2742.076769] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2742.084318] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2742.092097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2742.102363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2742.112815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2742.122174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2742.130579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2742.144693] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2742.152676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2742.166079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2742.175083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2742.182688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2742.192970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2742.202717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2742.213679] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2742.220275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2742.228594] device veth0_vlan entered promiscuous mode [ 2742.235543] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2742.244473] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2742.251934] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2742.258338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2742.266000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2742.282866] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2742.293284] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2742.305962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2742.313703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2742.322342] device veth1_vlan entered promiscuous mode [ 2742.330368] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2742.339305] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2742.346391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2742.354570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2742.361786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2742.369208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2742.375933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2742.383679] device veth0_vlan entered promiscuous mode [ 2742.395228] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2742.410670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2742.419710] device veth1_vlan entered promiscuous mode [ 2742.425867] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2742.439172] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2742.448363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2742.455665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2742.470293] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2742.482317] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2742.490922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2742.500050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2742.510240] device veth0_macvtap entered promiscuous mode [ 2742.516620] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2742.526902] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2742.540386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2742.547733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2742.556370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2742.568868] device veth0_macvtap entered promiscuous mode [ 2742.575381] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2742.585337] device veth1_macvtap entered promiscuous mode [ 2742.592123] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2742.599656] device veth1_macvtap entered promiscuous mode [ 2742.605809] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2742.617630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2742.629132] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2742.640802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2742.650170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2742.659886] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2742.667660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2742.675715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2742.683910] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2742.691784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2742.700390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2742.709726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2742.720199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2742.730318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2742.740851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2742.750495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2742.760844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2742.772234] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2742.779825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2742.792652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2742.801133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2742.809444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2742.821269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2742.834866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2742.844425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2742.855233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2742.864420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2742.874292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2742.884910] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2742.892411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2742.901314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2742.911415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2742.920877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2742.930982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2742.940717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2742.951021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2742.960252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2742.970049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2742.980567] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2742.987553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2742.995565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2743.003516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2743.011973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2743.020205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2743.038065] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2743.045396] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2743.053721] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2743.062523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2743.072901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.082184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2743.092050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.101253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2743.111127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.120666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2743.130475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.140916] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2743.147813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2743.158869] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2743.165525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2743.180932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2743.189154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2743.196541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2743.213379] device veth0_vlan entered promiscuous mode [ 2743.221139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2743.231652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2743.245955] device veth1_vlan entered promiscuous mode [ 2743.257614] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2743.274521] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2743.334520] Bluetooth: hci3 command 0x041b tx timeout [ 2743.346740] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2743.361611] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2743.373732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2743.384982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2743.392790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2743.400672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2743.409427] Bluetooth: hci4 command 0x041b tx timeout [ 2743.412952] device veth0_macvtap entered promiscuous mode [ 2743.421984] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2743.433206] device veth1_macvtap entered promiscuous mode [ 2743.441112] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2743.448404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2743.456145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2743.466527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2743.477848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2743.493782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2743.504772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.514961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2743.524791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.534060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2743.544155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.553668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2743.563537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.573204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2743.583092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.594321] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2743.601873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2743.611707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2743.619773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2743.629593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2743.640148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.650450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2743.660520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.669760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2743.680002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.689256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2743.699604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.709046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2743.719098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.729679] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2743.736709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2743.750606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2743.760389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:08:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:08:00 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x140a, 0x800, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x804) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x3, 0x80000, 0x6, &(0x7f0000000440)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={[], [], @private=0xa010100}, 0x2}}}, 0x84) r2 = request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)=']\x00', 0xfffffffffffffffc) keyctl$reject(0x13, 0x0, 0x3, 0x0, r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) 12:08:00 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) [ 2743.973170] Bluetooth: hci5 command 0x041b tx timeout 12:08:01 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:01 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:08:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:08:01 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:01 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x40, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$nfc_llcp(r1, &(0x7f00000050c0)=[{&(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "38f17014ac2916e308a052e2d03d258e5bd2798786bce64c404d9736b3fce2b0d492ce17bb5a79223efb85057357088254ca6b9caccc2870ab8b6b718c9d85"}, 0x60, 0x0, 0x0, &(0x7f0000000200)={0x28, 0x0, 0x0, "364e350ae24d6e48799abc10feda8a8a51"}, 0x28}], 0x1, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000000d80)=[{&(0x7f0000000780)={0x27, 0x1, 0x2, 0x6, 0xff, 0xe1, "532bdefc75303cac1efeec36011c89921d7e4d928de8d64593c167b8bdf928920e05929a582de1eda54f5f0764427c9c5b4f2ddbe493cf7d7076657bf7bac0", 0x2c}, 0x60, &(0x7f0000000d00)=[{&(0x7f0000000800)="60feff2ac1fd36723bf997fc46b4b29ca94f6b80cf541b194546fd29b0d3d1cd1a1872f70d39e101618f", 0x2a}, {&(0x7f0000000840)="5c52fa0d5a3296a9f963dfcade1c967ca590dd99f23e0d0df614bfb9484755ac8970eb5998211e02261b1ef4314ee2594ba61d0e849e6eaba10353a53bfa8b5e51695612624466bb0f3d272f2f2223d23cf73f24c064f6217df966c460b3a5323c100c5504cbf670b4bac9b18f822c5e5772583361668a7c2ce2af5d66f48401cb97facd814eeb324ae3d44572b139b507042cdf978f5b67ea9ffd5c48c3080bc4d87c0d8a8cbde9b1d7a97669509cd3b3885867ac158564f8cceb04f1c93b448ad7b8c090a62dd7a3d14cdf86508cfad2d326a2bd8aa673af6dd424", 0xdc}, {&(0x7f0000000940)="23404223e95c36f63ef4858a0bf8c7beb247620e67e839a6ee377e6e3d181e084d48b385527ce084f6987387fea309dac92696de28c96d98965f20d188bf128b13d024239468e585dbb27e98e6c98379b799d5d0c269a563ceb1b9dd2458bb808aa1f96f74cfcf85ba71a477860c4269cff31f3ef3086f", 0x77}, {&(0x7f00000009c0)="a85af1a345ca7f1909c6dd7c0a193975d50aa58218d4557060211704ef0786ae67a3d9c8f0d4050013d4c0dbb0f69cbaaf630a30b2efbc6695da29fc1f193e8ccd7e5a1dbbf33f236f90183a441801bdbe0db8a891a23f4f0c11e36dd0c679298e4755cd94b995cd75032f56e9b728ba9e7bba16200404e91f8a130c776f41ea38c0798fd13858902ccb81d8e5ded151abe20461da45750f77434073ef53758c871372e23d5b7f1a001f08907b47ac81d1d79b1e05c458ad5017c7ce183bd42474581acd207a512ea18d98e8cdbef92cb26341667bd94f0a", 0xd8}, {&(0x7f0000000ac0)="9493a7831125b9927ec6ca2e6a367e1f2eea74b7e9cbff2321816c545c6f1488e7c7", 0x22}, {&(0x7f0000000b00)="7206061ae01fc621ee2c99259f18be11b773380d39c1700ff7a3b81b89170f4e348f53ecd7c55dc65cbaba3923f12da2cc5bd528aa4920ac1e22585f495b98a00d549e04bc104125bca83c6d62db287cb4fdae7c418d2f366294507d306696fa23836e6b4dc3df505b6116af63407a34f340d7d7f9f3110825a96496e165e40a6afbe1af9a21d09be3ec0c62f7aab925be7d332bc8873f5cbc0b6210", 0x9c}, {&(0x7f0000000bc0)="714f072ac86ae50a4e8c84cecd30d9054c35fd7cc37e110f087267cc1d16df40786dd6c865594a4e2f6510a76efbf0dea57153de6b591b4d2455434b238f416e6600d69168dd9e1a922de5e2588ad29c099c30b2593c781190799e6758d4d8ac35570817422acfb407e1c190686cbe75332470a910f4a9455c0016f506be3577dee340324b994d9295338b0c9ea165ca8ee61b58d6668f5f33961e235f9cf1a2e780f1b490a835eb191c93f227e504cd3c189460e06e8b036064afb1ac3210b3d1d6a5a1f347c1a639", 0xc9}, {&(0x7f0000000cc0)="5a966adb6b05c805873fa3333f727366", 0x10}], 0x8, 0x0, 0x0, 0x904}], 0x1, 0x4000080) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@bcast, @bcast, 0x2, 0x20}) r2 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0x1405, 0x100, 0x70bd2a, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000001080)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x14}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x2a8, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2a}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_NODE={0x1c8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "909c56a9764e60ca3032834fea1e1e6fc17c99311625068be28f4d0c86f3955c14deb9"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "3745746a71b1f98d86e8f852dea5d8749e31020396e4034e8869cf0297dc5e43501671188bf9"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "fcd0a502b1bee921002994cd836648f2b78be4e2bdf46af41172da869aac"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0xe2, 0x3, "0c80e9c027e5381fe376e92076b7c42f0df58d655d81dc1de6d2a28bd23ebae31b0547ce18d46a261b3d6e1ee0d0d2de4e703d52b9263c838d7c0888eedb17992a0a8eba3471ab76880471f898832270dbae1f19579192390eb7ea95dbd2a9a3546ce53e0ff792183e2dbe38de62d8d3f57ce549163b8ca4b164777c77b889719744c9a52781e9d1d578892785a0991428bac05d0a3733727fb9596f0bc4996dd523888c43c467ff5d14f7d38723b6467e5ee566c1892f7341696666970681c59cba685676f3bf5a7170bd9a8c85a8051085ffb1cf08e56d5810158df8ef"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8374}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3fe000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf89}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x140e, 0x0, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008010}, 0x10) 12:08:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 12:08:01 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 12:08:01 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 12:08:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 12:08:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 2745.408773] Bluetooth: hci3 command 0x040f tx timeout [ 2745.488396] Bluetooth: hci4 command 0x040f tx timeout [ 2746.048489] Bluetooth: hci5 command 0x040f tx timeout [ 2746.664457] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2746.675348] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2746.682570] syz-executor.3 cpuset= [ 2746.690478] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2746.696520] / mems_allowed=0-1 [ 2746.716056] CPU: 0 PID: 30354 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2746.718572] syz-executor.5 cpuset= [ 2746.723969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2746.723979] Call Trace: [ 2746.727551] / [ 2746.736919] dump_stack+0x1b2/0x281 [ 2746.739635] syz-executor.0 cpuset= [ 2746.741216] warn_alloc.cold+0x96/0x1cc [ 2746.744829] / [ 2746.748391] ? zone_watermark_ok_safe+0x220/0x220 [ 2746.758908] __alloc_pages_nodemask+0x2127/0x2720 [ 2746.761808] mems_allowed=0-1 [ 2746.763769] ? lock_acquire+0x170/0x3f0 [ 2746.770856] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2746.775713] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2746.779107] mems_allowed=0-1 [ 2746.781166] ? __mutex_unlock_slowpath+0x75/0x770 [ 2746.789102] alloc_pages_current+0x155/0x260 [ 2746.793528] ion_page_pool_alloc+0x118/0x1b0 [ 2746.797958] ion_system_heap_allocate+0x133/0x8c0 [ 2746.802815] ? ion_alloc+0x187/0x810 [ 2746.806549] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2746.812010] ? ion_system_contig_heap_create+0x130/0x130 [ 2746.817466] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2746.822498] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2746.827347] ion_alloc+0x204/0x810 [ 2746.830895] ? ion_dma_buf_release+0x40/0x40 [ 2746.835310] ? __might_fault+0x177/0x1b0 [ 2746.839380] ion_ioctl+0xea/0x1f0 [ 2746.842841] ? ion_query_heaps+0x360/0x360 [ 2746.847087] ? lock_acquire+0x170/0x3f0 [ 2746.851066] ? lock_downgrade+0x740/0x740 [ 2746.855219] ? ion_query_heaps+0x360/0x360 [ 2746.859455] do_vfs_ioctl+0x75a/0xff0 [ 2746.863262] ? ioctl_preallocate+0x1a0/0x1a0 [ 2746.867672] ? lock_downgrade+0x740/0x740 [ 2746.871831] ? __fget+0x225/0x360 [ 2746.875290] ? do_vfs_ioctl+0xff0/0xff0 [ 2746.879296] ? security_file_ioctl+0x83/0xb0 [ 2746.883708] SyS_ioctl+0x7f/0xb0 [ 2746.887075] ? do_vfs_ioctl+0xff0/0xff0 [ 2746.891061] do_syscall_64+0x1d5/0x640 [ 2746.894960] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2746.900149] RIP: 0033:0x45e219 [ 2746.903334] RSP: 002b:00007fa35386fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2746.911059] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2746.918326] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2746.925597] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2746.932882] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2746.940148] R13: 00007ffc07929f4f R14: 00007fa3538709c0 R15: 000000000119bf8c [ 2746.947439] CPU: 1 PID: 30337 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2746.955337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2746.964638] warn_alloc_show_mem: 1 callbacks suppressed [ 2746.964642] Mem-Info: [ 2746.964694] Call Trace: [ 2746.970251] active_anon:16564 inactive_anon:60855 isolated_anon:0 [ 2746.970251] active_file:1858 inactive_file:4796 isolated_file:12 [ 2746.970251] unevictable:0 dirty:98 writeback:0 unstable:0 [ 2746.970251] slab_reclaimable:13167 slab_unreclaimable:113661 [ 2746.970251] mapped:57252 shmem:62221 pagetables:805 bounce:0 [ 2746.970251] free:131075 free_pcp:254 free_cma:0 [ 2746.972474] dump_stack+0x1b2/0x281 [ 2746.972489] warn_alloc.cold+0x96/0x1cc [ 2746.972502] ? zone_watermark_ok_safe+0x220/0x220 [ 2746.975260] Node 0 active_anon:65732kB inactive_anon:227164kB active_file:7340kB inactive_file:19112kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:228888kB dirty:340kB writeback:0kB shmem:232500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2747.008934] __alloc_pages_nodemask+0x2127/0x2720 [ 2747.008950] ? _raw_spin_unlock_irq+0x24/0x80 [ 2747.008964] ? lock_acquire+0x170/0x3f0 [ 2747.008978] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2747.008998] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2747.009009] ? __mutex_unlock_slowpath+0x75/0x770 [ 2747.009022] alloc_pages_current+0x155/0x260 [ 2747.009036] ion_page_pool_alloc+0x118/0x1b0 [ 2747.009046] ion_system_heap_allocate+0x133/0x8c0 [ 2747.009056] ? ion_alloc+0x187/0x810 [ 2747.009065] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2747.009076] ? ion_system_contig_heap_create+0x130/0x130 [ 2747.009085] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2747.009095] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2747.009108] ion_alloc+0x204/0x810 [ 2747.009123] ? ion_dma_buf_release+0x40/0x40 [ 2747.009136] ? __might_fault+0x177/0x1b0 [ 2747.009148] ion_ioctl+0xea/0x1f0 [ 2747.009159] ? ion_query_heaps+0x360/0x360 [ 2747.009171] ? lock_acquire+0x170/0x3f0 [ 2747.009180] ? lock_downgrade+0x740/0x740 [ 2747.009188] ? ion_query_heaps+0x360/0x360 [ 2747.009201] do_vfs_ioctl+0x75a/0xff0 [ 2747.014292] Node 1 active_anon:524kB inactive_anon:16256kB active_file:92kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:52kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2747.016953] ? ioctl_preallocate+0x1a0/0x1a0 [ 2747.016965] ? lock_downgrade+0x740/0x740 [ 2747.016979] ? __fget+0x225/0x360 [ 2747.016994] ? do_vfs_ioctl+0xff0/0xff0 [ 2747.021964] Node 0 [ 2747.050287] ? security_file_ioctl+0x83/0xb0 [ 2747.050299] SyS_ioctl+0x7f/0xb0 [ 2747.050309] ? do_vfs_ioctl+0xff0/0xff0 [ 2747.050321] do_syscall_64+0x1d5/0x640 [ 2747.050337] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2747.050345] RIP: 0033:0x45e219 [ 2747.050349] RSP: 002b:00007faad8dddc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2747.050358] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2747.050363] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2747.050367] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2747.050372] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2747.050377] R13: 00007ffc7866d97f R14: 00007faad8dde9c0 R15: 000000000119bf8c [ 2747.059362] CPU: 1 PID: 30341 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2747.066262] DMA free:11112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2747.068692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2747.068697] Call Trace: [ 2747.068718] dump_stack+0x1b2/0x281 [ 2747.068732] warn_alloc.cold+0x96/0x1cc [ 2747.068743] ? zone_watermark_ok_safe+0x220/0x220 [ 2747.068765] __alloc_pages_nodemask+0x2127/0x2720 [ 2747.068774] ? io_schedule_timeout+0x140/0x140 [ 2747.068789] ? lock_acquire+0x170/0x3f0 [ 2747.068803] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2747.068818] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2747.068831] ? __mutex_unlock_slowpath+0x75/0x770 [ 2747.068847] alloc_pages_current+0x155/0x260 [ 2747.068863] ion_page_pool_alloc+0x118/0x1b0 [ 2747.068874] ion_system_heap_allocate+0x133/0x8c0 [ 2747.068886] ? ion_alloc+0x187/0x810 [ 2747.068896] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2747.068978] ? ion_system_contig_heap_create+0x130/0x130 [ 2747.068993] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2747.069005] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2747.069017] ion_alloc+0x204/0x810 [ 2747.069032] ? ion_dma_buf_release+0x40/0x40 [ 2747.069044] ? __might_fault+0x177/0x1b0 [ 2747.069057] ion_ioctl+0xea/0x1f0 [ 2747.069066] ? ion_query_heaps+0x360/0x360 [ 2747.069078] ? lock_acquire+0x170/0x3f0 [ 2747.069087] ? lock_downgrade+0x740/0x740 [ 2747.069095] ? ion_query_heaps+0x360/0x360 [ 2747.069106] do_vfs_ioctl+0x75a/0xff0 [ 2747.069118] ? ioctl_preallocate+0x1a0/0x1a0 [ 2747.069127] ? lock_downgrade+0x740/0x740 [ 2747.069141] ? __fget+0x225/0x360 [ 2747.069149] ? do_vfs_ioctl+0xff0/0xff0 [ 2747.069159] ? security_file_ioctl+0x83/0xb0 [ 2747.069169] SyS_ioctl+0x7f/0xb0 [ 2747.069176] ? do_vfs_ioctl+0xff0/0xff0 [ 2747.069187] do_syscall_64+0x1d5/0x640 [ 2747.069204] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2747.069212] RIP: 0033:0x45e219 [ 2747.069218] RSP: 002b:00007fa6a8664c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2747.069229] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2747.069235] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2747.069241] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2747.069247] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2747.069253] R13: 00007ffdb3664baf R14: 00007fa6a86659c0 R15: 000000000119bf8c [ 2747.488970] Bluetooth: hci3 command 0x0419 tx timeout [ 2747.496410] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2747.526615] Node 0 DMA32 free:177604kB min:36200kB low:45248kB high:54296kB active_anon:65732kB inactive_anon:227164kB active_file:7364kB inactive_file:20112kB unevictable:0kB writepending:380kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3148kB bounce:0kB free_pcp:360kB local_pcp:312kB free_cma:0kB [ 2747.556798] lowmem_reserve[]: 0 0 0 0 0 [ 2747.560942] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2747.569048] Bluetooth: hci4 command 0x0419 tx timeout [ 2747.587955] lowmem_reserve[]: 0 0 0 0 0 [ 2747.596152] Node 1 Normal free:54500kB min:53696kB low:67120kB high:80544kB active_anon:588kB inactive_anon:16256kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:672kB local_pcp:0kB free_cma:0kB [ 2747.624864] lowmem_reserve[]: 0 0 0 0 0 [ 2747.629124] Node 0 DMA: 4*4kB (U) 11*8kB (U) 8*16kB (U) 10*32kB (U) 1*64kB (U) 4*128kB (U) 7*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 11112kB [ 2747.644171] Node 0 DMA32: 0*4kB 146*8kB (UE) 106*16kB (UE) 3682*32kB (UE) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 120944kB [ 2747.658427] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2747.669320] Node 1 Normal: 267*4kB (UM) 623*8kB (UM) 570*16kB (UM) 385*32kB (UM) 120*64kB (UM) 31*128kB (UM) 6*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 3*4096kB (U) = 54500kB [ 2747.685432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2747.695888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2747.705163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2747.715292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2747.724556] 69038 total pagecache pages [ 2747.729133] 0 pages in swap cache [ 2747.732678] Swap cache stats: add 0, delete 0, find 0/0 [ 2747.738122] Free swap = 0kB [ 2747.743499] Total swap = 0kB [ 2747.746606] 2097051 pages RAM [ 2747.750653] 0 pages HighMem/MovableOnly [ 2747.754702] 363840 pages reserved [ 2747.758206] 0 pages cma reserved [ 2748.026793] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2748.092943] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2748.098138] CPU: 0 PID: 28176 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2748.106022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2748.115385] Call Trace: [ 2748.117987] dump_stack+0x1b2/0x281 [ 2748.121618] dump_header+0x178/0x82f [ 2748.125342] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2748.129275] Bluetooth: hci5 command 0x0419 tx timeout [ 2748.130537] ? ___ratelimit+0x2cd/0x530 [ 2748.140068] oom_kill_process.cold+0x10/0xb18 [ 2748.144582] out_of_memory+0xe3e/0x1190 [ 2748.148681] ? oom_killer_disable+0x1c0/0x1c0 [ 2748.153180] ? mutex_trylock+0x152/0x1a0 [ 2748.157247] __alloc_pages_nodemask+0x23e1/0x2720 [ 2748.162110] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2748.166973] alloc_pages_current+0x155/0x260 [ 2748.171401] filemap_fault+0xea3/0x1980 [ 2748.175391] ext4_filemap_fault+0x84/0xb0 [ 2748.179576] __do_fault+0xfa/0x380 [ 2748.183118] __handle_mm_fault+0x2497/0x4620 [ 2748.187529] ? vm_insert_page+0x7c0/0x7c0 [ 2748.191683] ? __fd_install+0x227/0x5c0 [ 2748.195663] ? putname+0xcd/0x110 [ 2748.199130] handle_mm_fault+0x391/0x860 [ 2748.203200] __do_page_fault+0x549/0xad0 [ 2748.207270] ? spurious_fault+0x640/0x640 [ 2748.211426] ? do_page_fault+0x60/0x500 [ 2748.215439] ? page_fault+0x2f/0x50 [ 2748.219075] page_fault+0x45/0x50 [ 2748.222552] RIP: 0002:0x32 [ 2748.225399] RSP: 0003:00007ffdb3664e30 EFLAGS: 0000001f [ 2748.265360] Mem-Info: [ 2748.277480] active_anon:16635 inactive_anon:60855 isolated_anon:0 [ 2748.277480] active_file:28 inactive_file:1 isolated_file:0 [ 2748.277480] unevictable:0 dirty:20 writeback:0 unstable:0 [ 2748.277480] slab_reclaimable:13164 slab_unreclaimable:114196 [ 2748.277480] mapped:52753 shmem:62221 pagetables:805 bounce:0 [ 2748.277480] free:25189 free_pcp:30 free_cma:0 [ 2748.355800] Node 0 active_anon:65952kB inactive_anon:227164kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211012kB dirty:80kB writeback:0kB shmem:232500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2748.502994] Node 1 active_anon:588kB inactive_anon:16256kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2748.639967] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2748.810105] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2748.815180] Node 0 DMA32 free:35976kB min:36200kB low:45248kB high:54296kB active_anon:66024kB inactive_anon:227164kB active_file:52kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3148kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2749.020829] lowmem_reserve[]: 0 0 0 0 0 [ 2749.024871] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2749.173505] lowmem_reserve[]: 0 0 0 0 0 [ 2749.177547] Node 1 Normal free:53688kB min:53696kB low:67120kB high:80544kB active_anon:588kB inactive_anon:16256kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2749.360670] lowmem_reserve[]: 0 0 0 0 0 [ 2749.364711] Node 0 DMA: 0*4kB 6*8kB (U) 8*16kB (U) 10*32kB (U) 1*64kB (U) 4*128kB (U) 7*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 11056kB [ 2749.465342] Node 0 DMA32: 1340*4kB (ME) 481*8kB (ME) 180*16kB (UME) 543*32kB (UME) 47*64kB (UM) 13*128kB (UM) 4*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36184kB [ 2749.558934] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2749.633756] Node 1 Normal: 18*4kB (UM) 526*8kB (UM) 554*16kB (UM) 375*32kB (UM) 110*64kB (UM) 22*128kB (UM) 5*256kB (M) 4*512kB (M) 3*1024kB (M) 0*2048kB 3*4096kB (U) = 53688kB [ 2749.718687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2749.782396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2749.833939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2749.887635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2749.963357] 62252 total pagecache pages [ 2749.967372] 0 pages in swap cache [ 2750.000407] Swap cache stats: add 0, delete 0, find 0/0 [ 2750.005806] Free swap = 0kB [ 2750.008820] Total swap = 0kB [ 2750.073458] 2097051 pages RAM [ 2750.076592] 0 pages HighMem/MovableOnly [ 2750.114196] 363840 pages reserved [ 2750.118844] 0 pages cma reserved [ 2750.164190] Out of memory (oom_kill_allocating_task): Kill process 28176 (syz-executor.0) score 0 or sacrifice child [ 2750.232165] Killed process 30341 (syz-executor.0) total-vm:93348kB, anon-rss:156kB, file-rss:34816kB, shmem-rss:0kB [ 2750.324166] oom_reaper: reaped process 30341 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2750.391354] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2750.426733] systemd-journal cpuset=/ mems_allowed=0-1 [ 2750.457168] CPU: 0 PID: 29520 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 2750.465202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2750.469119] syz-executor.0: [ 2750.474554] Call Trace: [ 2750.474566] page allocation failure: order:0 [ 2750.477579] dump_stack+0x1b2/0x281 [ 2750.485695] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2750.488176] dump_header+0x178/0x82f [ 2750.488190] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2750.495906] syz-executor.0 cpuset= [ 2750.499525] ? ___ratelimit+0x2cd/0x530 [ 2750.499538] oom_kill_process.cold+0x10/0xb18 [ 2750.499556] out_of_memory+0xe3e/0x1190 [ 2750.499570] ? oom_killer_disable+0x1c0/0x1c0 [ 2750.499579] ? mutex_trylock+0x152/0x1a0 [ 2750.499589] __alloc_pages_nodemask+0x23e1/0x2720 [ 2750.499608] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2750.508148] / [ 2750.508248] alloc_pages_current+0x155/0x260 [ 2750.512296] mems_allowed=0-1 [ 2750.516809] filemap_fault+0xea3/0x1980 [ 2750.552163] ext4_filemap_fault+0x84/0xb0 [ 2750.556327] __do_fault+0xfa/0x380 [ 2750.559862] __handle_mm_fault+0x2497/0x4620 [ 2750.564269] ? ep_poll+0x1ab/0xa50 [ 2750.567809] ? vm_insert_page+0x7c0/0x7c0 [ 2750.571964] handle_mm_fault+0x391/0x860 [ 2750.576023] __do_page_fault+0x549/0xad0 [ 2750.580086] ? spurious_fault+0x640/0x640 [ 2750.584236] ? do_page_fault+0x60/0x500 [ 2750.588218] ? page_fault+0x2f/0x50 [ 2750.591866] page_fault+0x45/0x50 [ 2750.595314] RIP: 0001:0x1 [ 2750.598061] RSP: 25c1310:00007ffce03c3360 EFLAGS: 7ffce03c3170 [ 2750.598088] CPU: 1 PID: 30341 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2750.611941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2750.616866] Mem-Info: [ 2750.621295] Call Trace: [ 2750.621318] dump_stack+0x1b2/0x281 [ 2750.621331] warn_alloc.cold+0x96/0x1cc [ 2750.621348] ? zone_watermark_ok_safe+0x220/0x220 [ 2750.623764] active_anon:16628 inactive_anon:60855 isolated_anon:0 [ 2750.623764] active_file:16 inactive_file:15 isolated_file:0 [ 2750.623764] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2750.623764] slab_reclaimable:13158 slab_unreclaimable:114155 [ 2750.623764] mapped:52734 shmem:62221 pagetables:805 bounce:0 [ 2750.623764] free:13947 free_pcp:69 free_cma:0 [ 2750.626335] ? usleep_range+0x130/0x130 [ 2750.629996] Node 0 active_anon:65924kB inactive_anon:227164kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210936kB dirty:0kB writeback:0kB shmem:232500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2750.633936] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2750.638783] Node 1 active_anon:588kB inactive_anon:16256kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2750.671936] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2750.671947] ? run_timer_softirq+0x5a0/0x5a0 [ 2750.671965] __alloc_pages_nodemask+0x2127/0x2720 [ 2750.671980] ? lock_acquire+0x170/0x3f0 [ 2750.676120] Node 0 [ 2750.703743] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2750.703755] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2750.703772] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2750.703786] ? retint_kernel+0x2d/0x2d [ 2750.708895] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2750.735636] alloc_pages_current+0x155/0x260 [ 2750.735653] ion_page_pool_alloc+0x118/0x1b0 [ 2750.735663] ion_system_heap_allocate+0x133/0x8c0 [ 2750.735677] ? ion_alloc+0x187/0x810 [ 2750.740715] lowmem_reserve[]: [ 2750.745109] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2750.750489] 0 [ 2750.754425] ? ion_system_contig_heap_create+0x130/0x130 [ 2750.756624] 2717 2718 [ 2750.761466] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2750.761479] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2750.761492] ion_alloc+0x204/0x810 [ 2750.761507] ? ion_dma_buf_release+0x40/0x40 [ 2750.766016] 2718 [ 2750.771471] ? __might_fault+0x177/0x1b0 [ 2750.771487] ion_ioctl+0xea/0x1f0 [ 2750.771499] ? ion_query_heaps+0x360/0x360 [ 2750.771512] ? lock_acquire+0x170/0x3f0 [ 2750.775407] 2718 [ 2750.801000] ? lock_downgrade+0x740/0x740 [ 2750.801011] ? ion_query_heaps+0x360/0x360 [ 2750.801027] do_vfs_ioctl+0x75a/0xff0 [ 2750.801040] ? ioctl_preallocate+0x1a0/0x1a0 [ 2750.810382] ? lock_downgrade+0x740/0x740 [ 2750.810396] ? __fget+0x225/0x360 [ 2750.810405] ? do_vfs_ioctl+0xff0/0xff0 [ 2750.810417] ? security_file_ioctl+0x83/0xb0 [ 2750.810426] SyS_ioctl+0x7f/0xb0 [ 2750.815257] Node 0 [ 2750.818968] ? do_vfs_ioctl+0xff0/0xff0 [ 2750.822126] DMA32 free:18032kB min:36200kB low:45248kB high:54296kB active_anon:65924kB inactive_anon:227164kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3148kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB [ 2750.827519] do_syscall_64+0x1d5/0x640 [ 2750.829328] lowmem_reserve[]: [ 2750.834749] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2750.837218] 0 [ 2750.842240] RIP: 0033:0x45e219 [ 2750.842246] RSP: 002b:00007fa6a8664c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2750.842254] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2750.842259] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2750.842264] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2750.842268] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2750.842274] R13: 00007ffdb3664baf R14: 00007fa6a86659c0 R15: 000000000119bf8c [ 2750.847245] warn_alloc_show_mem: 2 callbacks suppressed [ 2750.847249] Mem-Info: [ 2750.871589] 0 [ 2750.877058] active_anon:16628 inactive_anon:60855 isolated_anon:0 [ 2750.877058] active_file:16 inactive_file:15 isolated_file:0 [ 2750.877058] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2750.877058] slab_reclaimable:13158 slab_unreclaimable:114155 [ 2750.877058] mapped:52734 shmem:62221 pagetables:805 bounce:0 [ 2750.877058] free:13916 free_pcp:99 free_cma:0 [ 2750.895657] 0 [ 2750.899975] Node 0 active_anon:65924kB inactive_anon:227164kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210936kB dirty:0kB writeback:0kB shmem:232500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2750.913965] 0 [ 2750.917719] Node 1 active_anon:588kB inactive_anon:16256kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2750.966733] 0 [ 2750.976140] Node 0 [ 2750.985534] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2751.008495] Node 0 [ 2751.017398] lowmem_reserve[]: [ 2751.056385] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2751.084558] 0 [ 2751.111574] lowmem_reserve[]: [ 2751.138370] 2717 [ 2751.142199] 0 [ 2751.165262] 2718 [ 2751.172627] 0 0 0 0 [ 2751.183556] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:588kB inactive_anon:16256kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2751.193816] 2718 [ 2751.219049] lowmem_reserve[]: 0 0 0 0 0 [ 2751.225171] Node 0 DMA: 0*4kB 0*8kB 6*16kB (U) 10*32kB (U) 1*64kB (U) 4*128kB (U) 7*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 10976kB [ 2751.236215] 2718 [ 2751.245977] Node 0 [ 2751.248059] DMA32: 1343*4kB (ME) 481*8kB (UME) 179*16kB (ME) 32*32kB (ME) 23*64kB (M) 10*128kB (UM) 4*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17908kB [ 2751.258274] Node 0 [ 2751.271884] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2751.282218] DMA32 free:17908kB min:36200kB low:45248kB high:54296kB active_anon:65924kB inactive_anon:227164kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3148kB bounce:0kB free_pcp:264kB local_pcp:144kB free_cma:0kB [ 2751.287223] Node 1 Normal: 17*4kB (M) 17*8kB (UM) 13*16kB (UM) 8*32kB (M) 72*64kB (UM) 22*128kB (UM) 5*256kB (M) 4*512kB (M) 3*1024kB (M) 0*2048kB 3*4096kB (U) = 26780kB [ 2751.328259] lowmem_reserve[]: [ 2751.344472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2751.353953] 0 0 0 0 0 [ 2751.357193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2751.358994] Node 0 [ 2751.378160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2751.379438] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2751.381125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2751.399938] lowmem_reserve[]: [ 2751.425257] 62252 total pagecache pages [ 2751.435345] 0 0 0 0 0 [ 2751.437883] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:588kB inactive_anon:16256kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2751.440425] 0 pages in swap cache [ 2751.477604] lowmem_reserve[]: 0 0 0 0 0 [ 2751.480886] Swap cache stats: add 0, delete 0, find 0/0 [ 2751.483809] Node 0 [ 2751.486978] Free swap = 0kB [ 2751.486988] DMA: [ 2751.502696] Total swap = 0kB [ 2751.503537] 0*4kB [ 2751.504787] 2097051 pages RAM [ 2751.507830] 0*8kB [ 2751.516376] 0 pages HighMem/MovableOnly [ 2751.518155] 6*16kB [ 2751.518545] 363840 pages reserved [ 2751.528817] (U) 10*32kB (U) 1*64kB (U) 4*128kB (U) 7*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 10976kB [ 2751.531237] 0 pages cma reserved [ 2751.551092] Node 0 DMA32: 1343*4kB (ME) 486*8kB (UME) 179*16kB (ME) 32*32kB (ME) 23*64kB (M) 10*128kB (UM) 4*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17948kB [ 2751.554525] Out of memory (oom_kill_allocating_task): Kill process 29520 (systemd-journal) score 0 or sacrifice child [ 2751.577802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2751.577850] Node 1 Normal: 17*4kB (M) 17*8kB (UM) 13*16kB (UM) 8*32kB (M) 72*64kB (UM) 22*128kB (UM) 5*256kB (M) 4*512kB (M) 3*1024kB (M) 0*2048kB 3*4096kB (U) = 26780kB [ 2751.577933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2751.577951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2751.577960] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2751.577966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2751.577970] 62252 total pagecache pages [ 2751.577981] 0 pages in swap cache [ 2751.577987] Swap cache stats: add 0, delete 0, find 0/0 [ 2751.577990] Free swap = 0kB [ 2751.577993] Total swap = 0kB [ 2751.577999] 2097051 pages RAM [ 2751.578002] 0 pages HighMem/MovableOnly [ 2751.578005] 363840 pages reserved [ 2751.578008] 0 pages cma reserved [ 2751.869282] Killed process 29520 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1972kB [ 2751.910177] oom_reaper: reaped process 29520 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2040kB [ 2752.076053] oom_reaper: reaped process 30337 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2752.150409] systemd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2752.162659] systemd cpuset=/ mems_allowed=0-1 [ 2752.167186] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.217-syzkaller #0 [ 2752.174113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2752.183480] Call Trace: [ 2752.186062] dump_stack+0x1b2/0x281 [ 2752.189692] dump_header+0x178/0x82f [ 2752.193392] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2752.198485] ? ___ratelimit+0x2cd/0x530 [ 2752.202562] oom_kill_process.cold+0x10/0xb18 [ 2752.207060] ? lock_downgrade+0x740/0x740 [ 2752.211197] out_of_memory+0x2dc/0x1190 [ 2752.215163] ? oom_killer_disable+0x1c0/0x1c0 [ 2752.219661] ? mutex_trylock+0x152/0x1a0 [ 2752.223712] __alloc_pages_nodemask+0x23e1/0x2720 [ 2752.228563] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2752.233432] ? cache_grow_begin+0x41/0x630 [ 2752.237654] cache_grow_begin+0x91/0x630 [ 2752.241705] ? cache_grow_begin+0x91/0x630 [ 2752.245952] fallback_alloc+0x207/0x2c0 [ 2752.250025] kmem_cache_alloc+0x1e5/0x3c0 [ 2752.254372] getname_flags+0xc8/0x550 [ 2752.258162] do_sys_open+0x1ce/0x410 [ 2752.261861] ? filp_open+0x60/0x60 [ 2752.265394] ? __do_page_fault+0x159/0xad0 [ 2752.269616] ? do_syscall_64+0x4c/0x640 [ 2752.273604] ? do_sys_open+0x410/0x410 [ 2752.277490] do_syscall_64+0x1d5/0x640 [ 2752.281389] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2752.286595] RIP: 0033:0x7f3d515a970d [ 2752.290290] RSP: 002b:00007ffc9ea6adf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2752.298001] RAX: ffffffffffffffda RBX: 000055db494bad50 RCX: 00007f3d515a970d [ 2752.305287] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007ffc9ea6aed0 [ 2752.312544] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 2752.319888] R10: 0000000000080000 R11: 0000000000000293 R12: 00007f3d52ce37b4 [ 2752.327146] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000002 [ 2752.336773] Mem-Info: [ 2752.339198] active_anon:16501 inactive_anon:60854 isolated_anon:0 [ 2752.339198] active_file:23 inactive_file:31 isolated_file:0 [ 2752.339198] unevictable:0 dirty:20 writeback:0 unstable:0 [ 2752.339198] slab_reclaimable:13155 slab_unreclaimable:113531 [ 2752.339198] mapped:52225 shmem:62221 pagetables:787 bounce:0 [ 2752.339198] free:14425 free_pcp:0 free_cma:0 [ 2752.353143] syz-executor.0: [ 2752.375261] Node 0 active_anon:65404kB inactive_anon:227160kB active_file:168kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:232500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2752.408793] Node 1 active_anon:600kB inactive_anon:16256kB active_file:24kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:80kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2752.425756] page allocation failure: order:4 [ 2752.442387] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2752.456519] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2752.485616] lowmem_reserve[]: [ 2752.491146] (null) [ 2752.497446] 0 2717 2718 2718 2718 [ 2752.498010] syz-executor.0 cpuset= [ 2752.505761] syz-executor.5: [ 2752.508557] Node 0 [ 2752.509450] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2752.517055] DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:65404kB inactive_anon:227160kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3076kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2752.528986] / [ 2752.556421] lowmem_reserve[]: 0 0 0 0 0 [ 2752.562177] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2752.567722] syz-executor.5 cpuset= [ 2752.590279] lowmem_reserve[]: 0 0 0 0 0 [ 2752.598737] Node 1 Normal free:26424kB min:53696kB low:67120kB high:80544kB active_anon:600kB inactive_anon:16256kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:80kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2752.601818] mems_allowed=0-1 [ 2752.629981] lowmem_reserve[]: 0 0 0 0 0 [ 2752.634274] Node 0 DMA: 0*4kB 0*8kB 6*16kB (U) 10*32kB (U) 1*64kB (U) 4*128kB (U) 7*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 10976kB [ 2752.643024] / mems_allowed=0-1 [ 2752.648417] Node 0 DMA32: 1335*4kB (UME) 491*8kB (UME) 180*16kB (UME) 34*32kB (UME) 24*64kB (M) 10*128kB (UM) 4*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18100kB [ 2752.664589] CPU: 0 PID: 30337 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2752.671945] Node 0 [ 2752.677566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2752.677574] Call Trace: [ 2752.679887] Normal: [ 2752.689179] dump_stack+0x1b2/0x281 [ 2752.697688] warn_alloc.cold+0x96/0x1cc [ 2752.701668] ? zone_watermark_ok_safe+0x220/0x220 [ 2752.706513] ? usleep_range+0x130/0x130 [ 2752.710489] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2752.711673] 0*4kB 0*8kB [ 2752.715631] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2752.715634] 0*16kB 0*32kB [ 2752.718319] ? run_timer_softirq+0x5a0/0x5a0 [ 2752.730590] __alloc_pages_nodemask+0x2127/0x2720 [ 2752.735454] ? lock_acquire+0x170/0x3f0 [ 2752.739412] 0*64kB 0*128kB 0*256kB [ 2752.739456] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2752.739471] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2752.743087] 0*512kB [ 2752.747929] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2752.760163] ? alloc_pages_current+0x15d/0x260 [ 2752.764743] alloc_pages_current+0x155/0x260 [ 2752.769152] ion_page_pool_alloc+0x118/0x1b0 [ 2752.771776] 0*1024kB 0*2048kB [ 2752.773577] ion_system_heap_allocate+0x133/0x8c0 [ 2752.773588] ? ion_alloc+0x187/0x810 [ 2752.776769] 0*4096kB [ 2752.781629] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2752.781642] ? ion_system_contig_heap_create+0x130/0x130 [ 2752.781651] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2752.781663] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2752.781674] ion_alloc+0x204/0x810 [ 2752.781689] ? ion_dma_buf_release+0x40/0x40 [ 2752.781701] ? __might_fault+0x177/0x1b0 [ 2752.799413] = 0kB [ 2752.803914] ion_ioctl+0xea/0x1f0 [ 2752.808738] Node 1 [ 2752.812301] ? ion_query_heaps+0x360/0x360 [ 2752.812314] ? lock_acquire+0x170/0x3f0 [ 2752.812322] ? lock_downgrade+0x740/0x740 [ 2752.812329] ? ion_query_heaps+0x360/0x360 [ 2752.812339] do_vfs_ioctl+0x75a/0xff0 [ 2752.812350] ? ioctl_preallocate+0x1a0/0x1a0 [ 2752.812357] ? lock_downgrade+0x740/0x740 [ 2752.812369] ? __fget+0x225/0x360 [ 2752.812379] ? do_vfs_ioctl+0xff0/0xff0 [ 2752.812392] ? security_file_ioctl+0x83/0xb0 [ 2752.830069] Normal: [ 2752.832786] SyS_ioctl+0x7f/0xb0 [ 2752.836788] 22*4kB [ 2752.840943] ? do_vfs_ioctl+0xff0/0xff0 [ 2752.840957] do_syscall_64+0x1d5/0x640 [ 2752.840973] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2752.840982] RIP: 0033:0x45e219 [ 2752.840986] RSP: 002b:00007faad8dddc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2752.840999] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2752.871702] (UM) [ 2752.872808] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2752.876165] 18*8kB [ 2752.878390] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2752.892269] (UM) [ 2752.894595] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2752.919463] 13*16kB [ 2752.921140] R13: 00007ffc7866d97f R14: 00007faad8dde9c0 R15: 000000000119bf8c [ 2752.928408] (M) [ 2752.947801] CPU: 1 PID: 30341 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2752.957651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2752.958981] Mem-Info: [ 2752.968307] Call Trace: [ 2752.968332] dump_stack+0x1b2/0x281 [ 2752.968345] warn_alloc.cold+0x96/0x1cc [ 2752.968357] ? zone_watermark_ok_safe+0x220/0x220 [ 2752.968379] __alloc_pages_nodemask+0x2127/0x2720 [ 2752.970856] active_anon:16501 inactive_anon:60854 isolated_anon:0 [ 2752.970856] active_file:48 inactive_file:0 isolated_file:0 [ 2752.970856] unevictable:0 dirty:20 writeback:0 unstable:0 [ 2752.970856] slab_reclaimable:13155 slab_unreclaimable:113531 [ 2752.970856] mapped:52225 shmem:62221 pagetables:787 bounce:0 [ 2752.970856] free:13875 free_pcp:0 free_cma:0 [ 2752.973738] ? retint_kernel+0x2d/0x2d [ 2752.977369] Node 0 active_anon:65404kB inactive_anon:227160kB active_file:168kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:232500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2752.981330] ? lock_acquire+0x170/0x3f0 [ 2752.981346] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2752.981364] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2752.981376] ? __mutex_unlock_slowpath+0x75/0x770 [ 2752.986228] Node 1 active_anon:600kB inactive_anon:16256kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:80kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2752.991230] alloc_pages_current+0x155/0x260 [ 2752.991247] ion_page_pool_alloc+0x118/0x1b0 [ 2752.991259] ion_system_heap_allocate+0x133/0x8c0 [ 2752.991289] ? _raw_spin_unlock+0x29/0x40 [ 2753.024389] Node 0 [ 2753.028236] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2753.057684] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2753.060145] ? ion_system_contig_heap_create+0x130/0x130 [ 2753.060157] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2753.060172] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2753.065009] lowmem_reserve[]: [ 2753.070459] ion_alloc+0x27a/0x810 [ 2753.070475] ? ion_dma_buf_release+0x40/0x40 [ 2753.070487] ? __might_fault+0x177/0x1b0 [ 2753.070503] ion_ioctl+0xea/0x1f0 [ 2753.075373] 0 [ 2753.102101] ? ion_query_heaps+0x360/0x360 [ 2753.102114] ? lock_acquire+0x170/0x3f0 [ 2753.102123] ? lock_downgrade+0x740/0x740 [ 2753.102131] ? ion_query_heaps+0x360/0x360 [ 2753.102146] do_vfs_ioctl+0x75a/0xff0 [ 2753.106549] 2717 [ 2753.110953] ? ioctl_preallocate+0x1a0/0x1a0 [ 2753.110965] ? lock_downgrade+0x740/0x740 [ 2753.110979] ? __fget+0x225/0x360 [ 2753.115818] 2718 [ 2753.119982] ? do_vfs_ioctl+0xff0/0xff0 [ 2753.119992] ? security_file_ioctl+0x83/0xb0 [ 2753.120002] SyS_ioctl+0x7f/0xb0 [ 2753.120011] ? do_vfs_ioctl+0xff0/0xff0 [ 2753.120023] do_syscall_64+0x1d5/0x640 [ 2753.122243] 2718 [ 2753.127182] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2753.153323] 2718 [ 2753.158747] RIP: 0033:0x45e219 [ 2753.168569] RSP: 002b:00007fa6a8664c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2753.171748] Node 0 [ 2753.175249] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2753.175259] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2753.179710] DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:65404kB inactive_anon:227160kB active_file:168kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3076kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2753.183720] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2753.183730] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2753.187162] lowmem_reserve[]: 0 [ 2753.188957] R13: 00007ffdb3664baf R14: 00007fa6a86659c0 R15: 000000000119bf8c [ 2753.189955] 10*32kB [ 2753.218488] 0 [ 2753.220111] (M) 13*64kB [ 2753.234660] 0 [ 2753.237385] (UM) [ 2753.254030] 0 [ 2753.254664] 4*128kB [ 2753.257825] 0 [ 2753.265587] (M) 5*256kB (UM) 17*512kB (UM) 6*1024kB (UM) 2*2048kB (U) 1*4096kB (U) = 26424kB [ 2753.265638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2753.265644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2753.265650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2753.265656] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2753.265659] 62275 total pagecache pages [ 2753.265668] 0 pages in swap cache [ 2753.265673] Swap cache stats: add 0, delete 0, find 0/0 [ 2753.265676] Free swap = 0kB [ 2753.265679] Total swap = 0kB [ 2753.265684] 2097051 pages RAM [ 2753.265687] 0 pages HighMem/MovableOnly [ 2753.265695] 363840 pages reserved [ 2753.287278] Node 0 [ 2753.315432] 0 pages cma reserved [ 2753.330439] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2753.341407] Out of memory: Kill process 30351 (syz-executor.3) score 1004 or sacrifice child [ 2753.357692] lowmem_reserve[]: [ 2753.366059] Killed process 30354 (syz-executor.3) total-vm:93348kB, anon-rss:156kB, file-rss:34816kB, shmem-rss:0kB [ 2753.397041] 0 [ 2753.435506] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2753.495731] 0 [ 2753.509497] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2753.516065] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2753.528029] CPU: 1 PID: 8003 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2753.529598] 0 [ 2753.535490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2753.535499] Call Trace: [ 2753.537294] 0 [ 2753.546916] dump_stack+0x1b2/0x281 [ 2753.546928] dump_header+0x178/0x82f [ 2753.546939] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2753.546948] ? ___ratelimit+0x2cd/0x530 [ 2753.546959] oom_kill_process.cold+0x10/0xb18 [ 2753.549598] syz-executor.3 cpuset= [ 2753.551347] out_of_memory+0xe3e/0x1190 [ 2753.554941] / [ 2753.558659] ? oom_killer_disable+0x1c0/0x1c0 [ 2753.563800] 0 [ 2753.567707] ? mutex_trylock+0x152/0x1a0 [ 2753.572273] mems_allowed=0-1 [ 2753.575928] __alloc_pages_nodemask+0x23e1/0x2720 [ 2753.581627] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2753.586105] Node 1 [ 2753.587921] alloc_pages_current+0x155/0x260 [ 2753.609540] Normal free:26424kB min:53696kB low:67120kB high:80544kB active_anon:600kB inactive_anon:16256kB active_file:20kB inactive_file:64kB unevictable:0kB writepending:80kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2753.611428] filemap_fault+0xea3/0x1980 [ 2753.643305] ext4_filemap_fault+0x84/0xb0 [ 2753.647478] __do_fault+0xfa/0x380 [ 2753.651045] __handle_mm_fault+0x2497/0x4620 [ 2753.655456] ? vm_insert_page+0x7c0/0x7c0 [ 2753.659632] ? lock_downgrade+0x740/0x740 [ 2753.663809] handle_mm_fault+0x391/0x860 [ 2753.667893] __do_page_fault+0x549/0xad0 [ 2753.669519] lowmem_reserve[]: 0 [ 2753.671955] ? spurious_fault+0x640/0x640 [ 2753.671966] ? do_page_fault+0x60/0x500 [ 2753.675405] 0 [ 2753.679390] ? page_fault+0x2f/0x50 [ 2753.688776] page_fault+0x45/0x50 [ 2753.692233] RIP: 0000:0xb358f8 [ 2753.695415] RSP: 3b5eea28:000000c00003dec8 EFLAGS: 00438920 [ 2753.695442] CPU: 0 PID: 30354 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2753.704940] Mem-Info: [ 2753.709044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2753.713890] active_anon:16501 inactive_anon:60854 isolated_anon:0 [ 2753.713890] active_file:19 inactive_file:35 isolated_file:0 [ 2753.713890] unevictable:0 dirty:20 writeback:0 unstable:0 [ 2753.713890] slab_reclaimable:13155 slab_unreclaimable:113481 [ 2753.713890] mapped:52225 shmem:62221 pagetables:787 bounce:0 [ 2753.713890] free:13832 free_pcp:43 free_cma:0 [ 2753.720791] Call Trace: [ 2753.720817] dump_stack+0x1b2/0x281 [ 2753.720829] warn_alloc.cold+0x96/0x1cc [ 2753.720841] ? zone_watermark_ok_safe+0x220/0x220 [ 2753.720851] ? usleep_range+0x130/0x130 [ 2753.720859] ? try_to_free_pages+0x23f/0x6e0 [ 2753.720868] ? _find_next_bit+0xdb/0x100 [ 2753.720879] ? run_timer_softirq+0x5a0/0x5a0 [ 2753.720896] __alloc_pages_nodemask+0x2127/0x2720 [ 2753.720913] ? lock_acquire+0x170/0x3f0 [ 2753.720937] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2753.763650] Node 0 active_anon:65404kB inactive_anon:227160kB active_file:56kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:232500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2753.764322] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2753.769173] Node 1 active_anon:600kB inactive_anon:16256kB active_file:20kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:80kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2753.773168] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2753.773187] alloc_pages_current+0x155/0x260 [ 2753.773203] ion_page_pool_alloc+0x118/0x1b0 [ 2753.773213] ion_system_heap_allocate+0x133/0x8c0 [ 2753.773223] ? ion_alloc+0x187/0x810 [ 2753.773233] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2753.773243] ? ion_system_contig_heap_create+0x130/0x130 [ 2753.773253] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2753.773263] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2753.773274] ion_alloc+0x204/0x810 [ 2753.773288] ? ion_dma_buf_release+0x40/0x40 [ 2753.786026] Node 0 [ 2753.786156] ? __might_fault+0x177/0x1b0 [ 2753.791083] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2753.794964] ion_ioctl+0xea/0x1f0 [ 2753.807424] lowmem_reserve[]: [ 2753.827916] ? ion_query_heaps+0x360/0x360 [ 2753.827930] ? lock_acquire+0x170/0x3f0 [ 2753.827938] ? lock_downgrade+0x740/0x740 [ 2753.827945] ? ion_query_heaps+0x360/0x360 [ 2753.827955] do_vfs_ioctl+0x75a/0xff0 [ 2753.827965] ? ioctl_preallocate+0x1a0/0x1a0 [ 2753.827974] ? lock_downgrade+0x740/0x740 [ 2753.827986] ? __fget+0x225/0x360 [ 2753.827995] ? do_vfs_ioctl+0xff0/0xff0 [ 2753.828006] ? security_file_ioctl+0x83/0xb0 [ 2753.828015] SyS_ioctl+0x7f/0xb0 [ 2753.828022] ? do_vfs_ioctl+0xff0/0xff0 [ 2753.828034] do_syscall_64+0x1d5/0x640 [ 2753.828052] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2753.828060] RIP: 0033:0x45e219 [ 2753.828066] RSP: 002b:00007fa35386fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2753.828075] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2753.828080] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2753.828085] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2753.828094] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2753.843802] 0 [ 2753.861769] R13: 00007ffc07929f4f R14: 00007fa3538709c0 R15: 000000000119bf8c [ 2753.873756] syz-executor.0: [ 2753.882869] 2717 [ 2753.893326] 0 [ 2753.896997] 2718 [ 2753.906658] page allocation failure: order:0 [ 2753.913484] 2718 [ 2753.919899] 0 [ 2753.923495] 2718 [ 2753.951771] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2753.975403] (null) [ 2753.994225] Node 0 [ 2753.997565] 0 [ 2753.998715] DMA32 free:17928kB min:36200kB low:45248kB high:54296kB active_anon:65404kB inactive_anon:227160kB active_file:56kB inactive_file:76kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3076kB bounce:0kB free_pcp:172kB local_pcp:28kB free_cma:0kB [ 2754.002740] Node 0 DMA: 0*4kB 0*8kB 6*16kB (U) 10*32kB (U) 1*64kB (U) 4*128kB (U) 7*256kB (U) 2*512kB (U) 1*1024kB [ 2754.017853] lowmem_reserve[]: [ 2754.026657] (U) [ 2754.043205] syz-executor.0 cpuset= [ 2754.048793] 1*2048kB [ 2754.065220] 0 [ 2754.069578] (M) [ 2754.077180] / [ 2754.078897] 1*4096kB [ 2754.085401] 0 [ 2754.094414] (E) [ 2754.136202] mems_allowed=0-1 [ 2754.144850] = 10976kB [ 2754.151611] CPU: 1 PID: 30341 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2754.159676] Node 0 [ 2754.161508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2754.161515] Call Trace: [ 2754.163926] DMA32: [ 2754.171813] dump_stack+0x1b2/0x281 [ 2754.171827] warn_alloc.cold+0x96/0x1cc [ 2754.171838] ? zone_watermark_ok_safe+0x220/0x220 [ 2754.171852] ? usleep_range+0x130/0x130 [ 2754.174081] 1334*4kB [ 2754.183521] ? try_to_free_pages+0x23f/0x6e0 [ 2754.183532] ? _find_next_bit+0xdb/0x100 [ 2754.183542] ? run_timer_softirq+0x5a0/0x5a0 [ 2754.183561] __alloc_pages_nodemask+0x2127/0x2720 [ 2754.186177] warn_alloc_show_mem: 1 callbacks suppressed [ 2754.186181] Mem-Info: [ 2754.188393] ? lock_acquire+0x170/0x3f0 [ 2754.192061] active_anon:16501 inactive_anon:60854 isolated_anon:0 [ 2754.192061] active_file:19 inactive_file:35 isolated_file:0 [ 2754.192061] unevictable:0 dirty:20 writeback:0 unstable:0 [ 2754.192061] slab_reclaimable:13155 slab_unreclaimable:113481 [ 2754.192061] mapped:52225 shmem:62221 pagetables:787 bounce:0 [ 2754.192061] free:13832 free_pcp:43 free_cma:0 [ 2754.195986] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2754.200865] (ME) [ 2754.204793] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2754.207175] 490*8kB [ 2754.211607] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2754.211626] alloc_pages_current+0x155/0x260 [ 2754.211643] ion_page_pool_alloc+0x118/0x1b0 [ 2754.215720] Node 0 active_anon:65404kB inactive_anon:227160kB active_file:56kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:232500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2754.220552] ion_system_heap_allocate+0x133/0x8c0 [ 2754.220566] ? _raw_spin_unlock+0x29/0x40 [ 2754.220575] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2754.225433] Node 1 active_anon:600kB inactive_anon:16256kB active_file:20kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:80kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2754.230874] ? ion_system_contig_heap_create+0x130/0x130 [ 2754.230887] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2754.230898] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2754.230910] ion_alloc+0x27a/0x810 [ 2754.233318] (ME) [ 2754.237310] ? ion_dma_buf_release+0x40/0x40 [ 2754.270583] Node 0 [ 2754.275461] ? __might_fault+0x177/0x1b0 [ 2754.277518] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2754.282353] ion_ioctl+0xea/0x1f0 [ 2754.282365] ? ion_query_heaps+0x360/0x360 [ 2754.282377] ? lock_acquire+0x170/0x3f0 [ 2754.282389] ? lock_downgrade+0x740/0x740 [ 2754.285136] lowmem_reserve[]: [ 2754.290574] ? ion_query_heaps+0x360/0x360 [ 2754.290592] do_vfs_ioctl+0x75a/0xff0 [ 2754.290606] ? ioctl_preallocate+0x1a0/0x1a0 [ 2754.294999] 0 [ 2754.299397] ? lock_downgrade+0x740/0x740 [ 2754.299412] ? __fget+0x225/0x360 [ 2754.327217] 179*16kB [ 2754.331999] ? do_vfs_ioctl+0xff0/0xff0 [ 2754.332012] ? security_file_ioctl+0x83/0xb0 [ 2754.332022] SyS_ioctl+0x7f/0xb0 [ 2754.336154] (ME) [ 2754.341350] ? do_vfs_ioctl+0xff0/0xff0 [ 2754.341363] do_syscall_64+0x1d5/0x640 [ 2754.341381] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2754.341392] RIP: 0033:0x45e219 [ 2754.368598] 2717 [ 2754.373999] RSP: 002b:00007fa6a8664c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2754.374009] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2754.374014] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2754.374018] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2754.374023] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2754.374028] R13: 00007ffdb3664baf R14: 00007fa6a86659c0 R15: 000000000119bf8c [ 2754.379318] 0 [ 2754.398367] 34*32kB [ 2754.404606] 0 [ 2754.438954] 2718 [ 2754.446807] 0 [ 2754.468890] 2718 [ 2754.486076] 2718 [ 2754.487791] Node 0 [ 2754.505057] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2754.522869] (UME) [ 2754.529432] lowmem_reserve[]: [ 2754.546780] Node 0 [ 2754.551554] 0 [ 2754.557028] DMA32 free:17944kB min:36200kB low:45248kB high:54296kB active_anon:65404kB inactive_anon:227160kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3076kB bounce:0kB free_pcp:164kB local_pcp:136kB free_cma:0kB [ 2754.557033] lowmem_reserve[]: [ 2754.559095] 0 [ 2754.570141] 24*64kB [ 2754.593060] 0 [ 2754.607323] 0 [ 2754.651819] (M) 9*128kB (M) 4*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17944kB [ 2754.671904] 0 0 [ 2754.674544] 0 0 0 0 [ 2754.678080] Node 1 Normal free:196232kB min:53696kB low:67120kB high:80544kB active_anon:600kB inactive_anon:16256kB active_file:128kB inactive_file:2656kB unevictable:0kB writepending:80kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:72kB bounce:0kB free_pcp:396kB local_pcp:156kB free_cma:0kB [ 2754.678105] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2754.741030] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2754.754203] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (U) 1*32kB (M) 92*64kB (UM) 48*128kB (U) 2*256kB (UM) 14*512kB (UM) 78*1024kB (UM) 41*2048kB (U) 29*4096kB (U) = 302396kB [ 2754.778368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2754.779730] lowmem_reserve[]: 0 0 0 0 0 [ 2754.803958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2754.812743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2754.815923] Node 0 DMA: 0*4kB 0*8kB 6*16kB (U) 10*32kB (U) 1*64kB (U) 4*128kB (U) 7*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 10976kB [ 2754.839327] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2754.839703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2754.848386] Node 0 DMA32: 920*4kB (M) 480*8kB (ME) 179*16kB (ME) 33*32kB (ME) 1120*64kB (UM) 129*128kB (UM) 46*256kB (UM) 20*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 121648kB [ 2754.859350] lowmem_reserve[]: [ 2754.872376] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2754.893730] 0 0 0 0 0 [ 2754.896298] Node 1 Normal free:556412kB min:53696kB low:67120kB high:80544kB active_anon:600kB inactive_anon:16256kB active_file:128kB inactive_file:3556kB unevictable:0kB writepending:80kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:72kB bounce:0kB free_pcp:404kB local_pcp:236kB free_cma:0kB [ 2754.925820] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2754.929443] 63508 total pagecache pages [ 2754.945333] 0 pages in swap cache [ 2754.948807] Swap cache stats: add 0, delete 0, find 0/0 [ 2754.950266] systemd[1]: Stopped Journal Service. [ 2754.954264] Free swap = 0kB [ 2754.965876] Total swap = 0kB [ 2754.969059] 2097051 pages RAM [ 2754.969823] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (U) [ 2754.972274] lowmem_reserve[]: 0 0 0 0 0 [ 2754.979785] 1*32kB (M) 2268*64kB (UM) 450*128kB (U) 192*256kB (UM) 72*512kB (UM) 90*1024kB (UM) 41*2048kB (U) 29*4096kB (U) = 583740kB [ 2754.986051] 0 pages HighMem/MovableOnly [ 2755.003964] Node 0 DMA: 0*4kB 0*8kB 6*16kB (U) 10*32kB (U) 2*64kB (U) 4*128kB (U) 7*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 11040kB [ 2755.021113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2755.027211] systemd[1]: Starting Journal Service... [ 2755.035169] 363840 pages reserved [ 2755.038616] 0 pages cma reserved [ 2755.046482] Node 0 DMA32: 859*4kB (UM) 480*8kB (ME) 180*16kB (UME) 33*32kB (ME) 1883*64kB (UME) 537*128kB (UM) 322*256kB (UM) 26*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 296204kB [ 2755.058261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2755.089807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2755.098696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2755.107472] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2755.130442] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (U) 1*32kB (M) 2606*64kB (UM) 540*128kB (U) 228*256kB (UM) 110*512kB (UM) 146*1024kB (UM) 95*2048kB (U) 38*4096kB (U) = 850364kB [ 2755.139817] 63582 total pagecache pages [ 2755.159781] 0 pages in swap cache [ 2755.163430] Swap cache stats: add 0, delete 0, find 0/0 [ 2755.169253] Free swap = 0kB [ 2755.183627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2755.189783] Total swap = 0kB [ 2755.195525] 2097051 pages RAM [ 2755.198619] 0 pages HighMem/MovableOnly [ 2755.199921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2755.219754] 363840 pages reserved [ 2755.223262] 0 pages cma reserved [ 2755.226627] Out of memory (oom_kill_allocating_task): Kill process 8003 (syz-fuzzer) score 0 or sacrifice child [ 2755.249784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2755.259061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2755.267802] Killed process 29601 (syz-executor.5) total-vm:85024kB, anon-rss:72kB, file-rss:4kB, shmem-rss:0kB [ 2755.278267] 63656 total pagecache pages [ 2755.282961] 0 pages in swap cache [ 2755.286424] Swap cache stats: add 0, delete 0, find 0/0 [ 2755.299331] oom_reaper: reaped process 30354 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2755.309498] Free swap = 0kB [ 2755.322362] Total swap = 0kB [ 2755.326184] 2097051 pages RAM [ 2755.329291] 0 pages HighMem/MovableOnly [ 2755.335446] 363840 pages reserved [ 2755.338917] 0 pages cma reserved [ 2756.066360] systemd-journald[30364]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2756.424160] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2756.451992] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2756.475529] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2756.479020] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2756.485127] CPU: 1 PID: 30354 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2756.494261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2756.503652] Call Trace: [ 2756.506245] dump_stack+0x1b2/0x281 [ 2756.509869] warn_alloc.cold+0x96/0x1cc [ 2756.513844] ? zone_watermark_ok_safe+0x220/0x220 [ 2756.518737] __alloc_pages_nodemask+0x2127/0x2720 [ 2756.523596] ? _raw_spin_unlock_irq+0x24/0x80 [ 2756.528243] ? lock_acquire+0x170/0x3f0 [ 2756.532238] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2756.537097] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2756.542563] ? __mutex_unlock_slowpath+0x75/0x770 [ 2756.547415] alloc_pages_current+0x155/0x260 [ 2756.551834] ion_page_pool_alloc+0x118/0x1b0 [ 2756.556249] ion_system_heap_allocate+0x133/0x8c0 [ 2756.561102] ? _raw_spin_unlock+0x29/0x40 [ 2756.565254] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2756.570226] ? ion_system_contig_heap_create+0x130/0x130 [ 2756.575688] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2756.580711] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2756.585566] ion_alloc+0x27a/0x810 [ 2756.589113] ? ion_dma_buf_release+0x40/0x40 [ 2756.593565] ? __might_fault+0x177/0x1b0 [ 2756.597645] ion_ioctl+0xea/0x1f0 [ 2756.601108] ? ion_query_heaps+0x360/0x360 [ 2756.605355] ? lock_acquire+0x170/0x3f0 [ 2756.609372] ? lock_downgrade+0x740/0x740 [ 2756.613532] ? ion_query_heaps+0x360/0x360 [ 2756.617783] do_vfs_ioctl+0x75a/0xff0 [ 2756.621590] ? ioctl_preallocate+0x1a0/0x1a0 [ 2756.626000] ? lock_downgrade+0x740/0x740 [ 2756.630233] ? __fget+0x225/0x360 [ 2756.633692] ? do_vfs_ioctl+0xff0/0xff0 [ 2756.637671] ? security_file_ioctl+0x83/0xb0 [ 2756.642094] SyS_ioctl+0x7f/0xb0 [ 2756.645458] ? do_vfs_ioctl+0xff0/0xff0 [ 2756.649449] do_syscall_64+0x1d5/0x640 [ 2756.653357] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2756.658562] RIP: 0033:0x45e219 [ 2756.661759] RSP: 002b:00007fa35386fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2756.669469] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2756.676739] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2756.684017] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2756.691294] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2756.698577] R13: 00007ffc07929f4f R14: 00007fa3538709c0 R15: 000000000119bf8c [ 2756.705866] CPU: 0 PID: 30337 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2756.713766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2756.722486] warn_alloc_show_mem: 1 callbacks suppressed [ 2756.722490] Mem-Info: [ 2756.723123] Call Trace: [ 2756.728500] active_anon:16564 inactive_anon:62887 isolated_anon:0 [ 2756.728500] active_file:1023 inactive_file:1748 isolated_file:18 [ 2756.728500] unevictable:0 dirty:4 writeback:0 unstable:0 [ 2756.728500] slab_reclaimable:13197 slab_unreclaimable:115299 [ 2756.728500] mapped:45495 shmem:64269 pagetables:754 bounce:0 [ 2756.728500] free:122217 free_pcp:364 free_cma:0 [ 2756.730901] dump_stack+0x1b2/0x281 [ 2756.730915] warn_alloc.cold+0x96/0x1cc [ 2756.730926] ? zone_watermark_ok_safe+0x220/0x220 [ 2756.730947] __alloc_pages_nodemask+0x2127/0x2720 [ 2756.730963] ? lock_acquire+0x170/0x3f0 [ 2756.730978] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2756.730995] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2756.731007] ? __mutex_unlock_slowpath+0x75/0x770 [ 2756.731020] ? alloc_pages_current+0x123/0x260 [ 2756.736784] Node 0 active_anon:65708kB inactive_anon:235292kB active_file:3988kB inactive_file:6944kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:181924kB dirty:12kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2756.767458] alloc_pages_current+0x155/0x260 [ 2756.767475] ion_page_pool_alloc+0x118/0x1b0 [ 2756.767485] ion_system_heap_allocate+0x133/0x8c0 [ 2756.767498] ? _raw_spin_unlock+0x29/0x40 [ 2756.767506] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2756.767516] ? ion_system_contig_heap_create+0x130/0x130 [ 2756.767525] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2756.767536] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2756.767547] ion_alloc+0x27a/0x810 [ 2756.767561] ? ion_dma_buf_release+0x40/0x40 [ 2756.767573] ? __might_fault+0x177/0x1b0 [ 2756.767585] ion_ioctl+0xea/0x1f0 [ 2756.767596] ? ion_query_heaps+0x360/0x360 [ 2756.767609] ? lock_acquire+0x170/0x3f0 [ 2756.767617] ? lock_downgrade+0x740/0x740 [ 2756.767630] ? ion_query_heaps+0x360/0x360 [ 2756.775130] Node 1 active_anon:548kB inactive_anon:16256kB active_file:104kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2756.775220] do_vfs_ioctl+0x75a/0xff0 [ 2756.780123] Node 0 [ 2756.784892] ? ioctl_preallocate+0x1a0/0x1a0 [ 2756.788857] DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2756.793852] ? lock_downgrade+0x740/0x740 [ 2756.793867] ? __fget+0x225/0x360 [ 2756.793876] ? do_vfs_ioctl+0xff0/0xff0 [ 2756.793885] ? security_file_ioctl+0x83/0xb0 [ 2756.793895] SyS_ioctl+0x7f/0xb0 [ 2756.793908] ? do_vfs_ioctl+0xff0/0xff0 [ 2756.793919] do_syscall_64+0x1d5/0x640 [ 2756.793936] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2756.793945] RIP: 0033:0x45e219 [ 2756.793951] RSP: 002b:00007faad8dddc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2756.793962] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2756.793967] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2756.793976] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2756.803294] lowmem_reserve[]: [ 2756.804255] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2756.808832] 0 [ 2756.837019] R13: 00007ffc7866d97f R14: 00007faad8dde9c0 R15: 000000000119bf8c [ 2757.064206] 2717 2718 2718 2718 [ 2757.067667] Node 0 DMA32 free:318996kB min:36200kB low:45248kB high:54296kB active_anon:65808kB inactive_anon:235292kB active_file:3672kB inactive_file:8524kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2944kB bounce:0kB free_pcp:504kB local_pcp:348kB free_cma:0kB [ 2757.103291] lowmem_reserve[]: 0 0 0 0 0 [ 2757.107346] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2757.174148] lowmem_reserve[]: 0 0 0 0 0 [ 2757.178183] Node 1 Normal free:29232kB min:53696kB low:67120kB high:80544kB active_anon:548kB inactive_anon:16256kB active_file:248kB inactive_file:396kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:820kB local_pcp:120kB free_cma:0kB [ 2757.211687] lowmem_reserve[]: 0 0 0 0 0 [ 2757.216262] Node 0 DMA: 6*4kB (U) 11*8kB (U) 8*16kB (U) 10*32kB (U) 7*64kB (U) 8*128kB (U) 7*256kB (U) 2*512kB (U) 0*1024kB 1*2048kB (M) 1*4096kB (E) = 10992kB [ 2757.234949] Node 0 DMA32: 26*4kB (UME) 188*8kB (UE) 4346*16kB (UME) 5272*32kB (UME) 47*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 242856kB [ 2757.249499] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2757.264407] Node 1 Normal: 273*4kB (UM) 640*8kB (UM) 572*16kB (UM) 384*32kB (UM) 9*64kB (UM) 4*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29252kB [ 2757.279228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2757.292075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2757.302040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2757.313624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2757.323612] 67636 total pagecache pages [ 2757.327426] systemd[1]: Started Journal Service. [ 2757.327602] 0 pages in swap cache [ 2757.339386] Swap cache stats: add 0, delete 0, find 0/0 [ 2757.361795] Free swap = 0kB [ 2757.365098] Total swap = 0kB [ 2757.368202] 2097051 pages RAM [ 2757.375543] 0 pages HighMem/MovableOnly [ 2757.386296] 363840 pages reserved [ 2757.393491] 0 pages cma reserved [ 2757.744582] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2757.768898] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2757.770198] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2757.773793] CPU: 0 PID: 8020 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2757.790263] syz-executor.5 cpuset= [ 2757.793167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2757.793175] / [ 2757.796698] Call Trace: [ 2757.808310] mems_allowed=0-1 [ 2757.810341] dump_stack+0x1b2/0x281 [ 2757.810354] dump_header+0x178/0x82f [ 2757.810364] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2757.810374] ? ___ratelimit+0x2cd/0x530 [ 2757.810384] oom_kill_process.cold+0x10/0xb18 [ 2757.810403] out_of_memory+0xe3e/0x1190 [ 2757.838277] ? oom_killer_disable+0x1c0/0x1c0 [ 2757.842775] ? mutex_trylock+0x152/0x1a0 [ 2757.846854] __alloc_pages_nodemask+0x23e1/0x2720 [ 2757.851710] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2757.856588] alloc_pages_current+0x155/0x260 [ 2757.861003] filemap_fault+0xea3/0x1980 [ 2757.864991] ext4_filemap_fault+0x84/0xb0 [ 2757.869166] __do_fault+0xfa/0x380 [ 2757.872709] __handle_mm_fault+0x2497/0x4620 [ 2757.877125] ? vm_insert_page+0x7c0/0x7c0 [ 2757.881286] handle_mm_fault+0x391/0x860 [ 2757.885378] __do_page_fault+0x549/0xad0 [ 2757.889439] ? spurious_fault+0x640/0x640 [ 2757.893665] ? do_page_fault+0x60/0x500 [ 2757.897666] ? page_fault+0x2f/0x50 [ 2757.901290] page_fault+0x45/0x50 [ 2757.904741] RIP: ad080:0xc00477f200 [ 2757.908355] RSP: 0270:000000c000851e40 EFLAGS: 00000003 [ 2757.908382] CPU: 1 PID: 30337 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2757.908554] syz-executor.3: [ 2757.913758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2757.913763] Call Trace: [ 2757.913783] dump_stack+0x1b2/0x281 [ 2757.913800] warn_alloc.cold+0x96/0x1cc [ 2757.923938] Mem-Info: [ 2757.924704] ? zone_watermark_ok_safe+0x220/0x220 [ 2757.934552] page allocation failure: order:0 [ 2757.937077] ? usleep_range+0x130/0x130 [ 2757.940784] active_anon:16563 inactive_anon:62887 isolated_anon:0 [ 2757.940784] active_file:13 inactive_file:0 isolated_file:0 [ 2757.940784] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2757.940784] slab_reclaimable:12970 slab_unreclaimable:116274 [ 2757.940784] mapped:43925 shmem:64269 pagetables:729 bounce:0 [ 2757.940784] free:13898 free_pcp:30 free_cma:0 [ 2757.944712] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2757.947629] Node 0 active_anon:65704kB inactive_anon:235292kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175700kB dirty:0kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2757.952466] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2757.952477] ? run_timer_softirq+0x5a0/0x5a0 [ 2757.952494] __alloc_pages_nodemask+0x2127/0x2720 [ 2757.952511] ? lock_acquire+0x170/0x3f0 [ 2757.956952] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2757.960948] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2757.960961] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2757.960999] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2757.994132] Node 1 active_anon:548kB inactive_anon:16256kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2757.999176] alloc_pages_current+0x155/0x260 [ 2758.026906] (null) [ 2758.031871] ion_page_pool_alloc+0x118/0x1b0 [ 2758.031883] ion_system_heap_allocate+0x133/0x8c0 [ 2758.031897] ? _raw_spin_unlock+0x29/0x40 [ 2758.031910] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2758.036304] syz-executor.3 cpuset= [ 2758.041163] ? ion_system_contig_heap_create+0x130/0x130 [ 2758.041174] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2758.041186] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2758.041201] ion_alloc+0x27a/0x810 [ 2758.045183] Node 0 [ 2758.052633] ? ion_dma_buf_release+0x40/0x40 [ 2758.052647] ? __might_fault+0x177/0x1b0 [ 2758.052659] ion_ioctl+0xea/0x1f0 [ 2758.052671] ? ion_query_heaps+0x360/0x360 [ 2758.057543] / [ 2758.062038] ? lock_acquire+0x170/0x3f0 [ 2758.067559] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2758.094117] ? lock_downgrade+0x740/0x740 [ 2758.094129] ? ion_query_heaps+0x360/0x360 [ 2758.094139] do_vfs_ioctl+0x75a/0xff0 [ 2758.094157] ? ioctl_preallocate+0x1a0/0x1a0 [ 2758.098574] mems_allowed=0-1 [ 2758.100695] ? lock_downgrade+0x740/0x740 [ 2758.100709] ? __fget+0x225/0x360 [ 2758.100719] ? do_vfs_ioctl+0xff0/0xff0 [ 2758.100732] ? security_file_ioctl+0x83/0xb0 [ 2758.130197] lowmem_reserve[]: [ 2758.133238] SyS_ioctl+0x7f/0xb0 [ 2758.138086] 0 [ 2758.141631] ? do_vfs_ioctl+0xff0/0xff0 [ 2758.141644] do_syscall_64+0x1d5/0x640 [ 2758.141661] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2758.141672] RIP: 0033:0x45e219 [ 2758.160206] 2717 [ 2758.161729] RSP: 002b:00007faad8dddc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2758.165701] 2718 [ 2758.191204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2758.191211] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2758.191215] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2758.191220] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2758.191224] R13: 00007ffc7866d97f R14: 00007faad8dde9c0 R15: 000000000119bf8c [ 2758.206678] warn_alloc_show_mem: 1 callbacks suppressed [ 2758.206682] Mem-Info: [ 2758.217437] CPU: 0 PID: 30354 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2758.224476] active_anon:16563 inactive_anon:62887 isolated_anon:0 [ 2758.224476] active_file:13 inactive_file:0 isolated_file:0 [ 2758.224476] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2758.224476] slab_reclaimable:12970 slab_unreclaimable:116274 [ 2758.224476] mapped:43925 shmem:64269 pagetables:729 bounce:0 [ 2758.224476] free:13898 free_pcp:30 free_cma:0 [ 2758.228587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2758.231767] Node 0 active_anon:65704kB inactive_anon:235292kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175700kB dirty:0kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2758.235028] Call Trace: [ 2758.236825] Node 1 active_anon:548kB inactive_anon:16256kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2758.240790] dump_stack+0x1b2/0x281 [ 2758.240804] warn_alloc.cold+0x96/0x1cc [ 2758.240816] ? zone_watermark_ok_safe+0x220/0x220 [ 2758.240826] ? usleep_range+0x130/0x130 [ 2758.240834] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2758.240846] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2758.240857] ? run_timer_softirq+0x5a0/0x5a0 [ 2758.240873] __alloc_pages_nodemask+0x2127/0x2720 [ 2758.240890] ? lock_acquire+0x170/0x3f0 [ 2758.249220] Node 0 [ 2758.249968] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2758.253219] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2758.255186] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2758.267195] 2718 [ 2758.272223] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2758.272243] alloc_pages_current+0x155/0x260 [ 2758.272260] ion_page_pool_alloc+0x118/0x1b0 [ 2758.272271] ion_system_heap_allocate+0x133/0x8c0 [ 2758.272283] ? _raw_spin_unlock+0x29/0x40 [ 2758.272295] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2758.279579] 2718 [ 2758.286873] ? ion_system_contig_heap_create+0x130/0x130 [ 2758.286885] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2758.286896] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2758.286906] ion_alloc+0x27a/0x810 [ 2758.286920] ? ion_dma_buf_release+0x40/0x40 [ 2758.286931] ? __might_fault+0x177/0x1b0 [ 2758.286945] ion_ioctl+0xea/0x1f0 [ 2758.286961] ? ion_query_heaps+0x360/0x360 [ 2758.286974] ? lock_acquire+0x170/0x3f0 [ 2758.286985] ? lock_downgrade+0x740/0x740 [ 2758.298728] lowmem_reserve[]: [ 2758.301522] ? ion_query_heaps+0x360/0x360 [ 2758.301535] do_vfs_ioctl+0x75a/0xff0 [ 2758.301548] ? ioctl_preallocate+0x1a0/0x1a0 [ 2758.301558] ? lock_downgrade+0x740/0x740 [ 2758.301571] ? __fget+0x225/0x360 [ 2758.301582] ? do_vfs_ioctl+0xff0/0xff0 [ 2758.306937] 0 [ 2758.309346] ? security_file_ioctl+0x83/0xb0 [ 2758.321586] 2717 [ 2758.350408] SyS_ioctl+0x7f/0xb0 [ 2758.350418] ? do_vfs_ioctl+0xff0/0xff0 [ 2758.350429] do_syscall_64+0x1d5/0x640 [ 2758.350445] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2758.350453] RIP: 0033:0x45e219 [ 2758.350458] RSP: 002b:00007fa35386fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2758.350468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2758.350472] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2758.350477] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2758.350482] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2758.350487] R13: 00007ffc07929f4f R14: 00007fa3538709c0 R15: 000000000119bf8c [ 2758.434773] 2718 [ 2758.448990] Node 0 [ 2758.451663] 2718 2718 [ 2758.451675] Node 0 DMA32 free:18116kB min:36200kB low:45248kB high:54296kB active_anon:65704kB inactive_anon:235292kB active_file:40kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2844kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2758.451698] lowmem_reserve[]: 0 0 0 0 0 [ 2758.451718] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2758.451739] lowmem_reserve[]: 0 0 0 0 0 [ 2758.451758] Node 1 Normal free:121216kB min:53696kB low:67120kB high:80544kB active_anon:548kB inactive_anon:16256kB active_file:12kB inactive_file:1704kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:176kB local_pcp:120kB free_cma:0kB [ 2758.451780] lowmem_reserve[]: 0 0 0 [ 2758.480293] DMA32 free:20404kB min:36200kB low:45248kB high:54296kB active_anon:65704kB inactive_anon:235292kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2844kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2758.514123] 0 [ 2758.540348] lowmem_reserve[]: [ 2758.584088] 0 [ 2758.630367] 0 0 0 0 0 [ 2758.630385] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2758.630404] lowmem_reserve[]: 0 [ 2758.710297] 0 [ 2758.715114] Node 0 [ 2758.770303] 0 [ 2758.779468] DMA: [ 2758.840348] 0 [ 2758.855637] 1*4kB (M) 0*8kB 1*16kB (U) 1*32kB (M) 0*64kB 8*128kB (UM) 7*256kB (U) 2*512kB (U) 1*1024kB (M) 1*2048kB (U) 1*4096kB (E) = 11060kB [ 2758.860599] 0 [ 2758.875392] Node 0 DMA32: 1193*4kB (UME) 524*8kB (UME) 180*16kB (UME) 33*32kB (UME) 871*64kB (UM) 462*128kB (U) 185*256kB (U) 14*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 184356kB [ 2758.898600] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2758.909696] Node 1 Normal free:717772kB min:53696kB low:67120kB high:80544kB active_anon:548kB inactive_anon:16256kB active_file:8kB inactive_file:2092kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:148kB local_pcp:28kB free_cma:0kB [ 2758.914286] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 325*16kB (UM) 375*32kB (U) 2608*64kB (UM) 381*128kB (U) 266*256kB (U) 98*512kB (UM) 220*1024kB (U) 25*2048kB (U) 22*4096kB (U) = 717764kB [ 2758.963727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2758.970331] lowmem_reserve[]: 0 0 0 0 0 [ 2758.973349] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2758.976630] Node 0 DMA: 1*4kB (M) 0*8kB 1*16kB (U) 1*32kB (M) 0*64kB 8*128kB (UM) 7*256kB (U) 2*512kB (U) 1*1024kB (M) 1*2048kB (U) 1*4096kB (E) = 11060kB [ 2759.000168] Node 0 DMA32: 1162*4kB (UME) 482*8kB (UME) 180*16kB (UME) 33*32kB (UME) 3146*64kB (UM) 945*128kB (U) 205*256kB (U) 15*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 396952kB [ 2759.002905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2759.019036] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2759.041159] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 326*16kB (UM) 376*32kB (U) 2630*64kB (UM) 382*128kB (U) 266*256kB (U) 98*512kB (UM) 220*1024kB (U) 25*2048kB (U) 22*4096kB (U) = 719356kB [ 2759.050418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2759.061744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2759.080366] 65060 total pagecache pages [ 2759.081235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2759.084981] 0 pages in swap cache [ 2759.099107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2759.109553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2759.110393] Swap cache stats: add 0, delete 0, find 0/0 [ 2759.122638] 65060 total pagecache pages [ 2759.127510] 0 pages in swap cache [ 2759.135959] Swap cache stats: add 0, delete 0, find 0/0 [ 2759.140384] Free swap = 0kB [ 2759.142622] Free swap = 0kB [ 2759.144443] Total swap = 0kB [ 2759.147449] Total swap = 0kB [ 2759.159102] 2097051 pages RAM [ 2759.160406] 2097051 pages RAM [ 2759.163372] 0 pages HighMem/MovableOnly [ 2759.165338] 0 pages HighMem/MovableOnly [ 2759.169300] 363840 pages reserved [ 2759.180401] 363840 pages reserved [ 2759.182969] 0 pages cma reserved [ 2759.183876] 0 pages cma reserved [ 2759.187258] Out of memory (oom_kill_allocating_task): Kill process 8020 (syz-fuzzer) score 0 or sacrifice child [ 2759.206358] Killed process 28174 (syz-executor.0) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2759.225229] oom_reaper: reaped process 28174 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 12:08:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 12:08:17 executing program 1: getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r1) keyctl$get_persistent(0x16, r0, r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) 12:08:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:08:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x12, 0x1}) 12:08:17 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:08:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x12, 0x1}) 12:08:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x12, 0x1}) 12:08:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x12, 0x1}) 12:08:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x12, 0x1}) 12:08:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x12, 0x1}) 12:08:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x0, 0x1}) [ 2760.973647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2760.980555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2760.992896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2760.999890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2761.012360] device bridge_slave_1 left promiscuous mode [ 2761.018222] bridge0: port 2(bridge_slave_1) entered disabled state [ 2761.029021] device bridge_slave_0 left promiscuous mode [ 2761.035742] bridge0: port 1(bridge_slave_0) entered disabled state [ 2761.049065] device veth1_macvtap left promiscuous mode [ 2761.056324] device veth0_macvtap left promiscuous mode [ 2761.064935] device veth1_vlan left promiscuous mode [ 2761.070263] device veth0_vlan left promiscuous mode [ 2761.232227] device hsr_slave_1 left promiscuous mode [ 2761.245838] device hsr_slave_0 left promiscuous mode [ 2761.269824] team0 (unregistering): Port device team_slave_1 removed [ 2761.292965] team0 (unregistering): Port device team_slave_0 removed [ 2761.308627] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2761.325070] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2761.366696] bond0 (unregistering): Released all slaves [ 2762.703486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2762.710235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2762.719303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2762.727555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2762.739310] device bridge_slave_1 left promiscuous mode [ 2762.745430] bridge0: port 2(bridge_slave_1) entered disabled state [ 2762.753941] device bridge_slave_0 left promiscuous mode [ 2762.759495] bridge0: port 1(bridge_slave_0) entered disabled state [ 2762.769980] device veth1_macvtap left promiscuous mode [ 2762.776527] device veth0_macvtap left promiscuous mode [ 2762.782685] device veth1_vlan left promiscuous mode [ 2762.787731] device veth0_vlan left promiscuous mode [ 2762.866168] device hsr_slave_1 left promiscuous mode [ 2762.873605] device hsr_slave_0 left promiscuous mode [ 2762.888857] team0 (unregistering): Port device team_slave_1 removed [ 2762.897855] team0 (unregistering): Port device team_slave_0 removed [ 2762.908165] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2762.919088] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2762.944280] bond0 (unregistering): Released all slaves [ 2763.561884] IPVS: ftp: loaded support on port[0] = 21 [ 2763.600179] IPVS: ftp: loaded support on port[0] = 21 [ 2763.705999] chnl_net:caif_netlink_parms(): no params data found [ 2763.826114] chnl_net:caif_netlink_parms(): no params data found [ 2763.882915] bridge0: port 1(bridge_slave_0) entered blocking state [ 2763.889364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2763.897320] device bridge_slave_0 entered promiscuous mode [ 2763.904779] bridge0: port 2(bridge_slave_1) entered blocking state [ 2763.911758] bridge0: port 2(bridge_slave_1) entered disabled state [ 2763.918761] device bridge_slave_1 entered promiscuous mode [ 2763.944450] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2763.954169] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2763.990336] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2763.997974] team0: Port device team_slave_0 added [ 2764.004106] bridge0: port 1(bridge_slave_0) entered blocking state [ 2764.010538] bridge0: port 1(bridge_slave_0) entered disabled state [ 2764.018537] device bridge_slave_0 entered promiscuous mode [ 2764.025723] bridge0: port 2(bridge_slave_1) entered blocking state [ 2764.032450] bridge0: port 2(bridge_slave_1) entered disabled state [ 2764.039826] device bridge_slave_1 entered promiscuous mode [ 2764.046643] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2764.054772] team0: Port device team_slave_1 added [ 2764.088332] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2764.098421] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2764.108280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2764.114941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2764.140637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2764.159452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2764.165763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2764.193709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2764.210909] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2764.219030] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2764.226256] team0: Port device team_slave_0 added [ 2764.232385] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2764.239714] team0: Port device team_slave_1 added [ 2764.245436] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2764.277386] device hsr_slave_0 entered promiscuous mode [ 2764.283858] device hsr_slave_1 entered promiscuous mode [ 2764.298456] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2764.306563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2764.313703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2764.339078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2764.350676] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2764.366937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2764.373353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2764.398789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2764.409580] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2764.417468] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2764.463991] device hsr_slave_0 entered promiscuous mode [ 2764.469703] device hsr_slave_1 entered promiscuous mode [ 2764.476572] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2764.488891] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2764.616587] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2764.639648] bridge0: port 2(bridge_slave_1) entered blocking state [ 2764.646028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2764.652714] bridge0: port 1(bridge_slave_0) entered blocking state [ 2764.659062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2764.699485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2764.708834] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2764.720111] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2764.730879] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2764.737907] 8021q: adding VLAN 0 to HW filter on device team0 [ 2764.745408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2764.753476] bridge0: port 2(bridge_slave_1) entered disabled state [ 2764.760906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2764.768554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2764.780764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2764.790970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2764.799017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2764.808936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2764.816764] bridge0: port 1(bridge_slave_0) entered blocking state [ 2764.823207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2764.830220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2764.838745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2764.846535] bridge0: port 2(bridge_slave_1) entered blocking state [ 2764.852972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2764.863745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2764.872411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2764.879865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2764.892689] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2764.898772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2764.908513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2764.919863] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2764.926612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2764.935644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2764.947279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2764.954833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2764.963722] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2764.975040] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2764.982159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2764.989215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2764.998429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2765.007258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2765.015176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2765.027135] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2765.033729] 8021q: adding VLAN 0 to HW filter on device team0 [ 2765.041006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2765.049825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2765.060723] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2765.066870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2765.075236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2765.083097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2765.099290] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2765.108797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2765.119540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2765.127733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2765.136240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2765.144135] bridge0: port 1(bridge_slave_0) entered blocking state [ 2765.150482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2765.157735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2765.166010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2765.173866] bridge0: port 2(bridge_slave_1) entered blocking state [ 2765.180232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2765.181393] Bluetooth: hci3 command 0x0409 tx timeout [ 2765.189989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2765.200094] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2765.206560] Bluetooth: hci1 command 0x0409 tx timeout [ 2765.212877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2765.220724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2765.227539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2765.238347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2765.246918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2765.256846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2765.266051] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2765.277428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2765.286579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2765.296785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2765.304657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2765.312617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2765.320436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2765.330817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2765.344735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2765.353479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2765.366605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2765.374401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2765.382888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2765.397006] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2765.403240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2765.423991] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2765.432676] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2765.439089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2765.447220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2765.458937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2765.467346] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2765.478332] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2765.485749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2765.494701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2765.538967] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2765.547487] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2765.555401] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2765.565541] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2765.572825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2765.580542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2765.588419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2765.595971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2765.605747] device veth0_vlan entered promiscuous mode [ 2765.618000] device veth1_vlan entered promiscuous mode [ 2765.624370] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2765.636669] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2765.645172] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2765.655873] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2765.667551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2765.676731] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2765.684694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2765.693187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2765.706616] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2765.718440] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2765.726078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2765.734707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2765.746525] device veth0_macvtap entered promiscuous mode [ 2765.755577] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2765.765435] device veth1_macvtap entered promiscuous mode [ 2765.773939] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2765.783337] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2765.790655] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2765.798027] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2765.808079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2765.818834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2765.828258] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2765.838207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2765.846189] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2765.854409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2765.862416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2765.870078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2765.878185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2765.887112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2765.897560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2765.907336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2765.917188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2765.926412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2765.936408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2765.945611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2765.955416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2765.965563] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2765.973301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2765.980879] device veth0_vlan entered promiscuous mode [ 2765.988950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2765.996750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2766.006211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2766.006216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.006222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2766.006226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.006231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2766.006234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.006240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2766.006243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.007310] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2766.007332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2766.020899] device veth1_vlan entered promiscuous mode [ 2766.108507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2766.116830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2766.150782] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2766.164091] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2766.171151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2766.181721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2766.191797] device veth0_macvtap entered promiscuous mode [ 2766.198202] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2766.208396] device veth1_macvtap entered promiscuous mode [ 2766.221597] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2766.237943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2766.248642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2766.259464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2766.269581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.279053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2766.289241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.299053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2766.308838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.318073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2766.327876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.337440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2766.347526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.357697] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2766.364826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2766.373161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2766.380461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2766.388220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2766.396363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2766.410210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2766.420517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.430497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2766.440787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.450069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2766.460620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.470364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2766.480445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.489693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2766.499547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.509895] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2766.517001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2766.526055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2766.535534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2767.253048] Bluetooth: hci1 command 0x041b tx timeout [ 2767.258824] Bluetooth: hci3 command 0x041b tx timeout 12:08:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:08:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x0, 0x1}) 12:08:24 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x0, 0x1}) 12:08:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) [ 2767.654815] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2767.666860] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2767.688479] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2767.706902] CPU: 0 PID: 30890 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2767.714847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2767.724297] Call Trace: [ 2767.726932] dump_stack+0x1b2/0x281 [ 2767.730573] warn_alloc.cold+0x96/0x1cc [ 2767.734611] ? zone_watermark_ok_safe+0x220/0x220 [ 2767.738995] syz-executor.0 cpuset= [ 2767.739476] __alloc_pages_nodemask+0x2127/0x2720 [ 2767.739495] ? lock_acquire+0x170/0x3f0 [ 2767.747568] / [ 2767.747868] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2767.755630] mems_allowed=0-1 [ 2767.758391] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2767.758405] ? __mutex_unlock_slowpath+0x75/0x770 [ 2767.758421] alloc_pages_current+0x155/0x260 [ 2767.776184] ion_page_pool_alloc+0x118/0x1b0 [ 2767.780597] ion_system_heap_allocate+0x133/0x8c0 [ 2767.785444] ? ion_alloc+0x187/0x810 [ 2767.789156] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2767.794628] ? ion_system_contig_heap_create+0x130/0x130 [ 2767.800104] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2767.805134] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2767.809978] ion_alloc+0x204/0x810 [ 2767.813548] ? ion_dma_buf_release+0x40/0x40 [ 2767.817972] ? __might_fault+0x177/0x1b0 [ 2767.822040] ion_ioctl+0xea/0x1f0 [ 2767.825495] ? ion_query_heaps+0x360/0x360 [ 2767.829729] ? lock_acquire+0x170/0x3f0 [ 2767.833703] ? lock_downgrade+0x740/0x740 [ 2767.837849] ? ion_query_heaps+0x360/0x360 [ 2767.842113] do_vfs_ioctl+0x75a/0xff0 [ 2767.845928] ? ioctl_preallocate+0x1a0/0x1a0 [ 2767.850335] ? lock_downgrade+0x740/0x740 [ 2767.854485] ? __fget+0x225/0x360 [ 2767.857934] ? do_vfs_ioctl+0xff0/0xff0 [ 2767.861914] ? security_file_ioctl+0x83/0xb0 [ 2767.866330] SyS_ioctl+0x7f/0xb0 [ 2767.869715] ? do_vfs_ioctl+0xff0/0xff0 [ 2767.873694] do_syscall_64+0x1d5/0x640 [ 2767.877592] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2767.882790] RIP: 0033:0x45e219 [ 2767.885977] RSP: 002b:00007f7e25d1dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2767.893685] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2767.900975] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2767.908247] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2767.915538] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2767.922921] R13: 00007ffff6a70b9f R14: 00007f7e25d1e9c0 R15: 000000000119bf8c [ 2767.930213] CPU: 1 PID: 30882 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2767.935378] warn_alloc_show_mem: 1 callbacks suppressed [ 2767.935382] Mem-Info: [ 2767.938246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2767.938252] Call Trace: [ 2767.938275] dump_stack+0x1b2/0x281 [ 2767.938289] warn_alloc.cold+0x96/0x1cc [ 2767.938300] ? zone_watermark_ok_safe+0x220/0x220 [ 2767.938321] __alloc_pages_nodemask+0x2127/0x2720 [ 2767.938337] ? lock_acquire+0x170/0x3f0 [ 2767.938352] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2767.938368] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2767.938380] ? __mutex_unlock_slowpath+0x75/0x770 [ 2767.938394] alloc_pages_current+0x155/0x260 [ 2767.938415] ion_page_pool_alloc+0x118/0x1b0 [ 2767.944601] active_anon:17479 inactive_anon:62888 isolated_anon:12 [ 2767.944601] active_file:2127 inactive_file:4375 isolated_file:37 [ 2767.944601] unevictable:0 dirty:20 writeback:0 unstable:0 [ 2767.944601] slab_reclaimable:12930 slab_unreclaimable:112657 [ 2767.944601] mapped:57155 shmem:64270 pagetables:800 bounce:0 [ 2767.944601] free:112548 free_pcp:96 free_cma:0 [ 2767.946336] ion_system_heap_allocate+0x133/0x8c0 [ 2767.946348] ? ion_alloc+0x187/0x810 [ 2767.946359] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2767.946369] ? ion_system_contig_heap_create+0x130/0x130 [ 2767.946378] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2767.946389] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2767.946401] ion_alloc+0x204/0x810 [ 2767.946414] ? ion_dma_buf_release+0x40/0x40 [ 2767.946425] ? __might_fault+0x177/0x1b0 [ 2767.946438] ion_ioctl+0xea/0x1f0 [ 2767.946447] ? ion_query_heaps+0x360/0x360 [ 2767.946459] ? lock_acquire+0x170/0x3f0 [ 2767.946468] ? lock_downgrade+0x740/0x740 [ 2767.946480] ? ion_query_heaps+0x360/0x360 [ 2767.956828] Node 0 active_anon:69404kB inactive_anon:235296kB active_file:8440kB inactive_file:17564kB unevictable:0kB isolated(anon):48kB isolated(file):148kB mapped:228812kB dirty:12kB writeback:0kB shmem:240696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2767.958430] do_vfs_ioctl+0x75a/0xff0 [ 2767.958445] ? ioctl_preallocate+0x1a0/0x1a0 [ 2767.958455] ? lock_downgrade+0x740/0x740 [ 2767.958469] ? __fget+0x225/0x360 [ 2767.958478] ? do_vfs_ioctl+0xff0/0xff0 [ 2767.958489] ? security_file_ioctl+0x83/0xb0 [ 2767.958500] SyS_ioctl+0x7f/0xb0 [ 2767.958508] ? do_vfs_ioctl+0xff0/0xff0 [ 2767.958520] do_syscall_64+0x1d5/0x640 [ 2767.958539] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2767.958548] RIP: 0033:0x45e219 [ 2767.958553] RSP: 002b:00007ff7ceb5bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2767.958564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2767.958572] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2767.965187] Node 1 active_anon:512kB inactive_anon:16256kB active_file:68kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:68kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2767.966411] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2767.966418] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2767.966423] R13: 00007fff3d908d9f R14: 00007ff7ceb5c9c0 R15: 000000000119bf8c [ 2768.247825] Node 0 DMA free:11104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:800kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2768.263775] syz-executor.3: [ 2768.275098] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2768.284103] Node 0 DMA32 free:255300kB min:36200kB low:45248kB high:54296kB active_anon:69204kB inactive_anon:235296kB active_file:8156kB inactive_file:17800kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7680kB pagetables:3128kB bounce:0kB free_pcp:184kB local_pcp:0kB free_cma:0kB [ 2768.305549] page allocation failure: order:4 [ 2768.314471] lowmem_reserve[]: 0 0 0 0 0 [ 2768.324859] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2768.341283] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2768.351674] lowmem_reserve[]: 0 0 0 0 0 [ 2768.367230] Node 1 Normal free:53576kB min:53696kB low:67120kB high:80544kB active_anon:512kB inactive_anon:16256kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:68kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2768.398679] lowmem_reserve[]: 0 0 0 0 0 [ 2768.399464] (null) [ 2768.404883] Node 0 DMA: 14*4kB (UM) 3*8kB (U) 1*16kB (U) 2*32kB (M) 1*64kB (U) 1*128kB (M) 2*256kB (U) 2*512kB (U) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (E) = 11104kB [ 2768.414746] syz-executor.3 cpuset= [ 2768.422091] Node 0 DMA32: 1*4kB (U) 69*8kB (UE) 2353*16kB (UE) 5903*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 227100kB [ 2768.430244] / [ 2768.442387] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2768.454744] mems_allowed=0-1 [ 2768.456786] Node 1 Normal: 214*4kB (UM) 356*8kB (UM) 326*16kB (UM) 345*32kB (UM) 7*64kB (UM) 4*128kB (UM) 2*256kB (UM) 3*512kB (UM) 0*1024kB 15*2048kB (U) 0*4096kB = 53688kB [ 2768.466980] CPU: 1 PID: 30887 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2768.481566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2768.490945] Call Trace: [ 2768.493545] dump_stack+0x1b2/0x281 [ 2768.497184] warn_alloc.cold+0x96/0x1cc [ 2768.501200] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2768.506228] ? zone_watermark_ok_safe+0x220/0x220 [ 2768.511118] __alloc_pages_nodemask+0x2127/0x2720 [ 2768.511879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2768.515970] ? io_schedule_timeout+0x140/0x140 [ 2768.529401] ? lock_acquire+0x170/0x3f0 [ 2768.533396] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2768.536019] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2768.538249] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2768.552283] ? __mutex_unlock_slowpath+0x75/0x770 [ 2768.557173] ? retint_kernel+0x2d/0x2d [ 2768.561078] alloc_pages_current+0x155/0x260 [ 2768.561871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2768.565500] ion_page_pool_alloc+0x118/0x1b0 [ 2768.578751] ion_system_heap_allocate+0x133/0x8c0 [ 2768.583606] ? ion_alloc+0x187/0x810 [ 2768.583619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2768.587327] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2768.601378] ? ion_system_contig_heap_create+0x130/0x130 [ 2768.606850] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2768.611878] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2768.611882] 70939 total pagecache pages [ 2768.611892] 0 pages in swap cache [ 2768.616733] ion_alloc+0x204/0x810 [ 2768.620711] Swap cache stats: add 0, delete 0, find 0/0 [ 2768.624948] ? ion_dma_buf_release+0x40/0x40 [ 2768.624961] ? __might_fault+0x177/0x1b0 [ 2768.624972] ion_ioctl+0xea/0x1f0 [ 2768.624981] ? ion_query_heaps+0x360/0x360 [ 2768.624993] ? lock_acquire+0x170/0x3f0 [ 2768.625002] ? lock_downgrade+0x740/0x740 [ 2768.625014] ? ion_query_heaps+0x360/0x360 [ 2768.651883] Free swap = 0kB [ 2768.654628] do_vfs_ioctl+0x75a/0xff0 [ 2768.658765] Total swap = 0kB [ 2768.663022] ? ioctl_preallocate+0x1a0/0x1a0 [ 2768.663033] ? lock_downgrade+0x740/0x740 [ 2768.663045] ? __fget+0x225/0x360 [ 2768.663053] ? do_vfs_ioctl+0xff0/0xff0 [ 2768.663063] ? security_file_ioctl+0x83/0xb0 [ 2768.663072] SyS_ioctl+0x7f/0xb0 [ 2768.663080] ? do_vfs_ioctl+0xff0/0xff0 [ 2768.663092] do_syscall_64+0x1d5/0x640 [ 2768.674859] 2097051 pages RAM [ 2768.677364] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2768.681492] 0 pages HighMem/MovableOnly [ 2768.684942] RIP: 0033:0x45e219 [ 2768.684947] RSP: 002b:00007fa35386fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2768.684957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2768.684961] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2768.684966] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2768.684970] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2768.684975] R13: 00007ffc07929f4f R14: 00007fa3538709c0 R15: 000000000119bf8c [ 2768.807679] 363840 pages reserved [ 2768.815774] 0 pages cma reserved [ 2769.276660] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2769.332076] Bluetooth: hci3 command 0x040f tx timeout [ 2769.342023] Bluetooth: hci1 command 0x040f tx timeout [ 2769.392026] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2769.397186] CPU: 1 PID: 30406 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2769.405067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2769.414434] Call Trace: [ 2769.417031] dump_stack+0x1b2/0x281 [ 2769.420660] dump_header+0x178/0x82f [ 2769.424430] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2769.429539] ? ___ratelimit+0x2cd/0x530 [ 2769.433521] oom_kill_process.cold+0x10/0xb18 [ 2769.438037] out_of_memory+0xe3e/0x1190 [ 2769.442031] ? oom_killer_disable+0x1c0/0x1c0 [ 2769.446533] ? mutex_trylock+0x152/0x1a0 [ 2769.450604] __alloc_pages_nodemask+0x23e1/0x2720 [ 2769.456509] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2769.461361] alloc_pages_current+0x155/0x260 [ 2769.465769] filemap_fault+0xea3/0x1980 [ 2769.469785] ext4_filemap_fault+0x84/0xb0 [ 2769.473961] __do_fault+0xfa/0x380 [ 2769.477507] __handle_mm_fault+0x2497/0x4620 [ 2769.481946] ? vm_insert_page+0x7c0/0x7c0 [ 2769.486093] ? free_object+0xe4/0x240 [ 2769.489916] handle_mm_fault+0x391/0x860 [ 2769.493990] __do_page_fault+0x549/0xad0 [ 2769.498053] ? spurious_fault+0x640/0x640 [ 2769.502287] ? do_page_fault+0x60/0x500 [ 2769.506350] ? page_fault+0x2f/0x50 [ 2769.509994] page_fault+0x45/0x50 [ 2769.513452] RIP: 0002:0x32 [ 2769.516286] RSP: 0bb8:00000000002a3c9b EFLAGS: 00000005 [ 2769.559538] Mem-Info: [ 2769.568726] active_anon:17444 inactive_anon:62887 isolated_anon:0 [ 2769.568726] active_file:14 inactive_file:8 isolated_file:0 [ 2769.568726] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2769.568726] slab_reclaimable:12906 slab_unreclaimable:112418 [ 2769.568726] mapped:52706 shmem:64269 pagetables:806 bounce:0 [ 2769.568726] free:25217 free_pcp:49 free_cma:0 [ 2769.606068] Node 0 active_anon:69264kB inactive_anon:235292kB active_file:4kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:210824kB dirty:0kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2769.634016] Node 1 active_anon:512kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2769.661498] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2769.687844] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2769.692956] Node 0 DMA32 free:36112kB min:36200kB low:45248kB high:54296kB active_anon:69264kB inactive_anon:235292kB active_file:4kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3152kB bounce:0kB free_pcp:200kB local_pcp:196kB free_cma:0kB [ 2769.732455] lowmem_reserve[]: 0 0 0 0 0 [ 2769.736472] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2769.766347] lowmem_reserve[]: 0 0 0 0 0 [ 2769.770376] Node 1 Normal free:53688kB min:53696kB low:67120kB high:80544kB active_anon:512kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2769.805449] lowmem_reserve[]: 0 0 0 0 0 [ 2769.809487] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11068kB [ 2769.827822] Node 0 DMA32: 1299*4kB (UME) 549*8kB (UME) 216*16kB (UME) 361*32kB (UME) 75*64kB (UM) 23*128kB (M) 10*256kB (M) 4*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 37972kB [ 2769.847825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2769.861643] Node 1 Normal: 214*4kB (UM) 356*8kB (UM) 326*16kB (UM) 345*32kB (UM) 7*64kB (UM) 4*128kB (UM) 2*256kB (UM) 3*512kB (UM) 0*1024kB 15*2048kB (U) 0*4096kB = 53688kB [ 2769.881500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2769.890476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2769.902825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2769.911701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2769.924179] 64297 total pagecache pages [ 2769.928228] 0 pages in swap cache [ 2769.931755] Swap cache stats: add 0, delete 0, find 0/0 [ 2769.938442] Free swap = 0kB [ 2769.941472] Total swap = 0kB [ 2769.947033] 2097051 pages RAM [ 2769.950161] 0 pages HighMem/MovableOnly [ 2769.955427] 363840 pages reserved [ 2769.958890] 0 pages cma reserved [ 2769.964772] Out of memory (oom_kill_allocating_task): Kill process 30406 (syz-executor.5) score 0 or sacrifice child [ 2769.980429] Killed process 30890 (syz-executor.5) total-vm:93348kB, anon-rss:1808kB, file-rss:34816kB, shmem-rss:0kB [ 2770.001803] oom_reaper: reaped process 30890 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2770.092724] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2770.105946] systemd-journal cpuset=/ mems_allowed=0-1 [ 2770.111224] CPU: 0 PID: 30364 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 2770.119580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2770.128945] Call Trace: [ 2770.131543] dump_stack+0x1b2/0x281 [ 2770.135167] dump_header+0x178/0x82f [ 2770.138904] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2770.144014] ? ___ratelimit+0x2cd/0x530 [ 2770.147995] oom_kill_process.cold+0x10/0xb18 [ 2770.152591] out_of_memory+0xe3e/0x1190 [ 2770.156575] ? oom_killer_disable+0x1c0/0x1c0 [ 2770.161071] ? mutex_trylock+0x152/0x1a0 [ 2770.165137] __alloc_pages_nodemask+0x23e1/0x2720 [ 2770.170008] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2770.174880] alloc_pages_current+0x155/0x260 [ 2770.179305] filemap_fault+0xea3/0x1980 [ 2770.186137] ext4_filemap_fault+0x84/0xb0 [ 2770.190269] __do_fault+0xfa/0x380 [ 2770.193807] __handle_mm_fault+0x2497/0x4620 [ 2770.198231] ? ep_poll+0x1ab/0xa50 [ 2770.201767] ? vm_insert_page+0x7c0/0x7c0 [ 2770.205906] handle_mm_fault+0x391/0x860 [ 2770.209969] __do_page_fault+0x549/0xad0 [ 2770.214036] ? spurious_fault+0x640/0x640 [ 2770.218185] ? do_page_fault+0x60/0x500 [ 2770.222163] ? page_fault+0x2f/0x50 [ 2770.225819] page_fault+0x45/0x50 [ 2770.229255] RIP: 0001:0xffffffffffffffff [ 2770.233412] RSP: 3c5d71e0:00007ffe2502f640 EFLAGS: 7ffe2502f450 [ 2770.245235] Mem-Info: [ 2770.252272] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2770.258349] active_anon:17419 inactive_anon:62887 isolated_anon:0 [ 2770.258349] active_file:14 inactive_file:14 isolated_file:0 [ 2770.258349] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2770.258349] slab_reclaimable:12897 slab_unreclaimable:111957 [ 2770.258349] mapped:52706 shmem:64269 pagetables:806 bounce:0 [ 2770.258349] free:13810 free_pcp:89 free_cma:0 [ 2770.271633] syz-executor.5 cpuset= [ 2770.304193] Node 0 active_anon:69164kB inactive_anon:235292kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210824kB dirty:0kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2770.331356] / [ 2770.338601] Node 1 active_anon:512kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2770.358699] mems_allowed=0-1 [ 2770.371403] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2770.388819] CPU: 1 PID: 30890 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2770.402578] lowmem_reserve[]: [ 2770.405559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2770.405569] Call Trace: [ 2770.408681] 0 [ 2770.418047] dump_stack+0x1b2/0x281 [ 2770.418062] warn_alloc.cold+0x96/0x1cc [ 2770.418073] ? zone_watermark_ok_safe+0x220/0x220 [ 2770.418084] ? usleep_range+0x130/0x130 [ 2770.418096] ? try_to_free_pages+0x23f/0x6e0 [ 2770.420679] 2717 [ 2770.422473] ? _find_next_bit+0xdb/0x100 [ 2770.422484] ? run_timer_softirq+0x5a0/0x5a0 [ 2770.422503] __alloc_pages_nodemask+0x2127/0x2720 [ 2770.422521] ? lock_acquire+0x170/0x3f0 [ 2770.426305] 2718 [ 2770.430309] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2770.435183] 2718 [ 2770.439110] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2770.443552] 2718 [ 2770.445574] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2770.454045] alloc_pages_current+0x155/0x260 [ 2770.454062] ion_page_pool_alloc+0x118/0x1b0 [ 2770.454077] ion_system_heap_allocate+0x133/0x8c0 [ 2770.458920] Node 0 [ 2770.462891] ? ion_alloc+0x187/0x810 [ 2770.462902] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2770.462911] ? ion_system_contig_heap_create+0x130/0x130 [ 2770.462921] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2770.462935] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2770.464996] DMA32 free:17508kB min:36200kB low:45248kB high:54296kB active_anon:69164kB inactive_anon:235292kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3152kB bounce:0kB free_pcp:232kB local_pcp:116kB free_cma:0kB [ 2770.469842] ion_alloc+0x204/0x810 [ 2770.471885] lowmem_reserve[]: [ 2770.476383] ? ion_dma_buf_release+0x40/0x40 [ 2770.476396] ? __might_fault+0x177/0x1b0 [ 2770.476408] ion_ioctl+0xea/0x1f0 [ 2770.476418] ? ion_query_heaps+0x360/0x360 [ 2770.478470] 0 [ 2770.483918] ? lock_acquire+0x170/0x3f0 [ 2770.483927] ? lock_downgrade+0x740/0x740 [ 2770.483937] ? ion_query_heaps+0x360/0x360 [ 2770.483948] do_vfs_ioctl+0x75a/0xff0 [ 2770.488385] 0 [ 2770.492811] ? ioctl_preallocate+0x1a0/0x1a0 [ 2770.492822] ? lock_downgrade+0x740/0x740 [ 2770.492834] ? __fget+0x225/0x360 [ 2770.492844] ? do_vfs_ioctl+0xff0/0xff0 [ 2770.497679] 0 [ 2770.499910] ? security_file_ioctl+0x83/0xb0 [ 2770.503638] 0 [ 2770.509056] SyS_ioctl+0x7f/0xb0 [ 2770.514554] 0 [ 2770.519538] ? do_vfs_ioctl+0xff0/0xff0 [ 2770.552840] do_syscall_64+0x1d5/0x640 [ 2770.552860] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2770.552869] RIP: 0033:0x45e219 [ 2770.552874] RSP: 002b:00007f7e25d1dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2770.552882] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2770.552888] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2770.552893] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2770.552898] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2770.552903] R13: 00007ffff6a70b9f R14: 00007f7e25d1e9c0 R15: 000000000119bf8c [ 2770.578802] warn_alloc_show_mem: 2 callbacks suppressed [ 2770.578807] Mem-Info: [ 2770.592780] Node 0 [ 2770.608788] active_anon:17419 inactive_anon:62887 isolated_anon:0 [ 2770.608788] active_file:14 inactive_file:14 isolated_file:0 [ 2770.608788] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2770.608788] slab_reclaimable:12897 slab_unreclaimable:111961 [ 2770.608788] mapped:52706 shmem:64269 pagetables:806 bounce:0 [ 2770.608788] free:13779 free_pcp:86 free_cma:0 [ 2770.618878] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2770.628676] Node 0 active_anon:69164kB inactive_anon:235292kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210824kB dirty:0kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2770.632185] lowmem_reserve[]: [ 2770.633893] Node 1 active_anon:512kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2770.639014] 0 [ 2770.649532] Node 0 [ 2770.661908] 0 [ 2770.673083] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2770.689665] 0 [ 2770.703056] lowmem_reserve[]: [ 2770.740558] 0 [ 2770.764690] 0 [ 2770.800848] 0 [ 2770.825646] 2717 [ 2770.858927] Node 1 Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:512kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2770.867367] 2718 2718 2718 [ 2770.899625] Node 0 DMA32 free:17384kB min:36200kB low:45248kB high:54296kB active_anon:69164kB inactive_anon:235292kB active_file:16kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3152kB bounce:0kB free_pcp:212kB local_pcp:104kB free_cma:0kB [ 2770.901292] lowmem_reserve[]: [ 2770.938182] lowmem_reserve[]: 0 0 0 0 0 [ 2770.941798] 0 [ 2770.947676] Node 0 [ 2770.947678] 0 0 [ 2770.949506] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2770.949513] lowmem_reserve[]: [ 2770.951767] 0 [ 2770.960622] 0 [ 2770.991771] 0 [ 2770.992981] 0 0 0 0 [ 2770.997729] Node 1 [ 2770.997732] Node 0 DMA: [ 2770.999983] Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:512kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2770.999990] lowmem_reserve[]: [ 2771.012677] 1*4kB [ 2771.039959] 0 0 0 0 0 [ 2771.045095] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10956kB [ 2771.047939] (U) [ 2771.067731] Node 0 DMA32: 1280*4kB (ME) 461*8kB (ME) 182*16kB (UME) 45*32kB (UME) 38*64kB (UM) 8*128kB (UM) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17384kB [ 2771.071681] 1*8kB [ 2771.095044] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2771.099360] (U) [ 2771.116865] Node 1 Normal: 8*4kB (M) 9*8kB (UM) 5*16kB (UM) 5*32kB (M) 5*64kB (M) 4*128kB (UM) 2*256kB (UM) 3*512kB (UM) 1*1024kB (U) 11*2048kB (U) 0*4096kB = 26776kB [ 2771.120612] 0*16kB [ 2771.143331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2771.147327] 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10956kB [ 2771.161085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2771.177955] Node 0 DMA32: 1280*4kB (ME) 461*8kB (ME) 182*16kB (UME) 45*32kB (UME) 38*64kB (UM) 8*128kB (UM) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17384kB [ 2771.188936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2771.208196] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2771.212679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2771.229730] Node 1 Normal: 8*4kB (M) 9*8kB (UM) 5*16kB (UM) 5*32kB (M) 5*64kB (M) 4*128kB (UM) 2*256kB (UM) 3*512kB (UM) 1*1024kB (U) 11*2048kB (U) 0*4096kB = 26776kB [ 2771.238826] 64297 total pagecache pages [ 2771.251549] 0 pages in swap cache [ 2771.257932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2771.261865] Swap cache stats: add 0, delete 0, find 0/0 [ 2771.276159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2771.280737] Free swap = 0kB [ 2771.288027] Total swap = 0kB [ 2771.291082] 2097051 pages RAM [ 2771.293334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2771.302674] 0 pages HighMem/MovableOnly [ 2771.307102] 363840 pages reserved [ 2771.310546] 0 pages cma reserved [ 2771.315744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2771.340674] 64297 total pagecache pages [ 2771.349947] 0 pages in swap cache [ 2771.358005] Swap cache stats: add 0, delete 0, find 0/0 [ 2771.364121] Free swap = 0kB [ 2771.367637] Total swap = 0kB [ 2771.371162] 2097051 pages RAM [ 2771.379816] 0 pages HighMem/MovableOnly [ 2771.384816] 363840 pages reserved [ 2771.388834] 0 pages cma reserved [ 2771.397321] Out of memory (oom_kill_allocating_task): Kill process 30364 (systemd-journal) score 0 or sacrifice child [ 2771.409311] Killed process 30364 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1848kB [ 2771.413499] Bluetooth: hci1 command 0x0419 tx timeout [ 2771.432560] oom_reaper: reaped process 30364 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1928kB [ 2771.496970] Bluetooth: hci3 command 0x0419 tx timeout [ 2771.511784] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2771.531164] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2771.536100] CPU: 1 PID: 8003 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2771.543554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.552931] Call Trace: [ 2771.555536] dump_stack+0x1b2/0x281 [ 2771.559185] dump_header+0x178/0x82f [ 2771.562925] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2771.568025] ? ___ratelimit+0x2cd/0x530 [ 2771.571994] oom_kill_process.cold+0x10/0xb18 [ 2771.576497] out_of_memory+0xe3e/0x1190 [ 2771.580469] ? oom_killer_disable+0x1c0/0x1c0 [ 2771.584959] ? mutex_trylock+0x152/0x1a0 [ 2771.589019] __alloc_pages_nodemask+0x23e1/0x2720 [ 2771.593867] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2771.598732] alloc_pages_current+0x155/0x260 [ 2771.603140] filemap_fault+0xea3/0x1980 [ 2771.607125] ext4_filemap_fault+0x84/0xb0 [ 2771.611278] __do_fault+0xfa/0x380 [ 2771.616318] __handle_mm_fault+0x2497/0x4620 [ 2771.620749] ? vm_insert_page+0x7c0/0x7c0 [ 2771.624899] ? queue_work_on+0xf7/0x1d0 [ 2771.628885] handle_mm_fault+0x391/0x860 [ 2771.632969] __do_page_fault+0x549/0xad0 [ 2771.639049] ? spurious_fault+0x640/0x640 [ 2771.643219] ? do_page_fault+0x60/0x500 [ 2771.647205] ? page_fault+0x2f/0x50 [ 2771.650829] page_fault+0x45/0x50 [ 2771.654366] RIP: 0000:0xb358f8 [ 2771.657562] RSP: 4e20:000000c00003dfa0 EFLAGS: 00438920 [ 2771.676932] syz-executor.5: [ 2771.685536] Mem-Info: [ 2771.691020] active_anon:17304 inactive_anon:62886 isolated_anon:0 [ 2771.691020] active_file:45 inactive_file:32 isolated_file:0 [ 2771.691020] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2771.691020] slab_reclaimable:12897 slab_unreclaimable:111957 [ 2771.691020] mapped:52262 shmem:64269 pagetables:781 bounce:0 [ 2771.691020] free:16321 free_pcp:0 free_cma:0 [ 2771.702636] page allocation failure: order:4 [ 2771.755828] Node 0 active_anon:68704kB inactive_anon:235288kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208952kB dirty:96kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2771.766082] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2771.797830] Node 1 active_anon:512kB inactive_anon:16256kB active_file:68kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:4kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2771.803231] (null) [ 2771.807120] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2771.854592] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2771.884964] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2771.889516] CPU: 0 PID: 30890 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2771.900266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.901290] Node 0 [ 2771.909631] Call Trace: [ 2771.909654] dump_stack+0x1b2/0x281 [ 2771.909667] warn_alloc.cold+0x96/0x1cc [ 2771.909678] ? zone_watermark_ok_safe+0x220/0x220 [ 2771.909699] __alloc_pages_nodemask+0x2127/0x2720 [ 2771.909710] ? lock_acquire+0x170/0x3f0 [ 2771.909723] ? lock_acquire+0x170/0x3f0 [ 2771.909738] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2771.909755] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2771.909766] ? __mutex_unlock_slowpath+0x75/0x770 [ 2771.925286] DMA32 free:27804kB min:36200kB low:45248kB high:54296kB active_anon:68704kB inactive_anon:235288kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:96kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3052kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 2771.927011] alloc_pages_current+0x155/0x260 [ 2771.931832] lowmem_reserve[]: [ 2771.935808] ion_page_pool_alloc+0x118/0x1b0 [ 2771.935818] ion_system_heap_allocate+0x133/0x8c0 [ 2771.935830] ? _raw_spin_unlock+0x29/0x40 [ 2771.935839] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2771.935855] ? ion_system_contig_heap_create+0x130/0x130 [ 2771.935865] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2771.935883] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2771.935901] ion_alloc+0x27a/0x810 [ 2771.935917] ? ion_dma_buf_release+0x40/0x40 [ 2771.954699] 0 [ 2771.955014] ? __might_fault+0x177/0x1b0 [ 2771.996274] 0 [ 2771.998139] ion_ioctl+0xea/0x1f0 [ 2772.011501] 0 [ 2772.012028] ? ion_query_heaps+0x360/0x360 [ 2772.022250] 0 [ 2772.022479] ? lock_acquire+0x170/0x3f0 [ 2772.022489] ? lock_downgrade+0x740/0x740 [ 2772.022500] ? ion_query_heaps+0x360/0x360 [ 2772.022511] do_vfs_ioctl+0x75a/0xff0 [ 2772.022525] ? ioctl_preallocate+0x1a0/0x1a0 [ 2772.022533] ? lock_downgrade+0x740/0x740 [ 2772.022547] ? __fget+0x225/0x360 [ 2772.022556] ? do_vfs_ioctl+0xff0/0xff0 [ 2772.022566] ? security_file_ioctl+0x83/0xb0 [ 2772.022576] SyS_ioctl+0x7f/0xb0 [ 2772.022586] ? do_vfs_ioctl+0xff0/0xff0 [ 2772.039314] 0 [ 2772.041199] do_syscall_64+0x1d5/0x640 [ 2772.046426] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2772.048229] Node 0 [ 2772.052469] RIP: 0033:0x45e219 [ 2772.052475] RSP: 002b:00007f7e25d1dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2772.052484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2772.052488] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2772.052493] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2772.052498] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2772.052503] R13: 00007ffff6a70b9f R14: 00007f7e25d1e9c0 R15: 000000000119bf8c [ 2772.073273] Mem-Info: [ 2772.084938] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2772.104174] active_anon:17304 inactive_anon:62886 isolated_anon:0 [ 2772.104174] active_file:8 inactive_file:29 isolated_file:0 [ 2772.104174] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2772.104174] slab_reclaimable:12897 slab_unreclaimable:111957 [ 2772.104174] mapped:52262 shmem:64269 pagetables:781 bounce:0 [ 2772.104174] free:16321 free_pcp:56 free_cma:0 [ 2772.113250] lowmem_reserve[]: [ 2772.132164] Node 0 active_anon:68704kB inactive_anon:235288kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208952kB dirty:96kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2772.143098] 0 [ 2772.166805] Node 1 active_anon:512kB inactive_anon:16256kB active_file:68kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:4kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2772.191921] 0 [ 2772.227331] Node 0 [ 2772.271640] 0 [ 2772.287528] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2772.310750] 0 [ 2772.321930] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2772.328831] Node 0 DMA32 free:27804kB min:36200kB low:45248kB high:54296kB active_anon:68704kB inactive_anon:235288kB active_file:96kB inactive_file:32kB unevictable:0kB writepending:96kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3052kB bounce:0kB free_pcp:220kB local_pcp:108kB free_cma:0kB [ 2772.340426] 0 [ 2772.368878] lowmem_reserve[]: 0 0 0 0 0 [ 2772.378002] Node 1 Normal free:26492kB min:53696kB low:67120kB high:80544kB active_anon:512kB inactive_anon:16256kB active_file:68kB inactive_file:112kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2772.381612] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2772.422026] lowmem_reserve[]: 0 0 0 0 0 [ 2772.458338] lowmem_reserve[]: [ 2772.458740] Node 0 [ 2772.458743] 0 0 [ 2772.461925] DMA: 1*4kB (U) 1*8kB (U) 0*16kB 3*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10988kB [ 2772.479798] 0 [ 2772.501740] Node 0 DMA32: 1271*4kB (UME) 484*8kB (UME) 195*16kB (UME) 493*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27852kB [ 2772.505802] 0 [ 2772.528698] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2772.533025] 0 [ 2772.553118] Node 1 Normal: 9*4kB (UM) 25*8kB (UM) 183*16kB (UM) 323*32kB (UM) 5*64kB (M) 3*128kB (M) 2*256kB (UM) 4*512kB (UM) 0*1024kB 5*2048kB (UM) 0*4096kB = 27004kB [ 2772.558270] Node 1 [ 2772.579635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2772.583727] Normal free:27004kB min:53696kB low:67120kB high:80544kB active_anon:512kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2772.601222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2772.637900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2772.639228] lowmem_reserve[]: [ 2772.649157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2772.653370] 0 0 0 0 0 [ 2772.669529] 64296 total pagecache pages [ 2772.673941] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 3*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10988kB [ 2772.680030] 0 pages in swap cache [ 2772.702120] Node 0 DMA32: 1271*4kB (UME) 484*8kB (UME) 195*16kB (UME) 494*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27884kB [ 2772.707736] Swap cache stats: add 0, delete 0, find 0/0 [ 2772.726896] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2772.735171] Free swap = 0kB [ 2772.740707] Total swap = 0kB [ 2772.742154] Node 1 Normal: 9*4kB (UM) 25*8kB (UM) 183*16kB (UM) 323*32kB (UM) 5*64kB (M) 3*128kB (M) 2*256kB (UM) 4*512kB (UM) 0*1024kB 5*2048kB (UM) 0*4096kB = 27004kB [ 2772.758991] 2097051 pages RAM [ 2772.776750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2772.785451] 0 pages HighMem/MovableOnly [ 2772.789611] 363840 pages reserved [ 2772.791853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2772.807194] 0 pages cma reserved [ 2772.809053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2772.810590] Out of memory (oom_kill_allocating_task): Kill process 8003 (syz-fuzzer) score 0 or sacrifice child [ 2772.823443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2772.845522] Killed process 30404 (syz-executor.5) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 2772.851182] 64296 total pagecache pages [ 2772.872800] 0 pages in swap cache [ 2772.876298] Swap cache stats: add 0, delete 0, find 0/0 [ 2772.881660] Free swap = 0kB [ 2772.893686] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2772.910453] systemd cpuset=/ mems_allowed=0-1 [ 2772.911960] Total swap = 0kB [ 2772.915095] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.217-syzkaller #0 [ 2772.915100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2772.915104] Call Trace: [ 2772.915123] dump_stack+0x1b2/0x281 [ 2772.915136] dump_header+0x178/0x82f [ 2772.915147] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2772.915156] ? ___ratelimit+0x2cd/0x530 [ 2772.915166] oom_kill_process.cold+0x10/0xb18 [ 2772.941171] 2097051 pages RAM [ 2772.944391] ? lock_downgrade+0x740/0x740 [ 2772.944405] out_of_memory+0x2dc/0x1190 [ 2772.944418] ? oom_killer_disable+0x1c0/0x1c0 [ 2772.944426] ? mutex_trylock+0x152/0x1a0 [ 2772.944435] __alloc_pages_nodemask+0x23e1/0x2720 [ 2772.944454] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2772.944479] alloc_pages_current+0x155/0x260 [ 2772.944490] filemap_fault+0xea3/0x1980 [ 2772.944507] ext4_filemap_fault+0x84/0xb0 [ 2772.944520] __do_fault+0xfa/0x380 [ 2772.981535] 0 pages HighMem/MovableOnly [ 2772.982662] __handle_mm_fault+0x2497/0x4620 [ 2772.982675] ? ep_poll+0x1ab/0xa50 [ 2772.982682] ? vm_insert_page+0x7c0/0x7c0 [ 2772.982701] handle_mm_fault+0x391/0x860 [ 2772.982712] __do_page_fault+0x549/0xad0 [ 2772.982724] ? spurious_fault+0x640/0x640 [ 2772.982733] ? do_page_fault+0x60/0x500 [ 2772.982743] ? page_fault+0x2f/0x50 [ 2772.982751] page_fault+0x45/0x50 [ 2772.982759] RIP: 0001:0xffffffffffffffff [ 2772.982764] RSP: 49385f50:00007ffc9ea6b0d0 EFLAGS: 7ffc9ea6ae10 [ 2772.991091] Mem-Info: [ 2773.002896] 363840 pages reserved [ 2773.011936] active_anon:17304 inactive_anon:62886 isolated_anon:0 [ 2773.011936] active_file:41 inactive_file:0 isolated_file:0 [ 2773.011936] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2773.011936] slab_reclaimable:12892 slab_unreclaimable:111955 [ 2773.011936] mapped:52225 shmem:64269 pagetables:781 bounce:0 [ 2773.011936] free:16461 free_pcp:91 free_cma:0 [ 2773.012221] 0 pages cma reserved [ 2773.015827] Node 0 active_anon:68704kB inactive_anon:235288kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2773.015842] Node 1 active_anon:512kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2773.015846] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2773.015864] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2773.015882] Node 0 DMA32 free:27852kB min:36200kB low:45248kB high:54296kB active_anon:68704kB inactive_anon:235288kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3052kB bounce:0kB free_pcp:364kB local_pcp:92kB free_cma:0kB [ 2773.015904] lowmem_reserve[]: 0 0 0 0 0 [ 2773.219768] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2773.249720] lowmem_reserve[]: 0 0 0 0 0 [ 2773.253810] Node 1 Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:512kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2773.286460] lowmem_reserve[]: 0 0 0 0 0 [ 2773.290491] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 2*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10968kB [ 2773.312874] Node 0 DMA32: 1234*4kB (UME) 400*8kB (ME) 138*16kB (UME) 242*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18088kB [ 2773.338027] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2773.357351] Node 1 Normal: 9*4kB (UM) 8*8kB (M) 176*16kB (UM) 323*32kB (UM) 5*64kB (M) 3*128kB (M) 2*256kB (UM) 4*512kB (UM) 0*1024kB 5*2048kB (UM) 0*4096kB = 26756kB [ 2773.381334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2773.390265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2773.407794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2773.429264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2773.437979] 64296 total pagecache pages [ 2773.442005] 0 pages in swap cache [ 2773.450066] Swap cache stats: add 0, delete 0, find 0/0 [ 2773.455613] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2773.471326] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2773.471361] Free swap = 0kB [ 2773.479611] Total swap = 0kB [ 2773.485076] 2097051 pages RAM [ 2773.488201] 0 pages HighMem/MovableOnly [ 2773.492206] 363840 pages reserved [ 2773.496289] 0 pages cma reserved [ 2773.499019] CPU: 0 PID: 30890 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2773.499657] Out of memory: Kill process 30881 (syz-executor.0) score 1005 or sacrifice child [ 2773.507561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2773.507567] Call Trace: [ 2773.507592] dump_stack+0x1b2/0x281 [ 2773.507605] warn_alloc.cold+0x96/0x1cc [ 2773.507617] ? zone_watermark_ok_safe+0x220/0x220 [ 2773.507627] ? usleep_range+0x130/0x130 [ 2773.507635] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2773.507646] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2773.507656] ? run_timer_softirq+0x5a0/0x5a0 [ 2773.507678] __alloc_pages_nodemask+0x2127/0x2720 [ 2773.507694] ? lock_acquire+0x170/0x3f0 [ 2773.519209] Killed process 30882 (syz-executor.0) total-vm:93352kB, anon-rss:1808kB, file-rss:34816kB, shmem-rss:0kB [ 2773.525724] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2773.525737] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2773.525753] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2773.525772] alloc_pages_current+0x155/0x260 [ 2773.525785] ion_page_pool_alloc+0x118/0x1b0 [ 2773.562300] oom_reaper: reaped process 30882 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2773.564307] ion_system_heap_allocate+0x133/0x8c0 [ 2773.564320] ? _raw_spin_unlock+0x29/0x40 [ 2773.564328] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2773.564338] ? ion_system_contig_heap_create+0x130/0x130 [ 2773.564349] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2773.564360] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2773.564372] ion_alloc+0x27a/0x810 [ 2773.564385] ? ion_dma_buf_release+0x40/0x40 [ 2773.574131] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 2773.579054] ? __might_fault+0x177/0x1b0 [ 2773.588548] (null) [ 2773.588602] ion_ioctl+0xea/0x1f0 [ 2773.594134] , order=0, oom_score_adj=0 [ 2773.598465] ? ion_query_heaps+0x360/0x360 [ 2773.607208] ion_system_heap cpuset= [ 2773.612927] ? lock_acquire+0x170/0x3f0 [ 2773.612936] ? lock_downgrade+0x740/0x740 [ 2773.612946] ? ion_query_heaps+0x360/0x360 [ 2773.612956] do_vfs_ioctl+0x75a/0xff0 [ 2773.612968] ? ioctl_preallocate+0x1a0/0x1a0 [ 2773.612983] ? lock_downgrade+0x740/0x740 [ 2773.612998] ? __fget+0x225/0x360 [ 2773.617863] / [ 2773.622014] ? do_vfs_ioctl+0xff0/0xff0 [ 2773.631284] mems_allowed=0-1 [ 2773.632373] ? security_file_ioctl+0x83/0xb0 [ 2773.722298] SyS_ioctl+0x7f/0xb0 [ 2773.725693] ? do_vfs_ioctl+0xff0/0xff0 [ 2773.729679] do_syscall_64+0x1d5/0x640 [ 2773.733576] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2773.738782] RIP: 0033:0x45e219 [ 2773.741987] RSP: 002b:00007f7e25d1dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2773.749700] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2773.756979] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2773.764252] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2773.771529] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2773.778803] R13: 00007ffff6a70b9f R14: 00007f7e25d1e9c0 R15: 000000000119bf8c [ 2773.794846] CPU: 1 PID: 4244 Comm: ion_system_heap Not tainted 4.14.217-syzkaller #0 [ 2773.802758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2773.810647] Mem-Info: [ 2773.812208] Call Trace: [ 2773.812229] dump_stack+0x1b2/0x281 [ 2773.814699] active_anon:17267 inactive_anon:62886 isolated_anon:0 [ 2773.814699] active_file:14 inactive_file:13 isolated_file:0 [ 2773.814699] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2773.814699] slab_reclaimable:12838 slab_unreclaimable:111803 [ 2773.814699] mapped:52225 shmem:64269 pagetables:757 bounce:0 [ 2773.814699] free:13952 free_pcp:133 free_cma:0 [ 2773.817210] dump_header+0x178/0x82f [ 2773.820851] Node 0 active_anon:68556kB inactive_anon:235288kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2773.854074] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2773.854084] ? ___ratelimit+0x2cd/0x530 [ 2773.854094] oom_kill_process.cold+0x10/0xb18 [ 2773.854106] ? lock_downgrade+0x740/0x740 [ 2773.854121] out_of_memory+0x2dc/0x1190 [ 2773.889787] Node 1 active_anon:512kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2773.890688] ? oom_killer_disable+0x1c0/0x1c0 [ 2773.894686] Node 0 [ 2773.899142] ? mutex_trylock+0x152/0x1a0 [ 2773.903323] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2773.907334] __alloc_pages_nodemask+0x23e1/0x2720 [ 2773.933897] lowmem_reserve[]: [ 2773.938373] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2773.940601] 0 [ 2773.944667] ? kmem_cache_alloc_node_trace+0x153/0x400 [ 2773.944678] ? cache_grow_begin+0x41/0x630 [ 2773.944688] cache_grow_begin+0x91/0x630 [ 2773.944701] ? cache_grow_begin+0x91/0x630 [ 2773.970322] 2717 [ 2773.975247] fallback_alloc+0x207/0x2c0 [ 2773.975263] kmem_cache_alloc_node_trace+0xed/0x400 [ 2773.975273] alloc_vmap_area+0xf0/0x7c0 [ 2773.975287] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2773.978388] 2718 [ 2773.983319] ? purge_vmap_area_lazy+0xb0/0xb0 [ 2773.983326] ? __get_vm_area_node+0xed/0x340 [ 2773.983335] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2773.983343] __get_vm_area_node+0x126/0x340 [ 2773.983355] vmap+0xd5/0x290 [ 2773.985144] 2718 [ 2773.990439] ? ion_heap_clear_pages+0x23/0x70 [ 2773.994696] 2718 [ 2773.998716] ? vunmap+0x50/0x50 [ 2774.004993] ? __vunmap+0x21c/0x300 [ 2774.008965] Node 0 [ 2774.013986] ion_heap_clear_pages+0x23/0x70 [ 2774.013997] ion_heap_sglist_zero+0x165/0x220 [ 2774.014005] ? ion_heap_clear_pages+0x70/0x70 [ 2774.014017] ? finish_task_switch+0x178/0x610 [ 2774.014039] ? pagerange_is_ram_callback+0x100/0x100 [ 2774.018028] DMA32 free:18084kB min:36200kB low:45248kB high:54296kB active_anon:68556kB inactive_anon:235288kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2956kB bounce:0kB free_pcp:412kB local_pcp:168kB free_cma:0kB [ 2774.023462] ? ion_heap_deferred_free+0x222/0x470 [ 2774.023473] ion_system_heap_free+0x1d0/0x240 [ 2774.023485] ion_buffer_destroy+0x132/0x190 [ 2774.023498] ion_heap_deferred_free+0x22a/0x470 [ 2774.025549] lowmem_reserve[]: [ 2774.030053] ? __schedule+0x7f7/0x1de0 [ 2774.034484] 0 [ 2774.039725] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 2774.044067] 0 [ 2774.047085] ? wait_woken+0x230/0x230 [ 2774.049156] 0 [ 2774.053674] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2774.053686] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 2774.053696] kthread+0x30d/0x420 [ 2774.053709] ? kthread_create_on_node+0xd0/0xd0 [ 2774.055769] 0 [ 2774.059138] ret_from_fork+0x24/0x30 [ 2774.062786] 0 [ 2774.087335] Mem-Info: [ 2774.092697] syz-executor.0: [ 2774.125666] active_anon:17267 inactive_anon:62886 isolated_anon:0 [ 2774.125666] active_file:14 inactive_file:13 isolated_file:0 [ 2774.125666] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2774.125666] slab_reclaimable:12838 slab_unreclaimable:111803 [ 2774.125666] mapped:52225 shmem:64269 pagetables:757 bounce:0 [ 2774.125666] free:13952 free_pcp:131 free_cma:0 [ 2774.143522] page allocation failure: order:0 [ 2774.170096] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2774.178328] Node 0 [ 2774.192672] (null) [ 2774.238106] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2774.246948] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2774.278119] lowmem_reserve[]: 0 [ 2774.279531] CPU: 0 PID: 30882 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2774.279540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2774.291916] 0 [ 2774.300237] Call Trace: [ 2774.300265] dump_stack+0x1b2/0x281 [ 2774.300279] warn_alloc.cold+0x96/0x1cc [ 2774.300290] ? zone_watermark_ok_safe+0x220/0x220 [ 2774.300300] ? usleep_range+0x130/0x130 [ 2774.300308] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2774.300320] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2774.300329] ? run_timer_softirq+0x5a0/0x5a0 [ 2774.300346] __alloc_pages_nodemask+0x2127/0x2720 [ 2774.300362] ? lock_acquire+0x170/0x3f0 [ 2774.300382] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2774.316506] 0 [ 2774.317438] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2774.321399] 0 [ 2774.326530] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2774.326545] ? __alloc_pages_nodemask+0x9/0x2720 [ 2774.326557] alloc_pages_current+0x155/0x260 [ 2774.326573] ion_page_pool_alloc+0x118/0x1b0 [ 2774.326587] ion_system_heap_allocate+0x133/0x8c0 [ 2774.326599] ? ion_alloc+0x187/0x810 [ 2774.326610] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2774.326621] ? ion_system_contig_heap_create+0x130/0x130 [ 2774.326630] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2774.326641] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2774.326653] ion_alloc+0x204/0x810 [ 2774.344878] 0 [ 2774.344939] ? ion_dma_buf_release+0x40/0x40 [ 2774.351756] ? __might_fault+0x177/0x1b0 [ 2774.370593] Node 1 [ 2774.372636] ion_ioctl+0xea/0x1f0 [ 2774.379266] Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:512kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:72kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2774.381886] ? ion_query_heaps+0x360/0x360 [ 2774.399737] lowmem_reserve[]: [ 2774.401472] ? lock_acquire+0x170/0x3f0 [ 2774.420515] 0 [ 2774.422315] ? lock_downgrade+0x740/0x740 [ 2774.430743] 0 [ 2774.453524] ? ion_query_heaps+0x360/0x360 [ 2774.453538] do_vfs_ioctl+0x75a/0xff0 [ 2774.453550] ? ioctl_preallocate+0x1a0/0x1a0 [ 2774.453559] ? lock_downgrade+0x740/0x740 [ 2774.453571] ? __fget+0x225/0x360 [ 2774.453579] ? do_vfs_ioctl+0xff0/0xff0 [ 2774.453590] ? security_file_ioctl+0x83/0xb0 [ 2774.453599] SyS_ioctl+0x7f/0xb0 [ 2774.453607] ? do_vfs_ioctl+0xff0/0xff0 [ 2774.453618] do_syscall_64+0x1d5/0x640 [ 2774.453636] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2774.453645] RIP: 0033:0x45e219 [ 2774.453651] RSP: 002b:00007ff7ceb5bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2774.453661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2774.453674] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2774.453679] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2774.453684] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2774.453689] R13: 00007fff3d908d9f R14: 00007ff7ceb5c9c0 R15: 000000000119bf8c [ 2774.580192] 0 0 0 [ 2774.582385] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 2*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10968kB [ 2774.600256] Node 0 DMA32: 1271*4kB (UME) 482*8kB (UME) 141*16kB (UME) 267*32kB (UME) 2*64kB (UM) 4*128kB (UM) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 21148kB [ 2774.621080] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2774.631935] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (M) 1*512kB (U) 98*1024kB (U) 2*2048kB (U) 0*4096kB = 105348kB [ 2774.650453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2774.659428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2774.663702] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2774.671990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2774.704810] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2774.707456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2774.734993] systemd[1]: Stopped Journal Service. [ 2774.747146] 66627 total pagecache pages [ 2774.751167] 0 pages in swap cache [ 2774.766842] Swap cache stats: add 0, delete 0, find 0/0 [ 2774.772172] systemd[1]: Starting Journal Service... [ 2774.772241] Free swap = 0kB [ 2774.815887] Total swap = 0kB [ 2774.818957] 2097051 pages RAM [ 2774.822094] 0 pages HighMem/MovableOnly [ 2774.852998] 363840 pages reserved [ 2774.856507] 0 pages cma reserved [ 2774.892984] Node 0 active_anon:66852kB inactive_anon:235288kB active_file:28kB inactive_file:648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174484kB dirty:0kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2775.000249] Node 1 active_anon:612kB inactive_anon:16256kB active_file:108kB inactive_file:9808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7100kB dirty:100kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2775.037477] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2775.074629] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2775.102957] Node 0 DMA32 free:296116kB min:36200kB low:45248kB high:54296kB active_anon:66752kB inactive_anon:235288kB active_file:228kB inactive_file:944kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2808kB bounce:0kB free_pcp:1252kB local_pcp:628kB free_cma:0kB [ 2775.150760] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2775.173431] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2775.178869] CPU: 0 PID: 30882 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2775.186761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2775.196120] Call Trace: [ 2775.198722] dump_stack+0x1b2/0x281 [ 2775.202353] warn_alloc.cold+0x96/0x1cc [ 2775.206333] ? zone_watermark_ok_safe+0x220/0x220 [ 2775.211201] __alloc_pages_nodemask+0x2127/0x2720 [ 2775.216084] ? lock_acquire+0x170/0x3f0 [ 2775.220071] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2775.224929] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2775.230391] ? __mutex_unlock_slowpath+0x75/0x770 [ 2775.235248] alloc_pages_current+0x155/0x260 [ 2775.239667] ion_page_pool_alloc+0x118/0x1b0 [ 2775.244124] ion_system_heap_allocate+0x133/0x8c0 [ 2775.249495] ? _raw_spin_unlock+0x29/0x40 [ 2775.253696] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2775.258657] ? ion_system_contig_heap_create+0x130/0x130 [ 2775.264117] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2775.269146] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2775.274006] ion_alloc+0x27a/0x810 [ 2775.277603] ? ion_dma_buf_release+0x40/0x40 [ 2775.282071] ? __might_fault+0x177/0x1b0 [ 2775.286159] ion_ioctl+0xea/0x1f0 [ 2775.289626] ? ion_query_heaps+0x360/0x360 [ 2775.293877] ? lock_acquire+0x170/0x3f0 [ 2775.297899] ? lock_downgrade+0x740/0x740 [ 2775.302106] ? ion_query_heaps+0x360/0x360 [ 2775.306352] do_vfs_ioctl+0x75a/0xff0 [ 2775.310206] ? ioctl_preallocate+0x1a0/0x1a0 [ 2775.314627] ? lock_downgrade+0x740/0x740 [ 2775.318788] ? __fget+0x225/0x360 [ 2775.322279] ? do_vfs_ioctl+0xff0/0xff0 [ 2775.326264] ? security_file_ioctl+0x83/0xb0 [ 2775.330685] SyS_ioctl+0x7f/0xb0 [ 2775.334058] ? do_vfs_ioctl+0xff0/0xff0 [ 2775.338045] do_syscall_64+0x1d5/0x640 [ 2775.341967] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2775.347160] RIP: 0033:0x45e219 [ 2775.350355] RSP: 002b:00007ff7ceb5bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2775.358070] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2775.365370] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2775.372645] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2775.379923] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2775.387200] R13: 00007fff3d908d9f R14: 00007ff7ceb5c9c0 R15: 000000000119bf8c [ 2775.396632] warn_alloc_show_mem: 1 callbacks suppressed [ 2775.396637] Mem-Info: [ 2775.404983] active_anon:16841 inactive_anon:62886 isolated_anon:0 [ 2775.404983] active_file:433 inactive_file:348 isolated_file:0 [ 2775.404983] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2775.404983] slab_reclaimable:12838 slab_unreclaimable:110768 [ 2775.404983] mapped:44071 shmem:64269 pagetables:720 bounce:0 [ 2775.404983] free:40538 free_pcp:434 free_cma:0 [ 2775.439528] Node 0 active_anon:66760kB inactive_anon:235288kB active_file:612kB inactive_file:556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174508kB dirty:0kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2775.468404] Node 1 active_anon:572kB inactive_anon:16256kB active_file:1008kB inactive_file:860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1768kB dirty:88kB writeback:12kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2775.496989] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2775.527745] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2775.551124] Node 0 DMA32 free:36088kB min:36200kB low:45248kB high:54296kB active_anon:66768kB inactive_anon:235288kB active_file:116kB inactive_file:240kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2904kB bounce:0kB free_pcp:640kB local_pcp:0kB free_cma:0kB [ 2775.567034] lowmem_reserve[]: 0 0 0 0 0 [ 2775.584954] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2775.590757] lowmem_reserve[]: [ 2775.610966] lowmem_reserve[]: 0 0 0 0 0 [ 2775.610989] Node 1 Normal free:35032kB min:53696kB low:67120kB high:80544kB active_anon:668kB inactive_anon:16256kB active_file:500kB inactive_file:352kB unevictable:0kB writepending:136kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:72kB bounce:0kB free_pcp:196kB local_pcp:196kB free_cma:0kB [ 2775.611009] lowmem_reserve[]: 0 0 0 0 0 [ 2775.611027] Node 0 DMA: 18*4kB (U) 3*8kB (U) 2*16kB (U) 5*32kB (U) 1*64kB (U) [ 2775.621039] 0 [ 2775.649692] 1*128kB [ 2775.655197] 0 [ 2775.659045] (U) [ 2775.660503] 0 [ 2775.662828] 1*256kB [ 2775.668465] 0 0 [ 2775.672760] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2775.704872] lowmem_reserve[]: 0 0 0 0 0 [ 2775.708912] Node 1 Normal free:35032kB min:53696kB low:67120kB high:80544kB active_anon:668kB inactive_anon:16256kB active_file:500kB inactive_file:352kB unevictable:0kB writepending:136kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2775.709967] (U) [ 2775.742068] lowmem_reserve[]: 0 0 0 0 0 [ 2775.748151] Node 0 DMA: 18*4kB (U) 3*8kB (U) 2*16kB (U) 5*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2775.755401] 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2775.766578] Node 0 DMA32: 1163*4kB (UME) 440*8kB (ME) 179*16kB (ME) 784*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36124kB [ 2775.769711] Node 0 DMA32: 1163*4kB (UME) 440*8kB (ME) 179*16kB (ME) 784*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36124kB [ 2775.787107] Node 0 [ 2775.797544] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB [ 2775.799803] Normal: [ 2775.799813] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2775.808955] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2775.831093] Node 1 Normal: 24*4kB (UM) 34*8kB (UM) 15*16kB (UM) 12*32kB (UM) 10*64kB (UM) 6*128kB (M) 8*256kB (UM) 7*512kB (M) 3*1024kB (UM) 12*2048kB (UM) 0*4096kB = 35680kB [ 2775.831598] Node 1 Normal: 24*4kB (UM) 34*8kB (UM) 15*16kB (UM) 12*32kB (UM) 10*64kB (UM) 6*128kB (M) 8*256kB (UM) 7*512kB (M) 3*1024kB (UM) 12*2048kB (UM) 0*4096kB = 35680kB [ 2775.851135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2775.869004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2775.872397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2775.881164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2775.881175] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2775.889793] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2775.889802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2775.889806] 64361 total pagecache pages [ 2775.889816] 0 pages in swap cache [ 2775.889821] Swap cache stats: add 0, delete 0, find 0/0 [ 2775.889825] Free swap = 0kB [ 2775.889829] Total swap = 0kB [ 2775.889836] 2097051 pages RAM [ 2775.889839] 0 pages HighMem/MovableOnly [ 2775.889842] 363840 pages reserved [ 2775.889845] 0 pages cma reserved [ 2775.959016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2775.982838] 64332 total pagecache pages [ 2775.986931] 0 pages in swap cache [ 2775.990376] Swap cache stats: add 0, delete 0, find 0/0 [ 2775.995771] Free swap = 0kB [ 2775.998768] Total swap = 0kB [ 2776.001764] 2097051 pages RAM [ 2776.004936] 0 pages HighMem/MovableOnly [ 2776.008896] 363840 pages reserved [ 2776.012336] 0 pages cma reserved [ 2776.015721] Out of memory: Kill process 30885 (syz-executor.3) score 1004 or sacrifice child [ 2776.024376] Killed process 30887 (syz-executor.3) total-vm:93348kB, anon-rss:156kB, file-rss:34816kB, shmem-rss:0kB [ 2776.071220] oom_reaper: reaped process 30887 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2776.085265] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 2776.112172] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2776.116908] ion_system_heap cpuset=/ mems_allowed=0-1 [ 2776.138237] CPU: 1 PID: 4244 Comm: ion_system_heap Not tainted 4.14.217-syzkaller #0 [ 2776.146156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.150185] syz-executor.0 cpuset= [ 2776.155516] Call Trace: [ 2776.155540] dump_stack+0x1b2/0x281 [ 2776.155551] dump_header+0x178/0x82f [ 2776.155561] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2776.155575] ? ___ratelimit+0x2cd/0x530 [ 2776.159112] / [ 2776.161700] oom_kill_process.cold+0x10/0xb18 [ 2776.166440] mems_allowed=0-1 [ 2776.169129] ? lock_downgrade+0x740/0x740 [ 2776.192006] out_of_memory+0x2dc/0x1190 [ 2776.196000] ? oom_killer_disable+0x1c0/0x1c0 [ 2776.200503] ? mutex_trylock+0x152/0x1a0 [ 2776.204588] __alloc_pages_nodemask+0x23e1/0x2720 [ 2776.209454] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2776.214319] ? kmem_cache_alloc_node_trace+0x153/0x400 [ 2776.219646] ? cache_grow_begin+0x41/0x630 [ 2776.223881] cache_grow_begin+0x91/0x630 [ 2776.227968] ? cache_grow_begin+0x91/0x630 [ 2776.232215] fallback_alloc+0x207/0x2c0 [ 2776.236220] kmem_cache_alloc_node_trace+0xed/0x400 [ 2776.241252] alloc_vmap_area+0xf0/0x7c0 [ 2776.245231] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2776.250681] ? purge_vmap_area_lazy+0xb0/0xb0 [ 2776.255185] ? __get_vm_area_node+0xed/0x340 [ 2776.259701] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2776.264982] __get_vm_area_node+0x126/0x340 [ 2776.269330] vmap+0xd5/0x290 [ 2776.272369] ? ion_heap_clear_pages+0x23/0x70 [ 2776.276861] ? vunmap+0x50/0x50 [ 2776.280138] ? __vunmap+0x21c/0x300 [ 2776.283780] ion_heap_clear_pages+0x23/0x70 [ 2776.288095] ion_heap_sglist_zero+0x165/0x220 [ 2776.292609] ? ion_heap_clear_pages+0x70/0x70 [ 2776.297116] ? finish_task_switch+0x178/0x610 [ 2776.301630] ? pagerange_is_ram_callback+0x100/0x100 [ 2776.306739] ? ion_heap_deferred_free+0x222/0x470 [ 2776.311587] ion_system_heap_free+0x1d0/0x240 [ 2776.316109] ion_buffer_destroy+0x132/0x190 [ 2776.320438] ion_heap_deferred_free+0x22a/0x470 [ 2776.325108] ? __schedule+0x7f7/0x1de0 [ 2776.329002] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 2776.333670] ? wait_woken+0x230/0x230 [ 2776.337474] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2776.342594] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 2776.347264] kthread+0x30d/0x420 [ 2776.350626] ? kthread_create_on_node+0xd0/0xd0 [ 2776.355298] ret_from_fork+0x24/0x30 [ 2776.359032] CPU: 0 PID: 30882 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2776.366941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.376302] Call Trace: [ 2776.378657] Mem-Info: [ 2776.378892] dump_stack+0x1b2/0x281 [ 2776.381300] active_anon:16834 inactive_anon:62886 isolated_anon:0 [ 2776.381300] active_file:17 inactive_file:17 isolated_file:0 [ 2776.381300] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2776.381300] slab_reclaimable:12835 slab_unreclaimable:110822 [ 2776.381300] mapped:43521 shmem:64269 pagetables:744 bounce:0 [ 2776.381300] free:13805 free_pcp:58 free_cma:0 [ 2776.384913] warn_alloc.cold+0x96/0x1cc [ 2776.384925] ? zone_watermark_ok_safe+0x220/0x220 [ 2776.384935] ? usleep_range+0x130/0x130 [ 2776.384943] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2776.384955] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2776.384964] ? run_timer_softirq+0x5a0/0x5a0 [ 2776.384979] __alloc_pages_nodemask+0x2127/0x2720 [ 2776.384996] ? lock_acquire+0x170/0x3f0 [ 2776.385012] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2776.385023] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2776.385047] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2776.428779] Node 0 active_anon:66668kB inactive_anon:235288kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2776.430993] alloc_pages_current+0x155/0x260 [ 2776.440031] Node 1 active_anon:668kB inactive_anon:16256kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2776.441089] ion_page_pool_alloc+0x118/0x1b0 [ 2776.452046] Node 0 [ 2776.454646] ion_system_heap_allocate+0x133/0x8c0 [ 2776.454660] ? _raw_spin_unlock+0x29/0x40 [ 2776.454669] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2776.454679] ? ion_system_contig_heap_create+0x130/0x130 [ 2776.454689] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2776.454700] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2776.454712] ion_alloc+0x27a/0x810 [ 2776.454726] ? ion_dma_buf_release+0x40/0x40 [ 2776.454738] ? __might_fault+0x177/0x1b0 [ 2776.454752] ion_ioctl+0xea/0x1f0 [ 2776.454762] ? ion_query_heaps+0x360/0x360 [ 2776.454774] ? lock_acquire+0x170/0x3f0 [ 2776.454783] ? lock_downgrade+0x740/0x740 [ 2776.454791] ? ion_query_heaps+0x360/0x360 [ 2776.454802] do_vfs_ioctl+0x75a/0xff0 [ 2776.469879] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2776.497418] ? ioctl_preallocate+0x1a0/0x1a0 [ 2776.497429] ? lock_downgrade+0x740/0x740 [ 2776.497441] ? __fget+0x225/0x360 [ 2776.497449] ? do_vfs_ioctl+0xff0/0xff0 [ 2776.497459] ? security_file_ioctl+0x83/0xb0 [ 2776.497468] SyS_ioctl+0x7f/0xb0 [ 2776.497475] ? do_vfs_ioctl+0xff0/0xff0 [ 2776.497486] do_syscall_64+0x1d5/0x640 [ 2776.497504] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2776.497513] RIP: 0033:0x45e219 [ 2776.497517] RSP: 002b:00007ff7ceb5bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2776.497528] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2776.497533] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2776.497538] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2776.497543] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2776.497549] R13: 00007fff3d908d9f R14: 00007ff7ceb5c9c0 R15: 000000000119bf8c [ 2776.498080] syz-executor.3: [ 2776.507482] syz-executor.5: [ 2776.537830] net_ratelimit: 2 callbacks suppressed [ 2776.537835] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2776.550516] page allocation failure: order:0 [ 2776.550843] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2776.556291] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 2776.567366] page allocation failure: order:0 [ 2776.580395] (null) [ 2776.583234] , mode:0x14000c0(GFP_KERNEL), nodemask= [ 2776.589662] lowmem_reserve[]: [ 2776.590067] (null) [ 2776.602668] syz-executor.5 cpuset= [ 2776.632153] syz-executor.3 cpuset= [ 2776.649360] / [ 2776.771589] / [ 2776.779419] mems_allowed=0-1 [ 2776.782072] Mem-Info: [ 2776.784318] CPU: 1 PID: 30890 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2776.786737] active_anon:16832 inactive_anon:62886 isolated_anon:0 [ 2776.786737] active_file:17 inactive_file:17 isolated_file:0 [ 2776.786737] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2776.786737] slab_reclaimable:12835 slab_unreclaimable:110830 [ 2776.786737] mapped:43521 shmem:64269 pagetables:716 bounce:0 [ 2776.786737] free:13814 free_pcp:57 free_cma:0 [ 2776.794994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.795000] Call Trace: [ 2776.795021] dump_stack+0x1b2/0x281 [ 2776.795033] warn_alloc.cold+0x96/0x1cc [ 2776.795043] ? zone_watermark_ok_safe+0x220/0x220 [ 2776.795072] ? usleep_range+0x130/0x130 [ 2776.828289] Node 0 active_anon:66664kB inactive_anon:235288kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:240692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2776.837679] ? try_to_free_pages+0x23f/0x6e0 [ 2776.837689] ? _find_next_bit+0xdb/0x100 [ 2776.837697] ? run_timer_softirq+0x5a0/0x5a0 [ 2776.837713] __alloc_pages_nodemask+0x2127/0x2720 [ 2776.837733] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2776.840341] Node 1 active_anon:664kB inactive_anon:16256kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2776.843951] ? vhci_release+0x70/0xe0 [ 2776.843961] ? __fput+0x25f/0x7a0 [ 2776.843980] ? mark_held_locks+0xa6/0xf0 [ 2776.847947] Node 0 [ 2776.852804] ? cache_grow_begin+0x41/0x630 [ 2776.856822] mems_allowed=0-1 [ 2776.884625] cache_grow_begin+0x91/0x630 [ 2776.884636] ? cache_grow_begin+0x91/0x630 [ 2776.884644] fallback_alloc+0x207/0x2c0 [ 2776.884656] kmem_cache_alloc_node_trace+0xed/0x400 [ 2776.884673] __kmalloc_node_track_caller+0x38/0x70 [ 2776.889105] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2776.893132] __alloc_skb+0x460/0x510 [ 2776.897567] lowmem_reserve[]: [ 2776.902394] kobject_uevent_env+0x882/0xf40 [ 2776.907266] 0 [ 2776.937060] device_del+0x642/0xa80 [ 2776.937071] ? device_find_child+0x107/0x140 [ 2776.937079] ? __device_links_no_driver+0x1b0/0x1b0 [ 2776.937099] hci_conn_del_sysfs+0xca/0x160 [ 2776.963256] 2717 [ 2776.966178] hci_conn_cleanup+0x216/0x500 [ 2776.970161] 2718 [ 2776.975175] hci_conn_del+0x253/0x6f0 [ 2776.975184] hci_conn_hash_flush+0x19c/0x260 [ 2776.975193] hci_dev_do_close+0x535/0xca0 [ 2776.975204] ? __fsnotify_inode_delete+0x20/0x20 [ 2776.975216] hci_unregister_dev+0x17f/0x8c0 [ 2777.003261] 2718 [ 2777.005655] ? fcntl_setlk+0xdb0/0xdb0 [ 2777.009373] 2718 [ 2777.012476] ? vhci_close_dev+0x50/0x50 [ 2777.026593] vhci_release+0x70/0xe0 [ 2777.031611] Node 0 [ 2777.035846] __fput+0x25f/0x7a0 [ 2777.035859] task_work_run+0x11f/0x190 [ 2777.035872] do_exit+0xa44/0x2850 [ 2777.035885] ? mm_update_next_owner+0x5b0/0x5b0 [ 2777.053288] DMA32 free:17904kB min:36200kB low:45248kB high:54296kB active_anon:66664kB inactive_anon:235288kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2792kB bounce:0kB free_pcp:228kB local_pcp:124kB free_cma:0kB [ 2777.056512] ? get_signal+0x323/0x1ca0 [ 2777.061251] lowmem_reserve[]: [ 2777.065573] ? lock_acquire+0x170/0x3f0 [ 2777.065580] ? lock_downgrade+0x740/0x740 [ 2777.065591] do_group_exit+0x100/0x2e0 [ 2777.065603] get_signal+0x38d/0x1ca0 [ 2777.065623] ? ion_dma_buf_release+0x40/0x40 [ 2777.083273] 0 [ 2777.083377] do_signal+0x7c/0x1550 [ 2777.086635] 0 [ 2777.090549] ? ion_ioctl+0x13a/0x1f0 [ 2777.103279] 0 [ 2777.127129] ? ion_query_heaps+0x360/0x360 [ 2777.127142] ? setup_sigcontext+0x820/0x820 [ 2777.127150] ? lock_downgrade+0x740/0x740 [ 2777.127156] ? ion_query_heaps+0x360/0x360 [ 2777.127166] ? do_vfs_ioctl+0xe2/0xff0 [ 2777.127178] ? ioctl_preallocate+0x1a0/0x1a0 [ 2777.163286] 0 [ 2777.165060] ? lock_downgrade+0x740/0x740 [ 2777.166837] 0 [ 2777.171067] ? __fget+0x225/0x360 [ 2777.183716] ? task_work_add+0x87/0xe0 [ 2777.187585] Node 0 [ 2777.191993] ? exit_to_usermode_loop+0x41/0x200 [ 2777.213309] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2777.213866] exit_to_usermode_loop+0x160/0x200 [ 2777.243380] ? SyS_ioctl+0x5c/0xb0 [ 2777.246926] do_syscall_64+0x4a3/0x640 [ 2777.250832] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2777.256015] RIP: 0033:0x45e219 [ 2777.259192] RSP: 002b:00007f7e25d1dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2777.263300] lowmem_reserve[]: [ 2777.266906] RAX: fffffffffffffff4 RBX: 0000000000000003 RCX: 000000000045e219 [ 2777.266917] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2777.270010] 0 [ 2777.277289] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2777.277294] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2777.277298] R13: 00007ffff6a70b9f R14: 00007f7e25d1e9c0 R15: 000000000119bf8c [ 2777.278091] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2777.284877] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2777.286524] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2777.302193] CPU: 0 PID: 30887 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2777.308895] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2777.314843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2777.314848] Call Trace: [ 2777.314870] dump_stack+0x1b2/0x281 [ 2777.314884] warn_alloc.cold+0x96/0x1cc [ 2777.314898] ? zone_watermark_ok_safe+0x220/0x220 [ 2777.335643] 0 [ 2777.335745] ? usleep_range+0x130/0x130 [ 2777.342222] 0 [ 2777.351591] ? try_to_free_pages+0x23f/0x6e0 [ 2777.351602] ? _find_next_bit+0xdb/0x100 [ 2777.351611] ? run_timer_softirq+0x5a0/0x5a0 [ 2777.351632] __alloc_pages_nodemask+0x2127/0x2720 [ 2777.351654] ? do_vfs_ioctl+0x75a/0xff0 [ 2777.351663] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2777.351688] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2777.351702] alloc_pages_current+0x155/0x260 [ 2777.351713] __get_free_pages+0xb/0x40 [ 2777.351726] sg_kmalloc+0x44/0x60 [ 2777.364585] 0 [ 2777.366750] __sg_alloc_table.part.0+0x23f/0x370 [ 2777.368565] 0 [ 2777.372536] ? sg_init_one+0x170/0x170 [ 2777.382756] sg_alloc_table+0x4e/0x250 [ 2777.389437] Node 1 [ 2777.391990] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2777.404078] syz-executor.5: [ 2777.405302] ion_system_heap_allocate+0x367/0x8c0 [ 2777.409688] page allocation failure: order:0 [ 2777.413575] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2777.413589] ? ion_system_contig_heap_create+0x130/0x130 [ 2777.413598] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2777.413610] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2777.413621] ion_alloc+0x204/0x810 [ 2777.413635] ? ion_dma_buf_release+0x40/0x40 [ 2777.413646] ? __might_fault+0x177/0x1b0 [ 2777.413658] ion_ioctl+0xea/0x1f0 [ 2777.413668] ? ion_query_heaps+0x360/0x360 [ 2777.413680] ? lock_acquire+0x170/0x3f0 [ 2777.413690] ? lock_downgrade+0x740/0x740 [ 2777.413699] ? ion_query_heaps+0x360/0x360 [ 2777.413710] do_vfs_ioctl+0x75a/0xff0 [ 2777.413723] ? ioctl_preallocate+0x1a0/0x1a0 [ 2777.413731] ? lock_downgrade+0x740/0x740 [ 2777.413745] ? __fget+0x225/0x360 [ 2777.413754] ? do_vfs_ioctl+0xff0/0xff0 [ 2777.413764] ? security_file_ioctl+0x83/0xb0 [ 2777.413774] SyS_ioctl+0x7f/0xb0 [ 2777.413781] ? do_vfs_ioctl+0xff0/0xff0 [ 2777.413792] do_syscall_64+0x1d5/0x640 [ 2777.413810] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2777.413820] RIP: 0033:0x45e219 [ 2777.425477] Normal free:26376kB min:53696kB low:67120kB high:80544kB active_anon:664kB inactive_anon:16256kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2777.425698] RSP: 002b:00007fa35386fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2777.429584] lowmem_reserve[]: [ 2777.433457] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2777.433463] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2777.433473] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2777.433478] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2777.433483] R13: 00007ffc07929f4f R14: 00007fa3538709c0 R15: 000000000119bf8c [ 2777.627074] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 2777.633820] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2777.638972] CPU: 1 PID: 30890 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2777.647113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2777.656475] Call Trace: [ 2777.659067] dump_stack+0x1b2/0x281 [ 2777.662721] warn_alloc.cold+0x96/0x1cc [ 2777.666702] ? zone_watermark_ok_safe+0x220/0x220 [ 2777.671551] ? usleep_range+0x130/0x130 [ 2777.675536] ? try_to_free_pages+0x23f/0x6e0 [ 2777.679980] ? _find_next_bit+0xdb/0x100 [ 2777.684047] ? run_timer_softirq+0x5a0/0x5a0 [ 2777.688478] __alloc_pages_nodemask+0x2127/0x2720 [ 2777.693342] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2777.698208] ? vhci_release+0x70/0xe0 [ 2777.702028] ? __fput+0x25f/0x7a0 [ 2777.705499] ? do_signal+0x7c/0x1550 [ 2777.709220] ? mark_held_locks+0xa6/0xf0 [ 2777.713295] ? cache_grow_begin+0x41/0x630 [ 2777.717547] cache_grow_begin+0x91/0x630 [ 2777.721612] ? cache_grow_begin+0x91/0x630 [ 2777.725870] fallback_alloc+0x207/0x2c0 [ 2777.729887] kmem_cache_alloc_node_trace+0xed/0x400 [ 2777.734928] __kmalloc_node_track_caller+0x38/0x70 [ 2777.739867] __alloc_skb+0x460/0x510 [ 2777.743638] kobject_uevent_env+0x882/0xf40 [ 2777.747990] device_del+0x642/0xa80 [ 2777.751680] ? device_find_child+0x107/0x140 [ 2777.756118] ? __device_links_no_driver+0x1b0/0x1b0 [ 2777.761204] hci_conn_del_sysfs+0xca/0x160 [ 2777.765458] hci_conn_cleanup+0x216/0x500 [ 2777.769639] hci_conn_del+0x253/0x6f0 [ 2777.773445] hci_conn_hash_flush+0x19c/0x260 [ 2777.777861] hci_dev_do_close+0x535/0xca0 [ 2777.782020] ? __fsnotify_inode_delete+0x20/0x20 [ 2777.786797] hci_unregister_dev+0x17f/0x8c0 [ 2777.791136] ? fcntl_setlk+0xdb0/0xdb0 [ 2777.795040] ? vhci_close_dev+0x50/0x50 [ 2777.799076] vhci_release+0x70/0xe0 [ 2777.802727] __fput+0x25f/0x7a0 [ 2777.806023] task_work_run+0x11f/0x190 [ 2777.809920] do_exit+0xa44/0x2850 [ 2777.813406] ? mm_update_next_owner+0x5b0/0x5b0 [ 2777.818106] ? get_signal+0x323/0x1ca0 [ 2777.822020] ? lock_acquire+0x170/0x3f0 [ 2777.826010] ? lock_downgrade+0x740/0x740 [ 2777.830169] do_group_exit+0x100/0x2e0 [ 2777.834062] get_signal+0x38d/0x1ca0 [ 2777.837786] ? ion_dma_buf_release+0x40/0x40 [ 2777.842220] do_signal+0x7c/0x1550 [ 2777.845779] ? ion_ioctl+0x13a/0x1f0 [ 2777.849497] ? ion_query_heaps+0x360/0x360 [ 2777.853749] ? setup_sigcontext+0x820/0x820 [ 2777.858093] ? lock_downgrade+0x740/0x740 [ 2777.862264] ? ion_query_heaps+0x360/0x360 [ 2777.866524] ? do_vfs_ioctl+0xe2/0xff0 [ 2777.870411] ? ioctl_preallocate+0x1a0/0x1a0 [ 2777.874821] ? lock_downgrade+0x740/0x740 [ 2777.878985] ? __fget+0x225/0x360 [ 2777.882453] ? task_work_add+0x87/0xe0 [ 2777.886369] ? exit_to_usermode_loop+0x41/0x200 [ 2777.891066] exit_to_usermode_loop+0x160/0x200 [ 2777.895669] ? SyS_ioctl+0x5c/0xb0 [ 2777.899222] do_syscall_64+0x4a3/0x640 [ 2777.903129] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2777.908326] RIP: 0033:0x45e219 [ 2777.911511] RSP: 002b:00007f7e25d1dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2777.919225] RAX: fffffffffffffff4 RBX: 0000000000000003 RCX: 000000000045e219 [ 2777.926500] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2777.931569] systemd-journald[30893]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2777.933769] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2777.933774] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2777.933778] R13: 00007ffff6a70b9f R14: 00007f7e25d1e9c0 R15: 000000000119bf8c [ 2777.935466] 0 0 0 0 0 [ 2777.973575] Node 0 DMA: 6*4kB (U) 3*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 3*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11008kB [ 2777.987794] Node 0 DMA32: 1059*4kB (UME) 992*8kB (UME) 439*16kB (UME) 2680*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 104956kB [ 2778.002389] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2778.013229] Node 1 Normal: 212*4kB (UM) 356*8kB (UM) 341*16kB (UM) 359*32kB (UM) 19*64kB (UM) 10*128kB (UM) 10*256kB (UM) 5*512kB (UM) 47*1024kB (UM) 2*2048kB (UM) 2*4096kB (U) = 88672kB [ 2778.030290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2778.039328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2778.048042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2778.057278] warn_alloc_show_mem: 2 callbacks suppressed [ 2778.057282] Mem-Info: [ 2778.065727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2778.083498] active_anon:16932 inactive_anon:64911 isolated_anon:0 [ 2778.083498] active_file:143 inactive_file:1776 isolated_file:0 [ 2778.083498] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2778.083498] slab_reclaimable:12833 slab_unreclaimable:110859 [ 2778.083498] mapped:45013 shmem:66294 pagetables:716 bounce:0 [ 2778.083498] free:46632 free_pcp:372 free_cma:0 [ 2778.085308] 68268 total pagecache pages [ 2778.135435] Node 0 active_anon:66764kB inactive_anon:243388kB active_file:352kB inactive_file:1752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176384kB dirty:0kB writeback:0kB shmem:248792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2778.138425] systemd-journald[30893]: /dev/kmsg buffer overrun, some messages lost. [ 2778.167743] Node 1 active_anon:964kB inactive_anon:16256kB active_file:220kB inactive_file:5352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3668kB dirty:100kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2778.203463] 0 pages in swap cache [ 2778.206938] Swap cache stats: add 0, delete 0, find 0/0 [ 2778.212298] Free swap = 0kB [ 2778.233511] Total swap = 0kB [ 2778.236628] 2097051 pages RAM [ 2778.239727] 0 pages HighMem/MovableOnly [ 2778.243744] 363840 pages reserved [ 2778.247191] 0 pages cma reserved [ 2778.283475] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2778.354131] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2778.359210] Node 0 DMA32 free:228132kB min:36200kB low:45248kB high:54296kB active_anon:66764kB inactive_anon:243388kB active_file:352kB inactive_file:1852kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2792kB bounce:0kB free_pcp:1444kB local_pcp:828kB free_cma:0kB [ 2778.434138] lowmem_reserve[]: 0 0 0 0 0 [ 2778.438197] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2778.513534] lowmem_reserve[]: 0 0 0 0 0 [ 2778.517564] Node 1 Normal free:350380kB min:53696kB low:67120kB high:80544kB active_anon:964kB inactive_anon:16256kB active_file:220kB inactive_file:5408kB unevictable:0kB writepending:112kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:112kB bounce:0kB free_pcp:664kB local_pcp:0kB free_cma:0kB [ 2778.594218] lowmem_reserve[]: 0 0 0 0 0 [ 2778.598271] Node 0 DMA: 6*4kB (U) 3*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 3*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11008kB [ 2778.617213] Node 0 DMA32: 283*4kB (UE) 3770*8kB (UE) 5370*16kB (UME) 3021*32kB (UME) 300*64kB (U) 180*128kB (U) 35*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 265084kB [ 2778.632789] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2778.647566] Node 1 Normal: 213*4kB (UM) 355*8kB (UM) 342*16kB (UM) 359*32kB (UM) 1*64kB (M) 2*128kB (UM) 1*256kB (M) 3*512kB (UM) 265*1024kB (UM) 8*2048kB (UM) 8*4096kB (U) = 343276kB [ 2778.668203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2778.684655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2778.703980] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2778.712855] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2778.743577] 68295 total pagecache pages [ 2778.747618] 0 pages in swap cache [ 2778.751902] Swap cache stats: add 0, delete 0, find 0/0 [ 2778.757357] Free swap = 0kB [ 2778.763599] Total swap = 0kB [ 2778.766915] 2097051 pages RAM [ 2778.770024] 0 pages HighMem/MovableOnly [ 2778.783587] 363840 pages reserved [ 2778.787229] 0 pages cma reserved [ 2778.813097] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2778.959026] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2779.007726] systemd[1]: Started Journal Service. [ 2779.007959] 0 2717 2718 2718 2718 [ 2779.020328] Node 0 DMA32 free:634164kB min:36200kB low:45248kB high:54296kB active_anon:67188kB inactive_anon:243420kB active_file:568kB inactive_file:5380kB unevictable:0kB writepending:36kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2800kB bounce:0kB free_pcp:1268kB local_pcp:588kB free_cma:0kB [ 2779.060252] lowmem_reserve[]: 0 0 0 0 0 [ 2779.064739] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2779.100461] lowmem_reserve[]: 0 0 0 0 0 [ 2779.105527] Node 1 Normal free:669308kB min:53696kB low:67120kB high:80544kB active_anon:964kB inactive_anon:16256kB active_file:220kB inactive_file:5408kB unevictable:0kB writepending:112kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:112kB bounce:0kB free_pcp:632kB local_pcp:0kB free_cma:0kB [ 2779.141332] lowmem_reserve[]: 0 0 0 0 0 [ 2779.150346] Node 0 DMA: 6*4kB (U) 3*8kB (U) 1*16kB (U) 0*32kB 21*64kB (U) 4*128kB (U) 2*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 12672kB [ 2779.169252] Node 0 DMA32: 4430*4kB (UME) 2544*8kB (UME) 9891*16kB (UE) 4349*32kB (UME) 4973*64kB (UM) 272*128kB (UM) 154*256kB (U) 40*512kB (UM) 38*1024kB (UM) 0*2048kB 0*4096kB = 787400kB [ 2779.196218] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2779.211069] Node 1 Normal: 227*4kB (UM) 376*8kB (UM) 345*16kB (UM) 363*32kB (UM) 1145*64kB (UM) 30*128kB (UM) 15*256kB (UM) 26*512kB (UM) 439*1024kB (UM) 35*2048kB (UM) 8*4096kB (U) = 669308kB [ 2779.233894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2779.242765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2779.255749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2779.264876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2779.273471] 69303 total pagecache pages [ 2779.277783] 0 pages in swap cache [ 2779.281242] Swap cache stats: add 0, delete 0, find 0/0 [ 2779.288511] Free swap = 0kB [ 2779.291714] Total swap = 0kB [ 2779.297139] 2097051 pages RAM [ 2779.300273] 0 pages HighMem/MovableOnly [ 2779.304605] 363840 pages reserved [ 2779.308070] 0 pages cma reserved [ 2779.311459] Out of memory: Kill process 8002 (syz-fuzzer) score 6 or sacrifice child [ 2779.320267] Killed process 30403 (syz-executor.0) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 2779.368554] oom_reaper: reaped process 30403 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 12:08:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x0, 0x1}) 12:08:36 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/227, 0xe3) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$dsp(0xffffffffffffffff, &(0x7f0000000200)="fe8bbb790e04b9f2b48929a5049f4bf2d1a872b111f635411bf1ac4086c182df9c0d0c57dd254825273b96771e1ee74f3161bf85a53c4062c2b00e3a39bf5c046db5d367b6100d3d10cea80c4777dbada3b053d9446f0af6ecb795e0d3ddf551855e1ea28857eb84016a30cf5a9b308963ac5b40317ead69b6f89434d4c1e3e7546bcdca83efdb359b8ba7d4450881fa9273b98df00ebf0bf18174d9db92f0012be10bcfde4fafcad4df8222f89aa89c15c5a3c08f0505f600781e7e26c9efe7976202f2158f5e8e52d3fe62788b9c3dd159aa7a83e7f3f045387075cf0ec38b", 0xe0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x171002, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25130000007c0004800900010073797a31000000002c000780080004000100000008000400010000000800010013000000080001000100000008000200050000002c00078008000400597a0000080002000300000008000200fcffffff080001001300000008000400000000001400078008000200b700000008000300000000000c01058034000280080003000900000008000400000800000800040022e40000080004000200000008000400f7ffffff080001000d00000008000100657468004400028008000300b3080000080002003f00000008000300000001000800040014b70000080001002000000008000100010000000800030075e40000080002000300000007000100696200002c00028008000200a300000008000300c1ffffff080002000100000008000400f1000000080004004000000014000280080002000300000008000400ee000000080001001f00000008000100657468000800010075e470001c00028008000100090000000800030007000000080004009b000000240003800800030000800000080002000000000008000300e1ffffff080003001f000000a40005800800010065746800440002800800040006000000080003007f000000080004000400000008000100070000000800030000000000080001000200000008000400c10c00000800020054ff00003c00028008000100110000000800010002000000080002000700000008000400080000000800010012000000080002000080000008000400008000000800010065746800080001001e4496b008000100756470006000078008000100ff0300000c00030020000000000000000c00040000000000000000000c000300bb320000000000000c0004003f000000000000000c00040005000000000000000c000400ffffffff000000000c0004000500000000000000f4000680ee000300c9e80065a1975c6bd4759cd293e1e615b7be4229c0f0b820fb7bd1d8b8a96e956df5923bbe996048869d944746fc1c5f6ab063c20712bd658bb5bc5c4734b56641517864ba37917dc5c5ef21e24e7db7e88d56a6cf78f9d0c681ccc67656f2e44cc0b1ad522a3f0f4aabb495a5d2af333b55bc12693a6935304d6d45a78151655d08865013afcec6303b33e874bf437f3b1e0e6c6bf1b40de6e16cce950d1222f3e647c051a2fdb5fb570be04af1d5a2e3259c13d00d30e1bf2531b43d821bd4a610232907ee0ca3c5304d403abc053f1899a9d22aff8a8bd8ae2af32880e5da8a58ed99669404ade96e0000990d7fa15bdd6a3153476dca36ca"], 0x3b8}, 0x1, 0x0, 0x0, 0x40}, 0x4048010) write$dsp(r3, &(0x7f0000000300)="ef0783533ea342de3b0952fe9afe520451644da8bbaf29af076a65b17167294070750057c8cdbf22831e06ffc5d41cb0d2", 0x31) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) [ 2779.417419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2779.427403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2779.452453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 12:08:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x0, 0x1}) 12:08:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x12, 0x1}) [ 2779.466606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2779.481763] device bridge_slave_1 left promiscuous mode [ 2779.487527] bridge0: port 2(bridge_slave_1) entered disabled state [ 2779.505022] device bridge_slave_0 left promiscuous mode [ 2779.510807] bridge0: port 1(bridge_slave_0) entered disabled state 12:08:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x0, 0x1}) 12:08:36 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:36 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) [ 2779.525693] device veth1_macvtap left promiscuous mode [ 2779.531287] device veth0_macvtap left promiscuous mode [ 2779.541844] device veth1_vlan left promiscuous mode [ 2779.551295] device veth0_vlan left promiscuous mode 12:08:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x0, 0x1}) 12:08:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) [ 2779.833013] device hsr_slave_1 left promiscuous mode [ 2779.848315] device hsr_slave_0 left promiscuous mode [ 2779.882440] team0 (unregistering): Port device team_slave_1 removed [ 2779.901607] team0 (unregistering): Port device team_slave_0 removed [ 2779.924039] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2779.939996] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2779.987676] bond0 (unregistering): Released all slaves [ 2780.578969] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2780.595544] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2780.607313] CPU: 0 PID: 30928 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2780.615226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2780.624585] Call Trace: [ 2780.627180] dump_stack+0x1b2/0x281 [ 2780.630811] warn_alloc.cold+0x96/0x1cc [ 2780.634787] ? zone_watermark_ok_safe+0x220/0x220 [ 2780.639646] __alloc_pages_nodemask+0x2127/0x2720 [ 2780.644499] ? lock_acquire+0x170/0x3f0 [ 2780.648479] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2780.653329] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2780.658790] ? __mutex_unlock_slowpath+0x75/0x770 [ 2780.663634] ? retint_kernel+0x2d/0x2d [ 2780.667523] alloc_pages_current+0x155/0x260 [ 2780.671938] ion_page_pool_alloc+0x118/0x1b0 [ 2780.676345] ion_system_heap_allocate+0x133/0x8c0 [ 2780.681196] ? ion_alloc+0x187/0x810 [ 2780.684955] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2780.693716] ? ion_system_contig_heap_create+0x130/0x130 [ 2780.699180] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2780.704202] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2780.709048] ion_alloc+0x204/0x810 [ 2780.712599] ? ion_dma_buf_release+0x40/0x40 [ 2780.717032] ? __might_fault+0x177/0x1b0 [ 2780.721097] ion_ioctl+0xea/0x1f0 [ 2780.724551] ? ion_query_heaps+0x360/0x360 [ 2780.728785] ? lock_acquire+0x170/0x3f0 [ 2780.732760] ? lock_downgrade+0x740/0x740 [ 2780.736907] ? ion_query_heaps+0x360/0x360 [ 2780.741166] do_vfs_ioctl+0x75a/0xff0 [ 2780.744973] ? ioctl_preallocate+0x1a0/0x1a0 [ 2780.749381] ? lock_downgrade+0x740/0x740 [ 2780.753535] ? __fget+0x225/0x360 [ 2780.756984] ? do_vfs_ioctl+0xff0/0xff0 [ 2780.760984] ? security_file_ioctl+0x83/0xb0 [ 2780.765402] SyS_ioctl+0x7f/0xb0 [ 2780.768766] ? do_vfs_ioctl+0xff0/0xff0 [ 2780.772749] do_syscall_64+0x1d5/0x640 [ 2780.776653] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2780.781848] RIP: 0033:0x45e219 [ 2780.785036] RSP: 002b:00007ffa3780bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2780.792748] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2780.800055] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2780.807411] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2780.814681] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2780.821980] R13: 00007ffdb287bf9f R14: 00007ffa3780c9c0 R15: 000000000119bf8c [ 2780.885991] Mem-Info: [ 2780.888455] active_anon:16563 inactive_anon:64916 isolated_anon:0 [ 2780.888455] active_file:1762 inactive_file:3230 isolated_file:12 [ 2780.888455] unevictable:0 dirty:4 writeback:0 unstable:0 [ 2780.888455] slab_reclaimable:12785 slab_unreclaimable:115945 [ 2780.888455] mapped:39664 shmem:66311 pagetables:665 bounce:0 [ 2780.888455] free:135651 free_pcp:31 free_cma:0 [ 2780.933827] Node 0 active_anon:65892kB inactive_anon:243408kB active_file:7044kB inactive_file:13012kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:158756kB dirty:12kB writeback:0kB shmem:248860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2780.966781] Node 1 active_anon:860kB inactive_anon:16256kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2780.998483] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2781.030383] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2781.048364] Node 0 DMA32 free:429084kB min:36200kB low:45248kB high:54296kB active_anon:66092kB inactive_anon:243408kB active_file:7144kB inactive_file:13216kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2548kB bounce:0kB free_pcp:348kB local_pcp:272kB free_cma:0kB [ 2781.112353] lowmem_reserve[]: 0 0 0 0 0 [ 2781.119813] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2781.146727] lowmem_reserve[]: 0 0 0 0 0 [ 2781.151989] Node 1 Normal free:112056kB min:53696kB low:67120kB high:80544kB active_anon:860kB inactive_anon:16256kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2781.180471] lowmem_reserve[]: 0 0 0 0 0 [ 2781.184576] Node 0 DMA: 6*4kB (U) 3*8kB (U) 1*16kB (U) 0*32kB 13*64kB (U) 4*128kB (U) 2*256kB (U) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11136kB [ 2781.198937] Node 0 DMA32: 2629*4kB (U) 4695*8kB (UE) 9973*16kB (UE) 5830*32kB (UE) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 394268kB [ 2781.216114] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2781.235554] Node 1 Normal: 248*4kB (UM) 403*8kB (UM) 368*16kB (UM) 382*32kB (UM) 20*64kB (M) 5*128kB (UM) 5*256kB (UM) 5*512kB (UM) 3*1024kB (U) 1*2048kB (U) 63*4096kB (U) = 291256kB [ 2781.277280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2781.291819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2781.301698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2781.311397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2781.320697] 71414 total pagecache pages [ 2781.325343] 0 pages in swap cache [ 2781.328811] Swap cache stats: add 0, delete 0, find 0/0 [ 2781.335275] Free swap = 0kB [ 2781.338297] Total swap = 0kB [ 2781.341305] 2097051 pages RAM [ 2781.345856] 0 pages HighMem/MovableOnly [ 2781.349839] 363840 pages reserved [ 2781.353279] 0 pages cma reserved [ 2782.676962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2782.683708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2782.691970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2782.699226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2782.707121] device bridge_slave_1 left promiscuous mode [ 2782.712579] bridge0: port 2(bridge_slave_1) entered disabled state [ 2782.720185] device bridge_slave_0 left promiscuous mode [ 2782.725849] bridge0: port 1(bridge_slave_0) entered disabled state [ 2782.734560] device veth1_macvtap left promiscuous mode [ 2782.739951] device veth0_macvtap left promiscuous mode [ 2782.745572] device veth1_vlan left promiscuous mode [ 2782.750660] device veth0_vlan left promiscuous mode [ 2782.831082] device hsr_slave_1 left promiscuous mode [ 2782.840686] device hsr_slave_0 left promiscuous mode [ 2782.852217] team0 (unregistering): Port device team_slave_1 removed [ 2782.863229] team0 (unregistering): Port device team_slave_0 removed [ 2782.872403] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2782.883542] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2782.909310] bond0 (unregistering): Released all slaves [ 2783.499854] IPVS: ftp: loaded support on port[0] = 21 [ 2783.537224] IPVS: ftp: loaded support on port[0] = 21 [ 2783.646150] chnl_net:caif_netlink_parms(): no params data found [ 2783.742178] chnl_net:caif_netlink_parms(): no params data found [ 2783.816721] bridge0: port 1(bridge_slave_0) entered blocking state [ 2783.823147] bridge0: port 1(bridge_slave_0) entered disabled state [ 2783.831124] device bridge_slave_0 entered promiscuous mode [ 2783.847444] bridge0: port 2(bridge_slave_1) entered blocking state [ 2783.853827] bridge0: port 2(bridge_slave_1) entered disabled state [ 2783.861630] device bridge_slave_1 entered promiscuous mode [ 2783.875150] bridge0: port 1(bridge_slave_0) entered blocking state [ 2783.881550] bridge0: port 1(bridge_slave_0) entered disabled state [ 2783.889216] device bridge_slave_0 entered promiscuous mode [ 2783.903256] bridge0: port 2(bridge_slave_1) entered blocking state [ 2783.910473] bridge0: port 2(bridge_slave_1) entered disabled state [ 2783.917845] device bridge_slave_1 entered promiscuous mode [ 2783.948398] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2783.957979] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2783.969227] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2783.988029] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2784.018241] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2784.027328] team0: Port device team_slave_0 added [ 2784.032643] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2784.040911] team0: Port device team_slave_0 added [ 2784.046943] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2784.054228] team0: Port device team_slave_1 added [ 2784.068622] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2784.076689] team0: Port device team_slave_1 added [ 2784.097623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2784.103916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2784.130279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2784.149869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2784.156281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2784.182168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2784.193377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2784.199847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2784.225608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2784.237313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2784.243555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2784.268806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2784.280403] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2784.288169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2784.295866] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2784.311415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2784.329990] device hsr_slave_0 entered promiscuous mode [ 2784.336008] device hsr_slave_1 entered promiscuous mode [ 2784.350963] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2784.369867] device hsr_slave_0 entered promiscuous mode [ 2784.375825] device hsr_slave_1 entered promiscuous mode [ 2784.381702] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2784.396947] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2784.404309] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2784.559662] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2784.573381] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2784.618532] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2784.624774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2784.635821] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2784.651251] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2784.659944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2784.668030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2784.677047] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2784.683111] 8021q: adding VLAN 0 to HW filter on device team0 [ 2784.694403] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2784.700646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2784.708260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2784.719018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2784.727205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2784.735208] bridge0: port 1(bridge_slave_0) entered blocking state [ 2784.741565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2784.751573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2784.761026] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2784.769537] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2784.779901] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2784.786863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2784.797551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2784.805287] bridge0: port 2(bridge_slave_1) entered blocking state [ 2784.811889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2784.819652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2784.826716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2784.836093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2784.845048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2784.852856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2784.861369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2784.870923] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2784.877478] 8021q: adding VLAN 0 to HW filter on device team0 [ 2784.887761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2784.900293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2784.913256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2784.923112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2784.930628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2784.938914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2784.946806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2784.954395] bridge0: port 1(bridge_slave_0) entered blocking state [ 2784.960815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2784.967881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2784.976491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2784.984310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2784.992416] bridge0: port 2(bridge_slave_1) entered blocking state [ 2784.998853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2785.006352] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2785.013461] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2785.020746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2785.030653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2785.039750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2785.049169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2785.061429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2785.070261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2785.077981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2785.088139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2785.096115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2785.107648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2785.117420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2785.127493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2785.137951] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2785.148401] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2785.155582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2785.162585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2785.169708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2785.177861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2785.189099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2785.197516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2785.210047] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2785.218908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2785.225822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2785.233521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2785.245525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2785.255164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2785.262832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2785.272189] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2785.279349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2785.297612] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2785.305946] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2785.312194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2785.321958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2785.340425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2785.360928] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2785.371830] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2785.379191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2785.387849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2785.419004] Bluetooth: hci3 command 0x0409 tx timeout [ 2785.424402] Bluetooth: hci1 command 0x0409 tx timeout [ 2785.444231] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2785.451992] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2785.460011] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2785.470083] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2785.481245] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2785.490214] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2785.500388] device veth0_vlan entered promiscuous mode [ 2785.509098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2785.517580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2785.525711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2785.533043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2785.541125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2785.548647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2785.564146] device veth1_vlan entered promiscuous mode [ 2785.570431] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2785.581760] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2785.594199] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2785.602170] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2785.609521] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2785.619168] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2785.630255] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2785.639989] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2785.647464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2785.657372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2785.664537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2785.672378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2785.680504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2785.688451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2785.697572] device veth0_vlan entered promiscuous mode [ 2785.707063] device veth0_macvtap entered promiscuous mode [ 2785.713893] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2785.721871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2785.729354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2785.736665] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2785.750953] device veth1_vlan entered promiscuous mode [ 2785.757719] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2785.767142] device veth1_macvtap entered promiscuous mode [ 2785.773460] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2785.787332] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2785.795371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2785.806281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2785.817429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2785.827984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2785.837666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2785.847492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2785.856707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2785.866536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2785.875743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2785.885662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2785.896179] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2785.903099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2785.916053] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2785.923320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2785.932032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2785.940323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2785.947907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2785.956224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2785.968462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2785.978513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2785.987777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2785.997601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.006792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2786.016569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.025752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2786.035573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.046100] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2786.052995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2786.064304] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2786.072313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2786.080588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2786.088920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2786.097206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2786.110415] device veth0_macvtap entered promiscuous mode [ 2786.116592] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2786.131885] device veth1_macvtap entered promiscuous mode [ 2786.143600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2786.156208] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2786.168462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2786.178650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.188310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2786.198770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.208001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2786.218462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.227693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2786.237510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.246747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2786.256581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.267289] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2786.274261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2786.285206] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2786.296016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2786.303820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2786.314015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2786.325251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.334385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2786.344524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.353795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2786.363656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.373010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2786.383020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.392232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2786.402244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.412511] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2786.419503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2786.435376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2786.443378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:08:43 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x171002, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3b8, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a59}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x10c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe422}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb714}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe475}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffe1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff54}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x32bb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "c9e80065a1975c6bd4759cd293e1e615b7be4229c0f0b820fb7bd1d8b8a96e956df5923bbe996048869d944746fc1c5f6ab063c20712bd658bb5bc5c4734b56641517864ba37917dc5c5ef21e24e7db7e88d56a6cf78f9d0c681ccc67656f2e44cc0b1ad522a3f0f4aabb495a5d2af333b55bc12693a6935304d6d45a78151655d08865013afcec6303b33e874bf437f3b1e0e6c6bf1b40de6e16cce950d1222f3e647c051a2fdb5fb570be04af1d5a2e3259c13d00d30e1bf2531b43d821bd4a610232907ee0ca3c5304d403abc053f1899a9d22aff8a8bd8ae2af32880e5da8a58ed99669404ade96e"}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x40}, 0x4048010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x4e22, 0x4, @private2, 0x3}]}, &(0x7f0000000080)=0x10) 12:08:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:08:43 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x171002, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x2dc, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a59}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x10c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb714}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe475}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffde}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e44}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff54}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x32bb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc63f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40}, 0x4048010) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f00000000c0)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) 12:08:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:43 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x0, 0x1}) 12:08:43 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:43 executing program 4: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:43 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:43 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 12:08:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 12:08:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 12:08:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:08:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x9, @private0, 0x7ff3}]}, &(0x7f0000000080)=0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x171002, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3b8, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a59}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x10c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe422}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb714}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe475}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffe1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff54}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x32bb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "c9e80065a1975c6bd4759cd293e1e615b7be4229c0f0b820fb7bd1d8b8a96e956df5923bbe996048869d944746fc1c5f6ab063c20712bd658bb5bc5c4734b56641517864ba37917dc5c5ef21e24e7db7e88d56a6cf78f9d0c681ccc67656f2e44cc0b1ad522a3f0f4aabb495a5d2af333b55bc12693a6935304d6d45a78151655d08865013afcec6303b33e874bf437f3b1e0e6c6bf1b40de6e16cce950d1222f3e647c051a2fdb5fb570be04af1d5a2e3259c13d00d30e1bf2531b43d821bd4a610232907ee0ca3c5304d403abc053f1899a9d22aff8a8bd8ae2af32880e5da8a58ed99669404ade96e"}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x40}, 0x4048010) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) [ 2787.426101] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2787.451157] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2787.468563] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2787.485199] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2787.490616] CPU: 0 PID: 31431 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2787.495650] Bluetooth: hci1 command 0x041b tx timeout [ 2787.498501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2787.498507] Call Trace: [ 2787.498527] dump_stack+0x1b2/0x281 [ 2787.498541] warn_alloc.cold+0x96/0x1cc [ 2787.503885] Bluetooth: hci3 command 0x041b tx timeout [ 2787.513078] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2787.513091] ? zone_watermark_ok_safe+0x220/0x220 [ 2787.513119] __alloc_pages_nodemask+0x2127/0x2720 [ 2787.513131] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2787.513140] ? finish_task_switch+0x178/0x610 [ 2787.513147] ? finish_task_switch+0x14d/0x610 [ 2787.513161] ? lock_acquire+0x170/0x3f0 [ 2787.513175] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2787.513191] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2787.513204] ? __mutex_unlock_slowpath+0x75/0x770 [ 2787.513223] alloc_pages_current+0x155/0x260 [ 2787.520130] syz-executor.5: [ 2787.523382] ion_page_pool_alloc+0x118/0x1b0 [ 2787.523394] ion_system_heap_allocate+0x133/0x8c0 [ 2787.523405] ? ion_alloc+0x187/0x810 [ 2787.529221] syz-executor.2: [ 2787.533594] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2787.533608] ? ion_system_contig_heap_create+0x130/0x130 [ 2787.533618] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2787.533633] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2787.545384] page allocation failure: order:4 [ 2787.547810] ion_alloc+0x204/0x810 [ 2787.547827] ? ion_dma_buf_release+0x40/0x40 [ 2787.552374] page allocation failure: order:4 [ 2787.556818] ? __might_fault+0x177/0x1b0 [ 2787.556834] ion_ioctl+0xea/0x1f0 [ 2787.556844] ? ion_query_heaps+0x360/0x360 [ 2787.556856] ? lock_acquire+0x170/0x3f0 [ 2787.556865] ? lock_downgrade+0x740/0x740 [ 2787.556873] ? ion_query_heaps+0x360/0x360 [ 2787.556882] do_vfs_ioctl+0x75a/0xff0 [ 2787.556894] ? ioctl_preallocate+0x1a0/0x1a0 [ 2787.556903] ? lock_downgrade+0x740/0x740 [ 2787.556916] ? __fget+0x225/0x360 [ 2787.556925] ? do_vfs_ioctl+0xff0/0xff0 [ 2787.556936] ? security_file_ioctl+0x83/0xb0 [ 2787.556946] SyS_ioctl+0x7f/0xb0 [ 2787.556954] ? do_vfs_ioctl+0xff0/0xff0 [ 2787.556965] do_syscall_64+0x1d5/0x640 [ 2787.556983] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2787.566535] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2787.571234] RIP: 0033:0x45e219 [ 2787.571240] RSP: 002b:00007ffa3780bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2787.571250] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2787.571255] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2787.571261] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2787.571270] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2787.581770] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2787.583523] R13: 00007ffdb287bf9f R14: 00007ffa3780c9c0 R15: 000000000119bf8c [ 2787.634616] CPU: 0 PID: 31427 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2787.640329] (null) [ 2787.641653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2787.641658] Call Trace: [ 2787.641677] dump_stack+0x1b2/0x281 [ 2787.641691] warn_alloc.cold+0x96/0x1cc [ 2787.652394] syz-executor.5 cpuset= [ 2787.653376] ? zone_watermark_ok_safe+0x220/0x220 [ 2787.660813] / [ 2787.661748] __alloc_pages_nodemask+0x2127/0x2720 [ 2787.666282] mems_allowed=0-1 [ 2787.669923] ? retint_kernel+0x2d/0x2d [ 2787.669943] ? lock_acquire+0x170/0x3f0 [ 2787.669959] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2787.714258] (null) [ 2787.720265] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2787.720277] ? __mutex_unlock_slowpath+0x75/0x770 [ 2787.720292] alloc_pages_current+0x155/0x260 [ 2787.720310] ion_page_pool_alloc+0x118/0x1b0 [ 2787.720321] ion_system_heap_allocate+0x133/0x8c0 [ 2787.720331] ? ion_alloc+0x187/0x810 [ 2787.720342] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2787.720351] ? ion_system_contig_heap_create+0x130/0x130 [ 2787.720362] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2787.720375] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2787.750829] syz-executor.2 cpuset= [ 2787.756533] ion_alloc+0x204/0x810 [ 2787.756549] ? ion_dma_buf_release+0x40/0x40 [ 2787.756561] ? __might_fault+0x177/0x1b0 [ 2787.756573] ion_ioctl+0xea/0x1f0 [ 2787.756582] ? ion_query_heaps+0x360/0x360 [ 2787.756595] ? lock_acquire+0x170/0x3f0 [ 2787.756604] ? lock_downgrade+0x740/0x740 [ 2787.756622] ? ion_query_heaps+0x360/0x360 [ 2787.776299] / [ 2787.783329] do_vfs_ioctl+0x75a/0xff0 [ 2787.809003] mems_allowed=0-1 [ 2787.811415] ? ioctl_preallocate+0x1a0/0x1a0 [ 2787.811427] ? lock_downgrade+0x740/0x740 [ 2787.811440] ? __fget+0x225/0x360 [ 2787.930683] ? do_vfs_ioctl+0xff0/0xff0 [ 2787.934659] ? security_file_ioctl+0x83/0xb0 [ 2787.939071] SyS_ioctl+0x7f/0xb0 [ 2787.942456] ? do_vfs_ioctl+0xff0/0xff0 [ 2787.946429] do_syscall_64+0x1d5/0x640 [ 2787.950315] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2787.955509] RIP: 0033:0x45e219 [ 2787.958688] RSP: 002b:00007f31ca50bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2787.966416] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2787.973785] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2787.981059] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2787.988332] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2787.995600] R13: 00007ffc62fc4bcf R14: 00007f31ca50c9c0 R15: 000000000119bf8c [ 2788.002886] CPU: 1 PID: 31429 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2788.010782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2788.020150] Call Trace: [ 2788.023178] dump_stack+0x1b2/0x281 [ 2788.024362] Mem-Info: [ 2788.026806] warn_alloc.cold+0x96/0x1cc [ 2788.026819] ? zone_watermark_ok_safe+0x220/0x220 [ 2788.026843] __alloc_pages_nodemask+0x2127/0x2720 [ 2788.026859] ? lock_acquire+0x170/0x3f0 [ 2788.026874] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2788.029384] active_anon:16978 inactive_anon:64920 isolated_anon:12 [ 2788.029384] active_file:2415 inactive_file:2965 isolated_file:12 [ 2788.029384] unevictable:0 dirty:102 writeback:0 unstable:0 [ 2788.029384] slab_reclaimable:12670 slab_unreclaimable:114541 [ 2788.029384] mapped:57259 shmem:66318 pagetables:842 bounce:0 [ 2788.029384] free:106014 free_pcp:110 free_cma:0 [ 2788.033256] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2788.033270] ? __mutex_unlock_slowpath+0x75/0x770 [ 2788.033285] alloc_pages_current+0x155/0x260 [ 2788.033300] ion_page_pool_alloc+0x118/0x1b0 [ 2788.033310] ion_system_heap_allocate+0x133/0x8c0 [ 2788.033320] ? ion_alloc+0x187/0x810 [ 2788.033330] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2788.033339] ? ion_system_contig_heap_create+0x130/0x130 [ 2788.033349] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2788.033362] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2788.038815] Node 0 active_anon:67052kB inactive_anon:243424kB active_file:9652kB inactive_file:11856kB unevictable:0kB isolated(anon):48kB isolated(file):48kB mapped:229036kB dirty:400kB writeback:0kB shmem:248888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2788.043062] ion_alloc+0x204/0x810 [ 2788.043080] ? ion_dma_buf_release+0x40/0x40 [ 2788.043091] ? __might_fault+0x177/0x1b0 [ 2788.043102] ion_ioctl+0xea/0x1f0 [ 2788.043111] ? ion_query_heaps+0x360/0x360 [ 2788.043123] ? lock_acquire+0x170/0x3f0 [ 2788.043132] ? lock_downgrade+0x740/0x740 [ 2788.043140] ? ion_query_heaps+0x360/0x360 [ 2788.043149] do_vfs_ioctl+0x75a/0xff0 [ 2788.043160] ? ioctl_preallocate+0x1a0/0x1a0 [ 2788.043168] ? lock_downgrade+0x740/0x740 [ 2788.043180] ? __fget+0x225/0x360 [ 2788.043189] ? do_vfs_ioctl+0xff0/0xff0 [ 2788.043202] ? security_file_ioctl+0x83/0xb0 [ 2788.048263] Node 1 active_anon:860kB inactive_anon:16256kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2788.052003] SyS_ioctl+0x7f/0xb0 [ 2788.052013] ? do_vfs_ioctl+0xff0/0xff0 [ 2788.052026] do_syscall_64+0x1d5/0x640 [ 2788.052043] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2788.052050] RIP: 0033:0x45e219 [ 2788.052055] RSP: 002b:00007fe8b5c57c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2788.052065] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2788.052070] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2788.052075] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2788.052080] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2788.052086] R13: 00007ffeb210a7af R14: 00007fe8b5c589c0 R15: 000000000119bf8c [ 2788.062485] CPU: 1 PID: 31443 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2788.095244] Node 0 [ 2788.097041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2788.097046] Call Trace: [ 2788.097065] dump_stack+0x1b2/0x281 [ 2788.097082] warn_alloc.cold+0x96/0x1cc [ 2788.101713] DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2788.106007] ? zone_watermark_ok_safe+0x220/0x220 [ 2788.106032] __alloc_pages_nodemask+0x2127/0x2720 [ 2788.106044] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2788.106053] ? finish_task_switch+0x178/0x610 [ 2788.106060] ? finish_task_switch+0x14d/0x610 [ 2788.106073] ? lock_acquire+0x170/0x3f0 [ 2788.106088] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2788.106102] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2788.106113] ? __mutex_unlock_slowpath+0x75/0x770 [ 2788.106123] ? alloc_pages_current+0x123/0x260 [ 2788.106133] alloc_pages_current+0x155/0x260 [ 2788.106147] ion_page_pool_alloc+0x118/0x1b0 [ 2788.106158] ion_system_heap_allocate+0x133/0x8c0 [ 2788.106168] ? ion_alloc+0x187/0x810 [ 2788.106178] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2788.106191] ? ion_system_contig_heap_create+0x130/0x130 [ 2788.111660] lowmem_reserve[]: [ 2788.114736] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2788.114750] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2788.114765] ion_alloc+0x204/0x810 [ 2788.114778] ? ion_dma_buf_release+0x40/0x40 [ 2788.114789] ? __might_fault+0x177/0x1b0 [ 2788.114801] ion_ioctl+0xea/0x1f0 [ 2788.114811] ? ion_query_heaps+0x360/0x360 [ 2788.114823] ? lock_acquire+0x170/0x3f0 [ 2788.114831] ? lock_downgrade+0x740/0x740 [ 2788.114839] ? ion_query_heaps+0x360/0x360 [ 2788.114850] do_vfs_ioctl+0x75a/0xff0 [ 2788.114862] ? ioctl_preallocate+0x1a0/0x1a0 [ 2788.114871] ? lock_downgrade+0x740/0x740 [ 2788.114883] ? __fget+0x225/0x360 [ 2788.114893] ? do_vfs_ioctl+0xff0/0xff0 [ 2788.114905] ? security_file_ioctl+0x83/0xb0 [ 2788.114915] SyS_ioctl+0x7f/0xb0 [ 2788.114923] ? do_vfs_ioctl+0xff0/0xff0 [ 2788.114935] do_syscall_64+0x1d5/0x640 [ 2788.122108] 0 [ 2788.125836] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2788.125846] RIP: 0033:0x45e219 [ 2788.125850] RSP: 002b:00007f2cd38a7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2788.125861] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2788.125866] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2788.125871] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2788.125877] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2788.125882] R13: 00007ffec6b5817f R14: 00007f2cd38a89c0 R15: 000000000119bf8c [ 2788.585967] 2717 2718 2718 2718 [ 2788.589679] Node 0 DMA32 free:88124kB min:36200kB low:45248kB high:54296kB active_anon:66684kB inactive_anon:243424kB active_file:9888kB inactive_file:13212kB unevictable:0kB writepending:456kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7584kB pagetables:3312kB bounce:0kB free_pcp:712kB local_pcp:132kB free_cma:0kB [ 2788.623984] lowmem_reserve[]: 0 0 0 0 0 [ 2788.628512] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2788.659322] lowmem_reserve[]: 0 0 0 0 0 [ 2788.663465] Node 1 Normal free:53768kB min:53696kB low:67120kB high:80544kB active_anon:860kB inactive_anon:16256kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2788.699323] lowmem_reserve[]: 0 0 0 0 0 [ 2788.703555] Node 0 DMA: 6*4kB (U) 9*8kB (U) 2*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11072kB [ 2788.723444] Node 0 DMA32: 136*4kB (UME) 295*8kB (UME) 182*16kB (ME) 881*32kB (UME) 17*64kB (UM) 6*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36632kB [ 2788.743351] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2788.756672] Node 1 Normal: 238*4kB (UM) 402*8kB (UM) 368*16kB (UM) 381*32kB (UM) 104*64kB (UM) 44*128kB (UM) 21*256kB (UM) 27*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53736kB [ 2788.810890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2788.847905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2788.873127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2788.889964] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2788.943225] 66373 total pagecache pages [ 2788.947595] 0 pages in swap cache [ 2788.951051] Swap cache stats: add 0, delete 0, find 0/0 [ 2788.960760] Free swap = 0kB [ 2788.963821] Total swap = 0kB [ 2788.966887] 2097051 pages RAM [ 2788.970001] 0 pages HighMem/MovableOnly [ 2788.973976] 363840 pages reserved [ 2789.002859] 0 pages cma reserved [ 2789.235638] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2789.318874] systemd-journal cpuset=/ mems_allowed=0-1 [ 2789.324129] CPU: 1 PID: 30893 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 2789.332094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2789.341550] Call Trace: [ 2789.344158] dump_stack+0x1b2/0x281 [ 2789.347791] dump_header+0x178/0x82f [ 2789.351516] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2789.356648] ? ___ratelimit+0x2cd/0x530 [ 2789.360647] oom_kill_process.cold+0x10/0xb18 [ 2789.365176] out_of_memory+0xe3e/0x1190 [ 2789.369174] ? oom_killer_disable+0x1c0/0x1c0 [ 2789.373665] ? mutex_trylock+0x152/0x1a0 [ 2789.377749] __alloc_pages_nodemask+0x23e1/0x2720 [ 2789.382613] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2789.387503] alloc_pages_current+0x155/0x260 [ 2789.391911] filemap_fault+0xea3/0x1980 [ 2789.395895] ext4_filemap_fault+0x84/0xb0 [ 2789.400046] __do_fault+0xfa/0x380 [ 2789.403590] __handle_mm_fault+0x2497/0x4620 [ 2789.408022] ? vm_insert_page+0x7c0/0x7c0 [ 2789.412197] ? check_stack_object+0x86/0xa0 [ 2789.416540] handle_mm_fault+0x391/0x860 [ 2789.420624] __do_page_fault+0x549/0xad0 [ 2789.424686] ? spurious_fault+0x640/0x640 [ 2789.428862] ? do_page_fault+0x60/0x500 [ 2789.432830] ? page_fault+0x2f/0x50 [ 2789.436456] page_fault+0x45/0x50 [ 2789.439911] RIP: 0000:0x564516096d60 [ 2789.443705] RSP: f59f84f0:00007ffcf59f5610 EFLAGS: 7ffcf59f8590 [ 2789.451760] Mem-Info: [ 2789.460322] active_anon:16919 inactive_anon:64919 isolated_anon:0 [ 2789.460322] active_file:24 inactive_file:14 isolated_file:0 [ 2789.460322] unevictable:0 dirty:19 writeback:5 unstable:0 [ 2789.460322] slab_reclaimable:12662 slab_unreclaimable:113749 [ 2789.460322] mapped:52746 shmem:66317 pagetables:838 bounce:0 [ 2789.460322] free:25102 free_pcp:60 free_cma:0 [ 2789.525625] Node 0 active_anon:66816kB inactive_anon:243420kB active_file:84kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210988kB dirty:64kB writeback:16kB shmem:248884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2789.575438] Bluetooth: hci3 command 0x040f tx timeout [ 2789.580761] Bluetooth: hci1 command 0x040f tx timeout [ 2789.608401] Node 1 active_anon:860kB inactive_anon:16256kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2789.769178] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2789.960027] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2790.015341] Node 0 DMA32 free:36132kB min:36200kB low:45248kB high:54296kB active_anon:66872kB inactive_anon:243420kB active_file:140kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:3264kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2790.210171] lowmem_reserve[]: 0 0 0 0 0 [ 2790.214221] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2790.407289] lowmem_reserve[]: 0 0 0 0 0 [ 2790.411323] Node 1 Normal free:53604kB min:53696kB low:67120kB high:80544kB active_anon:860kB inactive_anon:16256kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:112kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2790.621503] lowmem_reserve[]: 0 0 0 0 0 [ 2790.652023] Node 0 DMA: 6*4kB (U) 9*8kB (U) 2*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11072kB [ 2790.761350] Node 0 DMA32: 597*4kB (UME) 376*8kB (UME) 229*16kB (ME) 501*32kB (UME) 70*64kB (UM) 19*128kB (M) 6*256kB (M) 5*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36100kB [ 2790.864977] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2790.950397] Node 1 Normal: 203*4kB (UM) 401*8kB (UM) 367*16kB (UM) 382*32kB (UM) 104*64kB (UM) 44*128kB (UM) 21*256kB (UM) 27*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53604kB [ 2791.062057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2791.118322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2791.132741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2791.160130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2791.184108] 66347 total pagecache pages [ 2791.194161] 0 pages in swap cache [ 2791.212981] Swap cache stats: add 0, delete 0, find 0/0 [ 2791.225460] Free swap = 0kB [ 2791.243740] Total swap = 0kB [ 2791.252370] 2097051 pages RAM [ 2791.255494] 0 pages HighMem/MovableOnly [ 2791.281122] 363840 pages reserved [ 2791.284622] 0 pages cma reserved [ 2791.305572] Out of memory (oom_kill_allocating_task): Kill process 30893 (systemd-journal) score 0 or sacrifice child [ 2791.331181] Killed process 30893 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1876kB [ 2791.435962] oom_reaper: reaped process 30893 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1876kB [ 2791.656098] Bluetooth: hci1 command 0x0419 tx timeout [ 2791.661606] Bluetooth: hci3 command 0x0419 tx timeout [ 2791.735126] oom_reaper: reaped process 31443 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2791.872610] oom_reaper: reaped process 31429 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2791.912424] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2791.960985] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2792.004363] CPU: 1 PID: 28175 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2792.012278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2792.021642] Call Trace: [ 2792.024248] dump_stack+0x1b2/0x281 [ 2792.027890] dump_header+0x178/0x82f [ 2792.031612] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2792.036728] ? ___ratelimit+0x2cd/0x530 [ 2792.040720] oom_kill_process.cold+0x10/0xb18 [ 2792.045243] out_of_memory+0xe3e/0x1190 [ 2792.049220] ? oom_killer_disable+0x1c0/0x1c0 [ 2792.053728] ? mutex_trylock+0x152/0x1a0 [ 2792.057796] __alloc_pages_nodemask+0x23e1/0x2720 [ 2792.062666] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2792.067525] alloc_pages_current+0x155/0x260 [ 2792.071938] filemap_fault+0xea3/0x1980 [ 2792.075922] ext4_filemap_fault+0x84/0xb0 [ 2792.080074] __do_fault+0xfa/0x380 [ 2792.083612] __handle_mm_fault+0x2497/0x4620 [ 2792.088029] ? vm_insert_page+0x7c0/0x7c0 [ 2792.092174] ? lock_downgrade+0x740/0x740 [ 2792.096362] handle_mm_fault+0x391/0x860 [ 2792.100423] __do_page_fault+0x549/0xad0 [ 2792.104482] ? spurious_fault+0x640/0x640 [ 2792.108627] ? do_page_fault+0x60/0x500 [ 2792.112595] ? page_fault+0x2f/0x50 [ 2792.116230] page_fault+0x45/0x50 [ 2792.119671] RIP: 0003:0x32 [ 2792.122495] RSP: 0bb8:00000000002a87e9 EFLAGS: 00000037 [ 2792.190722] Mem-Info: [ 2792.198621] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2792.212348] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2792.217325] active_anon:16766 inactive_anon:64918 isolated_anon:0 [ 2792.217325] active_file:11 inactive_file:21 isolated_file:0 [ 2792.217325] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2792.217325] slab_reclaimable:12661 slab_unreclaimable:113364 [ 2792.217325] mapped:52229 shmem:66317 pagetables:820 bounce:0 [ 2792.217325] free:14361 free_pcp:144 free_cma:0 [ 2792.242635] syz-executor.5 cpuset= [ 2792.269254] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2792.274606] / mems_allowed=0-1 [ 2792.289096] CPU: 1 PID: 31443 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2792.297010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2792.306364] Call Trace: [ 2792.308951] dump_stack+0x1b2/0x281 [ 2792.312587] warn_alloc.cold+0x96/0x1cc [ 2792.316554] ? zone_watermark_ok_safe+0x220/0x220 [ 2792.321387] ? usleep_range+0x130/0x130 [ 2792.325363] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2792.330457] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2792.335479] ? run_timer_softirq+0x5a0/0x5a0 [ 2792.339888] __alloc_pages_nodemask+0x2127/0x2720 [ 2792.344731] ? lock_acquire+0x170/0x3f0 [ 2792.348705] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2792.353634] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2792.358134] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2792.363591] ? policy_node+0xd1/0x110 [ 2792.367484] alloc_pages_current+0x155/0x260 [ 2792.371921] ion_page_pool_alloc+0x118/0x1b0 [ 2792.376354] ion_system_heap_allocate+0x133/0x8c0 [ 2792.381208] ? ion_alloc+0x187/0x810 [ 2792.384920] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2792.390376] ? ion_system_contig_heap_create+0x130/0x130 [ 2792.395845] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2792.400894] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2792.405745] ion_alloc+0x204/0x810 [ 2792.409305] ? ion_dma_buf_release+0x40/0x40 [ 2792.413716] ? __might_fault+0x177/0x1b0 [ 2792.417783] ion_ioctl+0xea/0x1f0 [ 2792.421269] ? ion_query_heaps+0x360/0x360 [ 2792.425506] ? lock_acquire+0x170/0x3f0 [ 2792.429481] ? lock_downgrade+0x740/0x740 [ 2792.433627] ? ion_query_heaps+0x360/0x360 [ 2792.437859] do_vfs_ioctl+0x75a/0xff0 [ 2792.441657] ? ioctl_preallocate+0x1a0/0x1a0 [ 2792.446074] ? lock_downgrade+0x740/0x740 [ 2792.450230] ? __fget+0x225/0x360 [ 2792.453686] ? do_vfs_ioctl+0xff0/0xff0 [ 2792.457659] ? security_file_ioctl+0x83/0xb0 [ 2792.462102] SyS_ioctl+0x7f/0xb0 [ 2792.465465] ? do_vfs_ioctl+0xff0/0xff0 [ 2792.469438] do_syscall_64+0x1d5/0x640 [ 2792.473348] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2792.478542] RIP: 0033:0x45e219 [ 2792.481726] RSP: 002b:00007f2cd38a7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2792.489450] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2792.496737] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2792.504002] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2792.511300] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2792.518564] R13: 00007ffec6b5817f R14: 00007f2cd38a89c0 R15: 000000000119bf8c [ 2792.525946] CPU: 0 PID: 31429 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2792.533840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2792.539194] Node 0 active_anon:66500kB inactive_anon:243416kB active_file:84kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:248884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2792.543193] Call Trace: [ 2792.573554] dump_stack+0x1b2/0x281 [ 2792.577227] warn_alloc.cold+0x96/0x1cc [ 2792.581216] ? zone_watermark_ok_safe+0x220/0x220 [ 2792.581625] warn_alloc_show_mem: 3 callbacks suppressed [ 2792.581629] Mem-Info: [ 2792.586069] ? usleep_range+0x130/0x130 [ 2792.586079] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2792.586092] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2792.586101] ? run_timer_softirq+0x5a0/0x5a0 [ 2792.586118] __alloc_pages_nodemask+0x2127/0x2720 [ 2792.586133] ? lock_acquire+0x170/0x3f0 [ 2792.586148] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2792.586160] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2792.586174] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2792.592974] active_anon:16766 inactive_anon:64918 isolated_anon:0 [ 2792.592974] active_file:26 inactive_file:23 isolated_file:0 [ 2792.592974] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2792.592974] slab_reclaimable:12652 slab_unreclaimable:113349 [ 2792.592974] mapped:52215 shmem:66317 pagetables:820 bounce:0 [ 2792.592974] free:14361 free_pcp:144 free_cma:0 [ 2792.593961] ? alloc_pages_current+0x73/0x260 [ 2792.606947] Node 0 active_anon:66500kB inactive_anon:243416kB active_file:84kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:248884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2792.608056] alloc_pages_current+0x155/0x260 [ 2792.612453] Node 1 active_anon:564kB inactive_anon:16256kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2792.617277] ion_page_pool_alloc+0x118/0x1b0 [ 2792.617288] ion_system_heap_allocate+0x133/0x8c0 [ 2792.617297] ? ion_alloc+0x187/0x810 [ 2792.617307] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2792.617316] ? ion_system_contig_heap_create+0x130/0x130 [ 2792.617326] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2792.617336] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2792.617349] ion_alloc+0x204/0x810 [ 2792.617363] ? ion_dma_buf_release+0x40/0x40 [ 2792.617376] ? __might_fault+0x177/0x1b0 [ 2792.617388] ion_ioctl+0xea/0x1f0 [ 2792.617398] ? ion_query_heaps+0x360/0x360 [ 2792.617411] ? lock_acquire+0x170/0x3f0 [ 2792.617420] ? lock_downgrade+0x740/0x740 [ 2792.617429] ? ion_query_heaps+0x360/0x360 [ 2792.617439] do_vfs_ioctl+0x75a/0xff0 [ 2792.617451] ? ioctl_preallocate+0x1a0/0x1a0 [ 2792.632217] Node 0 [ 2792.636169] ? lock_downgrade+0x740/0x740 [ 2792.636184] ? __fget+0x225/0x360 [ 2792.636194] ? do_vfs_ioctl+0xff0/0xff0 [ 2792.636204] ? security_file_ioctl+0x83/0xb0 [ 2792.636230] SyS_ioctl+0x7f/0xb0 [ 2792.680720] Node 1 active_anon:564kB inactive_anon:16256kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2792.701995] ? do_vfs_ioctl+0xff0/0xff0 [ 2792.702010] do_syscall_64+0x1d5/0x640 [ 2792.702026] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2792.702034] RIP: 0033:0x45e219 [ 2792.702039] RSP: 002b:00007fe8b5c57c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2792.702048] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2792.702053] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2792.702058] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2792.702063] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2792.702069] R13: 00007ffeb210a7af R14: 00007fe8b5c589c0 R15: 000000000119bf8c [ 2792.873907] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2792.883767] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2792.952533] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2792.952901] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2792.980750] Node 0 DMA32 free:19796kB min:36200kB low:45248kB high:54296kB active_anon:66492kB inactive_anon:243416kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3208kB bounce:0kB free_pcp:580kB local_pcp:120kB free_cma:0kB [ 2793.016682] systemd[1]: Stopped Journal Service. [ 2793.040441] systemd[1]: Starting Journal Service... [ 2793.051062] lowmem_reserve[]: 0 0 0 0 0 [ 2793.063656] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2793.096842] lowmem_reserve[]: 0 0 0 0 0 [ 2793.101919] Node 1 Normal free:129320kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:16256kB active_file:204kB inactive_file:6904kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:220kB bounce:0kB free_pcp:196kB local_pcp:68kB free_cma:0kB [ 2793.137554] lowmem_reserve[]: 0 0 0 0 0 [ 2793.141964] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10972kB [ 2793.160873] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2793.205152] Node 0 DMA32: 316*4kB (ME) 348*8kB (ME) 201*16kB (ME) 78*32kB (UME) 1108*64kB (UM) 17*128kB (UM) 2*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 83872kB [ 2793.263532] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2793.269629] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2793.291231] Node 0 DMA32 free:18764kB min:36200kB low:45248kB high:54296kB active_anon:66392kB inactive_anon:243416kB active_file:256kB inactive_file:476kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2793.341272] Node 1 Normal: 56*4kB (UM) 34*8kB (UM) 27*16kB (UM) 23*32kB (UM) 19*64kB (UM) 9*128kB (UM) 5*256kB (UM) 4*512kB (M) 1*1024kB (M) 7*2048kB (U) 1*4096kB (U) = 26816kB [ 2793.369015] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2793.387258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2793.390523] lowmem_reserve[]: 0 0 0 0 0 [ 2793.400217] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2793.401738] syz-executor.5 cpuset= [ 2793.433115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2793.434282] lowmem_reserve[]: [ 2793.436782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2793.445439] 0 [ 2793.454568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2793.474744] 66389 total pagecache pages [ 2793.478839] 0 pages in swap cache [ 2793.480927] 0 [ 2793.482616] Swap cache stats: add 0, delete 0, find 0/0 [ 2793.482625] Free swap = 0kB [ 2793.484424] 0 [ 2793.496209] Total swap = 0kB [ 2793.501048] 2097051 pages RAM [ 2793.501839] / [ 2793.504153] 0 pages HighMem/MovableOnly [ 2793.504165] mems_allowed=0-1 [ 2793.511544] 363840 pages reserved [ 2793.514722] CPU: 0 PID: 31429 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2793.517444] 0 pages cma reserved [ 2793.524577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2793.524588] Call Trace: [ 2793.539890] dump_stack+0x1b2/0x281 [ 2793.543526] warn_alloc.cold+0x96/0x1cc [ 2793.547596] ? zone_watermark_ok_safe+0x220/0x220 [ 2793.552458] __alloc_pages_nodemask+0x2127/0x2720 [ 2793.557312] ? lock_acquire+0x170/0x3f0 [ 2793.561300] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2793.566156] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2793.571613] ? __mutex_unlock_slowpath+0x75/0x770 [ 2793.576466] ? ion_page_pool_remove+0x82/0x280 [ 2793.581056] alloc_pages_current+0x155/0x260 [ 2793.585493] ion_page_pool_alloc+0x118/0x1b0 [ 2793.589922] ion_system_heap_allocate+0x133/0x8c0 [ 2793.594776] ? _raw_spin_unlock+0x29/0x40 [ 2793.598950] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2793.603891] ? ion_system_contig_heap_create+0x130/0x130 [ 2793.609353] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2793.614375] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2793.619222] ion_alloc+0x27a/0x810 [ 2793.622780] ? ion_dma_buf_release+0x40/0x40 [ 2793.627205] ? __might_fault+0x177/0x1b0 [ 2793.631275] ion_ioctl+0xea/0x1f0 [ 2793.634738] ? ion_query_heaps+0x360/0x360 [ 2793.638981] ? lock_acquire+0x170/0x3f0 [ 2793.642977] ? lock_downgrade+0x740/0x740 [ 2793.647125] ? ion_query_heaps+0x360/0x360 [ 2793.651360] do_vfs_ioctl+0x75a/0xff0 [ 2793.655181] ? ioctl_preallocate+0x1a0/0x1a0 [ 2793.659594] ? lock_downgrade+0x740/0x740 [ 2793.663749] ? __fget+0x225/0x360 [ 2793.667201] ? do_vfs_ioctl+0xff0/0xff0 [ 2793.671173] ? security_file_ioctl+0x83/0xb0 [ 2793.675577] SyS_ioctl+0x7f/0xb0 [ 2793.678942] ? do_vfs_ioctl+0xff0/0xff0 [ 2793.682919] do_syscall_64+0x1d5/0x640 [ 2793.686826] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2793.692023] RIP: 0033:0x45e219 [ 2793.695208] RSP: 002b:00007fe8b5c57c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2793.703015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2793.710298] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2793.718703] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2793.726062] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2793.733357] R13: 00007ffeb210a7af R14: 00007fe8b5c589c0 R15: 000000000119bf8c [ 2793.750879] 0 0 [ 2793.759438] Node 1 Normal free:174964kB min:53696kB low:67120kB high:80544kB active_anon:780kB inactive_anon:16256kB active_file:336kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:60kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2793.839780] lowmem_reserve[]: 0 0 0 0 0 [ 2793.859544] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10972kB [ 2793.897033] Node 0 DMA32: 30*4kB (ME) 189*8kB (UE) 113*16kB (UE) 43*32kB (UME) 5236*64kB (UM) 302*128kB (UM) 59*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 393680kB [ 2793.986290] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2794.030339] Node 1 Normal: 28*4kB (UM) 18*8kB (UM) 16*16kB (UM) 16*32kB (UM) 124*64kB (UM) 7*128kB (UM) 8*256kB (UM) 6*512kB (UM) 2*1024kB (M) 1*2048kB (U) 4*4096kB (U) = 35456kB [ 2794.076255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2794.085135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2794.106560] systemd-journald[31451]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2794.166231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2794.175106] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2794.216615] 70141 total pagecache pages [ 2794.220627] 0 pages in swap cache [ 2794.224065] Swap cache stats: add 0, delete 0, find 0/0 [ 2794.277628] Free swap = 0kB [ 2794.280680] Total swap = 0kB [ 2794.292534] 2097051 pages RAM [ 2794.295653] 0 pages HighMem/MovableOnly [ 2794.324981] 363840 pages reserved [ 2794.332767] warn_alloc_show_mem: 1 callbacks suppressed [ 2794.332771] Mem-Info: [ 2794.338333] 0 pages cma reserved [ 2794.341383] active_anon:16885 inactive_anon:66943 isolated_anon:0 [ 2794.341383] active_file:72 inactive_file:64 isolated_file:0 [ 2794.341383] unevictable:0 dirty:0 writeback:1 unstable:0 [ 2794.341383] slab_reclaimable:12652 slab_unreclaimable:112999 [ 2794.341383] mapped:52671 shmem:68342 pagetables:817 bounce:0 [ 2794.341383] free:18509 free_pcp:61 free_cma:0 [ 2794.344110] Out of memory (oom_kill_allocating_task): Kill process 28175 (syz-executor.4) score 0 or sacrifice child [ 2794.383342] Node 0 active_anon:66760kB inactive_anon:251516kB active_file:232kB inactive_file:276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210572kB dirty:0kB writeback:4kB shmem:256984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2794.414377] Killed process 31431 (syz-executor.4) total-vm:93348kB, anon-rss:156kB, file-rss:34816kB, shmem-rss:0kB [ 2794.421163] Node 1 active_anon:780kB inactive_anon:16256kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2794.433958] oom_reaper: reaped process 31431 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2794.474417] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2794.504742] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2794.509865] Node 0 DMA32 free:27632kB min:36200kB low:45248kB high:54296kB active_anon:66676kB inactive_anon:251548kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3264kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 2794.542316] lowmem_reserve[]: 0 0 0 0 0 [ 2794.546409] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2794.576149] lowmem_reserve[]: 0 0 0 0 0 [ 2794.580280] Node 1 Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:712kB inactive_anon:16256kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2794.616146] lowmem_reserve[]: 0 0 0 0 0 [ 2794.621085] Node 0 DMA: 0*4kB 5*8kB (U) 2*16kB (U) 0*32kB 0*64kB 1*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10952kB [ 2794.626677] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2794.638801] Node 0 DMA32: 506*4kB (UME) 114*8kB (UME) 162*16kB (ME) 393*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18168kB [ 2794.661746] oom_reaper: reaped process 31427 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2794.664673] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2794.686351] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2794.687393] Node 1 Normal: [ 2794.691489] CPU: 0 PID: 31443 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2794.691497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2794.694432] 173*4kB [ 2794.702295] Call Trace: [ 2794.702320] dump_stack+0x1b2/0x281 [ 2794.702333] warn_alloc.cold+0x96/0x1cc [ 2794.702344] ? zone_watermark_ok_safe+0x220/0x220 [ 2794.702365] __alloc_pages_nodemask+0x2127/0x2720 [ 2794.702375] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2794.702385] ? finish_task_switch+0x178/0x610 [ 2794.702393] ? finish_task_switch+0x14d/0x610 [ 2794.702407] ? lock_acquire+0x170/0x3f0 [ 2794.702423] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2794.702440] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2794.702452] ? __mutex_unlock_slowpath+0x75/0x770 [ 2794.702462] ? alloc_pages_current+0xe3/0x260 [ 2794.702474] alloc_pages_current+0x155/0x260 [ 2794.720081] (UM) [ 2794.720360] ion_page_pool_alloc+0x118/0x1b0 [ 2794.724311] 389*8kB [ 2794.729156] ion_system_heap_allocate+0x133/0x8c0 [ 2794.729170] ? _raw_spin_unlock+0x29/0x40 [ 2794.729179] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2794.729188] ? ion_system_contig_heap_create+0x130/0x130 [ 2794.729199] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2794.729210] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2794.729220] ion_alloc+0x27a/0x810 [ 2794.729234] ? ion_dma_buf_release+0x40/0x40 [ 2794.729246] ? __might_fault+0x177/0x1b0 [ 2794.729259] ion_ioctl+0xea/0x1f0 [ 2794.729271] ? ion_query_heaps+0x360/0x360 [ 2794.741037] (UM) [ 2794.743074] ? lock_acquire+0x170/0x3f0 [ 2794.748939] 236*16kB [ 2794.751542] ? lock_downgrade+0x740/0x740 [ 2794.760310] (UM) [ 2794.761804] ? ion_query_heaps+0x360/0x360 [ 2794.766684] 208*32kB [ 2794.771139] do_vfs_ioctl+0x75a/0xff0 [ 2794.775514] (UM) [ 2794.777568] ? ioctl_preallocate+0x1a0/0x1a0 [ 2794.777578] ? lock_downgrade+0x740/0x740 [ 2794.777590] ? __fget+0x225/0x360 [ 2794.777598] ? do_vfs_ioctl+0xff0/0xff0 [ 2794.777608] ? security_file_ioctl+0x83/0xb0 [ 2794.777617] SyS_ioctl+0x7f/0xb0 [ 2794.777624] ? do_vfs_ioctl+0xff0/0xff0 [ 2794.777635] do_syscall_64+0x1d5/0x640 [ 2794.777653] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2794.777662] RIP: 0033:0x45e219 [ 2794.777667] RSP: 002b:00007f2cd38a7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2794.777676] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2794.777681] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2794.777686] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2794.777690] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2794.777695] R13: 00007ffec6b5817f R14: 00007f2cd38a89c0 R15: 000000000119bf8c [ 2794.946546] 9*64kB (M) 6*128kB (UM) 8*256kB (UM) 6*512kB (UM) 2*1024kB (M) 0*2048kB 1*4096kB (U) = 26844kB [ 2794.956479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2794.965328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2794.974044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2794.983012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2794.991686] 68398 total pagecache pages [ 2794.995732] 0 pages in swap cache [ 2794.999253] Swap cache stats: add 0, delete 0, find 0/0 [ 2795.004613] Free swap = 0kB [ 2795.007701] Total swap = 0kB [ 2795.010750] 2097051 pages RAM [ 2795.013853] 0 pages HighMem/MovableOnly [ 2795.017930] 363840 pages reserved [ 2795.021383] 0 pages cma reserved [ 2795.026839] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2795.082243] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2795.096459] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2795.097618] CPU: 0 PID: 28175 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2795.116196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2795.125580] Call Trace: [ 2795.128181] dump_stack+0x1b2/0x281 [ 2795.130212] syz-executor.2 cpuset=/ [ 2795.131803] dump_header+0x178/0x82f [ 2795.131816] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2795.135428] mems_allowed=0-1 [ 2795.139123] ? ___ratelimit+0x2cd/0x530 [ 2795.139134] oom_kill_process.cold+0x10/0xb18 [ 2795.139152] out_of_memory+0xe3e/0x1190 [ 2795.139164] ? oom_killer_disable+0x1c0/0x1c0 [ 2795.139172] ? mutex_trylock+0x152/0x1a0 [ 2795.139181] __alloc_pages_nodemask+0x23e1/0x2720 [ 2795.139199] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2795.139223] alloc_pages_current+0x155/0x260 [ 2795.182363] filemap_fault+0xea3/0x1980 [ 2795.186339] ext4_filemap_fault+0x84/0xb0 [ 2795.190486] __do_fault+0xfa/0x380 [ 2795.194024] __handle_mm_fault+0x2497/0x4620 [ 2795.196415] syz-executor.4: page allocation failure: order:0 [ 2795.198434] ? vm_insert_page+0x7c0/0x7c0 [ 2795.198446] ? lock_downgrade+0x740/0x740 [ 2795.204239] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2795.208406] handle_mm_fault+0x391/0x860 [ 2795.208419] __do_page_fault+0x549/0xad0 [ 2795.208430] ? spurious_fault+0x640/0x640 [ 2795.208437] ? do_page_fault+0x60/0x500 [ 2795.208448] ? page_fault+0x2f/0x50 [ 2795.208454] page_fault+0x45/0x50 [ 2795.208462] RIP: 0003:0x32 [ 2795.208466] RSP: 0bb8:00000000002a87e9 EFLAGS: 00000037 [ 2795.248821] CPU: 1 PID: 31443 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2795.262055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2795.271431] Call Trace: [ 2795.274051] dump_stack+0x1b2/0x281 [ 2795.277443] Mem-Info: [ 2795.277684] warn_alloc.cold+0x96/0x1cc [ 2795.280088] active_anon:16822 inactive_anon:66951 isolated_anon:0 [ 2795.280088] active_file:41 inactive_file:0 isolated_file:0 [ 2795.280088] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2795.280088] slab_reclaimable:12652 slab_unreclaimable:112603 [ 2795.280088] mapped:52529 shmem:68365 pagetables:834 bounce:0 [ 2795.280088] free:13848 free_pcp:0 free_cma:0 [ 2795.284053] ? zone_watermark_ok_safe+0x220/0x220 [ 2795.317086] Node 0 active_anon:66576kB inactive_anon:251548kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210116kB dirty:0kB writeback:0kB shmem:257076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2795.321860] ? usleep_range+0x130/0x130 [ 2795.349661] Node 1 active_anon:712kB inactive_anon:16256kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2795.353567] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2795.353582] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2795.380356] Node 0 [ 2795.385839] ? run_timer_softirq+0x5a0/0x5a0 [ 2795.390870] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2795.393057] __alloc_pages_nodemask+0x2127/0x2720 [ 2795.397447] lowmem_reserve[]: [ 2795.422953] ? lock_acquire+0x170/0x3f0 [ 2795.422970] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2795.422988] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2795.423004] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2795.427856] 0 [ 2795.430932] ? alloc_pages_current+0xe3/0x260 [ 2795.434872] 2717 [ 2795.439707] alloc_pages_current+0x155/0x260 [ 2795.439723] ion_page_pool_alloc+0x118/0x1b0 [ 2795.439734] ion_system_heap_allocate+0x133/0x8c0 [ 2795.439747] ? _raw_spin_unlock+0x29/0x40 [ 2795.444225] 2718 [ 2795.449663] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2795.449673] ? ion_system_contig_heap_create+0x130/0x130 [ 2795.449684] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2795.449697] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2795.451480] 2718 [ 2795.455963] ion_alloc+0x27a/0x810 [ 2795.458036] 2718 [ 2795.462410] ? ion_dma_buf_release+0x40/0x40 [ 2795.471629] ? __might_fault+0x177/0x1b0 [ 2795.475835] Node 0 [ 2795.477891] ion_ioctl+0xea/0x1f0 [ 2795.477901] ? ion_query_heaps+0x360/0x360 [ 2795.477914] ? lock_acquire+0x170/0x3f0 [ 2795.477923] ? lock_downgrade+0x740/0x740 [ 2795.477933] ? ion_query_heaps+0x360/0x360 [ 2795.482865] DMA32 free:17596kB min:36200kB low:45248kB high:54296kB active_anon:66576kB inactive_anon:251548kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2795.488290] do_vfs_ioctl+0x75a/0xff0 [ 2795.488302] ? ioctl_preallocate+0x1a0/0x1a0 [ 2795.488311] ? lock_downgrade+0x740/0x740 [ 2795.488328] ? __fget+0x225/0x360 [ 2795.493331] lowmem_reserve[]: [ 2795.498185] ? do_vfs_ioctl+0xff0/0xff0 [ 2795.498197] ? security_file_ioctl+0x83/0xb0 [ 2795.498207] SyS_ioctl+0x7f/0xb0 [ 2795.498216] ? do_vfs_ioctl+0xff0/0xff0 [ 2795.500263] 0 [ 2795.503792] do_syscall_64+0x1d5/0x640 [ 2795.505829] 0 [ 2795.510234] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2795.510243] RIP: 0033:0x45e219 [ 2795.510248] RSP: 002b:00007f2cd38a7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2795.510257] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2795.510265] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2795.514313] 0 [ 2795.516528] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2795.516533] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2795.516539] R13: 00007ffec6b5817f R14: 00007f2cd38a89c0 R15: 000000000119bf8c [ 2795.517921] syz-executor.0: [ 2795.524770] 0 [ 2795.528286] (null) [ 2795.528293] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2795.528318] CPU: 1 PID: 31431 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2795.528324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2795.528327] Call Trace: [ 2795.528346] dump_stack+0x1b2/0x281 [ 2795.528361] warn_alloc.cold+0x96/0x1cc [ 2795.528374] ? zone_watermark_ok_safe+0x220/0x220 [ 2795.528385] ? usleep_range+0x130/0x130 [ 2795.528394] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2795.528407] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2795.528417] ? run_timer_softirq+0x5a0/0x5a0 [ 2795.528433] __alloc_pages_nodemask+0x2127/0x2720 [ 2795.528450] ? lock_acquire+0x170/0x3f0 [ 2795.528475] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2795.528488] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2795.528504] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2795.528520] ? alloc_pages_current+0x21c/0x260 [ 2795.528532] alloc_pages_current+0x155/0x260 [ 2795.528544] ion_page_pool_alloc+0x118/0x1b0 [ 2795.528556] ion_system_heap_allocate+0x133/0x8c0 [ 2795.528567] ? ion_alloc+0x187/0x810 [ 2795.528578] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2795.528588] ? ion_system_contig_heap_create+0x130/0x130 [ 2795.528598] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2795.528610] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2795.528621] ion_alloc+0x204/0x810 [ 2795.528635] ? ion_dma_buf_release+0x40/0x40 [ 2795.528646] ? __might_fault+0x177/0x1b0 [ 2795.528658] ion_ioctl+0xea/0x1f0 [ 2795.528668] ? ion_query_heaps+0x360/0x360 [ 2795.528679] ? lock_acquire+0x170/0x3f0 [ 2795.533200] syz-executor.5: [ 2795.537063] ? lock_downgrade+0x740/0x740 [ 2795.537073] ? ion_query_heaps+0x360/0x360 [ 2795.537083] do_vfs_ioctl+0x75a/0xff0 [ 2795.537098] ? ioctl_preallocate+0x1a0/0x1a0 [ 2795.578852] 0 [ 2795.581867] ? lock_downgrade+0x740/0x740 [ 2795.588930] ? __fget+0x225/0x360 [ 2795.588940] ? do_vfs_ioctl+0xff0/0xff0 [ 2795.588950] ? security_file_ioctl+0x83/0xb0 [ 2795.588960] SyS_ioctl+0x7f/0xb0 [ 2795.588975] ? do_vfs_ioctl+0xff0/0xff0 [ 2795.593409] Node 0 [ 2795.596763] do_syscall_64+0x1d5/0x640 [ 2795.596781] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2795.596792] RIP: 0033:0x45e219 [ 2795.600758] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2795.602529] RSP: 002b:00007ffa3780bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2795.606538] page allocation failure: order:0 [ 2795.608291] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2795.613574] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2795.616751] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2795.616756] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2795.616760] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2795.616765] R13: 00007ffdb287bf9f R14: 00007ffa3780c9c0 R15: 000000000119bf8c [ 2795.616892] page allocation failure: order:0 [ 2795.624503] lowmem_reserve[]: [ 2795.631839] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2795.631848] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2795.631872] CPU: 1 PID: 31427 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2795.631877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2795.631881] Call Trace: [ 2795.631901] dump_stack+0x1b2/0x281 [ 2795.631916] warn_alloc.cold+0x96/0x1cc [ 2795.631927] ? zone_watermark_ok_safe+0x220/0x220 [ 2795.631940] ? usleep_range+0x130/0x130 [ 2795.652642] 0 [ 2795.655536] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2795.662858] (null) [ 2795.665825] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2795.667630] syz-executor.5 cpuset= [ 2795.669743] ? run_timer_softirq+0x5a0/0x5a0 [ 2795.675352] 0 [ 2795.683074] __alloc_pages_nodemask+0x2127/0x2720 [ 2795.683093] ? lock_acquire+0x170/0x3f0 [ 2795.683108] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2795.692512] / [ 2795.695061] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2795.698704] mems_allowed=0-1 [ 2795.702649] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2795.707522] 0 [ 2795.711452] alloc_pages_current+0x155/0x260 [ 2795.726473] 0 [ 2795.730848] ion_page_pool_alloc+0x118/0x1b0 [ 2795.734794] 0 [ 2795.739632] ion_system_heap_allocate+0x133/0x8c0 [ 2795.739642] ? ion_alloc+0x187/0x810 [ 2795.739652] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2795.739662] ? ion_system_contig_heap_create+0x130/0x130 [ 2795.739674] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2795.767818] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2795.771503] Node 1 [ 2795.776953] ion_alloc+0x204/0x810 [ 2795.776970] ? ion_dma_buf_release+0x40/0x40 [ 2795.776982] ? __might_fault+0x177/0x1b0 [ 2795.776997] ion_ioctl+0xea/0x1f0 [ 2795.796508] Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:712kB inactive_anon:16256kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2795.800212] ? ion_query_heaps+0x360/0x360 [ 2795.804248] lowmem_reserve[]: [ 2795.807691] ? lock_acquire+0x170/0x3f0 [ 2795.807699] ? lock_downgrade+0x740/0x740 [ 2795.807708] ? ion_query_heaps+0x360/0x360 [ 2795.807719] do_vfs_ioctl+0x75a/0xff0 [ 2795.807731] ? ioctl_preallocate+0x1a0/0x1a0 [ 2795.826490] 0 [ 2795.827267] ? lock_downgrade+0x740/0x740 [ 2795.831043] 0 [ 2795.835446] ? __fget+0x225/0x360 [ 2795.846497] 0 [ 2795.848737] ? do_vfs_ioctl+0xff0/0xff0 [ 2795.853134] 0 [ 2795.856506] ? security_file_ioctl+0x83/0xb0 [ 2795.856517] SyS_ioctl+0x7f/0xb0 [ 2795.856525] ? do_vfs_ioctl+0xff0/0xff0 [ 2795.856537] do_syscall_64+0x1d5/0x640 [ 2795.856554] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2795.876510] 0 [ 2795.899890] RIP: 0033:0x45e219 [ 2795.899895] RSP: 002b:00007f31ca50bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2795.899904] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2795.899909] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2795.899914] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2795.899919] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2795.899929] R13: 00007ffc62fc4bcf R14: 00007f31ca50c9c0 R15: 000000000119bf8c [ 2795.947016] warn_alloc_show_mem: 1 callbacks suppressed [ 2795.947020] Mem-Info: [ 2795.961502] CPU: 0 PID: 31429 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2795.963088] active_anon:16821 inactive_anon:66951 isolated_anon:0 [ 2795.963088] active_file:16 inactive_file:17 isolated_file:0 [ 2795.963088] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2795.963088] slab_reclaimable:12652 slab_unreclaimable:112579 [ 2795.963088] mapped:52529 shmem:68365 pagetables:834 bounce:0 [ 2795.963088] free:13970 free_pcp:4 free_cma:0 [ 2795.970689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2795.970694] Call Trace: [ 2795.970717] dump_stack+0x1b2/0x281 [ 2795.970730] warn_alloc.cold+0x96/0x1cc [ 2795.970741] ? zone_watermark_ok_safe+0x220/0x220 [ 2795.970752] ? usleep_range+0x130/0x130 [ 2795.970760] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2795.970772] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2795.970782] ? run_timer_softirq+0x5a0/0x5a0 [ 2795.970801] __alloc_pages_nodemask+0x2127/0x2720 [ 2795.976475] Node 0 active_anon:66572kB inactive_anon:251548kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210116kB dirty:0kB writeback:0kB shmem:257076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2795.984338] ? lock_acquire+0x170/0x3f0 [ 2795.993764] Node 1 active_anon:712kB inactive_anon:16256kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2795.996261] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2795.999948] Node 0 [ 2796.003842] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2796.008758] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2796.012620] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2796.014391] lowmem_reserve[]: [ 2796.019489] ? ion_page_pool_remove+0x82/0x280 [ 2796.019503] alloc_pages_current+0x155/0x260 [ 2796.019517] ion_page_pool_alloc+0x118/0x1b0 [ 2796.019528] ion_system_heap_allocate+0x133/0x8c0 [ 2796.019541] ? _raw_spin_unlock+0x29/0x40 [ 2796.019552] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2796.021796] 0 [ 2796.026795] ? ion_system_contig_heap_create+0x130/0x130 [ 2796.026806] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2796.026818] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2796.026830] ion_alloc+0x27a/0x810 [ 2796.030357] 2717 [ 2796.034756] ? ion_dma_buf_release+0x40/0x40 [ 2796.036613] 2718 [ 2796.041379] ? __might_fault+0x177/0x1b0 [ 2796.045325] 2718 [ 2796.050182] ion_ioctl+0xea/0x1f0 [ 2796.050193] ? ion_query_heaps+0x360/0x360 [ 2796.050205] ? lock_acquire+0x170/0x3f0 [ 2796.050213] ? lock_downgrade+0x740/0x740 [ 2796.050222] ? ion_query_heaps+0x360/0x360 [ 2796.050233] do_vfs_ioctl+0x75a/0xff0 [ 2796.063725] 2718 [ 2796.064932] ? ioctl_preallocate+0x1a0/0x1a0 [ 2796.071115] ? lock_downgrade+0x740/0x740 [ 2796.072891] Node 0 [ 2796.077308] ? __fget+0x225/0x360 [ 2796.077319] ? do_vfs_ioctl+0xff0/0xff0 [ 2796.077328] ? security_file_ioctl+0x83/0xb0 [ 2796.077338] SyS_ioctl+0x7f/0xb0 [ 2796.077346] ? do_vfs_ioctl+0xff0/0xff0 [ 2796.077357] do_syscall_64+0x1d5/0x640 [ 2796.077374] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2796.077382] RIP: 0033:0x45e219 [ 2796.077387] RSP: 002b:00007fe8b5c57c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2796.077396] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2796.077401] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2796.077406] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2796.077411] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2796.077416] R13: 00007ffeb210a7af R14: 00007fe8b5c589c0 R15: 000000000119bf8c [ 2796.087163] Node 0 [ 2796.093170] DMA32 free:18084kB min:36200kB low:45248kB high:54296kB active_anon:66572kB inactive_anon:251548kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3264kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 2796.094555] DMA: [ 2796.098881] lowmem_reserve[]: 0 0 0 0 0 [ 2796.098912] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2796.098932] lowmem_reserve[]: 0 0 0 0 0 [ 2796.098952] Node 1 Normal free:64236kB min:53696kB low:67120kB high:80544kB active_anon:712kB inactive_anon:16256kB active_file:12kB inactive_file:316kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:72kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB [ 2796.098980] lowmem_reserve[]: 0 0 0 0 0 [ 2796.099000] Node 0 DMA: 0*4kB 5*8kB (U) 2*16kB (U) 0*32kB 0*64kB 1*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10952kB [ 2796.099076] Node 0 DMA32: 489*4kB (ME) 111*8kB (UME) 164*16kB (UME) 389*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB [ 2796.118462] 0*4kB [ 2796.123188] 0*2048kB [ 2796.135070] 5*8kB [ 2796.159648] 0*4096kB [ 2796.186565] (U) [ 2796.196702] = 18108kB [ 2796.220374] 2*16kB [ 2796.223790] Node 0 [ 2796.224567] (U) [ 2796.228448] systemd-journald[31451]: /dev/kmsg buffer overrun, some messages lost. [ 2796.242864] 0*32kB [ 2796.250338] Normal: [ 2796.276583] 0*64kB [ 2796.326623] 0*4kB [ 2796.396646] 1*128kB [ 2796.661100] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2797.076294] Node 1 Normal: 126*4kB (UM) 570*8kB (UM) 472*16kB (UM) 209*32kB (UM) 1113*64kB (U) 172*128kB (U) 138*256kB (U) 62*512kB (UM) 13*1024kB (U) 1*2048kB (U) 3*4096kB (U) = 207272kB [ 2797.076739] (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10952kB [ 2797.115135] Node 0 DMA32: 534*4kB (UME) 140*8kB (UME) 2217*16kB (UME) 64*32kB (UME) 1259*64kB (UME) 874*128kB (U) 277*256kB (U) 53*512kB (U) 3*1024kB (U) 2*2048kB (U) 0*4096kB = 338440kB [ 2797.140746] systemd[1]: Started Journal Service. [ 2797.149885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2797.178832] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2797.192363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2797.209488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2797.213094] Node 1 Normal: 141*4kB (UM) 590*8kB (UM) 484*16kB (UM) 236*32kB (UM) 1106*64kB (U) 184*128kB (U) 147*256kB (U) 72*512kB (UM) 21*1024kB (U) 1*2048kB (U) 3*4096kB (U) = 225252kB [ 2797.235542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2797.245588] 69900 total pagecache pages [ 2797.252408] 0 pages in swap cache [ 2797.255870] Swap cache stats: add 0, delete 0, find 0/0 [ 2797.261647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2797.263826] Free swap = 0kB [ 2797.279601] Total swap = 0kB [ 2797.282647] 2097051 pages RAM [ 2797.285744] 0 pages HighMem/MovableOnly [ 2797.286804] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2797.292017] 363840 pages reserved [ 2797.298589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2797.306026] 0 pages cma reserved [ 2797.311649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2797.323584] 69900 total pagecache pages [ 2797.328011] 0 pages in swap cache [ 2797.331610] Swap cache stats: add 0, delete 0, find 0/0 [ 2797.337740] Free swap = 0kB [ 2797.340890] Total swap = 0kB [ 2797.343919] 2097051 pages RAM [ 2797.348290] 0 pages HighMem/MovableOnly [ 2797.352281] 363840 pages reserved [ 2797.355726] 0 pages cma reserved [ 2797.360380] Out of memory (oom_kill_allocating_task): Kill process 28175 (syz-executor.4) score 0 or sacrifice child [ 2797.371717] Killed process 28175 (syz-executor.4) total-vm:93216kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB [ 2797.391678] oom_reaper: reaped process 28175 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 12:08:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:54 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x171002, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x2dc, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a59}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x10c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb714}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe475}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffde}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e44}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff54}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x32bb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc63f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40}, 0x4048010) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f00000000c0)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) 12:08:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x12, 0x1}) 12:08:54 executing program 1: socketpair(0xa, 0x3, 0x6, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="23000000aa61262f3b1e21f1129cc74025f4f3af292e34077a7b5f66516c4fdeb1e25373e974a52df17f75cba253ac56e57346831d15edc3dc22e24c21835cb8ca90404805f697c17e6a529038a1f0ff33843467660e3bfc3993cea29bac45cb551d0539a0f1d8caa29682050272629a", @ANYRES16=r2, @ANYBLOB="010000000000000000000300000008003c0000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @xdp={0x2c, 0x8, 0x0, 0x3e}, @nfc={0x27, 0x1, 0x0, 0x4}, @sco, 0xd8, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x8, 0x3}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x8010) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) [ 2798.262026] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2798.275125] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2798.280438] CPU: 1 PID: 31456 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2798.288498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2798.297891] Call Trace: [ 2798.300487] dump_stack+0x1b2/0x281 [ 2798.304137] warn_alloc.cold+0x96/0x1cc [ 2798.308109] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2798.313126] ? zone_watermark_ok_safe+0x220/0x220 [ 2798.317982] __alloc_pages_nodemask+0x2127/0x2720 [ 2798.322847] ? lock_acquire+0x170/0x3f0 [ 2798.326829] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2798.331679] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2798.337130] ? __mutex_unlock_slowpath+0x75/0x770 [ 2798.342408] alloc_pages_current+0x155/0x260 [ 2798.346820] ion_page_pool_alloc+0x118/0x1b0 [ 2798.351245] ion_system_heap_allocate+0x133/0x8c0 [ 2798.356088] ? ion_alloc+0x187/0x810 [ 2798.359802] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2798.365255] ? ion_system_contig_heap_create+0x130/0x130 [ 2798.370706] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2798.375723] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2798.380567] ion_alloc+0x204/0x810 [ 2798.384109] ? ion_dma_buf_release+0x40/0x40 [ 2798.388521] ? __might_fault+0x177/0x1b0 [ 2798.392582] ion_ioctl+0xea/0x1f0 [ 2798.396030] ? ion_query_heaps+0x360/0x360 [ 2798.400275] ? lock_acquire+0x170/0x3f0 [ 2798.404246] ? lock_downgrade+0x740/0x740 [ 2798.408390] ? ion_query_heaps+0x360/0x360 [ 2798.412621] do_vfs_ioctl+0x75a/0xff0 [ 2798.416421] ? ioctl_preallocate+0x1a0/0x1a0 [ 2798.420825] ? lock_downgrade+0x740/0x740 [ 2798.424972] ? __fget+0x225/0x360 [ 2798.428421] ? do_vfs_ioctl+0xff0/0xff0 [ 2798.432479] ? security_file_ioctl+0x83/0xb0 [ 2798.436894] SyS_ioctl+0x7f/0xb0 [ 2798.440279] ? do_vfs_ioctl+0xff0/0xff0 [ 2798.444255] do_syscall_64+0x1d5/0x640 [ 2798.448153] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2798.453339] RIP: 0033:0x45e219 [ 2798.456526] RSP: 002b:00007fe8b5c57c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2798.464251] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2798.471527] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2798.478797] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2798.486092] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2798.493364] R13: 00007ffeb210a7af R14: 00007fe8b5c589c0 R15: 000000000119bf8c [ 2798.502672] warn_alloc_show_mem: 3 callbacks suppressed [ 2798.502677] Mem-Info: [ 2798.512240] active_anon:16875 inactive_anon:66951 isolated_anon:0 [ 2798.512240] active_file:226 inactive_file:2887 isolated_file:0 [ 2798.512240] unevictable:0 dirty:75 writeback:0 unstable:0 [ 2798.512240] slab_reclaimable:12647 slab_unreclaimable:115835 [ 2798.512240] mapped:54828 shmem:68365 pagetables:769 bounce:0 [ 2798.512240] free:111457 free_pcp:343 free_cma:0 [ 2798.573606] Node 0 active_anon:66760kB inactive_anon:251548kB active_file:1672kB inactive_file:6720kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216036kB dirty:176kB writeback:0kB shmem:257076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2798.602271] Node 1 active_anon:720kB inactive_anon:16256kB active_file:160kB inactive_file:3948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3356kB dirty:204kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2798.639662] Node 0 DMA free:11176kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2798.672648] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2798.685328] Node 0 DMA32 free:441852kB min:36200kB low:45248kB high:54296kB active_anon:66860kB inactive_anon:251548kB active_file:2872kB inactive_file:5984kB unevictable:0kB writepending:176kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3052kB bounce:0kB free_pcp:984kB local_pcp:528kB free_cma:0kB [ 2798.719750] lowmem_reserve[]: 0 0 0 0 0 [ 2798.723757] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2798.754248] lowmem_reserve[]: 0 0 0 0 0 [ 2798.758846] Node 1 Normal free:81152kB min:53696kB low:67120kB high:80544kB active_anon:720kB inactive_anon:16256kB active_file:1760kB inactive_file:2308kB unevictable:0kB writepending:204kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:72kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB [ 2798.800879] lowmem_reserve[]: 0 0 0 0 0 [ 2798.805404] Node 0 DMA: 6*4kB (U) 10*8kB (U) 11*16kB (U) 11*32kB (U) 1*64kB (U) 4*128kB (U) 7*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 11192kB 12:08:55 executing program 4: socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:08:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x12, 0x1}) 12:08:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:08:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x12, 0x1}) 12:08:55 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) [ 2798.825221] Node 0 DMA32: 1389*4kB (UME) 1273*8kB (UME) 10811*16kB (UME) 5365*32kB (UE) 1161*64kB (U) 78*128kB (U) 12*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 448780kB [ 2798.851008] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 12:08:55 executing program 1: ustat(0x401, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e27, @remote}]}, &(0x7f0000000000)=0x10) [ 2798.866733] Node 1 Normal: 192*4kB (UM) 610*8kB (UM) 505*16kB (U) 319*32kB (UM) 128*64kB (U) 29*128kB (UM) 5*256kB (U) 38*512kB (UM) 16*1024kB (U) 4*2048kB (U) 0*4096kB = 81152kB [ 2798.906753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2798.938635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2798.968088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 12:08:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x5, 0x3, 0x0, 0x4}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r2, 0x0, 0xffffffff, 0x2}, &(0x7f0000000180)=0x10) 12:08:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x0, 0x1}) [ 2798.994401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2799.026065] 73727 total pagecache pages [ 2799.047672] 0 pages in swap cache [ 2799.051767] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2799.065684] Swap cache stats: add 0, delete 0, find 0/0 12:08:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x0, 0x1}) [ 2799.111904] Free swap = 0kB [ 2799.123262] Total swap = 0kB [ 2799.134628] 2097051 pages RAM [ 2799.145626] 0 pages HighMem/MovableOnly [ 2799.148259] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2799.160340] 363840 pages reserved [ 2799.172153] 0 pages cma reserved [ 2799.195878] CPU: 0 PID: 31479 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2799.203815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2799.213177] Call Trace: [ 2799.215823] dump_stack+0x1b2/0x281 [ 2799.219471] warn_alloc.cold+0x96/0x1cc [ 2799.223463] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2799.228492] ? zone_watermark_ok_safe+0x220/0x220 [ 2799.233353] __alloc_pages_nodemask+0x2127/0x2720 [ 2799.238229] ? finish_task_switch+0x178/0x610 [ 2799.242736] ? switch_mm_irqs_off+0x601/0xeb0 [ 2799.247274] ? lock_acquire+0x170/0x3f0 [ 2799.251261] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2799.256137] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2799.261610] ? __mutex_unlock_slowpath+0x75/0x770 [ 2799.266501] alloc_pages_current+0x155/0x260 [ 2799.270931] ion_page_pool_alloc+0x118/0x1b0 [ 2799.275356] ion_system_heap_allocate+0x133/0x8c0 [ 2799.280220] ? ion_alloc+0x187/0x810 [ 2799.284074] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2799.289545] ? ion_system_contig_heap_create+0x130/0x130 [ 2799.295007] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2799.300034] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2799.304892] ion_alloc+0x204/0x810 [ 2799.308438] ? ion_dma_buf_release+0x40/0x40 [ 2799.312855] ? __might_fault+0x177/0x1b0 [ 2799.316927] ion_ioctl+0xea/0x1f0 [ 2799.320400] ? ion_query_heaps+0x360/0x360 [ 2799.324641] ? lock_acquire+0x170/0x3f0 [ 2799.328621] ? lock_downgrade+0x740/0x740 [ 2799.332788] ? ion_query_heaps+0x360/0x360 [ 2799.337462] do_vfs_ioctl+0x75a/0xff0 [ 2799.341276] ? ioctl_preallocate+0x1a0/0x1a0 [ 2799.345691] ? lock_downgrade+0x740/0x740 [ 2799.349844] ? __fget+0x225/0x360 [ 2799.353301] ? do_vfs_ioctl+0xff0/0xff0 [ 2799.357287] ? security_file_ioctl+0x83/0xb0 [ 2799.361711] SyS_ioctl+0x7f/0xb0 [ 2799.365094] ? do_vfs_ioctl+0xff0/0xff0 [ 2799.369081] do_syscall_64+0x1d5/0x640 [ 2799.372994] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2799.378203] RIP: 0033:0x45e219 [ 2799.381396] RSP: 002b:00007f2cd38a7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2799.389134] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2799.396417] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2799.403692] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2799.411051] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2799.418331] R13: 00007ffec6b5817f R14: 00007f2cd38a89c0 R15: 000000000119bf8c [ 2799.634192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2799.654618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2799.692882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2799.716822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2799.762732] device bridge_slave_1 left promiscuous mode [ 2799.786098] bridge0: port 2(bridge_slave_1) entered disabled state [ 2799.813758] device bridge_slave_0 left promiscuous mode [ 2799.836642] bridge0: port 1(bridge_slave_0) entered disabled state [ 2799.873790] device veth1_macvtap left promiscuous mode [ 2799.909297] device veth0_macvtap left promiscuous mode [ 2799.914665] device veth1_vlan left promiscuous mode [ 2799.949118] device veth0_vlan left promiscuous mode [ 2800.350400] device hsr_slave_1 left promiscuous mode [ 2800.374700] device hsr_slave_0 left promiscuous mode [ 2800.425477] team0 (unregistering): Port device team_slave_1 removed [ 2800.454135] team0 (unregistering): Port device team_slave_0 removed [ 2800.488780] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2800.544403] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2800.742235] bond0 (unregistering): Released all slaves [ 2800.970623] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2800.996888] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2801.002763] CPU: 1 PID: 31476 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2801.010674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2801.020730] Call Trace: [ 2801.023377] dump_stack+0x1b2/0x281 [ 2801.027009] warn_alloc.cold+0x96/0x1cc [ 2801.030998] ? zone_watermark_ok_safe+0x220/0x220 [ 2801.035954] __alloc_pages_nodemask+0x2127/0x2720 [ 2801.040840] ? lock_acquire+0x170/0x3f0 [ 2801.044834] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2801.049703] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2801.055162] ? __mutex_unlock_slowpath+0x75/0x770 [ 2801.060011] alloc_pages_current+0x155/0x260 [ 2801.064424] ion_page_pool_alloc+0x118/0x1b0 [ 2801.068836] ion_system_heap_allocate+0x133/0x8c0 [ 2801.073681] ? ion_alloc+0x187/0x810 [ 2801.077396] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2801.082856] ? ion_system_contig_heap_create+0x130/0x130 [ 2801.088333] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2801.093356] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2801.098233] ion_alloc+0x204/0x810 [ 2801.101807] ? ion_dma_buf_release+0x40/0x40 [ 2801.106232] ? __might_fault+0x177/0x1b0 [ 2801.110305] ion_ioctl+0xea/0x1f0 [ 2801.113851] ? ion_query_heaps+0x360/0x360 [ 2801.118093] ? lock_acquire+0x170/0x3f0 [ 2801.122069] ? lock_downgrade+0x740/0x740 [ 2801.126247] ? ion_query_heaps+0x360/0x360 [ 2801.130486] do_vfs_ioctl+0x75a/0xff0 [ 2801.134299] ? ioctl_preallocate+0x1a0/0x1a0 [ 2801.138710] ? lock_downgrade+0x740/0x740 [ 2801.142863] ? __fget+0x225/0x360 [ 2801.146319] ? do_vfs_ioctl+0xff0/0xff0 [ 2801.150300] ? security_file_ioctl+0x83/0xb0 [ 2801.154725] SyS_ioctl+0x7f/0xb0 [ 2801.158094] ? do_vfs_ioctl+0xff0/0xff0 [ 2801.162074] do_syscall_64+0x1d5/0x640 [ 2801.165985] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2801.171183] RIP: 0033:0x45e219 [ 2801.174372] RSP: 002b:00007f31ca50bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2801.182083] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2801.189355] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2801.196628] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2801.203908] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2801.211180] R13: 00007ffc62fc4bcf R14: 00007f31ca50c9c0 R15: 000000000119bf8c [ 2801.212188] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2801.228340] warn_alloc_show_mem: 1 callbacks suppressed [ 2801.228344] Mem-Info: [ 2801.252330] (null), order=0, oom_score_adj=0 [ 2801.256858] in:imklog cpuset=/ mems_allowed=0-1 [ 2801.267521] active_anon:16691 inactive_anon:66949 isolated_anon:0 [ 2801.267521] active_file:34 inactive_file:0 isolated_file:0 [ 2801.267521] unevictable:0 dirty:20 writeback:0 unstable:0 [ 2801.267521] slab_reclaimable:12646 slab_unreclaimable:115168 [ 2801.267521] mapped:49597 shmem:68362 pagetables:779 bounce:0 [ 2801.267521] free:25078 free_pcp:0 free_cma:0 [ 2801.320228] CPU: 0 PID: 27263 Comm: in:imklog Not tainted 4.14.217-syzkaller #0 [ 2801.327705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2801.337065] Call Trace: [ 2801.339668] dump_stack+0x1b2/0x281 [ 2801.343308] dump_header+0x178/0x82f [ 2801.347040] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2801.352152] ? ___ratelimit+0x2cd/0x530 [ 2801.356164] oom_kill_process.cold+0x10/0xb18 [ 2801.360685] out_of_memory+0xe3e/0x1190 [ 2801.364677] ? oom_killer_disable+0x1c0/0x1c0 [ 2801.369175] ? mutex_trylock+0x152/0x1a0 [ 2801.373243] __alloc_pages_nodemask+0x23e1/0x2720 [ 2801.378104] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2801.382974] alloc_pages_current+0x155/0x260 [ 2801.387399] filemap_fault+0xea3/0x1980 [ 2801.391395] ext4_filemap_fault+0x84/0xb0 [ 2801.395580] __do_fault+0xfa/0x380 [ 2801.399129] __handle_mm_fault+0x2497/0x4620 [ 2801.403545] ? vm_insert_page+0x7c0/0x7c0 [ 2801.407784] ? lock_downgrade+0x740/0x740 [ 2801.408300] Node 0 active_anon:66208kB inactive_anon:251540kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180124kB dirty:76kB writeback:0kB shmem:257064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2801.411939] handle_mm_fault+0x391/0x860 [ 2801.443806] __do_page_fault+0x549/0xad0 [ 2801.447886] ? spurious_fault+0x640/0x640 [ 2801.452050] ? do_page_fault+0x60/0x500 [ 2801.456032] ? page_fault+0x2f/0x50 [ 2801.459662] page_fault+0x45/0x50 [ 2801.463114] RIP: 0000:0x1f9f [ 2801.466124] RSP: a404fcd8:0000000000000000 EFLAGS: 7f39b2399430 [ 2801.613969] Node 1 active_anon:692kB inactive_anon:16256kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18180kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2801.802523] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2801.954342] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2801.989451] Node 0 DMA32 free:36100kB min:36200kB low:45248kB high:54296kB active_anon:66292kB inactive_anon:251540kB active_file:132kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:3048kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2802.061180] Mem-Info: [ 2802.063711] active_anon:16746 inactive_anon:66949 isolated_anon:0 [ 2802.063711] active_file:38 inactive_file:11 isolated_file:0 [ 2802.063711] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2802.063711] slab_reclaimable:12646 slab_unreclaimable:115093 [ 2802.063711] mapped:49561 shmem:68362 pagetables:797 bounce:0 [ 2802.063711] free:25072 free_pcp:1 free_cma:0 [ 2802.129384] lowmem_reserve[]: 0 0 0 0 0 [ 2802.133449] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2802.276194] lowmem_reserve[]: 0 0 0 0 0 [ 2802.277370] Node 0 active_anon:66292kB inactive_anon:251540kB active_file:140kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180064kB dirty:0kB writeback:0kB shmem:257064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2802.319466] Node 1 Normal free:53120kB min:53696kB low:67120kB high:80544kB active_anon:692kB inactive_anon:16256kB active_file:20kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2802.466294] lowmem_reserve[]: 0 0 0 0 0 [ 2802.471509] Node 1 active_anon:692kB inactive_anon:16256kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18180kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2802.489298] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 11*32kB (U) 1*64kB (U) 1*128kB (U) 5*256kB (U) 2*512kB (U) 2*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 11068kB [ 2802.612064] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2802.641059] Node 0 DMA32: 570*4kB (UME) 412*8kB (UME) 255*16kB (UME) 121*32kB (UME) 23*64kB (UME) 71*128kB (UM) 43*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36120kB [ 2802.721461] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2802.780039] Node 1 Normal: 30*4kB (UM) 21*8kB (M) 17*16kB (M) 16*32kB (UM) 7*64kB (UM) 4*128kB (M) 3*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 12*4096kB (U) = 53488kB [ 2802.800126] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2802.805902] Node 0 DMA32 free:36120kB min:36200kB low:45248kB high:54296kB active_anon:66292kB inactive_anon:251540kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:3048kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2802.896532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2802.965345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2802.992751] lowmem_reserve[]: 0 0 0 0 0 [ 2802.996780] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2803.017586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2803.086191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2803.095485] 68395 total pagecache pages [ 2803.118354] 0 pages in swap cache [ 2803.121824] Swap cache stats: add 0, delete 0, find 0/0 [ 2803.127174] Free swap = 0kB [ 2803.192998] lowmem_reserve[]: 0 0 0 0 0 [ 2803.197035] Node 1 Normal free:53488kB min:53696kB low:67120kB high:80544kB active_anon:692kB inactive_anon:16256kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2803.198560] Total swap = 0kB [ 2803.382960] 2097051 pages RAM [ 2803.386101] 0 pages HighMem/MovableOnly [ 2803.387844] lowmem_reserve[]: 0 0 0 0 0 [ 2803.391663] 363840 pages reserved [ 2803.394077] Node 0 [ 2803.397511] 0 pages cma reserved [ 2803.397520] DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 11*32kB (U) 1*64kB (U) 1*128kB (U) 5*256kB (U) 2*512kB (U) 2*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 11068kB [ 2803.542372] Node 0 DMA32: 577*4kB (UME) 420*8kB (UME) 259*16kB (UME) 121*32kB (UME) 23*64kB (UME) 71*128kB (UM) 43*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36276kB [ 2803.646854] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2803.710648] Node 1 Normal: 30*4kB (UM) 21*8kB (M) 17*16kB (M) 16*32kB (UM) 7*64kB (UM) 4*128kB (M) 3*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 12*4096kB (U) = 53488kB [ 2803.779148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2803.826066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2803.863427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2803.908914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2803.933744] 68395 total pagecache pages [ 2803.952860] 0 pages in swap cache [ 2803.956339] Swap cache stats: add 0, delete 0, find 0/0 [ 2804.007991] Free swap = 0kB [ 2804.011041] Total swap = 0kB [ 2804.014225] 2097051 pages RAM [ 2804.017329] 0 pages HighMem/MovableOnly [ 2804.111698] 363840 pages reserved [ 2804.115185] 0 pages cma reserved [ 2804.161961] Out of memory (oom_kill_allocating_task): Kill process 27263 (in:imklog) score 0 or sacrifice child [ 2804.206635] Killed process 27225 (rsyslogd) total-vm:254332kB, anon-rss:1744kB, file-rss:0kB, shmem-rss:0kB [ 2804.229236] oom_reaper: reaped process 27225 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2804.423847] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2804.464992] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2804.488921] CPU: 1 PID: 8006 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2804.496389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2804.505753] Call Trace: [ 2804.508342] dump_stack+0x1b2/0x281 [ 2804.511964] dump_header+0x178/0x82f [ 2804.515672] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2804.520787] ? ___ratelimit+0x2cd/0x530 [ 2804.524769] oom_kill_process.cold+0x10/0xb18 [ 2804.530113] out_of_memory+0xe3e/0x1190 [ 2804.534107] ? oom_killer_disable+0x1c0/0x1c0 [ 2804.538611] ? mutex_trylock+0x152/0x1a0 [ 2804.542688] __alloc_pages_nodemask+0x23e1/0x2720 [ 2804.547539] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2804.552397] alloc_pages_current+0x155/0x260 [ 2804.556807] filemap_fault+0xea3/0x1980 [ 2804.560785] ext4_filemap_fault+0x84/0xb0 [ 2804.564950] __do_fault+0xfa/0x380 [ 2804.568669] __handle_mm_fault+0x2497/0x4620 [ 2804.573076] ? vm_insert_page+0x7c0/0x7c0 [ 2804.577228] handle_mm_fault+0x391/0x860 [ 2804.581288] __do_page_fault+0x549/0xad0 [ 2804.585346] ? spurious_fault+0x640/0x640 [ 2804.589483] ? do_page_fault+0x60/0x500 [ 2804.593448] ? page_fault+0x2f/0x50 [ 2804.597063] page_fault+0x45/0x50 [ 2804.600505] RIP: ac480:0x6 [ 2804.603332] RSP: 03e7:000000c0000b9e40 EFLAGS: 00000003 [ 2804.610831] Mem-Info: [ 2804.620808] active_anon:16288 inactive_anon:66949 isolated_anon:0 [ 2804.620808] active_file:17 inactive_file:16 isolated_file:0 [ 2804.620808] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2804.620808] slab_reclaimable:12642 slab_unreclaimable:115052 [ 2804.620808] mapped:50073 shmem:68362 pagetables:767 bounce:0 [ 2804.620808] free:25036 free_pcp:0 free_cma:0 [ 2804.660928] Node 0 active_anon:64708kB inactive_anon:251540kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181692kB dirty:0kB writeback:0kB shmem:257064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2804.695350] Node 1 active_anon:444kB inactive_anon:16256kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18600kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2804.742989] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2804.818850] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2804.838112] Node 0 DMA32 free:35636kB min:36200kB low:45248kB high:54296kB active_anon:64708kB inactive_anon:251540kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:3000kB bounce:0kB free_pcp:312kB local_pcp:120kB free_cma:0kB [ 2804.887364] lowmem_reserve[]: 0 0 0 0 0 [ 2804.893588] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2804.921388] lowmem_reserve[]: 0 0 0 0 0 [ 2804.925422] Node 1 Normal free:53152kB min:53696kB low:67120kB high:80544kB active_anon:444kB inactive_anon:16256kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:68kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2804.972457] lowmem_reserve[]: 0 0 0 0 0 [ 2804.976480] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 11*32kB (U) 1*64kB (U) 1*128kB (U) 5*256kB (U) 2*512kB (U) 2*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 11068kB [ 2805.003478] Node 0 DMA32: 619*4kB (ME) 224*8kB (UME) 270*16kB (UME) 126*32kB (UME) 26*64kB (UME) 71*128kB (UM) 44*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35660kB [ 2805.025676] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2805.036503] Node 1 Normal: 22*4kB (UM) 16*8kB (UM) 12*16kB (M) 8*32kB (M) 4*64kB (M) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 1*1024kB (U) 1*2048kB (U) 11*4096kB (U) = 53272kB [ 2805.058876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2805.067750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2805.083122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2805.092061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2805.107024] 68431 total pagecache pages [ 2805.111226] 0 pages in swap cache [ 2805.114679] Swap cache stats: add 0, delete 0, find 0/0 [ 2805.126521] Free swap = 0kB [ 2805.130229] Total swap = 0kB [ 2805.133357] 2097051 pages RAM [ 2805.136467] 0 pages HighMem/MovableOnly [ 2805.146934] 363840 pages reserved [ 2805.150470] 0 pages cma reserved [ 2805.153832] Out of memory (oom_kill_allocating_task): Kill process 8006 (syz-fuzzer) score 0 or sacrifice child [ 2805.170514] Killed process 30935 (syz-executor.5) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2805.197592] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2805.223206] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2805.234776] CPU: 0 PID: 31491 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2805.242713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2805.252099] Call Trace: [ 2805.254698] dump_stack+0x1b2/0x281 [ 2805.258344] dump_header+0x178/0x82f [ 2805.262067] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2805.267225] ? ___ratelimit+0x2cd/0x530 [ 2805.271210] oom_kill_process.cold+0x10/0xb18 [ 2805.275728] out_of_memory+0xe3e/0x1190 [ 2805.279723] ? oom_killer_disable+0x1c0/0x1c0 [ 2805.284232] ? mutex_trylock+0x152/0x1a0 [ 2805.288300] __alloc_pages_nodemask+0x23e1/0x2720 [ 2805.293169] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2805.298082] alloc_pages_current+0x155/0x260 [ 2805.302575] filemap_fault+0xea3/0x1980 [ 2805.306566] ext4_filemap_fault+0x84/0xb0 [ 2805.310765] __do_fault+0xfa/0x380 [ 2805.314306] __handle_mm_fault+0x2497/0x4620 [ 2805.318733] ? vm_insert_page+0x7c0/0x7c0 [ 2805.322969] ? vm_mmap_pgoff+0x168/0x1a0 [ 2805.327214] ? vm_mmap_pgoff+0xcb/0x1a0 [ 2805.331223] handle_mm_fault+0x391/0x860 [ 2805.335302] __do_page_fault+0x549/0xad0 [ 2805.339363] ? spurious_fault+0x640/0x640 [ 2805.343514] ? do_page_fault+0x60/0x500 [ 2805.347492] ? page_fault+0x2f/0x50 [ 2805.351119] page_fault+0x45/0x50 [ 2805.354566] RIP: 24ca8238: (null) [ 2805.358819] RSP: 119c7e8:00000000000000f4 EFLAGS: 7ffe24ca7fe0 [ 2805.375177] Mem-Info: [ 2805.385931] active_anon:16263 inactive_anon:66949 isolated_anon:0 [ 2805.385931] active_file:34 inactive_file:0 isolated_file:0 [ 2805.385931] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2805.385931] slab_reclaimable:12642 slab_unreclaimable:114844 [ 2805.385931] mapped:50098 shmem:68362 pagetables:730 bounce:0 [ 2805.385931] free:24925 free_pcp:88 free_cma:0 [ 2805.430098] Node 0 active_anon:64600kB inactive_anon:251540kB active_file:92kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181740kB dirty:0kB writeback:0kB shmem:257064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2805.468763] Node 1 active_anon:444kB inactive_anon:16256kB active_file:4kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18600kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2805.506620] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2805.544556] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2805.604523] Node 0 DMA32 free:36052kB min:36200kB low:45248kB high:54296kB active_anon:64600kB inactive_anon:251540kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2804kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2805.823249] lowmem_reserve[]: 0 0 0 0 0 [ 2805.827285] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2806.039283] lowmem_reserve[]: 0 0 0 0 0 [ 2806.043323] Node 1 Normal free:53272kB min:53696kB low:67120kB high:80544kB active_anon:444kB inactive_anon:16256kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:68kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2806.267331] lowmem_reserve[]: 0 0 0 0 0 [ 2806.295587] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 11*32kB (U) 1*64kB (U) 1*128kB (U) 5*256kB (U) 2*512kB (U) 2*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 11068kB [ 2806.402600] Node 0 DMA32: 618*4kB (ME) 223*8kB (UME) 272*16kB (UME) 129*32kB (UME) 30*64kB (UME) 73*128kB (UM) 44*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36288kB [ 2806.461351] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2806.472163] Node 1 Normal: 22*4kB (UM) 16*8kB (UM) 12*16kB (M) 8*32kB (M) 4*64kB (M) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 1*1024kB (U) 1*2048kB (U) 11*4096kB (U) = 53272kB [ 2806.488335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2806.497231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2806.505878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2806.514803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2806.523450] 68395 total pagecache pages [ 2806.527422] 0 pages in swap cache [ 2806.530897] Swap cache stats: add 0, delete 0, find 0/0 [ 2806.536262] Free swap = 0kB [ 2806.539306] Total swap = 0kB [ 2806.542319] 2097051 pages RAM [ 2806.545410] 0 pages HighMem/MovableOnly [ 2806.549542] 363840 pages reserved [ 2806.552992] 0 pages cma reserved [ 2806.556352] Out of memory (oom_kill_allocating_task): Kill process 31491 (syz-executor.4) score 0 or sacrifice child [ 2806.567147] Killed process 31491 (syz-executor.4) total-vm:74784kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 2806.585059] oom_reaper: reaped process 31491 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2807.134491] oom_reaper: reaped process 31476 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2807.211641] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2807.233195] systemd-journal cpuset=/ mems_allowed=0-1 [ 2807.251394] CPU: 0 PID: 31451 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 2807.259392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2807.268746] Call Trace: [ 2807.271340] dump_stack+0x1b2/0x281 [ 2807.274970] dump_header+0x178/0x82f [ 2807.278683] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2807.283821] ? ___ratelimit+0x2cd/0x530 [ 2807.287793] oom_kill_process.cold+0x10/0xb18 [ 2807.292296] out_of_memory+0xe3e/0x1190 [ 2807.296270] ? oom_killer_disable+0x1c0/0x1c0 [ 2807.300762] ? mutex_trylock+0x152/0x1a0 [ 2807.304824] __alloc_pages_nodemask+0x23e1/0x2720 [ 2807.309684] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2807.314543] alloc_pages_current+0x155/0x260 [ 2807.318955] filemap_fault+0xea3/0x1980 [ 2807.322980] ext4_filemap_fault+0x84/0xb0 [ 2807.327143] __do_fault+0xfa/0x380 [ 2807.330711] __handle_mm_fault+0x2497/0x4620 [ 2807.335110] ? vm_insert_page+0x7c0/0x7c0 [ 2807.339264] ? check_stack_object+0x86/0xa0 [ 2807.343602] handle_mm_fault+0x391/0x860 [ 2807.347657] __do_page_fault+0x549/0xad0 [ 2807.351714] ? spurious_fault+0x640/0x640 [ 2807.355880] ? do_page_fault+0x60/0x500 [ 2807.359848] ? page_fault+0x2f/0x50 [ 2807.363465] page_fault+0x45/0x50 [ 2807.366906] RIP: 0001:0x55d44c345d60 [ 2807.370622] RSP: 6c71cf70:00007ffd6c719f40 EFLAGS: 7ffd6c719ec0 [ 2807.379796] syz-executor.2: [ 2807.382879] Mem-Info: [ 2807.385919] page allocation failure: order:0 [ 2807.397229] active_anon:16229 inactive_anon:66949 isolated_anon:0 [ 2807.397229] active_file:47 inactive_file:0 isolated_file:0 [ 2807.397229] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2807.397229] slab_reclaimable:12645 slab_unreclaimable:114188 [ 2807.397229] mapped:43929 shmem:68362 pagetables:704 bounce:0 [ 2807.397229] free:13888 free_pcp:30 free_cma:0 [ 2807.425857] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2807.451937] Node 0 active_anon:64504kB inactive_anon:251540kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175716kB dirty:0kB writeback:0kB shmem:257064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2807.461083] (null) [ 2807.501658] Node 1 active_anon:408kB inactive_anon:16256kB active_file:44kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2807.503046] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2807.537654] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2807.541095] CPU: 1 PID: 31479 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2807.569404] lowmem_reserve[]: [ 2807.575046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2807.575057] 0 [ 2807.578151] Call Trace: [ 2807.587560] 2717 [ 2807.589312] dump_stack+0x1b2/0x281 [ 2807.589326] warn_alloc.cold+0x96/0x1cc [ 2807.589339] ? zone_watermark_ok_safe+0x220/0x220 [ 2807.589351] ? usleep_range+0x130/0x130 [ 2807.594108] 2718 [ 2807.597585] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2807.601602] 2718 [ 2807.606381] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2807.612496] 2718 [ 2807.617836] ? run_timer_softirq+0x5a0/0x5a0 [ 2807.624938] __alloc_pages_nodemask+0x2127/0x2720 [ 2807.627011] Node 0 [ 2807.631423] ? lock_acquire+0x170/0x3f0 [ 2807.631440] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2807.631451] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2807.631467] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2807.631480] ? retint_kernel+0x2d/0x2d [ 2807.631492] alloc_pages_current+0x155/0x260 [ 2807.631506] ion_page_pool_alloc+0x118/0x1b0 [ 2807.637715] DMA32 free:18144kB min:36200kB low:45248kB high:54296kB active_anon:64504kB inactive_anon:251540kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2796kB bounce:0kB free_pcp:128kB local_pcp:4kB free_cma:0kB [ 2807.638603] ion_system_heap_allocate+0x133/0x8c0 [ 2807.638614] ? ion_alloc+0x187/0x810 [ 2807.638624] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2807.638634] ? ion_system_contig_heap_create+0x130/0x130 [ 2807.638645] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2807.638658] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2807.642613] lowmem_reserve[]: [ 2807.647476] ion_alloc+0x204/0x810 [ 2807.653821] 0 [ 2807.657401] ? ion_dma_buf_release+0x40/0x40 [ 2807.661358] 0 [ 2807.665659] ? __might_fault+0x177/0x1b0 [ 2807.672175] 0 [ 2807.698329] ion_ioctl+0xea/0x1f0 [ 2807.698341] ? ion_query_heaps+0x360/0x360 [ 2807.698353] ? lock_acquire+0x170/0x3f0 [ 2807.698361] ? lock_downgrade+0x740/0x740 [ 2807.698368] ? ion_query_heaps+0x360/0x360 [ 2807.698377] do_vfs_ioctl+0x75a/0xff0 [ 2807.698388] ? ioctl_preallocate+0x1a0/0x1a0 [ 2807.698395] ? lock_downgrade+0x740/0x740 [ 2807.698407] ? __fget+0x225/0x360 [ 2807.698416] ? do_vfs_ioctl+0xff0/0xff0 [ 2807.698426] ? security_file_ioctl+0x83/0xb0 [ 2807.698435] SyS_ioctl+0x7f/0xb0 [ 2807.698442] ? do_vfs_ioctl+0xff0/0xff0 [ 2807.698454] do_syscall_64+0x1d5/0x640 [ 2807.698471] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2807.705525] 0 [ 2807.707004] RIP: 0033:0x45e219 [ 2807.712501] 0 [ 2807.717903] RSP: 002b:00007f2cd38a7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2807.727754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2807.730913] Node 0 [ 2807.734376] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2807.736186] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2807.740565] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.740571] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2807.740576] R13: 00007ffec6b5817f R14: 00007f2cd38a89c0 R15: 000000000119bf8c [ 2807.775149] Mem-Info: [ 2807.779843] lowmem_reserve[]: [ 2807.784203] active_anon:16228 inactive_anon:66949 isolated_anon:0 [ 2807.784203] active_file:11 inactive_file:19 isolated_file:3 [ 2807.784203] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2807.784203] slab_reclaimable:12645 slab_unreclaimable:114189 [ 2807.784203] mapped:43929 shmem:68362 pagetables:704 bounce:0 [ 2807.784203] free:13953 free_pcp:0 free_cma:0 [ 2807.784360] 0 [ 2807.788354] Node 0 active_anon:64504kB inactive_anon:251540kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175716kB dirty:0kB writeback:0kB shmem:257064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2807.792780] 0 0 0 0 [ 2807.796164] Node 1 active_anon:408kB inactive_anon:16256kB active_file:44kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2807.808731] Node 0 [ 2807.809328] Node 1 [ 2807.811090] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2807.814262] Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:408kB inactive_anon:16256kB active_file:44kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2807.816036] lowmem_reserve[]: [ 2807.825873] lowmem_reserve[]: [ 2807.831206] 0 2717 [ 2807.837336] 0 [ 2807.840785] 2718 [ 2807.871071] 0 [ 2807.889172] 2718 [ 2807.895398] 0 [ 2807.926988] 2718 [ 2807.935380] 0 [ 2807.993274] 0 [ 2808.032402] Node 0 [ 2808.050062] DMA32 free:18016kB min:36200kB low:45248kB high:54296kB active_anon:64504kB inactive_anon:251540kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2796kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2808.052205] Node 0 [ 2808.054013] lowmem_reserve[]: [ 2808.056064] DMA: [ 2808.057851] 0 [ 2808.065731] 1*4kB [ 2808.067378] 0 [ 2808.081930] (U) [ 2808.098450] 0 [ 2808.105672] 0*8kB [ 2808.108704] 0 [ 2808.109549] 1*16kB [ 2808.111291] 0 [ 2808.113258] (U) [ 2808.117174] 8*32kB (U) 1*64kB (U) 1*128kB (U) 5*256kB (U) 2*512kB (U) [ 2808.130771] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2808.137722] 2*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 10964kB [ 2808.175605] Node 0 DMA32: 609*4kB (UME) 219*8kB (ME) 192*16kB (UME) 76*32kB (UME) 26*64kB (UME) 8*128kB (UM) 18*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18012kB [ 2808.178881] lowmem_reserve[]: 0 0 0 0 0 [ 2808.195211] Node 1 Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:408kB inactive_anon:16256kB active_file:44kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2808.197466] Node 0 [ 2808.223964] lowmem_reserve[]: 0 0 0 0 0 [ 2808.223989] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 8*32kB (U) 1*64kB (U) 1*128kB (U) 5*256kB (U) 2*512kB (U) 2*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 10964kB [ 2808.231752] Normal: [ 2808.244931] Node 0 [ 2808.245293] 0*4kB [ 2808.247267] DMA32: [ 2808.254340] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2808.266253] Node 1 Normal: 24*4kB (UM) 16*8kB (UM) 10*16kB (ME) 9*32kB (ME) 3*64kB (UME) 1*128kB (E) 3*256kB (ME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (UE) 4*4096kB (U) = 26848kB [ 2808.266987] 608*4kB (ME) 219*8kB (ME) 192*16kB (UME) 76*32kB (UME) 26*64kB (UME) 8*128kB (UM) 18*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 2808.287683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2808.299120] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2808.313754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2808.318194] Node 1 Normal: 24*4kB (UM) 16*8kB (UM) 10*16kB (ME) 9*32kB (ME) 3*64kB (UME) 1*128kB (E) 3*256kB (ME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (UE) 4*4096kB (U) = 26848kB [ 2808.328215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2808.342907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2808.342917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2808.342924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2808.342930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2808.342938] 68395 total pagecache pages [ 2808.357089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2808.360743] 0 pages in swap cache [ 2808.374607] 68395 total pagecache pages [ 2808.379978] Swap cache stats: add 0, delete 0, find 0/0 [ 2808.386888] 0 pages in swap cache [ 2808.404575] Free swap = 0kB [ 2808.412345] Swap cache stats: add 0, delete 0, find 0/0 [ 2808.412349] Free swap = 0kB [ 2808.412352] Total swap = 0kB [ 2808.412359] 2097051 pages RAM [ 2808.412363] 0 pages HighMem/MovableOnly [ 2808.412366] 363840 pages reserved [ 2808.412369] 0 pages cma reserved [ 2808.412376] Out of memory (oom_kill_allocating_task): Kill process 31451 (systemd-journal) score 0 or sacrifice child [ 2808.412406] Killed process 31451 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1636kB [ 2808.484642] Total swap = 0kB [ 2808.487698] 2097051 pages RAM [ 2808.495509] oom_reaper: reaped process 31479 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2808.508848] 0 pages HighMem/MovableOnly [ 2808.512847] 363840 pages reserved [ 2808.516301] 0 pages cma reserved [ 2808.603178] oom_reaper: reaped process 31456 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2808.676470] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2808.689347] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2808.703267] systemd[1]: Stopped Journal Service. [ 2808.747453] systemd[1]: Starting Journal Service... [ 2808.872433] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2808.923203] systemd[1]: Stopped System Logging Service. [ 2808.976065] systemd[1]: Starting System Logging Service... [ 2809.135749] systemd invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2809.167588] systemd cpuset=/ mems_allowed=0-1 [ 2809.189488] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.217-syzkaller #0 [ 2809.196472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2809.205856] Call Trace: [ 2809.208468] dump_stack+0x1b2/0x281 [ 2809.212119] dump_header+0x178/0x82f [ 2809.215844] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2809.220946] ? ___ratelimit+0x2cd/0x530 [ 2809.224918] oom_kill_process.cold+0x10/0xb18 [ 2809.229431] ? lock_downgrade+0x740/0x740 [ 2809.233594] out_of_memory+0x2dc/0x1190 [ 2809.237612] ? oom_killer_disable+0x1c0/0x1c0 [ 2809.242104] ? mutex_trylock+0x152/0x1a0 [ 2809.246278] __alloc_pages_nodemask+0x23e1/0x2720 [ 2809.251149] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2809.256006] ? kfree+0x14a/0x250 [ 2809.259371] ? devkmsg_write.cold+0x69/0xa8 [ 2809.263706] alloc_pages_vma+0xd2/0x6d0 [ 2809.267683] wp_page_copy+0x1f5/0x25c0 [ 2809.271576] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 2809.276070] ? __lock_acquire+0x5fc/0x3f20 [ 2809.280326] do_wp_page+0x245/0x1db0 [ 2809.284041] ? __handle_mm_fault+0x129c/0x4620 [ 2809.288623] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 2809.293319] __handle_mm_fault+0x234f/0x4620 [ 2809.297737] ? vm_insert_page+0x7c0/0x7c0 [ 2809.301908] ? lock_acquire+0x170/0x3f0 [ 2809.305900] handle_mm_fault+0x391/0x860 [ 2809.309959] __do_page_fault+0x549/0xad0 [ 2809.314023] ? spurious_fault+0x640/0x640 [ 2809.318165] ? do_page_fault+0x60/0x500 [ 2809.322155] ? page_fault+0x2f/0x50 [ 2809.325779] page_fault+0x45/0x50 [ 2809.329254] RIP: 0000:0x55db48a54a20 [ 2809.332975] RSP: 0001:00007ffc9ea6b068 EFLAGS: 55db49387330 [ 2809.363057] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2809.385421] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2809.390637] CPU: 1 PID: 31479 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2809.398525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2809.407917] Call Trace: [ 2809.410522] dump_stack+0x1b2/0x281 [ 2809.410825] Mem-Info: [ 2809.414150] warn_alloc.cold+0x96/0x1cc [ 2809.416559] active_anon:16082 inactive_anon:66949 isolated_anon:0 [ 2809.416559] active_file:20 inactive_file:0 isolated_file:5 [ 2809.416559] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2809.416559] slab_reclaimable:12668 slab_unreclaimable:114435 [ 2809.416559] mapped:34829 shmem:68362 pagetables:667 bounce:0 [ 2809.416559] free:14084 free_pcp:0 free_cma:0 [ 2809.420523] ? zone_watermark_ok_safe+0x220/0x220 [ 2809.420545] __alloc_pages_nodemask+0x2127/0x2720 [ 2809.420557] ? lock_acquire+0x170/0x3f0 [ 2809.420568] ? lock_acquire+0x170/0x3f0 [ 2809.420582] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2809.420607] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2809.453661] Node 0 active_anon:63620kB inactive_anon:251540kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:139316kB dirty:0kB writeback:0kB shmem:257064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2809.458415] ? __mutex_unlock_slowpath+0x75/0x770 [ 2809.463336] Node 1 active_anon:708kB inactive_anon:16256kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2809.467258] alloc_pages_current+0x155/0x260 [ 2809.471330] Node 0 [ 2809.476057] ion_page_pool_alloc+0x118/0x1b0 [ 2809.481550] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2809.509257] ion_system_heap_allocate+0x133/0x8c0 [ 2809.509271] ? _raw_spin_unlock+0x29/0x40 [ 2809.509280] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2809.509289] ? ion_system_contig_heap_create+0x130/0x130 [ 2809.509299] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2809.509311] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2809.509321] ion_alloc+0x27a/0x810 [ 2809.509335] ? ion_dma_buf_release+0x40/0x40 [ 2809.509347] ? __might_fault+0x177/0x1b0 [ 2809.509360] ion_ioctl+0xea/0x1f0 [ 2809.509370] ? ion_query_heaps+0x360/0x360 [ 2809.509382] ? lock_acquire+0x170/0x3f0 [ 2809.509391] ? lock_downgrade+0x740/0x740 [ 2809.509399] ? ion_query_heaps+0x360/0x360 [ 2809.509409] do_vfs_ioctl+0x75a/0xff0 [ 2809.509420] ? ioctl_preallocate+0x1a0/0x1a0 [ 2809.515781] lowmem_reserve[]: [ 2809.540895] ? lock_downgrade+0x740/0x740 [ 2809.540911] ? __fget+0x225/0x360 [ 2809.540920] ? do_vfs_ioctl+0xff0/0xff0 [ 2809.540930] ? security_file_ioctl+0x83/0xb0 [ 2809.540939] SyS_ioctl+0x7f/0xb0 [ 2809.540948] ? do_vfs_ioctl+0xff0/0xff0 [ 2809.540958] do_syscall_64+0x1d5/0x640 [ 2809.540975] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2809.540984] RIP: 0033:0x45e219 [ 2809.540989] RSP: 002b:00007f2cd38a7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2809.540999] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2809.541004] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2809.541009] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2809.541015] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2809.541020] R13: 00007ffec6b5817f R14: 00007f2cd38a89c0 R15: 000000000119bf8c [ 2809.551453] Mem-Info: [ 2809.567084] 0 [ 2809.581352] active_anon:16086 inactive_anon:66948 isolated_anon:0 [ 2809.581352] active_file:16 inactive_file:17 isolated_file:4 [ 2809.581352] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2809.581352] slab_reclaimable:12677 slab_unreclaimable:114324 [ 2809.581352] mapped:34817 shmem:68362 pagetables:710 bounce:0 [ 2809.581352] free:13906 free_pcp:34 free_cma:0 [ 2809.585335] 2717 [ 2809.586818] Node 0 active_anon:63620kB inactive_anon:251536kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:139268kB dirty:0kB writeback:0kB shmem:257064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2809.591737] 2718 2718 2718 [ 2809.591752] Node 0 DMA32 free:17996kB min:36200kB low:45248kB high:54296kB active_anon:63620kB inactive_anon:251536kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2700kB bounce:0kB free_pcp:136kB local_pcp:0kB free_cma:0kB [ 2809.591771] lowmem_reserve[]: 0 0 0 0 0 [ 2809.591788] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2809.591804] lowmem_reserve[]: 0 0 0 0 0 [ 2809.591823] Node 1 Normal free:26676kB min:53696kB low:67120kB high:80544kB active_anon:724kB inactive_anon:16256kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2809.591840] lowmem_reserve[]: 0 0 0 0 [ 2809.599033] Node 1 active_anon:724kB inactive_anon:16256kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2809.604502] 0 [ 2809.607186] Node 0 [ 2809.610781] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 8*32kB [ 2809.620704] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2809.625008] (U) [ 2809.627020] lowmem_reserve[]: [ 2809.631612] 1*64kB [ 2809.636492] 0 [ 2809.641570] (U) [ 2809.645214] 2717 [ 2809.647718] 1*128kB [ 2809.652171] 2718 [ 2809.654998] (U) [ 2809.658429] 2718 2718 [ 2809.664573] 5*256kB [ 2809.679041] (U) [ 2809.687956] Node 0 [ 2809.695205] 2*512kB [ 2809.719364] DMA32 free:17996kB min:36200kB low:45248kB high:54296kB active_anon:63620kB inactive_anon:251536kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2700kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 2809.727765] (U) [ 2809.734946] lowmem_reserve[]: [ 2809.735934] 2*1024kB [ 2809.772417] 0 [ 2809.801939] (U) [ 2809.820396] 0 [ 2809.832412] 1*2048kB [ 2809.841776] 0 [ 2809.863586] (M) [ 2809.868471] 0 [ 2809.895781] 1*4096kB [ 2809.900735] 0 [ 2809.928374] (E) [ 2809.959613] = 10952kB [ 2809.959622] Node 0 [ 2809.972229] Node 0 [ 2809.975087] DMA32: [ 2809.975164] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2809.977223] 597*4kB [ 2809.980550] lowmem_reserve[]: [ 2809.982048] (UME) [ 2809.984087] 0 [ 2809.986054] 175*8kB [ 2809.988309] 0 [ 2809.992786] (UME) [ 2810.022552] 0 [ 2810.025544] 161*16kB [ 2810.026571] 0 [ 2810.028379] (UME) [ 2810.030380] 0 [ 2810.030389] Node 1 Normal free:26676kB min:53696kB low:67120kB high:80544kB active_anon:724kB inactive_anon:16256kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2810.030416] lowmem_reserve[]: [ 2810.032205] 345*32kB [ 2810.034612] 0 [ 2810.036392] (UME) 8*64kB [ 2810.038360] 0 [ 2810.041793] (UM) [ 2810.059391] 0 [ 2810.080951] 2*128kB [ 2810.092414] 0 [ 2810.098650] (U) [ 2810.104382] 0 [ 2810.104771] 0*256kB [ 2810.106286] Node 0 [ 2810.136883] 0*512kB [ 2810.141100] DMA: [ 2810.142141] 0*1024kB [ 2810.144891] 0*4kB [ 2810.146684] 0*2048kB [ 2810.148732] 1*8kB [ 2810.152723] 0*4096kB [ 2810.157341] (U) [ 2810.158488] = 18172kB [ 2810.178937] 0*16kB [ 2810.181305] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2810.186038] 8*32kB [ 2810.196513] Node 1 Normal: 1*4kB (E) 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 3*128kB (UME) 0*256kB 51*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26676kB [ 2810.199450] (U) [ 2810.215607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2810.216384] 1*64kB [ 2810.217596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2810.227086] (U) [ 2810.232422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2810.241436] 1*128kB [ 2810.248184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2810.248193] (U) [ 2810.252710] 68395 total pagecache pages [ 2810.262372] 5*256kB (U) [ 2810.265189] 0 pages in swap cache [ 2810.265197] Swap cache stats: add 0, delete 0, find 0/0 [ 2810.267857] 2*512kB (U) [ 2810.273502] Free swap = 0kB [ 2810.276720] 2*1024kB [ 2810.279422] Total swap = 0kB [ 2810.279430] 2097051 pages RAM [ 2810.279433] 0 pages HighMem/MovableOnly [ 2810.279436] 363840 pages reserved [ 2810.279438] 0 pages cma reserved [ 2810.279446] Out of memory: Kill process 8002 (syz-fuzzer) score 6 or sacrifice child [ 2810.279598] Killed process 30937 (syz-executor.0) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2810.299132] (U) 1*2048kB (M) 1*4096kB (E) = 10952kB [ 2810.332598] Node 0 DMA32: 597*4kB (UME) 175*8kB (UME) 161*16kB (UME) 345*32kB (UME) 8*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18172kB [ 2810.334721] oom_reaper: reaped process 30937 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2810.350460] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2810.379755] Node 1 Normal: 1*4kB (E) 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 3*128kB (UME) 0*256kB 51*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26676kB [ 2810.419437] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2810.421134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2810.439146] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2810.444372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2810.445805] CPU: 0 PID: 8003 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2810.454429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2810.461811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2810.461816] Call Trace: [ 2810.461836] dump_stack+0x1b2/0x281 [ 2810.461848] dump_header+0x178/0x82f [ 2810.461863] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2810.470734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2810.480140] ? ___ratelimit+0x2cd/0x530 [ 2810.480152] oom_kill_process.cold+0x10/0xb18 [ 2810.480171] out_of_memory+0xe3e/0x1190 [ 2810.480184] ? oom_killer_disable+0x1c0/0x1c0 [ 2810.482783] 68395 total pagecache pages [ 2810.486410] ? mutex_trylock+0x152/0x1a0 [ 2810.490149] 0 pages in swap cache [ 2810.495227] __alloc_pages_nodemask+0x23e1/0x2720 [ 2810.503945] Swap cache stats: add 0, delete 0, find 0/0 [ 2810.507885] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2810.512398] Free swap = 0kB [ 2810.516345] alloc_pages_current+0x155/0x260 [ 2810.520863] Total swap = 0kB [ 2810.524803] filemap_fault+0xea3/0x1980 [ 2810.528841] 2097051 pages RAM [ 2810.532298] ext4_filemap_fault+0x84/0xb0 [ 2810.532310] __do_fault+0xfa/0x380 [ 2810.532320] __handle_mm_fault+0x2497/0x4620 [ 2810.532330] ? vm_insert_page+0x7c0/0x7c0 [ 2810.537166] 0 pages HighMem/MovableOnly [ 2810.543067] ? free_object+0xe4/0x240 [ 2810.543088] handle_mm_fault+0x391/0x860 [ 2810.543101] __do_page_fault+0x549/0xad0 [ 2810.543113] ? spurious_fault+0x640/0x640 [ 2810.543123] ? do_page_fault+0x60/0x500 [ 2810.547955] 363840 pages reserved [ 2810.550966] ? page_fault+0x2f/0x50 [ 2810.550973] page_fault+0x45/0x50 [ 2810.550982] RIP: 0000:0xb358f8 [ 2810.550987] RSP: 4e20:000000c00003df28 EFLAGS: 00438920 [ 2810.557644] Mem-Info: [ 2810.558999] 0 pages cma reserved [ 2810.562439] active_anon:16048 inactive_anon:66948 isolated_anon:0 [ 2810.562439] active_file:0 inactive_file:35 isolated_file:4 [ 2810.562439] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2810.562439] slab_reclaimable:12677 slab_unreclaimable:114320 [ 2810.562439] mapped:26117 shmem:68362 pagetables:686 bounce:0 [ 2810.562439] free:13961 free_pcp:36 free_cma:0 [ 2810.562454] Node 0 active_anon:63468kB inactive_anon:251536kB active_file:0kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:104468kB dirty:0kB writeback:0kB shmem:257064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2810.562466] Node 1 active_anon:724kB inactive_anon:16256kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2810.562469] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2810.562496] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2810.562515] Node 0 DMA32 free:18216kB min:36200kB low:45248kB high:54296kB active_anon:63568kB inactive_anon:251536kB active_file:0kB inactive_file:128kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2604kB bounce:0kB free_pcp:144kB local_pcp:0kB free_cma:0kB [ 2810.562531] lowmem_reserve[]: 0 0 0 0 0 [ 2810.562551] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2810.562565] lowmem_reserve[]: 0 0 0 0 0 [ 2810.562581] Node 1 Normal free:26676kB min:53696kB low:67120kB high:80544kB active_anon:724kB inactive_anon:16256kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2810.562598] lowmem_reserve[]: 0 0 0 0 0 [ 2810.562615] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 8*32kB (U) 1*64kB (U) 1*128kB (U) 5*256kB (U) 2*512kB (U) 2*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 10952kB [ 2810.562684] Node 0 DMA32: 639*4kB (UME) 181*8kB (UME) 162*16kB (UME) 345*32kB (UME) 7*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18468kB [ 2810.562743] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2810.562784] Node 1 Normal: 2*4kB (UE) 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 3*128kB (UME) 0*256kB 51*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26680kB [ 2810.562848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2810.562854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2810.562860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2810.562865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2810.562868] 68395 total pagecache pages [ 2810.562877] 0 pages in swap cache [ 2810.562882] Swap cache stats: add 0, delete 0, find 0/0 [ 2810.562885] Free swap = 0kB [ 2810.562888] Total swap = 0kB [ 2810.562894] 2097051 pages RAM [ 2810.562897] 0 pages HighMem/MovableOnly [ 2810.562900] 363840 pages reserved [ 2810.562904] 0 pages cma reserved [ 2810.562910] Out of memory (oom_kill_allocating_task): Kill process 8003 (syz-fuzzer) score 0 or sacrifice child [ 2810.562969] Killed process 29605 (syz-executor.2) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2810.573310] oom_reaper: reaped process 29605 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2810.599260] syz-executor.0: [ 2810.695145] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2810.730305] page allocation failure: order:0 [ 2810.783102] syz-executor.2: [ 2810.789115] syz-executor.5: [ 2810.847412] page allocation failure: order:0 [ 2810.856873] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2810.864285] (null) [ 2810.886016] page allocation failure: order:0 [ 2810.903400] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2810.919374] (null) [ 2810.940539] , order=0, oom_score_adj=0 [ 2810.954172] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2810.980300] syz-fuzzer cpuset= [ 2810.999382] syz-executor.0 cpuset= [ 2811.012659] (null) [ 2811.012667] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2811.012691] CPU: 0 PID: 31479 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2811.012696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2811.012700] Call Trace: [ 2811.012719] dump_stack+0x1b2/0x281 [ 2811.012734] warn_alloc.cold+0x96/0x1cc [ 2811.012747] ? zone_watermark_ok_safe+0x220/0x220 [ 2811.012757] ? usleep_range+0x130/0x130 [ 2811.012767] ? try_to_free_pages+0x23f/0x6e0 [ 2811.012777] ? _find_next_bit+0xdb/0x100 [ 2811.012787] ? run_timer_softirq+0x5a0/0x5a0 [ 2811.012804] __alloc_pages_nodemask+0x2127/0x2720 [ 2811.026794] / [ 2811.027621] ? lock_acquire+0x170/0x3f0 [ 2811.034975] mems_allowed=0-1 [ 2811.036866] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2811.049229] (null) [ 2811.050489] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2811.054436] syz-executor.5 cpuset= [ 2811.061537] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2811.061557] alloc_pages_current+0x155/0x260 [ 2811.061573] ion_page_pool_alloc+0x118/0x1b0 [ 2811.079257] / [ 2811.083497] ion_system_heap_allocate+0x133/0x8c0 [ 2811.109258] mems_allowed=0-1 [ 2811.111811] ? _raw_spin_unlock+0x29/0x40 [ 2811.181213] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2811.186152] ? ion_system_contig_heap_create+0x130/0x130 [ 2811.191595] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2811.196613] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2811.201469] ion_alloc+0x27a/0x810 [ 2811.205007] ? ion_dma_buf_release+0x40/0x40 [ 2811.209411] ? __might_fault+0x177/0x1b0 [ 2811.213468] ion_ioctl+0xea/0x1f0 [ 2811.216936] ? ion_query_heaps+0x360/0x360 [ 2811.221164] ? lock_acquire+0x170/0x3f0 [ 2811.225130] ? lock_downgrade+0x740/0x740 [ 2811.229299] ? ion_query_heaps+0x360/0x360 [ 2811.233527] do_vfs_ioctl+0x75a/0xff0 [ 2811.237322] ? ioctl_preallocate+0x1a0/0x1a0 [ 2811.241728] ? lock_downgrade+0x740/0x740 [ 2811.245964] ? __fget+0x225/0x360 [ 2811.249410] ? do_vfs_ioctl+0xff0/0xff0 [ 2811.253393] ? security_file_ioctl+0x83/0xb0 [ 2811.257955] SyS_ioctl+0x7f/0xb0 [ 2811.261321] ? do_vfs_ioctl+0xff0/0xff0 [ 2811.265304] do_syscall_64+0x1d5/0x640 [ 2811.269206] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2811.274391] RIP: 0033:0x45e219 [ 2811.277570] RSP: 002b:00007f2cd38a7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2811.285292] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2811.292562] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2811.299828] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.307089] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2811.314355] R13: 00007ffec6b5817f R14: 00007f2cd38a89c0 R15: 000000000119bf8c [ 2811.321652] CPU: 1 PID: 31476 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2811.329547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2811.338893] Call Trace: [ 2811.341505] dump_stack+0x1b2/0x281 [ 2811.345128] warn_alloc.cold+0x96/0x1cc [ 2811.349099] ? zone_watermark_ok_safe+0x220/0x220 [ 2811.353938] ? usleep_range+0x130/0x130 [ 2811.357905] ? try_to_free_pages+0x23f/0x6e0 [ 2811.362305] ? _find_next_bit+0xdb/0x100 [ 2811.366359] ? run_timer_softirq+0x5a0/0x5a0 [ 2811.370771] __alloc_pages_nodemask+0x2127/0x2720 [ 2811.375618] ? lock_acquire+0x170/0x3f0 [ 2811.379617] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2811.384480] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2811.388989] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2811.394440] ? policy_node+0xa5/0x110 [ 2811.398233] alloc_pages_current+0x155/0x260 [ 2811.402641] ion_page_pool_alloc+0x118/0x1b0 [ 2811.407049] ion_system_heap_allocate+0x133/0x8c0 [ 2811.411888] ? ion_alloc+0x187/0x810 [ 2811.415594] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2811.421045] ? ion_system_contig_heap_create+0x130/0x130 [ 2811.426493] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2811.431532] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2811.436725] ion_alloc+0x204/0x810 [ 2811.440266] ? ion_dma_buf_release+0x40/0x40 [ 2811.444779] ? __might_fault+0x177/0x1b0 [ 2811.448839] ion_ioctl+0xea/0x1f0 [ 2811.452288] ? ion_query_heaps+0x360/0x360 [ 2811.456522] ? lock_acquire+0x170/0x3f0 [ 2811.460490] ? lock_downgrade+0x740/0x740 [ 2811.464633] ? ion_query_heaps+0x360/0x360 [ 2811.468883] do_vfs_ioctl+0x75a/0xff0 [ 2811.472702] ? ioctl_preallocate+0x1a0/0x1a0 [ 2811.477102] ? lock_downgrade+0x740/0x740 [ 2811.481247] ? __fget+0x225/0x360 [ 2811.484692] ? do_vfs_ioctl+0xff0/0xff0 [ 2811.488662] ? security_file_ioctl+0x83/0xb0 [ 2811.493071] SyS_ioctl+0x7f/0xb0 [ 2811.496430] ? do_vfs_ioctl+0xff0/0xff0 [ 2811.500404] do_syscall_64+0x1d5/0x640 [ 2811.504312] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2811.509502] RIP: 0033:0x45e219 [ 2811.512698] RSP: 002b:00007f31ca50bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2811.520487] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2811.527755] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2811.535029] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.542314] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2811.549663] R13: 00007ffc62fc4bcf R14: 00007f31ca50c9c0 R15: 000000000119bf8c [ 2811.559657] / mems_allowed=0-1 [ 2811.562881] CPU: 0 PID: 8006 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2811.570359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2811.579710] Call Trace: [ 2811.582302] dump_stack+0x1b2/0x281 [ 2811.585918] dump_header+0x178/0x82f [ 2811.589626] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2811.594728] ? ___ratelimit+0x2cd/0x530 [ 2811.598695] oom_kill_process.cold+0x10/0xb18 [ 2811.603191] out_of_memory+0xe3e/0x1190 [ 2811.607168] ? oom_killer_disable+0x1c0/0x1c0 [ 2811.611691] ? mutex_trylock+0x152/0x1a0 [ 2811.615760] __alloc_pages_nodemask+0x23e1/0x2720 [ 2811.620624] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2811.625486] alloc_pages_current+0x155/0x260 [ 2811.629921] filemap_fault+0xea3/0x1980 [ 2811.633896] ext4_filemap_fault+0x84/0xb0 [ 2811.638065] __do_fault+0xfa/0x380 [ 2811.641614] __handle_mm_fault+0x2497/0x4620 [ 2811.646028] ? vm_insert_page+0x7c0/0x7c0 [ 2811.650217] handle_mm_fault+0x391/0x860 [ 2811.654285] __do_page_fault+0x549/0xad0 [ 2811.658337] ? spurious_fault+0x640/0x640 [ 2811.662472] ? do_page_fault+0x60/0x500 [ 2811.666450] ? page_fault+0x2f/0x50 [ 2811.670063] page_fault+0x45/0x50 [ 2811.673519] RIP: ac480:0xc00007a180 [ 2811.677145] RSP: 03b6:000000c0000b9e40 EFLAGS: 00000003 [ 2811.677171] CPU: 1 PID: 31456 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2811.679662] Mem-Info: [ 2811.682543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2811.690509] active_anon:16010 inactive_anon:66948 isolated_anon:0 [ 2811.690509] active_file:16 inactive_file:17 isolated_file:0 [ 2811.690509] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2811.690509] slab_reclaimable:12677 slab_unreclaimable:114299 [ 2811.690509] mapped:17409 shmem:68362 pagetables:634 bounce:0 [ 2811.690509] free:13827 free_pcp:87 free_cma:0 [ 2811.692852] Call Trace: [ 2811.704454] Node 0 active_anon:63320kB inactive_anon:251536kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69636kB dirty:0kB writeback:0kB shmem:257064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2811.735394] dump_stack+0x1b2/0x281 [ 2811.735408] warn_alloc.cold+0x96/0x1cc [ 2811.735419] ? zone_watermark_ok_safe+0x220/0x220 [ 2811.735429] ? usleep_range+0x130/0x130 [ 2811.735437] ? queue_work_on+0x10d/0x1d0 [ 2811.735447] ? _find_next_bit+0xdb/0x100 [ 2811.735457] ? run_timer_softirq+0x5a0/0x5a0 [ 2811.735472] __alloc_pages_nodemask+0x2127/0x2720 [ 2811.741567] Node 1 active_anon:720kB inactive_anon:16256kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2811.765859] ? lock_acquire+0x170/0x3f0 [ 2811.765876] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2811.765888] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2811.765904] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2811.765922] alloc_pages_current+0x155/0x260 [ 2811.765935] ion_page_pool_alloc+0x118/0x1b0 [ 2811.771722] Node 0 [ 2811.773533] ion_system_heap_allocate+0x133/0x8c0 [ 2811.778379] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2811.782339] ? ion_alloc+0x187/0x810 [ 2811.782350] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2811.782359] ? ion_system_contig_heap_create+0x130/0x130 [ 2811.782369] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2811.782380] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2811.782391] ion_alloc+0x204/0x810 [ 2811.782408] ? ion_dma_buf_release+0x40/0x40 [ 2811.786458] lowmem_reserve[]: [ 2811.790514] ? __might_fault+0x177/0x1b0 [ 2811.790528] ion_ioctl+0xea/0x1f0 [ 2811.790538] ? ion_query_heaps+0x360/0x360 [ 2811.790550] ? lock_acquire+0x170/0x3f0 [ 2811.790558] ? lock_downgrade+0x740/0x740 [ 2811.790566] ? ion_query_heaps+0x360/0x360 [ 2811.790576] do_vfs_ioctl+0x75a/0xff0 [ 2811.790587] ? ioctl_preallocate+0x1a0/0x1a0 [ 2811.796729] 0 [ 2811.799820] ? lock_downgrade+0x740/0x740 [ 2811.799834] ? __fget+0x225/0x360 [ 2811.799844] ? do_vfs_ioctl+0xff0/0xff0 [ 2811.799854] ? security_file_ioctl+0x83/0xb0 [ 2811.799867] SyS_ioctl+0x7f/0xb0 [ 2811.975340] ? do_vfs_ioctl+0xff0/0xff0 [ 2811.979338] do_syscall_64+0x1d5/0x640 [ 2811.983235] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2811.988427] RIP: 0033:0x45e219 [ 2811.991610] RSP: 002b:00007fe8b5c57c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2811.999317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2812.007036] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2812.014314] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2812.021602] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2812.028868] R13: 00007ffeb210a7af R14: 00007fe8b5c589c0 R15: 000000000119bf8c [ 2812.038424] 2717 2718 2718 2718 [ 2812.042067] Node 0 DMA32 free:17676kB min:36200kB low:45248kB high:54296kB active_anon:63320kB inactive_anon:251536kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2396kB bounce:0kB free_pcp:352kB local_pcp:232kB free_cma:0kB [ 2812.055440] Mem-Info: [ 2812.073645] lowmem_reserve[]: 0 0 0 0 0 [ 2812.078043] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2812.085859] active_anon:16010 inactive_anon:66948 isolated_anon:0 [ 2812.085859] active_file:16 inactive_file:17 isolated_file:0 [ 2812.085859] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2812.085859] slab_reclaimable:12677 slab_unreclaimable:114299 [ 2812.085859] mapped:17409 shmem:68362 pagetables:634 bounce:0 [ 2812.085859] free:13827 free_pcp:86 free_cma:0 [ 2812.114307] lowmem_reserve[]: 0 0 0 0 0 [ 2812.173716] Node 1 Normal free:102148kB min:53696kB low:67120kB high:80544kB active_anon:720kB inactive_anon:16256kB active_file:12kB inactive_file:512kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:140kB bounce:0kB free_pcp:100kB local_pcp:100kB free_cma:0kB [ 2812.184905] Node 0 active_anon:63320kB inactive_anon:251536kB active_file:152kB inactive_file:1288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70336kB dirty:0kB writeback:0kB shmem:257064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2812.232757] Node 1 active_anon:720kB inactive_anon:16256kB active_file:12kB inactive_file:400kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:400kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2812.260390] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2812.261600] lowmem_reserve[]: [ 2812.288207] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2812.296441] 0 [ 2812.296737] Node 0 DMA32 free:96184kB min:36200kB low:45248kB high:54296kB active_anon:63320kB inactive_anon:251536kB active_file:1852kB inactive_file:5696kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2396kB bounce:0kB free_pcp:476kB local_pcp:268kB free_cma:0kB [ 2812.296762] lowmem_reserve[]: 0 0 0 0 0 [ 2812.296782] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2812.296802] lowmem_reserve[]: 0 [ 2812.299028] 0 0 0 0 [ 2812.299045] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 8*32kB (U) 1*64kB (U) 1*128kB (U) 5*256kB (U) 2*512kB (U) 2*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 10952kB [ 2812.299117] Node 0 DMA32: 2*4kB (UM) 1*8kB (U) 94*16kB (UME) 296*32kB (UME) 1212*64kB (UE) 26*128kB (U) 17*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 96240kB [ 2812.299182] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2812.299230] Node 1 Normal: 3*4kB (UME) 1*8kB (E) 3*16kB (UME) 2*32kB (UE) 475*64kB (UE) 120*128kB (UE) 68*256kB (U) 53*512kB (UE) 13*1024kB (U) 2*2048kB (U) 4*4096kB (U) = 124228kB [ 2812.299314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2812.299320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2812.299326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2812.299330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2812.299339] 70417 total pagecache pages [ 2812.330210] 0 [ 2812.346021] 0 pages in swap cache [ 2812.379546] 0 [ 2812.416106] systemd-journald[31494]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2812.460058] 0 [ 2812.465725] Swap cache stats: add 0, delete 0, find 0/0 [ 2812.466071] 0 [ 2812.468972] Free swap = 0kB [ 2812.498181] Node 1 Normal free:124228kB min:53696kB low:67120kB high:80544kB active_anon:724kB inactive_anon:16256kB active_file:148kB inactive_file:332kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:12kB bounce:0kB free_pcp:324kB local_pcp:48kB free_cma:0kB [ 2812.541407] Total swap = 0kB [ 2812.544526] 2097051 pages RAM [ 2812.547635] 0 pages HighMem/MovableOnly [ 2812.559544] lowmem_reserve[]: 0 0 0 0 0 [ 2812.571602] 363840 pages reserved [ 2812.573830] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 8*32kB (U) 1*64kB (U) 1*128kB (U) 5*256kB (U) 2*512kB (U) 2*1024kB (U) 1*2048kB (M) 1*4096kB (E) = 10952kB [ 2812.585140] 0 pages cma reserved [ 2812.599557] Node 0 DMA32: 1*4kB (M) 7*8kB (U) 93*16kB (UE) 248*32kB (UE) 1140*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 82444kB [ 2812.611813] Out of memory (oom_kill_allocating_task): Kill process 8006 (syz-fuzzer) score 0 or sacrifice child [ 2812.633342] systemd-journald[31494]: /dev/kmsg buffer overrun, some messages lost. [ 2812.634770] Node 0 [ 2812.649656] Killed process 26374 (syz-executor.3) total-vm:85024kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB [ 2812.664097] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2812.698845] oom_reaper: reaped process 26374 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2812.699548] Node 1 Normal: 3*4kB (UME) 1*8kB (E) 3*16kB (UME) 2*32kB (UE) 102*64kB (UE) 120*128kB (UE) 68*256kB (U) 53*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 66564kB [ 2812.797249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2812.816900] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2812.823750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2812.889579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2812.928950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2813.002783] 76557 total pagecache pages [ 2813.008233] 0 pages in swap cache [ 2813.038436] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2813.047642] Swap cache stats: add 0, delete 0, find 0/0 [ 2813.073146] Free swap = 0kB [ 2813.076207] Total swap = 0kB [ 2813.079231] 2097051 pages RAM [ 2813.082343] systemd[1]: Started System Logging Service. [ 2813.126940] 0 pages HighMem/MovableOnly [ 2813.149695] 363840 pages reserved [ 2813.153171] 0 pages cma reserved 12:09:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x0, 0x1}) 12:09:10 executing program 1: ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x5, 0x8, 0xff, 0xffff, 0x1}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r1, 0x1, 0xbd3a}, 0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r1, 0xb4}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000080)=0x10) 12:09:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) [ 2813.762429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2813.768453] systemd[1]: Started Journal Service. [ 2813.769198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2813.838952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2813.879875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2813.920282] device bridge_slave_1 left promiscuous mode [ 2813.925860] bridge0: port 2(bridge_slave_1) entered disabled state [ 2813.950651] device bridge_slave_0 left promiscuous mode [ 2813.956234] bridge0: port 1(bridge_slave_0) entered disabled state [ 2813.983953] device veth1_macvtap left promiscuous mode [ 2813.989353] device veth0_macvtap left promiscuous mode [ 2814.012668] device veth1_vlan left promiscuous mode [ 2814.017911] device veth0_vlan left promiscuous mode [ 2814.291764] device hsr_slave_1 left promiscuous mode [ 2814.303611] device hsr_slave_0 left promiscuous mode [ 2814.330621] team0 (unregistering): Port device team_slave_1 removed [ 2814.352283] team0 (unregistering): Port device team_slave_0 removed [ 2814.373003] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2814.394585] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2814.458466] bond0 (unregistering): Released all slaves [ 2816.702867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2816.709589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2816.717762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2816.724955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2816.733598] device bridge_slave_1 left promiscuous mode [ 2816.739093] bridge0: port 2(bridge_slave_1) entered disabled state [ 2816.746724] device bridge_slave_0 left promiscuous mode [ 2816.752437] bridge0: port 1(bridge_slave_0) entered disabled state [ 2816.761400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2816.768115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2816.776389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2816.783322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2816.791346] device bridge_slave_1 left promiscuous mode [ 2816.796838] bridge0: port 2(bridge_slave_1) entered disabled state [ 2816.804357] device bridge_slave_0 left promiscuous mode [ 2816.809817] bridge0: port 1(bridge_slave_0) entered disabled state [ 2816.819071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2816.825926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2816.834870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2816.842085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2816.850392] device bridge_slave_1 left promiscuous mode [ 2816.855890] bridge0: port 2(bridge_slave_1) entered disabled state [ 2816.863604] device bridge_slave_0 left promiscuous mode [ 2816.869078] bridge0: port 1(bridge_slave_0) entered disabled state [ 2816.879347] device veth1_macvtap left promiscuous mode [ 2816.884798] device veth0_macvtap left promiscuous mode [ 2816.890485] device veth1_vlan left promiscuous mode [ 2816.895538] device veth0_vlan left promiscuous mode [ 2816.901639] device veth1_macvtap left promiscuous mode [ 2816.906938] device veth0_macvtap left promiscuous mode [ 2816.912581] device veth1_vlan left promiscuous mode [ 2816.917636] device veth0_vlan left promiscuous mode [ 2816.923182] device veth1_macvtap left promiscuous mode [ 2816.928506] device veth0_macvtap left promiscuous mode [ 2816.934164] device veth1_vlan left promiscuous mode [ 2816.939217] device veth0_vlan left promiscuous mode [ 2817.110166] device hsr_slave_1 left promiscuous mode [ 2817.119354] device hsr_slave_0 left promiscuous mode [ 2817.134906] team0 (unregistering): Port device team_slave_1 removed [ 2817.144619] team0 (unregistering): Port device team_slave_0 removed [ 2817.155684] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2817.165537] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2817.189310] bond0 (unregistering): Released all slaves [ 2817.219011] device hsr_slave_1 left promiscuous mode [ 2817.226756] device hsr_slave_0 left promiscuous mode [ 2817.243753] team0 (unregistering): Port device team_slave_1 removed [ 2817.254637] team0 (unregistering): Port device team_slave_0 removed [ 2817.264948] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2817.275542] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2817.299912] bond0 (unregistering): Released all slaves [ 2817.329594] device hsr_slave_1 left promiscuous mode [ 2817.341744] device hsr_slave_0 left promiscuous mode [ 2817.354768] team0 (unregistering): Port device team_slave_1 removed [ 2817.364490] team0 (unregistering): Port device team_slave_0 removed [ 2817.373915] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2817.384987] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2817.409235] bond0 (unregistering): Released all slaves [ 2818.064969] IPVS: ftp: loaded support on port[0] = 21 [ 2818.102463] IPVS: ftp: loaded support on port[0] = 21 [ 2818.182917] chnl_net:caif_netlink_parms(): no params data found [ 2818.219471] IPVS: ftp: loaded support on port[0] = 21 [ 2818.340494] chnl_net:caif_netlink_parms(): no params data found [ 2818.414078] bridge0: port 1(bridge_slave_0) entered blocking state [ 2818.420474] bridge0: port 1(bridge_slave_0) entered disabled state [ 2818.429038] device bridge_slave_0 entered promiscuous mode [ 2818.478779] bridge0: port 2(bridge_slave_1) entered blocking state [ 2818.485840] bridge0: port 2(bridge_slave_1) entered disabled state [ 2818.493969] device bridge_slave_1 entered promiscuous mode [ 2818.524253] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2818.534014] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2818.550886] Bluetooth: hci0 command 0x0409 tx timeout [ 2818.557255] Bluetooth: hci2 command 0x0409 tx timeout [ 2818.563843] Bluetooth: hci1 command 0x0409 tx timeout [ 2818.573746] chnl_net:caif_netlink_parms(): no params data found [ 2818.583500] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2818.591722] team0: Port device team_slave_0 added [ 2818.609331] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2818.617653] team0: Port device team_slave_1 added [ 2818.622845] bridge0: port 1(bridge_slave_0) entered blocking state [ 2818.629231] bridge0: port 1(bridge_slave_0) entered disabled state [ 2818.636995] device bridge_slave_0 entered promiscuous mode [ 2818.656195] bridge0: port 2(bridge_slave_1) entered blocking state [ 2818.662787] bridge0: port 2(bridge_slave_1) entered disabled state [ 2818.669743] device bridge_slave_1 entered promiscuous mode [ 2818.692642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2818.699158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2818.724858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2818.752929] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2818.762764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2818.769323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2818.795358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2818.807458] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2818.825831] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2818.833681] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2818.866843] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2818.874905] team0: Port device team_slave_0 added [ 2818.885361] device hsr_slave_0 entered promiscuous mode [ 2818.891262] device hsr_slave_1 entered promiscuous mode [ 2818.897348] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2818.905576] team0: Port device team_slave_1 added [ 2818.918689] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2818.935730] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2818.952946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2818.959244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2818.985627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2819.012788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2819.019065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2819.045945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2819.056721] bridge0: port 1(bridge_slave_0) entered blocking state [ 2819.063346] bridge0: port 1(bridge_slave_0) entered disabled state [ 2819.070392] device bridge_slave_0 entered promiscuous mode [ 2819.085315] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2819.092683] bridge0: port 2(bridge_slave_1) entered blocking state [ 2819.099071] bridge0: port 2(bridge_slave_1) entered disabled state [ 2819.106239] device bridge_slave_1 entered promiscuous mode [ 2819.124425] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2819.154345] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2819.175126] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2819.186410] device hsr_slave_0 entered promiscuous mode [ 2819.192816] device hsr_slave_1 entered promiscuous mode [ 2819.209151] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2819.228655] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2819.244056] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2819.251883] team0: Port device team_slave_0 added [ 2819.269860] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2819.277586] team0: Port device team_slave_1 added [ 2819.315682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2819.324047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2819.352335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2819.367368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2819.374511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2819.400117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2819.414779] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2819.427632] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2819.479195] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2819.495240] device hsr_slave_0 entered promiscuous mode [ 2819.502429] device hsr_slave_1 entered promiscuous mode [ 2819.508751] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2819.524097] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2819.625243] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2819.658433] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2819.678520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2819.692929] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2819.712383] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2819.722457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2819.728641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2819.737063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2819.747740] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2819.754846] 8021q: adding VLAN 0 to HW filter on device team0 [ 2819.764039] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2819.772762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2819.781662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2819.789643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2819.798118] bridge0: port 1(bridge_slave_0) entered blocking state [ 2819.804572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2819.812589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2819.821816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2819.829943] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2819.842252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2819.850105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2819.858482] bridge0: port 2(bridge_slave_1) entered blocking state [ 2819.864913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2819.872008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2819.878956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2819.888962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2819.899185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2819.909766] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2819.917381] 8021q: adding VLAN 0 to HW filter on device team0 [ 2819.924847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2819.934864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2819.945082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2819.953348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2819.961214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2819.968845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2819.978092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2819.988517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2819.997877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2820.007583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2820.015715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2820.023995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2820.032404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2820.039847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2820.048456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2820.056534] bridge0: port 1(bridge_slave_0) entered blocking state [ 2820.062947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2820.071499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2820.080516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2820.092139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2820.099285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2820.107642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2820.115510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2820.123978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2820.132308] bridge0: port 2(bridge_slave_1) entered blocking state [ 2820.138660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2820.148048] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2820.154367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2820.167189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2820.175607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2820.187389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2820.198314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2820.208334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2820.219472] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2820.229382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2820.240508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2820.247488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2820.255571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2820.264010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2820.272124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2820.279873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2820.289930] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2820.298226] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2820.306724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2820.315197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2820.324706] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2820.334340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2820.342162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2820.348880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2820.356540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2820.364839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2820.373698] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2820.379765] 8021q: adding VLAN 0 to HW filter on device team0 [ 2820.389871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2820.400135] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2820.408692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2820.416695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2820.424614] bridge0: port 1(bridge_slave_0) entered blocking state [ 2820.431113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2820.438175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2820.446384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2820.454570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2820.464958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2820.474354] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2820.480587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2820.492493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2820.505416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2820.513935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2820.525425] bridge0: port 2(bridge_slave_1) entered blocking state [ 2820.531887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2820.540819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2820.555772] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2820.562901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2820.574675] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2820.584073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2820.592395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2820.599183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2820.607037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2820.617920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2820.628011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2820.631392] Bluetooth: hci1 command 0x041b tx timeout [ 2820.637319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2820.640801] Bluetooth: hci2 command 0x041b tx timeout [ 2820.654315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2820.656391] Bluetooth: hci0 command 0x041b tx timeout [ 2820.667626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2820.675444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2820.684405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2820.694646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2820.706120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2820.721479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2820.729193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2820.738992] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2820.748926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2820.757537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2820.765914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2820.776234] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2820.783361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2820.796508] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2820.810427] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2820.818807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2820.827078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2820.838493] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2820.846089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2820.855509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2820.869490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2820.884179] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2820.895295] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2820.902999] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2820.917934] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2820.928939] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2820.937543] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2820.948819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2820.957216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2820.965621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2820.973725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2820.984041] device veth0_vlan entered promiscuous mode [ 2820.991959] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2820.999031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2821.015836] device veth1_vlan entered promiscuous mode [ 2821.023202] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2821.036393] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2821.052078] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2821.059376] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2821.067323] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2821.077736] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2821.086358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2821.096665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2821.105003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2821.113009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2821.120650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2821.128427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2821.139272] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2821.149288] device veth0_vlan entered promiscuous mode [ 2821.156651] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2821.166259] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2821.178323] device veth1_vlan entered promiscuous mode [ 2821.185623] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2821.192857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2821.200188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2821.208425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2821.219469] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2821.230794] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2821.238063] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2821.245784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2821.254841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2821.267720] device veth0_macvtap entered promiscuous mode [ 2821.274709] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2821.284023] device veth1_macvtap entered promiscuous mode [ 2821.290437] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2821.301649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2821.312791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2821.323597] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2821.331913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2821.342101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.353013] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2821.359954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2821.369174] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2821.376885] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2821.383939] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2821.391723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2821.398992] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2821.406393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2821.414315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2821.424837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2821.435302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.445905] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2821.453284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2821.462964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2821.470821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2821.483141] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2821.491781] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2821.504291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2821.511940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2821.519404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2821.527310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2821.535835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2821.543569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2821.557039] device veth0_macvtap entered promiscuous mode [ 2821.567529] device veth0_vlan entered promiscuous mode [ 2821.579378] device veth1_macvtap entered promiscuous mode [ 2821.597657] device veth1_vlan entered promiscuous mode [ 2821.609079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2821.629692] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2821.640421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2821.659970] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2821.670338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2821.681080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.690867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2821.702798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.713301] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2821.720232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2821.728760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2821.736814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2821.745274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2821.753393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2821.767333] device veth0_macvtap entered promiscuous mode [ 2821.774172] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2821.783644] device veth1_macvtap entered promiscuous mode [ 2821.790031] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2821.798346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2821.809106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.818553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2821.828418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.838599] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2821.845663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2821.854550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2821.865355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2821.873657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2821.881888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2821.893665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2821.910835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2821.926286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2821.936745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.947278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2821.957971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.967612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2821.977929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.988827] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2821.996232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2822.005943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2822.014334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2822.024376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2822.035836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2822.045608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2822.056380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2822.066110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2822.076263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2822.086895] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2822.094182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2822.107172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2822.116344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2822.701458] Bluetooth: hci0 command 0x040f tx timeout [ 2822.708666] Bluetooth: hci2 command 0x040f tx timeout [ 2822.733626] Bluetooth: hci1 command 0x040f tx timeout 12:09:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:09:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:09:19 executing program 5: socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:09:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x2, 0x604}, 0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) 12:09:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x2, 0x604}, 0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) [ 2823.131842] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2823.147911] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2823.154328] syz-executor.1: [ 2823.160575] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2823.177544] page allocation failure: order:4 [ 2823.182803] syz-executor.2 cpuset= [ 2823.187399] syz-executor.3 cpuset= [ 2823.191106] syz-executor.4 cpuset= [ 2823.194995] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2823.195264] / [ 2823.204628] (null) [ 2823.206309] / [ 2823.209016] syz-executor.1 cpuset= [ 2823.210111] / [ 2823.215428] mems_allowed=0-1 [ 2823.218436] / [ 2823.221347] CPU: 1 PID: 32257 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2823.224679] mems_allowed=0-1 [ 2823.230972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2823.230977] Call Trace: [ 2823.230997] dump_stack+0x1b2/0x281 [ 2823.231011] warn_alloc.cold+0x96/0x1cc [ 2823.231023] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2823.231033] ? zone_watermark_ok_safe+0x220/0x220 [ 2823.231053] __alloc_pages_nodemask+0x2127/0x2720 [ 2823.231062] ? io_schedule_timeout+0x140/0x140 [ 2823.231077] ? lock_acquire+0x170/0x3f0 [ 2823.231092] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2823.231108] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2823.231119] ? __mutex_unlock_slowpath+0x75/0x770 [ 2823.231134] alloc_pages_current+0x155/0x260 [ 2823.231157] ion_page_pool_alloc+0x118/0x1b0 [ 2823.300944] ion_system_heap_allocate+0x133/0x8c0 [ 2823.305793] ? ion_alloc+0x187/0x810 [ 2823.309505] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2823.314952] ? ion_system_contig_heap_create+0x130/0x130 [ 2823.320446] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2823.325486] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2823.330331] ion_alloc+0x204/0x810 [ 2823.333874] ? ion_dma_buf_release+0x40/0x40 [ 2823.338295] ? __might_fault+0x177/0x1b0 [ 2823.342382] ion_ioctl+0xea/0x1f0 [ 2823.345835] ? ion_query_heaps+0x360/0x360 [ 2823.346388] mems_allowed=0-1 [ 2823.350067] ? lock_acquire+0x170/0x3f0 [ 2823.350079] ? lock_downgrade+0x740/0x740 [ 2823.350089] ? ion_query_heaps+0x360/0x360 [ 2823.350099] do_vfs_ioctl+0x75a/0xff0 [ 2823.350111] ? ioctl_preallocate+0x1a0/0x1a0 [ 2823.374337] ? lock_downgrade+0x740/0x740 [ 2823.378489] ? __fget+0x225/0x360 [ 2823.381940] ? do_vfs_ioctl+0xff0/0xff0 [ 2823.385913] ? security_file_ioctl+0x83/0xb0 [ 2823.390317] SyS_ioctl+0x7f/0xb0 [ 2823.393675] ? do_vfs_ioctl+0xff0/0xff0 [ 2823.397657] do_syscall_64+0x1d5/0x640 [ 2823.401804] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2823.406992] RIP: 0033:0x45e219 [ 2823.410261] RSP: 002b:00007fb79db61c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2823.417970] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2823.425268] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2823.432535] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2823.439801] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2823.447084] R13: 00007ffdaed1160f R14: 00007fb79db629c0 R15: 000000000119bf8c [ 2823.454369] CPU: 0 PID: 32251 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2823.459631] mems_allowed=0-1 [ 2823.462355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2823.462360] Call Trace: [ 2823.462379] dump_stack+0x1b2/0x281 [ 2823.462394] warn_alloc.cold+0x96/0x1cc [ 2823.462406] ? zone_watermark_ok_safe+0x220/0x220 [ 2823.462432] __alloc_pages_nodemask+0x2127/0x2720 [ 2823.494769] ? io_schedule_timeout+0x140/0x140 [ 2823.499360] ? lock_acquire+0x170/0x3f0 [ 2823.503427] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2823.508277] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2823.514166] ? __mutex_unlock_slowpath+0x75/0x770 [ 2823.519011] alloc_pages_current+0x155/0x260 [ 2823.523454] ion_page_pool_alloc+0x118/0x1b0 [ 2823.527868] ion_system_heap_allocate+0x133/0x8c0 [ 2823.532704] ? ion_alloc+0x187/0x810 [ 2823.536409] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2823.541886] ? ion_system_contig_heap_create+0x130/0x130 [ 2823.547336] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2823.552355] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2823.557197] ion_alloc+0x204/0x810 [ 2823.560737] ? ion_dma_buf_release+0x40/0x40 [ 2823.565142] ? __might_fault+0x177/0x1b0 [ 2823.569200] ion_ioctl+0xea/0x1f0 [ 2823.572653] ? ion_query_heaps+0x360/0x360 [ 2823.576879] ? lock_acquire+0x170/0x3f0 [ 2823.580846] ? lock_downgrade+0x740/0x740 [ 2823.584984] ? ion_query_heaps+0x360/0x360 [ 2823.589217] do_vfs_ioctl+0x75a/0xff0 [ 2823.593024] ? ioctl_preallocate+0x1a0/0x1a0 [ 2823.597423] ? lock_downgrade+0x740/0x740 [ 2823.601596] ? __fget+0x225/0x360 [ 2823.605049] ? do_vfs_ioctl+0xff0/0xff0 [ 2823.609021] ? security_file_ioctl+0x83/0xb0 [ 2823.613431] SyS_ioctl+0x7f/0xb0 [ 2823.616795] ? do_vfs_ioctl+0xff0/0xff0 [ 2823.620766] do_syscall_64+0x1d5/0x640 [ 2823.624660] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2823.629844] RIP: 0033:0x45e219 [ 2823.633027] RSP: 002b:00007faf3df99c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2823.640731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2823.648001] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2823.655284] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2823.662568] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2823.669829] R13: 00007fff4a5a5fff R14: 00007faf3df9a9c0 R15: 000000000119bf8c [ 2823.677166] CPU: 1 PID: 32260 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2823.685061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2823.694422] Call Trace: [ 2823.697020] dump_stack+0x1b2/0x281 [ 2823.700669] warn_alloc.cold+0x96/0x1cc [ 2823.704648] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2823.709667] ? zone_watermark_ok_safe+0x220/0x220 [ 2823.714521] __alloc_pages_nodemask+0x2127/0x2720 [ 2823.719371] ? lock_acquire+0x170/0x3f0 [ 2823.723356] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2823.728213] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2823.733668] ? __mutex_unlock_slowpath+0x75/0x770 [ 2823.738512] ? retint_kernel+0x2d/0x2d [ 2823.742407] alloc_pages_current+0x155/0x260 [ 2823.746823] ion_page_pool_alloc+0x118/0x1b0 [ 2823.751230] ion_system_heap_allocate+0x133/0x8c0 [ 2823.756096] ? ion_alloc+0x187/0x810 [ 2823.759806] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2823.765250] ? ion_system_contig_heap_create+0x130/0x130 [ 2823.770698] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2823.775709] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2823.780555] ion_alloc+0x204/0x810 [ 2823.784112] ? ion_dma_buf_release+0x40/0x40 [ 2823.788518] ? __might_fault+0x177/0x1b0 [ 2823.792576] ion_ioctl+0xea/0x1f0 [ 2823.796028] ? ion_query_heaps+0x360/0x360 [ 2823.800282] ? lock_acquire+0x170/0x3f0 [ 2823.804251] ? lock_downgrade+0x740/0x740 [ 2823.808391] ? ion_query_heaps+0x360/0x360 [ 2823.812620] do_vfs_ioctl+0x75a/0xff0 [ 2823.816418] ? ioctl_preallocate+0x1a0/0x1a0 [ 2823.820831] ? lock_downgrade+0x740/0x740 [ 2823.824976] ? __fget+0x225/0x360 [ 2823.828446] ? do_vfs_ioctl+0xff0/0xff0 [ 2823.832414] ? security_file_ioctl+0x83/0xb0 [ 2823.836836] SyS_ioctl+0x7f/0xb0 [ 2823.840207] ? do_vfs_ioctl+0xff0/0xff0 [ 2823.844175] do_syscall_64+0x1d5/0x640 [ 2823.848076] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2823.853259] RIP: 0033:0x45e219 [ 2823.856465] RSP: 002b:00007fd3ae418c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2823.864184] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2823.871462] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2823.878722] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2823.885996] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2823.893262] R13: 00007fffbf453d0f R14: 00007fd3ae4199c0 R15: 000000000119bf8c [ 2823.900564] CPU: 0 PID: 32261 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2823.908460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2823.917826] Call Trace: [ 2823.920427] dump_stack+0x1b2/0x281 [ 2823.924063] warn_alloc.cold+0x96/0x1cc [ 2823.928068] ? zone_watermark_ok_safe+0x220/0x220 [ 2823.933026] __alloc_pages_nodemask+0x2127/0x2720 [ 2823.937664] warn_alloc_show_mem: 2 callbacks suppressed [ 2823.937668] Mem-Info: [ 2823.937874] ? lock_acquire+0x170/0x3f0 [ 2823.949594] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2823.953308] active_anon:16718 inactive_anon:68980 isolated_anon:0 [ 2823.953308] active_file:2157 inactive_file:5755 isolated_file:0 [ 2823.953308] unevictable:0 dirty:182 writeback:0 unstable:0 [ 2823.953308] slab_reclaimable:12638 slab_unreclaimable:111966 [ 2823.953308] mapped:40248 shmem:70405 pagetables:735 bounce:0 [ 2823.953308] free:116882 free_pcp:171 free_cma:0 [ 2823.954463] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2823.954493] ? __mutex_unlock_slowpath+0x75/0x770 [ 2823.996805] Node 0 active_anon:66480kB inactive_anon:259664kB active_file:8624kB inactive_file:23016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160988kB dirty:728kB writeback:0kB shmem:265236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2823.998624] alloc_pages_current+0x155/0x260 [ 2823.998644] ion_page_pool_alloc+0x118/0x1b0 [ 2824.027189] Node 1 active_anon:392kB inactive_anon:16256kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2824.031446] ion_system_heap_allocate+0x133/0x8c0 [ 2824.031459] ? ion_alloc+0x187/0x810 [ 2824.031470] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2824.031482] ? ion_system_contig_heap_create+0x130/0x130 [ 2824.041245] Node 0 [ 2824.064859] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2824.064874] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2824.064887] ion_alloc+0x204/0x810 [ 2824.064902] ? ion_dma_buf_release+0x40/0x40 [ 2824.064914] ? __might_fault+0x177/0x1b0 [ 2824.064927] ion_ioctl+0xea/0x1f0 [ 2824.064937] ? ion_query_heaps+0x360/0x360 [ 2824.064951] ? lock_acquire+0x170/0x3f0 [ 2824.071738] DMA free:11088kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2824.073519] ? lock_downgrade+0x740/0x740 [ 2824.073531] ? ion_query_heaps+0x360/0x360 [ 2824.073542] do_vfs_ioctl+0x75a/0xff0 [ 2824.073555] ? ioctl_preallocate+0x1a0/0x1a0 [ 2824.081270] lowmem_reserve[]: [ 2824.084430] ? lock_downgrade+0x740/0x740 [ 2824.084445] ? __fget+0x225/0x360 [ 2824.084456] ? do_vfs_ioctl+0xff0/0xff0 [ 2824.084468] ? security_file_ioctl+0x83/0xb0 [ 2824.084478] SyS_ioctl+0x7f/0xb0 [ 2824.084488] ? do_vfs_ioctl+0xff0/0xff0 [ 2824.090118] 0 [ 2824.091759] do_syscall_64+0x1d5/0x640 [ 2824.091777] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2824.091785] RIP: 0033:0x45e219 [ 2824.091791] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2824.097810] 2717 [ 2824.100179] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2824.100185] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2824.100190] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.100196] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2824.100202] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2824.349414] 2718 2718 2718 [ 2824.355913] Node 0 DMA32 free:168880kB min:36200kB low:45248kB high:54296kB active_anon:64532kB inactive_anon:259664kB active_file:8624kB inactive_file:23116kB unevictable:0kB writepending:728kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:3224kB bounce:0kB free_pcp:260kB local_pcp:156kB free_cma:0kB [ 2824.435478] lowmem_reserve[]: 0 0 0 0 0 [ 2824.444449] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2824.493373] lowmem_reserve[]: 0 0 0 0 0 [ 2824.497580] Node 1 Normal free:53696kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:16256kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2824.543242] lowmem_reserve[]: 0 0 0 0 0 [ 2824.569484] Node 0 DMA: 0*4kB 2*8kB (U) 7*16kB (U) 7*32kB (U) 1*64kB (U) 5*128kB (U) 3*256kB (U) 2*512kB (U) 2*1024kB (U) 1*2048kB (U) 1*4096kB (E) = 11040kB [ 2824.606810] Node 0 DMA32: 431*4kB (UME) 136*8kB (UME) 130*16kB (UME) 834*32kB (UME) 66*64kB (UME) 3*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36444kB [ 2824.646833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2824.676024] Node 1 Normal: 146*4kB (UME) 589*8kB (UME) 488*16kB (UME) 287*32kB (UME) 36*64kB (UE) 40*128kB (UE) 2*256kB (U) 46*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 53776kB [ 2824.722489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2824.731814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2824.741597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2824.752251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2824.761476] 70513 total pagecache pages [ 2824.766015] 0 pages in swap cache [ 2824.769623] Swap cache stats: add 0, delete 0, find 0/0 [ 2824.775513] Free swap = 0kB [ 2824.779199] Total swap = 0kB [ 2824.783313] Bluetooth: hci1 command 0x0419 tx timeout [ 2824.790228] Bluetooth: hci2 command 0x0419 tx timeout [ 2824.811790] 2097051 pages RAM [ 2824.814935] 0 pages HighMem/MovableOnly [ 2824.818921] 363840 pages reserved [ 2824.841851] Bluetooth: hci0 command 0x0419 tx timeout [ 2824.872975] 0 pages cma reserved [ 2825.089331] oom_reaper: reaped process 32261 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2825.144980] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2825.222527] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2825.227707] CPU: 1 PID: 31534 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2825.235581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2825.244927] Call Trace: [ 2825.247516] dump_stack+0x1b2/0x281 [ 2825.251139] dump_header+0x178/0x82f [ 2825.254854] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2825.259955] ? ___ratelimit+0x2cd/0x530 [ 2825.263934] oom_kill_process.cold+0x10/0xb18 [ 2825.268438] out_of_memory+0xe3e/0x1190 [ 2825.272414] ? oom_killer_disable+0x1c0/0x1c0 [ 2825.276921] ? mutex_trylock+0x152/0x1a0 [ 2825.281077] __alloc_pages_nodemask+0x23e1/0x2720 [ 2825.285933] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2825.291053] alloc_pages_current+0x155/0x260 [ 2825.295461] filemap_fault+0xea3/0x1980 [ 2825.299448] ext4_filemap_fault+0x84/0xb0 [ 2825.303598] __do_fault+0xfa/0x380 [ 2825.307132] __handle_mm_fault+0x2497/0x4620 [ 2825.311536] ? vm_insert_page+0x7c0/0x7c0 [ 2825.315680] ? lock_downgrade+0x740/0x740 [ 2825.319836] handle_mm_fault+0x391/0x860 [ 2825.323895] __do_page_fault+0x549/0xad0 [ 2825.328048] ? spurious_fault+0x640/0x640 [ 2825.332190] ? do_page_fault+0x60/0x500 [ 2825.336159] ? page_fault+0x2f/0x50 [ 2825.339782] page_fault+0x45/0x50 [ 2825.343251] RIP: 0002:0x32 [ 2825.346104] RSP: 0bb8:00000000002b125d EFLAGS: 00000003 [ 2825.701404] Mem-Info: [ 2825.717201] active_anon:16909 inactive_anon:68980 isolated_anon:0 [ 2825.717201] active_file:20 inactive_file:23 isolated_file:0 [ 2825.717201] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2825.717201] slab_reclaimable:12619 slab_unreclaimable:111980 [ 2825.717201] mapped:52720 shmem:70405 pagetables:831 bounce:0 [ 2825.717201] free:13937 free_pcp:87 free_cma:0 [ 2825.751144] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2825.779958] Node 0 active_anon:67244kB inactive_anon:259664kB active_file:100kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210880kB dirty:0kB writeback:0kB shmem:265236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2825.828011] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2825.848920] CPU: 1 PID: 32261 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2825.856827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2825.866181] Call Trace: [ 2825.868774] dump_stack+0x1b2/0x281 [ 2825.872404] warn_alloc.cold+0x96/0x1cc [ 2825.876379] ? zone_watermark_ok_safe+0x220/0x220 [ 2825.881217] ? usleep_range+0x130/0x130 [ 2825.885186] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2825.890287] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2825.895301] ? run_timer_softirq+0x5a0/0x5a0 [ 2825.899718] __alloc_pages_nodemask+0x2127/0x2720 [ 2825.904573] ? lock_acquire+0x170/0x3f0 [ 2825.908555] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2825.913430] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2825.917951] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2825.923420] alloc_pages_current+0x155/0x260 [ 2825.927834] ion_page_pool_alloc+0x118/0x1b0 [ 2825.932260] ion_system_heap_allocate+0x133/0x8c0 [ 2825.937102] ? ion_alloc+0x187/0x810 [ 2825.940812] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2825.946289] ? ion_system_contig_heap_create+0x130/0x130 [ 2825.951742] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2825.956767] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2825.961621] ion_alloc+0x204/0x810 [ 2825.965176] ? ion_dma_buf_release+0x40/0x40 [ 2825.969677] ? __might_fault+0x177/0x1b0 [ 2825.973746] ion_ioctl+0xea/0x1f0 [ 2825.977202] ? ion_query_heaps+0x360/0x360 [ 2825.981570] ? lock_acquire+0x170/0x3f0 [ 2825.985546] ? lock_downgrade+0x740/0x740 [ 2825.989781] ? ion_query_heaps+0x360/0x360 [ 2825.994019] do_vfs_ioctl+0x75a/0xff0 [ 2825.997840] ? ioctl_preallocate+0x1a0/0x1a0 [ 2826.002251] ? lock_downgrade+0x740/0x740 [ 2826.006430] ? __fget+0x225/0x360 [ 2826.009886] ? do_vfs_ioctl+0xff0/0xff0 [ 2826.013862] ? security_file_ioctl+0x83/0xb0 [ 2826.018273] SyS_ioctl+0x7f/0xb0 [ 2826.021650] ? do_vfs_ioctl+0xff0/0xff0 [ 2826.025628] do_syscall_64+0x1d5/0x640 [ 2826.029527] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2826.035668] RIP: 0033:0x45e219 [ 2826.038851] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2826.046559] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2826.053828] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2826.061096] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2826.068368] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2826.075642] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2826.110432] Node 1 active_anon:392kB inactive_anon:16256kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2826.159868] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2826.209422] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2826.238955] Node 0 DMA32 free:18040kB min:36200kB low:45248kB high:54296kB active_anon:65196kB inactive_anon:259664kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3312kB bounce:0kB free_pcp:228kB local_pcp:120kB free_cma:0kB [ 2826.285926] lowmem_reserve[]: 0 0 0 0 0 [ 2826.289961] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2826.339502] lowmem_reserve[]: 0 0 0 0 0 [ 2826.351880] Node 1 Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:16256kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:12kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2826.401087] lowmem_reserve[]: 0 0 0 0 0 [ 2826.420754] warn_alloc_show_mem: 3 callbacks suppressed [ 2826.420759] Mem-Info: [ 2826.422601] Node 0 DMA: 0*4kB 0*8kB 3*16kB (U) 7*32kB (U) 1*64kB (U) 5*128kB (U) 3*256kB (U) 2*512kB (U) 2*1024kB (U) 1*2048kB (U) 1*4096kB (E) = 10960kB [ 2826.446912] active_anon:16909 inactive_anon:68980 isolated_anon:0 [ 2826.446912] active_file:28 inactive_file:0 isolated_file:0 [ 2826.446912] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2826.446912] slab_reclaimable:12619 slab_unreclaimable:111980 [ 2826.446912] mapped:52720 shmem:70405 pagetables:831 bounce:0 [ 2826.446912] free:13937 free_pcp:87 free_cma:0 [ 2826.459365] Node 0 [ 2826.498731] Node 0 active_anon:67244kB inactive_anon:259664kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210880kB dirty:0kB writeback:0kB shmem:265236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2826.499448] DMA32: [ 2826.501008] Node 1 active_anon:392kB inactive_anon:16256kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2826.548725] 728*4kB [ 2826.579699] Node 0 [ 2826.580412] (ME) 215*8kB (ME) 160*16kB (ME) 144*32kB (UME) 82*64kB (UME) 6*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18072kB [ 2826.630378] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2826.646439] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2826.710996] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2826.734798] Node 1 Normal: 15*4kB (UME) 5*8kB (ME) 5*16kB (ME) 4*32kB (ME) 1*64kB (E) 19*128kB (UE) 2*256kB (U) 46*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 26868kB [ 2826.760011] Node 0 DMA32 free:18272kB min:36200kB low:45248kB high:54296kB active_anon:65196kB inactive_anon:259664kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3312kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2826.774045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2826.810464] lowmem_reserve[]: 0 0 0 0 0 [ 2826.840946] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2826.843125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2826.901444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2826.929429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2826.931830] lowmem_reserve[]: 0 0 0 0 0 [ 2826.967623] 70439 total pagecache pages [ 2826.971616] 0 pages in swap cache [ 2826.982124] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:16256kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2827.000070] Swap cache stats: add 0, delete 0, find 0/0 [ 2827.040167] lowmem_reserve[]: 0 0 0 0 0 [ 2827.081477] Free swap = 0kB [ 2827.087847] Node 0 DMA: 0*4kB 0*8kB 3*16kB (U) 7*32kB (U) 1*64kB (U) 5*128kB (U) 3*256kB (U) 2*512kB (U) 2*1024kB (U) 1*2048kB (U) 1*4096kB (E) = 10960kB [ 2827.093304] Total swap = 0kB [ 2827.145875] Node 0 DMA32: 737*4kB (UME) 219*8kB (UME) 162*16kB (UME) 148*32kB (UME) 82*64kB (UME) 6*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18300kB [ 2827.149433] 2097051 pages RAM [ 2827.164097] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2827.176033] Node 1 Normal: 15*4kB (UME) 5*8kB (ME) 5*16kB (ME) 4*32kB (ME) 1*64kB (E) 19*128kB (UE) 2*256kB (U) 46*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 26868kB [ 2827.182832] 0 pages HighMem/MovableOnly [ 2827.194859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2827.194868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2827.194874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2827.194880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2827.194885] 70439 total pagecache pages [ 2827.194895] 0 pages in swap cache [ 2827.194901] Swap cache stats: add 0, delete 0, find 0/0 [ 2827.194905] Free swap = 0kB [ 2827.194908] Total swap = 0kB [ 2827.194915] 2097051 pages RAM [ 2827.194918] 0 pages HighMem/MovableOnly [ 2827.194922] 363840 pages reserved [ 2827.194925] 0 pages cma reserved [ 2827.263571] 363840 pages reserved [ 2827.267032] 0 pages cma reserved [ 2827.270388] Out of memory (oom_kill_allocating_task): Kill process 31534 (syz-executor.2) score 0 or sacrifice child [ 2827.281146] Killed process 32251 (syz-executor.2) total-vm:93352kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 2827.299574] oom_reaper: reaped process 32251 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2827.426318] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2827.447912] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2827.452868] CPU: 0 PID: 8003 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2827.460338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2827.469782] Call Trace: [ 2827.472373] dump_stack+0x1b2/0x281 [ 2827.476000] dump_header+0x178/0x82f [ 2827.479713] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2827.484839] ? ___ratelimit+0x2cd/0x530 [ 2827.488835] oom_kill_process.cold+0x10/0xb18 [ 2827.493366] out_of_memory+0xe3e/0x1190 [ 2827.497348] ? oom_killer_disable+0x1c0/0x1c0 [ 2827.501847] ? mutex_trylock+0x152/0x1a0 [ 2827.505912] __alloc_pages_nodemask+0x23e1/0x2720 [ 2827.510793] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2827.515657] alloc_pages_current+0x155/0x260 [ 2827.520086] filemap_fault+0xea3/0x1980 [ 2827.524065] ext4_filemap_fault+0x84/0xb0 [ 2827.528206] __do_fault+0xfa/0x380 [ 2827.531735] __handle_mm_fault+0x2497/0x4620 [ 2827.536134] ? vm_insert_page+0x7c0/0x7c0 [ 2827.540271] ? free_object+0xe4/0x240 [ 2827.544109] handle_mm_fault+0x391/0x860 [ 2827.548163] __do_page_fault+0x549/0xad0 [ 2827.552250] ? spurious_fault+0x640/0x640 [ 2827.556393] ? do_page_fault+0x60/0x500 [ 2827.560372] ? page_fault+0x2f/0x50 [ 2827.563989] page_fault+0x45/0x50 [ 2827.567442] RIP: 0000:0xb358f8 [ 2827.570615] RSP: 4e20:000000c00003df28 EFLAGS: 00438920 [ 2827.571996] syz-executor.1: [ 2827.576631] syz-executor.2: [ 2827.577409] page allocation failure: order:4 [ 2827.580382] page allocation failure: order:0 [ 2827.606574] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2827.634473] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2827.639636] CPU: 0 PID: 32261 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2827.646616] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2827.647515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2827.647517] (null) [ 2827.647525] syz-executor.2 cpuset= [ 2827.654608] Call Trace: [ 2827.654632] dump_stack+0x1b2/0x281 [ 2827.654646] warn_alloc.cold+0x96/0x1cc [ 2827.654660] ? zone_watermark_ok_safe+0x220/0x220 [ 2827.664064] / [ 2827.666202] __alloc_pages_nodemask+0x2127/0x2720 [ 2827.669717] mems_allowed=0-1 [ 2827.672311] ? lock_acquire+0x170/0x3f0 [ 2827.672328] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2827.672347] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2827.708680] ? __mutex_unlock_slowpath+0x75/0x770 [ 2827.713535] alloc_pages_current+0x155/0x260 [ 2827.717957] ion_page_pool_alloc+0x118/0x1b0 [ 2827.722391] ion_system_heap_allocate+0x133/0x8c0 [ 2827.727241] ? _raw_spin_unlock+0x29/0x40 [ 2827.731397] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2827.736337] ? ion_system_contig_heap_create+0x130/0x130 [ 2827.741793] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2827.746829] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2827.751702] ion_alloc+0x27a/0x810 [ 2827.755250] ? ion_dma_buf_release+0x40/0x40 [ 2827.759659] ? __might_fault+0x177/0x1b0 [ 2827.763723] ion_ioctl+0xea/0x1f0 [ 2827.767175] ? ion_query_heaps+0x360/0x360 [ 2827.771408] ? lock_acquire+0x170/0x3f0 [ 2827.772333] Mem-Info: [ 2827.775396] ? lock_downgrade+0x740/0x740 [ 2827.777803] active_anon:16382 inactive_anon:68980 isolated_anon:0 [ 2827.777803] active_file:21 inactive_file:0 isolated_file:0 [ 2827.777803] unevictable:0 dirty:4 writeback:0 unstable:0 [ 2827.777803] slab_reclaimable:12619 slab_unreclaimable:111978 [ 2827.777803] mapped:52715 shmem:70405 pagetables:830 bounce:0 [ 2827.777803] free:14014 free_pcp:0 free_cma:0 [ 2827.781947] ? ion_query_heaps+0x360/0x360 [ 2827.819147] do_vfs_ioctl+0x75a/0xff0 [ 2827.822971] ? ioctl_preallocate+0x1a0/0x1a0 [ 2827.827396] ? lock_downgrade+0x740/0x740 [ 2827.831543] ? __fget+0x225/0x360 [ 2827.834998] ? do_vfs_ioctl+0xff0/0xff0 [ 2827.838982] ? security_file_ioctl+0x83/0xb0 [ 2827.843392] SyS_ioctl+0x7f/0xb0 [ 2827.846775] ? do_vfs_ioctl+0xff0/0xff0 [ 2827.850744] do_syscall_64+0x1d5/0x640 [ 2827.854640] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2827.859863] RIP: 0033:0x45e219 [ 2827.862365] Node 0 active_anon:65136kB inactive_anon:259664kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210860kB dirty:16kB writeback:0kB shmem:265236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2827.863061] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2827.898893] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2827.906166] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2827.913441] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2827.920704] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2827.922368] Node 1 active_anon:392kB inactive_anon:16256kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2827.927968] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2827.939119] CPU: 0 PID: 32251 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2827.970324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2827.979682] Call Trace: [ 2827.982282] dump_stack+0x1b2/0x281 [ 2827.982370] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2827.985918] warn_alloc.cold+0x96/0x1cc [ 2827.985931] ? zone_watermark_ok_safe+0x220/0x220 [ 2828.012092] lowmem_reserve[]: [ 2828.016106] ? usleep_range+0x130/0x130 [ 2828.016117] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2828.016130] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2828.020984] 0 [ 2828.024082] ? run_timer_softirq+0x5a0/0x5a0 [ 2828.024101] __alloc_pages_nodemask+0x2127/0x2720 [ 2828.024120] ? lock_acquire+0x170/0x3f0 [ 2828.028077] 2717 [ 2828.033172] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2828.033185] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2828.033202] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2828.038193] 2718 [ 2828.039990] alloc_pages_current+0x155/0x260 [ 2828.044395] 2718 [ 2828.049204] ion_page_pool_alloc+0x118/0x1b0 [ 2828.053175] 2718 [ 2828.055208] ion_system_heap_allocate+0x133/0x8c0 [ 2828.064538] ? ion_alloc+0x187/0x810 [ 2828.064549] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2828.064559] ? ion_system_contig_heap_create+0x130/0x130 [ 2828.064573] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2828.070033] Node 0 [ 2828.072083] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2828.076614] DMA32 free:18172kB min:36200kB low:45248kB high:54296kB active_anon:65136kB inactive_anon:259664kB active_file:84kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3308kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2828.078624] ion_alloc+0x204/0x810 [ 2828.083036] lowmem_reserve[]: [ 2828.085066] ? ion_dma_buf_release+0x40/0x40 [ 2828.089877] 0 [ 2828.093584] ? __might_fault+0x177/0x1b0 [ 2828.093598] ion_ioctl+0xea/0x1f0 [ 2828.093609] ? ion_query_heaps+0x360/0x360 [ 2828.093622] ? lock_acquire+0x170/0x3f0 [ 2828.099066] 0 [ 2828.104545] ? lock_downgrade+0x740/0x740 [ 2828.104556] ? ion_query_heaps+0x360/0x360 [ 2828.104567] do_vfs_ioctl+0x75a/0xff0 [ 2828.104585] ? ioctl_preallocate+0x1a0/0x1a0 [ 2828.109601] 0 [ 2828.111829] ? lock_downgrade+0x740/0x740 [ 2828.116683] 0 [ 2828.144660] ? __fget+0x225/0x360 [ 2828.144672] ? do_vfs_ioctl+0xff0/0xff0 [ 2828.144682] ? security_file_ioctl+0x83/0xb0 [ 2828.144693] SyS_ioctl+0x7f/0xb0 [ 2828.148221] 0 [ 2828.151313] ? do_vfs_ioctl+0xff0/0xff0 [ 2828.157490] do_syscall_64+0x1d5/0x640 [ 2828.161524] Node 0 [ 2828.164972] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2828.164982] RIP: 0033:0x45e219 [ 2828.164990] RSP: 002b:00007faf3df99c68 EFLAGS: 00000246 [ 2828.169226] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2828.173159] ORIG_RAX: 0000000000000010 [ 2828.173165] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2828.173170] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2828.173175] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2828.173180] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2828.173185] R13: 00007fff4a5a5fff R14: 00007faf3df9a9c0 R15: 000000000119bf8c [ 2828.182436] Mem-Info: [ 2828.216002] lowmem_reserve[]: [ 2828.225439] active_anon:16382 inactive_anon:68980 isolated_anon:0 [ 2828.225439] active_file:21 inactive_file:0 isolated_file:0 [ 2828.225439] unevictable:0 dirty:4 writeback:0 unstable:0 [ 2828.225439] slab_reclaimable:12619 slab_unreclaimable:111978 [ 2828.225439] mapped:52715 shmem:70405 pagetables:830 bounce:0 [ 2828.225439] free:14014 free_pcp:0 free_cma:0 [ 2828.225460] Node 0 active_anon:65136kB inactive_anon:259664kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210860kB dirty:16kB writeback:0kB shmem:265236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2828.225477] Node 1 active_anon:392kB inactive_anon:16256kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2828.225481] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2828.225502] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2828.225529] Node 0 DMA32 free:18172kB min:36200kB low:45248kB high:54296kB active_anon:65136kB inactive_anon:259664kB active_file:84kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3308kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2828.225555] lowmem_reserve[]: [ 2828.251999] 0 [ 2828.274617] 0 [ 2828.301961] 0 [ 2828.315210] 0 [ 2828.372057] 0 [ 2828.381820] 0 [ 2828.427242] 0 [ 2828.440388] 0 0 [ 2828.488276] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2828.500431] 0 [ 2828.522465] lowmem_reserve[]: 0 0 0 0 0 [ 2828.528270] Node 1 Normal free:26928kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:16256kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2828.569889] Node 1 Normal free:26928kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:16256kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2828.581132] lowmem_reserve[]: [ 2828.611724] lowmem_reserve[]: 0 0 0 0 0 [ 2828.621364] 0 0 0 0 0 [ 2828.634689] Node 0 DMA: 0*4kB 2*8kB (U) 7*16kB (U) 7*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2828.680169] Node 0 DMA: 0*4kB 2*8kB (U) 7*16kB (U) 7*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2828.685563] Node 0 DMA32: 8*4kB (ME) 2*8kB (E) 94*16kB (UME) 26*32kB (ME) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 41*1024kB (U) 0*2048kB 0*4096kB = 45072kB [ 2828.754957] Node 0 DMA32: 8*4kB (ME) 2*8kB (E) 94*16kB (UME) 26*32kB (ME) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 41*1024kB (U) 0*2048kB 0*4096kB = 45072kB [ 2828.795109] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2828.812918] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2828.839990] Node 1 Normal: 2*4kB (UE) 2*8kB (UE) 1*16kB (E) 2*32kB (ME) 1*64kB (E) 2*128kB (ME) 1*256kB (M) 2*512kB (ME) 357*1024kB (UM) 12*2048kB (U) 0*4096kB = 391848kB [ 2828.856534] Node 1 Normal: 2*4kB (UE) 3*8kB (UME) 1*16kB (E) 2*32kB (ME) 1*64kB (E) 2*128kB (ME) 0*256kB 2*512kB (ME) 387*1024kB (UM) 18*2048kB (U) 0*4096kB = 434608kB [ 2828.902596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2828.911715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2828.932555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2828.962636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2828.965182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2828.971591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2828.971597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2828.971601] 72014 total pagecache pages [ 2828.971613] 0 pages in swap cache [ 2828.971618] Swap cache stats: add 0, delete 0, find 0/0 [ 2828.971621] Free swap = 0kB [ 2828.971623] Total swap = 0kB [ 2828.971630] 2097051 pages RAM [ 2828.971633] 0 pages HighMem/MovableOnly [ 2828.971636] 363840 pages reserved [ 2828.971639] 0 pages cma reserved [ 2828.971645] Out of memory (oom_kill_allocating_task): Kill process 8003 (syz-fuzzer) score 0 or sacrifice child [ 2828.971715] Killed process 31532 (syz-executor.2) total-vm:85024kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB [ 2829.263100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2829.283865] 72564 total pagecache pages [ 2829.287875] 0 pages in swap cache [ 2829.302699] Swap cache stats: add 0, delete 0, find 0/0 [ 2829.308298] Free swap = 0kB [ 2829.311417] Total swap = 0kB [ 2829.341267] 2097051 pages RAM [ 2829.345361] 0 pages HighMem/MovableOnly [ 2829.363339] 363840 pages reserved [ 2829.377386] 0 pages cma reserved [ 2829.422753] Bluetooth: hci3 command 0x0409 tx timeout [ 2829.428072] Bluetooth: hci5 command 0x0409 tx timeout [ 2829.433809] IPVS: ftp: loaded support on port[0] = 21 [ 2829.569082] oom_reaper: reaped process 32257 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2829.635558] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 2829.672872] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 2829.678260] CPU: 1 PID: 31509 Comm: rs:main Q:Reg Not tainted 4.14.217-syzkaller #0 [ 2829.686050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2829.695681] Call Trace: [ 2829.698269] dump_stack+0x1b2/0x281 [ 2829.701911] dump_header+0x178/0x82f [ 2829.705625] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2829.710742] ? ___ratelimit+0x2cd/0x530 [ 2829.714721] oom_kill_process.cold+0x10/0xb18 [ 2829.719227] out_of_memory+0xe3e/0x1190 [ 2829.723206] ? oom_killer_disable+0x1c0/0x1c0 [ 2829.727703] ? mutex_trylock+0x152/0x1a0 [ 2829.731770] __alloc_pages_nodemask+0x23e1/0x2720 [ 2829.736616] ? trace_hardirqs_on+0x10/0x10 [ 2829.740850] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2829.745684] ? __radix_tree_lookup+0x1b5/0x2e0 [ 2829.750289] alloc_pages_current+0x155/0x260 [ 2829.754694] pagecache_get_page+0x3f5/0xab0 [ 2829.759037] grab_cache_page_write_begin+0x63/0x90 [ 2829.763976] ext4_da_write_begin+0x249/0xe70 [ 2829.768422] ? ext4_write_begin+0x1260/0x1260 [ 2829.772913] generic_perform_write+0x1c9/0x420 [ 2829.777489] ? __mnt_drop_write_file+0x5f/0x90 [ 2829.782064] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 2829.786723] ? current_time+0xb0/0xb0 [ 2829.790511] ? ext4_file_write_iter+0x1cc/0xd20 [ 2829.795175] __generic_file_write_iter+0x227/0x590 [ 2829.800111] ext4_file_write_iter+0x276/0xd20 [ 2829.804596] ? aa_file_perm+0x304/0xab0 [ 2829.808561] ? ext4_file_read_iter+0x330/0x330 [ 2829.813133] ? trace_hardirqs_on+0x10/0x10 [ 2829.817354] ? iov_iter_init+0xa6/0x1c0 [ 2829.821348] __vfs_write+0x44c/0x630 [ 2829.825071] ? kernel_read+0x110/0x110 [ 2829.828958] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2829.833983] vfs_write+0x17f/0x4d0 [ 2829.837513] SyS_write+0xf2/0x210 [ 2829.840952] ? SyS_read+0x210/0x210 [ 2829.844574] ? __do_page_fault+0x159/0xad0 [ 2829.848814] ? do_syscall_64+0x4c/0x640 [ 2829.852799] ? SyS_read+0x210/0x210 [ 2829.856852] do_syscall_64+0x1d5/0x640 [ 2829.860760] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2829.865954] RIP: 0033:0x7f8dff7641cd [ 2829.869662] RSP: 002b:00007f8dfcd1f590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2829.877362] RAX: ffffffffffffffda RBX: 00007f8df4027820 RCX: 00007f8dff7641cd [ 2829.884621] RDX: 0000000000000092 RSI: 00007f8df4027820 RDI: 0000000000000006 [ 2829.891897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2829.899153] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8df40275a0 [ 2829.906412] R13: 00007f8dfcd1f5b0 R14: 0000560639b053a0 R15: 0000000000000092 [ 2829.948054] Mem-Info: [ 2829.950498] active_anon:16440 inactive_anon:68986 isolated_anon:0 [ 2829.950498] active_file:28 inactive_file:28 isolated_file:2 [ 2829.950498] unevictable:0 dirty:35 writeback:0 unstable:0 [ 2829.950498] slab_reclaimable:12591 slab_unreclaimable:112083 [ 2829.950498] mapped:44055 shmem:70413 pagetables:803 bounce:0 [ 2829.950498] free:13974 free_pcp:0 free_cma:0 [ 2829.991316] Node 0 active_anon:64936kB inactive_anon:259688kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:176152kB dirty:12kB writeback:0kB shmem:265268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2830.024189] Node 1 active_anon:824kB inactive_anon:16256kB active_file:72kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:128kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2830.060663] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2830.092536] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2830.097716] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:65036kB inactive_anon:259688kB active_file:528kB inactive_file:480kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2830.132244] lowmem_reserve[]: 0 0 0 0 0 [ 2830.136314] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2830.166915] lowmem_reserve[]: 0 0 0 0 0 [ 2830.170953] Node 1 Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:16256kB active_file:516kB inactive_file:80kB unevictable:0kB writepending:128kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2830.209144] lowmem_reserve[]: 0 0 0 0 0 [ 2830.213853] Node 0 DMA: 0*4kB 2*8kB (U) 7*16kB (U) 7*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2830.235044] Node 0 DMA32: 685*4kB (UME) 294*8kB (UME) 121*16kB (UME) 35*32kB (UME) 1*64kB (M) 53*128kB (U) 14*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18580kB [ 2830.252446] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2830.267972] Node 1 Normal: 28*4kB (UME) 18*8kB (ME) 20*16kB (UME) 10*32kB (UME) 14*64kB (ME) 9*128kB (UME) 1*256kB (M) 3*512kB (ME) 2*1024kB (UM) 10*2048kB (U) 0*4096kB = 27264kB [ 2830.289402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2830.298326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2830.316944] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2830.329550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2830.356788] 70497 total pagecache pages [ 2830.360806] 0 pages in swap cache [ 2830.376417] Swap cache stats: add 0, delete 0, find 0/0 [ 2830.381817] Free swap = 0kB [ 2830.388506] Total swap = 0kB [ 2830.391695] 2097051 pages RAM [ 2830.397276] 0 pages HighMem/MovableOnly [ 2830.401269] 363840 pages reserved [ 2830.407217] 0 pages cma reserved [ 2830.410589] Out of memory (oom_kill_allocating_task): Kill process 31509 (rs:main Q:Reg) score 0 or sacrifice child [ 2830.424389] Killed process 31496 (rsyslogd) total-vm:254332kB, anon-rss:864kB, file-rss:0kB, shmem-rss:0kB [ 2830.440537] oom_reaper: reaped process 31496 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2830.457404] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2830.472335] in:imklog cpuset=/ mems_allowed=0-1 [ 2830.497515] CPU: 1 PID: 31508 Comm: in:imklog Not tainted 4.14.217-syzkaller #0 [ 2830.505087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2830.514436] Call Trace: [ 2830.517026] dump_stack+0x1b2/0x281 [ 2830.520662] dump_header+0x178/0x82f [ 2830.524388] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2830.529485] ? ___ratelimit+0x2cd/0x530 [ 2830.533452] oom_kill_process.cold+0x10/0xb18 [ 2830.537970] out_of_memory+0xe3e/0x1190 [ 2830.541959] ? oom_killer_disable+0x1c0/0x1c0 [ 2830.546450] ? mutex_trylock+0x152/0x1a0 [ 2830.550507] __alloc_pages_nodemask+0x23e1/0x2720 [ 2830.555357] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2830.560203] alloc_pages_current+0x155/0x260 [ 2830.564605] filemap_fault+0xea3/0x1980 [ 2830.568574] ext4_filemap_fault+0x84/0xb0 [ 2830.572720] __do_fault+0xfa/0x380 [ 2830.576249] __handle_mm_fault+0x2497/0x4620 [ 2830.580646] ? vm_insert_page+0x7c0/0x7c0 [ 2830.584782] ? lock_downgrade+0x740/0x740 [ 2830.588930] handle_mm_fault+0x391/0x860 [ 2830.592980] __do_page_fault+0x549/0xad0 [ 2830.597032] ? spurious_fault+0x640/0x640 [ 2830.601175] ? do_page_fault+0x60/0x500 [ 2830.605160] ? page_fault+0x2f/0x50 [ 2830.608780] page_fault+0x45/0x50 [ 2830.612231] RIP: 1fa0:0x1f9f [ 2830.615250] RSP: 0000:0000560639b089d0 EFLAGS: 7f8dfd100da0 [ 2830.625233] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2830.695780] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2830.700936] CPU: 0 PID: 32251 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2830.708817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2830.718182] Call Trace: [ 2830.720806] dump_stack+0x1b2/0x281 [ 2830.724443] warn_alloc.cold+0x96/0x1cc [ 2830.728418] ? zone_watermark_ok_safe+0x220/0x220 [ 2830.733298] __alloc_pages_nodemask+0x2127/0x2720 [ 2830.738140] ? __schedule+0x893/0x1de0 [ 2830.742040] ? lock_acquire+0x170/0x3f0 [ 2830.746026] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2830.747080] Mem-Info: [ 2830.750871] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2830.753308] active_anon:16186 inactive_anon:68985 isolated_anon:0 [ 2830.753308] active_file:44 inactive_file:20 isolated_file:0 [ 2830.753308] unevictable:0 dirty:11 writeback:0 unstable:0 [ 2830.753308] slab_reclaimable:12591 slab_unreclaimable:111794 [ 2830.753308] mapped:44029 shmem:70413 pagetables:803 bounce:0 [ 2830.753308] free:13893 free_pcp:0 free_cma:0 [ 2830.758712] ? __mutex_unlock_slowpath+0x75/0x770 [ 2830.791900] Node 0 active_anon:63920kB inactive_anon:259684kB active_file:152kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176116kB dirty:0kB writeback:0kB shmem:265268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2830.796685] alloc_pages_current+0x155/0x260 [ 2830.796703] ion_page_pool_alloc+0x118/0x1b0 [ 2830.825131] Node 1 active_anon:824kB inactive_anon:16256kB active_file:24kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:44kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2830.829485] ion_system_heap_allocate+0x133/0x8c0 [ 2830.833909] Node 0 [ 2830.860758] ? _raw_spin_unlock+0x29/0x40 [ 2830.860771] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2830.860781] ? ion_system_contig_heap_create+0x130/0x130 [ 2830.860796] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2830.865671] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2830.867866] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2830.871978] lowmem_reserve[]: [ 2830.876897] ion_alloc+0x27a/0x810 [ 2830.876913] ? ion_dma_buf_release+0x40/0x40 [ 2830.876926] ? __might_fault+0x177/0x1b0 [ 2830.882375] 0 [ 2830.887400] ion_ioctl+0xea/0x1f0 [ 2830.887411] ? ion_query_heaps+0x360/0x360 [ 2830.887424] ? lock_acquire+0x170/0x3f0 [ 2830.887435] ? lock_downgrade+0x740/0x740 [ 2830.912976] 2717 [ 2830.917779] ? ion_query_heaps+0x360/0x360 [ 2830.920852] 2718 [ 2830.924404] do_vfs_ioctl+0x75a/0xff0 [ 2830.924416] ? ioctl_preallocate+0x1a0/0x1a0 [ 2830.924426] ? lock_downgrade+0x740/0x740 [ 2830.924442] ? __fget+0x225/0x360 [ 2830.928833] 2718 [ 2830.932880] ? do_vfs_ioctl+0xff0/0xff0 [ 2830.932891] ? security_file_ioctl+0x83/0xb0 [ 2830.932901] SyS_ioctl+0x7f/0xb0 [ 2830.932910] ? do_vfs_ioctl+0xff0/0xff0 [ 2830.934694] 2718 [ 2830.938147] do_syscall_64+0x1d5/0x640 [ 2830.946329] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2830.946338] RIP: 0033:0x45e219 [ 2830.946343] RSP: 002b:00007faf3df99c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2830.946353] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2830.946361] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2830.950507] Node 0 [ 2830.952570] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2830.956852] DMA32 free:17792kB min:36200kB low:45248kB high:54296kB active_anon:63920kB inactive_anon:259684kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:3172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2830.958839] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2830.958847] R13: 00007fff4a5a5fff R14: 00007faf3df9a9c0 R15: 000000000119bf8c [ 2830.962624] lowmem_reserve[]: [ 2830.987374] warn_alloc_show_mem: 1 callbacks suppressed [ 2830.987378] Mem-Info: [ 2830.991777] syz-executor.1: [ 2831.007095] active_anon:16186 inactive_anon:68985 isolated_anon:0 [ 2831.007095] active_file:44 inactive_file:20 isolated_file:0 [ 2831.007095] unevictable:0 dirty:11 writeback:0 unstable:0 [ 2831.007095] slab_reclaimable:12591 slab_unreclaimable:111794 [ 2831.007095] mapped:44029 shmem:70413 pagetables:803 bounce:0 [ 2831.007095] free:13893 free_pcp:0 free_cma:0 [ 2831.007432] syz-executor.3: [ 2831.042099] Node 0 active_anon:63920kB inactive_anon:259684kB active_file:152kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176116kB dirty:0kB writeback:0kB shmem:265268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2831.079344] page allocation failure: order:0 [ 2831.094395] page allocation failure: order:0 [ 2831.107650] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2831.133838] 0 [ 2831.172265] (null) [ 2831.189790] Node 1 active_anon:824kB inactive_anon:16256kB active_file:24kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:44kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2831.191681] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2831.237482] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2831.238827] CPU: 1 PID: 32257 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2831.252991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2831.257189] syz-executor.1 cpuset= [ 2831.262350] Call Trace: [ 2831.262359] / [ 2831.265893] dump_stack+0x1b2/0x281 [ 2831.268733] 0 [ 2831.270159] warn_alloc.cold+0x96/0x1cc [ 2831.278080] 0 0 [ 2831.279512] ? zone_watermark_ok_safe+0x220/0x220 [ 2831.279524] ? usleep_range+0x130/0x130 [ 2831.281480] 0 [ 2831.286315] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2831.286330] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2831.286339] ? run_timer_softirq+0x5a0/0x5a0 [ 2831.286355] __alloc_pages_nodemask+0x2127/0x2720 [ 2831.286370] ? lock_acquire+0x170/0x3f0 [ 2831.286388] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2831.297246] Node 0 [ 2831.302228] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2831.317228] mems_allowed=0-1 [ 2831.320259] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2831.332053] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2831.335480] alloc_pages_current+0x155/0x260 [ 2831.335503] ion_page_pool_alloc+0x118/0x1b0 [ 2831.335514] ion_system_heap_allocate+0x133/0x8c0 [ 2831.335525] ? ion_alloc+0x187/0x810 [ 2831.335536] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2831.335551] ? ion_system_contig_heap_create+0x130/0x130 [ 2831.374676] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2831.378366] Node 0 [ 2831.383838] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2831.383852] ion_alloc+0x204/0x810 [ 2831.383867] ? ion_dma_buf_release+0x40/0x40 [ 2831.383879] ? __might_fault+0x177/0x1b0 [ 2831.383890] ion_ioctl+0xea/0x1f0 [ 2831.383906] ? ion_query_heaps+0x360/0x360 [ 2831.383919] ? lock_acquire+0x170/0x3f0 [ 2831.383928] ? lock_downgrade+0x740/0x740 [ 2831.383935] ? ion_query_heaps+0x360/0x360 [ 2831.383944] do_vfs_ioctl+0x75a/0xff0 [ 2831.383956] ? ioctl_preallocate+0x1a0/0x1a0 [ 2831.413054] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2831.413403] ? lock_downgrade+0x740/0x740 [ 2831.416832] lowmem_reserve[]: [ 2831.421060] ? __fget+0x225/0x360 [ 2831.453040] 0 [ 2831.466458] ? do_vfs_ioctl+0xff0/0xff0 [ 2831.466470] ? security_file_ioctl+0x83/0xb0 [ 2831.466480] SyS_ioctl+0x7f/0xb0 [ 2831.466495] ? do_vfs_ioctl+0xff0/0xff0 [ 2831.466506] do_syscall_64+0x1d5/0x640 [ 2831.466523] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2831.466532] RIP: 0033:0x45e219 [ 2831.466542] RSP: 002b:00007fb79db61c68 EFLAGS: 00000246 [ 2831.495249] lowmem_reserve[]: [ 2831.498600] ORIG_RAX: 0000000000000010 [ 2831.498609] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2831.525297] 0 [ 2831.527129] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2831.527137] 0 [ 2831.528927] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2831.538397] 0 [ 2831.545345] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2831.545351] R13: 00007ffdaed1160f R14: 00007fb79db629c0 R15: 000000000119bf8c [ 2831.560995] Bluetooth: hci5 command 0x041b tx timeout [ 2831.563059] CPU: 0 PID: 32261 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2831.573238] Bluetooth: hci3 command 0x041b tx timeout [ 2831.574891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2831.574906] Call Trace: [ 2831.592026] dump_stack+0x1b2/0x281 [ 2831.595663] warn_alloc.cold+0x96/0x1cc [ 2831.599642] ? zone_watermark_ok_safe+0x220/0x220 [ 2831.604485] ? usleep_range+0x130/0x130 [ 2831.608460] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2831.613568] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2831.618588] ? run_timer_softirq+0x5a0/0x5a0 [ 2831.623027] __alloc_pages_nodemask+0x2127/0x2720 [ 2831.628585] ? lock_acquire+0x170/0x3f0 [ 2831.632569] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2831.637412] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2831.642028] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2831.647489] alloc_pages_current+0x155/0x260 [ 2831.652952] ion_page_pool_alloc+0x118/0x1b0 [ 2831.657365] ion_system_heap_allocate+0x133/0x8c0 [ 2831.662208] ? _raw_spin_unlock+0x29/0x40 [ 2831.666356] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2831.671284] ? ion_system_contig_heap_create+0x130/0x130 [ 2831.676735] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2831.681752] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2831.686595] ion_alloc+0x27a/0x810 [ 2831.690139] ? ion_dma_buf_release+0x40/0x40 [ 2831.694548] ? __might_fault+0x177/0x1b0 [ 2831.698630] ion_ioctl+0xea/0x1f0 [ 2831.702093] ? ion_query_heaps+0x360/0x360 [ 2831.706331] ? lock_acquire+0x170/0x3f0 [ 2831.710307] ? lock_downgrade+0x740/0x740 [ 2831.714455] ? ion_query_heaps+0x360/0x360 [ 2831.718691] do_vfs_ioctl+0x75a/0xff0 [ 2831.722491] ? ioctl_preallocate+0x1a0/0x1a0 [ 2831.726896] ? lock_downgrade+0x740/0x740 [ 2831.731046] ? __fget+0x225/0x360 [ 2831.734498] ? do_vfs_ioctl+0xff0/0xff0 [ 2831.738467] ? security_file_ioctl+0x83/0xb0 [ 2831.742871] SyS_ioctl+0x7f/0xb0 [ 2831.746232] ? do_vfs_ioctl+0xff0/0xff0 [ 2831.750206] do_syscall_64+0x1d5/0x640 [ 2831.754105] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2831.759292] RIP: 0033:0x45e219 [ 2831.762492] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2831.770196] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2831.777464] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2831.784734] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2831.792008] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2831.799291] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2831.813108] 0 0 [ 2831.815108] Node 1 Normal free:73580kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:16256kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:40kB bounce:0kB free_pcp:672kB local_pcp:0kB free_cma:0kB [ 2831.844004] 2717 2718 2718 2718 [ 2831.847960] Node 0 DMA32 free:73832kB min:36200kB low:45248kB high:54296kB active_anon:63920kB inactive_anon:259684kB active_file:52kB inactive_file:652kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:3172kB bounce:0kB free_pcp:1476kB local_pcp:652kB free_cma:0kB [ 2831.877857] lowmem_reserve[]: 0 0 0 0 0 [ 2831.882358] Node 0 DMA: 0*4kB 2*8kB (U) 7*16kB (U) 7*32kB (U) 2*64kB (U) 4*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11488kB [ 2831.897638] lowmem_reserve[]: 0 0 0 0 0 [ 2831.902355] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2831.928763] Node 0 DMA32: 236*4kB (UME) 2913*8kB (UME) 2494*16kB (UME) 661*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 85368kB [ 2831.944134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2831.964643] lowmem_reserve[]: 0 0 0 0 0 [ 2831.973138] Node 1 Normal free:26860kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:16256kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:40kB bounce:0kB free_pcp:672kB local_pcp:0kB free_cma:0kB [ 2832.002189] Node 1 Normal: 29*4kB (UME) 185*8kB (UME) 17*16kB (UME) 9*32kB (UME) 8*64kB (UME) 7*128kB (UME) 61*256kB (UM) 15*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26860kB [ 2832.043161] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2832.052034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2832.073142] lowmem_reserve[]: 0 0 0 0 0 [ 2832.077169] Node 0 DMA: 7*4kB (U) 2*8kB (U) 7*16kB (U) 7*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11004kB [ 2832.103164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2832.112036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2832.120773] Node 0 DMA32: 44*4kB (UME) 88*8kB (UME) 2346*16kB (UME) 3159*32kB (UME) 612*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 178672kB [ 2832.143254] 71739 total pagecache pages [ 2832.147279] 0 pages in swap cache [ 2832.150722] Swap cache stats: add 0, delete 0, find 0/0 [ 2832.156214] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2832.188614] Free swap = 0kB [ 2832.191662] Total swap = 0kB [ 2832.204372] 2097051 pages RAM [ 2832.207589] 0 pages HighMem/MovableOnly [ 2832.211564] 363840 pages reserved [ 2832.215715] Node 1 Normal: 241*4kB (UME) 339*8kB (UME) 27*16kB (UME) 19*32kB (UME) 251*64kB (UME) 11*128kB (UME) 86*256kB (UM) 22*512kB (UME) 5*1024kB (U) 0*2048kB 0*4096kB = 60588kB [ 2832.256690] 0 pages cma reserved [ 2832.260091] Out of memory (oom_kill_allocating_task): Kill process 31508 (in:imklog) score 0 or sacrifice child [ 2832.282598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2832.297857] IPVS: ftp: loaded support on port[0] = 21 [ 2832.306161] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2832.309702] Killed process 31508 (in:imklog) total-vm:254332kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2832.329054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2832.340346] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2832.342290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2832.353199] CPU: 1 PID: 32257 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2832.362500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2832.371853] Call Trace: [ 2832.374446] dump_stack+0x1b2/0x281 [ 2832.378082] warn_alloc.cold+0x96/0x1cc [ 2832.382095] ? zone_watermark_ok_safe+0x220/0x220 [ 2832.386958] __alloc_pages_nodemask+0x2127/0x2720 [ 2832.391888] ? lock_acquire+0x170/0x3f0 [ 2832.395869] ? lock_acquire+0x170/0x3f0 [ 2832.398666] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2832.399849] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2832.413266] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2832.418723] ? __mutex_unlock_slowpath+0x75/0x770 [ 2832.423571] alloc_pages_current+0x155/0x260 [ 2832.423998] 71922 total pagecache pages [ 2832.427983] ion_page_pool_alloc+0x118/0x1b0 [ 2832.432389] 0 pages in swap cache [ 2832.436786] ion_system_heap_allocate+0x133/0x8c0 [ 2832.436799] ? _raw_spin_unlock+0x29/0x40 [ 2832.436808] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2832.436816] ? ion_system_contig_heap_create+0x130/0x130 [ 2832.436827] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2832.436838] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2832.436849] ion_alloc+0x27a/0x810 [ 2832.436863] ? ion_dma_buf_release+0x40/0x40 [ 2832.436875] ? __might_fault+0x177/0x1b0 [ 2832.453424] Swap cache stats: add 0, delete 0, find 0/0 [ 2832.454556] ion_ioctl+0xea/0x1f0 [ 2832.459987] Free swap = 0kB [ 2832.464992] ? ion_query_heaps+0x360/0x360 [ 2832.465005] ? lock_acquire+0x170/0x3f0 [ 2832.465013] ? lock_downgrade+0x740/0x740 [ 2832.465021] ? ion_query_heaps+0x360/0x360 [ 2832.465031] do_vfs_ioctl+0x75a/0xff0 [ 2832.465047] ? ioctl_preallocate+0x1a0/0x1a0 [ 2832.465056] ? lock_downgrade+0x740/0x740 [ 2832.465068] ? __fget+0x225/0x360 [ 2832.465076] ? do_vfs_ioctl+0xff0/0xff0 [ 2832.465087] ? security_file_ioctl+0x83/0xb0 [ 2832.465100] SyS_ioctl+0x7f/0xb0 [ 2832.483260] Total swap = 0kB [ 2832.487236] ? do_vfs_ioctl+0xff0/0xff0 [ 2832.490675] 2097051 pages RAM [ 2832.493697] do_syscall_64+0x1d5/0x640 [ 2832.493715] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2832.493723] RIP: 0033:0x45e219 [ 2832.493728] RSP: 002b:00007fb79db61c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2832.493738] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2832.493743] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2832.493747] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2832.493752] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2832.493758] R13: 00007ffdaed1160f R14: 00007fb79db629c0 R15: 000000000119bf8c [ 2832.727404] warn_alloc_show_mem: 1 callbacks suppressed [ 2832.727409] Mem-Info: [ 2832.786973] active_anon:16189 inactive_anon:68984 isolated_anon:0 [ 2832.786973] active_file:14 inactive_file:8 isolated_file:0 [ 2832.786973] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2832.786973] slab_reclaimable:12600 slab_unreclaimable:112497 [ 2832.786973] mapped:44036 shmem:70413 pagetables:772 bounce:0 [ 2832.786973] free:18403 free_pcp:188 free_cma:0 [ 2832.925828] kworker/u4:1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2832.932585] Node 0 active_anon:63932kB inactive_anon:259680kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176244kB dirty:0kB writeback:0kB shmem:265268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2832.963319] kworker/u4:1 cpuset=/ mems_allowed=0-1 [ 2832.971251] CPU: 1 PID: 26002 Comm: kworker/u4:1 Not tainted 4.14.217-syzkaller #0 [ 2832.974710] Node 1 active_anon:824kB inactive_anon:16256kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2832.978946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2832.978963] Workqueue: events_unbound call_usermodehelper_exec_work [ 2833.014128] Node 0 [ 2833.015031] Call Trace: [ 2833.021450] DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2833.023670] dump_stack+0x1b2/0x281 [ 2833.023681] dump_header+0x178/0x82f [ 2833.023692] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2833.023700] ? ___ratelimit+0x2cd/0x530 [ 2833.023709] oom_kill_process.cold+0x10/0xb18 [ 2833.023720] ? lock_downgrade+0x740/0x740 [ 2833.023733] out_of_memory+0x2dc/0x1190 [ 2833.023746] ? oom_killer_disable+0x1c0/0x1c0 [ 2833.023753] ? mutex_trylock+0x152/0x1a0 [ 2833.023764] __alloc_pages_nodemask+0x23e1/0x2720 [ 2833.023784] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2833.032635] 0 pages HighMem/MovableOnly [ 2833.051866] ? fs_reclaim_release+0xd0/0x110 [ 2833.051885] ? kmem_cache_alloc_node+0x38b/0x410 [ 2833.051896] copy_process.part.0+0x265/0x71c0 [ 2833.051908] ? trace_hardirqs_on+0x10/0x10 [ 2833.051922] ? check_preemption_disabled+0x35/0x240 [ 2833.051929] ? static_obj+0x50/0x50 [ 2833.051938] ? __switch_to_xtra+0x93/0x12f0 [ 2833.051951] ? finish_task_switch+0x178/0x610 [ 2833.051962] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2833.051972] ? __cleanup_sighand+0x40/0x40 [ 2833.051985] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2833.064024] lowmem_reserve[]: [ 2833.064423] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2833.068372] 0 [ 2833.072871] _do_fork+0x184/0xc80 [ 2833.085674] 2717 [ 2833.089494] ? fork_idle+0x270/0x270 [ 2833.098872] 363840 pages reserved [ 2833.099151] ? io_schedule_timeout+0x140/0x140 [ 2833.103095] 0 pages cma reserved [ 2833.107492] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2833.107502] kernel_thread+0x2f/0x40 [ 2833.107511] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2833.107517] ? call_usermodehelper+0x80/0x80 [ 2833.107526] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2833.107536] process_one_work+0x793/0x14a0 [ 2833.107546] ? work_busy+0x320/0x320 [ 2833.107552] ? worker_thread+0x158/0xff0 [ 2833.107562] ? _raw_spin_unlock_irq+0x24/0x80 [ 2833.107572] worker_thread+0x5cc/0xff0 [ 2833.107588] ? rescuer_thread+0xc80/0xc80 [ 2833.107598] kthread+0x30d/0x420 [ 2833.107605] ? kthread_create_on_node+0xd0/0xd0 [ 2833.107613] ret_from_fork+0x24/0x30 [ 2833.270370] 2718 2718 2718 [ 2833.303204] Node 0 DMA32 free:17700kB min:36200kB low:45248kB high:54296kB active_anon:63932kB inactive_anon:259680kB active_file:32kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:3048kB bounce:0kB free_pcp:1064kB local_pcp:780kB free_cma:0kB [ 2833.333442] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2833.351203] lowmem_reserve[]: 0 0 0 0 0 [ 2833.357458] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2833.383131] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2833.397804] lowmem_reserve[]: 0 0 0 0 0 [ 2833.401815] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:16256kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2833.422889] syz-executor.2 cpuset= [ 2833.432881] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2833.441576] CPU: 1 PID: 32257 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2833.449454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2833.459242] Call Trace: [ 2833.461844] dump_stack+0x1b2/0x281 [ 2833.465484] warn_alloc.cold+0x96/0x1cc [ 2833.469466] ? zone_watermark_ok_safe+0x220/0x220 [ 2833.474337] ? usleep_range+0x130/0x130 [ 2833.478314] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2833.483430] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2833.488450] ? run_timer_softirq+0x5a0/0x5a0 [ 2833.492871] __alloc_pages_nodemask+0x2127/0x2720 [ 2833.497771] ? lock_acquire+0x170/0x3f0 [ 2833.501758] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2833.506618] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2833.511127] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2833.516605] alloc_pages_current+0x155/0x260 [ 2833.521021] ion_page_pool_alloc+0x118/0x1b0 [ 2833.525472] ion_system_heap_allocate+0x133/0x8c0 [ 2833.530321] ? _raw_spin_unlock+0x29/0x40 [ 2833.534469] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2833.539400] ? ion_system_contig_heap_create+0x130/0x130 [ 2833.542226] / [ 2833.544847] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2833.551564] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2833.556418] ion_alloc+0x27a/0x810 [ 2833.559970] ? ion_dma_buf_release+0x40/0x40 [ 2833.564381] ? __might_fault+0x177/0x1b0 [ 2833.568476] ion_ioctl+0xea/0x1f0 [ 2833.571935] ? ion_query_heaps+0x360/0x360 [ 2833.576172] ? lock_acquire+0x170/0x3f0 [ 2833.580143] ? lock_downgrade+0x740/0x740 [ 2833.583193] mems_allowed=0-1 [ 2833.584299] ? ion_query_heaps+0x360/0x360 [ 2833.584311] do_vfs_ioctl+0x75a/0xff0 [ 2833.584323] ? ioctl_preallocate+0x1a0/0x1a0 [ 2833.584331] ? lock_downgrade+0x740/0x740 [ 2833.584344] ? __fget+0x225/0x360 [ 2833.584353] ? do_vfs_ioctl+0xff0/0xff0 [ 2833.584364] ? security_file_ioctl+0x83/0xb0 [ 2833.584375] SyS_ioctl+0x7f/0xb0 [ 2833.584383] ? do_vfs_ioctl+0xff0/0xff0 [ 2833.584395] do_syscall_64+0x1d5/0x640 [ 2833.584412] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2833.584421] RIP: 0033:0x45e219 [ 2833.584426] RSP: 002b:00007fb79db61c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2833.584436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2833.584441] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2833.584450] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2833.665459] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2833.672902] R13: 00007ffdaed1160f R14: 00007fb79db629c0 R15: 000000000119bf8c [ 2833.684774] Bluetooth: hci3 command 0x040f tx timeout [ 2833.690429] Bluetooth: hci5 command 0x040f tx timeout [ 2833.695712] Mem-Info: [ 2833.698130] active_anon:16189 inactive_anon:68984 isolated_anon:0 [ 2833.698130] active_file:17 inactive_file:17 isolated_file:0 [ 2833.698130] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2833.698130] slab_reclaimable:12584 slab_unreclaimable:112176 [ 2833.698130] mapped:44052 shmem:70413 pagetables:772 bounce:0 [ 2833.698130] free:14284 free_pcp:230 free_cma:0 [ 2833.701507] CPU: 0 PID: 32251 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2833.732431] lowmem_reserve[]: [ 2833.739271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2833.739276] Call Trace: [ 2833.739296] dump_stack+0x1b2/0x281 [ 2833.739310] warn_alloc.cold+0x96/0x1cc [ 2833.739324] ? zone_watermark_ok_safe+0x220/0x220 [ 2833.742442] 0 [ 2833.751797] ? usleep_range+0x130/0x130 [ 2833.751806] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2833.751818] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2833.751829] ? run_timer_softirq+0x5a0/0x5a0 [ 2833.751846] __alloc_pages_nodemask+0x2127/0x2720 [ 2833.754460] Node 0 active_anon:63932kB inactive_anon:259680kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176208kB dirty:0kB writeback:0kB shmem:265268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2833.758028] ? lock_acquire+0x170/0x3f0 [ 2833.761982] Node 1 active_anon:824kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2833.766809] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2833.766821] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2833.766837] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2833.766856] alloc_pages_current+0x155/0x260 [ 2833.768737] 0 [ 2833.772685] ion_page_pool_alloc+0x118/0x1b0 [ 2833.777797] 0 [ 2833.782764] ion_system_heap_allocate+0x133/0x8c0 [ 2833.787196] Node 0 [ 2833.791996] ? _raw_spin_unlock+0x29/0x40 [ 2833.819801] 0 [ 2833.823732] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2833.823743] ? ion_system_contig_heap_create+0x130/0x130 [ 2833.823754] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2833.823770] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2833.850379] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2833.855740] ion_alloc+0x27a/0x810 [ 2833.855757] ? ion_dma_buf_release+0x40/0x40 [ 2833.855771] ? __might_fault+0x177/0x1b0 [ 2833.860262] 0 [ 2833.865801] ion_ioctl+0xea/0x1f0 [ 2833.865812] ? ion_query_heaps+0x360/0x360 [ 2833.865826] ? lock_acquire+0x170/0x3f0 [ 2833.865838] ? lock_downgrade+0x740/0x740 [ 2833.870256] lowmem_reserve[]: [ 2833.872034] ? ion_query_heaps+0x360/0x360 [ 2833.872047] do_vfs_ioctl+0x75a/0xff0 [ 2833.878224] ? ioctl_preallocate+0x1a0/0x1a0 [ 2833.883035] Node 0 [ 2833.885258] ? lock_downgrade+0x740/0x740 [ 2833.885271] ? __fget+0x225/0x360 [ 2833.885280] ? do_vfs_ioctl+0xff0/0xff0 [ 2833.885291] ? security_file_ioctl+0x83/0xb0 [ 2833.885301] SyS_ioctl+0x7f/0xb0 [ 2833.889445] 0 [ 2833.891223] ? do_vfs_ioctl+0xff0/0xff0 [ 2833.896173] 2717 [ 2833.901597] do_syscall_64+0x1d5/0x640 [ 2833.906641] DMA: [ 2833.911427] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2833.936972] 2718 [ 2833.940457] RIP: 0033:0x45e219 [ 2833.944878] 2718 [ 2833.948884] RSP: 002b:00007faf3df99c68 EFLAGS: 00000246 [ 2833.950795] 2718 [ 2833.954245] ORIG_RAX: 0000000000000010 [ 2833.954252] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2833.954257] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2833.954261] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2833.954266] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2833.954271] R13: 00007fff4a5a5fff R14: 00007faf3df9a9c0 R15: 000000000119bf8c [ 2833.980138] warn_alloc_show_mem: 1 callbacks suppressed [ 2833.980142] Mem-Info: [ 2833.998539] 0*4kB [ 2834.017053] active_anon:16189 inactive_anon:68984 isolated_anon:0 [ 2834.017053] active_file:42 inactive_file:0 isolated_file:0 [ 2834.017053] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2834.017053] slab_reclaimable:12584 slab_unreclaimable:112176 [ 2834.017053] mapped:44052 shmem:70413 pagetables:772 bounce:0 [ 2834.017053] free:14284 free_pcp:230 free_cma:0 [ 2834.041169] Node 0 active_anon:63932kB inactive_anon:259680kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176208kB dirty:0kB writeback:0kB shmem:265268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2834.049693] 2*8kB [ 2834.052695] Node 1 active_anon:824kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2834.070895] Node 0 [ 2834.084847] Node 0 [ 2834.101366] (U) [ 2834.140488] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2834.163148] DMA32 free:19316kB min:36200kB low:45248kB high:54296kB active_anon:63932kB inactive_anon:259680kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3048kB bounce:0kB free_pcp:920kB local_pcp:632kB free_cma:0kB [ 2834.249307] 7*16kB (U) 7*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2834.260888] Node 0 DMA32: 449*4kB (UME) 354*8kB (UME) 152*16kB (ME) 370*32kB (UME) 2*64kB (M) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19284kB [ 2834.262693] lowmem_reserve[]: [ 2834.283017] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2834.304058] Node 1 Normal: 245*4kB (UME) 353*8kB (UME) 26*16kB (UME) 25*32kB (UME) 7*64kB (UME) 5*128kB (ME) 13*256kB (UM) 22*512kB (UME) 6*1024kB (UM) 0*2048kB 0*4096kB = 26844kB [ 2834.327196] lowmem_reserve[]: 0 0 0 0 0 [ 2834.331210] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2834.363880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2834.375100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2834.413655] 0 2717 2718 2718 2718 [ 2834.417367] Node 0 DMA32 free:170772kB min:36200kB low:45248kB high:54296kB active_anon:63932kB inactive_anon:259680kB active_file:80kB inactive_file:3860kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:3048kB bounce:0kB free_pcp:624kB local_pcp:340kB free_cma:0kB [ 2834.443596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2834.457679] lowmem_reserve[]: 0 0 0 0 0 [ 2834.461887] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2834.462348] lowmem_reserve[]: [ 2834.518846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2834.521004] lowmem_reserve[]: [ 2834.522389] 71612 total pagecache pages [ 2834.570465] 0 0 0 0 0 [ 2834.577231] Node 1 Normal free:130732kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2834.583632] 0 pages in swap cache [ 2834.609890] 0 0 0 0 0 [ 2834.612414] Node 1 Normal free:130732kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2834.669405] lowmem_reserve[]: 0 0 0 0 0 [ 2834.677324] Node 0 DMA: 7*4kB (U) 2*8kB (U) 7*16kB (U) 7*32kB (U) 2*64kB (U) 4*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11516kB [ 2834.684075] Swap cache stats: add 0, delete 0, find 0/0 [ 2834.708630] Node 0 DMA32: 41*4kB (UE) 7*8kB (UME) 84*16kB (UME) 15*32kB (ME) 1438*64kB (UM) 302*128kB (UM) 33*256kB (U) 1*512kB (M) 2*1024kB (U) 0*2048kB 0*4096kB = 143740kB [ 2834.729817] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2834.744763] Node 1 Normal: 245*4kB (UME) 341*8kB (UME) 61*16kB (UME) 30*32kB (UME) 751*64kB (UME) 81*128kB (UME) 108*256kB (UM) 23*512kB (UME) 7*1024kB (UM) 10*2048kB (U) 0*4096kB = 131148kB [ 2834.755265] Free swap = 0kB [ 2834.764674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2834.768112] lowmem_reserve[]: [ 2834.775345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2834.794705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2834.804546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2834.816040] 72685 total pagecache pages [ 2834.817031] 0 0 0 0 0 [ 2834.820500] 0 pages in swap cache [ 2834.822538] Node 0 [ 2834.826023] Swap cache stats: add 0, delete 0, find 0/0 [ 2834.826027] Free swap = 0kB [ 2834.826030] Total swap = 0kB [ 2834.826037] 2097051 pages RAM [ 2834.826040] 0 pages HighMem/MovableOnly [ 2834.826044] 363840 pages reserved [ 2834.826051] 0 pages cma reserved [ 2834.832892] Total swap = 0kB [ 2834.865343] DMA: 7*4kB (U) 2*8kB (U) 7*16kB (U) 7*32kB (U) 2*64kB (U) 4*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11516kB [ 2834.882633] Node 0 DMA32: 48*4kB (E) 7*8kB (UE) 83*16kB (ME) 16*32kB (UME) 1012*64kB (UM) 302*128kB (UM) 34*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 114728kB [ 2834.910616] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2834.919001] chnl_net:caif_netlink_parms(): no params data found [ 2834.930918] Node 1 Normal: 245*4kB (UME) 341*8kB (UME) 61*16kB (UME) 30*32kB (UME) 751*64kB (UME) 81*128kB (UME) 108*256kB (UM) 23*512kB (UME) 7*1024kB (UM) 10*2048kB (U) 0*4096kB = 131148kB [ 2834.934555] 2097051 pages RAM [ 2834.953177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2834.978254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2834.992124] 0 pages HighMem/MovableOnly [ 2834.996908] 363840 pages reserved [ 2835.000364] 0 pages cma reserved [ 2835.001595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2835.048862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2835.069270] 73462 total pagecache pages [ 2835.099687] 0 pages in swap cache [ 2835.107969] Swap cache stats: add 0, delete 0, find 0/0 [ 2835.130400] Free swap = 0kB [ 2835.141602] Total swap = 0kB [ 2835.156637] 2097051 pages RAM [ 2835.159816] 0 pages HighMem/MovableOnly [ 2835.178984] 363840 pages reserved [ 2835.182461] 0 pages cma reserved [ 2835.194382] Out of memory: Kill process 32259 (syz-executor.4) score 1004 or sacrifice child [ 2835.231648] Killed process 32260 (syz-executor.4) total-vm:93480kB, anon-rss:168kB, file-rss:34816kB, shmem-rss:0kB [ 2835.264061] chnl_net:caif_netlink_parms(): no params data found [ 2835.303181] oom_reaper: reaped process 32260 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2835.383080] bridge0: port 1(bridge_slave_0) entered blocking state [ 2835.396275] bridge0: port 1(bridge_slave_0) entered disabled state [ 2835.405569] device bridge_slave_0 entered promiscuous mode [ 2835.413072] bridge0: port 2(bridge_slave_1) entered blocking state 12:09:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:09:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x2, 0x604}, 0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) [ 2835.431084] bridge0: port 2(bridge_slave_1) entered disabled state [ 2835.449466] device bridge_slave_1 entered promiscuous mode [ 2835.542257] bridge0: port 1(bridge_slave_0) entered blocking state [ 2835.550858] bridge0: port 1(bridge_slave_0) entered disabled state [ 2835.567468] device bridge_slave_0 entered promiscuous mode [ 2835.584342] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2835.595116] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2835.610230] bridge0: port 2(bridge_slave_1) entered blocking state [ 2835.620041] bridge0: port 2(bridge_slave_1) entered disabled state [ 2835.627907] device bridge_slave_1 entered promiscuous mode [ 2835.746284] Bluetooth: hci5 command 0x0419 tx timeout [ 2835.751681] Bluetooth: hci3 command 0x0419 tx timeout [ 2835.819591] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2835.847358] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2835.858164] CPU: 1 PID: 32535 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2835.866069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2835.875423] Call Trace: [ 2835.878011] dump_stack+0x1b2/0x281 [ 2835.881642] warn_alloc.cold+0x96/0x1cc [ 2835.886920] ? zone_watermark_ok_safe+0x220/0x220 [ 2835.891770] __alloc_pages_nodemask+0x2127/0x2720 [ 2835.896614] ? lock_acquire+0x170/0x3f0 [ 2835.900583] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2835.905427] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2835.910874] ? __mutex_unlock_slowpath+0x75/0x770 [ 2835.915733] ? retint_kernel+0x2d/0x2d [ 2835.919906] alloc_pages_current+0x155/0x260 [ 2835.924764] ion_page_pool_alloc+0x118/0x1b0 [ 2835.929175] ion_system_heap_allocate+0x133/0x8c0 [ 2835.934101] ? ion_alloc+0x187/0x810 [ 2835.937810] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2835.943360] ? ion_system_contig_heap_create+0x130/0x130 [ 2835.948807] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2835.954096] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2835.958949] ion_alloc+0x204/0x810 [ 2835.962513] ? ion_dma_buf_release+0x40/0x40 [ 2835.966933] ? __might_fault+0x177/0x1b0 [ 2835.971006] ion_ioctl+0xea/0x1f0 [ 2835.974459] ? ion_query_heaps+0x360/0x360 [ 2835.978710] ? lock_acquire+0x170/0x3f0 [ 2835.982682] ? lock_downgrade+0x740/0x740 [ 2835.986840] ? ion_query_heaps+0x360/0x360 [ 2835.991083] do_vfs_ioctl+0x75a/0xff0 [ 2835.994877] ? ioctl_preallocate+0x1a0/0x1a0 [ 2835.999279] ? lock_downgrade+0x740/0x740 [ 2836.003422] ? __fget+0x225/0x360 [ 2836.006865] ? do_vfs_ioctl+0xff0/0xff0 [ 2836.010829] ? security_file_ioctl+0x83/0xb0 [ 2836.015231] SyS_ioctl+0x7f/0xb0 [ 2836.018610] ? do_vfs_ioctl+0xff0/0xff0 [ 2836.022708] do_syscall_64+0x1d5/0x640 [ 2836.026596] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2836.032213] RIP: 0033:0x45e219 [ 2836.035404] RSP: 002b:00007fb79db61c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2836.043120] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2836.050404] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2836.057666] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2836.064963] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2836.072250] R13: 00007ffdaed1160f R14: 00007fb79db629c0 R15: 000000000119bf8c [ 2836.115396] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2836.145314] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2836.156349] CPU: 1 PID: 32528 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2836.164248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2836.173600] Call Trace: [ 2836.176204] dump_stack+0x1b2/0x281 [ 2836.179845] warn_alloc.cold+0x96/0x1cc [ 2836.183818] ? zone_watermark_ok_safe+0x220/0x220 [ 2836.188684] __alloc_pages_nodemask+0x2127/0x2720 [ 2836.193538] ? __schedule+0x893/0x1de0 [ 2836.197439] ? lock_acquire+0x170/0x3f0 [ 2836.201427] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2836.206307] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2836.211811] ? __mutex_unlock_slowpath+0x75/0x770 [ 2836.216675] ? retint_kernel+0x2d/0x2d [ 2836.220578] alloc_pages_current+0x155/0x260 [ 2836.225002] ion_page_pool_alloc+0x118/0x1b0 [ 2836.229414] ion_system_heap_allocate+0x133/0x8c0 [ 2836.229745] warn_alloc_show_mem: 1 callbacks suppressed [ 2836.229749] Mem-Info: [ 2836.234262] ? ion_alloc+0x187/0x810 [ 2836.234273] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2836.234282] ? ion_system_contig_heap_create+0x130/0x130 [ 2836.234292] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2836.234304] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2836.234320] ion_alloc+0x204/0x810 [ 2836.234335] ? ion_dma_buf_release+0x40/0x40 [ 2836.234350] ? __might_fault+0x177/0x1b0 [ 2836.242709] active_anon:16506 inactive_anon:68984 isolated_anon:0 [ 2836.242709] active_file:37 inactive_file:36 isolated_file:30 [ 2836.242709] unevictable:0 dirty:29 writeback:0 unstable:0 [ 2836.242709] slab_reclaimable:12555 slab_unreclaimable:112839 [ 2836.242709] mapped:44177 shmem:70413 pagetables:784 bounce:0 [ 2836.242709] free:18859 free_pcp:60 free_cma:0 [ 2836.245813] ion_ioctl+0xea/0x1f0 [ 2836.245823] ? ion_query_heaps+0x360/0x360 [ 2836.245835] ? lock_acquire+0x170/0x3f0 [ 2836.245844] ? lock_downgrade+0x740/0x740 [ 2836.245851] ? ion_query_heaps+0x360/0x360 [ 2836.245862] do_vfs_ioctl+0x75a/0xff0 [ 2836.245874] ? ioctl_preallocate+0x1a0/0x1a0 [ 2836.245882] ? lock_downgrade+0x740/0x740 [ 2836.245896] ? __fget+0x225/0x360 [ 2836.245906] ? do_vfs_ioctl+0xff0/0xff0 [ 2836.245916] ? security_file_ioctl+0x83/0xb0 [ 2836.245927] SyS_ioctl+0x7f/0xb0 [ 2836.255735] Node 0 active_anon:64468kB inactive_anon:259676kB active_file:76kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:176648kB dirty:84kB writeback:0kB shmem:265264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2836.256819] ? do_vfs_ioctl+0xff0/0xff0 [ 2836.262011] Node 1 active_anon:1556kB inactive_anon:16260kB active_file:72kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:32kB writeback:0kB shmem:16388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2836.266940] do_syscall_64+0x1d5/0x640 [ 2836.266958] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2836.266966] RIP: 0033:0x45e219 [ 2836.266971] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2836.266980] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2836.266985] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2836.266990] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2836.267004] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2836.267010] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2836.269013] kworker/u4:5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 2836.272510] Node 0 [ 2836.275260] (null) [ 2836.294388] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2836.312587] , order=3, oom_score_adj=0 [ 2836.357812] lowmem_reserve[]: [ 2836.360432] kworker/u4:5 cpuset= [ 2836.396975] 0 [ 2836.422433] / [ 2836.428180] 2717 [ 2836.429318] mems_allowed=0-1 [ 2836.432466] 2718 [ 2836.440260] CPU: 1 PID: 3655 Comm: kworker/u4:5 Not tainted 4.14.217-syzkaller #0 [ 2836.440269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2836.451472] 2718 [ 2836.454827] Workqueue: events_unbound call_usermodehelper_exec_work [ 2836.454833] Call Trace: [ 2836.454851] dump_stack+0x1b2/0x281 [ 2836.454863] dump_header+0x178/0x82f [ 2836.454873] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2836.454885] ? ___ratelimit+0x2cd/0x530 [ 2836.462447] 2718 [ 2836.469428] oom_kill_process.cold+0x10/0xb18 [ 2836.469443] ? lock_downgrade+0x740/0x740 [ 2836.469460] out_of_memory+0x2dc/0x1190 [ 2836.469475] ? oom_killer_disable+0x1c0/0x1c0 [ 2836.469484] ? mutex_trylock+0x152/0x1a0 [ 2836.469495] __alloc_pages_nodemask+0x23e1/0x2720 [ 2836.469516] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2836.469524] ? fs_reclaim_release+0xd0/0x110 [ 2836.469544] ? kmem_cache_alloc_node+0x38b/0x410 [ 2836.469559] copy_process.part.0+0x265/0x71c0 [ 2836.469568] ? __lock_acquire+0x5fc/0x3f20 [ 2836.469583] ? debug_object_activate+0x292/0x490 [ 2836.469590] ? trace_hardirqs_on+0x10/0x10 [ 2836.469597] ? static_obj+0x50/0x50 [ 2836.469619] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2836.469626] ? __cleanup_sighand+0x40/0x40 [ 2836.486684] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2836.486695] _do_fork+0x184/0xc80 [ 2836.486705] ? fork_idle+0x270/0x270 [ 2836.486719] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2836.486727] ? process_one_work+0x6c4/0x14a0 [ 2836.486734] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2836.486742] kernel_thread+0x2f/0x40 [ 2836.486753] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2836.489018] Node 0 [ 2836.491123] ? call_usermodehelper+0x80/0x80 [ 2836.538201] DMA32 free:17776kB min:36200kB low:45248kB high:54296kB active_anon:64468kB inactive_anon:259676kB active_file:56kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2832kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2836.545384] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2836.545399] process_one_work+0x793/0x14a0 [ 2836.545413] ? work_busy+0x320/0x320 [ 2836.545419] ? worker_thread+0x158/0xff0 [ 2836.545429] ? _raw_spin_unlock_irq+0x24/0x80 [ 2836.545439] worker_thread+0x5cc/0xff0 [ 2836.545453] ? rescuer_thread+0xc80/0xc80 [ 2836.545468] kthread+0x30d/0x420 [ 2836.545476] ? kthread_create_on_node+0xd0/0xd0 [ 2836.545493] ret_from_fork+0x24/0x30 [ 2836.562113] lowmem_reserve[]: [ 2836.568322] Mem-Info: [ 2836.569605] 0 [ 2836.573294] active_anon:16517 inactive_anon:68985 isolated_anon:0 [ 2836.573294] active_file:16 inactive_file:16 isolated_file:0 [ 2836.573294] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2836.573294] slab_reclaimable:12555 slab_unreclaimable:112857 [ 2836.573294] mapped:44129 shmem:70414 pagetables:775 bounce:0 [ 2836.573294] free:13897 free_pcp:0 free_cma:0 [ 2836.582281] 0 [ 2836.584673] Node 0 active_anon:64468kB inactive_anon:259676kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176516kB dirty:0kB writeback:0kB shmem:265264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2836.588961] 0 [ 2836.593081] Node 1 active_anon:1600kB inactive_anon:16264kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2836.602081] 0 [ 2836.605739] Node 0 [ 2836.622919] 0 [ 2836.624760] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2836.633436] lowmem_reserve[]: [ 2836.654065] syz-executor.4: [ 2836.655833] 0 [ 2836.661226] page allocation failure: order:0 [ 2836.664701] 2717 2718 2718 2718 [ 2836.664716] Node 0 DMA32 free:17896kB min:36200kB low:45248kB high:54296kB active_anon:64468kB inactive_anon:259676kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2832kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2836.664736] lowmem_reserve[]: 0 0 0 0 0 [ 2836.664755] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2836.664777] lowmem_reserve[]: [ 2836.680461] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2836.688458] 0 [ 2836.732907] Node 0 [ 2836.739107] 0 [ 2836.760870] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2836.774140] 0 [ 2836.787146] (null) [ 2836.824733] 0 [ 2836.849681] lowmem_reserve[]: [ 2836.894246] 0 [ 2836.908751] syz-executor.4 cpuset= [ 2836.952155] 0 [ 2836.997777] Node 1 [ 2837.023237] / mems_allowed=0-1 [ 2837.044994] CPU: 0 PID: 32260 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2837.052882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2837.057286] Normal free:26724kB min:53696kB low:67120kB high:80544kB active_anon:1600kB inactive_anon:16264kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2837.062236] Call Trace: [ 2837.089881] lowmem_reserve[]: 0 0 [ 2837.092427] dump_stack+0x1b2/0x281 [ 2837.092442] warn_alloc.cold+0x96/0x1cc [ 2837.095914] 0 [ 2837.099517] ? zone_watermark_ok_safe+0x220/0x220 [ 2837.103484] 0 [ 2837.105291] ? usleep_range+0x130/0x130 [ 2837.105303] ? _find_next_bit+0xdb/0x100 [ 2837.105313] ? run_timer_softirq+0x5a0/0x5a0 [ 2837.105331] __alloc_pages_nodemask+0x2127/0x2720 [ 2837.105349] ? lock_acquire+0x170/0x3f0 [ 2837.110176] 0 [ 2837.111969] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2837.119968] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2837.124388] Node 0 [ 2837.129185] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2837.133128] DMA: [ 2837.134930] alloc_pages_current+0x155/0x260 [ 2837.134946] ion_page_pool_alloc+0x118/0x1b0 [ 2837.134960] ion_system_heap_allocate+0x133/0x8c0 [ 2837.139792] 0*4kB [ 2837.144279] ? ion_alloc+0x187/0x810 [ 2837.144290] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2837.144300] ? ion_system_contig_heap_create+0x130/0x130 [ 2837.144311] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2837.144324] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2837.146546] 1*8kB [ 2837.151984] ion_alloc+0x204/0x810 [ 2837.154030] (U) [ 2837.158448] ? ion_dma_buf_release+0x40/0x40 [ 2837.158460] ? __might_fault+0x177/0x1b0 [ 2837.158472] ion_ioctl+0xea/0x1f0 [ 2837.158482] ? ion_query_heaps+0x360/0x360 [ 2837.158494] ? lock_acquire+0x170/0x3f0 [ 2837.162900] 1*16kB [ 2837.167747] ? lock_downgrade+0x740/0x740 [ 2837.167758] ? ion_query_heaps+0x360/0x360 [ 2837.167768] do_vfs_ioctl+0x75a/0xff0 [ 2837.167780] ? ioctl_preallocate+0x1a0/0x1a0 [ 2837.167789] ? lock_downgrade+0x740/0x740 [ 2837.167805] ? __fget+0x225/0x360 [ 2837.169965] (U) [ 2837.173661] ? do_vfs_ioctl+0xff0/0xff0 [ 2837.179149] 0*32kB [ 2837.184541] ? security_file_ioctl+0x83/0xb0 [ 2837.184553] SyS_ioctl+0x7f/0xb0 [ 2837.184562] ? do_vfs_ioctl+0xff0/0xff0 [ 2837.184573] do_syscall_64+0x1d5/0x640 [ 2837.189578] 1*64kB [ 2837.194431] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2837.194440] RIP: 0033:0x45e219 [ 2837.194445] RSP: 002b:00007fd3ae418c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2837.194454] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2837.194462] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2837.196598] (U) [ 2837.200114] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2837.200122] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2837.202076] 3*128kB [ 2837.206462] R13: 00007fffbf453d0f R14: 00007fd3ae4199c0 R15: 000000000119bf8c [ 2837.212853] 0 [ 2837.213994] (U) [ 2837.218264] 0 0 0 [ 2837.218278] Node 1 Normal free:26724kB min:53696kB low:67120kB high:80544kB active_anon:1600kB inactive_anon:16264kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2837.218300] lowmem_reserve[]: 0 0 0 0 0 [ 2837.218321] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 3*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10968kB [ 2837.218396] Node 0 DMA32: 688*4kB (UME) 249*8kB (UME) 164*16kB (UME) 47*32kB (UME) 29*64kB (UMH) 8*128kB (M) 24*256kB (UM) [ 2837.249335] 1*256kB [ 2837.251939] 0*512kB [ 2837.273917] (U) [ 2837.283318] 0*1024kB [ 2837.310542] 0*512kB [ 2837.318554] 0*2048kB [ 2837.336237] 2*1024kB [ 2837.352796] 0*4096kB [ 2837.386880] (U) [ 2837.410910] warn_alloc_show_mem: 1 callbacks suppressed [ 2837.410914] Mem-Info: [ 2837.431296] 2*2048kB (UM) 1*4096kB (E) = 10968kB [ 2837.434070] = 17896kB [ 2837.438537] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2837.451480] Node 0 DMA32: 688*4kB (UME) 249*8kB (UME) 164*16kB (UME) 49*32kB (UME) 29*64kB (UMH) 8*128kB (M) 24*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17960kB [ 2837.457440] active_anon:16517 inactive_anon:68985 isolated_anon:0 [ 2837.457440] active_file:12 inactive_file:7 isolated_file:0 [ 2837.457440] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2837.457440] slab_reclaimable:12555 slab_unreclaimable:112857 [ 2837.457440] mapped:44129 shmem:70414 pagetables:775 bounce:0 [ 2837.457440] free:13897 free_pcp:12 free_cma:0 [ 2837.482875] Node 0 [ 2837.505335] Node 1 Normal: 34*4kB (ME) 22*8kB (ME) 22*16kB (UME) 15*32kB (UME) 14*64kB (UME) 7*128kB (UME) 3*256kB (M) 1*512kB (E) 2*1024kB (UM) 10*2048kB (U) 0*4096kB = 26744kB [ 2837.527912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2837.540663] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2837.543577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2837.570198] Node 0 active_anon:64468kB inactive_anon:259676kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176516kB dirty:0kB writeback:0kB shmem:265264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2837.579444] Node 1 [ 2837.608954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2837.616655] Normal: 34*4kB (ME) 22*8kB (ME) 22*16kB (UME) 15*32kB (UME) 14*64kB (UME) 7*128kB (UME) 3*256kB (M) 1*512kB (E) 2*1024kB (UM) 10*2048kB (U) 0*4096kB = 26744kB [ 2837.624048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2837.650571] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2837.658638] Node 1 active_anon:1600kB inactive_anon:16264kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2837.667510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2837.700871] 70446 total pagecache pages [ 2837.709453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2837.711164] 0 pages in swap cache [ 2837.732576] Swap cache stats: add 0, delete 0, find 0/0 [ 2837.737463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2837.740287] Node 0 [ 2837.761419] 70446 total pagecache pages [ 2837.761612] Free swap = 0kB [ 2837.763681] 0 pages in swap cache [ 2837.773673] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2837.792506] Swap cache stats: add 0, delete 0, find 0/0 [ 2837.818820] Free swap = 0kB [ 2837.819619] Total swap = 0kB [ 2837.821861] Total swap = 0kB [ 2837.831148] 2097051 pages RAM [ 2837.838428] 2097051 pages RAM [ 2837.840660] 0 pages HighMem/MovableOnly [ 2837.841539] 0 pages HighMem/MovableOnly [ 2837.851712] 363840 pages reserved [ 2837.861720] 0 pages cma reserved [ 2837.862106] 363840 pages reserved [ 2837.873459] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2837.877059] 0 pages cma reserved [ 2837.881877] Out of memory: Kill process 32527 (syz-executor.3) score 1004 or sacrifice child [ 2837.892869] Node 0 DMA32 free:17960kB min:36200kB low:45248kB high:54296kB active_anon:64468kB inactive_anon:259676kB active_file:148kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2832kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 2837.906680] Killed process 32527 (syz-executor.3) total-vm:93348kB, anon-rss:112kB, file-rss:33776kB, shmem-rss:0kB [ 2837.938583] lowmem_reserve[]: 0 0 0 0 0 [ 2837.942636] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2837.968347] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2837.982470] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2837.982825] syz-executor.3: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 2838.010333] lowmem_reserve[]: [ 2838.032646] syz-executor.3 cpuset= [ 2838.038862] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2838.042619] / mems_allowed=0-1 [ 2838.062458] in:imklog cpuset=/ [ 2838.063703] CPU: 1 PID: 32527 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2838.063710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2838.073201] 0 [ 2838.074797] Call Trace: [ 2838.074819] dump_stack+0x1b2/0x281 [ 2838.074831] warn_alloc.cold+0x96/0x1cc [ 2838.074841] ? zone_watermark_ok_safe+0x220/0x220 [ 2838.074849] ? usleep_range+0x130/0x130 [ 2838.074857] ? try_to_free_pages+0x23f/0x6e0 [ 2838.074865] ? _find_next_bit+0xdb/0x100 [ 2838.074874] ? run_timer_softirq+0x5a0/0x5a0 [ 2838.074889] __alloc_pages_nodemask+0x2127/0x2720 [ 2838.074910] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2838.074932] alloc_pages_current+0x155/0x260 [ 2838.098833] mems_allowed=0-1 [ 2838.101057] filemap_fault+0xea3/0x1980 [ 2838.138957] ext4_filemap_fault+0x84/0xb0 [ 2838.143103] __do_fault+0xfa/0x380 [ 2838.146637] __handle_mm_fault+0x2497/0x4620 [ 2838.150628] 0 0 0 [ 2838.151051] ? vm_insert_page+0x7c0/0x7c0 [ 2838.151063] ? free_object+0xe4/0x240 [ 2838.153201] 0 [ 2838.157344] handle_mm_fault+0x391/0x860 [ 2838.157356] __do_page_fault+0x549/0xad0 [ 2838.157367] ? spurious_fault+0x640/0x640 [ 2838.157375] ? do_page_fault+0x60/0x500 [ 2838.157385] ? page_fault+0x2f/0x50 [ 2838.157391] page_fault+0x45/0x50 [ 2838.157399] RIP: 119ca00:0x3e8 [ 2838.157403] RSP: 2b45cf:0000000000000001 EFLAGS: 0119ca00 [ 2838.195568] CPU: 0 PID: 32535 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2838.208989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2838.218609] Call Trace: [ 2838.221206] dump_stack+0x1b2/0x281 [ 2838.224838] warn_alloc.cold+0x96/0x1cc [ 2838.228825] ? zone_watermark_ok_safe+0x220/0x220 [ 2838.233676] ? usleep_range+0x130/0x130 [ 2838.237652] ? try_to_free_pages+0x23f/0x6e0 [ 2838.242064] ? _find_next_bit+0xdb/0x100 [ 2838.246138] ? run_timer_softirq+0x5a0/0x5a0 [ 2838.250571] __alloc_pages_nodemask+0x2127/0x2720 [ 2838.255423] ? lock_acquire+0x170/0x3f0 [ 2838.259397] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2838.264233] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2838.268731] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2838.274190] ? retint_kernel+0x2d/0x2d [ 2838.278078] alloc_pages_current+0x155/0x260 [ 2838.282507] ion_page_pool_alloc+0x118/0x1b0 [ 2838.286908] ion_system_heap_allocate+0x133/0x8c0 [ 2838.291745] ? ion_alloc+0x187/0x810 [ 2838.295454] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2838.300898] ? ion_system_contig_heap_create+0x130/0x130 [ 2838.306341] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2838.311366] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2838.316203] ion_alloc+0x204/0x810 [ 2838.319741] ? ion_dma_buf_release+0x40/0x40 [ 2838.324142] ? __might_fault+0x177/0x1b0 [ 2838.328458] ion_ioctl+0xea/0x1f0 [ 2838.331902] ? ion_query_heaps+0x360/0x360 [ 2838.336146] ? lock_acquire+0x170/0x3f0 [ 2838.340110] ? lock_downgrade+0x740/0x740 [ 2838.344249] ? ion_query_heaps+0x360/0x360 [ 2838.348476] do_vfs_ioctl+0x75a/0xff0 [ 2838.352273] ? ioctl_preallocate+0x1a0/0x1a0 [ 2838.356671] ? lock_downgrade+0x740/0x740 [ 2838.360813] ? __fget+0x225/0x360 [ 2838.364261] ? do_vfs_ioctl+0xff0/0xff0 [ 2838.368237] ? security_file_ioctl+0x83/0xb0 [ 2838.372666] SyS_ioctl+0x7f/0xb0 [ 2838.376036] ? do_vfs_ioctl+0xff0/0xff0 [ 2838.380005] do_syscall_64+0x1d5/0x640 [ 2838.383893] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2838.389081] RIP: 0033:0x45e219 [ 2838.392273] RSP: 002b:00007fb79db61c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2838.399975] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2838.407256] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2838.414528] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2838.421809] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2838.429081] R13: 00007ffdaed1160f R14: 00007fb79db629c0 R15: 000000000119bf8c [ 2838.441811] CPU: 0 PID: 32477 Comm: in:imklog Not tainted 4.14.217-syzkaller #0 [ 2838.449278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2838.458635] Call Trace: [ 2838.461248] dump_stack+0x1b2/0x281 [ 2838.464875] dump_header+0x178/0x82f [ 2838.468601] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2838.473713] ? ___ratelimit+0x2cd/0x530 [ 2838.474369] warn_alloc_show_mem: 1 callbacks suppressed [ 2838.474373] Mem-Info: [ 2838.477695] oom_kill_process.cold+0x10/0xb18 [ 2838.483071] active_anon:16517 inactive_anon:68985 isolated_anon:0 [ 2838.483071] active_file:22 inactive_file:0 isolated_file:0 [ 2838.483071] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2838.483071] slab_reclaimable:12547 slab_unreclaimable:112837 [ 2838.483071] mapped:44129 shmem:70414 pagetables:775 bounce:0 [ 2838.483071] free:13918 free_pcp:10 free_cma:0 [ 2838.485460] out_of_memory+0xe3e/0x1190 [ 2838.485472] ? oom_killer_disable+0x1c0/0x1c0 [ 2838.485481] ? mutex_trylock+0x152/0x1a0 [ 2838.485491] __alloc_pages_nodemask+0x23e1/0x2720 [ 2838.485511] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2838.490003] Node 0 active_anon:64468kB inactive_anon:259676kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176516kB dirty:0kB writeback:0kB shmem:265264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2838.523053] alloc_pages_current+0x155/0x260 [ 2838.523067] filemap_fault+0xea3/0x1980 [ 2838.523091] ext4_filemap_fault+0x84/0xb0 [ 2838.527091] Node 1 active_anon:1600kB inactive_anon:16264kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2838.531529] __do_fault+0xfa/0x380 [ 2838.535594] Node 0 [ 2838.540396] __handle_mm_fault+0x2497/0x4620 [ 2838.545265] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2838.572996] ? vm_insert_page+0x7c0/0x7c0 [ 2838.573007] ? lock_downgrade+0x740/0x740 [ 2838.573029] handle_mm_fault+0x391/0x860 [ 2838.577455] lowmem_reserve[]: [ 2838.581401] __do_page_fault+0x549/0xad0 [ 2838.585576] 0 [ 2838.612280] ? spurious_fault+0x640/0x640 [ 2838.612289] ? do_page_fault+0x60/0x500 [ 2838.612299] ? page_fault+0x2f/0x50 [ 2838.612311] page_fault+0x45/0x50 [ 2838.615863] 2717 [ 2838.618063] RIP: 1fa0:0x1f9f [ 2838.622458] 2718 [ 2838.647948] RSP: 0000:00005579786959d0 EFLAGS: 7f4deacf2da0 [ 2838.675798] 2718 [ 2838.689794] Mem-Info: [ 2838.710772] active_anon:16517 inactive_anon:68985 isolated_anon:0 [ 2838.710772] active_file:16 inactive_file:16 isolated_file:0 [ 2838.710772] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2838.710772] slab_reclaimable:12547 slab_unreclaimable:112837 [ 2838.710772] mapped:44129 shmem:70414 pagetables:775 bounce:0 [ 2838.710772] free:13926 free_pcp:24 free_cma:0 [ 2838.712364] 2718 [ 2838.748038] Node 1 Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:1600kB inactive_anon:16264kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2838.782698] Node 0 active_anon:64468kB inactive_anon:259676kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176516kB dirty:0kB writeback:0kB shmem:265264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2838.800738] Node 0 [ 2838.814806] lowmem_reserve[]: 0 0 0 0 0 [ 2838.821058] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 3*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10968kB [ 2838.833265] DMA32 free:17960kB min:36200kB low:45248kB high:54296kB active_anon:64468kB inactive_anon:259676kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2832kB bounce:0kB free_pcp:96kB local_pcp:40kB free_cma:0kB [ 2838.838682] Node 1 active_anon:1600kB inactive_anon:16264kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2838.885405] lowmem_reserve[]: 0 0 0 0 0 [ 2838.893907] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2838.894180] Node 0 DMA32: 688*4kB (UME) 251*8kB (UME) 164*16kB (UME) 49*32kB (UME) 29*64kB (UMH) 8*128kB (M) 24*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17976kB [ 2838.942097] lowmem_reserve[]: 0 0 0 0 0 [ 2838.943055] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2838.963768] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2838.969439] Node 1 [ 2838.994290] Node 1 Normal: 34*4kB (ME) 22*8kB (ME) 22*16kB (UME) 16*32kB (UME) 14*64kB (UME) 7*128kB (UME) 3*256kB (M) 1*512kB (E) 2*1024kB (UM) 10*2048kB (U) 0*4096kB = 26776kB [ 2839.012304] Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:1600kB inactive_anon:16264kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2839.016655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2839.057857] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2839.062935] Node 0 DMA32 free:17960kB min:36200kB low:45248kB high:54296kB active_anon:64468kB inactive_anon:259676kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2832kB bounce:0kB free_pcp:96kB local_pcp:56kB free_cma:0kB [ 2839.068772] lowmem_reserve[]: [ 2839.096313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2839.110538] lowmem_reserve[]: 0 0 0 0 0 [ 2839.116714] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2839.117379] 0 [ 2839.156986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2839.157381] 0 [ 2839.158814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2839.175933] 0 0 0 [ 2839.180383] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 3*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10968kB [ 2839.190237] 70446 total pagecache pages [ 2839.209623] Node 0 DMA32: 688*4kB (UME) 251*8kB (UME) 164*16kB (UME) 50*32kB (UME) 29*64kB (UMH) 8*128kB (M) 24*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 2839.211055] lowmem_reserve[]: [ 2839.231632] 0 pages in swap cache [ 2839.238368] Swap cache stats: add 0, delete 0, find 0/0 [ 2839.241186] Node 0 [ 2839.243724] Free swap = 0kB [ 2839.243733] Normal: [ 2839.252403] 0 0 0 0 0 [ 2839.257325] Node 1 Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:1600kB inactive_anon:16264kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2839.257719] 0*4kB [ 2839.292320] Total swap = 0kB [ 2839.297564] 2097051 pages RAM [ 2839.300660] 0 pages HighMem/MovableOnly [ 2839.303122] 0*8kB [ 2839.307108] 363840 pages reserved [ 2839.312708] 0 pages cma reserved [ 2839.315023] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2839.324455] Node 1 [ 2839.334535] lowmem_reserve[]: 0 0 0 0 0 [ 2839.341797] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2839.360484] team0: Port device team_slave_0 added [ 2839.366633] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 3*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10968kB [ 2839.367024] Normal: 3*4kB (UME) 2*8kB (ME) 3*16kB (UME) 2*32kB (UE) 3*64kB (UME) 4*128kB (UME) 3*256kB (UM) 3*512kB (UE) 112*1024kB (UM) 16*2048kB (U) 0*4096kB = 150604kB [ 2839.404816] Node 0 DMA32: 346*4kB (ME) 248*8kB (ME) 164*16kB (UME) 47*32kB (UME) 601*64kB (UMH) 8*128kB (M) 24*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53128kB [ 2839.456012] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2839.480145] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2839.495512] team0: Port device team_slave_1 added [ 2839.512593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2839.514359] Node 0 [ 2839.530490] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2839.554652] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2839.561657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2839.622473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2839.637422] Node 1 Normal: 3*4kB (UME) 2*8kB (ME) 3*16kB (UME) 2*32kB (UE) 1434*64kB (UME) 115*128kB (UME) 13*256kB (UM) 11*512kB (UE) 155*1024kB (UM) 15*2048kB (U) 1*4096kB (U) = 309132kB [ 2839.657081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2839.685012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2839.691270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2839.718051] 72343 total pagecache pages [ 2839.738769] 0 pages in swap cache [ 2839.742274] Swap cache stats: add 0, delete 0, find 0/0 [ 2839.746445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2839.747960] Free swap = 0kB [ 2839.784617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2839.784625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2839.784630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2839.784634] 72343 total pagecache pages [ 2839.784644] 0 pages in swap cache [ 2839.784649] Swap cache stats: add 0, delete 0, find 0/0 [ 2839.784652] Free swap = 0kB [ 2839.784655] Total swap = 0kB [ 2839.784662] 2097051 pages RAM [ 2839.784666] 0 pages HighMem/MovableOnly [ 2839.784669] 363840 pages reserved [ 2839.784679] 0 pages cma reserved [ 2839.784686] Out of memory (oom_kill_allocating_task): Kill process 32477 (in:imklog) score 0 or sacrifice child [ 2839.784745] Killed process 32319 (rsyslogd) total-vm:254332kB, anon-rss:880kB, file-rss:308kB, shmem-rss:0kB [ 2839.793366] Total swap = 0kB [ 2839.873634] oom_reaper: reaped process 32527 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2839.904701] 2097051 pages RAM [ 2839.907848] 0 pages HighMem/MovableOnly [ 2839.911823] 363840 pages reserved [ 2839.915373] 0 pages cma reserved [ 2839.922889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2839.966707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2839.972982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2840.009797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2840.037953] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2840.066779] team0: Port device team_slave_0 added [ 2840.073064] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2840.090182] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2840.098712] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2840.120081] team0: Port device team_slave_1 added [ 2840.238344] device hsr_slave_0 entered promiscuous mode [ 2840.279666] device hsr_slave_1 entered promiscuous mode [ 2840.313620] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2840.321175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2840.339061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2840.368492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2840.395555] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2840.442718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2840.453422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2840.484250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2840.537405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2840.557535] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2840.680958] device hsr_slave_0 entered promiscuous mode [ 2840.708940] device hsr_slave_1 entered promiscuous mode [ 2840.740010] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2840.815872] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2841.039289] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 12:09:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:09:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) [ 2841.194127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2841.252699] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2841.277550] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2841.314565] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2841.355681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2841.365745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2841.400744] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2841.424636] 8021q: adding VLAN 0 to HW filter on device team0 [ 2841.466543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2841.493935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2841.510534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2841.539679] bridge0: port 1(bridge_slave_0) entered blocking state [ 2841.546112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2841.603574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2841.621216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2841.642724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2841.659548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2841.693410] bridge0: port 2(bridge_slave_1) entered blocking state [ 2841.699855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2841.763745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2841.771032] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2841.800971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2841.811710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2841.834734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2841.837360] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2841.839927] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2841.842800] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2841.842808] 8021q: adding VLAN 0 to HW filter on device team0 [ 2841.891661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2841.901681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2841.903450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2841.914197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2841.918449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2842.015080] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2842.022813] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2842.044900] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2842.045053] syz-executor.3 cpuset= [ 2842.050126] CPU: 0 PID: 32260 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2842.060390] / [ 2842.061548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2842.063796] mems_allowed=0-1 [ 2842.072619] Call Trace: [ 2842.072643] dump_stack+0x1b2/0x281 [ 2842.072657] warn_alloc.cold+0x96/0x1cc [ 2842.072669] ? zone_watermark_ok_safe+0x220/0x220 [ 2842.072694] __alloc_pages_nodemask+0x2127/0x2720 [ 2842.095588] ? io_schedule_timeout+0x140/0x140 [ 2842.100175] ? lock_acquire+0x170/0x3f0 [ 2842.104167] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2842.109046] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2842.114502] ? __mutex_unlock_slowpath+0x75/0x770 [ 2842.119364] alloc_pages_current+0x155/0x260 [ 2842.123778] ion_page_pool_alloc+0x118/0x1b0 [ 2842.128181] ion_system_heap_allocate+0x133/0x8c0 [ 2842.133029] ? _raw_spin_unlock+0x29/0x40 [ 2842.137183] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2842.142110] ? ion_system_contig_heap_create+0x130/0x130 [ 2842.147572] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2842.152586] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2842.157429] ion_alloc+0x27a/0x810 [ 2842.160971] ? ion_dma_buf_release+0x40/0x40 [ 2842.165373] ? __might_fault+0x177/0x1b0 [ 2842.169429] ion_ioctl+0xea/0x1f0 [ 2842.172878] ? ion_query_heaps+0x360/0x360 [ 2842.177113] ? lock_acquire+0x170/0x3f0 [ 2842.181085] ? lock_downgrade+0x740/0x740 [ 2842.185227] ? ion_query_heaps+0x360/0x360 [ 2842.189458] do_vfs_ioctl+0x75a/0xff0 [ 2842.193258] ? ioctl_preallocate+0x1a0/0x1a0 [ 2842.197662] ? lock_downgrade+0x740/0x740 [ 2842.201831] ? __fget+0x225/0x360 [ 2842.205306] ? do_vfs_ioctl+0xff0/0xff0 [ 2842.209280] ? security_file_ioctl+0x83/0xb0 [ 2842.213692] SyS_ioctl+0x7f/0xb0 [ 2842.217057] ? do_vfs_ioctl+0xff0/0xff0 [ 2842.221026] do_syscall_64+0x1d5/0x640 [ 2842.224925] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2842.230108] RIP: 0033:0x45e219 [ 2842.233286] RSP: 002b:00007fd3ae418c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2842.240990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2842.248254] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2842.255516] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2842.262955] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2842.270216] R13: 00007fffbf453d0f R14: 00007fd3ae4199c0 R15: 000000000119bf8c [ 2842.282129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2842.291772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2842.298938] Mem-Info: [ 2842.300344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2842.301366] active_anon:16358 inactive_anon:68982 isolated_anon:0 [ 2842.301366] active_file:2347 inactive_file:2205 isolated_file:19 [ 2842.301366] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2842.301366] slab_reclaimable:12480 slab_unreclaimable:115458 [ 2842.301366] mapped:48007 shmem:70410 pagetables:754 bounce:0 [ 2842.301366] free:231053 free_pcp:64 free_cma:0 [ 2842.301385] Node 0 active_anon:64940kB inactive_anon:259668kB active_file:9384kB inactive_file:8796kB unevictable:0kB isolated(anon):0kB isolated(file):76kB mapped:192024kB dirty:72kB writeback:0kB shmem:265252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2842.313825] CPU: 1 PID: 32689 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2842.342875] Node 1 active_anon:492kB inactive_anon:16260kB active_file:4kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:28kB writeback:0kB shmem:16388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2842.370645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2842.370651] Call Trace: [ 2842.370673] dump_stack+0x1b2/0x281 [ 2842.370686] warn_alloc.cold+0x96/0x1cc [ 2842.370697] ? zone_watermark_ok_safe+0x220/0x220 [ 2842.370719] __alloc_pages_nodemask+0x2127/0x2720 [ 2842.370734] ? lock_acquire+0x170/0x3f0 [ 2842.370750] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2842.370766] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2842.370778] ? __mutex_unlock_slowpath+0x75/0x770 [ 2842.378684] Node 0 [ 2842.405901] alloc_pages_current+0x155/0x260 [ 2842.405917] ion_page_pool_alloc+0x118/0x1b0 [ 2842.405928] ion_system_heap_allocate+0x133/0x8c0 [ 2842.405938] ? ion_alloc+0x187/0x810 [ 2842.405948] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2842.405957] ? ion_system_contig_heap_create+0x130/0x130 [ 2842.405966] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2842.405976] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2842.405987] ion_alloc+0x204/0x810 [ 2842.406000] ? ion_dma_buf_release+0x40/0x40 [ 2842.406012] ? __might_fault+0x177/0x1b0 [ 2842.435151] DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2842.435247] ion_ioctl+0xea/0x1f0 [ 2842.439197] lowmem_reserve[]: [ 2842.444036] ? ion_query_heaps+0x360/0x360 [ 2842.475135] 0 [ 2842.479373] ? lock_acquire+0x170/0x3f0 [ 2842.484803] 2717 [ 2842.490077] ? lock_downgrade+0x740/0x740 [ 2842.490088] ? ion_query_heaps+0x360/0x360 [ 2842.490098] do_vfs_ioctl+0x75a/0xff0 [ 2842.490111] ? ioctl_preallocate+0x1a0/0x1a0 [ 2842.490118] ? lock_downgrade+0x740/0x740 [ 2842.490131] ? __fget+0x225/0x360 [ 2842.490144] ? do_vfs_ioctl+0xff0/0xff0 [ 2842.515146] 2718 [ 2842.532533] ? security_file_ioctl+0x83/0xb0 [ 2842.532550] SyS_ioctl+0x7f/0xb0 [ 2842.532560] ? do_vfs_ioctl+0xff0/0xff0 [ 2842.532570] do_syscall_64+0x1d5/0x640 [ 2842.532587] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2842.565154] 2718 [ 2842.567667] RIP: 0033:0x45e219 [ 2842.571795] 2718 [ 2842.575239] RSP: 002b:00007fb79db61c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2842.575249] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2842.575254] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2842.575259] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2842.575263] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2842.575269] R13: 00007ffdaed1160f R14: 00007fb79db629c0 R15: 000000000119bf8c [ 2842.583918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2842.615347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2842.632341] Node 0 [ 2842.651283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2842.675229] DMA32 free:1007192kB min:36200kB low:45248kB high:54296kB active_anon:64904kB inactive_anon:259668kB active_file:8972kB inactive_file:8868kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2892kB bounce:0kB free_pcp:164kB local_pcp:28kB free_cma:0kB [ 2842.684432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2842.720281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2842.729619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2842.741950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2842.745232] lowmem_reserve[]: 0 0 0 0 0 [ 2842.752189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2842.761210] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2842.761235] lowmem_reserve[]: 0 0 0 0 0 [ 2842.761256] Node 1 Normal free:182908kB min:53696kB low:67120kB high:80544kB active_anon:492kB inactive_anon:16260kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2842.761281] lowmem_reserve[]: [ 2842.794472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2842.836159] bridge0: port 1(bridge_slave_0) entered blocking state [ 2842.842576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2842.855345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2842.863570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2842.875194] 0 0 0 0 0 [ 2842.877733] Node 0 DMA: 4*4kB (U) 11*8kB (U) 7*16kB (U) 8*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11032kB [ 2842.878995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2842.904802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2842.912420] Node 0 DMA32: 30*4kB (UEH) 9*8kB (UEH) 4149*16kB (UEH) 5942*32kB (UEH) 6397*64kB (UMH) 1364*128kB (UMH) 196*256kB (UMH) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 892432kB [ 2842.913756] bridge0: port 2(bridge_slave_1) entered blocking state [ 2842.935672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2842.945632] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2842.949952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2842.965476] Node 1 Normal: 201*4kB (UM) 627*8kB (UM) 512*16kB (UM) 338*32kB (UM) 1050*64kB (UM) 4*128kB (UM) 1*256kB (M) 2*512kB (M) 51*1024kB (U) 14*2048kB (U) 2*4096kB (U) = 182908kB [ 2842.966764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2842.994605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2843.002580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2843.003822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2843.024127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2843.040515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2843.045617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2843.058488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2843.071943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2843.096735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2843.115778] 75713 total pagecache pages [ 2843.115828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2843.119887] 0 pages in swap cache [ 2843.119894] Swap cache stats: add 0, delete 0, find 0/0 [ 2843.119898] Free swap = 0kB [ 2843.119901] Total swap = 0kB [ 2843.119908] 2097051 pages RAM [ 2843.149900] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2843.167701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2843.175544] 0 pages HighMem/MovableOnly [ 2843.179538] 363840 pages reserved [ 2843.182989] 0 pages cma reserved [ 2843.216044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2843.232185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2843.267467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2843.305990] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2843.319778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2843.329815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2843.351203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2843.377608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2843.410923] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2843.430712] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2843.442477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2843.477170] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2843.485915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2843.493894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2843.516446] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2843.554281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2843.567532] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2843.603368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2843.611442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2843.634656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2843.819000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2843.832738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2843.863189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2843.891495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2843.921116] device bridge_slave_1 left promiscuous mode [ 2843.953780] bridge0: port 2(bridge_slave_1) entered disabled state [ 2843.976472] device bridge_slave_0 left promiscuous mode [ 2843.984139] bridge0: port 1(bridge_slave_0) entered disabled state [ 2844.030145] device veth1_macvtap left promiscuous mode [ 2844.054305] device veth0_macvtap left promiscuous mode [ 2844.076190] device veth1_vlan left promiscuous mode [ 2844.091019] device veth0_vlan left promiscuous mode [ 2844.198662] oom_reaper: reaped process 32528 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2844.216141] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2844.233724] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2844.239057] CPU: 1 PID: 32528 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2844.244681] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask= [ 2844.246951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2844.246955] Call Trace: [ 2844.246975] dump_stack+0x1b2/0x281 [ 2844.246989] warn_alloc.cold+0x96/0x1cc [ 2844.247002] ? zone_watermark_ok_safe+0x220/0x220 [ 2844.247012] ? usleep_range+0x130/0x130 [ 2844.247022] ? try_to_free_pages+0x23f/0x6e0 [ 2844.247037] ? _find_next_bit+0xdb/0x100 [ 2844.264195] (null) [ 2844.266474] ? run_timer_softirq+0x5a0/0x5a0 [ 2844.266492] __alloc_pages_nodemask+0x2127/0x2720 [ 2844.266510] ? lock_acquire+0x170/0x3f0 [ 2844.266526] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2844.269100] , order=0, oom_score_adj=0 [ 2844.272725] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2844.282898] rs:main Q:Reg cpuset= [ 2844.285461] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2844.285483] alloc_pages_current+0x155/0x260 [ 2844.285499] ion_page_pool_alloc+0x118/0x1b0 [ 2844.289889] / [ 2844.293943] ion_system_heap_allocate+0x133/0x8c0 [ 2844.293955] ? ion_alloc+0x187/0x810 [ 2844.293966] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2844.302471] mems_allowed=0-1 [ 2844.305856] ? ion_system_contig_heap_create+0x130/0x130 [ 2844.305868] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2844.305880] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2844.305891] ion_alloc+0x204/0x810 [ 2844.305907] ? ion_dma_buf_release+0x40/0x40 [ 2844.305919] ? __might_fault+0x177/0x1b0 [ 2844.388025] ion_ioctl+0xea/0x1f0 [ 2844.391478] ? ion_query_heaps+0x360/0x360 [ 2844.395710] ? lock_acquire+0x170/0x3f0 [ 2844.399682] ? lock_downgrade+0x740/0x740 [ 2844.403828] ? ion_query_heaps+0x360/0x360 [ 2844.408059] do_vfs_ioctl+0x75a/0xff0 [ 2844.411878] ? ioctl_preallocate+0x1a0/0x1a0 [ 2844.416314] ? lock_downgrade+0x740/0x740 [ 2844.420475] ? __fget+0x225/0x360 [ 2844.423939] ? do_vfs_ioctl+0xff0/0xff0 [ 2844.427914] ? security_file_ioctl+0x83/0xb0 [ 2844.432412] SyS_ioctl+0x7f/0xb0 [ 2844.435802] ? do_vfs_ioctl+0xff0/0xff0 [ 2844.439781] do_syscall_64+0x1d5/0x640 [ 2844.443678] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2844.448864] RIP: 0033:0x45e219 [ 2844.452044] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2844.459778] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2844.467054] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2844.474327] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2844.481637] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2844.488913] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2844.501941] CPU: 0 PID: 32629 Comm: rs:main Q:Reg Not tainted 4.14.217-syzkaller #0 [ 2844.509854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2844.516334] warn_alloc_show_mem: 1 callbacks suppressed [ 2844.516338] Mem-Info: [ 2844.519212] Call Trace: [ 2844.524609] active_anon:16383 inactive_anon:68981 isolated_anon:0 [ 2844.524609] active_file:7 inactive_file:17 isolated_file:0 [ 2844.524609] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2844.524609] slab_reclaimable:12472 slab_unreclaimable:114273 [ 2844.524609] mapped:52914 shmem:70409 pagetables:803 bounce:0 [ 2844.524609] free:13943 free_pcp:60 free_cma:0 [ 2844.527009] dump_stack+0x1b2/0x281 [ 2844.527021] dump_header+0x178/0x82f [ 2844.527031] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2844.527040] ? ___ratelimit+0x2cd/0x530 [ 2844.527051] oom_kill_process.cold+0x10/0xb18 [ 2844.529650] Node 0 active_anon:65128kB inactive_anon:259668kB active_file:32kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211656kB dirty:0kB writeback:0kB shmem:265252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2844.562788] out_of_memory+0xe3e/0x1190 [ 2844.562801] ? oom_killer_disable+0x1c0/0x1c0 [ 2844.562809] ? mutex_trylock+0x152/0x1a0 [ 2844.562823] __alloc_pages_nodemask+0x23e1/0x2720 [ 2844.566549] Node 1 active_anon:404kB inactive_anon:16256kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2844.570224] ? trace_hardirqs_on+0x10/0x10 [ 2844.575390] Node 0 [ 2844.579365] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2844.579376] ? __radix_tree_lookup+0x1b5/0x2e0 [ 2844.579397] alloc_pages_current+0x155/0x260 [ 2844.579410] pagecache_get_page+0x3f5/0xab0 [ 2844.583909] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2844.612613] grab_cache_page_write_begin+0x63/0x90 [ 2844.612626] ext4_da_write_begin+0x249/0xe70 [ 2844.612636] ? __ext4_journal_stop+0xe7/0x1b0 [ 2844.612650] ? ext4_write_begin+0x1260/0x1260 [ 2844.616648] lowmem_reserve[]: [ 2844.621110] ? balance_dirty_pages_ratelimited+0x885/0x1800 [ 2844.625150] 0 [ 2844.630271] generic_perform_write+0x1c9/0x420 [ 2844.630290] ? __mnt_drop_write_file+0x5f/0x90 [ 2844.630297] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 2844.630312] ? current_time+0xb0/0xb0 [ 2844.656889] 2717 [ 2844.661091] ? ext4_file_write_iter+0x1cc/0xd20 [ 2844.663295] 2718 [ 2844.668128] __generic_file_write_iter+0x227/0x590 [ 2844.668140] ext4_file_write_iter+0x276/0xd20 [ 2844.668150] ? aa_file_perm+0x304/0xab0 [ 2844.668158] ? ext4_file_read_iter+0x330/0x330 [ 2844.668169] ? trace_hardirqs_on+0x10/0x10 [ 2844.672729] 2718 [ 2844.677135] ? iov_iter_init+0xa6/0x1c0 [ 2844.677145] __vfs_write+0x44c/0x630 [ 2844.677153] ? kernel_read+0x110/0x110 [ 2844.677172] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2844.677182] vfs_write+0x17f/0x4d0 [ 2844.681482] 2718 [ 2844.707008] SyS_write+0xf2/0x210 [ 2844.707017] ? SyS_read+0x210/0x210 [ 2844.707035] ? __do_page_fault+0x159/0xad0 [ 2844.707043] ? do_syscall_64+0x4c/0x640 [ 2844.707049] ? SyS_read+0x210/0x210 [ 2844.707057] do_syscall_64+0x1d5/0x640 [ 2844.707078] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2844.716498] RIP: 0033:0x7f44bb4c11cd [ 2844.716503] RSP: 002b:00007f44b8a7c590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2844.716512] RAX: ffffffffffffffda RBX: 00007f44b00254a0 RCX: 00007f44bb4c11cd [ 2844.716515] RDX: 00000000000000c5 RSI: 00007f44b00254a0 RDI: 0000000000000007 [ 2844.716519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2844.716523] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f44b0025220 [ 2844.716527] R13: 00007f44b8a7c5b0 R14: 000055a79abf6480 R15: 00000000000000c5 [ 2844.739660] Mem-Info: [ 2844.745584] syz-executor.4: [ 2844.748245] active_anon:16383 inactive_anon:68981 isolated_anon:0 [ 2844.748245] active_file:7 inactive_file:17 isolated_file:0 [ 2844.748245] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2844.748245] slab_reclaimable:12472 slab_unreclaimable:114273 [ 2844.748245] mapped:52914 shmem:70409 pagetables:803 bounce:0 [ 2844.748245] free:13943 free_pcp:59 free_cma:0 [ 2844.750618] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2844.754422] Node 0 active_anon:65128kB inactive_anon:259668kB active_file:32kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211656kB dirty:0kB writeback:0kB shmem:265252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2844.774850] (null) [ 2844.782885] Node 1 active_anon:404kB inactive_anon:16256kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2844.799483] syz-executor.4 cpuset= [ 2844.805875] Node 0 [ 2844.816178] Node 0 [ 2844.821268] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2844.821497] DMA32 free:17960kB min:36200kB low:45248kB high:54296kB active_anon:65128kB inactive_anon:259668kB active_file:32kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3088kB bounce:0kB free_pcp:116kB local_pcp:112kB free_cma:0kB [ 2844.825427] lowmem_reserve[]: [ 2844.842841] / [ 2844.855887] 0 [ 2844.870706] lowmem_reserve[]: [ 2844.877773] 2717 [ 2844.893552] 0 [ 2844.932115] 2718 [ 2844.950234] mems_allowed=0-1 [ 2844.973109] 2718 [ 2845.001714] CPU: 1 PID: 32260 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2845.017891] 2718 [ 2845.029106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2845.029111] Call Trace: [ 2845.029134] dump_stack+0x1b2/0x281 [ 2845.029148] warn_alloc.cold+0x96/0x1cc [ 2845.029160] ? zone_watermark_ok_safe+0x220/0x220 [ 2845.029169] ? usleep_range+0x130/0x130 [ 2845.029177] ? try_to_free_pages+0x23f/0x6e0 [ 2845.029186] ? _find_next_bit+0xdb/0x100 [ 2845.029196] ? run_timer_softirq+0x5a0/0x5a0 [ 2845.029213] __alloc_pages_nodemask+0x2127/0x2720 [ 2845.029228] ? lock_acquire+0x170/0x3f0 [ 2845.029240] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2845.029250] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2845.029263] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2845.029275] ? __sanitizer_cov_trace_pc+0x28/0x50 [ 2845.029289] alloc_pages_current+0x155/0x260 [ 2845.029302] ion_page_pool_alloc+0x118/0x1b0 [ 2845.029315] ion_system_heap_allocate+0x133/0x8c0 [ 2845.029324] ? _raw_spin_unlock+0x29/0x40 [ 2845.029335] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2845.029345] ? ion_system_contig_heap_create+0x130/0x130 [ 2845.029354] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2845.029366] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2845.029378] ion_alloc+0x27a/0x810 [ 2845.029390] ? ion_dma_buf_release+0x40/0x40 [ 2845.029401] ? __might_fault+0x177/0x1b0 [ 2845.029412] ion_ioctl+0xea/0x1f0 [ 2845.029420] ? ion_query_heaps+0x360/0x360 [ 2845.029428] ? lock_acquire+0x170/0x3f0 [ 2845.029437] ? lock_downgrade+0x740/0x740 [ 2845.029445] ? ion_query_heaps+0x360/0x360 [ 2845.029455] do_vfs_ioctl+0x75a/0xff0 [ 2845.029467] ? ioctl_preallocate+0x1a0/0x1a0 [ 2845.029475] ? lock_downgrade+0x740/0x740 [ 2845.029488] ? __fget+0x225/0x360 [ 2845.029497] ? do_vfs_ioctl+0xff0/0xff0 [ 2845.029507] ? security_file_ioctl+0x83/0xb0 [ 2845.029518] SyS_ioctl+0x7f/0xb0 [ 2845.029526] ? do_vfs_ioctl+0xff0/0xff0 [ 2845.029539] do_syscall_64+0x1d5/0x640 [ 2845.029555] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2845.029563] RIP: 0033:0x45e219 [ 2845.029569] RSP: 002b:00007fd3ae418c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2845.029580] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2845.029586] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2845.029592] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2845.029597] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2845.029603] R13: 00007fffbf453d0f R14: 00007fd3ae4199c0 R15: 000000000119bf8c [ 2845.323868] 0 0 0 0 [ 2845.327552] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2845.354077] lowmem_reserve[]: 0 0 0 0 0 [ 2845.358498] Node 1 Normal free:329116kB min:53696kB low:67120kB high:80544kB active_anon:404kB inactive_anon:16256kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:124kB bounce:0kB free_pcp:184kB local_pcp:0kB free_cma:0kB [ 2845.387888] lowmem_reserve[]: 0 0 0 0 0 [ 2845.392338] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 6*64kB (U) 2*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11140kB [ 2845.407291] Node 0 DMA32: 74*4kB (EH) 377*8kB (UMEH) 167*16kB (UMEH) 44*32kB (MEH) 574*64kB (UMH) 145*128kB (UMH) 66*256kB (UMH) 9*512kB (UM) 18*1024kB (U) 0*2048kB 0*4096kB = 102624kB [ 2845.424282] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2845.435425] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (M) 0*32kB 889*64kB (UM) 447*128kB (UM) 214*256kB (U) 66*512kB (U) 222*1024kB (U) 12*2048kB (U) 2*4096kB (U) = 462812kB [ 2845.451493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2845.475697] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2845.484310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2845.495439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2845.504717] 71543 total pagecache pages [ 2845.509555] 0 pages in swap cache [ 2845.513022] Swap cache stats: add 0, delete 0, find 0/0 [ 2845.520092] Free swap = 0kB [ 2845.523655] Total swap = 0kB [ 2845.527306] 2097051 pages RAM [ 2845.530416] 0 pages HighMem/MovableOnly [ 2845.534379] 363840 pages reserved [ 2845.539101] 0 pages cma reserved [ 2845.625799] Node 0 DMA32 free:111776kB min:36200kB low:45248kB high:54296kB active_anon:65132kB inactive_anon:259668kB active_file:56kB inactive_file:2480kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3088kB bounce:0kB free_pcp:224kB local_pcp:44kB free_cma:0kB [ 2845.685779] lowmem_reserve[]: 0 0 0 0 0 [ 2845.689836] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2845.745826] lowmem_reserve[]: 0 0 0 0 0 [ 2845.749856] Node 1 Normal free:903644kB min:53696kB low:67120kB high:80544kB active_anon:404kB inactive_anon:16256kB active_file:4kB inactive_file:1920kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:124kB bounce:0kB free_pcp:184kB local_pcp:0kB free_cma:0kB [ 2845.815765] lowmem_reserve[]: 0 0 0 0 0 [ 2845.819834] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 9*64kB (U) 4*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11588kB [ 2845.845772] Node 0 DMA32: 74*4kB (EH) 430*8kB (UMEH) 168*16kB (UMEH) 45*32kB (UMEH) 4532*64kB (UMH) 673*128kB (UMH) 82*256kB (UMH) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 410168kB [ 2845.885794] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2845.905968] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (M) 0*32kB 1667*64kB (UM) 675*128kB (UM) 457*256kB (U) 188*512kB (U) 283*1024kB (U) 62*2048kB (U) 8*4096kB (U) = 855900kB [ 2845.935833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2845.944694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2845.985828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2845.994712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2846.015826] 71534 total pagecache pages [ 2846.019832] 0 pages in swap cache [ 2846.023276] Swap cache stats: add 0, delete 0, find 0/0 [ 2846.045811] Free swap = 0kB [ 2846.048852] Total swap = 0kB [ 2846.051857] 2097051 pages RAM [ 2846.054949] 0 pages HighMem/MovableOnly [ 2846.075807] 363840 pages reserved [ 2846.079286] 0 pages cma reserved [ 2846.082643] Out of memory (oom_kill_allocating_task): Kill process 32629 (rs:main Q:Reg) score 0 or sacrifice child [ 2846.105900] Killed process 32605 (rsyslogd) total-vm:254332kB, anon-rss:876kB, file-rss:0kB, shmem-rss:0kB [ 2846.127655] oom_reaper: reaped process 32605 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2846.154267] device hsr_slave_1 left promiscuous mode [ 2846.189657] device hsr_slave_0 left promiscuous mode 12:09:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) [ 2846.247140] team0 (unregistering): Port device team_slave_1 removed [ 2846.269563] team0 (unregistering): Port device team_slave_0 removed [ 2846.299981] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2846.331927] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2846.448945] bond0 (unregistering): Released all slaves [ 2846.598203] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2846.639059] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2846.668923] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2846.694585] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2846.772012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2846.812448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2846.853508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2846.886635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2846.984300] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2847.011032] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2847.037409] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2847.047565] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2847.054880] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2847.064091] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2847.090796] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2847.103848] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2847.130678] CPU: 0 PID: 32528 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2847.133042] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2847.138589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2847.138594] Call Trace: [ 2847.138613] dump_stack+0x1b2/0x281 [ 2847.138626] warn_alloc.cold+0x96/0x1cc [ 2847.138638] ? zone_watermark_ok_safe+0x220/0x220 [ 2847.138662] __alloc_pages_nodemask+0x2127/0x2720 [ 2847.138681] ? lock_acquire+0x170/0x3f0 [ 2847.138697] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2847.138715] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2847.138729] ? __mutex_unlock_slowpath+0x75/0x770 [ 2847.138739] ? retint_kernel+0x2d/0x2d [ 2847.138754] alloc_pages_current+0x155/0x260 [ 2847.138769] ion_page_pool_alloc+0x118/0x1b0 [ 2847.138781] ion_system_heap_allocate+0x133/0x8c0 [ 2847.166022] syz-executor.4 cpuset= [ 2847.169263] ? _raw_spin_unlock+0x29/0x40 [ 2847.174118] / [ 2847.178086] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2847.186479] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2847.188350] ? ion_system_contig_heap_create+0x130/0x130 [ 2847.195810] device veth0_vlan entered promiscuous mode [ 2847.197079] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2847.197093] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2847.197107] ion_alloc+0x27a/0x810 [ 2847.197121] ? ion_dma_buf_release+0x40/0x40 [ 2847.197133] ? __might_fault+0x177/0x1b0 [ 2847.197152] ion_ioctl+0xea/0x1f0 [ 2847.219178] device veth1_vlan entered promiscuous mode [ 2847.220195] ? ion_query_heaps+0x360/0x360 [ 2847.236041] mems_allowed=0-1 [ 2847.237159] ? lock_acquire+0x170/0x3f0 [ 2847.247099] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2847.247424] ? lock_downgrade+0x740/0x740 [ 2847.276035] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2847.277207] ? ion_query_heaps+0x360/0x360 [ 2847.305300] do_vfs_ioctl+0x75a/0xff0 [ 2847.306032] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2847.309094] ? ioctl_preallocate+0x1a0/0x1a0 [ 2847.320251] ? lock_downgrade+0x740/0x740 [ 2847.324410] ? __fget+0x225/0x360 [ 2847.327868] ? do_vfs_ioctl+0xff0/0xff0 [ 2847.331839] ? security_file_ioctl+0x83/0xb0 [ 2847.336243] SyS_ioctl+0x7f/0xb0 [ 2847.339611] ? do_vfs_ioctl+0xff0/0xff0 [ 2847.343593] do_syscall_64+0x1d5/0x640 [ 2847.346048] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2847.347505] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2847.359420] RIP: 0033:0x45e219 [ 2847.362621] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2847.370332] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2847.377630] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2847.378095] device veth0_macvtap entered promiscuous mode [ 2847.384911] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2847.384920] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2847.405013] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2847.412321] CPU: 1 PID: 32714 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2847.420219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2847.429579] Call Trace: [ 2847.432176] dump_stack+0x1b2/0x281 [ 2847.435837] warn_alloc.cold+0x96/0x1cc [ 2847.439812] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2847.444834] ? zone_watermark_ok_safe+0x220/0x220 [ 2847.449704] __alloc_pages_nodemask+0x2127/0x2720 [ 2847.454556] ? _raw_spin_unlock_irq+0x24/0x80 [ 2847.459069] ? lock_acquire+0x170/0x3f0 [ 2847.463056] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2847.467914] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2847.473378] ? __mutex_unlock_slowpath+0x75/0x770 [ 2847.478234] ? retint_kernel+0x2d/0x2d [ 2847.482133] alloc_pages_current+0x155/0x260 [ 2847.486555] ion_page_pool_alloc+0x118/0x1b0 [ 2847.490978] ion_system_heap_allocate+0x133/0x8c0 [ 2847.495835] ? ion_alloc+0x187/0x810 [ 2847.499567] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2847.505032] ? ion_system_contig_heap_create+0x130/0x130 [ 2847.510675] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2847.515712] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2847.520570] ion_alloc+0x204/0x810 [ 2847.524124] ? ion_dma_buf_release+0x40/0x40 [ 2847.528557] ? __might_fault+0x177/0x1b0 [ 2847.532658] ion_ioctl+0xea/0x1f0 [ 2847.536141] ? ion_query_heaps+0x360/0x360 [ 2847.540395] ? lock_acquire+0x170/0x3f0 [ 2847.544387] ? lock_downgrade+0x740/0x740 [ 2847.548544] ? ion_query_heaps+0x360/0x360 [ 2847.551890] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2847.552782] do_vfs_ioctl+0x75a/0xff0 [ 2847.563402] ? ioctl_preallocate+0x1a0/0x1a0 [ 2847.567820] ? lock_downgrade+0x740/0x740 [ 2847.571973] ? __fget+0x225/0x360 [ 2847.575425] ? do_vfs_ioctl+0xff0/0xff0 [ 2847.579396] ? security_file_ioctl+0x83/0xb0 [ 2847.583892] SyS_ioctl+0x7f/0xb0 [ 2847.587261] ? do_vfs_ioctl+0xff0/0xff0 [ 2847.591233] do_syscall_64+0x1d5/0x640 [ 2847.595130] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2847.600321] RIP: 0033:0x45e219 [ 2847.603507] RSP: 002b:00007fd3ae418c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2847.611232] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2847.618502] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2847.625772] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2847.633042] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2847.640330] R13: 00007fffbf453d0f R14: 00007fd3ae4199c0 R15: 000000000119bf8c [ 2847.682451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2847.702509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2847.736818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2847.744171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2847.767059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2847.774873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2847.799771] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2847.819484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2847.830763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2847.839804] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2847.858747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2847.875285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2847.897264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2847.904338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2847.928038] device veth1_macvtap entered promiscuous mode [ 2847.942958] device veth0_vlan entered promiscuous mode [ 2847.950443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2847.974615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2847.999904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2848.024057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2848.056250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2848.065991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2848.070819] warn_alloc_show_mem: 1 callbacks suppressed [ 2848.070823] Mem-Info: [ 2848.096194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2848.099292] active_anon:16444 inactive_anon:68982 isolated_anon:0 [ 2848.099292] active_file:1683 inactive_file:2504 isolated_file:0 [ 2848.099292] unevictable:0 dirty:27 writeback:0 unstable:0 [ 2848.099292] slab_reclaimable:12463 slab_unreclaimable:115198 [ 2848.099292] mapped:55951 shmem:70410 pagetables:843 bounce:0 [ 2848.099292] free:29537 free_pcp:174 free_cma:0 [ 2848.105952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2848.117480] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2848.140262] Node 0 active_anon:65396kB inactive_anon:259672kB active_file:6020kB inactive_file:8804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:222056kB dirty:108kB writeback:0kB shmem:265256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2848.184967] Node 1 active_anon:380kB inactive_anon:16256kB active_file:712kB inactive_file:1212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1748kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2848.228599] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2848.241067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2848.314075] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2848.316281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2848.335316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2848.337846] Node 0 [ 2848.344745] device veth1_vlan entered promiscuous mode [ 2848.356706] DMA32 free:39316kB min:36200kB low:45248kB high:54296kB active_anon:65396kB inactive_anon:259672kB active_file:3212kB inactive_file:3376kB unevictable:0kB writepending:108kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3248kB bounce:0kB free_pcp:936kB local_pcp:704kB free_cma:0kB [ 2848.363753] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2848.435383] lowmem_reserve[]: 0 0 0 0 0 [ 2848.462990] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2848.539033] lowmem_reserve[]: 0 0 0 0 0 [ 2848.556780] Node 1 Normal free:29548kB min:53696kB low:67120kB high:80544kB active_anon:380kB inactive_anon:16256kB active_file:464kB inactive_file:476kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2848.610149] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2848.622170] lowmem_reserve[]: 0 0 0 0 0 [ 2848.630576] Node 0 DMA: 5*4kB (U) 5*8kB (U) 0*16kB 0*32kB 1*64kB (U) 3*128kB (U) 3*256kB (U) 3*512kB (U) 0*1024kB 2*2048kB (UM) 1*4096kB (E) = 11004kB [ 2848.664707] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2848.672722] Node 0 DMA32: 695*4kB (UMEH) 225*8kB (MEH) 178*16kB (UMEH) 752*32kB (UMEH) 34*64kB (UMH) 14*128kB (UMH) 4*256kB (MH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36484kB [ 2848.686314] CPU: 1 PID: 32265 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2848.696358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2848.705710] Call Trace: [ 2848.708304] dump_stack+0x1b2/0x281 [ 2848.711990] dump_header+0x178/0x82f [ 2848.715709] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2848.720813] ? ___ratelimit+0x2cd/0x530 [ 2848.724800] oom_kill_process.cold+0x10/0xb18 [ 2848.729323] out_of_memory+0xe3e/0x1190 [ 2848.732468] Node 0 Normal: [ 2848.733396] ? oom_killer_disable+0x1c0/0x1c0 [ 2848.733398] 0*4kB 0*8kB [ 2848.736318] ? mutex_trylock+0x152/0x1a0 [ 2848.736329] __alloc_pages_nodemask+0x23e1/0x2720 [ 2848.736347] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2848.736369] alloc_pages_current+0x155/0x260 [ 2848.736379] filemap_fault+0xea3/0x1980 [ 2848.736398] ext4_filemap_fault+0x84/0xb0 [ 2848.736411] __do_fault+0xfa/0x380 [ 2848.744691] 0*16kB [ 2848.747623] __handle_mm_fault+0x2497/0x4620 [ 2848.747633] ? vm_insert_page+0x7c0/0x7c0 [ 2848.747642] ? task_work_run+0xfd/0x190 [ 2848.747658] handle_mm_fault+0x391/0x860 [ 2848.747670] __do_page_fault+0x549/0xad0 [ 2848.747682] ? spurious_fault+0x640/0x640 [ 2848.747691] ? do_page_fault+0x60/0x500 [ 2848.747700] ? page_fault+0x2f/0x50 [ 2848.747707] page_fault+0x45/0x50 [ 2848.747717] RIP: 0000:0x16b4350 [ 2848.765287] 0*32kB [ 2848.765850] RSP: 16b4300:0000000000000000 EFLAGS: 00000000 [ 2848.772610] 0*64kB [ 2848.791420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2848.803153] 0*128kB [ 2848.824203] Mem-Info: [ 2848.836271] 0*256kB 0*512kB 0*1024kB 0*2048kB [ 2848.848069] active_anon:16438 inactive_anon:68984 isolated_anon:0 [ 2848.848069] active_file:25 inactive_file:27 isolated_file:0 [ 2848.848069] unevictable:0 dirty:8 writeback:0 unstable:0 [ 2848.848069] slab_reclaimable:12463 slab_unreclaimable:114773 [ 2848.848069] mapped:52975 shmem:70412 pagetables:842 bounce:0 [ 2848.848069] free:19126 free_pcp:0 free_cma:0 [ 2848.912116] Node 0 active_anon:65372kB inactive_anon:259680kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211864kB dirty:32kB writeback:0kB shmem:265264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2848.954458] Node 1 active_anon:380kB inactive_anon:16256kB active_file:16kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2848.954965] 0*4096kB [ 2848.991841] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2849.031394] = 0kB [ 2849.038482] Node 1 Normal: 148*4kB (UM) 463*8kB (UM) 504*16kB (UM) 457*32kB (UM) 7*64kB (UM) 5*128kB (UM) 2*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 29608kB [ 2849.040798] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2849.075845] Node 0 DMA32 free:35952kB min:36200kB low:45248kB high:54296kB active_anon:65372kB inactive_anon:259680kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2849.088486] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2849.120844] Bluetooth: hci2 command 0x0409 tx timeout [ 2849.142364] lowmem_reserve[]: 0 0 0 0 0 [ 2849.155108] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2849.160537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2849.194963] lowmem_reserve[]: 0 0 0 0 0 [ 2849.199874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2849.212726] IPVS: ftp: loaded support on port[0] = 21 [ 2849.213289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2849.232605] Node 1 Normal free:29548kB min:53696kB low:67120kB high:80544kB active_anon:380kB inactive_anon:16256kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2849.233100] 70450 total pagecache pages [ 2849.271394] 0 pages in swap cache [ 2849.274871] Swap cache stats: add 0, delete 0, find 0/0 [ 2849.280765] Free swap = 0kB [ 2849.283794] Total swap = 0kB [ 2849.293232] 2097051 pages RAM [ 2849.296412] 0 pages HighMem/MovableOnly [ 2849.304455] 363840 pages reserved [ 2849.312290] 0 pages cma reserved [ 2849.326424] lowmem_reserve[]: 0 0 0 0 0 [ 2849.330461] Node 0 DMA: 5*4kB (U) 5*8kB (U) 0*16kB 0*32kB 1*64kB (U) 3*128kB (U) 3*256kB (U) 3*512kB (U) 0*1024kB 2*2048kB (UM) 1*4096kB (E) = 11004kB [ 2849.369732] Node 0 DMA32: 684*4kB (UMEH) 225*8kB (MEH) 177*16kB (MEH) 173*32kB (UMEH) 34*64kB (UMH) 14*128kB (UMH) 4*256kB (MH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17896kB [ 2849.402833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2849.434075] Node 1 Normal: 8*4kB (M) 192*8kB (UM) 504*16kB (UM) 457*32kB (UM) 7*64kB (UM) 5*128kB (UM) 2*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 26880kB [ 2849.463070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2849.474402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2849.483130] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2849.503658] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2849.510046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2849.527629] CPU: 0 PID: 32528 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2849.535639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2849.545017] Call Trace: [ 2849.547985] dump_stack+0x1b2/0x281 [ 2849.551631] warn_alloc.cold+0x96/0x1cc [ 2849.555613] ? zone_watermark_ok_safe+0x220/0x220 [ 2849.560477] ? usleep_range+0x130/0x130 [ 2849.564451] ? try_to_free_pages+0x23f/0x6e0 [ 2849.568884] ? _find_next_bit+0xdb/0x100 [ 2849.572949] ? run_timer_softirq+0x5a0/0x5a0 [ 2849.577359] __alloc_pages_nodemask+0x2127/0x2720 [ 2849.582216] ? lock_acquire+0x170/0x3f0 [ 2849.586190] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2849.591056] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2849.595581] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2849.601065] ? retint_kernel+0x2d/0x2d [ 2849.604972] alloc_pages_current+0x155/0x260 [ 2849.609407] ion_page_pool_alloc+0x118/0x1b0 [ 2849.613819] ion_system_heap_allocate+0x133/0x8c0 [ 2849.618680] ? _raw_spin_unlock+0x29/0x40 [ 2849.622839] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2849.627766] ? ion_system_contig_heap_create+0x130/0x130 [ 2849.633229] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2849.638260] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2849.643122] ion_alloc+0x27a/0x810 [ 2849.646659] ? ion_dma_buf_release+0x40/0x40 [ 2849.651061] ? __might_fault+0x177/0x1b0 [ 2849.655115] ion_ioctl+0xea/0x1f0 [ 2849.658558] ? ion_query_heaps+0x360/0x360 [ 2849.662810] ? lock_acquire+0x170/0x3f0 [ 2849.666776] ? lock_downgrade+0x740/0x740 [ 2849.670916] ? ion_query_heaps+0x360/0x360 [ 2849.675145] do_vfs_ioctl+0x75a/0xff0 [ 2849.678943] ? ioctl_preallocate+0x1a0/0x1a0 [ 2849.683348] ? lock_downgrade+0x740/0x740 [ 2849.687488] ? __fget+0x225/0x360 [ 2849.690945] ? do_vfs_ioctl+0xff0/0xff0 [ 2849.694924] ? security_file_ioctl+0x83/0xb0 [ 2849.699329] SyS_ioctl+0x7f/0xb0 [ 2849.702685] ? do_vfs_ioctl+0xff0/0xff0 [ 2849.706654] do_syscall_64+0x1d5/0x640 [ 2849.710541] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2849.715720] RIP: 0033:0x45e219 [ 2849.718908] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2849.726627] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2849.733892] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2849.741163] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2849.748425] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2849.755689] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2849.767619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2849.776209] 70444 total pagecache pages [ 2849.782423] 0 pages in swap cache [ 2849.785880] Swap cache stats: add 0, delete 0, find 0/0 [ 2849.793424] Free swap = 0kB [ 2849.796444] Total swap = 0kB [ 2849.801832] 2097051 pages RAM [ 2849.804938] 0 pages HighMem/MovableOnly [ 2849.811233] 363840 pages reserved [ 2849.814698] 0 pages cma reserved [ 2849.820281] Out of memory (oom_kill_allocating_task): Kill process 32265 (syz-executor.0) score 0 or sacrifice child [ 2849.833239] Killed process 32265 (syz-executor.0) total-vm:93220kB, anon-rss:88kB, file-rss:34492kB, shmem-rss:0kB [ 2849.863631] oom_reaper: reaped process 32265 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2849.890551] warn_alloc_show_mem: 1 callbacks suppressed [ 2849.890556] Mem-Info: [ 2849.892013] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2849.895990] active_anon:16419 inactive_anon:68984 isolated_anon:0 [ 2849.895990] active_file:39 inactive_file:0 isolated_file:0 [ 2849.895990] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2849.895990] slab_reclaimable:12462 slab_unreclaimable:114562 [ 2849.895990] mapped:52956 shmem:70414 pagetables:824 bounce:0 [ 2849.895990] free:13943 free_pcp:30 free_cma:0 [ 2849.960030] Node 0 active_anon:65296kB inactive_anon:259680kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211824kB dirty:0kB writeback:0kB shmem:265272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2849.989382] (null), order=0, oom_score_adj=0 [ 2849.993911] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2849.997130] Node 1 active_anon:380kB inactive_anon:16256kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2850.015057] CPU: 0 PID: 32266 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 2850.033531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2850.042883] Call Trace: [ 2850.045482] dump_stack+0x1b2/0x281 [ 2850.049105] dump_header+0x178/0x82f [ 2850.052814] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2850.057912] ? ___ratelimit+0x2cd/0x530 [ 2850.061910] oom_kill_process.cold+0x10/0xb18 [ 2850.064534] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2850.066430] out_of_memory+0xe3e/0x1190 [ 2850.066443] ? oom_killer_disable+0x1c0/0x1c0 [ 2850.094689] lowmem_reserve[]: [ 2850.097609] ? mutex_trylock+0x152/0x1a0 [ 2850.097623] __alloc_pages_nodemask+0x23e1/0x2720 [ 2850.097644] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2850.102169] 0 [ 2850.105374] alloc_pages_current+0x155/0x260 [ 2850.109455] 2717 [ 2850.114248] filemap_fault+0xea3/0x1980 [ 2850.119105] 2718 [ 2850.120857] ext4_filemap_fault+0x84/0xb0 [ 2850.125230] 2718 [ 2850.127284] __do_fault+0xfa/0x380 [ 2850.127293] __handle_mm_fault+0x2497/0x4620 [ 2850.127303] ? vm_insert_page+0x7c0/0x7c0 [ 2850.127313] ? task_work_run+0xfd/0x190 [ 2850.127331] handle_mm_fault+0x391/0x860 [ 2850.131282] 2718 [ 2850.133331] __do_page_fault+0x549/0xad0 [ 2850.139501] ? spurious_fault+0x640/0x640 [ 2850.143009] Node 0 [ 2850.147413] ? do_page_fault+0x60/0x500 [ 2850.147423] ? page_fault+0x2f/0x50 [ 2850.147430] page_fault+0x45/0x50 [ 2850.147439] RIP: 0006:0x7fffb0f5bcd0 [ 2850.147447] RSP: 0000:0000000000000000 EFLAGS: 00000000 [ 2850.151611] DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:65296kB inactive_anon:259680kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3172kB bounce:0kB free_pcp:360kB local_pcp:120kB free_cma:0kB [ 2850.175753] Mem-Info: [ 2850.177926] syz-executor.0: page allocation failure: order:1, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 2850.202277] active_anon:16419 inactive_anon:68984 isolated_anon:0 [ 2850.202277] active_file:39 inactive_file:0 isolated_file:0 [ 2850.202277] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2850.202277] slab_reclaimable:12462 slab_unreclaimable:114562 [ 2850.202277] mapped:52956 shmem:70414 pagetables:824 bounce:0 [ 2850.202277] free:13943 free_pcp:90 free_cma:0 [ 2850.240596] lowmem_reserve[]: [ 2850.283449] syz-executor.0 cpuset= [ 2850.291201] Node 0 active_anon:65296kB inactive_anon:259680kB active_file:36kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211824kB dirty:0kB writeback:0kB shmem:265272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2850.297013] / [ 2850.340601] Node 1 active_anon:380kB inactive_anon:16256kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2850.344176] 0 [ 2850.384814] Node 0 [ 2850.388228] mems_allowed=0-1 [ 2850.392853] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2850.394063] CPU: 1 PID: 32265 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2850.426956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2850.433862] lowmem_reserve[]: [ 2850.436489] Call Trace: [ 2850.436492] 0 2717 [ 2850.439611] dump_stack+0x1b2/0x281 [ 2850.439624] warn_alloc.cold+0x96/0x1cc [ 2850.439634] ? zone_watermark_ok_safe+0x220/0x220 [ 2850.439643] ? usleep_range+0x130/0x130 [ 2850.439649] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2850.439660] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2850.439669] ? run_timer_softirq+0x5a0/0x5a0 [ 2850.439684] __alloc_pages_nodemask+0x2127/0x2720 [ 2850.439703] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2850.456573] 2718 [ 2850.460839] ? mark_held_locks+0xa6/0xf0 [ 2850.465910] 2718 [ 2850.470913] ? cache_grow_begin+0x41/0x630 [ 2850.470923] cache_grow_begin+0x91/0x630 [ 2850.470932] ? cache_grow_begin+0x91/0x630 [ 2850.470941] fallback_alloc+0x207/0x2c0 [ 2850.470953] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 2850.470964] ? dev_uevent_filter+0xd0/0xd0 [ 2850.470974] kobject_uevent_env+0x20c/0xf40 [ 2850.470984] ? wait_for_completion_io+0x10/0x10 [ 2850.470994] ? is_acpi_device_node+0x5b/0x70 [ 2850.471005] device_del+0x642/0xa80 [ 2850.471015] ? device_find_child+0x107/0x140 [ 2850.471023] ? __device_links_no_driver+0x1b0/0x1b0 [ 2850.471038] hci_conn_del_sysfs+0xca/0x160 [ 2850.471047] hci_conn_cleanup+0x216/0x500 [ 2850.471055] hci_conn_del+0x253/0x6f0 [ 2850.471064] hci_conn_hash_flush+0x19c/0x260 [ 2850.471075] hci_dev_do_close+0x535/0xca0 [ 2850.471086] ? __fsnotify_inode_delete+0x20/0x20 [ 2850.471097] hci_unregister_dev+0x17f/0x8c0 [ 2850.490225] 2718 [ 2850.491248] ? fcntl_setlk+0xdb0/0xdb0 [ 2850.497524] ? vhci_close_dev+0x50/0x50 [ 2850.497531] vhci_release+0x70/0xe0 [ 2850.497541] __fput+0x25f/0x7a0 [ 2850.497553] task_work_run+0x11f/0x190 [ 2850.497566] do_exit+0xa44/0x2850 [ 2850.497575] ? trace_hardirqs_on_caller+0x2b1/0x580 [ 2850.497586] ? mm_update_next_owner+0x5b0/0x5b0 [ 2850.497596] ? retint_kernel+0x2d/0x2d [ 2850.497611] do_group_exit+0x100/0x2e0 [ 2850.497622] get_signal+0x38d/0x1ca0 [ 2850.497633] ? up_read+0x17/0x30 [ 2850.497648] do_signal+0x7c/0x1550 [ 2850.514833] Node 0 [ 2850.518925] ? vm_insert_page+0x7c0/0x7c0 [ 2850.518937] ? setup_sigcontext+0x820/0x820 [ 2850.518944] ? task_work_run+0xfd/0x190 [ 2850.518960] ? handle_mm_fault+0x467/0x860 [ 2850.518971] ? __do_page_fault+0x159/0xad0 [ 2850.518980] ? exit_to_usermode_loop+0x41/0x200 [ 2850.518989] exit_to_usermode_loop+0x160/0x200 [ 2850.518996] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2850.519005] prepare_exit_to_usermode+0x1af/0x210 [ 2850.525144] DMA32 free:18428kB min:36200kB low:45248kB high:54296kB active_anon:65296kB inactive_anon:259680kB active_file:144kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3076kB bounce:0kB free_pcp:396kB local_pcp:276kB free_cma:0kB [ 2850.527982] ? page_fault+0x2f/0x50 [ 2850.527989] retint_user+0x8/0x18 [ 2850.527996] RIP: 0033:0x404af3 [ 2850.528000] RSP: 002b:00007fff957f44a0 EFLAGS: 00010207 [ 2850.528007] RAX: 000000000000002c RBX: 00000000016b4300 RCX: 0000000000417c97 [ 2850.528011] RDX: 000000000000002c RSI: 00000000016b4350 RDI: 0000000000000000 [ 2850.528015] RBP: 0000000000000000 R08: 00007fff957f44a0 R09: 000000000000000c [ 2850.528019] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2850.528023] R13: 0000000000000000 R14: 00000000016b4350 R15: 0000000000000003 [ 2850.554487] 0 [ 2850.566585] lowmem_reserve[]: [ 2850.587829] 0 [ 2850.600109] 0 [ 2850.650807] 0 [ 2850.660055] 0 [ 2850.690928] 0 [ 2850.710260] 0 0 [ 2850.755211] 0 [ 2850.781210] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2850.786687] Node 0 [ 2850.819791] lowmem_reserve[]: 0 0 0 0 0 [ 2850.826062] Node 1 Normal free:26876kB min:53696kB low:67120kB high:80544kB active_anon:380kB inactive_anon:16256kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2850.830834] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2850.869032] lowmem_reserve[]: 0 0 0 0 0 [ 2850.898506] lowmem_reserve[]: 0 0 0 0 0 [ 2850.903045] Node 1 Normal free:26876kB min:53696kB low:67120kB high:80544kB active_anon:380kB inactive_anon:16256kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2850.905029] Node 0 [ 2850.944207] Mem-Info: [ 2850.954112] active_anon:16406 inactive_anon:68984 isolated_anon:0 [ 2850.954112] active_file:10 inactive_file:15 isolated_file:0 [ 2850.954112] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2850.954112] slab_reclaimable:12462 slab_unreclaimable:114440 [ 2850.954112] mapped:52956 shmem:70414 pagetables:800 bounce:0 [ 2850.954112] free:14152 free_pcp:0 free_cma:0 [ 2850.976195] DMA: [ 2851.000385] lowmem_reserve[]: 0 0 0 0 0 [ 2851.006453] Node 0 DMA: 0*4kB 4*8kB (U) 0*16kB 0*32kB 1*64kB (U) 3*128kB (U) 3*256kB (U) 3*512kB (U) 0*1024kB 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2851.016282] 0*4kB [ 2851.032891] Node 0 active_anon:65244kB inactive_anon:259680kB active_file:100kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211824kB dirty:0kB writeback:0kB shmem:265272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2851.063983] 4*8kB (U) 0*16kB 0*32kB 1*64kB (U) 3*128kB (U) 3*256kB (U) 3*512kB (U) 0*1024kB 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2851.074954] Node 0 DMA32: 717*4kB (UME) 235*8kB (UME) 183*16kB (UME) 183*32kB (UME) 36*64kB (UM) 16*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18908kB [ 2851.095957] Node 0 DMA32: 717*4kB (UME) 235*8kB (UME) 183*16kB (UME) 183*32kB (UME) 36*64kB (UM) 16*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18908kB [ 2851.104145] Node 0 [ 2851.124223] Node 1 active_anon:380kB inactive_anon:16256kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2851.135843] Node 0 [ 2851.166462] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2851.185150] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2851.191309] Node 1 Normal: 9*4kB (UM) 191*8kB (UM) 504*16kB (UM) 457*32kB (UM) 7*64kB (UM) 5*128kB (UM) 2*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 26876kB [ 2851.210456] Bluetooth: hci2 command 0x041b tx timeout [ 2851.215755] Node 1 Normal: 9*4kB (UM) 191*8kB (UM) 504*16kB (UM) 457*32kB (UM) 7*64kB (UM) 5*128kB (UM) 2*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 26876kB [ 2851.227567] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2851.254661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2851.265613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2851.274860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2851.283793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2851.296148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2851.314006] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2851.315716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2851.323382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2851.347668] Node 0 DMA32 free:18868kB min:36200kB low:45248kB high:54296kB active_anon:65244kB inactive_anon:259680kB active_file:196kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3076kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2851.356513] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2851.390197] 70444 total pagecache pages [ 2851.394184] 0 pages in swap cache [ 2851.404728] Swap cache stats: add 0, delete 0, find 0/0 [ 2851.415800] 70444 total pagecache pages [ 2851.417386] Free swap = 0kB [ 2851.422823] Total swap = 0kB [ 2851.425833] 2097051 pages RAM [ 2851.442641] 0 pages HighMem/MovableOnly [ 2851.446660] 363840 pages reserved [ 2851.456554] lowmem_reserve[]: 0 0 0 0 0 [ 2851.461808] 0 pages in swap cache [ 2851.465274] Swap cache stats: add 0, delete 0, find 0/0 [ 2851.467034] 0 pages cma reserved [ 2851.516177] Free swap = 0kB [ 2851.530254] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2851.541618] Total swap = 0kB [ 2851.629251] 2097051 pages RAM [ 2851.632710] 0 pages HighMem/MovableOnly [ 2851.674714] lowmem_reserve[]: 0 0 0 0 0 [ 2851.687535] 363840 pages reserved [ 2851.691033] 0 pages cma reserved [ 2851.694390] Out of memory (oom_kill_allocating_task): Kill process 32266 (syz-executor.5) score 0 or sacrifice child [ 2851.697002] Node 1 Normal free:481536kB min:53696kB low:67120kB high:80544kB active_anon:584kB inactive_anon:16256kB active_file:0kB inactive_file:3840kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:124kB bounce:0kB free_pcp:204kB local_pcp:92kB free_cma:0kB [ 2851.778988] Killed process 32266 (syz-executor.5) total-vm:93220kB, anon-rss:88kB, file-rss:33024kB, shmem-rss:0kB [ 2851.832099] oom_reaper: reaped process 32266 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2851.909493] lowmem_reserve[]: 0 0 0 0 0 [ 2851.919486] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11124kB [ 2852.006682] chnl_net:caif_netlink_parms(): no params data found [ 2852.027642] Node 0 DMA32: 634*4kB (UME) 221*8kB (ME) 174*16kB (UME) 63*32kB (UME) 3643*64kB (UM) 496*128kB (UM) 15*256kB (UM) 0*512kB 23*1024kB (U) 0*2048kB 0*4096kB = 333136kB [ 2852.085045] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2852.137000] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 12*32kB (UM) 915*64kB (U) 369*128kB (UM) 242*256kB (UM) 82*512kB (U) 662*1024kB (UM) 58*2048kB (U) 8*4096kB (U) = 1039600kB [ 2852.217261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2852.226243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2852.261893] bridge0: port 1(bridge_slave_0) entered blocking state [ 2852.288102] bridge0: port 1(bridge_slave_0) entered disabled state [ 2852.297061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2852.305283] device bridge_slave_0 entered promiscuous mode [ 2852.305930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2852.315680] bridge0: port 2(bridge_slave_1) entered blocking state [ 2852.340995] bridge0: port 2(bridge_slave_1) entered disabled state [ 2852.367029] 72260 total pagecache pages [ 2852.371045] 0 pages in swap cache [ 2852.373894] device bridge_slave_1 entered promiscuous mode [ 2852.374496] Swap cache stats: add 0, delete 0, find 0/0 [ 2852.411229] Free swap = 0kB [ 2852.417678] Total swap = 0kB [ 2852.422153] 2097051 pages RAM [ 2852.434385] 0 pages HighMem/MovableOnly [ 2852.451713] 363840 pages reserved [ 2852.455187] 0 pages cma reserved 12:09:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x2, 0x604}, 0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) [ 2852.509153] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2852.569899] bond0: Enslaving bond_slave_1 as an active interface with an up link 12:09:49 executing program 5: socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) [ 2852.658872] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2852.675633] team0: Port device team_slave_0 added [ 2852.722342] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2852.751070] team0: Port device team_slave_1 added [ 2852.832474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2852.854662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2852.933075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2853.016627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2853.042162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2853.101632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2853.165193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2853.168309] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2853.211933] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2853.251675] CPU: 0 PID: 422 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2853.259441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2853.268796] Call Trace: [ 2853.271389] dump_stack+0x1b2/0x281 [ 2853.275039] warn_alloc.cold+0x96/0x1cc [ 2853.279118] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2853.284228] ? zone_watermark_ok_safe+0x220/0x220 [ 2853.289105] __alloc_pages_nodemask+0x2127/0x2720 [ 2853.293948] ? io_schedule_timeout+0x140/0x140 [ 2853.298534] ? lock_acquire+0x170/0x3f0 [ 2853.302513] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2853.307414] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2853.312868] ? __mutex_unlock_slowpath+0x75/0x770 [ 2853.317712] alloc_pages_current+0x155/0x260 [ 2853.322122] ion_page_pool_alloc+0x118/0x1b0 [ 2853.326527] ion_system_heap_allocate+0x133/0x8c0 [ 2853.331368] ? ion_alloc+0x187/0x810 [ 2853.335079] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2853.340537] ? ion_system_contig_heap_create+0x130/0x130 [ 2853.345983] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2853.351203] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2853.356053] ion_alloc+0x204/0x810 [ 2853.359598] ? ion_dma_buf_release+0x40/0x40 [ 2853.364094] ? __might_fault+0x177/0x1b0 [ 2853.368154] ion_ioctl+0xea/0x1f0 [ 2853.371601] ? ion_query_heaps+0x360/0x360 [ 2853.375831] ? lock_acquire+0x170/0x3f0 [ 2853.379812] ? lock_downgrade+0x740/0x740 [ 2853.383975] ? ion_query_heaps+0x360/0x360 [ 2853.388206] do_vfs_ioctl+0x75a/0xff0 [ 2853.392008] ? ioctl_preallocate+0x1a0/0x1a0 [ 2853.396478] ? lock_downgrade+0x740/0x740 [ 2853.400714] ? __fget+0x225/0x360 [ 2853.404511] ? do_vfs_ioctl+0xff0/0xff0 [ 2853.408482] ? security_file_ioctl+0x83/0xb0 [ 2853.412915] SyS_ioctl+0x7f/0xb0 [ 2853.416279] ? do_vfs_ioctl+0xff0/0xff0 [ 2853.420264] do_syscall_64+0x1d5/0x640 [ 2853.424154] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2853.429339] RIP: 0033:0x45e219 [ 2853.432524] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2853.440229] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2853.447512] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2853.454806] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2853.462176] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2853.469442] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2853.478507] Bluetooth: hci2 command 0x040f tx timeout [ 2853.487712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2853.509315] Mem-Info: [ 2853.512272] active_anon:16360 inactive_anon:68981 isolated_anon:0 [ 2853.512272] active_file:808 inactive_file:776 isolated_file:64 [ 2853.512272] unevictable:0 dirty:9 writeback:1 unstable:0 [ 2853.512272] slab_reclaimable:12454 slab_unreclaimable:117104 [ 2853.512272] mapped:37052 shmem:70407 pagetables:728 bounce:0 [ 2853.512272] free:25632 free_pcp:319 free_cma:0 [ 2853.558611] Node 0 active_anon:64832kB inactive_anon:259668kB active_file:620kB inactive_file:540kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:143428kB dirty:36kB writeback:4kB shmem:265244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2853.611632] Node 1 active_anon:608kB inactive_anon:16256kB active_file:940kB inactive_file:832kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1780kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2853.646240] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2853.677725] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2853.682789] Node 0 DMA32 free:35848kB min:36200kB low:45248kB high:54296kB active_anon:64832kB inactive_anon:259668kB active_file:80kB inactive_file:436kB unevictable:0kB writepending:40kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2900kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2853.719803] lowmem_reserve[]: 0 0 0 0 0 [ 2853.723863] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2853.758852] lowmem_reserve[]: 0 0 0 0 0 [ 2853.763935] Node 1 Normal free:54344kB min:53696kB low:67120kB high:80544kB active_anon:608kB inactive_anon:16256kB active_file:372kB inactive_file:264kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:12kB bounce:0kB free_pcp:272kB local_pcp:76kB free_cma:0kB [ 2853.798715] lowmem_reserve[]: 0 0 0 0 0 [ 2853.805215] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11064kB [ 2853.822923] Node 0 DMA32: 732*4kB (ME) 214*8kB (UME) 175*16kB (ME) 57*32kB (ME) 27*64kB (UM) 7*128kB (M) 96*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36464kB [ 2853.846997] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2853.862694] Node 1 Normal: 16*4kB (UM) 15*8kB (UM) 10*16kB (M) 6*32kB (M) 3*64kB (M) 9*128kB (M) 3*256kB (UM) 91*512kB (UM) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 53336kB [ 2853.881854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2853.890817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2853.899567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2853.908620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2853.918356] 70454 total pagecache pages [ 2853.922413] 0 pages in swap cache [ 2853.925864] Swap cache stats: add 0, delete 0, find 0/0 [ 2853.931274] Free swap = 0kB [ 2853.934308] Total swap = 0kB [ 2853.937391] 2097051 pages RAM [ 2853.940492] 0 pages HighMem/MovableOnly [ 2853.944570] 363840 pages reserved [ 2853.948080] 0 pages cma reserved [ 2854.028362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2854.035127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2854.043976] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2854.165477] in:imklog cpuset=/ mems_allowed=0-1 [ 2854.199673] CPU: 0 PID: 32728 Comm: in:imklog Not tainted 4.14.217-syzkaller #0 [ 2854.207149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2854.216499] Call Trace: [ 2854.219096] dump_stack+0x1b2/0x281 [ 2854.222722] dump_header+0x178/0x82f [ 2854.226433] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2854.231564] ? ___ratelimit+0x2cd/0x530 [ 2854.235558] oom_kill_process.cold+0x10/0xb18 [ 2854.240064] out_of_memory+0xe3e/0x1190 [ 2854.244040] ? oom_killer_disable+0x1c0/0x1c0 [ 2854.248535] ? mutex_trylock+0x152/0x1a0 [ 2854.252594] __alloc_pages_nodemask+0x23e1/0x2720 [ 2854.257446] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2854.262301] alloc_pages_current+0x155/0x260 [ 2854.266713] filemap_fault+0xea3/0x1980 [ 2854.270694] ext4_filemap_fault+0x84/0xb0 [ 2854.274843] __do_fault+0xfa/0x380 [ 2854.278402] __handle_mm_fault+0x2497/0x4620 [ 2854.282814] ? vm_insert_page+0x7c0/0x7c0 [ 2854.286960] ? lock_downgrade+0x740/0x740 [ 2854.291139] handle_mm_fault+0x391/0x860 [ 2854.295199] __do_page_fault+0x549/0xad0 [ 2854.299270] ? spurious_fault+0x640/0x640 [ 2854.303426] ? do_page_fault+0x60/0x500 [ 2854.307391] ? page_fault+0x2f/0x50 [ 2854.311008] page_fault+0x45/0x50 [ 2854.314453] RIP: 33bbf0b0:0x1f9f [ 2854.317804] RSP: 353b2fe6:00007f1b33bbf0a0 EFLAGS: 7f1b33bbf1d8 [ 2854.326830] Mem-Info: [ 2854.335377] active_anon:16360 inactive_anon:68981 isolated_anon:0 [ 2854.335377] active_file:6 inactive_file:5 isolated_file:0 [ 2854.335377] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2854.335377] slab_reclaimable:12454 slab_unreclaimable:117269 [ 2854.335377] mapped:35595 shmem:70407 pagetables:728 bounce:0 [ 2854.335377] free:25170 free_pcp:0 free_cma:0 [ 2854.377401] Node 0 active_anon:64832kB inactive_anon:259668kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142376kB dirty:0kB writeback:0kB shmem:265244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2854.431017] Node 1 active_anon:608kB inactive_anon:16256kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2854.570482] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2854.652092] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2854.657163] Node 0 DMA32 free:36072kB min:36200kB low:45248kB high:54296kB active_anon:64832kB inactive_anon:259668kB active_file:56kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2900kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2854.727592] lowmem_reserve[]: 0 0 0 0 0 [ 2854.731614] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2854.857343] lowmem_reserve[]: 0 0 0 0 0 [ 2854.861462] Node 1 Normal free:53588kB min:53696kB low:67120kB high:80544kB active_anon:608kB inactive_anon:16256kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2855.036379] lowmem_reserve[]: 0 0 0 0 0 [ 2855.046729] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11064kB [ 2855.151588] Node 0 DMA32: 734*4kB (UME) 214*8kB (UME) 180*16kB (UME) 57*32kB (ME) 28*64kB (UM) 7*128kB (M) 95*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36360kB [ 2855.220101] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2855.236742] Node 1 Normal: 15*4kB (M) 13*8kB (M) 11*16kB (UM) 8*32kB (M) 6*64kB (M) 7*128kB (UM) 2*256kB (UM) 90*512kB (UM) 3*1024kB (M) 1*2048kB (M) 0*4096kB = 53588kB [ 2855.260228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2855.274809] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2855.287381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2855.304486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2855.313324] 70447 total pagecache pages [ 2855.317314] 0 pages in swap cache [ 2855.328171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2855.350350] Swap cache stats: add 0, delete 0, find 0/0 [ 2855.355762] Free swap = 0kB [ 2855.362629] device bridge_slave_1 left promiscuous mode [ 2855.419001] Total swap = 0kB [ 2855.422102] 2097051 pages RAM [ 2855.424291] bridge0: port 2(bridge_slave_1) entered disabled state [ 2855.425198] 0 pages HighMem/MovableOnly [ 2855.482897] 363840 pages reserved [ 2855.486375] 0 pages cma reserved [ 2855.507708] Out of memory (oom_kill_allocating_task): Kill process 32728 (in:imklog) score 0 or sacrifice child [ 2855.507842] device bridge_slave_0 left promiscuous mode [ 2855.523919] Bluetooth: hci2 command 0x0419 tx timeout [ 2855.569637] Killed process 32715 (rsyslogd) total-vm:254332kB, anon-rss:464kB, file-rss:0kB, shmem-rss:0kB [ 2855.573407] bridge0: port 1(bridge_slave_0) entered disabled state [ 2855.630350] oom_reaper: reaped process 32715 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2855.696156] device veth1_macvtap left promiscuous mode [ 2855.701757] device veth0_macvtap left promiscuous mode [ 2855.707081] device veth1_vlan left promiscuous mode [ 2855.739108] device veth0_vlan left promiscuous mode [ 2855.863565] oom_reaper: reaped process 32689 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2855.945178] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2856.004833] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2856.056855] CPU: 1 PID: 29604 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2856.064801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2856.074158] Call Trace: [ 2856.076757] dump_stack+0x1b2/0x281 [ 2856.080392] dump_header+0x178/0x82f [ 2856.084117] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2856.090711] ? ___ratelimit+0x2cd/0x530 [ 2856.094731] oom_kill_process.cold+0x10/0xb18 [ 2856.097761] syz-executor.3: page allocation failure: order:0 [ 2856.099236] out_of_memory+0xe3e/0x1190 [ 2856.099242] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2856.105054] ? oom_killer_disable+0x1c0/0x1c0 [ 2856.117761] syz-executor.3 cpuset= [ 2856.121270] ? mutex_trylock+0x152/0x1a0 [ 2856.121272] / mems_allowed=0-1 [ 2856.124845] __alloc_pages_nodemask+0x23e1/0x2720 [ 2856.136968] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2856.141827] alloc_pages_current+0x155/0x260 [ 2856.146238] filemap_fault+0xea3/0x1980 [ 2856.150222] ext4_filemap_fault+0x84/0xb0 [ 2856.154366] __do_fault+0xfa/0x380 [ 2856.157896] __handle_mm_fault+0x2497/0x4620 [ 2856.162298] ? kill_orphaned_pgrp+0x310/0x310 [ 2856.166786] ? vm_insert_page+0x7c0/0x7c0 [ 2856.170930] ? lock_downgrade+0x740/0x740 [ 2856.175087] handle_mm_fault+0x391/0x860 [ 2856.179144] __do_page_fault+0x549/0xad0 [ 2856.183196] ? spurious_fault+0x640/0x640 [ 2856.187338] ? do_page_fault+0x60/0x500 [ 2856.191305] ? page_fault+0x2f/0x50 [ 2856.194949] page_fault+0x45/0x50 [ 2856.198389] RIP: 0004:0x32 [ 2856.201219] RSP: 0bb8:00000000002b8536 EFLAGS: 0000002e [ 2856.201243] CPU: 0 PID: 32689 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2856.214492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2856.220544] Mem-Info: [ 2856.223849] Call Trace: [ 2856.226305] active_anon:16135 inactive_anon:68981 isolated_anon:0 [ 2856.226305] active_file:24 inactive_file:10 isolated_file:0 [ 2856.226305] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2856.226305] slab_reclaimable:12454 slab_unreclaimable:117046 [ 2856.226305] mapped:35594 shmem:70407 pagetables:728 bounce:0 [ 2856.226305] free:13954 free_pcp:87 free_cma:0 [ 2856.229137] dump_stack+0x1b2/0x281 [ 2856.229151] warn_alloc.cold+0x96/0x1cc [ 2856.229163] ? zone_watermark_ok_safe+0x220/0x220 [ 2856.229173] ? usleep_range+0x130/0x130 [ 2856.229197] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2856.262533] Node 0 active_anon:64132kB inactive_anon:259668kB active_file:140kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142376kB dirty:0kB writeback:0kB shmem:265244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2856.266084] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2856.270085] Node 1 active_anon:408kB inactive_anon:16256kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2856.274906] ? run_timer_softirq+0x5a0/0x5a0 [ 2856.278979] Node 0 [ 2856.284050] __alloc_pages_nodemask+0x2127/0x2720 [ 2856.312069] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2856.317053] ? lock_acquire+0x170/0x3f0 [ 2856.343633] lowmem_reserve[]: [ 2856.348031] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2856.348045] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2856.348061] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2856.350277] 0 [ 2856.355124] alloc_pages_current+0x155/0x260 [ 2856.380657] 2717 [ 2856.384610] ion_page_pool_alloc+0x118/0x1b0 [ 2856.388230] 2718 [ 2856.393037] ion_system_heap_allocate+0x133/0x8c0 [ 2856.397517] 2718 [ 2856.402963] ? ion_alloc+0x187/0x810 [ 2856.402973] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2856.402983] ? ion_system_contig_heap_create+0x130/0x130 [ 2856.402994] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2856.403007] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2856.404787] 2718 [ 2856.409189] ion_alloc+0x204/0x810 [ 2856.409205] ? ion_dma_buf_release+0x40/0x40 [ 2856.409217] ? __might_fault+0x177/0x1b0 [ 2856.409230] ion_ioctl+0xea/0x1f0 [ 2856.415674] ? ion_query_heaps+0x360/0x360 [ 2856.417713] Node 0 [ 2856.422553] ? lock_acquire+0x170/0x3f0 [ 2856.422562] ? lock_downgrade+0x740/0x740 [ 2856.422572] ? ion_query_heaps+0x360/0x360 [ 2856.422582] do_vfs_ioctl+0x75a/0xff0 [ 2856.422597] ? ioctl_preallocate+0x1a0/0x1a0 [ 2856.424670] DMA32 free:18084kB min:36200kB low:45248kB high:54296kB active_anon:64100kB inactive_anon:259668kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2900kB bounce:0kB free_pcp:212kB local_pcp:92kB free_cma:0kB [ 2856.428373] ? lock_downgrade+0x740/0x740 [ 2856.428386] ? __fget+0x225/0x360 [ 2856.428397] ? do_vfs_ioctl+0xff0/0xff0 [ 2856.428408] ? security_file_ioctl+0x83/0xb0 [ 2856.433856] lowmem_reserve[]: [ 2856.439309] SyS_ioctl+0x7f/0xb0 [ 2856.439319] ? do_vfs_ioctl+0xff0/0xff0 [ 2856.439330] do_syscall_64+0x1d5/0x640 [ 2856.439347] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2856.439357] RIP: 0033:0x45e219 [ 2856.444357] 0 [ 2856.449182] RSP: 002b:00007fb79db61c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2856.449192] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2856.449197] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2856.449202] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2856.449207] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2856.449212] R13: 00007ffdaed1160f R14: 00007fb79db629c0 R15: 000000000119bf8c [ 2856.455772] Mem-Info: [ 2856.479164] 0 [ 2856.496373] active_anon:16117 inactive_anon:68981 isolated_anon:0 [ 2856.496373] active_file:8 inactive_file:7 isolated_file:13 [ 2856.496373] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2856.496373] slab_reclaimable:12454 slab_unreclaimable:116959 [ 2856.496373] mapped:35594 shmem:70407 pagetables:699 bounce:0 [ 2856.496373] free:14155 free_pcp:94 free_cma:0 [ 2856.533013] 0 [ 2856.538087] Node 0 active_anon:64100kB inactive_anon:259668kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):52kB mapped:142376kB dirty:0kB writeback:0kB shmem:265244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2856.538713] 0 [ 2856.541749] Node 1 active_anon:368kB inactive_anon:16256kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2856.545084] 0 [ 2856.552276] Node 0 [ 2856.559195] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2856.561672] Node 0 [ 2856.563456] lowmem_reserve[]: [ 2856.571315] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2856.582327] 0 [ 2856.585910] lowmem_reserve[]: [ 2856.593242] 2717 [ 2856.601209] 0 [ 2856.612030] 2718 [ 2856.612162] 0 [ 2856.649441] 2718 [ 2856.677150] 0 0 0 [ 2856.677162] Node 1 Normal free:26892kB min:53696kB low:67120kB high:80544kB active_anon:368kB inactive_anon:16256kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:12kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2856.677180] lowmem_reserve[]: 0 0 0 0 0 [ 2856.677201] Node 0 [ 2856.708305] 2718 [ 2856.734138] DMA: [ 2856.765292] 1*4kB [ 2856.779768] Node 0 [ 2856.780836] (U) [ 2856.814094] DMA32 free:19064kB min:36200kB low:45248kB high:54296kB active_anon:64100kB inactive_anon:259668kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2784kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2856.821407] 0*8kB [ 2856.821828] lowmem_reserve[]: [ 2856.823967] 1*16kB (U) [ 2856.826214] 0 [ 2856.829273] 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) [ 2856.861513] 0 [ 2856.863297] = 10964kB [ 2856.865282] 0 [ 2856.867067] Node 0 [ 2856.876557] 0 0 [ 2856.878731] DMA32: [ 2856.884828] 777*4kB [ 2856.886782] Node 0 [ 2856.889060] (UME) [ 2856.891394] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2856.893619] 216*8kB [ 2856.895755] lowmem_reserve[]: 0 0 0 0 0 [ 2856.931554] Node 1 Normal free:26992kB min:53696kB low:67120kB high:80544kB active_anon:368kB inactive_anon:16256kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2856.936521] (UME) [ 2856.962066] lowmem_reserve[]: 0 0 0 0 0 [ 2856.967938] 180*16kB (UME) 60*32kB (UME) 31*64kB (UM) 7*128kB (M) 26*256kB (UM) 0*512kB 0*1024kB 0*2048kB [ 2856.968274] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10964kB [ 2856.987929] 0*4096kB = 19172kB [ 2856.992595] Node 0 [ 2856.995156] Node 0 [ 2856.995175] DMA32: [ 2856.997399] Normal: [ 2856.999703] 777*4kB (UME) 216*8kB (UME) 180*16kB (UME) 60*32kB (UME) 31*64kB (UM) 7*128kB (M) 26*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19172kB [ 2857.005789] 0*4kB [ 2857.018293] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2857.024252] 0*8kB [ 2857.031208] Node 1 [ 2857.031211] 0*16kB 0*32kB [ 2857.033355] Normal: [ 2857.035606] 0*64kB 0*128kB [ 2857.038854] 11*4kB (UM) 7*8kB (UM) 5*16kB (M) 5*32kB (UM) 5*64kB (UM) 4*128kB (UM) 1*256kB (M) 38*512kB (UM) 4*1024kB (M) 1*2048kB (M) 0*4096kB = 27028kB [ 2857.044647] 0*256kB [ 2857.057827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2857.057830] 0*512kB 0*1024kB [ 2857.067945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2857.073033] 0*2048kB [ 2857.075740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2857.084351] 0*4096kB = 0kB [ 2857.084362] Node 1 Normal: 11*4kB (UM) 7*8kB (UM) 5*16kB (M) 5*32kB (UM) 5*64kB (UM) 4*128kB (UM) 1*256kB (M) 38*512kB (UM) 4*1024kB (M) 1*2048kB (M) 0*4096kB = 27028kB [ 2857.084439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2857.084444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2857.084450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2857.084455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2857.084460] 70435 total pagecache pages [ 2857.084472] 0 pages in swap cache [ 2857.095625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2857.099955] Swap cache stats: add 0, delete 0, find 0/0 [ 2857.114032] 70435 total pagecache pages [ 2857.129428] Free swap = 0kB [ 2857.132110] 0 pages in swap cache [ 2857.143836] Total swap = 0kB [ 2857.149053] Swap cache stats: add 0, delete 0, find 0/0 [ 2857.149062] Free swap = 0kB [ 2857.153686] 2097051 pages RAM [ 2857.156471] Total swap = 0kB [ 2857.166788] 0 pages HighMem/MovableOnly [ 2857.175984] 2097051 pages RAM [ 2857.176195] 363840 pages reserved [ 2857.179552] 0 pages HighMem/MovableOnly [ 2857.182679] 0 pages cma reserved [ 2857.185695] 363840 pages reserved [ 2857.191201] Out of memory (oom_kill_allocating_task): Kill process 29604 (syz-executor.1) score 0 or sacrifice child [ 2857.191238] Killed process 421 (syz-executor.1) total-vm:93348kB, anon-rss:156kB, file-rss:34816kB, shmem-rss:0kB [ 2857.244180] 0 pages cma reserved [ 2857.246599] oom_reaper: reaped process 421 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2858.742223] device hsr_slave_1 left promiscuous mode [ 2858.761448] device hsr_slave_0 left promiscuous mode [ 2858.807337] team0 (unregistering): Port device team_slave_1 removed [ 2858.829984] team0 (unregistering): Port device team_slave_0 removed [ 2858.863987] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2858.887032] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2859.007411] bond0 (unregistering): Released all slaves [ 2859.126025] device hsr_slave_0 entered promiscuous mode [ 2859.161930] device hsr_slave_1 entered promiscuous mode [ 2859.173489] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2859.200460] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2859.226802] systemd-journal cpuset=/ mems_allowed=0-1 [ 2859.232416] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2859.244920] CPU: 0 PID: 31494 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 2859.252928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2859.262279] Call Trace: [ 2859.264868] dump_stack+0x1b2/0x281 [ 2859.268581] dump_header+0x178/0x82f [ 2859.272308] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2859.277402] ? ___ratelimit+0x2cd/0x530 [ 2859.281383] oom_kill_process.cold+0x10/0xb18 [ 2859.285882] out_of_memory+0xe3e/0x1190 [ 2859.289849] ? oom_killer_disable+0x1c0/0x1c0 [ 2859.294333] ? mutex_trylock+0x152/0x1a0 [ 2859.298385] __alloc_pages_nodemask+0x23e1/0x2720 [ 2859.303240] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2859.308084] ? cache_grow_begin+0x41/0x630 [ 2859.312353] cache_grow_begin+0x91/0x630 [ 2859.316408] ? cache_grow_begin+0x91/0x630 [ 2859.320634] fallback_alloc+0x207/0x2c0 [ 2859.324604] kmem_cache_alloc+0x1e5/0x3c0 [ 2859.328745] getname_flags+0xc8/0x550 [ 2859.332539] user_path_at_empty+0x2a/0x50 [ 2859.336675] SyS_faccessat+0x21b/0x680 [ 2859.340579] ? SyS_fallocate+0x80/0x80 [ 2859.344459] ? do_syscall_64+0x4c/0x640 [ 2859.348422] ? SyS_faccessat+0x680/0x680 [ 2859.352483] do_syscall_64+0x1d5/0x640 [ 2859.356366] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2859.361554] RIP: 0033:0x7f045ccad9c7 [ 2859.365282] RSP: 002b:00007ffc07b7c298 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 2859.373004] RAX: ffffffffffffffda RBX: 00007ffc07b7f2c0 RCX: 00007f045ccad9c7 [ 2859.380266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000563b0658b9a3 [ 2859.387578] RBP: 00007ffc07b7c3e0 R08: 0000563b065813e5 R09: 0000000000000018 [ 2859.394841] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 2859.402133] R13: 0000000000000000 R14: 0000563b07261860 R15: 00007ffc07b7c8d0 [ 2859.482626] Mem-Info: [ 2859.485090] active_anon:16186 inactive_anon:68981 isolated_anon:0 [ 2859.485090] active_file:27 inactive_file:23 isolated_file:6 [ 2859.485090] unevictable:0 dirty:3 writeback:17 unstable:0 [ 2859.485090] slab_reclaimable:12498 slab_unreclaimable:117181 [ 2859.485090] mapped:53072 shmem:70407 pagetables:804 bounce:0 [ 2859.485090] free:14040 free_pcp:23 free_cma:0 [ 2859.522605] Node 0 active_anon:64376kB inactive_anon:259668kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:212272kB dirty:12kB writeback:68kB shmem:265244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2859.573040] Node 1 active_anon:360kB inactive_anon:16256kB active_file:112kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2859.695835] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2859.907195] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2859.950393] Node 0 DMA32 free:103324kB min:36200kB low:45248kB high:54296kB active_anon:65112kB inactive_anon:259664kB active_file:36kB inactive_file:264kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3440kB bounce:0kB free_pcp:580kB local_pcp:300kB free_cma:0kB [ 2860.086954] lowmem_reserve[]: 0 0 0 0 0 [ 2860.091089] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2860.149518] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2860.188096] lowmem_reserve[]: 0 0 0 0 0 [ 2860.192131] Node 1 Normal free:1940172kB min:53696kB low:67120kB high:80544kB active_anon:560kB inactive_anon:16256kB active_file:3124kB inactive_file:3296kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:160kB bounce:0kB free_pcp:1024kB local_pcp:300kB free_cma:0kB [ 2860.306727] lowmem_reserve[]: 0 0 0 0 0 [ 2860.310770] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11168kB [ 2860.329194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2860.356698] Node 0 DMA32: 1*4kB (U) 167*8kB (UM) 203*16kB (ME) 82*32kB (UME) 54*64kB (M) 130*128kB (UM) 16*256kB (UM) 1*512kB (U) 11*1024kB (U) 1*2048kB (U) 0*4096kB = 45228kB [ 2860.367968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2860.406600] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2860.423323] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2860.438135] Node 1 Normal: 15*4kB (ME) 7*8kB (UME) 4*16kB (UME) 3*32kB (UME) 1*64kB (M) 1*128kB (U) 2*256kB (ME) 41*512kB (UME) 1139*1024kB (UME) 141*2048kB (UE) 70*4096kB (U) = 1763796kB [ 2860.440134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2860.486044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2860.507179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2860.527400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2860.543843] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2860.556539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2860.559740] 8021q: adding VLAN 0 to HW filter on device team0 [ 2860.596719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2860.610260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2860.620968] 73088 total pagecache pages [ 2860.636824] 0 pages in swap cache [ 2860.640326] Swap cache stats: add 0, delete 0, find 0/0 [ 2860.645700] Free swap = 0kB [ 2860.666755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2860.674700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2860.676713] Total swap = 0kB [ 2860.685391] 2097051 pages RAM [ 2860.703094] 0 pages HighMem/MovableOnly [ 2860.711989] bridge0: port 1(bridge_slave_0) entered blocking state [ 2860.716537] 363840 pages reserved [ 2860.718416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2860.721794] 0 pages cma reserved [ 2860.769176] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2860.769484] Out of memory (oom_kill_allocating_task): Kill process 31494 (systemd-journal) score 0 or sacrifice child [ 2860.777073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2860.816336] Killed process 31494 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:3196kB [ 2860.816863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2860.847295] oom_reaper: reaped process 31494 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:3196kB [ 2860.873874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2860.886483] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2860.894335] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2860.904169] bridge0: port 2(bridge_slave_1) entered blocking state [ 2860.910612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2860.962655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2860.970192] systemd[1]: Stopped Journal Service. [ 2860.981519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2861.008435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2861.019551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2861.030743] systemd[1]: Starting Journal Service... [ 2861.099997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2861.145119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2861.167808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2861.206685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2861.222266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2861.240720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2861.266683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2861.277495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2861.307742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2861.314863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2861.326714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2861.334429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2861.366571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2861.370270] systemd-journald[513]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2861.376392] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2861.429128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2861.475757] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2861.517905] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2861.524189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2861.533804] systemd-journald[513]: /dev/kmsg buffer overrun, some messages lost. [ 2861.536060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2861.600753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2861.826028] Bluetooth: hci5 command 0x0409 tx timeout [ 2861.833517] Bluetooth: hci3 command 0x0409 tx timeout [ 2862.045075] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2862.078162] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2862.097196] systemd[1]: Started Journal Service. [ 2862.117179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2862.125278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 12:09:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) [ 2862.274251] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2862.306510] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2862.313459] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2862.349253] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2862.367630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2862.379763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2862.399725] device veth0_vlan entered promiscuous mode [ 2862.411978] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2862.415836] IPVS: ftp: loaded support on port[0] = 21 [ 2862.422458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2862.464177] device veth1_vlan entered promiscuous mode [ 2862.470003] Bluetooth: hci4 command 0x0406 tx timeout [ 2862.491280] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2862.537958] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2862.593491] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2862.639014] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2862.656269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2862.669780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2862.689498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2862.715506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2862.744040] device veth0_macvtap entered promiscuous mode [ 2862.768573] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2862.832766] device veth1_macvtap entered promiscuous mode [ 2862.835469] IPVS: ftp: loaded support on port[0] = 21 [ 2862.858179] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2862.936439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2862.981837] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2863.117802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2863.132102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.153287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2863.186044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.215409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2863.250968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.289660] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2863.314735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2863.427843] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2863.438851] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2863.463074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2863.490344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2863.521581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2863.546194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.585675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2863.605833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.626308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2863.649016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 12:10:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x2, 0x604}, 0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) 12:10:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x2, 0x604}, 0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) [ 2863.676796] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2863.711708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2863.737540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2863.747916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2863.766494] chnl_net:caif_netlink_parms(): no params data found [ 2863.905096] Bluetooth: hci3 command 0x041b tx timeout [ 2863.922987] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2863.924207] Bluetooth: hci5 command 0x041b tx timeout [ 2863.989492] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2864.024540] CPU: 0 PID: 659 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2864.032298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.041669] Call Trace: [ 2864.044272] dump_stack+0x1b2/0x281 [ 2864.047915] warn_alloc.cold+0x96/0x1cc [ 2864.051907] ? zone_watermark_ok_safe+0x220/0x220 [ 2864.056868] __alloc_pages_nodemask+0x2127/0x2720 [ 2864.061734] ? io_schedule_timeout+0x140/0x140 [ 2864.066338] ? lock_acquire+0x170/0x3f0 [ 2864.070337] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2864.075209] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2864.080804] ? __mutex_unlock_slowpath+0x75/0x770 [ 2864.085665] alloc_pages_current+0x155/0x260 [ 2864.090094] ion_page_pool_alloc+0x118/0x1b0 [ 2864.094953] ion_system_heap_allocate+0x133/0x8c0 [ 2864.099814] ? ion_alloc+0x187/0x810 [ 2864.103639] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2864.109244] ? ion_system_contig_heap_create+0x130/0x130 [ 2864.114713] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2864.119743] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2864.124626] ion_alloc+0x204/0x810 [ 2864.128174] ? ion_dma_buf_release+0x40/0x40 [ 2864.132591] ? __might_fault+0x177/0x1b0 [ 2864.136701] ion_ioctl+0xea/0x1f0 [ 2864.140165] ? ion_query_heaps+0x360/0x360 [ 2864.144432] ? lock_acquire+0x170/0x3f0 [ 2864.148413] ? lock_downgrade+0x740/0x740 [ 2864.152587] ? ion_query_heaps+0x360/0x360 [ 2864.156829] do_vfs_ioctl+0x75a/0xff0 [ 2864.160657] ? ioctl_preallocate+0x1a0/0x1a0 [ 2864.165084] ? lock_downgrade+0x740/0x740 [ 2864.169240] ? __fget+0x225/0x360 [ 2864.172688] ? do_vfs_ioctl+0xff0/0xff0 [ 2864.176682] ? security_file_ioctl+0x83/0xb0 [ 2864.181100] SyS_ioctl+0x7f/0xb0 [ 2864.184465] ? do_vfs_ioctl+0xff0/0xff0 [ 2864.188456] do_syscall_64+0x1d5/0x640 [ 2864.192360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2864.197587] RIP: 0033:0x45e219 [ 2864.200782] RSP: 002b:00007fd3ae418c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2864.208488] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2864.215770] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2864.223032] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2864.230328] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2864.237595] R13: 00007fffbf453d0f R14: 00007fd3ae4199c0 R15: 000000000119bf8c [ 2864.384321] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2864.417381] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2864.425428] CPU: 0 PID: 658 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2864.433154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.442614] Call Trace: [ 2864.445216] dump_stack+0x1b2/0x281 [ 2864.448852] warn_alloc.cold+0x96/0x1cc [ 2864.452832] ? zone_watermark_ok_safe+0x220/0x220 [ 2864.457700] __alloc_pages_nodemask+0x2127/0x2720 [ 2864.462542] ? io_schedule_timeout+0x140/0x140 [ 2864.467129] ? lock_acquire+0x170/0x3f0 [ 2864.471124] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2864.475974] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2864.481426] ? __mutex_unlock_slowpath+0x75/0x770 [ 2864.486277] alloc_pages_current+0x155/0x260 [ 2864.490715] ion_page_pool_alloc+0x118/0x1b0 [ 2864.495132] ion_system_heap_allocate+0x133/0x8c0 [ 2864.499979] ? ion_alloc+0x187/0x810 [ 2864.503688] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2864.509145] ? ion_system_contig_heap_create+0x130/0x130 [ 2864.514608] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2864.519635] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2864.524475] ion_alloc+0x204/0x810 [ 2864.528014] ? ion_dma_buf_release+0x40/0x40 [ 2864.532416] ? __might_fault+0x177/0x1b0 [ 2864.536497] ion_ioctl+0xea/0x1f0 [ 2864.539951] ? ion_query_heaps+0x360/0x360 [ 2864.544185] ? lock_acquire+0x170/0x3f0 [ 2864.549140] ? lock_downgrade+0x740/0x740 [ 2864.553281] ? ion_query_heaps+0x360/0x360 [ 2864.557510] do_vfs_ioctl+0x75a/0xff0 [ 2864.561308] ? ioctl_preallocate+0x1a0/0x1a0 [ 2864.565710] ? lock_downgrade+0x740/0x740 [ 2864.569859] ? __fget+0x225/0x360 [ 2864.573309] ? do_vfs_ioctl+0xff0/0xff0 [ 2864.577278] ? security_file_ioctl+0x83/0xb0 [ 2864.581682] SyS_ioctl+0x7f/0xb0 [ 2864.585043] ? do_vfs_ioctl+0xff0/0xff0 [ 2864.589010] do_syscall_64+0x1d5/0x640 [ 2864.592901] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2864.598090] RIP: 0033:0x45e219 [ 2864.601271] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2864.608978] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2864.616247] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2864.623515] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2864.630806] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2864.638075] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2864.680290] Mem-Info: [ 2864.738004] active_anon:16520 inactive_anon:71016 isolated_anon:0 [ 2864.738004] active_file:297 inactive_file:646 isolated_file:16 [ 2864.738004] unevictable:0 dirty:2 writeback:0 unstable:0 [ 2864.738004] slab_reclaimable:12751 slab_unreclaimable:117909 [ 2864.738004] mapped:53118 shmem:72462 pagetables:823 bounce:0 [ 2864.738004] free:33243 free_pcp:381 free_cma:0 [ 2864.807431] Node 0 active_anon:64508kB inactive_anon:259608kB active_file:2228kB inactive_file:1456kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210516kB dirty:0kB writeback:0kB shmem:265256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2864.848132] chnl_net:caif_netlink_parms(): no params data found [ 2864.899248] Node 1 active_anon:1572kB inactive_anon:24456kB active_file:460kB inactive_file:472kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:1956kB dirty:8kB writeback:0kB shmem:24592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2864.978101] bridge0: port 1(bridge_slave_0) entered blocking state [ 2864.985159] bridge0: port 1(bridge_slave_0) entered disabled state [ 2864.992696] device bridge_slave_0 entered promiscuous mode [ 2864.998799] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2865.027876] bridge0: port 2(bridge_slave_1) entered blocking state [ 2865.038106] bridge0: port 2(bridge_slave_1) entered disabled state [ 2865.045807] device bridge_slave_1 entered promiscuous mode [ 2865.057989] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2865.063119] Node 0 DMA32 free:244000kB min:36200kB low:45248kB high:54296kB active_anon:64608kB inactive_anon:259608kB active_file:2652kB inactive_file:2356kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:3184kB bounce:0kB free_pcp:1244kB local_pcp:524kB free_cma:0kB [ 2865.159062] lowmem_reserve[]: 0 0 0 0 0 [ 2865.163097] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2865.166572] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2865.261455] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2865.264700] lowmem_reserve[]: [ 2865.286581] bridge0: port 1(bridge_slave_0) entered blocking state [ 2865.297322] 0 0 0 0 0 [ 2865.309045] bridge0: port 1(bridge_slave_0) entered disabled state [ 2865.315380] Node 1 Normal free:115216kB min:53696kB low:67120kB high:80544kB active_anon:1572kB inactive_anon:24456kB active_file:460kB inactive_file:372kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:736kB pagetables:256kB bounce:0kB free_pcp:688kB local_pcp:16kB free_cma:0kB [ 2865.315406] lowmem_reserve[]: 0 0 0 0 0 [ 2865.315426] Node 0 DMA: 7*4kB (UM) 2*8kB (UM) 4*16kB (UM) 3*32kB [ 2865.438182] device bridge_slave_0 entered promiscuous mode [ 2865.448220] (UM) 4*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (E) = 11212kB [ 2865.487738] Node 0 DMA32: 74*4kB (UM) 954*8kB (UME) 640*16kB (UME) 2594*32kB (UE) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 101432kB [ 2865.513087] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2865.515477] bridge0: port 2(bridge_slave_1) entered blocking state [ 2865.532424] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2865.539033] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2865.544684] bridge0: port 2(bridge_slave_1) entered disabled state [ 2865.556319] CPU: 0 PID: 533 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2865.564045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2865.573398] Call Trace: [ 2865.576008] dump_stack+0x1b2/0x281 [ 2865.579664] warn_alloc.cold+0x96/0x1cc [ 2865.583631] device bridge_slave_1 entered promiscuous mode [ 2865.583644] ? zone_watermark_ok_safe+0x220/0x220 [ 2865.583666] __alloc_pages_nodemask+0x2127/0x2720 [ 2865.598971] ? finish_task_switch+0x178/0x610 [ 2865.603482] ? lock_acquire+0x170/0x3f0 [ 2865.607493] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2865.612351] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2865.617990] ? __mutex_unlock_slowpath+0x75/0x770 [ 2865.622853] alloc_pages_current+0x155/0x260 [ 2865.627537] ion_page_pool_alloc+0x118/0x1b0 [ 2865.631956] ion_system_heap_allocate+0x133/0x8c0 [ 2865.636811] ? ion_alloc+0x187/0x810 [ 2865.637906] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2865.640524] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2865.640537] ? ion_system_contig_heap_create+0x130/0x130 [ 2865.640551] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2865.657896] team0: Port device team_slave_0 added [ 2865.658127] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2865.672806] ion_alloc+0x204/0x810 [ 2865.676356] ? ion_dma_buf_release+0x40/0x40 [ 2865.680796] ? __might_fault+0x177/0x1b0 [ 2865.684874] ion_ioctl+0xea/0x1f0 [ 2865.688327] ? ion_query_heaps+0x360/0x360 [ 2865.692569] ? lock_acquire+0x170/0x3f0 [ 2865.694349] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2865.696543] ? lock_downgrade+0x740/0x740 [ 2865.696554] ? ion_query_heaps+0x360/0x360 [ 2865.696566] do_vfs_ioctl+0x75a/0xff0 [ 2865.715390] ? ioctl_preallocate+0x1a0/0x1a0 [ 2865.719803] ? lock_downgrade+0x740/0x740 [ 2865.723469] team0: Port device team_slave_1 added [ 2865.723957] ? __fget+0x225/0x360 [ 2865.732287] ? do_vfs_ioctl+0xff0/0xff0 [ 2865.736276] ? security_file_ioctl+0x83/0xb0 [ 2865.740688] SyS_ioctl+0x7f/0xb0 [ 2865.744058] ? do_vfs_ioctl+0xff0/0xff0 [ 2865.744312] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2865.748040] do_syscall_64+0x1d5/0x640 [ 2865.759470] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2865.764666] RIP: 0033:0x45e219 [ 2865.767851] RSP: 002b:00007fb79db61c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2865.775586] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2865.783117] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2865.790390] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.797664] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2865.804943] R13: 00007ffdaed1160f R14: 00007fb79db629c0 R15: 000000000119bf8c [ 2865.820536] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2865.843102] Node 1 Normal: 628*4kB (UME) 802*8kB (UME) 856*16kB (UME) 452*32kB (UME) 543*64kB (UM) 15*128kB (UM) 6*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 82976kB [ 2865.860810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2865.862081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2865.870436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2865.886831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2865.896295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2865.906437] 74768 total pagecache pages [ 2865.910425] 0 pages in swap cache [ 2865.914760] Swap cache stats: add 0, delete 0, find 0/0 [ 2865.918047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2865.920180] Free swap = 0kB [ 2865.930773] Total swap = 0kB [ 2865.934454] 2097051 pages RAM [ 2865.937561] 0 pages HighMem/MovableOnly [ 2865.941521] 363840 pages reserved [ 2865.946336] 0 pages cma reserved [ 2865.951466] device bridge_slave_1 left promiscuous mode [ 2865.962928] bridge0: port 2(bridge_slave_1) entered disabled state [ 2865.970376] device bridge_slave_0 left promiscuous mode [ 2865.983084] Bluetooth: hci3 command 0x040f tx timeout [ 2865.983257] bridge0: port 1(bridge_slave_0) entered disabled state [ 2866.021106] device veth1_vlan left promiscuous mode [ 2866.022836] warn_alloc_show_mem: 1 callbacks suppressed [ 2866.022840] Mem-Info: [ 2866.037551] device veth0_vlan left promiscuous mode [ 2866.057292] active_anon:16433 inactive_anon:71015 isolated_anon:0 [ 2866.057292] active_file:1248 inactive_file:1070 isolated_file:0 [ 2866.057292] unevictable:0 dirty:14 writeback:0 unstable:0 [ 2866.057292] slab_reclaimable:12794 slab_unreclaimable:118418 [ 2866.057292] mapped:53799 shmem:72461 pagetables:809 bounce:0 [ 2866.057292] free:55139 free_pcp:218 free_cma:0 [ 2866.062967] Bluetooth: hci5 command 0x040f tx timeout [ 2866.112534] Node 0 active_anon:64160kB inactive_anon:259608kB active_file:4436kB inactive_file:3852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213152kB dirty:36kB writeback:0kB shmem:265256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2866.222871] Node 1 active_anon:1572kB inactive_anon:24452kB active_file:556kB inactive_file:428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2044kB dirty:20kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2866.307642] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2866.368263] device hsr_slave_1 left promiscuous mode [ 2866.391669] device hsr_slave_0 left promiscuous mode [ 2866.411663] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2866.432461] Node 0 DMA32 free:45252kB min:36200kB low:45248kB high:54296kB active_anon:64076kB inactive_anon:259608kB active_file:4456kB inactive_file:3772kB unevictable:0kB writepending:36kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2980kB bounce:0kB free_pcp:848kB local_pcp:228kB free_cma:0kB [ 2866.463275] team0 (unregistering): Port device team_slave_1 removed [ 2866.486437] team0 (unregistering): Port device team_slave_0 removed [ 2866.519456] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2866.522431] lowmem_reserve[]: 0 0 0 0 0 [ 2866.530509] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2866.561987] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2866.622495] lowmem_reserve[]: 0 0 0 0 0 [ 2866.626529] Node 1 Normal free:81256kB min:53696kB low:67120kB high:80544kB active_anon:1572kB inactive_anon:24452kB active_file:596kB inactive_file:412kB unevictable:0kB writepending:76kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:672kB pagetables:256kB bounce:0kB free_pcp:752kB local_pcp:40kB free_cma:0kB [ 2866.679002] lowmem_reserve[]: 0 0 0 0 0 [ 2866.683164] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 4*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (E) = 11124kB [ 2866.687055] bond0 (unregistering): Released all slaves [ 2866.722273] Node 0 DMA32: 64*4kB (ME) 45*8kB (UME) 43*16kB (ME) 14*32kB (UE) 403*64kB (U) 72*128kB (U) 18*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41368kB [ 2866.749130] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2866.772230] Node 1 Normal: 114*4kB (ME) 123*8kB (UME) 102*16kB (UME) 80*32kB (UME) 38*64kB (M) 14*128kB (M) 6*256kB (UME) 47*512kB (UME) 24*1024kB (UE) 2*2048kB (ME) 0*4096kB = 64128kB [ 2866.825848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2866.841666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2866.851418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2866.882355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2866.896708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2866.925301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2866.953847] 73349 total pagecache pages [ 2866.966815] 0 pages in swap cache [ 2866.976191] Swap cache stats: add 0, delete 0, find 0/0 [ 2866.977591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2866.981575] Free swap = 0kB [ 2867.042099] Total swap = 0kB [ 2867.045472] 2097051 pages RAM [ 2867.053704] 0 pages HighMem/MovableOnly [ 2867.059759] 363840 pages reserved [ 2867.071897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2867.078350] 0 pages cma reserved [ 2867.088223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2867.163317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2867.315396] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2867.346288] team0: Port device team_slave_0 added [ 2867.378644] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2867.406409] team0: Port device team_slave_1 added [ 2867.460416] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2867.515508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2867.541734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2867.621749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2867.656463] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2867.677125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2867.691685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2867.821619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2867.875808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2867.917048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2868.061626] Bluetooth: hci3 command 0x0419 tx timeout [ 2868.109522] device hsr_slave_0 entered promiscuous mode [ 2868.134411] device hsr_slave_1 entered promiscuous mode [ 2868.215116] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2868.228019] Bluetooth: hci5 command 0x0419 tx timeout [ 2868.341424] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2868.346585] CPU: 0 PID: 859 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2868.354303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2868.363807] Call Trace: [ 2868.366402] dump_stack+0x1b2/0x281 [ 2868.370031] warn_alloc.cold+0x96/0x1cc [ 2868.374008] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2868.379023] ? zone_watermark_ok_safe+0x220/0x220 [ 2868.383879] __alloc_pages_nodemask+0x2127/0x2720 [ 2868.388734] ? lock_acquire+0x170/0x3f0 [ 2868.392714] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2868.397572] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2868.403032] ? __mutex_unlock_slowpath+0x75/0x770 [ 2868.407888] alloc_pages_current+0x155/0x260 [ 2868.412319] ion_page_pool_alloc+0x118/0x1b0 [ 2868.416764] ion_system_heap_allocate+0x133/0x8c0 [ 2868.421618] ? ion_system_contig_heap_create+0x130/0x130 [ 2868.427095] ? kmem_cache_alloc_trace+0x324/0x3d0 [ 2868.431944] ion_alloc+0x204/0x810 [ 2868.435489] ? ion_dma_buf_release+0x40/0x40 [ 2868.439901] ? __might_fault+0x177/0x1b0 [ 2868.444008] ion_ioctl+0xea/0x1f0 [ 2868.447460] ? ion_query_heaps+0x360/0x360 [ 2868.451697] ? lock_acquire+0x170/0x3f0 [ 2868.455672] ? lock_downgrade+0x740/0x740 [ 2868.459850] ? ion_query_heaps+0x360/0x360 [ 2868.464085] do_vfs_ioctl+0x75a/0xff0 [ 2868.467885] ? ioctl_preallocate+0x1a0/0x1a0 [ 2868.472294] ? lock_downgrade+0x740/0x740 [ 2868.476447] ? __fget+0x225/0x360 [ 2868.479142] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 2868.479898] ? do_vfs_ioctl+0xff0/0xff0 [ 2868.479910] ? security_file_ioctl+0x83/0xb0 [ 2868.498845] SyS_ioctl+0x7f/0xb0 [ 2868.502215] ? do_vfs_ioctl+0xff0/0xff0 [ 2868.506190] do_syscall_64+0x1d5/0x640 [ 2868.510082] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2868.515276] RIP: 0033:0x45e219 [ 2868.518489] RSP: 002b:00007fbe44510c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2868.526197] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2868.533466] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2868.540738] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.548010] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2868.555278] R13: 00007ffdd364849f R14: 00007fbe445119c0 R15: 000000000119bf8c [ 2868.561855] , order=0, oom_score_adj=0 [ 2868.587333] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2868.624260] CPU: 1 PID: 32692 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2868.632172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2868.641526] Call Trace: [ 2868.644121] dump_stack+0x1b2/0x281 [ 2868.647748] dump_header+0x178/0x82f [ 2868.651473] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2868.656569] ? ___ratelimit+0x2cd/0x530 [ 2868.660538] oom_kill_process.cold+0x10/0xb18 [ 2868.665045] out_of_memory+0xe3e/0x1190 [ 2868.669023] ? oom_killer_disable+0x1c0/0x1c0 [ 2868.673519] ? mutex_trylock+0x152/0x1a0 [ 2868.677586] __alloc_pages_nodemask+0x23e1/0x2720 [ 2868.682468] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2868.687326] alloc_pages_current+0x155/0x260 [ 2868.691734] filemap_fault+0xea3/0x1980 [ 2868.695725] ext4_filemap_fault+0x84/0xb0 [ 2868.699870] __do_fault+0xfa/0x380 [ 2868.703493] __handle_mm_fault+0x2497/0x4620 [ 2868.707899] ? vm_insert_page+0x7c0/0x7c0 [ 2868.712052] ? free_object+0xe4/0x240 [ 2868.715864] handle_mm_fault+0x391/0x860 [ 2868.719953] __do_page_fault+0x549/0xad0 [ 2868.724048] ? spurious_fault+0x640/0x640 [ 2868.728193] ? do_page_fault+0x60/0x500 [ 2868.732166] ? page_fault+0x2f/0x50 [ 2868.735789] page_fault+0x45/0x50 [ 2868.739238] RIP: 0001:0x32 [ 2868.742071] RSP: 0bb8:00000000002bc14f EFLAGS: 00000003 [ 2869.710014] Mem-Info: [ 2869.768253] active_anon:16445 inactive_anon:71015 isolated_anon:0 [ 2869.768253] active_file:24 inactive_file:0 isolated_file:0 [ 2869.768253] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2869.768253] slab_reclaimable:12776 slab_unreclaimable:116956 [ 2869.768253] mapped:52593 shmem:72461 pagetables:828 bounce:0 [ 2869.768253] free:25203 free_pcp:36 free_cma:0 [ 2870.045135] Node 0 active_anon:64112kB inactive_anon:259608kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:265256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2870.160270] Mem-Info: [ 2870.162735] active_anon:16445 inactive_anon:71015 isolated_anon:0 [ 2870.162735] active_file:36 inactive_file:0 isolated_file:0 [ 2870.162735] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2870.162735] slab_reclaimable:12776 slab_unreclaimable:116956 [ 2870.162735] mapped:52593 shmem:72461 pagetables:828 bounce:0 [ 2870.162735] free:25203 free_pcp:36 free_cma:0 [ 2870.288537] Node 1 active_anon:1668kB inactive_anon:24452kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1468kB dirty:0kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2870.455970] Node 0 active_anon:64112kB inactive_anon:259608kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:265256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2870.521204] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2870.697140] Node 1 active_anon:1668kB inactive_anon:24452kB active_file:44kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1468kB dirty:0kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2870.752611] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2870.757684] Node 0 DMA32 free:36196kB min:36200kB low:45248kB high:54296kB active_anon:64112kB inactive_anon:259608kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:3036kB bounce:0kB free_pcp:40kB local_pcp:24kB free_cma:0kB [ 2870.945791] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2871.018091] lowmem_reserve[]: 0 0 0 0 0 [ 2871.059762] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2871.158429] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2871.197772] Node 0 DMA32 free:36196kB min:36200kB low:45248kB high:54296kB active_anon:64112kB inactive_anon:259608kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:3036kB bounce:0kB free_pcp:40kB local_pcp:16kB free_cma:0kB [ 2871.275226] lowmem_reserve[]: 0 0 0 0 0 [ 2871.279246] Node 1 Normal free:53552kB min:53696kB low:67120kB high:80544kB active_anon:1668kB inactive_anon:24452kB active_file:32kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:768kB pagetables:276kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2871.422008] lowmem_reserve[]: 0 0 0 0 0 [ 2871.426072] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2871.460872] lowmem_reserve[]: 0 0 0 0 0 [ 2871.462047] lowmem_reserve[]: 0 [ 2871.464922] Node 0 DMA: [ 2871.468255] 0 [ 2871.468264] 0*4kB 0*8kB 0*16kB 0*32kB 3*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11072kB [ 2871.537590] Node 0 DMA32: 465*4kB (UME) 195*8kB (ME) 108*16kB (UME) 48*32kB (ME) 156*64kB (UM) 108*128kB (U) 20*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35612kB [ 2871.568276] 0 0 0 [ 2871.577690] Node 1 Normal free:53652kB min:53696kB low:67120kB high:80544kB active_anon:1668kB inactive_anon:24452kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:736kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2871.650542] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2871.734350] Node 1 Normal: 104*4kB (UME) 73*8kB (UME) 68*16kB (ME) 59*32kB (UME) 39*64kB (UM) 19*128kB (M) 39*256kB (UME) 10*512kB (UME) 11*1024kB (UE) 7*2048kB (UME) 1*4096kB (U) = 53704kB [ 2871.821288] lowmem_reserve[]: 0 0 0 0 0 [ 2871.825330] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 3*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11072kB [ 2871.881906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2871.949331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2871.957956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2871.971281] Node 0 DMA32: 571*4kB (UME) 203*8kB (UME) 109*16kB (UME) 50*32kB (UME) 157*64kB (UM) 108*128kB (U) 20*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36244kB [ 2872.076060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2872.111728] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2872.115235] 72502 total pagecache pages [ 2872.183627] Node 1 Normal: 104*4kB (UME) 73*8kB (UME) 68*16kB (ME) 59*32kB (UME) 39*64kB (UM) 19*128kB (M) 39*256kB (UME) 10*512kB (UME) 11*1024kB (UE) 7*2048kB (UME) 1*4096kB (U) = 53704kB [ 2872.198161] 0 pages in swap cache [ 2872.250472] Swap cache stats: add 0, delete 0, find 0/0 [ 2872.255870] Free swap = 0kB [ 2872.312896] Total swap = 0kB [ 2872.315945] 2097051 pages RAM [ 2872.339457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2872.348333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2872.361556] 0 pages HighMem/MovableOnly [ 2872.365555] 363840 pages reserved [ 2872.412384] 0 pages cma reserved [ 2872.415870] Out of memory (oom_kill_allocating_task): Kill process 32692 (syz-executor.2) score 0 or sacrifice child [ 2872.488405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2872.556620] Killed process 853 (syz-executor.2) total-vm:93352kB, anon-rss:152kB, file-rss:34616kB, shmem-rss:0kB [ 2872.568077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2872.645210] oom_reaper: reaped process 853 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2872.650582] 72489 total pagecache pages [ 2872.711098] 0 pages in swap cache [ 2872.714609] Swap cache stats: add 0, delete 0, find 0/0 [ 2872.771077] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2872.784100] Free swap = 0kB [ 2872.787127] Total swap = 0kB [ 2872.821666] 2097051 pages RAM [ 2872.824800] 0 pages HighMem/MovableOnly [ 2872.847564] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2872.858637] 363840 pages reserved [ 2872.862116] 0 pages cma reserved [ 2872.887022] CPU: 0 PID: 8003 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2872.894513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2872.903896] Call Trace: [ 2872.906501] dump_stack+0x1b2/0x281 [ 2872.910137] dump_header+0x178/0x82f [ 2872.913872] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2872.918985] ? ___ratelimit+0x2cd/0x530 [ 2872.922970] oom_kill_process.cold+0x10/0xb18 [ 2872.927478] out_of_memory+0xe3e/0x1190 [ 2872.931460] ? oom_killer_disable+0x1c0/0x1c0 [ 2872.935955] ? mutex_trylock+0x152/0x1a0 [ 2872.940022] __alloc_pages_nodemask+0x23e1/0x2720 [ 2872.944899] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2872.949794] alloc_pages_current+0x155/0x260 [ 2872.954210] filemap_fault+0xea3/0x1980 [ 2872.958203] ext4_filemap_fault+0x84/0xb0 [ 2872.962394] __do_fault+0xfa/0x380 [ 2872.965967] __handle_mm_fault+0x2497/0x4620 [ 2872.970383] ? vm_insert_page+0x7c0/0x7c0 [ 2872.974546] ? lock_downgrade+0x740/0x740 [ 2872.978720] handle_mm_fault+0x391/0x860 [ 2872.982799] __do_page_fault+0x549/0xad0 [ 2872.986873] ? spurious_fault+0x640/0x640 [ 2872.991031] ? do_page_fault+0x60/0x500 [ 2872.995012] ? page_fault+0x2f/0x50 [ 2872.998653] page_fault+0x45/0x50 [ 2873.002107] RIP: 0000:0xb358f8 [ 2873.005291] RSP: 32928406:000000c00003dec8 EFLAGS: 00438920 [ 2873.256835] Mem-Info: [ 2873.280258] active_anon:16445 inactive_anon:71015 isolated_anon:0 [ 2873.280258] active_file:0 inactive_file:10 isolated_file:0 [ 2873.280258] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2873.280258] slab_reclaimable:12773 slab_unreclaimable:116559 [ 2873.280258] mapped:52593 shmem:72461 pagetables:828 bounce:0 [ 2873.280258] free:13940 free_pcp:147 free_cma:0 [ 2873.286737] syz-executor.2: [ 2873.324841] Node 0 active_anon:64112kB inactive_anon:259608kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:265256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2873.328688] page allocation failure: order:0 [ 2873.367203] Node 1 active_anon:1668kB inactive_anon:24452kB active_file:76kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1468kB dirty:0kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2873.373233] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2873.410304] Node 0 [ 2873.413848] (null) [ 2873.417446] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2873.428859] syz-executor.2 cpuset= [ 2873.459695] lowmem_reserve[]: [ 2873.462446] / [ 2873.463294] 0 [ 2873.466417] mems_allowed=0-1 [ 2873.476905] 2717 2718 2718 2718 [ 2873.481530] CPU: 0 PID: 859 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2873.482627] Node 0 [ 2873.489262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2873.489267] Call Trace: [ 2873.489291] dump_stack+0x1b2/0x281 [ 2873.489304] warn_alloc.cold+0x96/0x1cc [ 2873.489316] ? zone_watermark_ok_safe+0x220/0x220 [ 2873.489326] ? usleep_range+0x130/0x130 [ 2873.489334] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2873.489347] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2873.489357] ? run_timer_softirq+0x5a0/0x5a0 [ 2873.489374] __alloc_pages_nodemask+0x2127/0x2720 [ 2873.489388] ? lock_acquire+0x170/0x3f0 [ 2873.489402] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2873.489414] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2873.489428] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2873.502866] DMA32 free:18180kB min:36200kB low:45248kB high:54296kB active_anon:64076kB inactive_anon:259608kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:3036kB bounce:0kB free_pcp:552kB local_pcp:436kB free_cma:0kB [ 2873.503720] ? retint_kernel+0x2d/0x2d [ 2873.507327] lowmem_reserve[]: [ 2873.511322] alloc_pages_current+0x155/0x260 [ 2873.511338] ion_page_pool_alloc+0x118/0x1b0 [ 2873.511348] ion_system_heap_allocate+0x133/0x8c0 [ 2873.511362] ? ion_system_contig_heap_create+0x130/0x130 [ 2873.511372] ? kmem_cache_alloc_trace+0x324/0x3d0 [ 2873.511383] ion_alloc+0x204/0x810 [ 2873.511397] ? ion_dma_buf_release+0x40/0x40 [ 2873.511412] ? __might_fault+0x177/0x1b0 [ 2873.526094] 0 [ 2873.530347] ion_ioctl+0xea/0x1f0 [ 2873.530359] ? ion_query_heaps+0x360/0x360 [ 2873.530372] ? lock_acquire+0x170/0x3f0 [ 2873.530380] ? lock_downgrade+0x740/0x740 [ 2873.530387] ? ion_query_heaps+0x360/0x360 [ 2873.530397] do_vfs_ioctl+0x75a/0xff0 [ 2873.530408] ? ioctl_preallocate+0x1a0/0x1a0 [ 2873.530420] ? lock_downgrade+0x740/0x740 [ 2873.534825] 0 [ 2873.539677] ? __fget+0x225/0x360 [ 2873.539688] ? do_vfs_ioctl+0xff0/0xff0 [ 2873.539698] ? security_file_ioctl+0x83/0xb0 [ 2873.539708] SyS_ioctl+0x7f/0xb0 [ 2873.539716] ? do_vfs_ioctl+0xff0/0xff0 [ 2873.539727] do_syscall_64+0x1d5/0x640 [ 2873.539746] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2873.539755] RIP: 0033:0x45e219 [ 2873.539760] RSP: 002b:00007fbe44510c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2873.539771] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2873.539776] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2873.539781] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2873.539786] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2873.539791] R13: 00007ffdd364849f R14: 00007fbe445119c0 R15: 000000000119bf8c [ 2873.559158] Mem-Info: [ 2873.594000] 0 [ 2873.613054] active_anon:16419 inactive_anon:71015 isolated_anon:0 [ 2873.613054] active_file:18 inactive_file:10 isolated_file:0 [ 2873.613054] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2873.613054] slab_reclaimable:12771 slab_unreclaimable:116490 [ 2873.613054] mapped:52593 shmem:72461 pagetables:828 bounce:0 [ 2873.613054] free:13979 free_pcp:185 free_cma:0 [ 2873.620255] 0 [ 2873.636430] Node 0 active_anon:64076kB inactive_anon:259608kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:265256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2873.642615] 0 [ 2873.656599] Node 1 active_anon:1600kB inactive_anon:24452kB active_file:56kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1468kB dirty:0kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2873.671704] Node 0 [ 2873.681931] Node 0 [ 2873.697613] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2873.706000] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2873.716105] lowmem_reserve[]: [ 2873.728606] lowmem_reserve[]: [ 2873.747673] 0 [ 2873.754711] 0 [ 2873.800883] 2717 [ 2873.819981] 0 [ 2873.861196] 2718 [ 2873.877644] 0 0 0 [ 2873.921254] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:1600kB inactive_anon:24452kB active_file:56kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:736kB pagetables:276kB bounce:0kB free_pcp:188kB local_pcp:68kB free_cma:0kB [ 2873.928727] 2718 [ 2873.959655] lowmem_reserve[]: 0 0 0 0 0 [ 2873.965772] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10972kB [ 2873.966900] 2718 [ 2873.988830] Node 0 DMA32: 529*4kB (UME) 199*8kB (UME) 109*16kB (UME) 48*32kB (ME) 3*64kB (UM) 46*128kB (U) 20*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18188kB [ 2874.005877] Node 0 DMA32 free:18148kB min:36200kB low:45248kB high:54296kB active_anon:64076kB inactive_anon:259608kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:3036kB bounce:0kB free_pcp:552kB local_pcp:116kB free_cma:0kB [ 2874.014295] Node 0 [ 2874.050393] lowmem_reserve[]: [ 2874.050641] Normal: [ 2874.052685] 0 [ 2874.055786] 0*4kB [ 2874.071767] 0 [ 2874.073011] 0*8kB [ 2874.073943] 0 [ 2874.075737] 0*16kB [ 2874.085836] 0 [ 2874.086704] 0*32kB [ 2874.093088] 0 [ 2874.096465] 0*64kB [ 2874.097162] Node 0 [ 2874.097165] 0*128kB 0*256kB [ 2874.107630] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2874.114992] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2874.151501] lowmem_reserve[]: [ 2874.154206] Node 1 [ 2874.154210] 0 0 [ 2874.157311] Normal: [ 2874.173485] 0 [ 2874.174547] 103*4kB [ 2874.175861] 0 [ 2874.177668] (ME) 72*8kB (ME) 69*16kB (UME) 58*32kB (ME) 39*64kB (UM) 19*128kB (M) 8*256kB (ME) 7*512kB (UME) 2*1024kB (UE) 3*2048kB (UME) 1*4096kB (U) = 26796kB [ 2874.188205] 0 [ 2874.210370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2874.211907] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:1600kB inactive_anon:24452kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:736kB pagetables:276kB bounce:0kB free_pcp:188kB local_pcp:120kB free_cma:0kB [ 2874.232030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2874.280060] lowmem_reserve[]: 0 0 0 0 0 [ 2874.280137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2874.284144] Node 0 [ 2874.306373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2874.309770] DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10972kB [ 2874.327839] 72489 total pagecache pages [ 2874.334796] 0 pages in swap cache [ 2874.343784] Node 0 DMA32: 529*4kB (UME) 199*8kB (UME) 109*16kB (UME) 49*32kB (UME) 3*64kB (UM) 46*128kB (U) 20*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18220kB [ 2874.351468] Swap cache stats: add 0, delete 0, find 0/0 [ 2874.372601] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2874.377082] Free swap = 0kB [ 2874.399391] Total swap = 0kB [ 2874.400952] Node 1 Normal: [ 2874.402436] 2097051 pages RAM [ 2874.402443] 0 pages HighMem/MovableOnly [ 2874.405375] 103*4kB [ 2874.417540] 363840 pages reserved [ 2874.422517] (ME) [ 2874.425518] 0 pages cma reserved [ 2874.425521] 72*8kB (ME) [ 2874.440436] Out of memory (oom_kill_allocating_task): Kill process 8003 (syz-fuzzer) score 0 or sacrifice child [ 2874.444848] 69*16kB [ 2874.471401] Killed process 444 (syz-executor.5) total-vm:85024kB, anon-rss:72kB, file-rss:4kB, shmem-rss:0kB [ 2874.473368] (UME) 58*32kB (ME) 39*64kB (UM) 19*128kB (M) 8*256kB (ME) 7*512kB (UME) 2*1024kB (UE) 3*2048kB (UME) 1*4096kB (U) = 26796kB [ 2874.507039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2874.520485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2874.533554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2874.546864] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2874.551359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2874.572333] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2874.583679] 72489 total pagecache pages [ 2874.584290] CPU: 1 PID: 8003 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2874.587746] 0 pages in swap cache [ 2874.595130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2874.598633] Swap cache stats: add 0, delete 0, find 0/0 [ 2874.607928] Call Trace: [ 2874.607953] dump_stack+0x1b2/0x281 [ 2874.607964] dump_header+0x178/0x82f [ 2874.607975] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2874.607983] ? ___ratelimit+0x2cd/0x530 [ 2874.607992] oom_kill_process.cold+0x10/0xb18 [ 2874.608010] out_of_memory+0xe3e/0x1190 [ 2874.613401] Free swap = 0kB [ 2874.615982] ? oom_killer_disable+0x1c0/0x1c0 [ 2874.619633] Total swap = 0kB [ 2874.623291] ? mutex_trylock+0x152/0x1a0 [ 2874.637493] 2097051 pages RAM [ 2874.640800] __alloc_pages_nodemask+0x23e1/0x2720 [ 2874.643809] 0 pages HighMem/MovableOnly [ 2874.648318] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2874.648341] alloc_pages_current+0x155/0x260 [ 2874.648355] filemap_fault+0xea3/0x1980 [ 2874.651359] 363840 pages reserved [ 2874.655442] ext4_filemap_fault+0x84/0xb0 [ 2874.658585] 0 pages cma reserved [ 2874.663400] __do_fault+0xfa/0x380 [ 2874.694999] __handle_mm_fault+0x2497/0x4620 [ 2874.699418] ? vm_insert_page+0x7c0/0x7c0 [ 2874.703565] ? lock_downgrade+0x740/0x740 [ 2874.707722] handle_mm_fault+0x391/0x860 [ 2874.711791] __do_page_fault+0x549/0xad0 [ 2874.713781] syz-executor.2: page allocation failure: order:4 [ 2874.715858] ? spurious_fault+0x640/0x640 [ 2874.715869] ? do_page_fault+0x60/0x500 [ 2874.721705] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2874.725800] ? page_fault+0x2f/0x50 [ 2874.729781] (null) [ 2874.736845] page_fault+0x45/0x50 [ 2874.740495] syz-executor.2 cpuset= [ 2874.742593] RIP: 0000:0xb358f8 [ 2874.746033] / [ 2874.749584] RSP: 32928406:000000c00003dec8 EFLAGS: 00438920 [ 2874.752829] mems_allowed=0-1 [ 2874.761709] Mem-Info: [ 2874.766360] active_anon:16419 inactive_anon:71015 isolated_anon:0 [ 2874.766360] active_file:15 inactive_file:13 isolated_file:0 [ 2874.766360] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2874.766360] slab_reclaimable:12756 slab_unreclaimable:116480 [ 2874.766360] mapped:52593 shmem:72461 pagetables:828 bounce:0 [ 2874.766360] free:24844 free_pcp:475 free_cma:0 [ 2874.786674] CPU: 0 PID: 859 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2874.806055] Node 0 active_anon:64076kB inactive_anon:259608kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:265256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2874.807394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2874.807399] Call Trace: [ 2874.807421] dump_stack+0x1b2/0x281 [ 2874.807434] warn_alloc.cold+0x96/0x1cc [ 2874.807446] ? zone_watermark_ok_safe+0x220/0x220 [ 2874.807473] __alloc_pages_nodemask+0x2127/0x2720 [ 2874.841516] Node 1 active_anon:1600kB inactive_anon:24452kB active_file:52kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1468kB dirty:0kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2874.844519] ? lock_acquire+0x170/0x3f0 [ 2874.847090] Node 0 [ 2874.850717] ? lock_acquire+0x170/0x3f0 [ 2874.850734] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2874.850750] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2874.850761] ? __mutex_unlock_slowpath+0x75/0x770 [ 2874.850776] alloc_pages_current+0x155/0x260 [ 2874.850791] ion_page_pool_alloc+0x118/0x1b0 [ 2874.850803] ion_system_heap_allocate+0x133/0x8c0 [ 2874.854794] DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2874.859632] ? _raw_spin_unlock+0x29/0x40 [ 2874.859644] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2874.859654] ? ion_system_contig_heap_create+0x130/0x130 [ 2874.859670] ? kmem_cache_alloc_trace+0x324/0x3d0 [ 2874.859681] ion_alloc+0x27a/0x810 [ 2874.859694] ? ion_dma_buf_release+0x40/0x40 [ 2874.859706] ? __might_fault+0x177/0x1b0 [ 2874.859723] ion_ioctl+0xea/0x1f0 [ 2874.859734] ? ion_query_heaps+0x360/0x360 [ 2874.870174] lowmem_reserve[]: [ 2874.891672] ? lock_acquire+0x170/0x3f0 [ 2874.891685] ? lock_downgrade+0x740/0x740 [ 2874.891695] ? ion_query_heaps+0x360/0x360 [ 2874.891705] do_vfs_ioctl+0x75a/0xff0 [ 2874.891718] ? ioctl_preallocate+0x1a0/0x1a0 [ 2874.891725] ? lock_downgrade+0x740/0x740 [ 2874.891738] ? __fget+0x225/0x360 [ 2874.891747] ? do_vfs_ioctl+0xff0/0xff0 [ 2874.891757] ? security_file_ioctl+0x83/0xb0 [ 2874.891766] SyS_ioctl+0x7f/0xb0 [ 2874.891778] ? do_vfs_ioctl+0xff0/0xff0 [ 2874.891788] do_syscall_64+0x1d5/0x640 [ 2874.891805] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2874.901358] 0 [ 2874.901959] RIP: 0033:0x45e219 [ 2874.906783] 2717 [ 2874.912220] RSP: 002b:00007fbe44510c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2874.912230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2874.912235] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2874.912239] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2874.912244] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2874.912249] R13: 00007ffdd364849f R14: 00007fbe445119c0 R15: 000000000119bf8c [ 2874.933670] Mem-Info: [ 2874.964380] 2718 [ 2874.989136] active_anon:16419 inactive_anon:71015 isolated_anon:0 [ 2874.989136] active_file:15 inactive_file:13 isolated_file:0 [ 2874.989136] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2874.989136] slab_reclaimable:12756 slab_unreclaimable:116480 [ 2874.989136] mapped:52593 shmem:72461 pagetables:828 bounce:0 [ 2874.989136] free:24844 free_pcp:475 free_cma:0 [ 2874.995869] 2718 [ 2875.017654] Node 0 active_anon:64076kB inactive_anon:259608kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:265256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2875.028472] 2718 [ 2875.049155] Node 1 active_anon:1600kB inactive_anon:24452kB active_file:52kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1468kB dirty:0kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2875.081266] Node 0 [ 2875.089630] Node 0 [ 2875.112826] DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2875.154968] DMA32 free:35308kB min:36200kB low:45248kB high:54296kB active_anon:64076kB inactive_anon:259608kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:3036kB bounce:0kB free_pcp:1212kB local_pcp:592kB free_cma:0kB [ 2875.190479] lowmem_reserve[]: [ 2875.214384] lowmem_reserve[]: [ 2875.246040] 0 2717 2718 2718 2718 [ 2875.283616] Node 0 DMA32 free:35308kB min:36200kB low:45248kB high:54296kB active_anon:64076kB inactive_anon:259608kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:3036kB bounce:0kB free_pcp:1212kB local_pcp:620kB free_cma:0kB [ 2875.283777] 0 0 0 0 0 [ 2875.327812] lowmem_reserve[]: 0 0 0 0 0 [ 2875.330692] Node 0 [ 2875.332455] Node 0 [ 2875.332476] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2875.334692] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2875.336926] lowmem_reserve[]: [ 2875.379354] lowmem_reserve[]: [ 2875.391915] 0 0 0 0 0 [ 2875.397591] Node 1 Normal free:52996kB min:53696kB low:67120kB high:80544kB active_anon:1600kB inactive_anon:24452kB active_file:52kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:736kB pagetables:276kB bounce:0kB free_pcp:688kB local_pcp:68kB free_cma:0kB [ 2875.412410] 0 [ 2875.431371] lowmem_reserve[]: 0 0 0 0 0 [ 2875.440752] 0 0 0 0 [ 2875.443113] Node 1 Normal free:52996kB min:53696kB low:67120kB high:80544kB active_anon:1600kB inactive_anon:24452kB active_file:56kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:736kB pagetables:276kB bounce:0kB free_pcp:688kB local_pcp:620kB free_cma:0kB [ 2875.451852] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 3*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11072kB [ 2875.487311] lowmem_reserve[]: 0 0 0 0 0 [ 2875.513717] Node 0 [ 2875.523577] Node 0 [ 2875.524161] DMA32: [ 2875.525827] DMA: 0*4kB [ 2875.536703] 532*4kB (UME) [ 2875.545817] 0*8kB [ 2875.545878] 204*8kB [ 2875.555019] 0*16kB 0*32kB 3*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11072kB [ 2875.565937] (UME) [ 2875.587948] Node 0 DMA32: 532*4kB (UME) 204*8kB (UME) 111*16kB [ 2875.590153] 111*16kB (UME) [ 2875.596225] (UME) 53*32kB (UME) 156*64kB (UM) 102*128kB (U) 20*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35392kB [ 2875.614631] 53*32kB [ 2875.630543] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2875.640297] (UME) 156*64kB (UM) 102*128kB (U) 20*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35392kB [ 2875.651592] Node 1 Normal: 105*4kB (UME) 75*8kB (UME) 68*16kB (ME) 59*32kB (UME) 41*64kB (UM) 21*128kB (UM) 39*256kB (UME) 12*512kB (UME) 13*1024kB (UE) 5*2048kB (UME) 1*4096kB (U) = 53084kB [ 2875.670592] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2875.670640] Node 1 Normal: 105*4kB (UME) 75*8kB (UME) 68*16kB (ME) 59*32kB (UME) 41*64kB (UM) 21*128kB (UM) 39*256kB (UME) 12*512kB (UME) 13*1024kB (UE) 5*2048kB (UME) 1*4096kB (U) = 53084kB [ 2875.670721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2875.670726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2875.670731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2875.670736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2875.670740] 72489 total pagecache pages [ 2875.670749] 0 pages in swap cache [ 2875.693636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2875.713058] Swap cache stats: add 0, delete 0, find 0/0 [ 2875.729117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2875.751327] Free swap = 0kB [ 2875.765507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2875.779468] Total swap = 0kB [ 2875.782556] 2097051 pages RAM [ 2875.785659] 0 pages HighMem/MovableOnly [ 2875.790398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2875.803809] 363840 pages reserved [ 2875.809979] 72489 total pagecache pages [ 2875.813883] 0 pages cma reserved [ 2875.813974] 0 pages in swap cache [ 2875.825894] Out of memory (oom_kill_allocating_task): Kill process 8003 (syz-fuzzer) score 0 or sacrifice child [ 2875.831248] Swap cache stats: add 0, delete 0, find 0/0 [ 2875.851410] Killed process 32691 (syz-executor.2) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2875.854398] Free swap = 0kB [ 2875.895823] Total swap = 0kB [ 2875.903079] 2097051 pages RAM [ 2875.906206] 0 pages HighMem/MovableOnly [ 2875.919254] oom_reaper: reaped process 32691 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2875.942127] 363840 pages reserved [ 2875.945626] 0 pages cma reserved [ 2875.959256] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2876.005480] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2876.025721] CPU: 1 PID: 8003 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2876.033192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2876.042548] Call Trace: [ 2876.045144] dump_stack+0x1b2/0x281 [ 2876.048783] dump_header+0x178/0x82f [ 2876.052500] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2876.057619] ? ___ratelimit+0x2cd/0x530 [ 2876.061624] oom_kill_process.cold+0x10/0xb18 [ 2876.066134] out_of_memory+0xe3e/0x1190 [ 2876.070119] ? oom_killer_disable+0x1c0/0x1c0 [ 2876.074615] ? mutex_trylock+0x152/0x1a0 [ 2876.078680] __alloc_pages_nodemask+0x23e1/0x2720 [ 2876.083567] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2876.088430] alloc_pages_current+0x155/0x260 [ 2876.092846] filemap_fault+0xea3/0x1980 [ 2876.096834] ext4_filemap_fault+0x84/0xb0 [ 2876.100989] __do_fault+0xfa/0x380 [ 2876.104537] __handle_mm_fault+0x2497/0x4620 [ 2876.108975] ? vm_insert_page+0x7c0/0x7c0 [ 2876.113173] ? lock_downgrade+0x740/0x740 [ 2876.117352] handle_mm_fault+0x391/0x860 [ 2876.121404] __do_page_fault+0x549/0xad0 [ 2876.125455] ? spurious_fault+0x640/0x640 [ 2876.129593] ? do_page_fault+0x60/0x500 [ 2876.133561] ? page_fault+0x2f/0x50 [ 2876.137175] page_fault+0x45/0x50 [ 2876.140622] RIP: 0000:0xb358f8 [ 2876.143798] RSP: 32928406:000000c00003dec8 EFLAGS: 00438920 [ 2876.146797] syz-executor.2: [ 2876.149042] Mem-Info: [ 2876.152527] page allocation failure: order:0 [ 2876.155550] active_anon:16410 inactive_anon:71015 isolated_anon:0 [ 2876.155550] active_file:24 inactive_file:7 isolated_file:0 [ 2876.155550] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2876.155550] slab_reclaimable:12756 slab_unreclaimable:116477 [ 2876.155550] mapped:52593 shmem:72461 pagetables:804 bounce:0 [ 2876.155550] free:13946 free_pcp:258 free_cma:0 [ 2876.182891] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2876.200128] Node 0 active_anon:64040kB inactive_anon:259608kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:265256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2876.223233] (null) [ 2876.240464] Node 1 active_anon:1600kB inactive_anon:24452kB active_file:84kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1468kB dirty:0kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2876.262458] syz-executor.2 cpuset= [ 2876.281350] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2876.285090] / [ 2876.331976] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2876.336531] mems_allowed=0-1 [ 2876.341861] CPU: 0 PID: 859 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2876.344881] Node 0 [ 2876.349579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2876.349584] Call Trace: [ 2876.349605] dump_stack+0x1b2/0x281 [ 2876.349618] warn_alloc.cold+0x96/0x1cc [ 2876.349630] ? zone_watermark_ok_safe+0x220/0x220 [ 2876.349640] ? usleep_range+0x130/0x130 [ 2876.349649] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2876.349662] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2876.349673] ? run_timer_softirq+0x5a0/0x5a0 [ 2876.349689] __alloc_pages_nodemask+0x2127/0x2720 [ 2876.349704] ? lock_acquire+0x170/0x3f0 [ 2876.364189] DMA32 free:18016kB min:36200kB low:45248kB high:54296kB active_anon:64040kB inactive_anon:259608kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2940kB bounce:0kB free_pcp:844kB local_pcp:724kB free_cma:0kB [ 2876.367491] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2876.367504] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2876.367520] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2876.367539] alloc_pages_current+0x155/0x260 [ 2876.367552] ion_page_pool_alloc+0x118/0x1b0 [ 2876.367564] ion_system_heap_allocate+0x133/0x8c0 [ 2876.367576] ? _raw_spin_unlock+0x29/0x40 [ 2876.373654] lowmem_reserve[]: [ 2876.376376] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2876.393195] 0 [ 2876.394824] ? ion_system_contig_heap_create+0x130/0x130 [ 2876.404969] 0 [ 2876.431887] ? kmem_cache_alloc_trace+0x324/0x3d0 [ 2876.431901] ion_alloc+0x27a/0x810 [ 2876.431917] ? ion_dma_buf_release+0x40/0x40 [ 2876.431928] ? __might_fault+0x177/0x1b0 [ 2876.431939] ion_ioctl+0xea/0x1f0 [ 2876.431948] ? ion_query_heaps+0x360/0x360 [ 2876.431961] ? lock_acquire+0x170/0x3f0 [ 2876.431969] ? lock_downgrade+0x740/0x740 [ 2876.431977] ? ion_query_heaps+0x360/0x360 [ 2876.431987] do_vfs_ioctl+0x75a/0xff0 [ 2876.432000] ? ioctl_preallocate+0x1a0/0x1a0 [ 2876.432008] ? lock_downgrade+0x740/0x740 [ 2876.432022] ? __fget+0x225/0x360 [ 2876.432031] ? do_vfs_ioctl+0xff0/0xff0 [ 2876.432041] ? security_file_ioctl+0x83/0xb0 [ 2876.432051] SyS_ioctl+0x7f/0xb0 [ 2876.432058] ? do_vfs_ioctl+0xff0/0xff0 [ 2876.432069] do_syscall_64+0x1d5/0x640 [ 2876.432086] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2876.449460] 0 [ 2876.451230] RIP: 0033:0x45e219 [ 2876.455619] 0 [ 2876.460470] RSP: 002b:00007fbe44510c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2876.460480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2876.460485] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2876.460489] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2876.460494] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2876.460499] R13: 00007ffdd364849f R14: 00007fbe445119c0 R15: 000000000119bf8c [ 2876.485218] Mem-Info: [ 2876.502104] 0 [ 2876.525182] active_anon:16398 inactive_anon:71015 isolated_anon:0 [ 2876.525182] active_file:13 inactive_file:15 isolated_file:0 [ 2876.525182] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2876.525182] slab_reclaimable:12755 slab_unreclaimable:116470 [ 2876.525182] mapped:52593 shmem:72461 pagetables:780 bounce:0 [ 2876.525182] free:13958 free_pcp:258 free_cma:0 [ 2876.554868] Node 0 active_anon:63992kB inactive_anon:259608kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:265256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2876.573072] Node 0 [ 2876.585016] Node 1 active_anon:1600kB inactive_anon:24452kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1468kB dirty:0kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2876.615883] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2876.659165] Node 0 [ 2876.687313] lowmem_reserve[]: [ 2876.724767] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2876.753935] 0 [ 2876.779498] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2876.784527] 0 [ 2876.795096] Node 0 [ 2876.795222] 0 [ 2876.801108] DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:63992kB inactive_anon:259608kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2844kB bounce:0kB free_pcp:840kB local_pcp:116kB free_cma:0kB [ 2876.820722] 0 [ 2876.844287] lowmem_reserve[]: 0 0 0 0 0 [ 2876.852897] 0 [ 2876.854714] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:1600kB inactive_anon:24452kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:736kB pagetables:276kB bounce:0kB free_pcp:188kB local_pcp:68kB free_cma:0kB [ 2876.854927] Node 0 [ 2876.898489] lowmem_reserve[]: 0 0 0 0 0 [ 2876.903977] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2876.904912] Node 0 [ 2876.940920] lowmem_reserve[]: 0 0 0 0 0 [ 2876.951717] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:1600kB inactive_anon:24452kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:736kB pagetables:276kB bounce:0kB free_pcp:188kB local_pcp:120kB free_cma:0kB [ 2876.954095] DMA: [ 2876.980579] lowmem_reserve[]: 0 0 0 0 0 [ 2876.980603] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10972kB [ 2876.980677] Node 0 DMA32: 530*4kB (UME) 195*8kB (ME) 107*16kB (ME) 48*32kB (ME) 2*64kB (M) 46*128kB (U) 20*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18064kB [ 2876.980746] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 2877.004474] 1*4kB [ 2877.017791] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2877.032815] Node 1 Normal: 103*4kB (ME) 72*8kB (ME) 69*16kB (UME) 58*32kB (ME) 39*64kB (UM) 19*128kB (M) 8*256kB (ME) 7*512kB (UME) 2*1024kB (UE) 3*2048kB (UME) 1*4096kB (U) = 26796kB [ 2877.051743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2877.060638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2877.071464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2877.080360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2877.091200] 72489 total pagecache pages [ 2877.095180] 0 pages in swap cache [ 2877.099170] Swap cache stats: add 0, delete 0, find 0/0 [ 2877.104532] Free swap = 0kB [ 2877.115401] (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10972kB [ 2877.119695] Total swap = 0kB [ 2877.144029] 2097051 pages RAM [ 2877.145264] Node 0 [ 2877.151559] 0 pages HighMem/MovableOnly [ 2877.154440] DMA32: [ 2877.170808] 363840 pages reserved [ 2877.174979] 530*4kB [ 2877.176556] 0 pages cma reserved [ 2877.230072] (UME) 195*8kB (ME) 107*16kB (ME) 48*32kB (ME) 2*64kB (M) 46*128kB (U) 20*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18064kB [ 2877.282551] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2877.310579] Node 1 Normal: 11*4kB (UME) 60*8kB (ME) 51*16kB (UME) 61*32kB (UME) 38*64kB (UM) 17*128kB (M) 16*256kB (UME) 11*512kB (UME) 25*1024kB (UE) 3*2048kB (UME) 1*4096kB (U) = 53468kB [ 2877.327748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2877.370439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2877.383132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2877.392165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2877.421178] 72506 total pagecache pages [ 2877.425198] 0 pages in swap cache [ 2877.433369] Swap cache stats: add 0, delete 0, find 0/0 [ 2877.443372] Free swap = 0kB [ 2877.446499] Total swap = 0kB [ 2877.449558] 2097051 pages RAM [ 2877.452658] 0 pages HighMem/MovableOnly [ 2877.460446] 363840 pages reserved [ 2877.463911] 0 pages cma reserved [ 2877.480129] Out of memory (oom_kill_allocating_task): Kill process 8003 (syz-fuzzer) score 0 or sacrifice child [ 2877.516564] Killed process 31530 (syz-executor.4) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2877.560689] oom_reaper: reaped process 31530 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2877.599157] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2877.672427] systemd cpuset=/ mems_allowed=0-1 [ 2877.679059] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.217-syzkaller #0 [ 2877.686005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2877.695362] Call Trace: [ 2877.697956] dump_stack+0x1b2/0x281 [ 2877.701585] dump_header+0x178/0x82f [ 2877.705299] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2877.710403] ? ___ratelimit+0x2cd/0x530 [ 2877.714383] oom_kill_process.cold+0x10/0xb18 [ 2877.718883] ? lock_downgrade+0x740/0x740 [ 2877.723054] out_of_memory+0x2dc/0x1190 [ 2877.727031] ? oom_killer_disable+0x1c0/0x1c0 [ 2877.731549] ? mutex_trylock+0x152/0x1a0 [ 2877.735618] __alloc_pages_nodemask+0x23e1/0x2720 [ 2877.740469] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2877.745319] alloc_pages_current+0x155/0x260 [ 2877.749727] filemap_fault+0xea3/0x1980 [ 2877.753811] ext4_filemap_fault+0x84/0xb0 [ 2877.758304] __do_fault+0xfa/0x380 [ 2877.761841] __handle_mm_fault+0x2497/0x4620 [ 2877.766241] ? ep_poll+0x1ab/0xa50 [ 2877.769796] ? vm_insert_page+0x7c0/0x7c0 [ 2877.773967] handle_mm_fault+0x391/0x860 [ 2877.778026] __do_page_fault+0x549/0xad0 [ 2877.782088] ? spurious_fault+0x640/0x640 [ 2877.786229] ? do_page_fault+0x60/0x500 [ 2877.790193] ? page_fault+0x2f/0x50 [ 2877.793811] page_fault+0x45/0x50 [ 2877.797253] RIP: 0001:0xffffffffffffffff [ 2877.801301] RSP: 49385f50:00007ffc9ea6b0d0 EFLAGS: 7ffc9ea6ae10 [ 2877.833720] Mem-Info: [ 2877.881531] active_anon:16349 inactive_anon:71015 isolated_anon:0 [ 2877.881531] active_file:20 inactive_file:0 isolated_file:0 [ 2877.881531] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2877.881531] slab_reclaimable:12755 slab_unreclaimable:115719 [ 2877.881531] mapped:35185 shmem:72461 pagetables:731 bounce:0 [ 2877.881531] free:25061 free_pcp:0 free_cma:0 [ 2877.949162] Node 0 active_anon:63828kB inactive_anon:259608kB active_file:172kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:139472kB dirty:0kB writeback:0kB shmem:265256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2878.011488] Node 1 active_anon:1568kB inactive_anon:24452kB active_file:68kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1468kB dirty:0kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2878.097476] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2878.143955] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2878.164839] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2878.217032] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2878.222136] Node 0 DMA32 free:45020kB min:36200kB low:45248kB high:54296kB active_anon:63828kB inactive_anon:259608kB active_file:516kB inactive_file:376kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2652kB bounce:0kB free_pcp:920kB local_pcp:148kB free_cma:0kB [ 2878.308620] lowmem_reserve[]: 0 0 0 0 0 [ 2878.312651] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2878.432531] lowmem_reserve[]: 0 0 0 0 0 [ 2878.454429] Node 1 Normal free:225048kB min:53696kB low:67120kB high:80544kB active_anon:1668kB inactive_anon:24452kB active_file:2104kB inactive_file:6392kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:124kB bounce:0kB free_pcp:860kB local_pcp:684kB free_cma:0kB [ 2878.585703] lowmem_reserve[]: 0 0 0 0 0 [ 2878.589730] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 2*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11104kB [ 2878.660283] Node 0 DMA32: 15*4kB (UE) 7*8kB (UE) 33*16kB (UME) 18*32kB (UME) 0*64kB 161*128kB (UM) 20*256kB (U) 0*512kB 17*1024kB (U) 0*2048kB 0*4096kB = 44356kB [ 2878.712872] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2878.742514] Node 1 Normal: 2*4kB (ME) 2*8kB (ME) 2*16kB (UE) 5*32kB (UME) 7*64kB (U) 327*128kB (UM) 174*256kB (UE) 28*512kB (UE) 152*1024kB (UME) 34*2048kB (UME) 1*4096kB (U) = 330776kB [ 2878.819594] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2878.838923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2878.885211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2878.893834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2878.908024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2878.914813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2878.956926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2878.963690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2878.965224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2879.005140] 77864 total pagecache pages [ 2879.009154] 0 pages in swap cache [ 2879.012596] Swap cache stats: add 0, delete 0, find 0/0 [ 2879.016851] device bridge_slave_1 left promiscuous mode [ 2879.023511] bridge0: port 2(bridge_slave_1) entered disabled state [ 2879.035154] Free swap = 0kB [ 2879.038189] Total swap = 0kB [ 2879.041229] 2097051 pages RAM [ 2879.044324] 0 pages HighMem/MovableOnly [ 2879.049078] device bridge_slave_0 left promiscuous mode [ 2879.054630] bridge0: port 1(bridge_slave_0) entered disabled state [ 2879.085094] 363840 pages reserved [ 2879.088574] 0 pages cma reserved [ 2879.091965] Out of memory: Kill process 654 (syz-executor.4) score 1004 or sacrifice child [ 2879.103564] device veth1_macvtap left promiscuous mode [ 2879.125701] Killed process 659 (syz-executor.4) total-vm:93480kB, anon-rss:168kB, file-rss:34816kB, shmem-rss:0kB [ 2879.129644] device veth0_macvtap left promiscuous mode [ 2879.155130] device veth1_vlan left promiscuous mode [ 2879.160219] device veth0_vlan left promiscuous mode [ 2879.173729] oom_reaper: reaped process 659 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2879.528818] device hsr_slave_1 left promiscuous mode [ 2879.550202] device hsr_slave_0 left promiscuous mode [ 2879.596024] team0 (unregistering): Port device team_slave_1 removed [ 2879.625804] team0 (unregistering): Port device team_slave_0 removed [ 2879.659407] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2879.679963] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2879.744600] bond0 (unregistering): Released all slaves [ 2879.904793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2879.939311] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2879.967274] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2879.973479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2879.984990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2880.011750] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2880.024905] 8021q: adding VLAN 0 to HW filter on device team0 [ 2880.056914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2880.063992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2880.073361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2880.105449] bridge0: port 1(bridge_slave_0) entered blocking state [ 2880.111833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2880.147421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2880.155524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2880.162714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2880.215613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2880.223309] bridge0: port 2(bridge_slave_1) entered blocking state [ 2880.229737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2880.267335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2880.278389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2880.301362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2880.318395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2880.337825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2880.357933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2880.366900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2880.388668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2880.400600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2880.410626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2880.432776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2880.446095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2880.463447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2880.472873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2880.485727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2880.493370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2880.505618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2880.515429] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2880.521452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2880.554128] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2880.589604] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2880.596674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2880.603455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2880.629202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2880.962091] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2880.999458] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2881.007827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2881.021144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2881.152151] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2881.175011] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2881.181967] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2881.225693] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2881.232335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2881.245771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2881.253537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2881.298048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2881.307025] device veth0_vlan entered promiscuous mode [ 2881.433300] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2881.487543] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2881.492707] CPU: 0 PID: 446 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 2881.500413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2881.509777] Call Trace: [ 2881.512402] dump_stack+0x1b2/0x281 [ 2881.516129] dump_header+0x178/0x82f [ 2881.519861] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2881.524984] ? ___ratelimit+0x2cd/0x530 [ 2881.529116] oom_kill_process.cold+0x10/0xb18 [ 2881.533812] out_of_memory+0xe3e/0x1190 [ 2881.537884] ? oom_killer_disable+0x1c0/0x1c0 [ 2881.542425] ? mutex_trylock+0x152/0x1a0 [ 2881.546582] __alloc_pages_nodemask+0x23e1/0x2720 [ 2881.551440] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2881.556416] alloc_pages_current+0x155/0x260 [ 2881.560831] filemap_fault+0xea3/0x1980 [ 2881.563870] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2881.564834] ext4_filemap_fault+0x84/0xb0 [ 2881.564847] __do_fault+0xfa/0x380 [ 2881.583863] (null) [ 2881.583891] __handle_mm_fault+0x2497/0x4620 [ 2881.586055] syz-executor.4 cpuset=/ [ 2881.590459] ? vm_insert_page+0x7c0/0x7c0 [ 2881.590480] handle_mm_fault+0x391/0x860 [ 2881.602270] __do_page_fault+0x549/0xad0 [ 2881.603708] mems_allowed=0-1 [ 2881.606327] ? spurious_fault+0x640/0x640 [ 2881.606336] ? do_page_fault+0x60/0x500 [ 2881.606346] ? page_fault+0x2f/0x50 [ 2881.606353] page_fault+0x45/0x50 [ 2881.606361] RIP: 0006:0x7ffee8ea4e50 [ 2881.606365] RSP: 0010:00000000004c3791 EFLAGS: 00000003 [ 2881.626908] Mem-Info: [ 2881.630682] CPU: 1 PID: 659 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2881.638330] active_anon:16375 inactive_anon:71012 isolated_anon:0 [ 2881.638330] active_file:16 inactive_file:13 isolated_file:0 [ 2881.638330] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2881.638330] slab_reclaimable:12725 slab_unreclaimable:114536 [ 2881.638330] mapped:35285 shmem:72454 pagetables:698 bounce:0 [ 2881.638330] free:14087 free_pcp:0 free_cma:0 [ 2881.644029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2881.644034] Call Trace: [ 2881.644053] dump_stack+0x1b2/0x281 [ 2881.644067] warn_alloc.cold+0x96/0x1cc [ 2881.644092] ? zone_watermark_ok_safe+0x220/0x220 [ 2881.677386] Node 0 active_anon:63600kB inactive_anon:259592kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105200kB dirty:0kB writeback:0kB shmem:265228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2881.686547] ? usleep_range+0x130/0x130 [ 2881.686557] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2881.686570] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2881.686579] ? run_timer_softirq+0x5a0/0x5a0 [ 2881.686596] __alloc_pages_nodemask+0x2127/0x2720 [ 2881.689179] Node 1 active_anon:1900kB inactive_anon:24456kB active_file:56kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35940kB dirty:20kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2881.692791] ? lock_acquire+0x170/0x3f0 [ 2881.692805] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2881.692817] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2881.692833] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2881.700991] Node 0 [ 2881.701759] alloc_pages_current+0x155/0x260 [ 2881.729424] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2881.733334] ion_page_pool_alloc+0x118/0x1b0 [ 2881.738457] lowmem_reserve[]: [ 2881.743418] ion_system_heap_allocate+0x133/0x8c0 [ 2881.747853] 0 [ 2881.752635] ? ion_alloc+0x187/0x810 [ 2881.779824] 2717 [ 2881.783755] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2881.783769] ? ion_system_contig_heap_create+0x130/0x130 [ 2881.783782] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2881.788613] 2718 [ 2881.793121] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2881.798609] 2718 [ 2881.800791] ion_alloc+0x204/0x810 [ 2881.805226] 2718 [ 2881.830696] ? ion_dma_buf_release+0x40/0x40 [ 2881.830710] ? __might_fault+0x177/0x1b0 [ 2881.830726] ion_ioctl+0xea/0x1f0 [ 2881.838220] ? ion_query_heaps+0x360/0x360 [ 2881.843038] Node 0 [ 2881.844834] ? lock_acquire+0x170/0x3f0 [ 2881.844843] ? lock_downgrade+0x740/0x740 [ 2881.844851] ? ion_query_heaps+0x360/0x360 [ 2881.844863] do_vfs_ioctl+0x75a/0xff0 [ 2881.844875] ? ioctl_preallocate+0x1a0/0x1a0 [ 2881.848584] DMA32 free:17908kB min:36200kB low:45248kB high:54296kB active_anon:63600kB inactive_anon:259592kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2428kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2881.850615] ? lock_downgrade+0x740/0x740 [ 2881.850629] ? __fget+0x225/0x360 [ 2881.856103] lowmem_reserve[]: [ 2881.861862] ? do_vfs_ioctl+0xff0/0xff0 [ 2881.866916] 0 [ 2881.868952] ? security_file_ioctl+0x83/0xb0 [ 2881.873797] 0 [ 2881.875832] SyS_ioctl+0x7f/0xb0 [ 2881.879346] 0 [ 2881.881413] ? do_vfs_ioctl+0xff0/0xff0 [ 2881.885831] 0 [ 2881.889859] do_syscall_64+0x1d5/0x640 [ 2881.893370] 0 [ 2881.897617] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2881.897627] RIP: 0033:0x45e219 [ 2881.897631] RSP: 002b:00007fd3ae418c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2881.897649] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2881.903857] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2881.903863] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2881.903869] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2881.903874] R13: 00007fffbf453d0f R14: 00007fd3ae4199c0 R15: 000000000119bf8c [ 2881.981013] Mem-Info: [ 2882.008442] Node 0 [ 2882.014808] active_anon:16375 inactive_anon:71012 isolated_anon:0 [ 2882.014808] active_file:16 inactive_file:13 isolated_file:0 [ 2882.014808] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2882.014808] slab_reclaimable:12725 slab_unreclaimable:114536 [ 2882.014808] mapped:35285 shmem:72454 pagetables:698 bounce:0 [ 2882.014808] free:14087 free_pcp:0 free_cma:0 [ 2882.029553] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2882.038927] Node 0 active_anon:63600kB inactive_anon:259592kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105200kB dirty:0kB writeback:0kB shmem:265228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2882.047525] lowmem_reserve[]: [ 2882.084647] Node 1 active_anon:1900kB inactive_anon:24456kB active_file:56kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35940kB dirty:20kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2882.111052] 0 [ 2882.140111] Node 0 [ 2882.175962] 0 0 0 0 [ 2882.180735] Node 1 Normal free:27488kB min:53696kB low:67120kB high:80544kB active_anon:1900kB inactive_anon:24456kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:704kB pagetables:364kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2882.189284] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2882.217535] lowmem_reserve[]: 0 0 0 0 0 [ 2882.246265] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10952kB [ 2882.266572] Node 0 DMA32: 535*4kB (UME) 200*8kB (ME) 107*16kB (UME) 49*32kB (UME) 28*64kB (UME) 8*128kB (UM) 2*256kB (M) 3*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 18028kB [ 2882.282798] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2882.286652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2882.291108] Node 0 DMA32 free:17908kB min:36200kB low:45248kB high:54296kB active_anon:63600kB inactive_anon:259592kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2428kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2882.307326] Node 1 [ 2882.339983] lowmem_reserve[]: [ 2882.339986] Normal: 102*4kB [ 2882.342241] 0 [ 2882.345443] (UME) [ 2882.349744] 0 [ 2882.350239] 82*8kB [ 2882.352370] 0 [ 2882.362636] (UME) [ 2882.362842] 0 [ 2882.364495] 73*16kB (UME) 64*32kB (ME) 45*64kB (M) 19*128kB (M) 13*256kB (UME) 7*512kB [ 2882.367947] 0 [ 2882.368483] (UME) [ 2882.386501] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2882.389572] 1*1024kB [ 2882.420002] lowmem_reserve[]: [ 2882.420866] (E) [ 2882.422464] 0 [ 2882.425614] 1*2048kB (E) 2*4096kB [ 2882.427590] 0 [ 2882.429375] (UM) [ 2882.432895] 0 [ 2882.444013] = 27768kB [ 2882.444518] 0 [ 2882.445844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2882.448257] 0 [ 2882.450069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2882.470230] Node 1 Normal free:27788kB min:53696kB low:67120kB high:80544kB active_anon:1900kB inactive_anon:24456kB active_file:100kB inactive_file:60kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:704kB pagetables:364kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2882.479023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2882.508140] lowmem_reserve[]: 0 0 0 0 0 [ 2882.512326] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10952kB [ 2882.513680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2882.535213] Node 0 DMA32: 535*4kB (UME) 200*8kB (ME) 107*16kB (UME) 49*32kB (UME) 28*64kB (UME) 8*128kB (UM) 2*256kB (M) 3*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 18028kB [ 2882.540820] 72482 total pagecache pages [ 2882.561350] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2882.561655] 0 pages in swap cache [ 2882.572219] Node 1 [ 2882.581959] Swap cache stats: add 0, delete 0, find 0/0 [ 2882.585371] Normal: [ 2882.589615] Free swap = 0kB [ 2882.589628] Total swap = 0kB [ 2882.591949] 102*4kB [ 2882.601325] 2097051 pages RAM [ 2882.606798] 0 pages HighMem/MovableOnly [ 2882.608189] (UME) [ 2882.610813] 363840 pages reserved [ 2882.610821] 82*8kB [ 2882.612948] 0 pages cma reserved [ 2882.621347] (UME) 73*16kB (UME) 64*32kB (ME) 45*64kB (M) 19*128kB (M) 13*256kB (UME) 7*512kB (UME) 1*1024kB (E) 1*2048kB (E) 2*4096kB (UM) = 27768kB [ 2882.630150] Out of memory (oom_kill_allocating_task): Kill process 446 (syz-executor.0) score 0 or sacrifice child [ 2882.646033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2882.653021] Killed process 446 (syz-executor.0) total-vm:93220kB, anon-rss:88kB, file-rss:34512kB, shmem-rss:0kB [ 2882.661080] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2882.681851] oom_reaper: reaped process 446 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2882.684803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2882.715285] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2882.749248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2882.781767] 72482 total pagecache pages [ 2882.785938] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2882.790740] CPU: 0 PID: 8003 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2882.796808] 0 pages in swap cache [ 2882.798207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2882.801652] Swap cache stats: add 0, delete 0, find 0/0 [ 2882.811015] Call Trace: [ 2882.811039] dump_stack+0x1b2/0x281 [ 2882.811050] dump_header+0x178/0x82f [ 2882.811060] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2882.811069] ? ___ratelimit+0x2cd/0x530 [ 2882.811077] oom_kill_process.cold+0x10/0xb18 [ 2882.811094] out_of_memory+0xe3e/0x1190 [ 2882.811105] ? oom_killer_disable+0x1c0/0x1c0 [ 2882.811112] ? mutex_trylock+0x152/0x1a0 [ 2882.811132] __alloc_pages_nodemask+0x23e1/0x2720 [ 2882.811162] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2882.811205] alloc_pages_current+0x155/0x260 [ 2882.827617] Free swap = 0kB [ 2882.831529] filemap_fault+0xea3/0x1980 [ 2882.841008] Total swap = 0kB [ 2882.843937] ext4_filemap_fault+0x84/0xb0 [ 2882.843949] __do_fault+0xfa/0x380 [ 2882.843958] __handle_mm_fault+0x2497/0x4620 [ 2882.843969] ? vm_insert_page+0x7c0/0x7c0 [ 2882.843979] ? lock_downgrade+0x740/0x740 [ 2882.844000] handle_mm_fault+0x391/0x860 [ 2882.865656] 2097051 pages RAM [ 2882.866606] __do_page_fault+0x549/0xad0 [ 2882.869601] 0 pages HighMem/MovableOnly [ 2882.873585] ? spurious_fault+0x640/0x640 [ 2882.873594] ? do_page_fault+0x60/0x500 [ 2882.873603] ? page_fault+0x2f/0x50 [ 2882.873609] page_fault+0x45/0x50 [ 2882.873617] RIP: 0000:0xb358f8 [ 2882.873621] RSP: 3b97409f:000000c00003dec8 EFLAGS: 00438920 [ 2882.901030] Mem-Info: [ 2882.906892] 363840 pages reserved [ 2882.932912] active_anon:16375 inactive_anon:71012 isolated_anon:0 [ 2882.932912] active_file:29 inactive_file:0 isolated_file:0 [ 2882.932912] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2882.932912] slab_reclaimable:12725 slab_unreclaimable:113768 [ 2882.932912] mapped:35272 shmem:72454 pagetables:698 bounce:0 [ 2882.932912] free:13931 free_pcp:119 free_cma:0 [ 2882.940838] syz-executor.1: [ 2882.967565] Node 0 active_anon:63600kB inactive_anon:259592kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105200kB dirty:0kB writeback:0kB shmem:265228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2882.980994] 0 pages cma reserved [ 2883.015793] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2883.028394] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2883.035739] CPU: 1 PID: 658 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2883.043454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2883.052895] Call Trace: [ 2883.054424] Node 1 active_anon:1900kB inactive_anon:24456kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35888kB dirty:0kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2883.055486] dump_stack+0x1b2/0x281 [ 2883.082709] Node 0 [ 2883.086291] warn_alloc.cold+0x96/0x1cc [ 2883.086305] ? zone_watermark_ok_safe+0x220/0x220 [ 2883.088530] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2883.092480] ? usleep_range+0x130/0x130 [ 2883.097354] lowmem_reserve[]: [ 2883.122833] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2883.122848] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2883.122857] ? run_timer_softirq+0x5a0/0x5a0 [ 2883.122874] __alloc_pages_nodemask+0x2127/0x2720 [ 2883.122891] ? lock_acquire+0x170/0x3f0 [ 2883.133049] 0 [ 2883.135071] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2883.140060] 2717 [ 2883.145067] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2883.145083] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2883.145101] ? policy_node+0xb3/0x110 [ 2883.149935] 2718 [ 2883.153898] alloc_pages_current+0x155/0x260 [ 2883.153918] ion_page_pool_alloc+0x118/0x1b0 [ 2883.153930] ion_system_heap_allocate+0x133/0x8c0 [ 2883.155713] 2718 [ 2883.160538] ? ion_alloc+0x187/0x810 [ 2883.162592] 2718 [ 2883.167080] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2883.167091] ? ion_system_contig_heap_create+0x130/0x130 [ 2883.167101] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2883.167114] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2883.176331] ion_alloc+0x204/0x810 [ 2883.176347] ? ion_dma_buf_release+0x40/0x40 [ 2883.176360] ? __might_fault+0x177/0x1b0 [ 2883.178399] Node 0 [ 2883.182791] ion_ioctl+0xea/0x1f0 [ 2883.187211] DMA32 free:18096kB min:36200kB low:45248kB high:54296kB active_anon:63600kB inactive_anon:259592kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2428kB bounce:0kB free_pcp:252kB local_pcp:132kB free_cma:0kB [ 2883.192000] ? ion_query_heaps+0x360/0x360 [ 2883.194056] lowmem_reserve[]: [ 2883.197738] ? lock_acquire+0x170/0x3f0 [ 2883.199772] 0 [ 2883.205207] ? lock_downgrade+0x740/0x740 [ 2883.205217] ? ion_query_heaps+0x360/0x360 [ 2883.205228] do_vfs_ioctl+0x75a/0xff0 [ 2883.205241] ? ioctl_preallocate+0x1a0/0x1a0 [ 2883.210677] 0 [ 2883.215680] ? lock_downgrade+0x740/0x740 [ 2883.215694] ? __fget+0x225/0x360 [ 2883.215704] ? do_vfs_ioctl+0xff0/0xff0 [ 2883.215715] ? security_file_ioctl+0x83/0xb0 [ 2883.220550] 0 [ 2883.224076] SyS_ioctl+0x7f/0xb0 [ 2883.224086] ? do_vfs_ioctl+0xff0/0xff0 [ 2883.224098] do_syscall_64+0x1d5/0x640 [ 2883.228499] 0 [ 2883.232557] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2883.232567] RIP: 0033:0x45e219 [ 2883.232572] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 [ 2883.234834] 0 [ 2883.238225] ORIG_RAX: 0000000000000010 [ 2883.270630] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2883.273752] Node 0 [ 2883.277675] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2883.279471] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2883.283602] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2883.283607] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2883.283612] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2883.424014] lowmem_reserve[]: 0 0 0 0 0 [ 2883.463302] Node 1 Normal free:65288kB min:53696kB low:67120kB high:80544kB active_anon:1900kB inactive_anon:24456kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:704kB pagetables:364kB bounce:0kB free_pcp:848kB local_pcp:140kB free_cma:0kB [ 2883.493567] lowmem_reserve[]: 0 0 0 0 0 [ 2883.498382] Node 0 DMA: 7*4kB (U) 4*8kB (U) 3*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11052kB [ 2883.552869] Node 0 DMA32: 727*4kB (UME) 335*8kB (UME) 1589*16kB (UE) 2631*32kB (UE) 504*64kB (UE) 87*128kB (UM) 20*256kB (UM) 3*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 171396kB [ 2883.592872] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2883.623713] Node 1 Normal: 484*4kB (UME) 654*8kB (UME) 294*16kB (UME) 150*32kB (UME) 761*64kB (UM) 30*128kB (UM) 13*256kB (UME) 7*512kB (UME) 3*1024kB (UE) 3*2048kB (UE) 5*4096kB (UM) = 105824kB [ 2883.658971] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2883.676903] Mem-Info: [ 2883.679343] active_anon:16370 inactive_anon:71012 isolated_anon:0 [ 2883.679343] active_file:89 inactive_file:1950 isolated_file:0 [ 2883.679343] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2883.679343] slab_reclaimable:12725 slab_unreclaimable:115152 [ 2883.679343] mapped:27939 shmem:72454 pagetables:650 bounce:0 [ 2883.679343] free:86315 free_pcp:522 free_cma:0 [ 2883.692803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2883.736230] Node 0 active_anon:63896kB inactive_anon:259592kB active_file:308kB inactive_file:8752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76568kB dirty:100kB writeback:0kB shmem:265228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 12:10:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) 12:10:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) 12:10:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12}) [ 2883.822604] Node 1 active_anon:1884kB inactive_anon:24456kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35888kB dirty:0kB writeback:0kB shmem:24588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2883.832771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2883.863691] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2883.905693] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2883.939912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2883.940696] Node 0 DMA32 free:193080kB min:36200kB low:45248kB high:54296kB active_anon:63996kB inactive_anon:259592kB active_file:2408kB inactive_file:17452kB unevictable:0kB writepending:148kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2384kB bounce:0kB free_pcp:940kB local_pcp:668kB free_cma:0kB [ 2883.940722] lowmem_reserve[]: 0 0 0 0 0 [ 2883.940743] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2883.940767] lowmem_reserve[]: [ 2883.979314] 78386 total pagecache pages [ 2883.979324] 0 pages in swap cache [ 2883.979328] Swap cache stats: add 0, delete 0, find 0/0 [ 2883.979332] Free swap = 0kB [ 2883.979335] Total swap = 0kB [ 2883.979342] 2097051 pages RAM [ 2883.979344] 0 pages HighMem/MovableOnly [ 2883.979348] 363840 pages reserved [ 2883.979351] 0 pages cma reserved [ 2883.979359] Out of memory (oom_kill_allocating_task): Kill process 8003 (syz-fuzzer) score 0 or sacrifice child [ 2883.979415] Killed process 924 (syz-executor.5) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2884.067491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2884.084230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2884.099756] device bridge_slave_1 left promiscuous mode [ 2884.128998] bridge0: port 2(bridge_slave_1) entered disabled state [ 2884.155048] oom_reaper: reaped process 658 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2884.174026] device bridge_slave_0 left promiscuous mode [ 2884.179619] bridge0: port 1(bridge_slave_0) entered disabled state [ 2884.216306] oom_reaper: reaped process 924 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2884.260159] team0 (unregistering): Port device team_slave_1 removed [ 2884.291467] team0 (unregistering): Port device team_slave_0 removed [ 2884.320215] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2884.338757] 0 0 0 0 0 [ 2884.341331] Node 1 Normal free:67736kB min:53696kB low:67120kB high:80544kB active_anon:1684kB inactive_anon:24456kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:672kB pagetables:216kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 2884.375166] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2884.471817] bond0 (unregistering): Released all slaves [ 2884.480136] lowmem_reserve[]: 0 0 0 0 0 [ 2884.503182] Node 0 DMA: 8*4kB (U) 5*8kB (U) 3*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11064kB [ 2884.529320] Node 0 DMA32: 1281*4kB (UME) 680*8kB (UE) 2539*16kB (UME) 2929*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 144916kB [ 2884.547315] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2884.559272] Node 1 Normal: 1630*4kB (UM) 1844*8kB (UM) 1459*16kB (UM) 1308*32kB (UM) 8*64kB (U) 12*128kB (U) 9*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 90824kB [ 2884.577941] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2884.580832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2884.609870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2884.612996] syz-executor.3 cpuset= [ 2884.620058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2884.630700] / [ 2884.637901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2884.638495] mems_allowed=0-1 [ 2884.639736] 77382 total pagecache pages [ 2884.639747] 0 pages in swap cache [ 2884.639753] Swap cache stats: add 0, delete 0, find 0/0 [ 2884.639757] Free swap = 0kB [ 2884.639760] Total swap = 0kB [ 2884.639767] 2097051 pages RAM [ 2884.658304] CPU: 0 PID: 958 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2884.666227] 0 pages HighMem/MovableOnly [ 2884.667415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2884.670416] 363840 pages reserved [ 2884.673498] Call Trace: [ 2884.673519] dump_stack+0x1b2/0x281 [ 2884.673532] warn_alloc.cold+0x96/0x1cc [ 2884.673544] ? zone_watermark_ok_safe+0x220/0x220 [ 2884.673566] __alloc_pages_nodemask+0x2127/0x2720 [ 2884.673583] ? lock_acquire+0x170/0x3f0 [ 2884.673597] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2884.673613] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2884.673626] ? __mutex_unlock_slowpath+0x75/0x770 [ 2884.673643] alloc_pages_current+0x155/0x260 [ 2884.673658] ion_page_pool_alloc+0x118/0x1b0 [ 2884.673669] ion_system_heap_allocate+0x133/0x8c0 [ 2884.673681] ? ion_alloc+0x187/0x810 [ 2884.673691] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2884.673702] ? ion_system_contig_heap_create+0x130/0x130 [ 2884.673712] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2884.673725] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2884.692510] 0 pages cma reserved [ 2884.695073] ion_alloc+0x204/0x810 [ 2884.782450] ? ion_dma_buf_release+0x40/0x40 [ 2884.786883] ? __might_fault+0x177/0x1b0 [ 2884.790948] ion_ioctl+0xea/0x1f0 [ 2884.794399] ? ion_query_heaps+0x360/0x360 [ 2884.798632] ? lock_acquire+0x170/0x3f0 [ 2884.802613] ? lock_downgrade+0x740/0x740 [ 2884.806815] ? ion_query_heaps+0x360/0x360 [ 2884.811076] do_vfs_ioctl+0x75a/0xff0 [ 2884.814898] ? ioctl_preallocate+0x1a0/0x1a0 [ 2884.819323] ? lock_downgrade+0x740/0x740 [ 2884.823477] ? __fget+0x225/0x360 [ 2884.826930] ? do_vfs_ioctl+0xff0/0xff0 [ 2884.830902] ? security_file_ioctl+0x83/0xb0 [ 2884.835309] SyS_ioctl+0x7f/0xb0 [ 2884.838709] ? do_vfs_ioctl+0xff0/0xff0 [ 2884.842710] do_syscall_64+0x1d5/0x640 [ 2884.846616] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2884.851816] RIP: 0033:0x45e219 [ 2884.855000] RSP: 002b:00007fb79db61c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2884.862708] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2884.870495] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2884.877767] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2884.885032] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2884.892298] R13: 00007ffdaed1160f R14: 00007fb79db629c0 R15: 000000000119bf8c [ 2884.914457] Mem-Info: [ 2884.916969] active_anon:16296 inactive_anon:71013 isolated_anon:12 [ 2884.916969] active_file:1951 inactive_file:2655 isolated_file:17 [ 2884.916969] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2884.916969] slab_reclaimable:12717 slab_unreclaimable:114878 [ 2884.916969] mapped:22074 shmem:72454 pagetables:629 bounce:0 [ 2884.916969] free:73418 free_pcp:183 free_cma:0 [ 2884.940319] syz-executor.4: [ 2884.951717] Node 0 active_anon:63612kB inactive_anon:259596kB active_file:7832kB inactive_file:9356kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:85544kB dirty:0kB writeback:0kB shmem:265232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2884.983058] Node 1 active_anon:1572kB inactive_anon:24456kB active_file:72kB inactive_file:40kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:1952kB dirty:0kB writeback:0kB shmem:24584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2885.010465] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2885.024802] page allocation failure: order:4 [ 2885.038029] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2885.052208] Node 0 DMA32 free:189592kB min:36200kB low:45248kB high:54296kB active_anon:63612kB inactive_anon:259596kB active_file:7632kB inactive_file:9664kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2332kB bounce:0kB free_pcp:1524kB local_pcp:712kB free_cma:0kB [ 2885.053400] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2885.081925] lowmem_reserve[]: 0 0 0 0 0 [ 2885.081954] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2885.166770] (null) [ 2885.168949] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2885.192137] CPU: 1 PID: 659 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 2885.199882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2885.200235] lowmem_reserve[]: [ 2885.209233] Call Trace: [ 2885.209255] dump_stack+0x1b2/0x281 [ 2885.209269] warn_alloc.cold+0x96/0x1cc [ 2885.209280] ? zone_watermark_ok_safe+0x220/0x220 [ 2885.209302] __alloc_pages_nodemask+0x2127/0x2720 [ 2885.209318] ? lock_acquire+0x170/0x3f0 [ 2885.236175] ? lock_acquire+0x170/0x3f0 [ 2885.240161] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2885.241131] 0 [ 2885.245007] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2885.245020] ? __mutex_unlock_slowpath+0x75/0x770 [ 2885.245036] alloc_pages_current+0x155/0x260 [ 2885.245053] ion_page_pool_alloc+0x118/0x1b0 [ 2885.255658] 0 [ 2885.257128] ion_system_heap_allocate+0x133/0x8c0 [ 2885.257145] ? _raw_spin_unlock+0x29/0x40 [ 2885.263745] 0 [ 2885.265940] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2885.265953] ? ion_system_contig_heap_create+0x130/0x130 [ 2885.281830] 0 [ 2885.283418] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2885.283433] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2885.283447] ion_alloc+0x27a/0x810 [ 2885.283462] ? ion_dma_buf_release+0x40/0x40 [ 2885.288937] 0 [ 2885.290692] ? __might_fault+0x177/0x1b0 [ 2885.290708] ion_ioctl+0xea/0x1f0 [ 2885.304065] ? ion_query_heaps+0x360/0x360 [ 2885.318624] Node 1 [ 2885.321943] ? lock_acquire+0x170/0x3f0 [ 2885.321954] ? lock_downgrade+0x740/0x740 [ 2885.332301] ? ion_query_heaps+0x360/0x360 [ 2885.336537] do_vfs_ioctl+0x75a/0xff0 [ 2885.337393] Normal free:171252kB min:53696kB low:67120kB high:80544kB active_anon:1572kB inactive_anon:24456kB active_file:72kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:184kB bounce:0kB free_pcp:732kB local_pcp:720kB free_cma:0kB [ 2885.340341] ? ioctl_preallocate+0x1a0/0x1a0 [ 2885.340352] ? lock_downgrade+0x740/0x740 [ 2885.340366] ? __fget+0x225/0x360 [ 2885.380536] ? do_vfs_ioctl+0xff0/0xff0 [ 2885.384512] ? security_file_ioctl+0x83/0xb0 [ 2885.388924] SyS_ioctl+0x7f/0xb0 [ 2885.392296] ? do_vfs_ioctl+0xff0/0xff0 [ 2885.396269] do_syscall_64+0x1d5/0x640 [ 2885.400160] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2885.401421] lowmem_reserve[]: [ 2885.405343] RIP: 0033:0x45e219 [ 2885.405349] RSP: 002b:00007fd3ae418c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2885.405359] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2885.405364] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2885.405370] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2885.405375] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2885.405384] R13: 00007fffbf453d0f R14: 00007fd3ae4199c0 R15: 000000000119bf8c [ 2885.412911] 0 [ 2885.502243] Bluetooth: hci2 command 0x0409 tx timeout [ 2885.537840] 0 0 0 0 [ 2885.544666] Node 0 DMA: 7*4kB (U) 6*8kB (U) 3*16kB (U) 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11004kB [ 2885.594195] Node 0 DMA32: 26*4kB (UME) 7*8kB (UME) 523*16kB (UE) 3178*32kB (UE) 136*64kB (U) 20*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 121488kB [ 2885.645794] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2885.680395] Node 1 Normal: 1816*4kB (UM) 2028*8kB (UM) 1650*16kB (UM) 1502*32kB (UM) 790*64kB (U) 731*128kB (U) 149*256kB (U) 13*512kB (U) 5*1024kB (U) 1*2048kB (U) 0*4096kB = 294048kB [ 2885.721225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2885.738924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2885.752367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2885.774091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2885.807996] 77109 total pagecache pages [ 2885.819711] 0 pages in swap cache [ 2885.836307] Swap cache stats: add 0, delete 0, find 0/0 [ 2885.852750] Free swap = 0kB [ 2885.859138] Total swap = 0kB [ 2885.871890] 2097051 pages RAM [ 2885.875020] 0 pages HighMem/MovableOnly [ 2885.881004] 363840 pages reserved [ 2885.892318] 0 pages cma reserved [ 2887.104389] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2887.104840] oom_reaper: reaped process 958 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2887.118526] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2887.136285] CPU: 1 PID: 658 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2887.143992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2887.153340] Call Trace: [ 2887.155931] dump_stack+0x1b2/0x281 [ 2887.159562] warn_alloc.cold+0x96/0x1cc [ 2887.163561] ? zone_watermark_ok_safe+0x220/0x220 [ 2887.168416] __alloc_pages_nodemask+0x2127/0x2720 [ 2887.173275] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2887.177766] ? finish_task_switch+0x178/0x610 [ 2887.182341] ? finish_task_switch+0x14d/0x610 [ 2887.186845] ? lock_acquire+0x170/0x3f0 [ 2887.190824] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2887.195675] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2887.201125] ? __mutex_unlock_slowpath+0x75/0x770 [ 2887.205968] ? alloc_pages_current+0x37/0x260 [ 2887.210466] alloc_pages_current+0x155/0x260 [ 2887.214897] ion_page_pool_alloc+0x118/0x1b0 [ 2887.219302] ion_system_heap_allocate+0x133/0x8c0 [ 2887.224163] ? _raw_spin_unlock+0x29/0x40 [ 2887.228307] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2887.233235] ? ion_system_contig_heap_create+0x130/0x130 [ 2887.238715] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2887.243731] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2887.248577] ion_alloc+0x27a/0x810 [ 2887.252121] ? ion_dma_buf_release+0x40/0x40 [ 2887.256527] ? __might_fault+0x177/0x1b0 [ 2887.260589] ion_ioctl+0xea/0x1f0 [ 2887.264041] ? ion_query_heaps+0x360/0x360 [ 2887.268279] ? lock_acquire+0x170/0x3f0 [ 2887.272248] ? lock_downgrade+0x740/0x740 [ 2887.276406] ? ion_query_heaps+0x360/0x360 [ 2887.280656] do_vfs_ioctl+0x75a/0xff0 [ 2887.284464] ? ioctl_preallocate+0x1a0/0x1a0 [ 2887.288874] ? lock_downgrade+0x740/0x740 [ 2887.293031] ? __fget+0x225/0x360 [ 2887.296505] ? do_vfs_ioctl+0xff0/0xff0 [ 2887.300493] ? security_file_ioctl+0x83/0xb0 [ 2887.304903] SyS_ioctl+0x7f/0xb0 [ 2887.308265] ? do_vfs_ioctl+0xff0/0xff0 [ 2887.312240] do_syscall_64+0x1d5/0x640 [ 2887.316140] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2887.321354] RIP: 0033:0x45e219 [ 2887.324537] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2887.332251] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2887.339530] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2887.346801] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2887.354066] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2887.361333] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2887.457123] warn_alloc_show_mem: 1 callbacks suppressed [ 2887.457127] Mem-Info: [ 2887.465649] active_anon:16406 inactive_anon:71013 isolated_anon:0 [ 2887.465649] active_file:233 inactive_file:284 isolated_file:0 [ 2887.465649] unevictable:0 dirty:0 writeback:30 unstable:0 [ 2887.465649] slab_reclaimable:12714 slab_unreclaimable:114444 [ 2887.465649] mapped:35739 shmem:72454 pagetables:723 bounce:0 [ 2887.465649] free:22867 free_pcp:408 free_cma:0 [ 2887.526277] Node 0 active_anon:63956kB inactive_anon:259596kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139272kB dirty:0kB writeback:0kB shmem:265232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2887.559638] Node 1 active_anon:1584kB inactive_anon:24456kB active_file:1936kB inactive_file:3156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6212kB dirty:0kB writeback:0kB shmem:24584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2887.611902] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2887.669909] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2887.691524] Node 0 DMA32 free:46384kB min:36200kB low:45248kB high:54296kB active_anon:63856kB inactive_anon:259596kB active_file:624kB inactive_file:1728kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2648kB bounce:0kB free_pcp:808kB local_pcp:716kB free_cma:0kB [ 2887.736423] lowmem_reserve[]: 0 0 0 0 0 [ 2887.740458] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2887.769782] lowmem_reserve[]: 0 0 0 0 0 12:10:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x2, 0x604}, 0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) [ 2887.780315] Node 1 Normal free:104136kB min:53696kB low:67120kB high:80544kB active_anon:1584kB inactive_anon:24456kB active_file:1952kB inactive_file:4068kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:184kB bounce:0kB free_pcp:744kB local_pcp:628kB free_cma:0kB [ 2887.818958] lowmem_reserve[]: 0 0 0 0 0 [ 2887.827981] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (M) 1*32kB (U) 3*64kB (U) 4*128kB (U) 1*256kB (U) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (E) = 11256kB [ 2887.848878] Node 0 DMA32: 92*4kB (UME) 259*8kB (UME) 27*16kB (UE) 302*32kB (UE) 500*64kB (U) 171*128kB (U) 22*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 72056kB [ 2887.869949] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2887.889523] Node 1 Normal: 6*4kB (U) 6*8kB (U) 4*16kB (U) 6*32kB (UM) 480*64kB (UM) 293*128kB (UM) 87*256kB (U) 53*512kB (UM) 54*1024kB (UM) 8*2048kB (UM) 0*4096kB = 189640kB [ 2887.910457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2887.920063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2887.942360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2887.974594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2887.984941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2888.005348] device bridge_slave_1 left promiscuous mode [ 2888.023667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2888.033074] bridge0: port 2(bridge_slave_1) entered disabled state [ 2888.040513] device bridge_slave_0 left promiscuous mode [ 2888.051515] bridge0: port 1(bridge_slave_0) entered disabled state [ 2888.065362] 77377 total pagecache pages [ 2888.069370] 0 pages in swap cache [ 2888.073519] device veth0_vlan left promiscuous mode [ 2888.088815] Swap cache stats: add 0, delete 0, find 0/0 [ 2888.094553] Free swap = 0kB [ 2888.097595] Total swap = 0kB [ 2888.100607] 2097051 pages RAM [ 2888.128975] 0 pages HighMem/MovableOnly [ 2888.133515] 363840 pages reserved [ 2888.136970] 0 pages cma reserved [ 2888.271326] device hsr_slave_1 left promiscuous mode [ 2888.287025] device hsr_slave_0 left promiscuous mode [ 2888.328790] team0 (unregistering): Port device team_slave_1 removed [ 2888.349037] team0 (unregistering): Port device team_slave_0 removed [ 2888.375187] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2888.407321] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2888.493297] bond0 (unregistering): Released all slaves 12:10:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x2, 0x604}, 0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) [ 2890.689732] Bluetooth: hci0 command 0x0409 tx timeout [ 2890.695151] Bluetooth: hci2 command 0x0409 tx timeout [ 2890.817532] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2890.832053] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2890.837199] CPU: 1 PID: 1001 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2890.844996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2890.854447] Call Trace: [ 2890.857052] dump_stack+0x1b2/0x281 [ 2890.860687] warn_alloc.cold+0x96/0x1cc [ 2890.864670] ? zone_watermark_ok_safe+0x220/0x220 [ 2890.869534] __alloc_pages_nodemask+0x2127/0x2720 [ 2890.874381] ? io_schedule_timeout+0x140/0x140 [ 2890.878974] ? lock_acquire+0x170/0x3f0 [ 2890.882961] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2890.887850] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2890.893316] ? __mutex_unlock_slowpath+0x75/0x770 [ 2890.898173] alloc_pages_current+0x155/0x260 [ 2890.902593] ion_page_pool_alloc+0x118/0x1b0 [ 2890.907017] ion_system_heap_allocate+0x133/0x8c0 [ 2890.912012] ? ion_alloc+0x187/0x810 [ 2890.915771] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2890.921250] ? ion_system_contig_heap_create+0x130/0x130 [ 2890.926710] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2890.931757] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2890.936637] ion_alloc+0x204/0x810 [ 2890.940196] ? ion_dma_buf_release+0x40/0x40 [ 2890.944616] ? __might_fault+0x177/0x1b0 [ 2890.948690] ion_ioctl+0xea/0x1f0 [ 2890.952154] ? ion_query_heaps+0x360/0x360 [ 2890.956396] ? lock_acquire+0x170/0x3f0 [ 2890.960377] ? lock_downgrade+0x740/0x740 [ 2890.964649] ? ion_query_heaps+0x360/0x360 [ 2890.968894] do_vfs_ioctl+0x75a/0xff0 [ 2890.972712] ? ioctl_preallocate+0x1a0/0x1a0 [ 2890.977125] ? lock_downgrade+0x740/0x740 [ 2890.981285] ? __fget+0x225/0x360 [ 2890.984749] ? do_vfs_ioctl+0xff0/0xff0 [ 2890.988730] ? security_file_ioctl+0x83/0xb0 [ 2890.993145] SyS_ioctl+0x7f/0xb0 [ 2890.996526] ? do_vfs_ioctl+0xff0/0xff0 [ 2891.000501] do_syscall_64+0x1d5/0x640 [ 2891.004403] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2891.009595] RIP: 0033:0x45e219 [ 2891.012781] RSP: 002b:00007fb79db61c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2891.020493] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2891.027765] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2891.035037] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2891.042339] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2891.049626] R13: 00007ffdaed1160f R14: 00007fb79db629c0 R15: 000000000119bf8c [ 2891.079225] Mem-Info: [ 2891.083798] active_anon:16406 inactive_anon:71012 isolated_anon:12 [ 2891.083798] active_file:1265 inactive_file:4658 isolated_file:0 [ 2891.083798] unevictable:0 dirty:34 writeback:0 unstable:0 [ 2891.083798] slab_reclaimable:12705 slab_unreclaimable:112304 [ 2891.083798] mapped:56996 shmem:72454 pagetables:763 bounce:0 [ 2891.083798] free:99994 free_pcp:222 free_cma:0 [ 2891.124332] Node 0 active_anon:64092kB inactive_anon:259592kB active_file:2160kB inactive_file:13328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150316kB dirty:76kB writeback:0kB shmem:265232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2891.198731] Node 1 active_anon:1532kB inactive_anon:24456kB active_file:2900kB inactive_file:5304kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:77668kB dirty:60kB writeback:0kB shmem:24584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2891.263876] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:80kB inactive_anon:0kB active_file:76kB inactive_file:340kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2891.338458] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2891.353013] Node 0 DMA32 free:45228kB min:36200kB low:45248kB high:54296kB active_anon:64012kB inactive_anon:259592kB active_file:2084kB inactive_file:12988kB unevictable:0kB writepending:76kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2528kB bounce:0kB free_pcp:924kB local_pcp:684kB free_cma:0kB [ 2891.418989] lowmem_reserve[]: 0 0 0 0 0 [ 2891.428439] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2891.486973] lowmem_reserve[]: 0 0 0 0 0 [ 2891.498477] Node 1 Normal free:247924kB min:53696kB low:67120kB high:80544kB active_anon:1532kB inactive_anon:24456kB active_file:2904kB inactive_file:5300kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:704kB pagetables:524kB bounce:0kB free_pcp:736kB local_pcp:620kB free_cma:0kB [ 2891.569365] lowmem_reserve[]: 0 0 0 0 0 [ 2891.573422] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 0*32kB 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (E) = 11116kB [ 2891.599327] Node 0 DMA32: 105*4kB (UME) 445*8kB (UME) 135*16kB (UME) 84*32kB (UME) 633*64kB (UM) 30*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53692kB [ 2891.629353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2891.649612] Node 1 Normal: 184*4kB (U) 192*8kB (UM) 202*16kB (UM) 1995*32kB (UM) 1571*64kB (UM) 532*128kB (UM) 118*256kB (UM) 32*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 286624kB [ 2891.677156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2891.686141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2891.695837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2891.705512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2891.714888] 78323 total pagecache pages [ 2891.718874] 0 pages in swap cache [ 2891.723432] Swap cache stats: add 0, delete 0, find 0/0 [ 2891.728805] Free swap = 0kB [ 2891.734066] Total swap = 0kB [ 2891.737099] 2097051 pages RAM [ 2891.741781] 0 pages HighMem/MovableOnly [ 2891.745780] 363840 pages reserved [ 2891.750606] 0 pages cma reserved 12:10:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x2, 0x604}, 0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) [ 2892.556925] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2892.571160] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2892.576440] CPU: 1 PID: 1003 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2892.584674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2892.594048] Call Trace: [ 2892.596655] dump_stack+0x1b2/0x281 [ 2892.600283] warn_alloc.cold+0x96/0x1cc [ 2892.604279] ? zone_watermark_ok_safe+0x220/0x220 [ 2892.609131] __alloc_pages_nodemask+0x2127/0x2720 [ 2892.613975] ? _raw_spin_unlock_irq+0x24/0x80 [ 2892.618470] ? lock_acquire+0x170/0x3f0 [ 2892.622446] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2892.627296] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2892.632746] ? __mutex_unlock_slowpath+0x75/0x770 [ 2892.637603] alloc_pages_current+0x155/0x260 [ 2892.642017] ion_page_pool_alloc+0x118/0x1b0 [ 2892.646432] ion_system_heap_allocate+0x133/0x8c0 [ 2892.651273] ? ion_alloc+0x187/0x810 [ 2892.654984] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2892.660433] ? ion_system_contig_heap_create+0x130/0x130 [ 2892.665885] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2892.670906] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2892.675751] ion_alloc+0x204/0x810 [ 2892.679339] ? ion_dma_buf_release+0x40/0x40 [ 2892.683755] ? __might_fault+0x177/0x1b0 [ 2892.687824] ion_ioctl+0xea/0x1f0 [ 2892.691284] ? ion_query_heaps+0x360/0x360 [ 2892.695524] ? lock_acquire+0x170/0x3f0 [ 2892.699503] ? lock_downgrade+0x740/0x740 [ 2892.703651] ? ion_query_heaps+0x360/0x360 [ 2892.707885] do_vfs_ioctl+0x75a/0xff0 [ 2892.711688] ? ioctl_preallocate+0x1a0/0x1a0 [ 2892.716107] ? lock_downgrade+0x740/0x740 [ 2892.720255] ? __fget+0x225/0x360 [ 2892.723730] ? do_vfs_ioctl+0xff0/0xff0 [ 2892.727706] ? security_file_ioctl+0x83/0xb0 [ 2892.732216] SyS_ioctl+0x7f/0xb0 [ 2892.735575] ? do_vfs_ioctl+0xff0/0xff0 [ 2892.739553] do_syscall_64+0x1d5/0x640 [ 2892.743450] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2892.748652] RIP: 0033:0x45e219 [ 2892.751835] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2892.759550] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2892.766824] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2892.774093] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2892.781360] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2892.788660] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2892.798889] Bluetooth: hci2 command 0x041b tx timeout [ 2892.804934] Bluetooth: hci0 command 0x041b tx timeout [ 2892.809840] Mem-Info: [ 2892.817274] active_anon:16504 inactive_anon:71012 isolated_anon:0 [ 2892.817274] active_file:368 inactive_file:492 isolated_file:0 [ 2892.817274] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2892.817274] slab_reclaimable:12706 slab_unreclaimable:112067 [ 2892.817274] mapped:53383 shmem:72454 pagetables:790 bounce:0 [ 2892.817274] free:49128 free_pcp:407 free_cma:0 [ 2892.882088] Node 0 active_anon:64452kB inactive_anon:259592kB active_file:552kB inactive_file:1392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140972kB dirty:0kB writeback:0kB shmem:265232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2892.912764] Node 1 active_anon:1564kB inactive_anon:24456kB active_file:1120kB inactive_file:976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73260kB dirty:0kB writeback:0kB shmem:24584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2892.944734] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:80kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2892.974001] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2892.979906] Node 0 DMA32 free:48656kB min:36200kB low:45248kB high:54296kB active_anon:64372kB inactive_anon:259592kB active_file:552kB inactive_file:1396kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2544kB bounce:0kB free_pcp:84kB local_pcp:84kB free_cma:0kB [ 2893.012374] lowmem_reserve[]: 0 0 0 0 0 [ 2893.016486] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2893.045269] lowmem_reserve[]: 0 0 0 0 0 [ 2893.050095] Node 1 Normal free:215612kB min:53696kB low:67120kB high:80544kB active_anon:1564kB inactive_anon:24456kB active_file:1548kB inactive_file:1492kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:768kB pagetables:616kB bounce:0kB free_pcp:220kB local_pcp:164kB free_cma:0kB [ 2893.082906] lowmem_reserve[]: 0 0 0 0 0 [ 2893.087011] Node 0 DMA: 15*4kB (U) 1*8kB (U) 1*16kB (M) 1*32kB (M) 0*64kB 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (E) = 11124kB [ 2893.105141] Node 0 DMA32: 37*4kB (ME) 239*8kB (UME) 132*16kB (ME) 68*32kB (ME) 196*64kB (UM) 171*128kB (UM) 11*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 45132kB [ 2893.124037] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2893.135718] Node 1 Normal: 15*4kB (UM) 4*8kB (UM) 1275*16kB (UM) 2115*32kB (UM) 1578*64kB (U) 270*128kB (U) 50*256kB (U) 9*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 241132kB [ 2893.154231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2893.164899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2893.178550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2893.188292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2893.199845] 73511 total pagecache pages [ 2893.203923] 0 pages in swap cache [ 2893.207452] Swap cache stats: add 0, delete 0, find 0/0 [ 2893.215794] Free swap = 0kB [ 2893.221269] Total swap = 0kB [ 2893.224368] 2097051 pages RAM [ 2893.227627] 0 pages HighMem/MovableOnly [ 2893.234006] 363840 pages reserved [ 2893.237563] 0 pages cma reserved [ 2894.611571] oom_reaper: reaped process 1001 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2894.666812] oom_reaper: reaped process 1003 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2894.708142] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2894.710133] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2894.728142] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2894.745191] (null), order=0, oom_score_adj=0 [ 2894.746058] CPU: 0 PID: 1001 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2894.750595] syz-fuzzer cpuset= [ 2894.757520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2894.757531] / [ 2894.760716] Call Trace: [ 2894.772893] mems_allowed=0-1 [ 2894.774371] dump_stack+0x1b2/0x281 [ 2894.781065] warn_alloc.cold+0x96/0x1cc [ 2894.785065] ? zone_watermark_ok_safe+0x220/0x220 [ 2894.789924] ? usleep_range+0x130/0x130 [ 2894.793888] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2894.799248] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2894.804257] ? run_timer_softirq+0x5a0/0x5a0 [ 2894.808693] __alloc_pages_nodemask+0x2127/0x2720 [ 2894.813537] ? lock_acquire+0x170/0x3f0 [ 2894.817520] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2894.822363] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2894.826855] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2894.832312] alloc_pages_current+0x155/0x260 [ 2894.836717] ion_page_pool_alloc+0x118/0x1b0 [ 2894.841119] ion_system_heap_allocate+0x133/0x8c0 [ 2894.845971] ? ion_alloc+0x187/0x810 [ 2894.849681] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2894.855132] ? ion_system_contig_heap_create+0x130/0x130 [ 2894.860587] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2894.865595] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2894.870429] ion_alloc+0x204/0x810 [ 2894.873980] ? ion_dma_buf_release+0x40/0x40 [ 2894.878382] ? __might_fault+0x177/0x1b0 [ 2894.882443] ion_ioctl+0xea/0x1f0 [ 2894.885893] ? ion_query_heaps+0x360/0x360 [ 2894.890131] ? lock_acquire+0x170/0x3f0 [ 2894.894096] ? lock_downgrade+0x740/0x740 [ 2894.898257] ? ion_query_heaps+0x360/0x360 [ 2894.902487] do_vfs_ioctl+0x75a/0xff0 [ 2894.906285] ? ioctl_preallocate+0x1a0/0x1a0 [ 2894.910684] ? lock_downgrade+0x740/0x740 [ 2894.914825] ? __fget+0x225/0x360 [ 2894.918267] ? do_vfs_ioctl+0xff0/0xff0 [ 2894.922235] ? security_file_ioctl+0x83/0xb0 [ 2894.926635] SyS_ioctl+0x7f/0xb0 [ 2894.929992] ? do_vfs_ioctl+0xff0/0xff0 [ 2894.933970] do_syscall_64+0x1d5/0x640 [ 2894.937859] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2894.943060] RIP: 0033:0x45e219 [ 2894.946240] RSP: 002b:00007fb79db61c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2894.953953] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2894.961213] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2894.968490] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2894.975782] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2894.983054] R13: 00007ffdaed1160f R14: 00007fb79db629c0 R15: 000000000119bf8c [ 2894.990362] CPU: 1 PID: 8003 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 2894.997820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2894.998789] syz-executor.1: [ 2895.007192] Call Trace: [ 2895.007203] page allocation failure: order:0 [ 2895.010212] dump_stack+0x1b2/0x281 [ 2895.010224] dump_header+0x178/0x82f [ 2895.010234] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2895.010246] ? ___ratelimit+0x2cd/0x530 [ 2895.012879] Bluetooth: hci0 command 0x040f tx timeout [ 2895.017208] oom_kill_process.cold+0x10/0xb18 [ 2895.020870] Mem-Info: [ 2895.024516] out_of_memory+0xe3e/0x1190 [ 2895.029731] Bluetooth: hci2 command 0x040f tx timeout [ 2895.033552] ? oom_killer_disable+0x1c0/0x1c0 [ 2895.038770] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2895.043203] ? mutex_trylock+0x152/0x1a0 [ 2895.045588] (null) [ 2895.049562] __alloc_pages_nodemask+0x23e1/0x2720 [ 2895.049582] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2895.049605] alloc_pages_current+0x155/0x260 [ 2895.054820] active_anon:16395 inactive_anon:71011 isolated_anon:0 [ 2895.054820] active_file:18 inactive_file:12 isolated_file:0 [ 2895.054820] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2895.054820] slab_reclaimable:12721 slab_unreclaimable:111979 [ 2895.054820] mapped:52747 shmem:72453 pagetables:770 bounce:0 [ 2895.054820] free:13858 free_pcp:135 free_cma:0 [ 2895.059297] filemap_fault+0xea3/0x1980 [ 2895.059315] ext4_filemap_fault+0x84/0xb0 [ 2895.059326] __do_fault+0xfa/0x380 [ 2895.059337] __handle_mm_fault+0x2497/0x4620 [ 2895.066576] Node 0 active_anon:63912kB inactive_anon:259592kB active_file:52kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139700kB dirty:0kB writeback:0kB shmem:265232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2895.070480] ? vm_insert_page+0x7c0/0x7c0 [ 2895.070490] ? lock_downgrade+0x740/0x740 [ 2895.070512] handle_mm_fault+0x391/0x860 [ 2895.072660] Node 1 active_anon:1668kB inactive_anon:24452kB active_file:20kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71288kB dirty:0kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2895.077481] __do_page_fault+0x549/0xad0 [ 2895.082373] syz-executor.1 cpuset= [ 2895.086726] ? spurious_fault+0x640/0x640 [ 2895.120161] Node 0 [ 2895.124066] ? do_page_fault+0x60/0x500 [ 2895.128235] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:80kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2895.131717] ? page_fault+0x2f/0x50 [ 2895.136096] lowmem_reserve[]: [ 2895.163771] page_fault+0x45/0x50 [ 2895.163781] RIP: 0000:0xb358f8 [ 2895.163785] RSP: 3b972663:000000c00003dec8 EFLAGS: 00438920 [ 2895.168333] Mem-Info: [ 2895.180260] / [ 2895.205673] active_anon:16395 inactive_anon:71011 isolated_anon:0 [ 2895.205673] active_file:18 inactive_file:12 isolated_file:0 [ 2895.205673] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2895.205673] slab_reclaimable:12721 slab_unreclaimable:111979 [ 2895.205673] mapped:52747 shmem:72453 pagetables:770 bounce:0 [ 2895.205673] free:13858 free_pcp:135 free_cma:0 [ 2895.215541] 0 [ 2895.217518] Node 0 active_anon:63912kB inactive_anon:259592kB active_file:52kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139700kB dirty:0kB writeback:0kB shmem:265232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2895.223592] mems_allowed=0-1 [ 2895.251658] Node 1 active_anon:1668kB inactive_anon:24452kB active_file:20kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71288kB dirty:0kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2895.262451] 2717 [ 2895.266825] Node 0 [ 2895.271345] 2718 [ 2895.312839] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:80kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2895.338264] CPU: 0 PID: 1003 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2895.375167] lowmem_reserve[]: [ 2895.396136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2895.396141] Call Trace: [ 2895.396162] dump_stack+0x1b2/0x281 [ 2895.396175] warn_alloc.cold+0x96/0x1cc [ 2895.396187] ? zone_watermark_ok_safe+0x220/0x220 [ 2895.396196] ? usleep_range+0x130/0x130 [ 2895.396205] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2895.396217] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2895.396227] ? run_timer_softirq+0x5a0/0x5a0 [ 2895.396243] __alloc_pages_nodemask+0x2127/0x2720 [ 2895.396258] ? lock_acquire+0x170/0x3f0 [ 2895.396274] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2895.396286] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2895.396300] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2895.396318] alloc_pages_current+0x155/0x260 [ 2895.414691] 0 [ 2895.416544] ion_page_pool_alloc+0x118/0x1b0 [ 2895.421238] 2717 [ 2895.422717] ion_system_heap_allocate+0x133/0x8c0 [ 2895.426663] 2718 [ 2895.431499] ? ion_alloc+0x187/0x810 [ 2895.431511] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2895.431521] ? ion_system_contig_heap_create+0x130/0x130 [ 2895.431530] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2895.431542] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2895.431553] ion_alloc+0x204/0x810 [ 2895.431567] ? ion_dma_buf_release+0x40/0x40 [ 2895.431579] ? __might_fault+0x177/0x1b0 [ 2895.431590] ion_ioctl+0xea/0x1f0 [ 2895.431601] ? ion_query_heaps+0x360/0x360 [ 2895.431613] ? lock_acquire+0x170/0x3f0 [ 2895.431623] ? lock_downgrade+0x740/0x740 [ 2895.431631] ? ion_query_heaps+0x360/0x360 [ 2895.431641] do_vfs_ioctl+0x75a/0xff0 [ 2895.431652] ? ioctl_preallocate+0x1a0/0x1a0 [ 2895.431660] ? lock_downgrade+0x740/0x740 [ 2895.431673] ? __fget+0x225/0x360 [ 2895.431682] ? do_vfs_ioctl+0xff0/0xff0 [ 2895.431694] ? security_file_ioctl+0x83/0xb0 [ 2895.446089] 2718 [ 2895.450133] SyS_ioctl+0x7f/0xb0 [ 2895.450143] ? do_vfs_ioctl+0xff0/0xff0 [ 2895.450155] do_syscall_64+0x1d5/0x640 [ 2895.450171] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2895.450180] RIP: 0033:0x45e219 [ 2895.450185] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2895.450195] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2895.450200] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2895.450208] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2895.456365] 2718 [ 2895.458996] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2895.459002] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2895.465082] 2718 [ 2895.475908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2895.484282] 2718 [ 2895.485520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2895.486581] Node 0 [ 2895.508912] DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:63820kB inactive_anon:259592kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2488kB bounce:0kB free_pcp:468kB local_pcp:292kB free_cma:0kB [ 2895.524087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2895.540509] lowmem_reserve[]: [ 2895.548062] Node 0 [ 2895.558032] 0 [ 2895.564577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2895.566223] 0 [ 2895.572954] DMA32 free:18480kB min:36200kB low:45248kB high:54296kB active_anon:63820kB inactive_anon:259592kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2488kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2895.580611] 0 [ 2895.593787] device bridge_slave_1 left promiscuous mode [ 2895.598607] 0 [ 2895.606216] lowmem_reserve[]: [ 2895.627747] 0 [ 2895.631240] bridge0: port 2(bridge_slave_1) entered disabled state [ 2895.643219] 0 [ 2895.669777] Node 0 [ 2895.897677] 0 0 0 0 [ 2895.902275] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2896.047632] lowmem_reserve[]: 0 0 0 0 0 [ 2896.051672] Node 1 Normal free:838528kB min:53696kB low:67120kB high:80544kB active_anon:1660kB inactive_anon:24452kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:672kB pagetables:592kB bounce:0kB free_pcp:1328kB local_pcp:704kB free_cma:0kB [ 2896.067633] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2896.081359] lowmem_reserve[]: [ 2896.105965] device bridge_slave_0 left promiscuous mode [ 2896.137810] bridge0: port 1(bridge_slave_0) entered disabled state [ 2896.147646] 0 0 0 0 0 [ 2896.150194] Node 0 DMA: 93*4kB (U) 8*8kB (U) 6*16kB (UM) 6*32kB (UM) 13*64kB (U) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (E) = 12820kB [ 2896.197574] lowmem_reserve[]: 0 0 0 0 0 [ 2896.201635] Node 1 Normal free:967728kB min:53696kB low:67120kB high:80544kB active_anon:1660kB inactive_anon:24452kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:672kB pagetables:592kB bounce:0kB free_pcp:1436kB local_pcp:704kB free_cma:0kB [ 2896.227590] Node 0 DMA32: 11142*4kB (UME) 6198*8kB (UME) 2741*16kB (UME) 2901*32kB (UME) 3138*64kB (UM) 348*128kB (UM) 23*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 483640kB [ 2896.276386] device veth1_macvtap left promiscuous mode [ 2896.281893] device veth0_macvtap left promiscuous mode [ 2896.287246] device veth1_vlan left promiscuous mode [ 2896.294340] device veth0_vlan left promiscuous mode [ 2896.298043] lowmem_reserve[]: 0 0 0 0 0 [ 2896.301527] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2896.303816] Node 0 [ 2896.347305] Node 1 Normal: 7849*4kB (UM) 4655*8kB (UM) 3228*16kB (UM) 2406*32kB (UM) 5772*64kB (UM) 1841*128kB (UM) 601*256kB (UM) 112*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 1013532kB [ 2896.377538] DMA: 107*4kB (U) 8*8kB (U) 6*16kB (UM) 6*32kB (UM) 13*64kB (U) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (E) = 11852kB [ 2896.427767] Node 0 DMA32: 11532*4kB (UME) 8061*8kB (UME) 3408*16kB (UME) 3212*32kB (UME) 663*64kB (UM) 353*128kB (UM) 23*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 361944kB [ 2896.432816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2896.444267] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2896.516568] Node 1 Normal: 8001*4kB (UM) 4838*8kB (UM) 3397*16kB (UM) 2547*32kB (UM) 5930*64kB (UM) 1875*128kB (UM) 612*256kB (UM) 112*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 1040100kB [ 2896.520346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2896.567513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2896.571648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2896.588009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2896.588807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2896.596730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2896.633216] 74106 total pagecache pages [ 2896.642920] 0 pages in swap cache [ 2896.655786] Swap cache stats: add 0, delete 0, find 0/0 [ 2896.678780] Free swap = 0kB [ 2896.689967] device hsr_slave_1 left promiscuous mode [ 2896.696246] Total swap = 0kB [ 2896.704894] 2097051 pages RAM [ 2896.708203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2896.725195] 0 pages HighMem/MovableOnly [ 2896.727554] 74328 total pagecache pages [ 2896.734443] device hsr_slave_0 left promiscuous mode [ 2896.737376] 0 pages in swap cache [ 2896.751168] 363840 pages reserved [ 2896.763350] 0 pages cma reserved [ 2896.767591] Swap cache stats: add 0, delete 0, find 0/0 [ 2896.778263] Free swap = 0kB [ 2896.788015] Total swap = 0kB [ 2896.791118] Out of memory (oom_kill_allocating_task): Kill process 8003 (syz-fuzzer) score 0 or sacrifice child [ 2896.791185] Killed process 31533 (syz-executor.3) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2896.821467] team0 (unregistering): Port device team_slave_1 removed [ 2896.842220] team0 (unregistering): Port device team_slave_0 removed [ 2896.844186] 2097051 pages RAM [ 2896.857457] 0 pages HighMem/MovableOnly [ 2896.865854] 363840 pages reserved [ 2896.872367] 0 pages cma reserved [ 2896.884059] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2896.904380] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2897.000812] bond0 (unregistering): Released all slaves [ 2897.009860] Bluetooth: hci2 command 0x0419 tx timeout [ 2897.017333] Bluetooth: hci0 command 0x0419 tx timeout 12:10:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x65, 0x56}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x2, 0x604}, 0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x80000001, 0x12, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x8000}, 0x8) [ 2898.526719] Bluetooth: hci3 command 0x0409 tx timeout [ 2898.528601] Bluetooth: hci5 command 0x0409 tx timeout [ 2898.755373] IPVS: ftp: loaded support on port[0] = 21 [ 2898.798840] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2898.825189] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2898.836098] CPU: 1 PID: 1001 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 2898.843927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2898.853289] Call Trace: [ 2898.855885] dump_stack+0x1b2/0x281 [ 2898.859514] warn_alloc.cold+0x96/0x1cc [ 2898.863493] ? zone_watermark_ok_safe+0x220/0x220 [ 2898.868354] __alloc_pages_nodemask+0x2127/0x2720 [ 2898.872488] IPVS: ftp: loaded support on port[0] = 21 [ 2898.873200] ? __schedule+0x893/0x1de0 [ 2898.882275] ? lock_acquire+0x170/0x3f0 [ 2898.886259] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2898.891112] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2898.896597] ? __mutex_unlock_slowpath+0x75/0x770 [ 2898.901451] alloc_pages_current+0x155/0x260 [ 2898.905866] ion_page_pool_alloc+0x118/0x1b0 [ 2898.910282] ion_system_heap_allocate+0x133/0x8c0 [ 2898.915128] ? _raw_spin_unlock+0x29/0x40 [ 2898.919275] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2898.924232] ? ion_system_contig_heap_create+0x130/0x130 [ 2898.929700] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2898.934725] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2898.939593] ion_alloc+0x27a/0x810 [ 2898.943137] ? ion_dma_buf_release+0x40/0x40 [ 2898.947546] ? __might_fault+0x177/0x1b0 [ 2898.951631] ion_ioctl+0xea/0x1f0 [ 2898.955099] ? ion_query_heaps+0x360/0x360 [ 2898.959356] ? lock_acquire+0x170/0x3f0 [ 2898.963328] ? lock_downgrade+0x740/0x740 [ 2898.967473] ? ion_query_heaps+0x360/0x360 [ 2898.971707] do_vfs_ioctl+0x75a/0xff0 [ 2898.975511] ? ioctl_preallocate+0x1a0/0x1a0 [ 2898.979921] ? lock_downgrade+0x740/0x740 [ 2898.984072] ? __fget+0x225/0x360 [ 2898.987550] ? do_vfs_ioctl+0xff0/0xff0 [ 2898.991521] ? security_file_ioctl+0x83/0xb0 [ 2898.995932] SyS_ioctl+0x7f/0xb0 [ 2898.999293] ? do_vfs_ioctl+0xff0/0xff0 [ 2899.003266] do_syscall_64+0x1d5/0x640 [ 2899.007160] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2899.012520] RIP: 0033:0x45e219 [ 2899.015706] RSP: 002b:00007fb79db61c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2899.023415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2899.030688] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2899.037995] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2899.045273] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2899.052548] R13: 00007ffdaed1160f R14: 00007fb79db629c0 R15: 000000000119bf8c [ 2899.228266] chnl_net:caif_netlink_parms(): no params data found [ 2899.302540] IPVS: ftp: loaded support on port[0] = 21 [ 2899.368801] warn_alloc_show_mem: 1 callbacks suppressed [ 2899.368806] Mem-Info: [ 2899.381033] active_anon:16527 inactive_anon:71016 isolated_anon:0 [ 2899.381033] active_file:1838 inactive_file:1812 isolated_file:0 [ 2899.381033] unevictable:0 dirty:18 writeback:0 unstable:0 [ 2899.381033] slab_reclaimable:12730 slab_unreclaimable:111570 [ 2899.381033] mapped:46668 shmem:72462 pagetables:745 bounce:0 [ 2899.381033] free:258384 free_pcp:186 free_cma:0 [ 2899.423035] Node 0 active_anon:65092kB inactive_anon:259612kB active_file:7476kB inactive_file:7148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115240kB dirty:20kB writeback:36kB shmem:265268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2899.453843] Node 1 active_anon:1032kB inactive_anon:24452kB active_file:64kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71388kB dirty:16kB writeback:24kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2899.509891] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:80kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2899.510598] chnl_net:caif_netlink_parms(): no params data found [ 2899.545475] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2899.551714] Node 0 DMA32 free:559128kB min:36200kB low:45248kB high:54296kB active_anon:65028kB inactive_anon:259612kB active_file:7400kB inactive_file:7176kB unevictable:0kB writepending:40kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2512kB bounce:0kB free_pcp:956kB local_pcp:700kB free_cma:0kB [ 2899.599008] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2899.603106] syz-executor.2: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 2899.619859] syz-executor.1 cpuset= [ 2899.621568] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2899.625169] / mems_allowed=0-1 [ 2899.630271] CPU: 0 PID: 963 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2899.630279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2899.630283] Call Trace: [ 2899.630301] dump_stack+0x1b2/0x281 [ 2899.630313] warn_alloc.cold+0x96/0x1cc [ 2899.630323] ? zone_watermark_ok_safe+0x220/0x220 [ 2899.630331] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2899.630343] ? wake_all_kswapds+0x175/0x360 [ 2899.630355] __alloc_pages_nodemask+0x2127/0x2720 [ 2899.630364] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2899.630374] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 2899.692980] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2899.697819] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2899.702667] ? cache_alloc_refill+0x2fa/0x350 [ 2899.707185] ? ____cache_alloc_node+0x156/0x1d0 [ 2899.711923] cache_grow_begin+0x91/0x630 [ 2899.716012] ? cache_grow_begin+0x91/0x630 [ 2899.720251] fallback_alloc+0x207/0x2c0 [ 2899.724226] __kmalloc+0x213/0x400 [ 2899.727787] ? batadv_hash_new+0xaa/0x270 [ 2899.731944] batadv_hash_new+0xaa/0x270 [ 2899.735919] ? batadv_hash_set_lock_class+0x9a/0xf0 [ 2899.740938] batadv_tt_init+0x2b2/0x390 [ 2899.744919] batadv_mesh_init+0x478/0x630 [ 2899.749086] batadv_softif_init_late+0xa26/0xc90 [ 2899.753864] ? batadv_get_strings+0x40/0x40 [ 2899.758197] ? dev_valid_name+0x1a0/0x1a0 [ 2899.762360] ? batadv_get_strings+0x40/0x40 [ 2899.766692] register_netdevice+0x291/0xe40 [ 2899.771010] ? netdev_change_features+0xa0/0xa0 [ 2899.775684] ? rtnl_create_link+0x129/0x890 [ 2899.780007] rtnl_newlink+0x14dc/0x1830 [ 2899.783980] ? rtnl_newlink+0x43d/0x1830 [ 2899.788037] ? __lock_acquire+0x5fc/0x3f20 [ 2899.792295] ? trace_hardirqs_on+0x10/0x10 [ 2899.796531] ? rtnl_dellink+0x6a0/0x6a0 [ 2899.800537] ? trace_hardirqs_on+0x10/0x10 [ 2899.804772] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2899.805273] lowmem_reserve[]: [ 2899.810659] ? deref_stack_reg+0x124/0x1a0 [ 2899.810697] ? lock_acquire+0x170/0x3f0 [ 2899.810705] ? lock_downgrade+0x740/0x740 [ 2899.810714] ? rtnl_dellink+0x6a0/0x6a0 [ 2899.810721] rtnetlink_rcv_msg+0x3be/0xb10 [ 2899.810732] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2899.810740] ? __netlink_lookup+0x345/0x5d0 [ 2899.810752] netlink_rcv_skb+0x125/0x390 [ 2899.810760] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2899.810769] ? netlink_ack+0x9a0/0x9a0 [ 2899.810784] netlink_unicast+0x437/0x610 [ 2899.810795] ? netlink_sendskb+0xd0/0xd0 [ 2899.810803] ? __check_object_size+0x179/0x230 [ 2899.810813] netlink_sendmsg+0x62e/0xb80 [ 2899.810824] ? nlmsg_notify+0x170/0x170 [ 2899.810835] ? security_socket_sendmsg+0x83/0xb0 [ 2899.810842] ? nlmsg_notify+0x170/0x170 [ 2899.810852] sock_sendmsg+0xb5/0x100 [ 2899.810861] SyS_sendto+0x1c7/0x2c0 [ 2899.810870] ? SyS_getpeername+0x220/0x220 [ 2899.810886] ? sock_poll+0x220/0x220 [ 2899.810898] ? SyS_socket+0x12f/0x1b0 [ 2899.810906] ? move_addr_to_kernel+0x60/0x60 [ 2899.810915] ? do_syscall_64+0x4c/0x640 [ 2899.810923] ? SyS_getpeername+0x220/0x220 [ 2899.810931] do_syscall_64+0x1d5/0x640 [ 2899.810945] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2899.810953] RIP: 0033:0x417c97 [ 2899.810962] RSP: 002b:00007ffd20d56480 EFLAGS: 00000293 [ 2899.830216] 0 [ 2899.830783] ORIG_RAX: 000000000000002c [ 2899.846286] 0 [ 2899.847843] RAX: ffffffffffffffda RBX: 00000000016b4300 RCX: 0000000000417c97 [ 2899.847849] RDX: 000000000000003c RSI: 00000000016b4350 RDI: 0000000000000003 [ 2899.847853] RBP: 0000000000000000 R08: 00007ffd20d56490 R09: 000000000000000c [ 2899.847862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2899.856505] 0 [ 2899.860265] R13: 0000000000000000 R14: 00000000016b4350 R15: 0000000000000003 [ 2899.873494] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 2899.877350] CPU: 1 PID: 1023 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 2899.881945] ------------[ cut here ]------------ [ 2899.885754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2899.889462] WARNING: CPU: 0 PID: 963 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 2899.893054] Call Trace: [ 2899.897287] Kernel panic - not syncing: panic_on_warn set ... [ 2899.897287] [ 2899.900996] dump_stack+0x1b2/0x281 [ 2900.036360] warn_alloc.cold+0x96/0x1cc [ 2900.040330] ? zone_watermark_ok_safe+0x220/0x220 [ 2900.045189] __alloc_pages_nodemask+0x2127/0x2720 [ 2900.050635] ? _raw_spin_unlock_irq+0x24/0x80 [ 2900.055143] ? lock_acquire+0x170/0x3f0 [ 2900.059114] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2900.063985] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2900.069432] ? __mutex_unlock_slowpath+0x75/0x770 [ 2900.074270] alloc_pages_current+0x155/0x260 [ 2900.078677] ion_page_pool_alloc+0x118/0x1b0 [ 2900.083081] ion_system_heap_allocate+0x133/0x8c0 [ 2900.089482] ? ion_alloc+0x187/0x810 [ 2900.093207] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2900.098656] ? ion_system_contig_heap_create+0x130/0x130 [ 2900.104110] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2900.109135] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2900.113993] ion_alloc+0x204/0x810 [ 2900.117530] ? ion_dma_buf_release+0x40/0x40 [ 2900.121948] ? __might_fault+0x177/0x1b0 [ 2900.126023] ion_ioctl+0xea/0x1f0 [ 2900.129470] ? ion_query_heaps+0x360/0x360 [ 2900.133712] ? lock_acquire+0x170/0x3f0 [ 2900.137675] ? lock_downgrade+0x740/0x740 [ 2900.141824] ? ion_query_heaps+0x360/0x360 [ 2900.146047] do_vfs_ioctl+0x75a/0xff0 [ 2900.149841] ? ioctl_preallocate+0x1a0/0x1a0 [ 2900.154239] ? lock_downgrade+0x740/0x740 [ 2900.158394] ? __fget+0x225/0x360 [ 2900.161860] ? do_vfs_ioctl+0xff0/0xff0 [ 2900.165825] ? security_file_ioctl+0x83/0xb0 [ 2900.170224] SyS_ioctl+0x7f/0xb0 [ 2900.173578] ? do_vfs_ioctl+0xff0/0xff0 [ 2900.177716] do_syscall_64+0x1d5/0x640 [ 2900.181599] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2900.186806] RIP: 0033:0x45e219 [ 2900.189984] RSP: 002b:00007f90e5973c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2900.197680] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2900.204954] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2900.212387] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2900.219647] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2900.226912] R13: 00007ffd8263e14f R14: 00007f90e59749c0 R15: 000000000119bf8c [ 2900.234192] CPU: 0 PID: 963 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 2900.235304] 0 [ 2900.241905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2900.241909] Call Trace: [ 2900.241927] dump_stack+0x1b2/0x281 [ 2900.241939] panic+0x1f9/0x42d [ 2900.241947] ? add_taint.cold+0x16/0x16 [ 2900.241960] ? debug_print_object.cold+0xa7/0xdb [ 2900.241971] ? debug_print_object.cold+0xa7/0xdb [ 2900.243804] 0 [ 2900.253291] __warn.cold+0x20/0x44 [ 2900.253303] ? ist_end_non_atomic+0x10/0x10 [ 2900.253312] ? debug_print_object.cold+0xa7/0xdb [ 2900.253321] report_bug+0x208/0x250 [ 2900.253330] do_error_trap+0x195/0x2d0 [ 2900.253338] ? math_error+0x2d0/0x2d0 [ 2900.253352] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2900.253366] invalid_op+0x1b/0x40 [ 2900.253376] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 2900.253379] RSP: 0018:ffff88801e86f248 EFLAGS: 00010086 [ 2900.259575] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 2900.259580] RDX: 0000000000000000 RSI: ffffffff878bbb40 RDI: ffffed1003d0de3f [ 2900.259584] RBP: ffffffff878b6e00 R08: 0000000000000061 R09: 0000000000000001 [ 2900.259588] R10: 0000000000000000 R11: ffff8880403de100 R12: 0000000000000000 [ 2900.259592] R13: 0000000000000000 R14: ffff88803a1c26f0 R15: 1ffff11003d0de52 [ 2900.259617] ? debug_print_object.cold+0xa7/0xdb [ 2900.262827] Node 0 [ 2900.266745] debug_object_assert_init+0x1d3/0x2d0 [ 2900.266755] ? debug_object_active_state+0x330/0x330 [ 2900.266762] ? rtnl_newlink+0x14dc/0x1830 [ 2900.266768] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 2900.266776] ? netlink_rcv_skb+0x125/0x390 [ 2900.266787] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2900.266799] del_timer+0x5d/0xe0 [ 2900.266806] ? process_timeout+0x20/0x20 [ 2900.266818] try_to_grab_pending+0x243/0x610 [ 2900.271613] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2900.276317] __cancel_work_timer+0x90/0x460 [ 2900.276326] ? work_on_cpu_safe+0x70/0x70 [ 2900.276337] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 2900.276349] batadv_nc_mesh_free+0x41/0x120 [ 2900.276358] batadv_mesh_free+0x70/0x150 [ 2900.276367] batadv_mesh_init+0x561/0x630 [ 2900.276380] batadv_softif_init_late+0xa26/0xc90 [ 2900.278228] lowmem_reserve[]: [ 2900.281710] ? batadv_get_strings+0x40/0x40 [ 2900.281719] ? dev_valid_name+0x1a0/0x1a0 [ 2900.281730] ? batadv_get_strings+0x40/0x40 [ 2900.286186] 0 [ 2900.290805] register_netdevice+0x291/0xe40 [ 2900.290817] ? netdev_change_features+0xa0/0xa0 [ 2900.290829] ? rtnl_create_link+0x129/0x890 [ 2900.294512] 0 [ 2900.298336] rtnl_newlink+0x14dc/0x1830 [ 2900.298343] ? rtnl_newlink+0x43d/0x1830 [ 2900.298352] ? __lock_acquire+0x5fc/0x3f20 [ 2900.298364] ? trace_hardirqs_on+0x10/0x10 [ 2900.298370] ? rtnl_dellink+0x6a0/0x6a0 [ 2900.298377] ? trace_hardirqs_on+0x10/0x10 [ 2900.298386] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2900.298393] ? deref_stack_reg+0x124/0x1a0 [ 2900.298430] ? lock_acquire+0x170/0x3f0 [ 2900.302271] 0 [ 2900.307031] ? lock_downgrade+0x740/0x740 [ 2900.307040] ? rtnl_dellink+0x6a0/0x6a0 [ 2900.307047] rtnetlink_rcv_msg+0x3be/0xb10 [ 2900.307057] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2900.307065] ? __netlink_lookup+0x345/0x5d0 [ 2900.307077] netlink_rcv_skb+0x125/0x390 [ 2900.307085] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2900.307092] ? netlink_ack+0x9a0/0x9a0 [ 2900.307107] netlink_unicast+0x437/0x610 [ 2900.307118] ? netlink_sendskb+0xd0/0xd0 [ 2900.310620] 0 [ 2900.315917] ? __check_object_size+0x179/0x230 [ 2900.315928] netlink_sendmsg+0x62e/0xb80 [ 2900.315941] ? nlmsg_notify+0x170/0x170 [ 2900.321431] 0 [ 2900.328554] ? security_socket_sendmsg+0x83/0xb0 [ 2900.328563] ? nlmsg_notify+0x170/0x170 [ 2900.328571] sock_sendmsg+0xb5/0x100 [ 2900.328581] SyS_sendto+0x1c7/0x2c0 [ 2900.328590] ? SyS_getpeername+0x220/0x220 [ 2900.328605] ? sock_poll+0x220/0x220 [ 2900.328620] ? SyS_socket+0x12f/0x1b0 [ 2900.343165] ? move_addr_to_kernel+0x60/0x60 [ 2900.343174] ? do_syscall_64+0x4c/0x640 [ 2900.343180] ? SyS_getpeername+0x220/0x220 [ 2900.343188] do_syscall_64+0x1d5/0x640 [ 2900.343202] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2900.343210] RIP: 0033:0x417c97 [ 2900.343214] RSP: 002b:00007ffd20d56480 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2900.343223] RAX: ffffffffffffffda RBX: 00000000016b4300 RCX: 0000000000417c97 [ 2900.343227] RDX: 000000000000003c RSI: 00000000016b4350 RDI: 0000000000000003 [ 2900.343236] RBP: 0000000000000000 R08: 00007ffd20d56490 R09: 000000000000000c [ 2900.350628] Node 1 [ 2900.357752] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2900.357756] R13: 0000000000000000 R14: 00000000016b4350 R15: 0000000000000003 [ 2900.363046] Kernel Offset: disabled [ 2900.694958] Rebooting in 86400 seconds..