916932] do_syscall_64+0x1d5/0x640 [ 1149.920822] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1149.926014] RIP: 0033:0x465f69 [ 1149.929201] RSP: 002b:00007f7567f8b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1149.936916] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1149.944167] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1149.951432] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1149.958679] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1149.965927] R13: 00007ffe1afeef3f R14: 00007f7567f8b300 R15: 0000000000022000 [ 1149.978874] Mem-Info: [ 1149.981362] active_anon:303460 inactive_anon:6720 isolated_anon:0 [ 1149.981362] active_file:1593 inactive_file:5962 isolated_file:0 [ 1149.981362] unevictable:0 dirty:81 writeback:0 unstable:0 [ 1149.981362] slab_reclaimable:17218 slab_unreclaimable:141334 [ 1149.981362] mapped:48392 shmem:6928 pagetables:55784 bounce:0 [ 1149.981362] free:53873 free_pcp:67 free_cma:0 [ 1150.019001] Node 0 active_anon:1184036kB inactive_anon:26864kB active_file:5576kB inactive_file:10936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185520kB dirty:256kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1001472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1150.051825] Node 1 active_anon:29804kB inactive_anon:16kB active_file:796kB inactive_file:12912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8048kB dirty:68kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1150.082815] Node 0 DMA free:11100kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.113819] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1150.119304] Node 0 DMA32 free:150112kB min:36200kB low:45248kB high:54296kB active_anon:1179928kB inactive_anon:26864kB active_file:5576kB inactive_file:11036kB unevictable:0kB writepending:256kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:72640kB pagetables:201492kB bounce:0kB free_pcp:336kB local_pcp:108kB free_cma:0kB [ 1150.153413] lowmem_reserve[]: 0 0 0 0 0 [ 1150.157449] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.186337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1150.187361] lowmem_reserve[]: 0 0 0 0 0 [ 1150.194591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.197273] Node 1 Normal free:53736kB min:53696kB low:67120kB high:80544kB active_anon:29804kB inactive_anon:16kB active_file:796kB inactive_file:12912kB unevictable:0kB writepending:68kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:7040kB pagetables:21548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.197295] lowmem_reserve[]: 0 0 0 0 0 [ 1150.235172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1150.237263] Node 0 DMA: 3*4kB (UM) 4*8kB (UE) 7*16kB (UME) 4*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11100kB [ 1150.251964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.260914] Node 0 DMA32: 2327*4kB (ME) 6056*8kB (UME) 1421*16kB (UME) 1069*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 114764kB [ 1150.281887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1150.284623] device bridge_slave_1 left promiscuous mode [ 1150.292948] Node 1 Normal: 708*4kB (UME) 667*8kB (UME) 546*16kB [ 1150.299639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.301658] (UME) 369*32kB (UME) 143*64kB (UM) 52*128kB (UE) 16*256kB (U) 8*512kB (UME) 1*1024kB (E) 0*2048kB 0*4096kB = 53736kB [ 1150.326959] device bridge_slave_0 left promiscuous mode [ 1150.327647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.333777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.341569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1150.356610] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.365743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1150.375178] 13924 total pagecache pages [ 1150.379195] 0 pages in swap cache [ 1150.382954] Swap cache stats: add 0, delete 0, find 0/0 [ 1150.388585] Free swap = 0kB [ 1150.391600] Total swap = 0kB [ 1150.394829] 2097051 pages RAM [ 1150.395162] device veth1_macvtap left promiscuous mode [ 1150.397923] 0 pages HighMem/MovableOnly [ 1150.397927] 363840 pages reserved [ 1150.397936] 0 pages cma reserved [ 1150.406349] device veth0_macvtap left promiscuous mode [ 1150.423712] device veth1_vlan left promiscuous mode [ 1150.429983] device veth0_vlan left promiscuous mode 10:37:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000140)={0x2, 0x20, [0x3, 0x80, 0x0, 0xfff], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) [ 1150.653792] device hsr_slave_1 left promiscuous mode [ 1150.666624] device hsr_slave_0 left promiscuous mode [ 1150.687012] team0 (unregistering): Port device team_slave_1 removed [ 1150.704386] team0 (unregistering): Port device team_slave_0 removed [ 1150.720584] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1150.736648] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1150.777649] bond0 (unregistering): Released all slaves [ 1151.556177] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1151.569405] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1151.574539] CPU: 1 PID: 8434 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1151.582333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1151.591681] Call Trace: [ 1151.594279] dump_stack+0x1b2/0x281 [ 1151.597911] warn_alloc.cold+0x96/0x1cc [ 1151.601884] ? zone_watermark_ok_safe+0x220/0x220 [ 1151.606737] __alloc_pages_nodemask+0x2127/0x2720 [ 1151.611580] ? lock_acquire+0x170/0x3f0 [ 1151.615557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1151.620407] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1151.625862] ? __mutex_unlock_slowpath+0x75/0x770 [ 1151.630708] ? alloc_pages_current+0x16/0x260 [ 1151.635208] alloc_pages_current+0x155/0x260 [ 1151.639620] ion_page_pool_alloc+0x118/0x1b0 [ 1151.644031] ion_system_heap_allocate+0x133/0x8c0 [ 1151.648872] ? ion_alloc+0x187/0x810 [ 1151.652577] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1151.658020] ? ion_system_contig_heap_create+0x130/0x130 [ 1151.663467] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1151.668480] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1151.673329] ion_alloc+0x204/0x810 [ 1151.676871] ? ion_dma_buf_release+0x40/0x40 [ 1151.681278] ? __might_fault+0x177/0x1b0 [ 1151.685337] ion_ioctl+0xea/0x1f0 [ 1151.688782] ? ion_query_heaps+0x360/0x360 [ 1151.693014] ? ion_query_heaps+0x360/0x360 [ 1151.697241] do_vfs_ioctl+0x75a/0xff0 [ 1151.701038] ? ioctl_preallocate+0x1a0/0x1a0 [ 1151.705436] ? lock_downgrade+0x740/0x740 [ 1151.709578] ? __fget+0x225/0x360 [ 1151.713023] ? do_vfs_ioctl+0xff0/0xff0 [ 1151.716990] ? security_file_ioctl+0x83/0xb0 [ 1151.721392] SyS_ioctl+0x7f/0xb0 [ 1151.724751] ? do_vfs_ioctl+0xff0/0xff0 [ 1151.728719] do_syscall_64+0x1d5/0x640 [ 1151.732607] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1151.737789] RIP: 0033:0x465f69 [ 1151.740971] RSP: 002b:00007f7567f8b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1151.748671] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1151.755931] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1151.763192] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1151.770457] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1151.777725] R13: 00007ffe1afeef3f R14: 00007f7567f8b300 R15: 0000000000022000 [ 1151.878586] Mem-Info: [ 1151.881116] active_anon:303509 inactive_anon:6720 isolated_anon:24 [ 1151.881116] active_file:2026 inactive_file:1654 isolated_file:12 [ 1151.881116] unevictable:0 dirty:17 writeback:0 unstable:0 [ 1151.881116] slab_reclaimable:17132 slab_unreclaimable:139241 [ 1151.881116] mapped:55152 shmem:6928 pagetables:55828 bounce:0 [ 1151.881116] free:47477 free_pcp:51 free_cma:0 [ 1151.915792] Node 0 active_anon:1184236kB inactive_anon:26864kB active_file:8096kB inactive_file:6604kB unevictable:0kB isolated(anon):96kB isolated(file):48kB mapped:220608kB dirty:68kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1001472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1151.945401] Node 1 active_anon:29800kB inactive_anon:16kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1151.972265] Node 0 DMA free:11100kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1151.999340] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1152.004561] Node 0 DMA32 free:125024kB min:36200kB low:45248kB high:54296kB active_anon:1180204kB inactive_anon:26872kB active_file:8212kB inactive_file:6668kB unevictable:0kB writepending:36kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:72704kB pagetables:201668kB bounce:0kB free_pcp:204kB local_pcp:0kB free_cma:0kB [ 1152.005073] IPVS: ftp: loaded support on port[0] = 21 [ 1152.034735] lowmem_reserve[]: 0 0 0 0 0 [ 1152.048569] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1152.075274] lowmem_reserve[]: 0 0 0 0 0 [ 1152.079865] Node 1 Normal free:53656kB min:53696kB low:67120kB high:80544kB active_anon:29692kB inactive_anon:16kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:7040kB pagetables:21548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1152.108805] lowmem_reserve[]: 0 0 0 0 0 [ 1152.113225] Node 0 DMA: 3*4kB (UM) 4*8kB (UE) 7*16kB (UME) 4*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11100kB [ 1152.130304] Node 0 DMA32: 2763*4kB (UME) 6781*8kB (UME) 1511*16kB (UME) 1014*32kB (UME) 1*64kB (U) 2*128kB (U) 2*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 123780kB [ 1152.151867] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1152.164216] Node 1 Normal: 1452*4kB (UM) 929*8kB (UM) 654*16kB (UM) 424*32kB (UM) 24*64kB (M) 36*128kB (UM) 22*256kB (UM) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53656kB [ 1152.181658] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1152.190959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1152.200624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1152.209890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1152.219160] 9990 total pagecache pages [ 1152.223169] 0 pages in swap cache [ 1152.226710] Swap cache stats: add 0, delete 0, find 0/0 [ 1152.233123] Free swap = 0kB [ 1152.236612] Total swap = 0kB [ 1152.241121] 2097051 pages RAM [ 1152.244322] 0 pages HighMem/MovableOnly [ 1152.249433] 363840 pages reserved [ 1152.252989] 0 pages cma reserved [ 1152.305791] chnl_net:caif_netlink_parms(): no params data found [ 1152.519489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.526225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.534423] device bridge_slave_0 entered promiscuous mode [ 1152.542213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.549150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.556841] device bridge_slave_1 entered promiscuous mode [ 1152.582521] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1152.592366] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1152.616345] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1152.624094] team0: Port device team_slave_0 added [ 1152.630086] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1152.637345] team0: Port device team_slave_1 added [ 1152.664000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.673924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1152.703644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1152.715258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1152.724993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1152.753889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1152.764854] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1152.775908] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1152.809224] device hsr_slave_0 entered promiscuous mode [ 1152.815013] device hsr_slave_1 entered promiscuous mode [ 1152.821249] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1152.828522] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1152.927302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.933988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.940943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.947324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.991432] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1152.997526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.007680] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1153.019226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1153.026648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.034768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.045916] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1153.053601] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.063933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1153.073042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.079453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.099532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1153.107264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.113661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.123111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1153.132244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1153.148953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1153.156609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1153.164475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1153.172835] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1153.178972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1153.193902] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1153.201965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1153.210270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1153.221730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.248226] Bluetooth: hci0 command 0x0409 tx timeout [ 1153.268324] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1153.307419] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1153.320944] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1153.329581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1153.337404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1153.383431] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1153.391379] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1153.398370] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1153.407759] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1153.414727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1153.422605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1153.432176] device veth0_vlan entered promiscuous mode [ 1153.438128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1153.445048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1153.456377] device veth1_vlan entered promiscuous mode [ 1153.465725] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1153.475675] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1153.488871] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1153.500302] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1153.507194] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1153.515477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1153.523067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1153.531479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1153.541313] device veth0_macvtap entered promiscuous mode [ 1153.547371] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1153.557812] device veth1_macvtap entered promiscuous mode [ 1153.568574] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1153.583032] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1153.593439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1153.606084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1153.616338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.629083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1153.641041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.653434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1153.665694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.676322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1153.689347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.701247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1153.712463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.725519] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1153.732929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.741810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1153.751874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.761258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1153.771308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.780707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1153.790683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.800126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1153.810148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.820124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1153.830143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.840539] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1153.847672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.855064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1153.862763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1153.870296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1153.878452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1153.886353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1153.894816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:37:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000140)={0x2, 0x20, [0x3, 0x80, 0x0, 0xfff], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) 10:37:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)) 10:37:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/216}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='cgroup.max.depth\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:37:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x3) 10:37:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:32 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:37:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x3) 10:37:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/216}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:37:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)) 10:37:32 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x3) [ 1154.504101] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1154.535572] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1154.550801] CPU: 1 PID: 8726 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1154.558624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.567980] Call Trace: [ 1154.570573] dump_stack+0x1b2/0x281 [ 1154.574204] warn_alloc.cold+0x96/0x1cc [ 1154.578177] ? zone_watermark_ok_safe+0x220/0x220 [ 1154.583031] __alloc_pages_nodemask+0x2127/0x2720 [ 1154.587880] ? lock_acquire+0x170/0x3f0 [ 1154.591857] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1154.596706] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1154.602162] ? __mutex_unlock_slowpath+0x75/0x770 [ 1154.607007] ? retint_kernel+0x2d/0x2d [ 1154.610895] alloc_pages_current+0x155/0x260 [ 1154.615300] ion_page_pool_alloc+0x118/0x1b0 [ 1154.619693] ion_system_heap_allocate+0x133/0x8c0 [ 1154.624528] ? ion_alloc+0x187/0x810 [ 1154.628222] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1154.633650] ? ion_system_contig_heap_create+0x130/0x130 [ 1154.639083] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1154.644084] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1154.648919] ion_alloc+0x204/0x810 [ 1154.652444] ? ion_dma_buf_release+0x40/0x40 [ 1154.656833] ? __might_fault+0x177/0x1b0 [ 1154.660874] ion_ioctl+0xea/0x1f0 [ 1154.664307] ? ion_query_heaps+0x360/0x360 [ 1154.668524] ? ion_query_heaps+0x360/0x360 [ 1154.672737] do_vfs_ioctl+0x75a/0xff0 [ 1154.676545] ? ioctl_preallocate+0x1a0/0x1a0 [ 1154.680932] ? lock_downgrade+0x740/0x740 [ 1154.685063] ? __fget+0x225/0x360 [ 1154.688498] ? do_vfs_ioctl+0xff0/0xff0 [ 1154.692452] ? security_file_ioctl+0x83/0xb0 [ 1154.696840] SyS_ioctl+0x7f/0xb0 [ 1154.700184] ? do_vfs_ioctl+0xff0/0xff0 [ 1154.704140] do_syscall_64+0x1d5/0x640 [ 1154.708014] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1154.713182] RIP: 0033:0x465f69 [ 1154.716351] RSP: 002b:00007f7eadeea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1154.724037] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1154.731287] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1154.738536] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1154.745787] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1154.753035] R13: 00007ffe5b3e4a8f R14: 00007f7eadeea300 R15: 0000000000022000 [ 1154.814052] Mem-Info: [ 1154.816554] active_anon:303561 inactive_anon:6723 isolated_anon:24 [ 1154.816554] active_file:2381 inactive_file:1838 isolated_file:0 [ 1154.816554] unevictable:0 dirty:40 writeback:0 unstable:0 [ 1154.816554] slab_reclaimable:16931 slab_unreclaimable:137767 [ 1154.816554] mapped:55409 shmem:6932 pagetables:55988 bounce:0 [ 1154.816554] free:47260 free_pcp:32 free_cma:0 [ 1154.855272] Node 0 active_anon:1184556kB inactive_anon:26876kB active_file:9516kB inactive_file:7340kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:221636kB dirty:160kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 999424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1154.888810] Node 1 active_anon:29688kB inactive_anon:16kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1154.919627] Node 0 DMA free:11104kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1154.963308] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1154.968678] Node 0 DMA32 free:121744kB min:36200kB low:45248kB high:54296kB active_anon:1180384kB inactive_anon:26884kB active_file:9556kB inactive_file:7312kB unevictable:0kB writepending:228kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:72928kB pagetables:202176kB bounce:0kB free_pcp:92kB local_pcp:40kB free_cma:0kB [ 1155.016688] lowmem_reserve[]: 0 0 0 0 0 [ 1155.020838] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1155.046616] lowmem_reserve[]: 0 0 0 0 0 [ 1155.050867] Node 1 Normal free:53832kB min:53696kB low:67120kB high:80544kB active_anon:29564kB inactive_anon:0kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:7040kB pagetables:21548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1155.080102] lowmem_reserve[]: 0 0 0 0 0 [ 1155.084246] Node 0 DMA: 5*4kB (UME) 4*8kB (UE) 7*16kB (UME) 4*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11108kB [ 1155.100454] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1155.101857] Node 0 DMA32: 2102*4kB (UME) 7261*8kB (UME) 1627*16kB (UME) 927*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 122192kB [ 1155.127526] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1155.127899] syz-executor.0 cpuset= [ 1155.138966] Node 1 Normal: 1438*4kB (UM) 920*8kB (UM) 653*16kB (UM) 420*32kB (UM) 23*64kB (UM) 33*128kB (UM) 23*256kB (UM) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53704kB [ 1155.151307] / [ 1155.159267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1155.170779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1155.171300] mems_allowed=0-1 [ 1155.180260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1155.188156] CPU: 0 PID: 8727 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1155.192242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1155.199185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.199189] Call Trace: [ 1155.199205] dump_stack+0x1b2/0x281 [ 1155.199219] warn_alloc.cold+0x96/0x1cc [ 1155.199231] ? zone_watermark_ok_safe+0x220/0x220 [ 1155.199252] __alloc_pages_nodemask+0x2127/0x2720 [ 1155.199262] ? lock_acquire+0x170/0x3f0 [ 1155.199273] ? lock_acquire+0x170/0x3f0 [ 1155.199287] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1155.199304] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1155.210845] 10512 total pagecache pages [ 1155.217202] ? __mutex_unlock_slowpath+0x75/0x770 [ 1155.217218] alloc_pages_current+0x155/0x260 [ 1155.221608] 0 pages in swap cache [ 1155.223394] ion_page_pool_alloc+0x118/0x1b0 [ 1155.223405] ion_system_heap_allocate+0x133/0x8c0 [ 1155.227419] Swap cache stats: add 0, delete 0, find 0/0 [ 1155.232195] ? ion_alloc+0x187/0x810 [ 1155.232205] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1155.232214] ? ion_system_contig_heap_create+0x130/0x130 [ 1155.232224] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1155.232236] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1155.232246] ion_alloc+0x204/0x810 [ 1155.232260] ? ion_dma_buf_release+0x40/0x40 [ 1155.232271] ? __might_fault+0x177/0x1b0 [ 1155.238995] Free swap = 0kB [ 1155.241080] ion_ioctl+0xea/0x1f0 [ 1155.241091] ? ion_query_heaps+0x360/0x360 [ 1155.247298] Total swap = 0kB [ 1155.249876] ? ion_query_heaps+0x360/0x360 [ 1155.249886] do_vfs_ioctl+0x75a/0xff0 [ 1155.249898] ? ioctl_preallocate+0x1a0/0x1a0 [ 1155.249907] ? lock_downgrade+0x740/0x740 [ 1155.249919] ? __fget+0x225/0x360 [ 1155.249927] ? do_vfs_ioctl+0xff0/0xff0 [ 1155.249938] ? security_file_ioctl+0x83/0xb0 [ 1155.249948] SyS_ioctl+0x7f/0xb0 [ 1155.249954] ? do_vfs_ioctl+0xff0/0xff0 [ 1155.249965] do_syscall_64+0x1d5/0x640 [ 1155.249980] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1155.249988] RIP: 0033:0x465f69 [ 1155.249992] RSP: 002b:00007f7567f8b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1155.250001] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1155.250006] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1155.250013] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1155.264587] 2097051 pages RAM 10:37:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000140)={0x2, 0x20, [0x3, 0x80, 0x0, 0xfff], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) 10:37:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/216}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:37:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x3) 10:37:33 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) [ 1155.268610] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1155.268615] R13: 00007ffe1afeef3f R14: 00007f7567f8b300 R15: 0000000000022000 [ 1155.433344] Bluetooth: hci0 command 0x041b tx timeout [ 1155.438970] 0 pages HighMem/MovableOnly [ 1155.442951] 363840 pages reserved [ 1155.446397] 0 pages cma reserved 10:37:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000240)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:37:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x3) 10:37:33 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:37:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x3) [ 1156.375875] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1156.400448] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1156.409167] CPU: 1 PID: 8767 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1156.416988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.426341] Call Trace: [ 1156.428938] dump_stack+0x1b2/0x281 [ 1156.432571] warn_alloc.cold+0x96/0x1cc [ 1156.436554] ? zone_watermark_ok_safe+0x220/0x220 [ 1156.441415] __alloc_pages_nodemask+0x2127/0x2720 [ 1156.446267] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1156.450765] ? finish_task_switch+0x178/0x610 [ 1156.455263] ? finish_task_switch+0x14d/0x610 [ 1156.459767] ? lock_acquire+0x170/0x3f0 [ 1156.463737] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1156.468572] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1156.474009] ? __mutex_unlock_slowpath+0x75/0x770 [ 1156.478835] ? alloc_pages_current+0x84/0x260 [ 1156.483310] alloc_pages_current+0x155/0x260 [ 1156.487705] ion_page_pool_alloc+0x118/0x1b0 [ 1156.492094] ion_system_heap_allocate+0x133/0x8c0 [ 1156.496918] ? ion_alloc+0x187/0x810 [ 1156.500614] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1156.506045] ? ion_system_contig_heap_create+0x130/0x130 [ 1156.511474] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1156.516472] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1156.521298] ion_alloc+0x204/0x810 [ 1156.524821] ? ion_dma_buf_release+0x40/0x40 [ 1156.529210] ? __might_fault+0x177/0x1b0 [ 1156.533251] ion_ioctl+0xea/0x1f0 [ 1156.536685] ? ion_query_heaps+0x360/0x360 [ 1156.540902] ? ion_query_heaps+0x360/0x360 [ 1156.545117] do_vfs_ioctl+0x75a/0xff0 [ 1156.548901] ? ioctl_preallocate+0x1a0/0x1a0 [ 1156.553290] ? lock_downgrade+0x740/0x740 [ 1156.557423] ? __fget+0x225/0x360 [ 1156.560854] ? do_vfs_ioctl+0xff0/0xff0 [ 1156.564808] ? security_file_ioctl+0x83/0xb0 [ 1156.569194] SyS_ioctl+0x7f/0xb0 [ 1156.572538] ? do_vfs_ioctl+0xff0/0xff0 [ 1156.576493] do_syscall_64+0x1d5/0x640 [ 1156.580365] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1156.585535] RIP: 0033:0x465f69 [ 1156.588704] RSP: 002b:00007f7567f8b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1156.596391] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1156.603644] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1156.610918] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1156.618190] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1156.625473] R13: 00007ffe1afeef3f R14: 00007f7567f8b300 R15: 0000000000022000 [ 1156.634823] warn_alloc_show_mem: 1 callbacks suppressed [ 1156.634827] Mem-Info: [ 1156.643368] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1156.655514] active_anon:304016 inactive_anon:6722 isolated_anon:23 [ 1156.655514] active_file:2333 inactive_file:1943 isolated_file:0 [ 1156.655514] unevictable:0 dirty:97 writeback:0 unstable:0 [ 1156.655514] slab_reclaimable:16870 slab_unreclaimable:137676 [ 1156.655514] mapped:55479 shmem:6932 pagetables:55855 bounce:0 [ 1156.655514] free:37706 free_pcp:42 free_cma:0 [ 1156.689625] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1156.694976] CPU: 1 PID: 8769 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1156.702773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.712131] Call Trace: [ 1156.714740] dump_stack+0x1b2/0x281 [ 1156.718369] warn_alloc.cold+0x96/0x1cc [ 1156.722354] ? zone_watermark_ok_safe+0x220/0x220 [ 1156.727215] __alloc_pages_nodemask+0x2127/0x2720 [ 1156.732067] ? lock_acquire+0x170/0x3f0 [ 1156.736043] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1156.740872] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1156.746302] ? __mutex_unlock_slowpath+0x75/0x770 [ 1156.751126] ? retint_kernel+0x2d/0x2d [ 1156.754997] alloc_pages_current+0x155/0x260 [ 1156.759390] ion_page_pool_alloc+0x118/0x1b0 [ 1156.763784] ion_system_heap_allocate+0x133/0x8c0 [ 1156.768608] ? ion_alloc+0x187/0x810 [ 1156.772307] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1156.777737] ? ion_system_contig_heap_create+0x130/0x130 [ 1156.783183] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1156.788178] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1156.793001] ion_alloc+0x204/0x810 [ 1156.796525] ? ion_dma_buf_release+0x40/0x40 [ 1156.800915] ? __might_fault+0x177/0x1b0 [ 1156.804958] ion_ioctl+0xea/0x1f0 [ 1156.808394] ? ion_query_heaps+0x360/0x360 [ 1156.812612] ? ion_query_heaps+0x360/0x360 [ 1156.816826] do_vfs_ioctl+0x75a/0xff0 [ 1156.820608] ? ioctl_preallocate+0x1a0/0x1a0 [ 1156.824995] ? lock_downgrade+0x740/0x740 [ 1156.829125] ? __fget+0x225/0x360 [ 1156.832558] ? do_vfs_ioctl+0xff0/0xff0 [ 1156.836511] ? security_file_ioctl+0x83/0xb0 [ 1156.840899] SyS_ioctl+0x7f/0xb0 [ 1156.844245] ? do_vfs_ioctl+0xff0/0xff0 [ 1156.848206] do_syscall_64+0x1d5/0x640 [ 1156.852082] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1156.857269] RIP: 0033:0x465f69 [ 1156.860551] RSP: 002b:00007f7eadeea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1156.868256] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1156.875512] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1156.882761] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1156.890016] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1156.897269] R13: 00007ffe5b3e4a8f R14: 00007f7eadeea300 R15: 0000000000022000 [ 1156.906036] Node 0 active_anon:1186500kB inactive_anon:26888kB active_file:9316kB inactive_file:7968kB unevictable:0kB isolated(anon):92kB isolated(file):0kB mapped:222016kB dirty:376kB writeback:0kB shmem:27728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1003520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1156.935975] Node 1 active_anon:29564kB inactive_anon:0kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1156.962515] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1156.990011] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1156.995849] Node 0 DMA32 free:38344kB min:36200kB low:45248kB high:54296kB active_anon:1182488kB inactive_anon:26888kB active_file:9120kB inactive_file:7976kB unevictable:0kB writepending:376kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:72896kB pagetables:201776kB bounce:0kB free_pcp:972kB local_pcp:172kB free_cma:0kB [ 1157.026671] lowmem_reserve[]: 0 0 0 0 0 [ 1157.037898] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1157.145049] lowmem_reserve[]: 0 0 0 0 0 [ 1157.154883] Node 1 Normal free:53576kB min:53696kB low:67120kB high:80544kB active_anon:29564kB inactive_anon:0kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:7040kB pagetables:21548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1157.222445] lowmem_reserve[]: 0 0 0 0 0 [ 1157.226594] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 5*16kB (UME) 4*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11052kB [ 1157.246802] Node 0 DMA32: 1971*4kB (UME) 624*8kB (ME) 143*16kB (ME) 674*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36732kB [ 1157.265246] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1157.276728] Node 1 Normal: 1438*4kB (UM) 920*8kB (UM) 653*16kB (UM) 420*32kB (UM) 23*64kB (UM) 32*128kB (UM) 23*256kB (UM) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53576kB [ 1157.296703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1157.306788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1157.368050] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1157.404374] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1157.452475] 9618 total pagecache pages [ 1157.459717] 0 pages in swap cache [ 1157.482352] Swap cache stats: add 0, delete 0, find 0/0 [ 1157.488172] Bluetooth: hci0 command 0x040f tx timeout [ 1157.522059] Free swap = 0kB [ 1157.535871] Total swap = 0kB [ 1157.545838] 2097051 pages RAM [ 1157.559629] 0 pages HighMem/MovableOnly [ 1157.575658] 363840 pages reserved [ 1157.586614] 0 pages cma reserved [ 1158.630096] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1158.719964] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1158.725113] CPU: 0 PID: 8430 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1158.732896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.742239] Call Trace: [ 1158.744827] dump_stack+0x1b2/0x281 [ 1158.748451] dump_header+0x178/0x82f [ 1158.752156] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1158.757246] ? ___ratelimit+0x2cd/0x530 [ 1158.761213] oom_kill_process.cold+0x10/0xb18 [ 1158.765711] out_of_memory+0xe3e/0x1190 [ 1158.769683] ? oom_killer_disable+0x1c0/0x1c0 [ 1158.774167] ? mutex_trylock+0x152/0x1a0 [ 1158.778222] __alloc_pages_nodemask+0x23e1/0x2720 [ 1158.783071] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1158.787930] alloc_pages_current+0x155/0x260 [ 1158.792333] filemap_fault+0xea3/0x1980 [ 1158.796307] ext4_filemap_fault+0x84/0xb0 [ 1158.800449] __do_fault+0xfa/0x380 [ 1158.803982] __handle_mm_fault+0x2497/0x4620 [ 1158.808388] ? vm_insert_page+0x7c0/0x7c0 [ 1158.812526] ? nanosleep_copyout+0x100/0x100 [ 1158.816934] ? sync_mm_rss+0xf2/0x160 [ 1158.820727] handle_mm_fault+0x391/0x860 [ 1158.824782] __do_page_fault+0x549/0xad0 [ 1158.828842] ? spurious_fault+0x640/0x640 [ 1158.832981] ? do_page_fault+0x60/0x500 [ 1158.836951] ? page_fault+0x2f/0x50 [ 1158.840568] page_fault+0x45/0x50 [ 1158.844011] RIP: 11a5a9:0x4 [ 1158.846931] RSP: 0008:00007ffe5b3e4d4c EFLAGS: 00000032 [ 1158.951739] Mem-Info: [ 1159.020900] active_anon:303985 inactive_anon:6721 isolated_anon:0 [ 1159.020900] active_file:15 inactive_file:6 isolated_file:0 [ 1159.020900] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1159.020900] slab_reclaimable:16801 slab_unreclaimable:137679 [ 1159.020900] mapped:52668 shmem:6931 pagetables:55837 bounce:0 [ 1159.020900] free:25047 free_pcp:40 free_cma:0 [ 1159.167385] Node 0 active_anon:1186708kB inactive_anon:26884kB active_file:128kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210672kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1003520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1159.227518] Node 1 active_anon:29232kB inactive_anon:0kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1159.365302] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.409401] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1159.414569] Node 0 DMA32 free:36096kB min:36200kB low:45248kB high:54296kB active_anon:1182600kB inactive_anon:26884kB active_file:84kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:72800kB pagetables:201760kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 1159.448535] lowmem_reserve[]: 0 0 0 0 0 [ 1159.452558] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.482849] lowmem_reserve[]: 0 0 0 0 0 [ 1159.486951] Node 1 Normal free:53392kB min:53696kB low:67120kB high:80544kB active_anon:29232kB inactive_anon:0kB active_file:0kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:7040kB pagetables:21492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.520444] lowmem_reserve[]: 0 0 0 0 0 [ 1159.524481] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 5*16kB (UME) 4*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11052kB [ 1159.544701] Node 0 DMA32: 4879*4kB (UME) 707*8kB (UME) 147*16kB (UME) 267*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36068kB [ 1159.562719] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1159.572752] Bluetooth: hci0 command 0x0419 tx timeout [ 1159.573892] Node 1 Normal: 1300*4kB (UM) 896*8kB (UM) 634*16kB (UM) 401*32kB (UM) 10*64kB (UM) 24*128kB (UM) 18*256kB (UM) 9*512kB (UM) 3*1024kB (M) 1*2048kB (M) 0*4096kB = 53392kB [ 1159.599800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.608687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1159.617258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.628268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1159.636849] 6962 total pagecache pages [ 1159.640785] 0 pages in swap cache [ 1159.644235] Swap cache stats: add 0, delete 0, find 0/0 [ 1159.652291] Free swap = 0kB [ 1159.655317] Total swap = 0kB [ 1159.658446] 2097051 pages RAM [ 1159.661545] 0 pages HighMem/MovableOnly [ 1159.665512] 363840 pages reserved [ 1159.671097] 0 pages cma reserved [ 1159.674952] Out of memory (oom_kill_allocating_task): Kill process 8430 (syz-executor.5) score 0 or sacrifice child [ 1159.685625] Killed process 8769 (syz-executor.5) total-vm:93384kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 1159.709462] oom_reaper: reaped process 8769 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1159.745860] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1159.766019] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1159.771549] CPU: 0 PID: 4245 Comm: ion_system_heap Not tainted 4.14.224-syzkaller #0 [ 1159.779434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1159.788792] Call Trace: [ 1159.791391] dump_stack+0x1b2/0x281 [ 1159.795022] dump_header+0x178/0x82f [ 1159.798751] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1159.803858] ? ___ratelimit+0x2cd/0x530 [ 1159.807926] oom_kill_process.cold+0x10/0xb18 [ 1159.812427] ? lock_downgrade+0x740/0x740 [ 1159.818039] out_of_memory+0x2dc/0x1190 [ 1159.822022] ? oom_killer_disable+0x1c0/0x1c0 [ 1159.826522] ? mutex_trylock+0x152/0x1a0 [ 1159.830594] __alloc_pages_nodemask+0x23e1/0x2720 [ 1159.835614] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1159.840469] ? kmem_cache_alloc_node_trace+0x153/0x400 [ 1159.845844] ? cache_grow_begin+0x41/0x630 [ 1159.850085] cache_grow_begin+0x91/0x630 [ 1159.854155] ? cache_grow_begin+0x91/0x630 [ 1159.858395] fallback_alloc+0x207/0x2c0 [ 1159.862477] kmem_cache_alloc_node_trace+0xed/0x400 [ 1159.867601] alloc_vmap_area+0xf0/0x7c0 [ 1159.871581] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1159.877116] ? purge_vmap_area_lazy+0xb0/0xb0 [ 1159.881612] ? __get_vm_area_node+0xed/0x340 [ 1159.886023] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1159.891430] __get_vm_area_node+0x126/0x340 [ 1159.895883] vmap+0xd5/0x290 [ 1159.898914] ? ion_heap_clear_pages+0x23/0x70 [ 1159.903415] ? vunmap+0x50/0x50 [ 1159.906697] ? __vunmap+0x21c/0x300 [ 1159.910336] ion_heap_clear_pages+0x23/0x70 [ 1159.914662] ion_heap_sglist_zero+0x165/0x220 [ 1159.919167] ? ion_heap_clear_pages+0x70/0x70 [ 1159.923849] ? pagerange_is_ram_callback+0x100/0x100 [ 1159.928961] ? ion_heap_deferred_free+0x222/0x470 [ 1159.933809] ion_system_heap_free+0x1d0/0x240 [ 1159.938315] ion_buffer_destroy+0x132/0x190 [ 1159.940891] syz-executor.5: page allocation failure: order:0 [ 1159.942733] ion_heap_deferred_free+0x22a/0x470 [ 1159.942745] ? __schedule+0x857/0x1de0 [ 1159.957173] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1159.957242] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1159.961845] ? wait_woken+0x230/0x230 [ 1159.961855] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1159.961862] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1159.961870] kthread+0x30d/0x420 [ 1159.961878] ? kthread_create_on_node+0xd0/0xd0 [ 1159.961885] ret_from_fork+0x24/0x30 [ 1159.971307] Mem-Info: [ 1159.983410] (null) [ 1159.993294] active_anon:303451 inactive_anon:6721 isolated_anon:0 [ 1159.993294] active_file:15 inactive_file:16 isolated_file:0 [ 1159.993294] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1159.993294] slab_reclaimable:16789 slab_unreclaimable:137663 [ 1159.993294] mapped:52668 shmem:6931 pagetables:55836 bounce:0 [ 1159.993294] free:13933 free_pcp:113 free_cma:0 [ 1160.005552] syz-executor.5 cpuset= [ 1160.043479] Node 0 active_anon:1184572kB inactive_anon:26884kB active_file:56kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210672kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1001472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1160.045221] / [ 1160.047052] Node 1 active_anon:29232kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1160.087564] mems_allowed=0-1 [ 1160.120558] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1160.122235] CPU: 1 PID: 8769 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1160.147395] lowmem_reserve[]: [ 1160.155484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1160.155491] Call Trace: [ 1160.158648] 0 [ 1160.167957] dump_stack+0x1b2/0x281 [ 1160.167972] warn_alloc.cold+0x96/0x1cc [ 1160.170542] 2717 [ 1160.172338] ? zone_watermark_ok_safe+0x220/0x220 [ 1160.175944] 2718 [ 1160.179912] ? usleep_range+0x130/0x130 [ 1160.179920] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1160.179931] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1160.179941] ? run_timer_softirq+0x5a0/0x5a0 [ 1160.181990] 2718 [ 1160.186834] __alloc_pages_nodemask+0x2127/0x2720 [ 1160.188933] 2718 [ 1160.192880] ? lock_acquire+0x170/0x3f0 [ 1160.202971] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1160.207376] Node 0 [ 1160.209419] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1160.214251] DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:1180464kB inactive_anon:26884kB active_file:56kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:72800kB pagetables:201756kB bounce:0kB free_pcp:320kB local_pcp:200kB free_cma:0kB [ 1160.216303] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1160.220361] lowmem_reserve[]: [ 1160.225351] alloc_pages_current+0x155/0x260 [ 1160.227601] 0 [ 1160.232081] ion_page_pool_alloc+0x118/0x1b0 [ 1160.260969] 0 [ 1160.266464] ion_system_heap_allocate+0x133/0x8c0 [ 1160.269569] 0 [ 1160.274044] ? ion_alloc+0x187/0x810 [ 1160.275829] 0 [ 1160.280233] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1160.280243] ? ion_system_contig_heap_create+0x130/0x130 [ 1160.280252] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1160.280264] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1160.282050] 0 [ 1160.287019] ion_alloc+0x204/0x810 [ 1160.292512] ? ion_dma_buf_release+0x40/0x40 [ 1160.294304] Node 0 [ 1160.299749] ? __might_fault+0x177/0x1b0 [ 1160.299760] ion_ioctl+0xea/0x1f0 [ 1160.299770] ? ion_query_heaps+0x360/0x360 [ 1160.305300] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1160.310442] ? ion_query_heaps+0x360/0x360 [ 1160.310453] do_vfs_ioctl+0x75a/0xff0 [ 1160.310464] ? ioctl_preallocate+0x1a0/0x1a0 [ 1160.315417] lowmem_reserve[]: [ 1160.317216] ? lock_downgrade+0x740/0x740 [ 1160.320758] 0 [ 1160.325142] ? __fget+0x225/0x360 [ 1160.327373] 0 [ 1160.331413] ? do_vfs_ioctl+0xff0/0xff0 [ 1160.334848] 0 [ 1160.339080] ? security_file_ioctl+0x83/0xb0 [ 1160.339099] SyS_ioctl+0x7f/0xb0 [ 1160.364038] 0 [ 1160.368253] ? do_vfs_ioctl+0xff0/0xff0 [ 1160.368265] do_syscall_64+0x1d5/0x640 [ 1160.368281] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1160.372058] 0 [ 1160.376459] RIP: 0033:0x465f69 [ 1160.383693] RSP: 002b:00007f7eadeea188 EFLAGS: 00000246 [ 1160.385481] Node 1 [ 1160.388917] ORIG_RAX: 0000000000000010 [ 1160.388922] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1160.388927] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1160.388931] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1160.388936] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1160.388942] R13: 00007ffe5b3e4a8f R14: 00007f7eadeea300 R15: 0000000000022000 [ 1160.390745] Normal free:26732kB min:53696kB low:67120kB high:80544kB active_anon:29232kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:7040kB pagetables:21492kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1160.405942] warn_alloc_show_mem: 1 callbacks suppressed [ 1160.405945] Mem-Info: [ 1160.426545] lowmem_reserve[]: [ 1160.441250] active_anon:303451 inactive_anon:6721 isolated_anon:0 [ 1160.441250] active_file:14 inactive_file:12 isolated_file:0 [ 1160.441250] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1160.441250] slab_reclaimable:16789 slab_unreclaimable:137663 [ 1160.441250] mapped:52668 shmem:6931 pagetables:55836 bounce:0 [ 1160.441250] free:13933 free_pcp:106 free_cma:0 [ 1160.452993] 0 [ 1160.469714] Node 0 active_anon:1184572kB inactive_anon:26884kB active_file:56kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210672kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1001472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1160.482735] 0 [ 1160.513600] Node 1 active_anon:29232kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1160.523050] 0 [ 1160.558400] Node 0 [ 1160.587102] 0 [ 1160.607971] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1160.625067] 0 [ 1160.640251] lowmem_reserve[]: [ 1160.640274] Node 0 [ 1160.640277] 0 2717 [ 1160.643371] DMA: [ 1160.645595] 2718 2718 2718 [ 1160.652832] Node 0 DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:1180464kB inactive_anon:26884kB active_file:56kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:72800kB pagetables:201756kB bounce:0kB free_pcp:304kB local_pcp:116kB free_cma:0kB [ 1160.665138] 3*4kB [ 1160.684363] lowmem_reserve[]: 0 0 0 0 0 [ 1160.690651] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1160.699758] (ME) [ 1160.718561] lowmem_reserve[]: 0 0 0 0 0 [ 1160.724630] Node 1 Normal free:26732kB min:53696kB low:67120kB high:80544kB active_anon:29232kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:7040kB pagetables:21492kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1160.734294] 2*8kB [ 1160.755706] lowmem_reserve[]: 0 0 0 0 0 [ 1160.761907] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 3*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 1160.771150] (UE) 2*16kB (ME) 3*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 1160.779822] Node 0 DMA32: 3781*4kB (MEH) 301*8kB (MEH) 29*16kB (MEH) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17996kB [ 1160.807022] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1160.809864] Node 0 [ 1160.820035] Node 1 Normal: 739*4kB (UM) 262*8kB (UM) 97*16kB (UM) 65*32kB (UM) 10*64kB (UM) 24*128kB (UM) 18*256kB (UM) 9*512kB (UM) 3*1024kB (M) 1*2048kB (M) 0*4096kB = 26732kB [ 1160.835381] DMA32: [ 1160.840623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1160.851762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1160.855918] 3781*4kB [ 1160.862454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1160.872725] (MEH) 301*8kB (MEH) 29*16kB (MEH) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17996kB [ 1160.874579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1160.874585] 6962 total pagecache pages [ 1160.900554] 0 pages in swap cache [ 1160.903472] Node 0 [ 1160.904009] Swap cache stats: add 0, delete 0, find 0/0 [ 1160.904015] Free swap = 0kB [ 1160.906400] Normal: [ 1160.911792] Total swap = 0kB [ 1160.911799] 2097051 pages RAM [ 1160.911802] 0 pages HighMem/MovableOnly [ 1160.911805] 363840 pages reserved [ 1160.911808] 0 pages cma reserved [ 1161.088272] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1161.097913] Node 1 Normal: 464*4kB (UM) 261*8kB (M) 97*16kB (UM) 38*32kB (UM) 9*64kB (M) 3*128kB (M) 3*256kB (UM) 9*512kB (UM) 4*1024kB (UM) 1*2048kB (M) 2*4096kB (U) = 27384kB [ 1161.114092] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1161.124127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1161.133335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1161.148242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1161.157535] 7166 total pagecache pages [ 1161.161563] 0 pages in swap cache [ 1161.165135] Swap cache stats: add 0, delete 0, find 0/0 [ 1161.170675] Free swap = 0kB [ 1161.173791] Total swap = 0kB [ 1161.176903] 2097051 pages RAM [ 1161.180183] 0 pages HighMem/MovableOnly [ 1161.184449] 363840 pages reserved [ 1161.188035] 0 pages cma reserved [ 1161.191587] Out of memory: Kill process 19543 (syz-executor.2) score 1005 or sacrifice child [ 1161.200815] Killed process 19543 (syz-executor.2) total-vm:93384kB, anon-rss:2200kB, file-rss:34820kB, shmem-rss:0kB [ 1161.233354] oom_reaper: reaped process 19543 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1161.295466] oom_reaper: reaped process 8767 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1161.358488] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1161.371216] in:imklog cpuset=/ mems_allowed=0-1 [ 1161.376036] CPU: 1 PID: 7730 Comm: in:imklog Not tainted 4.14.224-syzkaller #0 [ 1161.383385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1161.392728] Call Trace: [ 1161.395307] dump_stack+0x1b2/0x281 [ 1161.398945] dump_header+0x178/0x82f [ 1161.402649] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1161.408315] ? ___ratelimit+0x2cd/0x530 [ 1161.412278] oom_kill_process.cold+0x10/0xb18 [ 1161.416764] out_of_memory+0xe3e/0x1190 [ 1161.420733] ? oom_killer_disable+0x1c0/0x1c0 [ 1161.425422] ? mutex_trylock+0x152/0x1a0 [ 1161.429475] __alloc_pages_nodemask+0x23e1/0x2720 [ 1161.434405] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1161.439248] alloc_pages_current+0x155/0x260 [ 1161.443644] filemap_fault+0xea3/0x1980 [ 1161.447743] ext4_filemap_fault+0x84/0xb0 [ 1161.451876] __do_fault+0xfa/0x380 [ 1161.455404] __handle_mm_fault+0x2497/0x4620 [ 1161.459800] ? vm_insert_page+0x7c0/0x7c0 [ 1161.463992] ? lock_downgrade+0x740/0x740 [ 1161.468205] handle_mm_fault+0x391/0x860 [ 1161.472378] __do_page_fault+0x549/0xad0 [ 1161.476426] ? spurious_fault+0x640/0x640 [ 1161.480604] ? do_page_fault+0x60/0x500 [ 1161.484563] ? page_fault+0x2f/0x50 [ 1161.488177] page_fault+0x45/0x50 [ 1161.491616] RIP: 1fa0:0x1f9f [ 1161.494651] RSP: 0000:0000558b1c0049d0 EFLAGS: 7f084d3e0da0 [ 1161.495206] Mem-Info: [ 1161.505502] active_anon:302387 inactive_anon:6721 isolated_anon:0 [ 1161.505502] active_file:27 inactive_file:8 isolated_file:0 [ 1161.505502] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1161.505502] slab_reclaimable:16786 slab_unreclaimable:137275 [ 1161.505502] mapped:52689 shmem:6931 pagetables:55834 bounce:0 [ 1161.505502] free:13951 free_pcp:30 free_cma:0 [ 1161.518160] syz-executor.5: [ 1161.541092] Node 0 active_anon:1180300kB inactive_anon:26884kB active_file:0kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210672kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 997376kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1161.574470] Node 1 active_anon:29248kB inactive_anon:0kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1161.602911] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.605623] page allocation failure: order:4 [ 1161.636140] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1161.645745] Node 0 DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:1176192kB inactive_anon:26884kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:72768kB pagetables:201748kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 1161.653654] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1161.681130] lowmem_reserve[]: [ 1161.684532] syz-executor.0: [ 1161.690013] 0 0 0 0 0 [ 1161.694902] page allocation failure: order:0 [ 1161.697043] Node 0 [ 1161.697048] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1161.714449] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.714797] (null) [ 1161.744576] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1161.749888] CPU: 0 PID: 8767 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1161.751934] lowmem_reserve[]: [ 1161.757821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1161.757824] Call Trace: [ 1161.757843] dump_stack+0x1b2/0x281 [ 1161.757856] warn_alloc.cold+0x96/0x1cc [ 1161.757867] ? zone_watermark_ok_safe+0x220/0x220 [ 1161.757876] ? usleep_range+0x130/0x130 [ 1161.757885] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1161.757897] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1161.757907] ? run_timer_softirq+0x5a0/0x5a0 [ 1161.757922] __alloc_pages_nodemask+0x2127/0x2720 [ 1161.757940] ? lock_acquire+0x170/0x3f0 [ 1161.773185] 0 [ 1161.773325] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1161.776932] 0 [ 1161.780904] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1161.780918] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1161.780931] ? ion_page_pool_remove+0xf2/0x280 [ 1161.780944] alloc_pages_current+0x155/0x260 [ 1161.780957] ion_page_pool_alloc+0x118/0x1b0 [ 1161.780967] ion_system_heap_allocate+0x133/0x8c0 [ 1161.780978] ? ion_alloc+0x187/0x810 [ 1161.780987] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1161.780996] ? ion_system_contig_heap_create+0x130/0x130 [ 1161.781005] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1161.781015] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1161.800146] 0 [ 1161.804317] ion_alloc+0x204/0x810 [ 1161.821260] 0 [ 1161.821804] ? ion_dma_buf_release+0x40/0x40 [ 1161.826275] 0 [ 1161.831762] ? __might_fault+0x177/0x1b0 [ 1161.831776] ion_ioctl+0xea/0x1f0 [ 1161.831785] ? ion_query_heaps+0x360/0x360 [ 1161.831796] ? ion_query_heaps+0x360/0x360 [ 1161.831805] do_vfs_ioctl+0x75a/0xff0 [ 1161.831816] ? ioctl_preallocate+0x1a0/0x1a0 [ 1161.831825] ? lock_downgrade+0x740/0x740 [ 1161.831836] ? __fget+0x225/0x360 [ 1161.831843] ? do_vfs_ioctl+0xff0/0xff0 [ 1161.831853] ? security_file_ioctl+0x83/0xb0 [ 1161.831862] SyS_ioctl+0x7f/0xb0 [ 1161.831868] ? do_vfs_ioctl+0xff0/0xff0 [ 1161.831880] do_syscall_64+0x1d5/0x640 [ 1161.850267] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1161.854097] Node 1 [ 1161.859539] RIP: 0033:0x465f69 [ 1161.859543] RSP: 002b:00007f7567f8b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1161.859551] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1161.859555] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1161.859560] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1161.859564] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1161.859569] R13: 00007ffe1afeef3f R14: 00007f7567f8b300 R15: 0000000000022000 [ 1161.867284] syz-executor.5 cpuset= [ 1161.878350] Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:29248kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:7040kB pagetables:21492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.887683] / [ 1161.895357] lowmem_reserve[]: [ 1161.896382] mems_allowed=0-1 [ 1161.906454] 0 [ 1161.912555] CPU: 0 PID: 8769 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1161.925520] 0 [ 1161.930060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1161.930065] Call Trace: [ 1161.930087] dump_stack+0x1b2/0x281 [ 1161.930101] warn_alloc.cold+0x96/0x1cc [ 1161.930111] ? zone_watermark_ok_safe+0x220/0x220 [ 1161.930132] __alloc_pages_nodemask+0x2127/0x2720 [ 1161.930142] ? lock_acquire+0x170/0x3f0 [ 1161.930154] ? lock_acquire+0x170/0x3f0 [ 1161.945879] 0 [ 1161.946786] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1161.950820] 0 [ 1161.952202] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1161.972168] 0 [ 1161.974565] ? __mutex_unlock_slowpath+0x75/0x770 [ 1161.996591] ? __list_del_entry_valid+0xb3/0xf0 [ 1162.005249] Node 0 [ 1162.027829] alloc_pages_current+0x155/0x260 [ 1162.027845] ion_page_pool_alloc+0x118/0x1b0 [ 1162.027855] ion_system_heap_allocate+0x133/0x8c0 [ 1162.027867] ? _raw_spin_unlock+0x29/0x40 [ 1162.027875] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1162.027885] ? ion_system_contig_heap_create+0x130/0x130 [ 1162.027897] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1162.027907] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1162.027918] ion_alloc+0x27a/0x810 [ 1162.027937] ? ion_dma_buf_release+0x40/0x40 [ 1162.027948] ? __might_fault+0x177/0x1b0 [ 1162.027959] ion_ioctl+0xea/0x1f0 [ 1162.027970] ? ion_query_heaps+0x360/0x360 [ 1162.041723] DMA: [ 1162.045960] ? ion_query_heaps+0x360/0x360 [ 1162.052947] 3*4kB [ 1162.057201] do_vfs_ioctl+0x75a/0xff0 [ 1162.057214] ? ioctl_preallocate+0x1a0/0x1a0 [ 1162.057222] ? lock_downgrade+0x740/0x740 [ 1162.057233] ? __fget+0x225/0x360 [ 1162.057241] ? do_vfs_ioctl+0xff0/0xff0 [ 1162.057250] ? security_file_ioctl+0x83/0xb0 [ 1162.057258] SyS_ioctl+0x7f/0xb0 [ 1162.057265] ? do_vfs_ioctl+0xff0/0xff0 [ 1162.057275] do_syscall_64+0x1d5/0x640 [ 1162.057291] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1162.057300] RIP: 0033:0x465f69 [ 1162.057304] RSP: 002b:00007f7eadeea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1162.057314] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1162.057320] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1162.057325] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1162.057330] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1162.057336] R13: 00007ffe5b3e4a8f R14: 00007f7eadeea300 R15: 0000000000022000 [ 1162.061428] Mem-Info: [ 1162.075111] (ME) [ 1162.077664] active_anon:302387 inactive_anon:6721 isolated_anon:0 [ 1162.077664] active_file:15 inactive_file:16 isolated_file:0 [ 1162.077664] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1162.077664] slab_reclaimable:16786 slab_unreclaimable:137277 [ 1162.077664] mapped:52668 shmem:6931 pagetables:55810 bounce:0 [ 1162.077664] free:14056 free_pcp:28 free_cma:0 [ 1162.077681] Node 0 active_anon:1180300kB inactive_anon:26884kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210672kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 997376kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1162.077693] Node 1 active_anon:29248kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1162.077699] Node 0 [ 1162.084746] 2*8kB [ 1162.085636] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1162.095902] (UE) [ 1162.101828] lowmem_reserve[]: [ 1162.115683] 2*16kB [ 1162.119849] 0 [ 1162.126634] (ME) [ 1162.127664] 2717 2718 2718 2718 [ 1162.127680] Node 0 DMA32 free:18128kB min:36200kB low:45248kB high:54296kB active_anon:1176192kB inactive_anon:26884kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:72768kB pagetables:201652kB bounce:0kB free_pcp:112kB local_pcp:112kB free_cma:0kB [ 1162.127701] lowmem_reserve[]: 0 0 0 0 0 [ 1162.127719] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1162.127739] lowmem_reserve[]: [ 1162.145616] 3*32kB [ 1162.149207] 0 [ 1162.156303] (UM) [ 1162.160399] 0 0 0 0 [ 1162.160415] Node 1 Normal free:27124kB min:53696kB low:67120kB high:80544kB active_anon:29248kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:7040kB pagetables:21492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1162.160436] lowmem_reserve[]: 0 0 0 0 0 [ 1162.160456] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB [ 1162.177601] 3*64kB [ 1162.180532] (ME) [ 1162.180921] (UME) [ 1162.184923] 3*32kB [ 1162.196237] 3*128kB [ 1162.202313] (UM) [ 1162.214589] (UME) [ 1162.222464] 3*64kB [ 1162.225505] 2*256kB [ 1162.238603] (UME) [ 1162.253230] (ME) [ 1162.262066] 3*128kB [ 1162.286476] 3*512kB [ 1162.311095] (UME) [ 1162.392898] (UME) [ 1162.398678] 2*256kB [ 1162.408707] syz-executor.5: [ 1162.412840] (ME) [ 1162.451213] 2*1024kB [ 1162.472081] 3*512kB [ 1162.485891] (ME) [ 1162.512507] (UME) [ 1162.524351] page allocation failure: order:0 [ 1162.525607] 2*1024kB [ 1162.530752] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1162.535311] (ME) [ 1162.536306] (null) [ 1162.540427] 1*2048kB [ 1162.551076] syz-executor.5 cpuset= [ 1162.555850] (E) [ 1162.562732] 1*2048kB [ 1162.565528] 1*4096kB [ 1162.566617] (E) [ 1162.573003] (M) [ 1162.583747] / [ 1162.585020] = 10972kB [ 1162.589220] mems_allowed=0-1 [ 1162.589597] Node 0 [ 1162.593130] CPU: 1 PID: 8769 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1162.595091] DMA32: [ 1162.597490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.597494] Call Trace: [ 1162.597513] dump_stack+0x1b2/0x281 [ 1162.597526] warn_alloc.cold+0x96/0x1cc [ 1162.597539] ? zone_watermark_ok_safe+0x220/0x220 [ 1162.597549] ? usleep_range+0x130/0x130 [ 1162.597557] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1162.597568] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1162.597578] ? run_timer_softirq+0x5a0/0x5a0 [ 1162.605272] 3765*4kB [ 1162.605668] __alloc_pages_nodemask+0x2127/0x2720 [ 1162.608079] (UME) [ 1162.611162] ? lock_acquire+0x170/0x3f0 [ 1162.613507] 305*8kB [ 1162.621301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1162.621312] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1162.621327] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1162.623548] (UME) [ 1162.632897] ? __list_del_entry_valid+0xb3/0xf0 [ 1162.632910] alloc_pages_current+0x155/0x260 [ 1162.632922] ion_page_pool_alloc+0x118/0x1b0 [ 1162.635734] 29*16kB [ 1162.639108] ion_system_heap_allocate+0x133/0x8c0 [ 1162.639121] ? _raw_spin_unlock+0x29/0x40 [ 1162.639131] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1162.643086] (UME) [ 1162.647921] ? ion_system_contig_heap_create+0x130/0x130 [ 1162.647930] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1162.647942] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1162.652107] 1*32kB [ 1162.657289] ion_alloc+0x27a/0x810 [ 1162.657302] ? ion_dma_buf_release+0x40/0x40 [ 1162.657314] ? __might_fault+0x177/0x1b0 [ 1162.662334] (U) [ 1162.666825] ion_ioctl+0xea/0x1f0 [ 1162.669236] 0*64kB [ 1162.674142] ? ion_query_heaps+0x360/0x360 [ 1162.676275] 0*128kB [ 1162.680245] ? ion_query_heaps+0x360/0x360 [ 1162.680256] do_vfs_ioctl+0x75a/0xff0 [ 1162.680268] ? ioctl_preallocate+0x1a0/0x1a0 [ 1162.682575] 0*256kB [ 1162.687403] ? lock_downgrade+0x740/0x740 [ 1162.687416] ? __fget+0x225/0x360 [ 1162.687426] ? do_vfs_ioctl+0xff0/0xff0 [ 1162.692098] 0*512kB [ 1162.697540] ? security_file_ioctl+0x83/0xb0 [ 1162.697551] SyS_ioctl+0x7f/0xb0 [ 1162.697561] ? do_vfs_ioctl+0xff0/0xff0 [ 1162.699700] 0*1024kB [ 1162.704407] do_syscall_64+0x1d5/0x640 [ 1162.709155] 0*2048kB [ 1162.713271] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1162.715571] 0*4096kB [ 1162.720402] RIP: 0033:0x465f69 [ 1162.720407] RSP: 002b:00007f7eadeea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1162.720416] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1162.720420] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1162.720428] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1162.724649] = 17996kB [ 1162.729563] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1162.729569] R13: 00007ffe5b3e4a8f R14: 00007f7eadeea300 R15: 0000000000022000 [ 1162.744548] 1*4096kB [ 1162.752859] Node 0 [ 1162.763327] (M) [ 1162.763675] Normal: [ 1162.770737] = 10972kB [ 1162.778274] 0*4kB [ 1162.790552] Node 0 [ 1162.795013] 0*8kB [ 1162.805368] DMA32: [ 1162.814688] 0*16kB [ 1162.825642] 3765*4kB (UME) [ 1162.838870] 0*32kB [ 1162.849634] 305*8kB [ 1162.859351] 0*64kB [ 1162.885482] (UME) [ 1162.890274] 0*128kB [ 1162.909061] 29*16kB [ 1162.912066] 0*256kB [ 1162.912516] (UME) [ 1162.914656] 0*512kB [ 1162.916879] 1*32kB [ 1162.919141] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1162.919157] Node 1 Normal: 734*4kB (UM) 261*8kB (M) 96*16kB (M) 35*32kB (M) 10*64kB (UM) 4*128kB (UM) 2*256kB (M) 6*512kB (UM) [ 1162.936392] (U) [ 1162.940011] 4*1024kB [ 1162.945032] 0*64kB [ 1162.945102] (UM) [ 1162.962232] 0*128kB [ 1162.963857] 1*2048kB [ 1162.968866] 0*256kB [ 1162.970550] (M) 2*4096kB (U) = 26752kB [ 1162.970569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1162.970575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1162.970581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1162.970587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1162.970590] 7184 total pagecache pages [ 1162.970600] 0 pages in swap cache [ 1162.970606] Swap cache stats: add 0, delete 0, find 0/0 [ 1162.970609] Free swap = 0kB [ 1162.970613] Total swap = 0kB [ 1162.970619] 2097051 pages RAM [ 1162.970622] 0 pages HighMem/MovableOnly [ 1162.970626] 363840 pages reserved [ 1162.970629] 0 pages cma reserved [ 1163.137247] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17996kB [ 1163.142905] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1163.167088] Node 1 Normal: 1253*4kB (UM) 900*8kB (UM) 638*16kB (UM) 402*32kB (UM) 1*64kB (U) 2*128kB (U) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36628kB [ 1163.167171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1163.167175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1163.167179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1163.167184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1163.167187] 7872 total pagecache pages [ 1163.167197] 0 pages in swap cache [ 1163.167202] Swap cache stats: add 0, delete 0, find 0/0 [ 1163.167205] Free swap = 0kB [ 1163.167208] Total swap = 0kB [ 1163.167213] 2097051 pages RAM [ 1163.167216] 0 pages HighMem/MovableOnly [ 1163.167219] 363840 pages reserved [ 1163.167222] 0 pages cma reserved [ 1163.167228] Out of memory (oom_kill_allocating_task): Kill process 7730 (in:imklog) score 0 or sacrifice child [ 1163.167271] Killed process 7682 (rsyslogd) total-vm:254332kB, anon-rss:7064kB, file-rss:0kB, shmem-rss:0kB [ 1163.270857] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1163.340082] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1163.350714] CPU: 0 PID: 8767 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1163.358544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1163.368072] Call Trace: [ 1163.370676] dump_stack+0x1b2/0x281 [ 1163.374324] warn_alloc.cold+0x96/0x1cc [ 1163.378404] ? zone_watermark_ok_safe+0x220/0x220 [ 1163.383442] __alloc_pages_nodemask+0x2127/0x2720 [ 1163.388308] ? lock_acquire+0x170/0x3f0 [ 1163.392298] ? lock_acquire+0x170/0x3f0 [ 1163.396439] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1163.401301] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1163.406763] ? __mutex_unlock_slowpath+0x75/0x770 [ 1163.411717] alloc_pages_current+0x155/0x260 [ 1163.416144] ion_page_pool_alloc+0x118/0x1b0 [ 1163.420567] ion_system_heap_allocate+0x133/0x8c0 [ 1163.425591] ? _raw_spin_unlock+0x29/0x40 [ 1163.429988] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1163.435137] ? ion_system_contig_heap_create+0x130/0x130 [ 1163.440609] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1163.445648] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1163.450508] ion_alloc+0x27a/0x810 [ 1163.454068] ? ion_dma_buf_release+0x40/0x40 [ 1163.458493] ? __might_fault+0x177/0x1b0 [ 1163.462572] ion_ioctl+0xea/0x1f0 [ 1163.466040] ? ion_query_heaps+0x360/0x360 [ 1163.470296] ? ion_query_heaps+0x360/0x360 [ 1163.474559] do_vfs_ioctl+0x75a/0xff0 [ 1163.478505] ? ioctl_preallocate+0x1a0/0x1a0 [ 1163.482933] ? lock_downgrade+0x740/0x740 [ 1163.487095] ? __fget+0x225/0x360 [ 1163.490552] ? do_vfs_ioctl+0xff0/0xff0 [ 1163.494533] ? security_file_ioctl+0x83/0xb0 [ 1163.498954] SyS_ioctl+0x7f/0xb0 [ 1163.502472] ? do_vfs_ioctl+0xff0/0xff0 [ 1163.506457] do_syscall_64+0x1d5/0x640 [ 1163.510492] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1163.515685] RIP: 0033:0x465f69 [ 1163.518880] RSP: 002b:00007f7567f8b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1163.526594] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1163.533870] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1163.543062] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1163.550346] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1163.557630] R13: 00007ffe1afeef3f R14: 00007f7567f8b300 R15: 0000000000022000 [ 1163.566174] warn_alloc_show_mem: 2 callbacks suppressed [ 1163.566178] Mem-Info: [ 1163.575002] active_anon:300845 inactive_anon:6721 isolated_anon:0 [ 1163.575002] active_file:706 inactive_file:2031 isolated_file:0 [ 1163.575002] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1163.575002] slab_reclaimable:16761 slab_unreclaimable:137787 [ 1163.575002] mapped:54491 shmem:6931 pagetables:55815 bounce:0 [ 1163.575002] free:36216 free_pcp:167 free_cma:0 [ 1163.609404] Node 0 active_anon:1173932kB inactive_anon:26884kB active_file:3452kB inactive_file:7780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:218172kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 997376kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1163.638427] Node 1 active_anon:29248kB inactive_anon:0kB active_file:72kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 10:37:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x3) 10:37:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) [ 1163.665414] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1163.693319] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1163.698805] Node 0 DMA32 free:95256kB min:36200kB low:45248kB high:54296kB active_anon:1169072kB inactive_anon:26884kB active_file:5016kB inactive_file:8268kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:72704kB pagetables:201376kB bounce:0kB free_pcp:716kB local_pcp:388kB free_cma:0kB [ 1163.729244] lowmem_reserve[]: 0 0 0 0 0 10:37:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000140)={0x2, 0x20, [0x3, 0x80, 0x0, 0xfff], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) [ 1163.733740] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1163.760451] lowmem_reserve[]: 0 0 0 0 0 [ 1163.764637] Node 1 Normal free:35876kB min:53696kB low:67120kB high:80544kB active_anon:29248kB inactive_anon:0kB active_file:512kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:7040kB pagetables:21492kB bounce:0kB free_pcp:44kB local_pcp:16kB free_cma:0kB [ 1163.797503] lowmem_reserve[]: 0 0 0 0 0 [ 1163.802300] Node 0 DMA: 6*4kB (UME) 4*8kB (UE) 7*16kB (UME) 4*32kB (UM) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10984kB [ 1163.824145] Node 0 DMA32: 1384*4kB (UME) 4443*8kB (UME) 1048*16kB (UME) 868*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 91960kB [ 1163.846113] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1163.875075] Node 1 Normal: 1425*4kB (UM) 900*8kB (UM) 638*16kB (UM) 402*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35972kB [ 1163.889714] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1163.898890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1163.907927] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1163.917312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1163.927181] 11090 total pagecache pages [ 1163.931502] 0 pages in swap cache [ 1163.935157] Swap cache stats: add 0, delete 0, find 0/0 [ 1163.940788] Free swap = 0kB 10:37:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:37:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:37:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x3) 10:37:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) [ 1163.944727] Total swap = 0kB [ 1163.951098] 2097051 pages RAM [ 1163.958357] 0 pages HighMem/MovableOnly [ 1163.962520] 363840 pages reserved [ 1163.977890] 0 pages cma reserved 10:37:42 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x3) 10:37:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:42 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)) 10:37:42 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:42 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) [ 1164.267807] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1164.307219] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1164.312439] CPU: 1 PID: 8830 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1164.320247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.329956] Call Trace: [ 1164.332569] dump_stack+0x1b2/0x281 [ 1164.336214] warn_alloc.cold+0x96/0x1cc [ 1164.340346] ? zone_watermark_ok_safe+0x220/0x220 [ 1164.345361] __alloc_pages_nodemask+0x2127/0x2720 [ 1164.350401] ? io_schedule_timeout+0x140/0x140 [ 1164.355300] ? lock_acquire+0x170/0x3f0 [ 1164.359508] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1164.364418] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1164.369864] ? __mutex_unlock_slowpath+0x75/0x770 [ 1164.374700] ? cache_alloc_refill+0x1da/0x350 [ 1164.379191] alloc_pages_current+0x155/0x260 [ 1164.383596] ion_page_pool_alloc+0x118/0x1b0 [ 1164.388000] ion_system_heap_allocate+0x133/0x8c0 [ 1164.392878] ? ion_alloc+0x187/0x810 [ 1164.396583] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1164.402027] ? ion_system_contig_heap_create+0x130/0x130 [ 1164.407467] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1164.412478] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1164.417314] ion_alloc+0x204/0x810 [ 1164.420847] ? ion_dma_buf_release+0x40/0x40 [ 1164.425287] ? __might_fault+0x177/0x1b0 [ 1164.429341] ion_ioctl+0xea/0x1f0 [ 1164.432786] ? ion_query_heaps+0x360/0x360 [ 1164.437031] ? ion_query_heaps+0x360/0x360 [ 1164.441266] do_vfs_ioctl+0x75a/0xff0 [ 1164.445156] ? ioctl_preallocate+0x1a0/0x1a0 [ 1164.449695] ? lock_downgrade+0x740/0x740 [ 1164.453842] ? __fget+0x225/0x360 [ 1164.457288] ? do_vfs_ioctl+0xff0/0xff0 [ 1164.461346] ? security_file_ioctl+0x83/0xb0 [ 1164.466180] SyS_ioctl+0x7f/0xb0 [ 1164.469540] ? do_vfs_ioctl+0xff0/0xff0 [ 1164.473508] do_syscall_64+0x1d5/0x640 [ 1164.477394] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1164.482661] RIP: 0033:0x465f69 [ 1164.485841] RSP: 002b:00007f7567f8b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.493540] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1164.501081] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1164.508387] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1164.515648] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1164.523031] R13: 00007ffe1afeef3f R14: 00007f7567f8b300 R15: 0000000000022000 [ 1164.532464] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1164.551048] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1164.559088] CPU: 0 PID: 8806 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1164.566922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.576468] Call Trace: [ 1164.579196] dump_stack+0x1b2/0x281 [ 1164.582930] warn_alloc.cold+0x96/0x1cc [ 1164.586922] ? zone_watermark_ok_safe+0x220/0x220 [ 1164.591880] __alloc_pages_nodemask+0x2127/0x2720 [ 1164.596922] ? _raw_spin_unlock_irq+0x24/0x80 [ 1164.601499] ? lock_acquire+0x170/0x3f0 [ 1164.605505] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1164.610596] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1164.616213] ? __mutex_unlock_slowpath+0x75/0x770 [ 1164.621089] alloc_pages_current+0x155/0x260 [ 1164.625523] ion_page_pool_alloc+0x118/0x1b0 [ 1164.629969] ion_system_heap_allocate+0x133/0x8c0 [ 1164.634830] ? ion_alloc+0x187/0x810 [ 1164.638564] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1164.644195] ? ion_system_contig_heap_create+0x130/0x130 [ 1164.649663] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1164.654856] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1164.660073] ion_alloc+0x204/0x810 [ 1164.663650] ? ion_dma_buf_release+0x40/0x40 [ 1164.668072] ? __might_fault+0x177/0x1b0 [ 1164.672147] ion_ioctl+0xea/0x1f0 [ 1164.675613] ? ion_query_heaps+0x360/0x360 [ 1164.679867] ? ion_query_heaps+0x360/0x360 [ 1164.684202] do_vfs_ioctl+0x75a/0xff0 [ 1164.688023] ? ioctl_preallocate+0x1a0/0x1a0 [ 1164.692445] ? lock_downgrade+0x740/0x740 [ 1164.696755] ? __fget+0x225/0x360 [ 1164.700220] ? do_vfs_ioctl+0xff0/0xff0 [ 1164.704204] ? security_file_ioctl+0x83/0xb0 [ 1164.708623] SyS_ioctl+0x7f/0xb0 [ 1164.712018] ? do_vfs_ioctl+0xff0/0xff0 [ 1164.716009] do_syscall_64+0x1d5/0x640 [ 1164.720033] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1164.725240] RIP: 0033:0x465f69 [ 1164.728592] RSP: 002b:00007f7eadeea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.736312] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1164.743687] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1164.751121] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1164.758404] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1164.765702] R13: 00007ffe5b3e4a8f R14: 00007f7eadeea300 R15: 0000000000022000 [ 1164.811718] Mem-Info: [ 1164.814511] active_anon:300891 inactive_anon:6721 isolated_anon:24 [ 1164.814511] active_file:2022 inactive_file:2321 isolated_file:23 [ 1164.814511] unevictable:0 dirty:94 writeback:0 unstable:0 [ 1164.814511] slab_reclaimable:16675 slab_unreclaimable:138029 [ 1164.814511] mapped:55325 shmem:6931 pagetables:55953 bounce:0 [ 1164.814511] free:286951 free_pcp:224 free_cma:0 [ 1164.856693] Node 0 active_anon:1174352kB inactive_anon:26884kB active_file:8080kB inactive_file:9284kB unevictable:0kB isolated(anon):96kB isolated(file):92kB mapped:221300kB dirty:376kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 991232kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1164.891667] Node 1 active_anon:29212kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1164.927389] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1164.997116] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1165.002476] Node 0 DMA32 free:79872kB min:36200kB low:45248kB high:54296kB active_anon:1170348kB inactive_anon:26884kB active_file:8096kB inactive_file:9312kB unevictable:0kB writepending:440kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:72800kB pagetables:201968kB bounce:0kB free_pcp:584kB local_pcp:124kB free_cma:0kB [ 1165.067556] lowmem_reserve[]: 0 0 0 0 0 [ 1165.076316] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1165.137060] lowmem_reserve[]: 0 0 0 0 0 [ 1165.141288] Node 1 Normal free:1772712kB min:53696kB low:67120kB high:80544kB active_anon:29212kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:7040kB pagetables:21492kB bounce:0kB free_pcp:60kB local_pcp:60kB free_cma:0kB [ 1165.207466] lowmem_reserve[]: 0 0 0 0 0 [ 1165.216199] Node 0 DMA: 5*4kB (UME) 2*8kB (UE) 2*16kB (ME) 1*32kB (M) 6*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11108kB [ 1165.258406] Node 0 DMA32: 1338*4kB (UME) 334*8kB (UME) 64*16kB (UME) 9*32kB (UME) 35*64kB (ME) 1*128kB (M) 0*256kB 1*512kB (U) 0*1024kB 4*2048kB (U) 6*4096kB (U) = 44984kB [ 1165.299388] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1165.326942] Node 1 Normal: 386*4kB (UM) 177*8kB (M) 41*16kB (M) 9*32kB (M) 1*64kB (U) 1*128kB (M) 0*256kB 2*512kB (UM) 539*1024kB (U) 123*2048kB (U) 200*4096kB (U) = 1628160kB [ 1165.366928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1165.376009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1165.386928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1165.409376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1165.431580] 10894 total pagecache pages [ 1165.441658] 0 pages in swap cache [ 1165.452920] Swap cache stats: add 0, delete 0, find 0/0 [ 1165.465387] Free swap = 0kB [ 1165.474296] Total swap = 0kB [ 1165.482057] 2097051 pages RAM [ 1165.492833] 0 pages HighMem/MovableOnly [ 1165.502717] 363840 pages reserved [ 1165.512711] 0 pages cma reserved [ 1167.585470] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1167.626665] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1167.631477] CPU: 1 PID: 15886 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 1167.639172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.648532] Call Trace: [ 1167.651129] dump_stack+0x1b2/0x281 [ 1167.654764] dump_header+0x178/0x82f [ 1167.658583] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1167.663690] ? ___ratelimit+0x2cd/0x530 [ 1167.667685] oom_kill_process.cold+0x10/0xb18 [ 1167.672192] out_of_memory+0xe3e/0x1190 [ 1167.676175] ? oom_killer_disable+0x1c0/0x1c0 [ 1167.680672] ? mutex_trylock+0x152/0x1a0 [ 1167.684738] __alloc_pages_nodemask+0x23e1/0x2720 [ 1167.689594] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1167.694544] alloc_pages_current+0x155/0x260 [ 1167.698960] filemap_fault+0xea3/0x1980 [ 1167.702953] ext4_filemap_fault+0x84/0xb0 [ 1167.707106] __do_fault+0xfa/0x380 [ 1167.710655] __handle_mm_fault+0x2497/0x4620 [ 1167.715246] ? vm_insert_page+0x7c0/0x7c0 [ 1167.719411] handle_mm_fault+0x391/0x860 [ 1167.723611] __do_page_fault+0x549/0xad0 [ 1167.727681] ? spurious_fault+0x640/0x640 [ 1167.731833] ? do_page_fault+0x60/0x500 [ 1167.735947] ? page_fault+0x2f/0x50 [ 1167.739582] page_fault+0x45/0x50 [ 1167.743038] RIP: 657c780:0x1100606d194 [ 1167.746920] RSP: 03e7:000000c000aa1e40 EFLAGS: 00000003 [ 1167.748225] Mem-Info: [ 1167.756013] active_anon:300879 inactive_anon:6721 isolated_anon:0 [ 1167.756013] active_file:29 inactive_file:8 isolated_file:0 [ 1167.756013] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1167.756013] slab_reclaimable:16660 slab_unreclaimable:137616 [ 1167.756013] mapped:52775 shmem:6931 pagetables:55805 bounce:0 [ 1167.756013] free:25155 free_pcp:30 free_cma:0 [ 1167.789358] Node 0 active_anon:1174296kB inactive_anon:26884kB active_file:112kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211100kB dirty:12kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 991232kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1167.817565] Node 1 active_anon:29220kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1167.844172] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1167.871116] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1167.876292] Node 0 DMA32 free:35876kB min:36200kB low:45248kB high:54296kB active_anon:1170188kB inactive_anon:26884kB active_file:112kB inactive_file:308kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:72736kB pagetables:201632kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1167.906196] lowmem_reserve[]: 0 0 0 0 0 [ 1167.919587] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1167.945346] lowmem_reserve[]: 0 0 0 0 0 [ 1167.949374] Node 1 Normal free:53712kB min:53696kB low:67120kB high:80544kB active_anon:29220kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:7040kB pagetables:21492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1167.980757] lowmem_reserve[]: 0 0 0 0 0 [ 1167.984771] Node 0 DMA: 5*4kB (UME) 1*8kB (E) 3*16kB (UME) 1*32kB (M) 5*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11052kB [ 1168.000895] Node 0 DMA32: 4551*4kB (ME) 567*8kB (ME) 110*16kB (ME) 22*32kB (UME) 36*64kB (ME) 1*128kB (M) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 2*4096kB (U) = 36084kB [ 1168.016295] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1168.027324] Node 1 Normal: 599*4kB (UM) 177*8kB (M) 42*16kB (UM) 9*32kB (M) 0*64kB 2*128kB (UM) 0*256kB 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 11*4096kB (U) = 53668kB [ 1168.043340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1168.052412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1168.061025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1168.070031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1168.078782] 6959 total pagecache pages [ 1168.082832] 0 pages in swap cache [ 1168.086274] Swap cache stats: add 0, delete 0, find 0/0 [ 1168.091688] Free swap = 0kB [ 1168.094840] Total swap = 0kB [ 1168.097890] 2097051 pages RAM [ 1168.100995] 0 pages HighMem/MovableOnly [ 1168.104966] 363840 pages reserved [ 1168.108570] 0 pages cma reserved [ 1168.111941] Out of memory (oom_kill_allocating_task): Kill process 15886 (syz-fuzzer) score 0 or sacrifice child [ 1168.122614] Killed process 7991 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1168.146671] oom_reaper: reaped process 7991 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1169.688261] oom_reaper: reaped process 8806 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1169.712502] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1169.742392] in:imklog cpuset=/ mems_allowed=0-1 [ 1169.747152] CPU: 0 PID: 8816 Comm: in:imklog Not tainted 4.14.224-syzkaller #0 [ 1169.754510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.763857] Call Trace: [ 1169.766449] dump_stack+0x1b2/0x281 [ 1169.770070] dump_header+0x178/0x82f [ 1169.773780] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1169.778875] ? ___ratelimit+0x2cd/0x530 [ 1169.782846] oom_kill_process.cold+0x10/0xb18 [ 1169.787344] out_of_memory+0xe3e/0x1190 [ 1169.791317] ? oom_killer_disable+0x1c0/0x1c0 [ 1169.795802] ? mutex_trylock+0x152/0x1a0 [ 1169.799861] __alloc_pages_nodemask+0x23e1/0x2720 [ 1169.804714] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1169.809564] alloc_pages_current+0x155/0x260 [ 1169.813973] filemap_fault+0xea3/0x1980 [ 1169.817955] ext4_filemap_fault+0x84/0xb0 [ 1169.822098] __do_fault+0xfa/0x380 [ 1169.825642] __handle_mm_fault+0x2497/0x4620 [ 1169.826512] syz-executor.5: page allocation failure: order:0 [ 1169.830039] ? vm_insert_page+0x7c0/0x7c0 [ 1169.830050] ? lock_downgrade+0x740/0x740 [ 1169.835833] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1169.839967] handle_mm_fault+0x391/0x860 [ 1169.839978] __do_page_fault+0x549/0xad0 [ 1169.839990] ? spurious_fault+0x640/0x640 [ 1169.840002] ? do_page_fault+0x60/0x500 [ 1169.840011] ? page_fault+0x2f/0x50 [ 1169.840019] page_fault+0x45/0x50 [ 1169.840027] RIP: 1fa0:0x1f9f [ 1169.840031] RSP: 0000:0000560a7a0ba9d0 EFLAGS: 7fa58aa40da0 [ 1169.849217] Mem-Info: [ 1169.856369] (null) [ 1169.866898] active_anon:274865 inactive_anon:6721 isolated_anon:0 [ 1169.866898] active_file:32 inactive_file:0 isolated_file:0 [ 1169.866898] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1169.866898] slab_reclaimable:16563 slab_unreclaimable:133572 [ 1169.866898] mapped:52771 shmem:6931 pagetables:48394 bounce:0 [ 1169.866898] free:13999 free_pcp:30 free_cma:0 [ 1169.871315] syz-executor.5 cpuset= [ 1169.874690] Node 0 active_anon:1074544kB inactive_anon:26884kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211084kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 911360kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1169.878090] / mems_allowed=0-1 [ 1169.878110] CPU: 1 PID: 8806 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1169.878116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.878119] Call Trace: [ 1169.878138] dump_stack+0x1b2/0x281 [ 1169.878152] warn_alloc.cold+0x96/0x1cc [ 1169.878163] ? zone_watermark_ok_safe+0x220/0x220 [ 1169.878172] ? usleep_range+0x130/0x130 [ 1169.878180] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1169.878193] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1169.890764] Node 1 active_anon:24916kB inactive_anon:0kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1169.921579] ? run_timer_softirq+0x5a0/0x5a0 [ 1169.921596] __alloc_pages_nodemask+0x2127/0x2720 [ 1169.921612] ? lock_acquire+0x170/0x3f0 [ 1169.921626] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1169.925982] Node 0 [ 1169.952982] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1169.952998] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1169.953008] ? check_preemption_disabled+0x35/0x240 [ 1169.953025] alloc_pages_current+0x155/0x260 [ 1169.956215] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1169.963985] ion_page_pool_alloc+0x118/0x1b0 [ 1169.963996] ion_system_heap_allocate+0x133/0x8c0 [ 1169.964006] ? ion_alloc+0x187/0x810 [ 1169.973350] lowmem_reserve[]: [ 1169.975908] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1169.979518] 0 [ 1169.983461] ? ion_system_contig_heap_create+0x130/0x130 [ 1169.988282] 2717 [ 1169.992228] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1169.997313] 2718 [ 1170.002299] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1170.028394] 2718 [ 1170.032771] ion_alloc+0x204/0x810 [ 1170.037595] 2718 [ 1170.041542] ? ion_dma_buf_release+0x40/0x40 [ 1170.048571] ? __might_fault+0x177/0x1b0 [ 1170.048583] ion_ioctl+0xea/0x1f0 [ 1170.048594] ? ion_query_heaps+0x360/0x360 [ 1170.053061] Node 0 [ 1170.058648] ? ion_query_heaps+0x360/0x360 [ 1170.058659] do_vfs_ioctl+0x75a/0xff0 [ 1170.058671] ? ioctl_preallocate+0x1a0/0x1a0 [ 1170.058679] ? lock_downgrade+0x740/0x740 [ 1170.058692] ? __fget+0x225/0x360 [ 1170.063701] DMA32 free:18212kB min:36200kB low:45248kB high:54296kB active_anon:1070436kB inactive_anon:26884kB active_file:64kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:63840kB pagetables:174676kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1170.068083] ? do_vfs_ioctl+0xff0/0xff0 [ 1170.068092] ? security_file_ioctl+0x83/0xb0 [ 1170.068101] SyS_ioctl+0x7f/0xb0 [ 1170.068109] ? do_vfs_ioctl+0xff0/0xff0 [ 1170.068120] do_syscall_64+0x1d5/0x640 [ 1170.094182] lowmem_reserve[]: [ 1170.098556] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1170.098566] RIP: 0033:0x465f69 [ 1170.103383] 0 [ 1170.107072] RSP: 002b:00007f7eadeea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1170.107082] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1170.107087] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1170.107092] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1170.107100] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1170.110179] 0 [ 1170.115602] R13: 00007ffe5b3e4a8f R14: 00007f7eadeea300 R15: 0000000000022000 [ 1170.119748] warn_alloc_show_mem: 1 callbacks suppressed [ 1170.119751] Mem-Info: [ 1170.130686] 0 [ 1170.132312] active_anon:274841 inactive_anon:6721 isolated_anon:0 [ 1170.132312] active_file:15 inactive_file:15 isolated_file:0 [ 1170.132312] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1170.132312] slab_reclaimable:16563 slab_unreclaimable:133594 [ 1170.132312] mapped:52763 shmem:6931 pagetables:48394 bounce:0 [ 1170.132312] free:14066 free_pcp:30 free_cma:0 [ 1170.143848] 0 [ 1170.146891] Node 0 active_anon:1074448kB inactive_anon:26884kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211052kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 911360kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1170.149175] 0 [ 1170.153191] Node 1 active_anon:24916kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1170.171031] Node 0 [ 1170.171140] Node 0 [ 1170.175540] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1170.186773] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1170.215377] lowmem_reserve[]: [ 1170.215474] lowmem_reserve[]: [ 1170.219898] 0 2717 2718 2718 2718 [ 1170.219915] Node 0 DMA32 free:18456kB min:36200kB low:45248kB high:54296kB active_anon:1070340kB inactive_anon:26884kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:63840kB pagetables:174676kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1170.219936] lowmem_reserve[]: 0 0 0 0 0 [ 1170.219956] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1170.219973] lowmem_reserve[]: 0 0 0 0 0 [ 1170.219994] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:24916kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6176kB pagetables:18804kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1170.230164] 0 [ 1170.234793] lowmem_reserve[]: [ 1170.239613] 0 [ 1170.242771] 0 [ 1170.244555] 0 [ 1170.255500] 0 [ 1170.267785] 0 [ 1170.276421] 0 [ 1170.287261] 0 [ 1170.293978] 0 [ 1170.298498] 0 [ 1170.298506] Node 0 DMA: 4*4kB (ME) 1*8kB (E) 2*16kB (ME) 1*32kB (M) [ 1170.308099] Node 1 [ 1170.341502] 4*64kB [ 1170.367582] Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:24916kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6176kB pagetables:18804kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1170.404851] (UME) [ 1170.426508] lowmem_reserve[]: [ 1170.454567] 3*128kB [ 1170.460991] 0 [ 1170.493679] (UME) [ 1170.519581] 0 [ 1170.528193] 2*256kB [ 1170.552710] 0 [ 1170.560858] (ME) [ 1170.562603] 0 [ 1170.564393] 3*512kB [ 1170.566168] 0 [ 1170.570778] (UME) [ 1170.583105] 2*1024kB [ 1170.612252] Node 0 [ 1170.620268] (ME) [ 1170.621886] DMA: [ 1170.624192] 1*2048kB [ 1170.625972] 4*4kB [ 1170.629965] (E) [ 1170.635838] (ME) [ 1170.636104] 1*4096kB [ 1170.638524] 1*8kB (E) 2*16kB (ME) 1*32kB (M) 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB [ 1170.644827] (M) [ 1170.644878] (E) [ 1170.650332] = 10968kB [ 1170.655052] 1*4096kB [ 1170.655861] Node 0 [ 1170.670667] (M) = 10968kB [ 1170.679358] DMA32: [ 1170.681447] Node 0 [ 1170.681455] 3086*4kB [ 1170.683665] DMA32: [ 1170.685887] (UME) [ 1170.692085] 3086*4kB [ 1170.694319] 624*8kB [ 1170.694394] (UME) 624*8kB (UME) 70*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18456kB [ 1170.700514] (UME) 70*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18456kB [ 1170.714935] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1170.731479] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1170.738838] Node 1 Normal: 678*4kB (M) 242*8kB (M) 71*16kB (M) 22*32kB (UM) 8*64kB (M) 3*128kB (M) [ 1170.745923] Node 1 Normal: [ 1170.759411] 2*256kB (M) 3*512kB (M) 1*1024kB (U) 0*2048kB 4*4096kB (U) = 26840kB [ 1170.762794] 678*4kB [ 1170.769955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1170.769961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1170.769966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1170.769971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1170.769977] 6961 total pagecache pages [ 1170.772893] (M) [ 1170.784768] 0 pages in swap cache [ 1170.796954] 242*8kB [ 1170.802222] Swap cache stats: add 0, delete 0, find 0/0 [ 1170.813637] (M) [ 1170.820548] Free swap = 0kB [ 1170.824742] 71*16kB [ 1170.826134] Total swap = 0kB [ 1170.834499] 2097051 pages RAM [ 1170.835899] (M) 22*32kB (UM) 8*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 1*1024kB (U) 0*2048kB 4*4096kB (U) = 26840kB [ 1170.841224] 0 pages HighMem/MovableOnly [ 1170.852702] 363840 pages reserved [ 1170.855847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1170.856138] 0 pages cma reserved [ 1170.865200] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1170.865208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1170.865213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1170.865217] 6961 total pagecache pages [ 1170.865228] 0 pages in swap cache [ 1170.865233] Swap cache stats: add 0, delete 0, find 0/0 [ 1170.865238] Free swap = 0kB [ 1170.872251] Out of memory (oom_kill_allocating_task): Kill process 8816 (in:imklog) score 0 or sacrifice child [ 1170.880534] Total swap = 0kB [ 1170.888216] Killed process 8796 (rsyslogd) total-vm:254332kB, anon-rss:696kB, file-rss:0kB, shmem-rss:0kB [ 1170.940166] 2097051 pages RAM [ 1170.941760] oom_reaper: reaped process 8796 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1170.943297] 0 pages HighMem/MovableOnly [ 1170.958904] 363840 pages reserved [ 1170.962433] 0 pages cma reserved [ 1171.130089] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1171.376502] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1171.386516] CPU: 1 PID: 4245 Comm: ion_system_heap Not tainted 4.14.224-syzkaller #0 [ 1171.394490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1171.403843] Call Trace: [ 1171.406438] dump_stack+0x1b2/0x281 [ 1171.410077] dump_header+0x178/0x82f [ 1171.413810] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1171.418908] ? ___ratelimit+0x2cd/0x530 [ 1171.422876] oom_kill_process.cold+0x10/0xb18 [ 1171.427370] ? lock_downgrade+0x740/0x740 [ 1171.431516] out_of_memory+0x2dc/0x1190 [ 1171.435489] ? oom_killer_disable+0x1c0/0x1c0 [ 1171.439976] ? mutex_trylock+0x152/0x1a0 [ 1171.444033] __alloc_pages_nodemask+0x23e1/0x2720 [ 1171.448882] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1171.453726] ? kmem_cache_alloc_node_trace+0x153/0x400 [ 1171.459005] ? cache_grow_begin+0x41/0x630 [ 1171.463245] cache_grow_begin+0x91/0x630 [ 1171.467302] ? cache_grow_begin+0x91/0x630 [ 1171.471531] fallback_alloc+0x207/0x2c0 [ 1171.475503] kmem_cache_alloc_node_trace+0xed/0x400 [ 1171.480512] alloc_vmap_area+0xf0/0x7c0 [ 1171.484486] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1171.489926] ? purge_vmap_area_lazy+0xb0/0xb0 [ 1171.494414] ? __get_vm_area_node+0xed/0x340 [ 1171.498812] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1171.504080] __get_vm_area_node+0x126/0x340 [ 1171.508394] vmap+0xd5/0x290 [ 1171.511408] ? ion_heap_clear_pages+0x23/0x70 [ 1171.515985] ? vunmap+0x50/0x50 [ 1171.519253] ? __vunmap+0x21c/0x300 [ 1171.522874] ion_heap_clear_pages+0x23/0x70 [ 1171.527187] ion_heap_sglist_zero+0x165/0x220 [ 1171.531683] ? ion_heap_clear_pages+0x70/0x70 [ 1171.536189] ? pagerange_is_ram_callback+0x100/0x100 [ 1171.541284] ? ion_heap_deferred_free+0x222/0x470 [ 1171.546120] ion_system_heap_free+0x1d0/0x240 [ 1171.550610] ion_buffer_destroy+0x132/0x190 [ 1171.554924] ion_heap_deferred_free+0x22a/0x470 [ 1171.559587] ? __schedule+0x857/0x1de0 [ 1171.563469] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1171.568133] ? wait_woken+0x230/0x230 [ 1171.571931] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1171.577033] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1171.581697] kthread+0x30d/0x420 [ 1171.585057] ? kthread_create_on_node+0xd0/0xd0 [ 1171.589728] ret_from_fork+0x24/0x30 [ 1171.747131] Mem-Info: [ 1171.749597] active_anon:274617 inactive_anon:6721 isolated_anon:0 [ 1171.749597] active_file:434 inactive_file:438 isolated_file:29 [ 1171.749597] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1171.749597] slab_reclaimable:16486 slab_unreclaimable:133845 [ 1171.749597] mapped:53420 shmem:6931 pagetables:48394 bounce:0 [ 1171.749597] free:32292 free_pcp:342 free_cma:0 [ 1171.783311] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1171.795955] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1171.801792] CPU: 1 PID: 8806 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1171.809589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1171.818938] Call Trace: [ 1171.821538] dump_stack+0x1b2/0x281 [ 1171.825165] warn_alloc.cold+0x96/0x1cc [ 1171.829139] ? zone_watermark_ok_safe+0x220/0x220 [ 1171.834006] __alloc_pages_nodemask+0x2127/0x2720 [ 1171.838846] ? lock_acquire+0x170/0x3f0 [ 1171.841160] Node 0 active_anon:1073552kB inactive_anon:26884kB active_file:156kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211156kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 911360kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1171.842839] ? lock_acquire+0x170/0x3f0 [ 1171.871243] Node 1 active_anon:24916kB inactive_anon:0kB active_file:8kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1171.875165] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1171.901527] Node 0 [ 1171.906333] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1171.906345] ? __mutex_unlock_slowpath+0x75/0x770 [ 1171.908578] DMA free:10984kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1171.914005] alloc_pages_current+0x155/0x260 [ 1171.918830] lowmem_reserve[]: [ 1171.944770] ion_page_pool_alloc+0x118/0x1b0 [ 1171.944782] ion_system_heap_allocate+0x133/0x8c0 [ 1171.944793] ? _raw_spin_unlock+0x29/0x40 [ 1171.944801] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1171.944811] ? ion_system_contig_heap_create+0x130/0x130 [ 1171.944820] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1171.944833] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1171.964340] 0 [ 1171.965664] ion_alloc+0x27a/0x810 [ 1171.970591] 2717 [ 1171.976004] ? ion_dma_buf_release+0x40/0x40 [ 1171.981176] 2718 [ 1171.985990] ? __might_fault+0x177/0x1b0 [ 1171.987780] 2718 [ 1171.991301] ion_ioctl+0xea/0x1f0 [ 1171.993348] 2718 [ 1171.997738] ? ion_query_heaps+0x360/0x360 [ 1171.997759] ? ion_query_heaps+0x360/0x360 [ 1172.003835] do_vfs_ioctl+0x75a/0xff0 [ 1172.005881] Node 0 [ 1172.009585] ? ioctl_preallocate+0x1a0/0x1a0 [ 1172.009595] ? lock_downgrade+0x740/0x740 [ 1172.009610] ? __fget+0x225/0x360 [ 1172.011863] DMA32 free:35756kB min:36200kB low:45248kB high:54296kB active_anon:1069444kB inactive_anon:26884kB active_file:56kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:63744kB pagetables:174676kB bounce:0kB free_pcp:304kB local_pcp:64kB free_cma:0kB [ 1172.016070] ? do_vfs_ioctl+0xff0/0xff0 [ 1172.020305] lowmem_reserve[]: [ 1172.024089] ? security_file_ioctl+0x83/0xb0 [ 1172.026308] 0 [ 1172.030802] SyS_ioctl+0x7f/0xb0 [ 1172.035454] 0 [ 1172.038896] ? do_vfs_ioctl+0xff0/0xff0 [ 1172.038908] do_syscall_64+0x1d5/0x640 [ 1172.038924] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1172.038934] RIP: 0033:0x465f69 [ 1172.070283] 0 [ 1172.074205] RSP: 002b:00007f7eadeea188 EFLAGS: 00000246 [ 1172.077310] 0 [ 1172.081673] ORIG_RAX: 0000000000000010 [ 1172.083449] 0 [ 1172.086797] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1172.086803] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1172.086808] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1172.086814] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1172.092544] R13: 00007ffe5b3e4a8f R14: 00007f7eadeea300 R15: 0000000000022000 [ 1172.093634] Mem-Info: [ 1172.159071] active_anon:274617 inactive_anon:6721 isolated_anon:0 [ 1172.159071] active_file:18 inactive_file:24 isolated_file:0 [ 1172.159071] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1172.159071] slab_reclaimable:16465 slab_unreclaimable:133894 [ 1172.159071] mapped:52778 shmem:6931 pagetables:48394 bounce:0 [ 1172.159071] free:25111 free_pcp:185 free_cma:0 [ 1172.192485] Node 0 active_anon:1073552kB inactive_anon:26884kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211160kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 911360kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1172.220598] Node 1 active_anon:24916kB inactive_anon:0kB active_file:16kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1172.231905] Node 0 [ 1172.247843] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1172.276709] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1172.281885] Node 0 DMA32 free:36032kB min:36200kB low:45248kB high:54296kB active_anon:1069444kB inactive_anon:26884kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:63744kB pagetables:174676kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1172.313579] lowmem_reserve[]: 0 0 0 0 0 [ 1172.317630] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1172.334147] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1172.356256] lowmem_reserve[]: 0 0 0 0 0 [ 1172.378304] Node 1 Normal free:53420kB min:53696kB low:67120kB high:80544kB active_anon:24916kB inactive_anon:0kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6176kB pagetables:18804kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1172.406267] lowmem_reserve[]: 0 0 0 0 0 [ 1172.410578] Node 1 Normal free:53420kB min:53696kB low:67120kB high:80544kB active_anon:24916kB inactive_anon:0kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6176kB pagetables:18804kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1172.417821] lowmem_reserve[]: 0 0 0 0 0 [ 1172.450250] Node 0 DMA: 5*4kB (UME) 1*8kB (E) 3*16kB (UME) 1*32kB (M) 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10988kB [ 1172.485276] Node 0 DMA32: 5423*4kB (UME) 1292*8kB (UME) 194*16kB (UME) 30*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36092kB [ 1172.508030] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1172.517351] lowmem_reserve[]: 0 0 0 0 0 [ 1172.518853] Node 1 Normal: 669*4kB (M) 209*8kB (UM) 31*16kB (UM) 1523*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53580kB [ 1172.546228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1172.551446] Node 0 [ 1172.555075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1172.555082] DMA: [ 1172.565711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1172.587353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1172.595944] 6994 total pagecache pages [ 1172.604734] 0 pages in swap cache [ 1172.608240] Swap cache stats: add 0, delete 0, find 0/0 [ 1172.613591] Free swap = 0kB [ 1172.626229] Total swap = 0kB [ 1172.629325] 2097051 pages RAM [ 1172.632418] 0 pages HighMem/MovableOnly [ 1172.641191] 363840 pages reserved [ 1172.644662] 0 pages cma reserved [ 1172.650848] 5*4kB (UME) 1*8kB (E) 3*16kB (UME) 1*32kB (M) 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10988kB [ 1172.671209] Node 0 DMA32: 3092*4kB (ME) 592*8kB (ME) 63*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18112kB [ 1172.688164] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1172.709282] Node 1 Normal: 669*4kB (M) 208*8kB (M) 31*16kB (UM) 694*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27044kB [ 1172.728583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1172.743581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1172.752269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1172.763263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1172.769732] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1172.771881] 6978 total pagecache pages [ 1172.789280] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1172.793110] 0 pages in swap cache [ 1172.794403] CPU: 1 PID: 8806 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1172.797874] Swap cache stats: add 0, delete 0, find 0/0 [ 1172.805628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.816369] Free swap = 0kB [ 1172.820304] Call Trace: [ 1172.823303] Total swap = 0kB [ 1172.825875] dump_stack+0x1b2/0x281 [ 1172.832484] warn_alloc.cold+0x96/0x1cc [ 1172.832551] 2097051 pages RAM [ 1172.836450] ? zone_watermark_ok_safe+0x220/0x220 [ 1172.836459] ? usleep_range+0x130/0x130 [ 1172.836468] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1172.836479] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1172.836489] ? run_timer_softirq+0x5a0/0x5a0 [ 1172.836504] __alloc_pages_nodemask+0x2127/0x2720 [ 1172.836521] ? lock_acquire+0x170/0x3f0 [ 1172.841417] 0 pages HighMem/MovableOnly [ 1172.844439] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1172.851985] 363840 pages reserved [ 1172.853474] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1172.860274] 0 pages cma reserved [ 1172.862861] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1172.871812] Out of memory: Kill process 19537 (syz-executor.2) score 1005 or sacrifice child [ 1172.875601] alloc_pages_current+0x155/0x260 [ 1172.882383] Killed process 19537 (syz-executor.2) total-vm:93252kB, anon-rss:2196kB, file-rss:34628kB, shmem-rss:0kB [ 1172.884028] ion_page_pool_alloc+0x118/0x1b0 [ 1172.925326] ion_system_heap_allocate+0x133/0x8c0 [ 1172.930191] ? _raw_spin_unlock+0x29/0x40 [ 1172.934350] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1172.939283] ? ion_system_contig_heap_create+0x130/0x130 [ 1172.944734] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1172.949753] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1172.954629] ion_alloc+0x27a/0x810 [ 1172.957982] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1172.958185] ? ion_dma_buf_release+0x40/0x40 [ 1172.958198] ? __might_fault+0x177/0x1b0 [ 1172.975234] systemd-journal cpuset= [ 1172.975570] ion_ioctl+0xea/0x1f0 [ 1172.979663] / [ 1172.983239] ? ion_query_heaps+0x360/0x360 [ 1172.983253] ? ion_query_heaps+0x360/0x360 [ 1172.990471] mems_allowed=0-1 [ 1172.992728] do_vfs_ioctl+0x75a/0xff0 [ 1173.003798] ? ioctl_preallocate+0x1a0/0x1a0 [ 1173.008197] ? lock_downgrade+0x740/0x740 [ 1173.012347] ? __fget+0x225/0x360 [ 1173.015780] ? do_vfs_ioctl+0xff0/0xff0 [ 1173.019750] ? security_file_ioctl+0x83/0xb0 [ 1173.024325] SyS_ioctl+0x7f/0xb0 [ 1173.027948] ? do_vfs_ioctl+0xff0/0xff0 [ 1173.031916] do_syscall_64+0x1d5/0x640 [ 1173.035792] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1173.040973] RIP: 0033:0x465f69 [ 1173.044141] RSP: 002b:00007f7eadeea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1173.051831] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1173.059080] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1173.066334] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1173.073601] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1173.080863] R13: 00007ffe5b3e4a8f R14: 00007f7eadeea300 R15: 0000000000022000 [ 1173.089864] CPU: 0 PID: 5969 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 1173.097758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.107108] Call Trace: [ 1173.109695] dump_stack+0x1b2/0x281 [ 1173.113303] dump_header+0x178/0x82f [ 1173.117018] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1173.122129] ? ___ratelimit+0x2cd/0x530 [ 1173.126105] oom_kill_process.cold+0x10/0xb18 [ 1173.130611] out_of_memory+0xe3e/0x1190 [ 1173.134600] ? oom_killer_disable+0x1c0/0x1c0 [ 1173.139093] ? mutex_trylock+0x152/0x1a0 [ 1173.143154] __alloc_pages_nodemask+0x23e1/0x2720 [ 1173.148097] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1173.152952] alloc_pages_current+0x155/0x260 [ 1173.157359] filemap_fault+0xea3/0x1980 [ 1173.161344] ext4_filemap_fault+0x84/0xb0 [ 1173.165492] __do_fault+0xfa/0x380 [ 1173.169031] __handle_mm_fault+0x2497/0x4620 [ 1173.173661] ? ep_poll+0x1ab/0xa50 [ 1173.177199] ? vm_insert_page+0x7c0/0x7c0 [ 1173.181354] handle_mm_fault+0x391/0x860 [ 1173.185413] __do_page_fault+0x549/0xad0 [ 1173.189474] ? spurious_fault+0x640/0x640 [ 1173.193624] ? do_page_fault+0x60/0x500 [ 1173.197600] ? page_fault+0x2f/0x50 [ 1173.201225] page_fault+0x45/0x50 [ 1173.204673] RIP: 0001:0x1 [ 1173.207420] RSP: b2884310:00007ffc80d66a80 EFLAGS: 7ffc80d66890 [ 1173.221457] Mem-Info: [ 1173.230773] active_anon:274617 inactive_anon:6721 isolated_anon:0 [ 1173.230773] active_file:14 inactive_file:116 isolated_file:0 [ 1173.230773] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1173.230773] slab_reclaimable:16466 slab_unreclaimable:133895 [ 1173.230773] mapped:52840 shmem:6931 pagetables:48394 bounce:0 [ 1173.230773] free:136453 free_pcp:147 free_cma:0 [ 1173.265016] Node 0 active_anon:1073552kB inactive_anon:26884kB active_file:56kB inactive_file:560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211460kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 911360kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1173.293357] Node 1 active_anon:24916kB inactive_anon:0kB active_file:0kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1173.319987] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1173.346807] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1173.352006] Node 0 DMA32 free:45232kB min:36200kB low:45248kB high:54296kB active_anon:1069444kB inactive_anon:26884kB active_file:56kB inactive_file:560kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:63744kB pagetables:174676kB bounce:0kB free_pcp:476kB local_pcp:292kB free_cma:0kB [ 1173.381509] lowmem_reserve[]: 0 0 0 0 0 [ 1173.385505] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1173.411102] lowmem_reserve[]: 0 0 0 0 0 [ 1173.415096] Node 1 Normal free:330768kB min:53696kB low:67120kB high:80544kB active_anon:24916kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6176kB pagetables:18804kB bounce:0kB free_pcp:396kB local_pcp:232kB free_cma:0kB [ 1173.443992] lowmem_reserve[]: 0 0 0 0 0 [ 1173.448039] Node 0 DMA: 4*4kB (ME) 1*8kB (E) 2*16kB (ME) 1*32kB (M) 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10968kB [ 1173.463636] Node 0 DMA32: 2906*4kB (ME) 594*8kB (UME) 58*16kB (M) 1*32kB (U) 20*64kB (UM) 18*128kB (U) 11*256kB (U) 8*512kB (U) 9*1024kB (U) 2*2048kB (U) 1*4096kB (U) = 45240kB [ 1173.479657] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1173.490453] Node 1 Normal: 545*4kB (M) 208*8kB (M) 31*16kB (UM) 4*32kB (M) 8*64kB (UM) 1*128kB (M) 48*256kB (U) 64*512kB (UM) 141*1024kB (U) 21*2048kB (U) 7*4096kB (U) = 266228kB [ 1173.506653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1173.515573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1173.524290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1173.533472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1173.542086] 7183 total pagecache pages [ 1173.545975] 0 pages in swap cache [ 1173.549478] Swap cache stats: add 0, delete 0, find 0/0 [ 1173.554854] Free swap = 0kB [ 1173.557893] Total swap = 0kB [ 1173.560905] 2097051 pages RAM [ 1173.564017] 0 pages HighMem/MovableOnly [ 1173.568052] 363840 pages reserved [ 1173.571494] 0 pages cma reserved [ 1173.574849] Out of memory (oom_kill_allocating_task): Kill process 5969 (systemd-journal) score 0 or sacrifice child [ 1173.585586] Killed process 5969 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:0kB, shmem-rss:2156kB [ 1173.608602] oom_reaper: reaped process 19537 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 10:37:51 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)) [ 1173.788254] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1173.797387] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1173.814349] systemd[1]: rsyslog.service: Unit entered failed state. [ 1173.821881] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1173.839846] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1173.851906] systemd[1]: Stopped Journal Service. [ 1173.878969] systemd[1]: Starting Journal Service... [ 1173.940097] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1173.957682] systemd[1]: Stopped System Logging Service. [ 1173.992316] systemd[1]: Starting System Logging Service... 10:37:52 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:37:52 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)) 10:37:52 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:37:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x3) 10:37:52 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000300)) 10:37:52 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000300)) 10:37:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x3) [ 1174.272626] systemd-journald[8861]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 10:37:52 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:37:52 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000300)) [ 1174.528601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.541680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.569056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.594029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.639975] device bridge_slave_1 left promiscuous mode [ 1174.677339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.711521] device bridge_slave_0 left promiscuous mode [ 1174.741075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.779121] device veth1_macvtap left promiscuous mode [ 1174.795365] device veth0_macvtap left promiscuous mode [ 1174.811646] device veth1_vlan left promiscuous mode [ 1174.829977] device veth0_vlan left promiscuous mode [ 1175.154258] device hsr_slave_1 left promiscuous mode [ 1175.191044] device hsr_slave_0 left promiscuous mode [ 1175.238213] team0 (unregistering): Port device team_slave_1 removed [ 1175.272300] team0 (unregistering): Port device team_slave_0 removed [ 1175.298798] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1175.322378] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1175.410544] bond0 (unregistering): Released all slaves [ 1176.666027] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1176.695844] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1176.701051] CPU: 0 PID: 8885 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1176.708839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1176.718186] Call Trace: [ 1176.720776] dump_stack+0x1b2/0x281 [ 1176.724386] warn_alloc.cold+0x96/0x1cc [ 1176.728343] ? zone_watermark_ok_safe+0x220/0x220 [ 1176.733174] __alloc_pages_nodemask+0x2127/0x2720 [ 1176.738010] ? io_schedule_timeout+0x140/0x140 [ 1176.742586] ? lock_acquire+0x170/0x3f0 [ 1176.746563] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1176.751416] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1176.756851] ? __mutex_unlock_slowpath+0x75/0x770 [ 1176.761690] alloc_pages_current+0x155/0x260 [ 1176.766082] ion_page_pool_alloc+0x118/0x1b0 [ 1176.770483] ion_system_heap_allocate+0x133/0x8c0 [ 1176.775307] ? ion_alloc+0x187/0x810 [ 1176.779006] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1176.784524] ? ion_system_contig_heap_create+0x130/0x130 [ 1176.789957] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1176.794953] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1176.799790] ion_alloc+0x204/0x810 [ 1176.803313] ? ion_dma_buf_release+0x40/0x40 [ 1176.807706] ? __might_fault+0x177/0x1b0 [ 1176.811759] ion_ioctl+0xea/0x1f0 [ 1176.815193] ? ion_query_heaps+0x360/0x360 [ 1176.819410] ? ion_query_heaps+0x360/0x360 [ 1176.823628] do_vfs_ioctl+0x75a/0xff0 [ 1176.827411] ? ioctl_preallocate+0x1a0/0x1a0 [ 1176.831801] ? lock_downgrade+0x740/0x740 [ 1176.835939] ? __fget+0x225/0x360 [ 1176.839388] ? do_vfs_ioctl+0xff0/0xff0 [ 1176.843357] ? security_file_ioctl+0x83/0xb0 [ 1176.847766] SyS_ioctl+0x7f/0xb0 [ 1176.851114] ? do_vfs_ioctl+0xff0/0xff0 [ 1176.855072] do_syscall_64+0x1d5/0x640 [ 1176.858946] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1176.864116] RIP: 0033:0x465f69 [ 1176.867283] RSP: 002b:00007f7eadeea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1176.874983] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1176.882320] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1176.889580] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1176.896838] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1176.904118] R13: 00007ffe5b3e4a8f R14: 00007f7eadeea300 R15: 0000000000022000 [ 1177.045099] warn_alloc_show_mem: 1 callbacks suppressed [ 1177.045104] Mem-Info: [ 1177.053000] active_anon:274793 inactive_anon:8751 isolated_anon:0 [ 1177.053000] active_file:280 inactive_file:465 isolated_file:61 [ 1177.053000] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1177.053000] slab_reclaimable:16559 slab_unreclaimable:131312 [ 1177.053000] mapped:47041 shmem:8976 pagetables:48377 bounce:0 [ 1177.053000] free:25156 free_pcp:2 free_cma:0 [ 1177.090702] Node 0 active_anon:1074016kB inactive_anon:29916kB active_file:812kB inactive_file:1544kB unevictable:0kB isolated(anon):0kB isolated(file):224kB mapped:187568kB dirty:52kB writeback:0kB shmem:30816kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 911360kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1177.121930] Node 1 active_anon:25156kB inactive_anon:5088kB active_file:308kB inactive_file:316kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:596kB dirty:4kB writeback:0kB shmem:5088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1177.152401] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1177.195803] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1177.200914] Node 0 DMA32 free:38940kB min:36200kB low:45248kB high:54296kB active_anon:1069908kB inactive_anon:29916kB active_file:156kB inactive_file:432kB unevictable:0kB writepending:52kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:63712kB pagetables:174580kB bounce:0kB free_pcp:672kB local_pcp:44kB free_cma:0kB [ 1177.233164] lowmem_reserve[]: 0 0 0 0 0 [ 1177.237245] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1177.278569] lowmem_reserve[]: 0 0 0 0 0 [ 1177.282623] Node 1 Normal free:53676kB min:53696kB low:67120kB high:80544kB active_anon:25156kB inactive_anon:5088kB active_file:308kB inactive_file:316kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6240kB pagetables:18832kB bounce:0kB free_pcp:76kB local_pcp:20kB free_cma:0kB [ 1177.373269] lowmem_reserve[]: 0 0 0 0 0 [ 1177.377395] Node 0 DMA: 4*4kB (ME) 1*8kB (E) 2*16kB (ME) 1*32kB (M) 5*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11032kB [ 1177.396349] Node 0 DMA32: 2490*4kB (UME) 730*8kB (UME) 667*16kB (UM) 410*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39592kB [ 1177.411722] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1177.423664] Node 1 Normal: 635*4kB (UME) 263*8kB (UME) 77*16kB (ME) 60*32kB (UME) 35*64kB (UME) 22*128kB (ME) 10*256kB (UME) 63*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 53812kB [ 1177.442967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1177.452353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1177.463849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1177.472807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1177.484109] 9178 total pagecache pages [ 1177.505815] 0 pages in swap cache [ 1177.509294] Swap cache stats: add 0, delete 0, find 0/0 [ 1177.514648] Free swap = 0kB [ 1177.533991] Total swap = 0kB [ 1177.540137] 2097051 pages RAM [ 1177.543254] 0 pages HighMem/MovableOnly [ 1177.558827] 363840 pages reserved [ 1177.562925] 0 pages cma reserved [ 1180.349579] IPVS: ftp: loaded support on port[0] = 21 [ 1180.524165] chnl_net:caif_netlink_parms(): no params data found [ 1180.706322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.712796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.723869] device bridge_slave_0 entered promiscuous mode [ 1180.731568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.741944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.749854] device bridge_slave_1 entered promiscuous mode [ 1180.782407] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1180.792006] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1180.824621] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1180.832304] team0: Port device team_slave_0 added [ 1180.841714] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1180.849433] team0: Port device team_slave_1 added [ 1180.880152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.886697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.915936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.930835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.938013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.967437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.980123] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1180.989733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1181.029035] device hsr_slave_0 entered promiscuous mode [ 1181.034922] device hsr_slave_1 entered promiscuous mode [ 1181.043311] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1181.052614] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1181.180265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.186702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.193374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.199822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.240282] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1181.247197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.256341] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1181.266914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1181.274483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.291776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.309501] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1181.315890] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.330138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1181.338275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.344759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.366686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1181.374407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.380851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.398702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1181.406954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1181.414697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1181.426925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1181.438870] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1181.444955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1181.452595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1181.460301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1181.474541] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1181.486088] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1181.494429] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1181.501163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1181.510663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1181.522962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.615328] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1181.628988] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1181.636373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1181.644436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1181.701475] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1181.712139] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1181.719884] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1181.729948] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1181.737278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1181.744784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1181.755205] device veth0_vlan entered promiscuous mode [ 1181.765686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1181.772742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1181.782078] device veth1_vlan entered promiscuous mode [ 1181.789214] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1181.799453] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1181.815576] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1181.825237] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1181.832922] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1181.841298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1181.849105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1181.857565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1181.870615] device veth0_macvtap entered promiscuous mode [ 1181.877296] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1181.887071] device veth1_macvtap entered promiscuous mode [ 1181.893178] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1181.904149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1181.914923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1181.925544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1181.935286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.945819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1181.955774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.964881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1181.976110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.985232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1181.995939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.005068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1182.016566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.026915] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1182.033895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.042068] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1182.050124] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1182.058010] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1182.066400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1182.076596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1182.087859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.097606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1182.107446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.116712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1182.126550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.135705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1182.145507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.154612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1182.164348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.174371] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1182.181496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1182.188745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1182.196834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1182.365861] Bluetooth: hci4 command 0x0409 tx timeout 10:38:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x3) 10:38:00 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:38:00 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:38:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:38:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:00 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:38:00 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:38:00 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:38:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) 10:38:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:38:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) [ 1183.965493] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1183.984157] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1184.000733] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1184.006644] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1184.011894] CPU: 1 PID: 9237 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1184.019692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1184.029050] Call Trace: [ 1184.031649] dump_stack+0x1b2/0x281 [ 1184.035305] warn_alloc.cold+0x96/0x1cc [ 1184.039294] ? zone_watermark_ok_safe+0x220/0x220 [ 1184.044154] __alloc_pages_nodemask+0x2127/0x2720 [ 1184.049008] ? lock_acquire+0x170/0x3f0 [ 1184.052992] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1184.057854] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1184.063321] ? __mutex_unlock_slowpath+0x75/0x770 [ 1184.068181] alloc_pages_current+0x155/0x260 [ 1184.072608] ion_page_pool_alloc+0x118/0x1b0 [ 1184.077027] ion_system_heap_allocate+0x133/0x8c0 [ 1184.081877] ? ion_alloc+0x187/0x810 [ 1184.085594] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1184.091049] ? ion_system_contig_heap_create+0x130/0x130 [ 1184.096505] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1184.101532] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1184.106387] ion_alloc+0x204/0x810 [ 1184.109959] ? ion_dma_buf_release+0x40/0x40 [ 1184.114374] ? __might_fault+0x177/0x1b0 [ 1184.118443] ion_ioctl+0xea/0x1f0 [ 1184.121902] ? ion_query_heaps+0x360/0x360 [ 1184.126147] ? ion_query_heaps+0x360/0x360 [ 1184.130388] do_vfs_ioctl+0x75a/0xff0 [ 1184.134196] ? ioctl_preallocate+0x1a0/0x1a0 [ 1184.138614] ? lock_downgrade+0x740/0x740 [ 1184.142771] ? __fget+0x225/0x360 [ 1184.146229] ? do_vfs_ioctl+0xff0/0xff0 [ 1184.150206] ? security_file_ioctl+0x83/0xb0 [ 1184.154622] SyS_ioctl+0x7f/0xb0 [ 1184.157992] ? do_vfs_ioctl+0xff0/0xff0 [ 1184.161971] do_syscall_64+0x1d5/0x640 [ 1184.165869] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1184.171058] RIP: 0033:0x465f69 [ 1184.174244] RSP: 002b:00007f7eadeea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1184.181959] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1184.189233] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1184.196504] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1184.203775] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1184.211171] R13: 00007ffe5b3e4a8f R14: 00007f7eadeea300 R15: 0000000000022000 [ 1184.228125] CPU: 0 PID: 9242 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1184.235945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1184.242001] Mem-Info: [ 1184.245301] Call Trace: [ 1184.245318] dump_stack+0x1b2/0x281 [ 1184.245331] warn_alloc.cold+0x96/0x1cc [ 1184.245342] ? zone_watermark_ok_safe+0x220/0x220 [ 1184.245361] __alloc_pages_nodemask+0x2127/0x2720 [ 1184.245377] ? lock_acquire+0x170/0x3f0 [ 1184.245392] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1184.245409] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1184.245419] ? __mutex_unlock_slowpath+0x75/0x770 [ 1184.245432] alloc_pages_current+0x155/0x260 [ 1184.251180] active_anon:274341 inactive_anon:8753 isolated_anon:19 [ 1184.251180] active_file:2311 inactive_file:1461 isolated_file:32 [ 1184.251180] unevictable:0 dirty:73 writeback:0 unstable:0 [ 1184.251180] slab_reclaimable:16209 slab_unreclaimable:134425 [ 1184.251180] mapped:55455 shmem:8980 pagetables:48438 bounce:0 [ 1184.251180] free:84021 free_pcp:218 free_cma:0 [ 1184.254010] ion_page_pool_alloc+0x118/0x1b0 [ 1184.262415] Node 0 active_anon:1071916kB inactive_anon:29932kB active_file:1180kB inactive_file:1164kB unevictable:0kB isolated(anon):76kB isolated(file):0kB mapped:188756kB dirty:132kB writeback:0kB shmem:30840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 909312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1184.262792] ion_system_heap_allocate+0x133/0x8c0 [ 1184.271716] Node 1 active_anon:25448kB inactive_anon:5080kB active_file:8064kB inactive_file:4680kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:33064kB dirty:160kB writeback:0kB shmem:5080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1184.276406] ? ion_alloc+0x187/0x810 [ 1184.276416] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1184.276426] ? ion_system_contig_heap_create+0x130/0x130 [ 1184.276436] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1184.276446] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1184.276456] ion_alloc+0x204/0x810 [ 1184.276468] ? ion_dma_buf_release+0x40/0x40 [ 1184.276479] ? __might_fault+0x177/0x1b0 [ 1184.276491] ion_ioctl+0xea/0x1f0 [ 1184.284681] Node 0 [ 1184.286758] ? ion_query_heaps+0x360/0x360 [ 1184.286770] ? ion_query_heaps+0x360/0x360 [ 1184.286780] do_vfs_ioctl+0x75a/0xff0 [ 1184.286791] ? ioctl_preallocate+0x1a0/0x1a0 [ 1184.286799] ? lock_downgrade+0x740/0x740 [ 1184.286811] ? __fget+0x225/0x360 [ 1184.286820] ? do_vfs_ioctl+0xff0/0xff0 [ 1184.286829] ? security_file_ioctl+0x83/0xb0 [ 1184.286840] SyS_ioctl+0x7f/0xb0 [ 1184.286847] ? do_vfs_ioctl+0xff0/0xff0 [ 1184.286858] do_syscall_64+0x1d5/0x640 [ 1184.286873] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1184.298108] DMA free:11132kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1184.325186] RIP: 0033:0x465f69 [ 1184.325191] RSP: 002b:00007f2b831bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1184.325200] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1184.325204] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1184.325208] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1184.325213] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1184.325217] R13: 00007ffe5888fc4f R14: 00007f2b831bd300 R15: 0000000000022000 [ 1184.560289] Bluetooth: hci4 command 0x041b tx timeout [ 1184.566883] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1184.571940] Node 0 DMA32 free:196232kB min:36200kB low:45248kB high:54296kB active_anon:1067808kB inactive_anon:29932kB active_file:1180kB inactive_file:1264kB unevictable:0kB writepending:132kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:63680kB pagetables:174472kB bounce:0kB free_pcp:276kB local_pcp:112kB free_cma:0kB [ 1184.605412] lowmem_reserve[]: 0 0 0 0 0 [ 1184.609430] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1184.639364] lowmem_reserve[]: 0 0 0 0 0 [ 1184.643384] Node 1 Normal free:56760kB min:53696kB low:67120kB high:80544kB active_anon:25448kB inactive_anon:5080kB active_file:8100kB inactive_file:4344kB unevictable:0kB writepending:160kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19184kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB [ 1184.676402] lowmem_reserve[]: 0 0 0 0 0 [ 1184.680429] Node 0 DMA: 7*4kB (UME) 6*8kB (UE) 9*16kB (UME) 3*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11132kB [ 1184.700676] Node 0 DMA32: 4819*4kB (UMEH) 1035*8kB (UMEH) 2379*16kB (UMEH) 2009*32kB (UME) 3*64kB (UMH) 2*128kB (MH) 1*256kB (M) 1*512kB (M) 2*1024kB (MH) 0*2048kB 0*4096kB = 133172kB [ 1184.720926] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1184.731735] Node 1 Normal: 1406*4kB (UM) 1234*8kB (UM) 916*16kB (UM) 848*32kB (UM) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58056kB [ 1184.749964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1184.758903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1184.773199] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1184.782125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1184.794282] 12475 total pagecache pages [ 1184.798358] 0 pages in swap cache [ 1184.801958] Swap cache stats: add 0, delete 0, find 0/0 [ 1184.810880] Free swap = 0kB [ 1184.813922] Total swap = 0kB [ 1184.817004] 2097051 pages RAM [ 1184.820277] 0 pages HighMem/MovableOnly [ 1184.824251] 363840 pages reserved [ 1184.831306] 0 pages cma reserved [ 1185.760120] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1185.773004] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1185.835526] CPU: 1 PID: 7974 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 1185.842993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1185.852337] Call Trace: [ 1185.854923] dump_stack+0x1b2/0x281 [ 1185.858549] dump_header+0x178/0x82f [ 1185.862255] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1185.867349] ? ___ratelimit+0x2cd/0x530 [ 1185.871321] oom_kill_process.cold+0x10/0xb18 [ 1185.875821] out_of_memory+0xe3e/0x1190 [ 1185.879793] ? oom_killer_disable+0x1c0/0x1c0 [ 1185.884281] ? mutex_trylock+0x152/0x1a0 [ 1185.888340] __alloc_pages_nodemask+0x23e1/0x2720 [ 1185.893189] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1185.898041] alloc_pages_current+0x155/0x260 [ 1185.902447] filemap_fault+0xea3/0x1980 [ 1185.906426] ext4_filemap_fault+0x84/0xb0 [ 1185.910565] __do_fault+0xfa/0x380 [ 1185.914095] __handle_mm_fault+0x2497/0x4620 [ 1185.918496] ? vm_insert_page+0x7c0/0x7c0 [ 1185.922652] handle_mm_fault+0x391/0x860 [ 1185.926710] __do_page_fault+0x549/0xad0 [ 1185.930766] ? spurious_fault+0x640/0x640 [ 1185.934905] ? do_page_fault+0x60/0x500 [ 1185.938874] ? page_fault+0x2f/0x50 [ 1185.942492] page_fault+0x45/0x50 [ 1185.945934] RIP: 0001:0x11436e90594 [ 1185.949548] RSP: 80198:000000c000039db8 EFLAGS: 11436e90594 [ 1185.977304] Mem-Info: [ 1185.985508] active_anon:274348 inactive_anon:8753 isolated_anon:0 [ 1185.985508] active_file:12 inactive_file:12 isolated_file:3 [ 1185.985508] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1185.985508] slab_reclaimable:16194 slab_unreclaimable:133947 [ 1185.985508] mapped:52605 shmem:8980 pagetables:48438 bounce:0 [ 1185.985508] free:25134 free_pcp:30 free_cma:0 [ 1186.018909] Node 0 active_anon:1071944kB inactive_anon:29932kB active_file:24kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187848kB dirty:0kB writeback:0kB shmem:30840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 909312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1186.047299] Node 1 active_anon:25448kB inactive_anon:5080kB active_file:24kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22572kB dirty:0kB writeback:0kB shmem:5080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1186.074455] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1186.138039] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1186.143109] Node 0 DMA32 free:35724kB min:36200kB low:45248kB high:54296kB active_anon:1067836kB inactive_anon:29932kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:63680kB pagetables:174472kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1186.278639] lowmem_reserve[]: 0 0 0 0 0 [ 1186.282687] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1186.432948] lowmem_reserve[]: 0 0 0 0 0 [ 1186.452603] Node 1 Normal free:53508kB min:53696kB low:67120kB high:80544kB active_anon:25448kB inactive_anon:5080kB active_file:32kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1186.565575] lowmem_reserve[]: 0 0 0 0 0 [ 1186.569605] Node 0 DMA: 4*4kB (ME) 2*8kB (E) 7*16kB (UME) 3*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1186.605157] Bluetooth: hci4 command 0x040f tx timeout [ 1186.647470] Node 0 DMA32: 5259*4kB (ME) 1042*8kB (UME) 200*16kB (UME) 44*32kB (UME) 1*64kB (M) 2*128kB (UM) 1*256kB (U) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 35580kB [ 1186.715807] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1186.764403] Node 1 Normal: 762*4kB (M) 322*8kB (M) 858*16kB (UM) 901*32kB (UM) 47*64kB (UM) 10*128kB (M) 3*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53752kB [ 1186.832184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1186.893416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1186.933458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1186.993721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1187.033162] 9007 total pagecache pages [ 1187.050547] 0 pages in swap cache [ 1187.054023] Swap cache stats: add 0, delete 0, find 0/0 [ 1187.086431] Free swap = 0kB [ 1187.089463] Total swap = 0kB [ 1187.092470] 2097051 pages RAM [ 1187.121338] 0 pages HighMem/MovableOnly [ 1187.137829] 363840 pages reserved [ 1187.141292] 0 pages cma reserved [ 1187.144648] Out of memory (oom_kill_allocating_task): Kill process 7974 (syz-fuzzer) score 0 or sacrifice child [ 1187.224695] Killed process 8920 (syz-executor.0) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1187.277796] oom_reaper: reaped process 8920 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1187.375778] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1187.450656] systemd-journal cpuset=/ mems_allowed=0-1 [ 1187.486912] CPU: 0 PID: 8861 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 1187.494823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1187.504167] Call Trace: [ 1187.506754] dump_stack+0x1b2/0x281 [ 1187.510375] dump_header+0x178/0x82f [ 1187.514082] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1187.519178] ? ___ratelimit+0x2cd/0x530 [ 1187.523150] oom_kill_process.cold+0x10/0xb18 [ 1187.527650] out_of_memory+0xe3e/0x1190 [ 1187.531626] ? oom_killer_disable+0x1c0/0x1c0 [ 1187.536113] ? mutex_trylock+0x152/0x1a0 [ 1187.540169] __alloc_pages_nodemask+0x23e1/0x2720 [ 1187.545018] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1187.549875] alloc_pages_current+0x155/0x260 [ 1187.554283] filemap_fault+0xea3/0x1980 [ 1187.558264] ext4_filemap_fault+0x84/0xb0 [ 1187.562408] __do_fault+0xfa/0x380 [ 1187.565946] __handle_mm_fault+0x2497/0x4620 [ 1187.570348] ? ep_poll+0x1ab/0xa50 [ 1187.573881] ? vm_insert_page+0x7c0/0x7c0 [ 1187.578034] handle_mm_fault+0x391/0x860 [ 1187.582089] __do_page_fault+0x549/0xad0 [ 1187.586145] ? spurious_fault+0x640/0x640 [ 1187.590286] ? do_page_fault+0x60/0x500 [ 1187.594253] ? page_fault+0x2f/0x50 [ 1187.597872] page_fault+0x45/0x50 [ 1187.601315] RIP: 0001:0x1 [ 1187.604059] RSP: 646001e0:00007fff627e5730 EFLAGS: 7fff627e5540 [ 1188.169366] Mem-Info: [ 1188.202925] active_anon:274335 inactive_anon:8753 isolated_anon:0 [ 1188.202925] active_file:13 inactive_file:14 isolated_file:0 [ 1188.202925] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1188.202925] slab_reclaimable:16184 slab_unreclaimable:133918 [ 1188.202925] mapped:52605 shmem:8980 pagetables:48416 bounce:0 [ 1188.202925] free:25167 free_pcp:30 free_cma:0 [ 1188.268683] Node 0 active_anon:1071900kB inactive_anon:29932kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187848kB dirty:0kB writeback:0kB shmem:30840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 909312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1188.414782] Node 1 active_anon:25440kB inactive_anon:5080kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22572kB dirty:0kB writeback:0kB shmem:5080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1188.540413] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1188.671300] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1188.684759] Bluetooth: hci4 command 0x0419 tx timeout [ 1188.707590] Node 0 DMA32 free:35932kB min:36200kB low:45248kB high:54296kB active_anon:1067792kB inactive_anon:29932kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:63648kB pagetables:174432kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 1188.849500] lowmem_reserve[]: 0 0 0 0 0 [ 1188.853530] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1188.930334] lowmem_reserve[]: 0 0 0 0 0 [ 1188.934388] Node 1 Normal free:53852kB min:53696kB low:67120kB high:80544kB active_anon:25440kB inactive_anon:5080kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19136kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1188.966897] lowmem_reserve[]: 0 0 0 0 0 [ 1188.970932] Node 0 DMA: 4*4kB (ME) 2*8kB (E) 7*16kB (UME) 3*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1188.990040] Node 0 DMA32: 5275*4kB (ME) 1183*8kB (UME) 202*16kB (UME) 48*32kB (UME) 1*64kB (M) 2*128kB (UM) 1*256kB (U) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 36932kB [ 1189.009565] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1189.020373] Node 1 Normal: 763*4kB (UM) 322*8kB (UM) 858*16kB (UM) 901*32kB (UM) 47*64kB (UM) 10*128kB (M) 3*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53756kB [ 1189.038994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1189.058730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1189.067392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1189.076348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1189.085119] 9007 total pagecache pages [ 1189.089155] 0 pages in swap cache [ 1189.092605] Swap cache stats: add 0, delete 0, find 0/0 [ 1189.098140] Free swap = 0kB [ 1189.101155] Total swap = 0kB [ 1189.104270] 2097051 pages RAM [ 1189.107407] 0 pages HighMem/MovableOnly [ 1189.111371] 363840 pages reserved [ 1189.114890] 0 pages cma reserved [ 1189.118249] Out of memory (oom_kill_allocating_task): Kill process 8861 (systemd-journal) score 0 or sacrifice child [ 1189.128982] Killed process 8861 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1392kB [ 1189.140694] oom_reaper: reaped process 8861 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1524kB [ 1189.213470] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1189.289379] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1189.294182] CPU: 1 PID: 7974 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 1189.301619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1189.310961] Call Trace: [ 1189.313547] dump_stack+0x1b2/0x281 [ 1189.317175] dump_header+0x178/0x82f [ 1189.320883] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1189.325979] ? ___ratelimit+0x2cd/0x530 [ 1189.329945] oom_kill_process.cold+0x10/0xb18 [ 1189.334440] out_of_memory+0xe3e/0x1190 [ 1189.338414] ? oom_killer_disable+0x1c0/0x1c0 [ 1189.342898] ? mutex_trylock+0x152/0x1a0 [ 1189.346952] __alloc_pages_nodemask+0x23e1/0x2720 [ 1189.351797] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1189.356647] alloc_pages_current+0x155/0x260 [ 1189.361052] filemap_fault+0xea3/0x1980 [ 1189.365045] ext4_filemap_fault+0x84/0xb0 [ 1189.369188] __do_fault+0xfa/0x380 [ 1189.372720] __handle_mm_fault+0x2497/0x4620 [ 1189.377126] ? vm_insert_page+0x7c0/0x7c0 [ 1189.381280] handle_mm_fault+0x391/0x860 [ 1189.385334] __do_page_fault+0x549/0xad0 [ 1189.389390] ? spurious_fault+0x640/0x640 [ 1189.393529] ? do_page_fault+0x60/0x500 [ 1189.397496] ? page_fault+0x2f/0x50 [ 1189.401118] page_fault+0x45/0x50 [ 1189.404561] RIP: 0001:0x11436e90594 [ 1189.408174] RSP: 80198:000000c000039db8 EFLAGS: 11436e90594 [ 1189.426906] Mem-Info: [ 1189.435554] active_anon:274225 inactive_anon:8752 isolated_anon:0 [ 1189.435554] active_file:0 inactive_file:17 isolated_file:0 [ 1189.435554] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1189.435554] slab_reclaimable:16167 slab_unreclaimable:133689 [ 1189.435554] mapped:52242 shmem:8980 pagetables:48367 bounce:0 [ 1189.435554] free:25120 free_pcp:0 free_cma:0 [ 1189.518839] Node 0 active_anon:1071480kB inactive_anon:29928kB active_file:0kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186392kB dirty:0kB writeback:0kB shmem:30840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 909312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1189.696950] Node 1 active_anon:25420kB inactive_anon:5080kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22576kB dirty:0kB writeback:0kB shmem:5080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1189.845113] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:4108kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1189.980818] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1190.004854] Node 0 DMA32 free:35796kB min:36200kB low:45248kB high:54296kB active_anon:1067320kB inactive_anon:29928kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:63648kB pagetables:174336kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1190.187417] lowmem_reserve[]: 0 0 0 0 0 [ 1190.191451] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1190.262604] lowmem_reserve[]: 0 0 0 0 0 [ 1190.298695] Node 1 Normal free:53228kB min:53696kB low:67120kB high:80544kB active_anon:25404kB inactive_anon:5080kB active_file:28kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6368kB pagetables:19036kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1190.463858] lowmem_reserve[]: 0 0 0 0 0 [ 1190.480593] Node 0 DMA: 4*4kB (ME) 2*8kB (E) 7*16kB (UME) 3*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1190.589356] Node 0 DMA32: 5379*4kB (UME) 1075*8kB (ME) 200*16kB (ME) 43*32kB (UME) 3*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 36164kB [ 1190.682809] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1190.750505] Node 1 Normal: 759*4kB (M) 323*8kB (UM) 826*16kB (UM) 899*32kB (UM) 50*64kB (UM) 10*128kB (M) 3*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53364kB [ 1190.840547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1190.889214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1190.929922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1190.993027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1191.014160] 9007 total pagecache pages [ 1191.020344] 0 pages in swap cache [ 1191.023794] Swap cache stats: add 0, delete 0, find 0/0 [ 1191.034072] Free swap = 0kB [ 1191.043703] Total swap = 0kB [ 1191.046824] 2097051 pages RAM [ 1191.049916] 0 pages HighMem/MovableOnly [ 1191.053927] 363840 pages reserved [ 1191.063718] 0 pages cma reserved [ 1191.067140] Out of memory (oom_kill_allocating_task): Kill process 7974 (syz-fuzzer) score 0 or sacrifice child [ 1191.081839] Killed process 7996 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1191.102515] oom_reaper: reaped process 7996 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1191.125771] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1193.145402] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1193.150267] CPU: 1 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 1193.157708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1193.167059] Call Trace: [ 1193.169652] dump_stack+0x1b2/0x281 [ 1193.173295] dump_header+0x178/0x82f [ 1193.177009] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1193.182121] ? ___ratelimit+0x2cd/0x530 [ 1193.186094] oom_kill_process.cold+0x10/0xb18 [ 1193.190596] out_of_memory+0xe3e/0x1190 [ 1193.194570] ? oom_killer_disable+0x1c0/0x1c0 [ 1193.199060] ? mutex_trylock+0x152/0x1a0 [ 1193.203120] __alloc_pages_nodemask+0x23e1/0x2720 [ 1193.207971] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1193.212825] alloc_pages_current+0x155/0x260 [ 1193.217232] filemap_fault+0xea3/0x1980 [ 1193.221214] ext4_filemap_fault+0x84/0xb0 [ 1193.225360] __do_fault+0xfa/0x380 [ 1193.228894] __handle_mm_fault+0x2497/0x4620 [ 1193.233295] ? vm_insert_page+0x7c0/0x7c0 [ 1193.237451] handle_mm_fault+0x391/0x860 [ 1193.241514] __do_page_fault+0x549/0xad0 [ 1193.245571] ? spurious_fault+0x640/0x640 [ 1193.249717] ? do_page_fault+0x60/0x500 [ 1193.253690] ? page_fault+0x2f/0x50 [ 1193.257308] page_fault+0x45/0x50 [ 1193.260754] RIP: 1200:0xc000a6e4e0 [ 1193.264289] RSP: 2ec00:000000c00003bde0 EFLAGS: 00000003 [ 1193.294863] Mem-Info: [ 1193.303302] active_anon:211137 inactive_anon:8752 isolated_anon:0 [ 1193.303302] active_file:735 inactive_file:1143 isolated_file:0 [ 1193.303302] unevictable:0 dirty:98 writeback:0 unstable:0 [ 1193.303302] slab_reclaimable:16088 slab_unreclaimable:128999 [ 1193.303302] mapped:44773 shmem:8980 pagetables:35696 bounce:0 [ 1193.303302] free:82516 free_pcp:437 free_cma:0 [ 1193.357877] Node 0 active_anon:836484kB inactive_anon:29928kB active_file:3216kB inactive_file:5548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157520kB dirty:392kB writeback:0kB shmem:30840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1193.390123] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1193.405222] Node 1 active_anon:8064kB inactive_anon:5080kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22572kB dirty:0kB writeback:0kB shmem:5080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1193.436900] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1193.447119] Node 0 DMA free:15312kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1193.474978] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1193.480923] systemd[1]: Stopped Journal Service. [ 1193.491842] Node 0 DMA32 free:114864kB min:36200kB low:45248kB high:54296kB active_anon:836480kB inactive_anon:29928kB active_file:3724kB inactive_file:7048kB unevictable:0kB writepending:524kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50112kB pagetables:133336kB bounce:0kB free_pcp:652kB local_pcp:508kB free_cma:0kB [ 1193.540786] systemd[1]: Starting Journal Service... [ 1193.553865] lowmem_reserve[]: 0 0 0 0 0 [ 1193.563570] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1193.596663] lowmem_reserve[]: 0 0 0 0 0 [ 1193.600683] Node 1 Normal free:67012kB min:53696kB low:67120kB high:80544kB active_anon:8396kB inactive_anon:5080kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3296kB pagetables:9436kB bounce:0kB free_pcp:756kB local_pcp:456kB free_cma:0kB [ 1193.747973] lowmem_reserve[]: 0 0 0 0 0 [ 1193.759330] Node 0 DMA: 4*4kB (ME) 4*8kB (UME) 2*16kB (ME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1193.783583] Node 0 DMA32: 4438*4kB (UME) 1540*8kB (UME) 323*16kB (UME) 38*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36456kB [ 1193.834309] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1193.845149] Node 1 Normal: 832*4kB (UM) 471*8kB (UM) 233*16kB (M) 702*32kB (UM) 112*64kB (UM) 24*128kB (UM) 12*256kB (UM) 6*512kB (M) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 53768kB [ 1193.877070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1193.896118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1193.914619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1193.923619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1193.943971] 9564 total pagecache pages [ 1193.947951] 0 pages in swap cache [ 1193.951406] Swap cache stats: add 0, delete 0, find 0/0 [ 1193.957186] Free swap = 0kB [ 1193.960297] Total swap = 0kB [ 1193.963313] 2097051 pages RAM [ 1193.968902] 0 pages HighMem/MovableOnly [ 1193.972889] 363840 pages reserved [ 1193.978069] 0 pages cma reserved [ 1193.981440] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 1193.992109] Killed process 8429 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1194.381435] (journald) invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1194.410369] (journald) cpuset=/ mems_allowed=0-1 [ 1194.415213] CPU: 0 PID: 9282 Comm: (journald) Not tainted 4.14.224-syzkaller #0 [ 1194.422649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1194.431992] Call Trace: [ 1194.434581] dump_stack+0x1b2/0x281 [ 1194.438203] dump_header+0x178/0x82f [ 1194.441910] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1194.447005] ? ___ratelimit+0x2cd/0x530 [ 1194.450985] oom_kill_process.cold+0x10/0xb18 [ 1194.455466] out_of_memory+0xe3e/0x1190 [ 1194.459422] ? oom_killer_disable+0x1c0/0x1c0 [ 1194.463898] ? mutex_trylock+0x152/0x1a0 [ 1194.467940] __alloc_pages_nodemask+0x23e1/0x2720 [ 1194.472785] ? __schedule+0x893/0x1de0 [ 1194.476650] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1194.481472] ? lock_acquire+0x170/0x3f0 [ 1194.485425] ? reacquire_held_locks+0xb5/0x3f0 [ 1194.489983] ? alloc_set_pte+0xd57/0x1610 [ 1194.494119] alloc_pages_vma+0xd2/0x6d0 [ 1194.498087] wp_page_copy+0x1f5/0x25c0 [ 1194.501956] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1194.506430] ? __lock_acquire+0x5fc/0x3f20 [ 1194.510643] do_wp_page+0x245/0x1db0 [ 1194.514363] ? __handle_mm_fault+0x129c/0x4620 [ 1194.518933] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1194.523582] __handle_mm_fault+0x234f/0x4620 [ 1194.527971] ? vm_insert_page+0x7c0/0x7c0 [ 1194.532096] ? __might_fault+0x177/0x1b0 [ 1194.536140] ? _copy_to_user+0x82/0xd0 [ 1194.540035] handle_mm_fault+0x391/0x860 [ 1194.544079] __do_page_fault+0x549/0xad0 [ 1194.548124] ? spurious_fault+0x640/0x640 [ 1194.552254] ? do_page_fault+0x60/0x500 [ 1194.556209] ? page_fault+0x2f/0x50 [ 1194.559816] page_fault+0x45/0x50 [ 1194.563250] RIP: 9f179978:0x7f34624ab234 [ 1194.567302] RSP: 61f25080:000000007fff0000 EFLAGS: 7ffc9f179970 [ 1194.691570] Mem-Info: [ 1194.702828] active_anon:211104 inactive_anon:8750 isolated_anon:0 [ 1194.702828] active_file:34 inactive_file:0 isolated_file:0 [ 1194.702828] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1194.702828] slab_reclaimable:16050 slab_unreclaimable:128748 [ 1194.702828] mapped:43538 shmem:8976 pagetables:35608 bounce:0 [ 1194.702828] free:25092 free_pcp:0 free_cma:0 [ 1194.791175] Node 0 active_anon:836536kB inactive_anon:29920kB active_file:116kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:151576kB dirty:0kB writeback:0kB shmem:30824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1194.939078] Node 1 active_anon:7880kB inactive_anon:5080kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22572kB dirty:0kB writeback:0kB shmem:5080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1195.087750] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1195.248565] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1195.253642] Node 0 DMA32 free:35796kB min:36200kB low:45248kB high:54296kB active_anon:836532kB inactive_anon:29920kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50112kB pagetables:133088kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1195.285784] lowmem_reserve[]: 0 0 0 0 0 [ 1195.289795] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1195.335025] lowmem_reserve[]: 0 0 0 0 0 [ 1195.339049] Node 1 Normal free:53576kB min:53696kB low:67120kB high:80544kB active_anon:7880kB inactive_anon:5080kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3264kB pagetables:9344kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1195.394194] lowmem_reserve[]: 0 0 0 0 0 [ 1195.398225] Node 0 DMA: 4*4kB (ME) 4*8kB (UME) 2*16kB (ME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1195.417946] Node 0 DMA32: 5090*4kB (ME) 1296*8kB (UME) 279*16kB (UME) 19*32kB (UM) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35928kB [ 1195.449323] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1195.527498] Node 1 Normal: 811*4kB (UM) 456*8kB (M) 229*16kB (UM) 689*32kB (UM) 116*64kB (UM) 27*128kB (UM) 12*256kB (UM) 6*512kB (M) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 53724kB [ 1195.547265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1195.556187] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1195.568187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1195.577624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1195.589768] 9010 total pagecache pages [ 1195.593689] 0 pages in swap cache [ 1195.597217] Swap cache stats: add 0, delete 0, find 0/0 [ 1195.602573] Free swap = 0kB [ 1195.609193] Total swap = 0kB [ 1195.612222] 2097051 pages RAM [ 1195.615416] 0 pages HighMem/MovableOnly [ 1195.619420] 363840 pages reserved [ 1195.622888] 0 pages cma reserved [ 1195.624042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1195.629651] Out of memory (oom_kill_allocating_task): Kill process 9282 ((journald)) score 0 or sacrifice child [ 1195.633036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.643295] Killed process 9282 ((journald)) total-vm:205032kB, anon-rss:2036kB, file-rss:0kB, shmem-rss:0kB [ 1195.661310] oom_reaper: reaped process 9282 ((journald)), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1195.682084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1195.690024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.698296] device bridge_slave_1 left promiscuous mode [ 1195.703809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.711081] device bridge_slave_0 left promiscuous mode [ 1195.716602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.725103] device veth1_macvtap left promiscuous mode [ 1195.730396] device veth0_macvtap left promiscuous mode [ 1195.735834] device veth1_vlan left promiscuous mode [ 1195.740842] device veth0_vlan left promiscuous mode [ 1195.765818] rs:main Q:Reg invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1195.830766] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1195.870176] CPU: 0 PID: 8919 Comm: rs:main Q:Reg Not tainted 4.14.224-syzkaller #0 [ 1195.877920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1195.887273] Call Trace: [ 1195.889863] dump_stack+0x1b2/0x281 [ 1195.893487] dump_header+0x178/0x82f [ 1195.897202] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1195.902300] ? ___ratelimit+0x2cd/0x530 [ 1195.906271] oom_kill_process.cold+0x10/0xb18 [ 1195.910767] out_of_memory+0xe3e/0x1190 [ 1195.914751] ? oom_killer_disable+0x1c0/0x1c0 [ 1195.919254] ? mutex_trylock+0x152/0x1a0 [ 1195.923321] __alloc_pages_nodemask+0x23e1/0x2720 [ 1195.928185] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1195.933037] alloc_pages_current+0x155/0x260 [ 1195.937448] filemap_fault+0xea3/0x1980 [ 1195.941425] ext4_filemap_fault+0x84/0xb0 [ 1195.945571] __do_fault+0xfa/0x380 [ 1195.949108] __handle_mm_fault+0x2497/0x4620 [ 1195.953511] ? vm_insert_page+0x7c0/0x7c0 [ 1195.957657] ? lock_downgrade+0x740/0x740 [ 1195.961799] ? vfs_write+0x35d/0x4d0 [ 1195.965523] handle_mm_fault+0x391/0x860 [ 1195.969581] __do_page_fault+0x549/0xad0 [ 1195.973639] ? spurious_fault+0x640/0x640 [ 1195.977778] ? do_page_fault+0x60/0x500 [ 1195.981745] ? page_fault+0x2f/0x50 [ 1195.985364] page_fault+0x45/0x50 [ 1195.988807] RIP: 8003a90:0x42 [ 1195.991899] RSP: 0042:00007f20080321e0 EFLAGS: 00000042 [ 1195.995230] Mem-Info: [ 1196.003007] active_anon:211024 inactive_anon:8750 isolated_anon:0 [ 1196.003007] active_file:43 inactive_file:0 isolated_file:0 [ 1196.003007] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1196.003007] slab_reclaimable:16035 slab_unreclaimable:128402 [ 1196.003007] mapped:43521 shmem:8976 pagetables:35576 bounce:0 [ 1196.003007] free:25081 free_pcp:60 free_cma:0 [ 1196.038241] Node 0 active_anon:836216kB inactive_anon:29920kB active_file:104kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:151512kB dirty:0kB writeback:0kB shmem:30824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1196.068272] Node 1 active_anon:7880kB inactive_anon:5080kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22572kB dirty:0kB writeback:0kB shmem:5080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1196.097177] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1196.126032] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1196.131089] Node 0 DMA32 free:35676kB min:36200kB low:45248kB high:54296kB active_anon:836212kB inactive_anon:29920kB active_file:92kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50080kB pagetables:132960kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1196.162257] lowmem_reserve[]: 0 0 0 0 0 [ 1196.166296] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1196.193882] lowmem_reserve[]: 0 0 0 0 0 [ 1196.197919] Node 1 Normal free:53592kB min:53696kB low:67120kB high:80544kB active_anon:7880kB inactive_anon:5080kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3264kB pagetables:9344kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1196.228623] lowmem_reserve[]: 0 0 0 0 0 [ 1196.232623] Node 0 DMA: 4*4kB (ME) 4*8kB (UME) 2*16kB (ME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1196.252722] Node 0 DMA32: 5103*4kB (UME) 1306*8kB (UME) 271*16kB (UME) 15*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35676kB [ 1196.278548] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1196.293444] Node 1 Normal: 810*4kB (M) 456*8kB (M) 229*16kB (UM) 685*32kB (UM) 116*64kB (UM) 27*128kB (UM) 12*256kB (UM) 6*512kB (M) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 53592kB [ 1196.315795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1196.328676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1196.339410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1196.352334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1196.362951] 9010 total pagecache pages [ 1196.370960] 0 pages in swap cache [ 1196.376439] Swap cache stats: add 0, delete 0, find 0/0 [ 1196.381798] Free swap = 0kB [ 1196.388814] Total swap = 0kB [ 1196.391832] 2097051 pages RAM [ 1196.397563] 0 pages HighMem/MovableOnly [ 1196.401534] 363840 pages reserved [ 1196.409015] 0 pages cma reserved [ 1196.412379] Out of memory (oom_kill_allocating_task): Kill process 8919 (rs:main Q:Reg) score 0 or sacrifice child [ 1196.422925] Killed process 8865 (rsyslogd) total-vm:254332kB, anon-rss:800kB, file-rss:0kB, shmem-rss:0kB [ 1196.436221] oom_reaper: reaped process 8865 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1196.584505] systemd-cgroups invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1196.612627] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 1196.618033] CPU: 0 PID: 9273 Comm: systemd-cgroups Not tainted 4.14.224-syzkaller #0 [ 1196.625901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1196.635244] Call Trace: [ 1196.637829] dump_stack+0x1b2/0x281 [ 1196.641451] dump_header+0x178/0x82f [ 1196.645156] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1196.650249] ? ___ratelimit+0x2cd/0x530 [ 1196.654233] oom_kill_process.cold+0x10/0xb18 [ 1196.658733] out_of_memory+0xe3e/0x1190 [ 1196.662708] ? oom_killer_disable+0x1c0/0x1c0 [ 1196.667197] ? mutex_trylock+0x152/0x1a0 [ 1196.671255] __alloc_pages_nodemask+0x23e1/0x2720 [ 1196.676102] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1196.680952] alloc_pages_current+0x155/0x260 [ 1196.685354] filemap_fault+0xea3/0x1980 [ 1196.689328] ext4_filemap_fault+0x84/0xb0 [ 1196.693467] __do_fault+0xfa/0x380 [ 1196.697001] __handle_mm_fault+0x2497/0x4620 [ 1196.701404] ? vm_insert_page+0x7c0/0x7c0 [ 1196.705652] ? vm_mmap_pgoff+0x168/0x1a0 [ 1196.709702] ? vm_mmap_pgoff+0xcb/0x1a0 [ 1196.713679] handle_mm_fault+0x391/0x860 [ 1196.717735] __do_page_fault+0x549/0xad0 [ 1196.721795] ? spurious_fault+0x640/0x640 [ 1196.725933] ? do_page_fault+0x60/0x500 [ 1196.729898] ? page_fault+0x2f/0x50 [ 1196.733518] page_fault+0x45/0x50 [ 1196.736962] RIP: 0000:0x7f105474a040 [ 1196.740666] RSP: 53b27604:0000000000000000 EFLAGS: 7f1054747ed0 [ 1196.741511] Mem-Info: [ 1196.775296] active_anon:210794 inactive_anon:8750 isolated_anon:0 [ 1196.775296] active_file:17 inactive_file:13 isolated_file:0 [ 1196.775296] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1196.775296] slab_reclaimable:16035 slab_unreclaimable:128403 [ 1196.775296] mapped:43521 shmem:8976 pagetables:35545 bounce:0 [ 1196.775296] free:25140 free_pcp:30 free_cma:0 [ 1196.814418] Node 0 active_anon:835392kB inactive_anon:29920kB active_file:68kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:151512kB dirty:0kB writeback:0kB shmem:30824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1196.879845] Node 1 active_anon:7784kB inactive_anon:5080kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22572kB dirty:0kB writeback:0kB shmem:5080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1196.995797] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1197.047652] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1197.054051] Node 0 DMA32 free:36224kB min:36200kB low:45248kB high:54296kB active_anon:835388kB inactive_anon:29920kB active_file:104kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:49984kB pagetables:132856kB bounce:0kB free_pcp:156kB local_pcp:36kB free_cma:0kB [ 1197.083689] lowmem_reserve[]: 0 0 0 0 0 [ 1197.087729] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1197.113341] lowmem_reserve[]: 0 0 0 0 0 [ 1197.117430] Node 1 Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:7784kB inactive_anon:5080kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3264kB pagetables:9324kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1197.146021] lowmem_reserve[]: 0 0 0 0 0 [ 1197.150027] Node 0 DMA: 4*4kB (ME) 4*8kB (UME) 2*16kB (ME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 1197.166149] Node 0 DMA32: 5126*4kB (UME) 1314*8kB (UME) 269*16kB (UME) 14*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35768kB [ 1197.180576] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1197.191329] Node 1 Normal: 805*4kB (UM) 447*8kB (M) 225*16kB (UM) 681*32kB (UM) 114*64kB (UM) 29*128kB (UM) 13*256kB (UM) 6*512kB (M) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 53692kB [ 1197.207614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1197.216484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1197.225082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1197.234033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1197.242589] 9010 total pagecache pages [ 1197.246506] 0 pages in swap cache [ 1197.249945] Swap cache stats: add 0, delete 0, find 0/0 [ 1197.255333] Free swap = 0kB [ 1197.258336] Total swap = 0kB [ 1197.261340] 2097051 pages RAM [ 1197.264461] 0 pages HighMem/MovableOnly [ 1197.268431] 363840 pages reserved [ 1197.271868] 0 pages cma reserved [ 1197.275257] Out of memory (oom_kill_allocating_task): Kill process 9273 (systemd-cgroups) score 0 or sacrifice child [ 1197.286056] Killed process 9273 (systemd-cgroups) total-vm:31392kB, anon-rss:148kB, file-rss:0kB, shmem-rss:0kB [ 1197.297259] oom_reaper: reaped process 9273 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1197.309252] systemd-cgroups (9273) used greatest stack depth: 24752 bytes left [ 1197.366157] oom_reaper: reaped process 9242 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1197.501004] kworker/u4:4 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 1197.517633] kworker/u4:4 cpuset=/ mems_allowed=0-1 [ 1197.522924] CPU: 1 PID: 14883 Comm: kworker/u4:4 Not tainted 4.14.224-syzkaller #0 [ 1197.530619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1197.539972] Workqueue: netns cleanup_net [ 1197.544025] Call Trace: [ 1197.546608] dump_stack+0x1b2/0x281 [ 1197.550226] dump_header+0x178/0x82f [ 1197.553927] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1197.559023] ? ___ratelimit+0x2cd/0x530 [ 1197.563091] oom_kill_process.cold+0x10/0xb18 [ 1197.567671] ? lock_downgrade+0x740/0x740 [ 1197.571858] out_of_memory+0x2dc/0x1190 [ 1197.575824] ? oom_killer_disable+0x1c0/0x1c0 [ 1197.580320] ? mutex_trylock+0x152/0x1a0 [ 1197.584378] __alloc_pages_nodemask+0x23e1/0x2720 [ 1197.589214] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1197.594147] ? process_one_work+0x793/0x14a0 [ 1197.598544] ? worker_thread+0x5cc/0xff0 [ 1197.602604] ? mark_held_locks+0xa6/0xf0 [ 1197.606648] ? cache_grow_begin+0x41/0x630 [ 1197.610888] cache_grow_begin+0x91/0x630 [ 1197.614936] ? cache_grow_begin+0x91/0x630 [ 1197.619160] fallback_alloc+0x207/0x2c0 [ 1197.623123] kmem_cache_alloc_node_trace+0xed/0x400 [ 1197.628130] __kmalloc_node_track_caller+0x38/0x70 [ 1197.633049] __alloc_skb+0x96/0x510 [ 1197.636664] rtmsg_ifinfo_build_skb+0x65/0x130 [ 1197.641239] rtmsg_ifinfo+0x68/0x100 [ 1197.644948] dev_close_many+0x2bf/0x5f0 [ 1197.648916] ? kernfs_put.part.0+0x1d2/0x490 [ 1197.653305] ? __dev_close_many+0x270/0x270 [ 1197.657610] ? kernfs_put.part.0+0x1d2/0x490 [ 1197.662011] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1197.667023] rollback_registered_many+0x399/0xba0 [ 1197.671961] ? netdev_state_change+0xf0/0xf0 [ 1197.676385] ? sysfs_remove_group+0xbe/0x100 [ 1197.680787] unregister_netdevice_many.part.0+0x18/0x2e0 [ 1197.686232] default_device_exit_batch+0x2d8/0x380 [ 1197.691146] ? unregister_netdevice_many+0x50/0x50 [ 1197.696066] ? do_wait_intr_irq+0x270/0x270 [ 1197.700380] ? __local_bh_enable_ip+0xc1/0x170 [ 1197.704955] ? unregister_netdevice_many+0x50/0x50 [ 1197.709866] ? dev_change_net_namespace+0xc90/0xc90 [ 1197.714864] ops_exit_list+0xf9/0x150 [ 1197.718656] cleanup_net+0x3b3/0x840 [ 1197.722367] ? net_drop_ns+0x70/0x70 [ 1197.726070] ? lock_acquire+0x170/0x3f0 [ 1197.730034] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1197.735471] process_one_work+0x793/0x14a0 [ 1197.739704] ? work_busy+0x320/0x320 [ 1197.743400] ? worker_thread+0x158/0xff0 [ 1197.747448] ? _raw_spin_unlock_irq+0x24/0x80 [ 1197.751930] worker_thread+0x5cc/0xff0 [ 1197.755809] ? rescuer_thread+0xc80/0xc80 [ 1197.759946] kthread+0x30d/0x420 [ 1197.763298] ? kthread_create_on_node+0xd0/0xd0 [ 1197.767952] ret_from_fork+0x24/0x30 [ 1197.774107] Mem-Info: [ 1197.776525] active_anon:210717 inactive_anon:8750 isolated_anon:0 [ 1197.776525] active_file:33 inactive_file:0 isolated_file:0 [ 1197.776525] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1197.776525] slab_reclaimable:16023 slab_unreclaimable:128397 [ 1197.776525] mapped:34817 shmem:8976 pagetables:35528 bounce:0 [ 1197.776525] free:13959 free_pcp:30 free_cma:0 [ 1197.809948] Node 0 active_anon:835208kB inactive_anon:29920kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:30824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1197.839791] Node 1 active_anon:7660kB inactive_anon:5080kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:5080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1197.868359] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1197.900350] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1197.903984] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1197.906011] Node 0 DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:835204kB inactive_anon:29920kB active_file:124kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:49984kB pagetables:132796kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1197.930202] syz-executor.0 cpuset= [ 1197.957530] lowmem_reserve[]: 0 0 0 0 0 [ 1197.963335] / [ 1197.968207] Node 0 [ 1197.968232] mems_allowed=0-1 [ 1197.969944] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1197.972164] CPU: 0 PID: 9242 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1197.975262] lowmem_reserve[]: [ 1198.000217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1198.000220] Call Trace: [ 1198.000240] dump_stack+0x1b2/0x281 [ 1198.000253] warn_alloc.cold+0x96/0x1cc [ 1198.008039] 0 [ 1198.011112] ? zone_watermark_ok_safe+0x220/0x220 [ 1198.020470] 0 [ 1198.023024] ? usleep_range+0x130/0x130 [ 1198.026637] 0 [ 1198.030573] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1198.030585] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1198.032364] 0 [ 1198.037188] ? run_timer_softirq+0x5a0/0x5a0 [ 1198.037207] __alloc_pages_nodemask+0x2127/0x2720 [ 1198.038982] 0 [ 1198.042939] ? lock_acquire+0x170/0x3f0 [ 1198.049805] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1198.054805] Node 1 [ 1198.056595] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1198.060988] Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:7660kB inactive_anon:5080kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3232kB pagetables:9316kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1198.065808] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1198.065825] ? alloc_pages_current+0x37/0x260 [ 1198.067599] lowmem_reserve[]: [ 1198.071670] alloc_pages_current+0x155/0x260 [ 1198.076664] 0 [ 1198.078739] ion_page_pool_alloc+0x118/0x1b0 [ 1198.083212] 0 [ 1198.111167] ion_system_heap_allocate+0x133/0x8c0 [ 1198.111177] ? ion_alloc+0x187/0x810 [ 1198.111186] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1198.111194] ? ion_system_contig_heap_create+0x130/0x130 [ 1198.111207] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1198.116677] 0 [ 1198.121138] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1198.124230] 0 [ 1198.128604] ion_alloc+0x204/0x810 [ 1198.130394] 0 [ 1198.134788] ? ion_dma_buf_release+0x40/0x40 [ 1198.134801] ? __might_fault+0x177/0x1b0 [ 1198.141397] ion_ioctl+0xea/0x1f0 [ 1198.145099] Node 0 [ 1198.150515] ? ion_query_heaps+0x360/0x360 [ 1198.155951] DMA: [ 1198.160945] ? ion_query_heaps+0x360/0x360 [ 1198.162785] 5*4kB [ 1198.167552] do_vfs_ioctl+0x75a/0xff0 [ 1198.167564] ? ioctl_preallocate+0x1a0/0x1a0 [ 1198.167574] ? lock_downgrade+0x740/0x740 [ 1198.169354] (UME) [ 1198.172875] ? __fget+0x225/0x360 [ 1198.174675] 3*8kB [ 1198.179046] ? do_vfs_ioctl+0xff0/0xff0 [ 1198.183175] (ME) [ 1198.186607] ? security_file_ioctl+0x83/0xb0 [ 1198.186617] SyS_ioctl+0x7f/0xb0 [ 1198.186626] ? do_vfs_ioctl+0xff0/0xff0 [ 1198.188836] 3*16kB [ 1198.193050] do_syscall_64+0x1d5/0x640 [ 1198.195103] (UME) [ 1198.199309] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1198.201423] 2*32kB [ 1198.205201] RIP: 0033:0x465f69 [ 1198.205206] RSP: 002b:00007f2b831bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1198.205216] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1198.205223] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1198.209604] (UM) [ 1198.213724] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1198.213731] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1198.215883] 3*64kB [ 1198.219297] R13: 00007ffe5888fc4f R14: 00007f2b831bd300 R15: 0000000000022000 [ 1198.226943] warn_alloc_show_mem: 1 callbacks suppressed [ 1198.226946] Mem-Info: [ 1198.238006] (UME) [ 1198.243125] active_anon:210717 inactive_anon:8750 isolated_anon:0 [ 1198.243125] active_file:18 inactive_file:16 isolated_file:0 [ 1198.243125] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1198.243125] slab_reclaimable:16023 slab_unreclaimable:128397 [ 1198.243125] mapped:34817 shmem:8976 pagetables:35528 bounce:0 [ 1198.243125] free:13969 free_pcp:30 free_cma:0 [ 1198.251082] 3*128kB [ 1198.259125] Node 0 active_anon:835208kB inactive_anon:29920kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:30824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1198.274982] (UME) [ 1198.287591] Node 1 active_anon:7660kB inactive_anon:5080kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:5080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1198.302011] 2*256kB [ 1198.310593] Node 0 [ 1198.319178] (ME) [ 1198.357844] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1198.388004] 3*512kB [ 1198.417083] lowmem_reserve[]: [ 1198.450126] (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 1198.454798] 0 2717 2718 2718 2718 [ 1198.461420] Node 0 [ 1198.463191] Node 0 [ 1198.463198] DMA32: 3022*4kB (UME) 554*8kB (UME) 98*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18088kB [ 1198.472120] DMA32 free:18088kB min:36200kB low:45248kB high:54296kB active_anon:835204kB inactive_anon:29920kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:49984kB pagetables:132796kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1198.487003] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1198.517289] lowmem_reserve[]: 0 0 0 0 0 [ 1198.523321] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1198.526308] Node 1 Normal: 746*4kB (UM) 425*8kB (UM) 211*16kB (UM) 81*32kB (UM) 52*64kB (UM) 27*128kB (UM) 10*256kB (M) 8*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 26816kB [ 1198.558572] lowmem_reserve[]: [ 1198.581251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1198.582449] 0 [ 1198.584465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1198.598980] 0 0 0 0 [ 1198.609366] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:7660kB inactive_anon:5080kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3232kB pagetables:9316kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1198.611127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1198.646918] lowmem_reserve[]: 0 0 0 0 0 [ 1198.650917] Node 0 DMA: 5*4kB (UME) 3*8kB (ME) 3*16kB (UME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 1198.653876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1198.675556] Node 0 DMA32: 3022*4kB (UME) 554*8kB (UME) 98*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18088kB [ 1198.682330] 9010 total pagecache pages [ 1198.692655] 0 pages in swap cache [ 1198.693636] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1198.703806] Swap cache stats: add 0, delete 0, find 0/0 [ 1198.720116] Node 1 Normal: 746*4kB (UM) 425*8kB (UM) 211*16kB (UM) 81*32kB (UM) 52*64kB (UM) 27*128kB (UM) 10*256kB (M) 8*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 26816kB [ 1198.723982] Free swap = 0kB [ 1198.738774] Total swap = 0kB [ 1198.741939] 2097051 pages RAM [ 1198.744225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1198.752973] 0 pages HighMem/MovableOnly [ 1198.757869] 363840 pages reserved [ 1198.760647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1198.761309] 0 pages cma reserved [ 1198.771686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1198.780465] Out of memory: Kill process 20378 (syz-executor.2) score 1005 or sacrifice child [ 1198.791238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1198.798342] Killed process 20378 (syz-executor.2) total-vm:93252kB, anon-rss:2196kB, file-rss:34628kB, shmem-rss:0kB [ 1198.820348] 9010 total pagecache pages [ 1198.824334] 0 pages in swap cache [ 1198.827811] Swap cache stats: add 0, delete 0, find 0/0 [ 1198.833149] Free swap = 0kB [ 1198.838261] Total swap = 0kB [ 1198.841365] 2097051 pages RAM [ 1198.855926] 0 pages HighMem/MovableOnly [ 1198.859910] 363840 pages reserved [ 1198.863470] 0 pages cma reserved [ 1198.863745] oom_reaper: reaped process 20378 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1199.067305] device hsr_slave_1 left promiscuous mode [ 1199.102110] device hsr_slave_0 left promiscuous mode [ 1199.141832] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1199.142291] team0 (unregistering): Port device team_slave_1 removed [ 1199.188356] team0 (unregistering): Port device team_slave_0 removed [ 1199.197188] systemd[1]: rsyslog.service: Unit entered failed state. [ 1199.211602] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1199.223837] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1199.264188] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1199.269207] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1199.328780] bond0 (unregistering): Released all slaves [ 1199.333445] systemd[1]: Failed to start Journal Service. [ 1199.344902] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1199.365157] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1199.395993] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1199.426864] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1199.444786] systemd[1]: Stopped Journal Service. [ 1199.722405] oom_reaper: reaped process 9237 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1199.811099] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1199.833816] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1199.838984] CPU: 1 PID: 9242 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1199.846767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1199.856110] Call Trace: [ 1199.858696] dump_stack+0x1b2/0x281 [ 1199.862316] warn_alloc.cold+0x96/0x1cc [ 1199.866283] ? zone_watermark_ok_safe+0x220/0x220 [ 1199.871145] __alloc_pages_nodemask+0x2127/0x2720 [ 1199.875988] ? lock_acquire+0x170/0x3f0 [ 1199.879963] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1199.884823] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1199.890279] ? __mutex_unlock_slowpath+0x75/0x770 [ 1199.895128] alloc_pages_current+0x155/0x260 [ 1199.899658] ion_page_pool_alloc+0x118/0x1b0 [ 1199.904075] ion_system_heap_allocate+0x133/0x8c0 [ 1199.908914] ? _raw_spin_unlock+0x29/0x40 [ 1199.913057] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1199.917986] ? ion_system_contig_heap_create+0x130/0x130 [ 1199.923433] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1199.928442] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1199.933301] ion_alloc+0x27a/0x810 [ 1199.936839] ? ion_dma_buf_release+0x40/0x40 [ 1199.941244] ? __might_fault+0x177/0x1b0 [ 1199.945297] ion_ioctl+0xea/0x1f0 [ 1199.948740] ? ion_query_heaps+0x360/0x360 [ 1199.952967] ? ion_query_heaps+0x360/0x360 [ 1199.957204] do_vfs_ioctl+0x75a/0xff0 [ 1199.961000] ? ioctl_preallocate+0x1a0/0x1a0 [ 1199.965399] ? lock_downgrade+0x740/0x740 [ 1199.969542] ? __fget+0x225/0x360 [ 1199.972984] ? do_vfs_ioctl+0xff0/0xff0 [ 1199.976953] ? security_file_ioctl+0x83/0xb0 [ 1199.981351] SyS_ioctl+0x7f/0xb0 [ 1199.984706] ? do_vfs_ioctl+0xff0/0xff0 [ 1199.988690] do_syscall_64+0x1d5/0x640 [ 1199.992577] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1199.997758] RIP: 0033:0x465f69 [ 1200.000939] RSP: 002b:00007f2b831bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1200.008637] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1200.015894] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1200.023589] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1200.030849] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1200.038119] R13: 00007ffe5888fc4f R14: 00007f2b831bd300 R15: 0000000000022000 [ 1200.052509] Mem-Info: [ 1200.060199] active_anon:210350 inactive_anon:8750 isolated_anon:0 [ 1200.060199] active_file:17 inactive_file:91 isolated_file:0 [ 1200.060199] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1200.060199] slab_reclaimable:16020 slab_unreclaimable:127241 [ 1200.060199] mapped:26113 shmem:8976 pagetables:35538 bounce:0 [ 1200.060199] free:19725 free_pcp:304 free_cma:0 [ 1200.105728] Node 0 active_anon:832948kB inactive_anon:29920kB active_file:228kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104552kB dirty:0kB writeback:0kB shmem:30824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 700416kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1200.149811] Node 1 active_anon:8352kB inactive_anon:5080kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:5080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1200.181740] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1200.213966] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1200.220771] Node 0 DMA32 free:51112kB min:36200kB low:45248kB high:54296kB active_anon:832932kB inactive_anon:29920kB active_file:532kB inactive_file:1592kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:49920kB pagetables:132676kB bounce:0kB free_pcp:948kB local_pcp:304kB free_cma:0kB [ 1200.255539] lowmem_reserve[]: 0 0 0 0 0 [ 1200.260793] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1200.292623] lowmem_reserve[]: 0 0 0 0 0 [ 1200.298013] Node 1 Normal free:26700kB min:53696kB low:67120kB high:80544kB active_anon:8352kB inactive_anon:5080kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3200kB pagetables:9324kB bounce:0kB free_pcp:524kB local_pcp:388kB free_cma:0kB [ 1200.343486] lowmem_reserve[]: 0 0 0 0 0 [ 1200.360531] Node 0 DMA: 8*4kB (UME) 4*8kB (UME) 3*16kB (UME) 1*32kB (M) 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11024kB [ 1200.387753] Node 0 DMA32: 8286*4kB (UME) 2698*8kB (UME) 185*16kB (UME) 25*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58488kB [ 1200.407482] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1200.419518] Node 1 Normal: 521*4kB (M) 409*8kB (UM) 202*16kB (UM) 81*32kB (UM) 52*64kB (UM) 26*128kB (UM) 11*256kB (M) 12*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26796kB [ 1200.439890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1200.479840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1200.490165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1200.522232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1200.555696] 11237 total pagecache pages [ 1200.559744] 0 pages in swap cache [ 1200.563200] Swap cache stats: add 0, delete 0, find 0/0 [ 1200.569958] Free swap = 0kB [ 1200.572983] Total swap = 0kB [ 1200.577897] 2097051 pages RAM [ 1200.581014] 0 pages HighMem/MovableOnly [ 1200.586265] 363840 pages reserved [ 1200.589721] 0 pages cma reserved [ 1201.100420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1201.119519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.150572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1201.157411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.173257] device bridge_slave_1 left promiscuous mode [ 1201.189526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.198594] device bridge_slave_0 left promiscuous mode [ 1201.207260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.217089] device veth1_macvtap left promiscuous mode [ 1201.223295] device veth0_macvtap left promiscuous mode [ 1201.233226] device veth1_vlan left promiscuous mode [ 1201.250401] device veth0_vlan left promiscuous mode [ 1201.421352] device hsr_slave_1 left promiscuous mode [ 1201.434440] device hsr_slave_0 left promiscuous mode [ 1201.454591] team0 (unregistering): Port device team_slave_1 removed [ 1201.469336] team0 (unregistering): Port device team_slave_0 removed [ 1201.486288] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1201.507308] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1201.585369] bond0 (unregistering): Released all slaves [ 1202.092645] systemd-journald[9308]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 10:38:21 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:38:21 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:21 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:21 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:38:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:38:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) 10:38:21 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35, 0x1}) 10:38:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) 10:38:21 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000300)) 10:38:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:38:21 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000300)) 10:38:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) 10:38:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1203.276122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.282880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.291978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1203.299755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.308228] device bridge_slave_1 left promiscuous mode [ 1203.314345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.321777] device bridge_slave_0 left promiscuous mode [ 1203.328230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.337933] device veth1_macvtap left promiscuous mode [ 1203.343263] device veth0_macvtap left promiscuous mode [ 1203.349420] device veth1_vlan left promiscuous mode [ 1203.355173] device veth0_vlan left promiscuous mode [ 1203.465358] device hsr_slave_1 left promiscuous mode [ 1203.476618] device hsr_slave_0 left promiscuous mode [ 1203.490761] team0 (unregistering): Port device team_slave_1 removed [ 1203.501539] team0 (unregistering): Port device team_slave_0 removed [ 1203.511173] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1203.522171] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1203.556066] bond0 (unregistering): Released all slaves [ 1205.349259] IPVS: ftp: loaded support on port[0] = 21 [ 1205.477533] IPVS: ftp: loaded support on port[0] = 21 [ 1205.527294] chnl_net:caif_netlink_parms(): no params data found [ 1205.569267] IPVS: ftp: loaded support on port[0] = 21 [ 1205.668980] chnl_net:caif_netlink_parms(): no params data found [ 1205.812581] chnl_net:caif_netlink_parms(): no params data found [ 1205.822101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.831145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.838120] device bridge_slave_0 entered promiscuous mode [ 1205.848885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.855725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.862726] device bridge_slave_1 entered promiscuous mode [ 1205.898184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.909330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.916326] device bridge_slave_0 entered promiscuous mode [ 1205.925088] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1205.938291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.945317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.952205] device bridge_slave_1 entered promiscuous mode [ 1205.960111] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1205.993700] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1206.000779] team0: Port device team_slave_0 added [ 1206.007653] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1206.014997] team0: Port device team_slave_1 added [ 1206.021041] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1206.037585] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1206.066029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.072294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.097824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.108835] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1206.118303] team0: Port device team_slave_0 added [ 1206.129938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.139415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.165122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.181209] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1206.189267] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1206.196864] team0: Port device team_slave_1 added [ 1206.201989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.208647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.216070] device bridge_slave_0 entered promiscuous mode [ 1206.222726] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1206.249019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.256206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.263067] device bridge_slave_1 entered promiscuous mode [ 1206.279350] device hsr_slave_0 entered promiscuous mode [ 1206.286125] device hsr_slave_1 entered promiscuous mode [ 1206.298077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.306962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.333435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.343874] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1206.351260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.358351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.384042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.401550] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1206.408532] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1206.417190] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1206.431299] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1206.446389] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1206.487350] device hsr_slave_0 entered promiscuous mode [ 1206.492987] device hsr_slave_1 entered promiscuous mode [ 1206.499645] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1206.507337] team0: Port device team_slave_0 added [ 1206.515698] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1206.523838] team0: Port device team_slave_1 added [ 1206.535014] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1206.555729] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1206.579401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.586175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.611559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.627782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.634242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.659563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.677797] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1206.697602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1206.748689] device hsr_slave_0 entered promiscuous mode [ 1206.754771] device hsr_slave_1 entered promiscuous mode [ 1206.769356] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1206.789859] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1206.821324] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1206.898060] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1206.920041] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1206.945746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.956428] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1206.972778] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1206.982247] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1206.988984] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.996496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1207.003691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1207.017788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1207.028965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.035937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1207.044434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1207.051968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.058389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.068902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1207.077601] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1207.088607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1207.096263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1207.104134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1207.111624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.118002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.127364] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1207.136726] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1207.145957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1207.154023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1207.160854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1207.170010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1207.178148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1207.191431] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1207.198432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.209074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.217153] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1207.226800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1207.234594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1207.242288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1207.250420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1207.258401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1207.266410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1207.277989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1207.286907] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1207.297270] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1207.303650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1207.311435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1207.319915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.326312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.334130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1207.340972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1207.348098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1207.357299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1207.368272] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1207.374594] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.380637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1207.388658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1207.396835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.403222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.411093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1207.418738] Bluetooth: hci0 command 0x0409 tx timeout [ 1207.424621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1207.432130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1207.441177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1207.451249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1207.460400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1207.468094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1207.475734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1207.483511] Bluetooth: hci2 command 0x0409 tx timeout [ 1207.485182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1207.488770] Bluetooth: hci4 command 0x0409 tx timeout [ 1207.502745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1207.512291] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1207.518735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1207.525964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1207.534208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1207.541726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.548119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.555212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1207.563252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1207.575988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1207.586421] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1207.593829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1207.601529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1207.609792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1207.617878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1207.627149] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1207.635160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1207.643803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1207.651624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1207.659941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.666341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.673653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1207.680369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1207.687104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1207.694899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1207.704111] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1207.711694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1207.724458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1207.730840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1207.739797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1207.747893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1207.757159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1207.767852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1207.777066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1207.784474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1207.792284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1207.800983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1207.808764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1207.816798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1207.824686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1207.833551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1207.845921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1207.856668] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1207.862708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1207.872189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1207.879384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1207.887460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1207.895098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1207.902561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1207.919491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1207.929698] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1207.937605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1207.945494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1207.957469] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1207.964335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1207.973658] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1207.986045] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1207.994749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1208.001463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1208.012182] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1208.021029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1208.029047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1208.038436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.048579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.060696] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1208.073858] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1208.081286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1208.091590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1208.145408] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1208.152630] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1208.160480] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1208.170857] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1208.177795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1208.186858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1208.195163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1208.202078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1208.211945] device veth0_vlan entered promiscuous mode [ 1208.228525] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1208.238661] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1208.249570] device veth1_vlan entered promiscuous mode [ 1208.256026] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1208.262459] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1208.270147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1208.278560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1208.291101] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1208.299936] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1208.309638] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1208.317902] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1208.329843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1208.338173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1208.348816] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1208.356349] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1208.364662] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1208.375817] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1208.385501] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1208.394515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1208.402239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1208.412510] device veth0_vlan entered promiscuous mode [ 1208.422209] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1208.432103] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1208.439665] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1208.446563] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1208.452708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1208.460006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1208.467177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1208.474988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1208.486397] device veth1_vlan entered promiscuous mode [ 1208.492184] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1208.501038] device veth0_macvtap entered promiscuous mode [ 1208.508161] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1208.517154] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1208.530723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1208.538187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1208.545478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1208.552785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1208.561128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1208.568727] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1208.577054] device veth0_vlan entered promiscuous mode [ 1208.585990] device veth1_macvtap entered promiscuous mode [ 1208.597422] device veth1_vlan entered promiscuous mode [ 1208.610143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1208.625814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1208.635737] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1208.647909] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1208.656569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1208.666633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.675888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1208.686062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.695234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1208.705953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.716169] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1208.723452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1208.732020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1208.742073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.751329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1208.761093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.770655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1208.780444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.790678] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1208.797679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1208.804935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1208.812670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1208.820897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1208.829010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1208.838189] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1208.847704] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1208.857609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1208.865699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1208.873949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1208.881612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1208.891277] device veth0_macvtap entered promiscuous mode [ 1208.897852] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1208.910662] device veth0_macvtap entered promiscuous mode [ 1208.918010] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1208.928225] device veth1_macvtap entered promiscuous mode [ 1208.935175] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1208.949537] device veth1_macvtap entered promiscuous mode [ 1208.959185] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1208.968119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1208.979483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1208.989872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1208.999600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1209.010055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1209.020249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.029761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1209.039808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.049037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1209.058862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.068079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1209.078114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.088853] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1209.096413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.105308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1209.119323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.128850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1209.138711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.147875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1209.157856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.167264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1209.177045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.186357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1209.196367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.206399] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1209.213682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.220627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1209.228375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1209.236698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1209.244418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1209.251397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1209.259854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1209.268799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1209.276928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1209.285986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1209.296268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.305482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1209.315442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.324850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1209.334656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.343848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1209.353611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.364017] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1209.370895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.380169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1209.390924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.400833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1209.411354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.420580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1209.430350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.439540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1209.449289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.458671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1209.468441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.478479] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1209.486000] Bluetooth: hci0 command 0x041b tx timeout [ 1209.491332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.503003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1209.510724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1209.519492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1209.527629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1209.565785] Bluetooth: hci4 command 0x041b tx timeout [ 1209.571037] Bluetooth: hci2 command 0x041b tx timeout 10:38:27 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:28 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x35, 0x1}) 10:38:28 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000300)) 10:38:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) 10:38:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:38:28 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:28 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x35, 0x1}) 10:38:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x35, 0x1}) 10:38:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)) 10:38:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x35, 0x1}) 10:38:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x35, 0x1}) 10:38:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)) 10:38:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x35, 0x1}) 10:38:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)) 10:38:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x0, 0x1}) 10:38:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x0, 0x1}) 10:38:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:38:28 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x0, 0x1}) 10:38:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x0, 0x1}) 10:38:29 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:38:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x0, 0x1}) 10:38:29 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:29 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:38:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35}) 10:38:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x0, 0x1}) 10:38:29 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:29 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) [ 1211.563163] Bluetooth: hci0 command 0x040f tx timeout [ 1211.642773] Bluetooth: hci2 command 0x040f tx timeout [ 1211.648672] Bluetooth: hci4 command 0x040f tx timeout 10:38:30 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:38:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4008, 0x35}) 10:38:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:38:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:38:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:38:30 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:38:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:38:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x3) 10:38:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:38:30 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:38:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:38:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) [ 1213.551964] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1213.565642] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1213.570397] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1213.583104] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1213.586249] CPU: 1 PID: 10383 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 1213.596091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.605423] Call Trace: [ 1213.607998] dump_stack+0x1b2/0x281 [ 1213.611610] warn_alloc.cold+0x96/0x1cc [ 1213.615570] ? zone_watermark_ok_safe+0x220/0x220 [ 1213.620404] __alloc_pages_nodemask+0x2127/0x2720 [ 1213.625365] ? lock_acquire+0x170/0x3f0 [ 1213.629337] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1213.634172] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1213.639607] ? __mutex_unlock_slowpath+0x75/0x770 [ 1213.644433] alloc_pages_current+0x155/0x260 [ 1213.648839] ion_page_pool_alloc+0x118/0x1b0 [ 1213.653245] ion_system_heap_allocate+0x133/0x8c0 [ 1213.658079] ? ion_alloc+0x187/0x810 [ 1213.661783] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1213.667221] ? ion_system_contig_heap_create+0x130/0x130 [ 1213.672664] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1213.677662] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1213.682490] ion_alloc+0x204/0x810 [ 1213.686016] ? ion_dma_buf_release+0x40/0x40 [ 1213.690403] ? __might_fault+0x177/0x1b0 [ 1213.694448] ion_ioctl+0xea/0x1f0 [ 1213.697883] ? ion_query_heaps+0x360/0x360 [ 1213.702102] ? ion_query_heaps+0x360/0x360 [ 1213.706352] do_vfs_ioctl+0x75a/0xff0 [ 1213.710133] ? ioctl_preallocate+0x1a0/0x1a0 [ 1213.714520] ? lock_downgrade+0x740/0x740 [ 1213.718654] ? __fget+0x225/0x360 [ 1213.722088] ? do_vfs_ioctl+0xff0/0xff0 [ 1213.726047] ? security_file_ioctl+0x83/0xb0 [ 1213.730438] SyS_ioctl+0x7f/0xb0 [ 1213.733785] ? do_vfs_ioctl+0xff0/0xff0 [ 1213.737745] do_syscall_64+0x1d5/0x640 [ 1213.741641] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1213.746812] RIP: 0033:0x465f69 [ 1213.749996] RSP: 002b:00007f1a3115e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1213.757685] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1213.764937] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1213.772189] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1213.779440] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1213.786692] R13: 00007fff4a017d4f R14: 00007f1a3115e300 R15: 0000000000022000 [ 1213.793957] CPU: 0 PID: 10350 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1213.801847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.808122] Mem-Info: [ 1213.811197] Call Trace: [ 1213.811217] dump_stack+0x1b2/0x281 [ 1213.811230] warn_alloc.cold+0x96/0x1cc [ 1213.817243] active_anon:211113 inactive_anon:10786 isolated_anon:23 [ 1213.817243] active_file:1569 inactive_file:3241 isolated_file:2 [ 1213.817243] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1213.817243] slab_reclaimable:15397 slab_unreclaimable:128939 [ 1213.817243] mapped:55557 shmem:11027 pagetables:35685 bounce:0 [ 1213.817243] free:130719 free_pcp:39 free_cma:0 [ 1213.819817] ? zone_watermark_ok_safe+0x220/0x220 [ 1213.819838] __alloc_pages_nodemask+0x2127/0x2720 [ 1213.819849] ? check_preemption_disabled+0x35/0x240 [ 1213.819861] ? lock_acquire+0x170/0x3f0 [ 1213.819874] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1213.819890] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1213.819902] ? __mutex_unlock_slowpath+0x75/0x770 [ 1213.819914] alloc_pages_current+0x155/0x260 [ 1213.819927] ion_page_pool_alloc+0x118/0x1b0 [ 1213.819937] ion_system_heap_allocate+0x133/0x8c0 [ 1213.824475] Node 0 active_anon:836104kB inactive_anon:29848kB active_file:6252kB inactive_file:13044kB unevictable:0kB isolated(anon):92kB isolated(file):8kB mapped:127632kB dirty:12kB writeback:0kB shmem:30808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1213.857822] ? ion_alloc+0x187/0x810 [ 1213.857834] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1213.857844] ? ion_system_contig_heap_create+0x130/0x130 [ 1213.857853] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1213.857863] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1213.857873] ion_alloc+0x204/0x810 [ 1213.857885] ? ion_dma_buf_release+0x40/0x40 [ 1213.857895] ? __might_fault+0x177/0x1b0 [ 1213.857905] ion_ioctl+0xea/0x1f0 [ 1213.857914] ? ion_query_heaps+0x360/0x360 [ 1213.857925] ? ion_query_heaps+0x360/0x360 [ 1213.857934] do_vfs_ioctl+0x75a/0xff0 [ 1213.857944] ? ioctl_preallocate+0x1a0/0x1a0 [ 1213.857953] ? lock_downgrade+0x740/0x740 [ 1213.857965] ? __fget+0x225/0x360 [ 1213.857973] ? do_vfs_ioctl+0xff0/0xff0 [ 1213.857982] ? security_file_ioctl+0x83/0xb0 [ 1213.857990] SyS_ioctl+0x7f/0xb0 [ 1213.857997] ? do_vfs_ioctl+0xff0/0xff0 [ 1213.858008] do_syscall_64+0x1d5/0x640 [ 1213.858024] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1213.858031] RIP: 0033:0x465f69 [ 1213.858036] RSP: 002b:00007f98092b3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1213.858045] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1213.858050] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1213.858054] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1213.858058] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1213.858062] R13: 00007fff969f075f R14: 00007f98092b3300 R15: 0000000000022000 [ 1213.859274] Bluetooth: hci0 command 0x0419 tx timeout [ 1213.867335] Node 1 active_anon:8348kB inactive_anon:13296kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94596kB dirty:0kB writeback:0kB shmem:13300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1213.868383] Bluetooth: hci4 command 0x0419 tx timeout [ 1213.873154] Node 0 [ 1213.876916] Bluetooth: hci2 command 0x0419 tx timeout [ 1214.122275] DMA free:11100kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1214.148954] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1214.154129] Node 0 DMA32 free:201028kB min:36200kB low:45248kB high:54296kB active_anon:836136kB inactive_anon:29848kB active_file:6324kB inactive_file:14176kB unevictable:0kB writepending:84kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50080kB pagetables:133048kB bounce:0kB free_pcp:332kB local_pcp:160kB free_cma:0kB [ 1214.184512] lowmem_reserve[]: 0 0 0 0 0 [ 1214.188577] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1214.214417] lowmem_reserve[]: 0 0 0 0 0 [ 1214.218486] Node 1 Normal free:70884kB min:53696kB low:67120kB high:80544kB active_anon:8348kB inactive_anon:13296kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3392kB pagetables:9692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1214.247421] lowmem_reserve[]: 0 0 0 0 0 [ 1214.251521] Node 0 DMA: 7*4kB (UME) 8*8kB (UME) 10*16kB (UME) 7*32kB (UM) 2*64kB (ME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11100kB [ 1214.267556] Node 0 DMA32: 1510*4kB (E) 1256*8kB (UME) 271*16kB (UME) 2840*32kB (UME) 3*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 111496kB [ 1214.282205] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1214.293416] Node 1 Normal: 1911*4kB (UM) 1639*8kB (UM) 1087*16kB (U) 960*32kB (U) 12*64kB (U) 8*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 70916kB [ 1214.308478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.317443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1214.326496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.335455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1214.344501] 16033 total pagecache pages [ 1214.348537] 0 pages in swap cache [ 1214.352029] Swap cache stats: add 0, delete 0, find 0/0 [ 1214.357502] Free swap = 0kB [ 1214.360735] Total swap = 0kB [ 1214.364169] 2097051 pages RAM [ 1214.367323] 0 pages HighMem/MovableOnly [ 1214.371349] 363840 pages reserved [ 1214.375087] 0 pages cma reserved [ 1215.729492] oom_reaper: reaped process 10383 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1215.746567] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1215.762195] systemd-journal cpuset=/ mems_allowed=0-1 [ 1215.767453] CPU: 0 PID: 9308 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 1215.775327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1215.784673] Call Trace: [ 1215.787258] dump_stack+0x1b2/0x281 [ 1215.790886] dump_header+0x178/0x82f [ 1215.794596] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1215.799693] ? ___ratelimit+0x2cd/0x530 [ 1215.803668] oom_kill_process.cold+0x10/0xb18 [ 1215.808165] out_of_memory+0xe3e/0x1190 [ 1215.812136] ? oom_killer_disable+0x1c0/0x1c0 [ 1215.816624] ? mutex_trylock+0x152/0x1a0 [ 1215.820680] __alloc_pages_nodemask+0x23e1/0x2720 [ 1215.825529] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1215.830383] alloc_pages_current+0x155/0x260 [ 1215.834794] filemap_fault+0xea3/0x1980 [ 1215.838774] ext4_filemap_fault+0x84/0xb0 [ 1215.842915] __do_fault+0xfa/0x380 [ 1215.846447] __handle_mm_fault+0x2497/0x4620 [ 1215.850849] ? ep_poll+0x1ab/0xa50 [ 1215.854381] ? vm_insert_page+0x7c0/0x7c0 [ 1215.858536] handle_mm_fault+0x391/0x860 [ 1215.862592] __do_page_fault+0x549/0xad0 [ 1215.866647] ? spurious_fault+0x640/0x640 [ 1215.870789] ? do_page_fault+0x60/0x500 [ 1215.874755] ? page_fault+0x2f/0x50 [ 1215.878372] page_fault+0x45/0x50 [ 1215.881818] RIP: 0001:0xffffffffffffffff [ 1215.885867] RSP: 3f8811e0:00007ffc07b06b80 EFLAGS: 7ffc07b06990 [ 1215.890989] Mem-Info: [ 1215.899515] active_anon:211197 inactive_anon:10786 isolated_anon:0 [ 1215.899515] active_file:12 inactive_file:15 isolated_file:0 [ 1215.899515] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1215.899515] slab_reclaimable:15381 slab_unreclaimable:128119 [ 1215.899515] mapped:52685 shmem:11027 pagetables:35686 bounce:0 [ 1215.899515] free:13964 free_pcp:79 free_cma:0 [ 1215.912389] syz-executor.2: [ 1215.937330] Node 0 active_anon:836440kB inactive_anon:29848kB active_file:20kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116088kB dirty:0kB writeback:0kB shmem:30808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1215.945287] page allocation failure: order:0 [ 1215.976790] Node 1 active_anon:8348kB inactive_anon:13296kB active_file:16kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94652kB dirty:0kB writeback:0kB shmem:13300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1215.977855] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1215.981216] Node 0 [ 1216.015463] (null) [ 1216.020000] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1216.023093] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1216.028457] CPU: 1 PID: 10383 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 1216.050652] lowmem_reserve[]: [ 1216.058476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1216.058480] Call Trace: [ 1216.058499] dump_stack+0x1b2/0x281 [ 1216.058513] warn_alloc.cold+0x96/0x1cc [ 1216.061594] 0 [ 1216.070936] ? zone_watermark_ok_safe+0x220/0x220 [ 1216.070947] ? usleep_range+0x130/0x130 [ 1216.070956] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1216.073561] 2717 [ 1216.077153] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1216.081100] 2718 [ 1216.082885] ? run_timer_softirq+0x5a0/0x5a0 [ 1216.082900] __alloc_pages_nodemask+0x2127/0x2720 [ 1216.082915] ? lock_acquire+0x170/0x3f0 [ 1216.082929] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1216.087748] 2718 [ 1216.091707] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1216.096804] 2718 [ 1216.098832] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1216.105867] ? check_preemption_disabled+0x35/0x240 [ 1216.110243] Node 0 [ 1216.115074] alloc_pages_current+0x155/0x260 [ 1216.115089] ion_page_pool_alloc+0x118/0x1b0 [ 1216.119042] DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:836352kB inactive_anon:29848kB active_file:28kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50080kB pagetables:133052kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1216.123859] ion_system_heap_allocate+0x133/0x8c0 [ 1216.123869] ? ion_alloc+0x187/0x810 [ 1216.123879] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1216.125913] lowmem_reserve[]: [ 1216.130390] ? ion_system_contig_heap_create+0x130/0x130 [ 1216.132444] 0 [ 1216.137865] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1216.142874] 0 [ 1216.145106] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1216.149484] 0 [ 1216.153894] ion_alloc+0x204/0x810 [ 1216.153911] ? ion_dma_buf_release+0x40/0x40 [ 1216.182533] 0 [ 1216.187342] ? __might_fault+0x177/0x1b0 [ 1216.191029] 0 [ 1216.196471] ion_ioctl+0xea/0x1f0 [ 1216.196481] ? ion_query_heaps+0x360/0x360 [ 1216.196494] ? ion_query_heaps+0x360/0x360 [ 1216.205149] do_vfs_ioctl+0x75a/0xff0 [ 1216.205163] ? ioctl_preallocate+0x1a0/0x1a0 [ 1216.205171] ? lock_downgrade+0x740/0x740 [ 1216.205183] ? __fget+0x225/0x360 [ 1216.206973] Node 0 [ 1216.211974] ? do_vfs_ioctl+0xff0/0xff0 [ 1216.213795] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1216.218579] ? security_file_ioctl+0x83/0xb0 [ 1216.220356] lowmem_reserve[]: [ 1216.223877] SyS_ioctl+0x7f/0xb0 [ 1216.223885] ? do_vfs_ioctl+0xff0/0xff0 [ 1216.223896] do_syscall_64+0x1d5/0x640 [ 1216.223912] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1216.228308] 0 [ 1216.230088] RIP: 0033:0x465f69 [ 1216.234156] 0 [ 1216.235920] RSP: 002b:00007f1a3115e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1216.239358] 0 [ 1216.243563] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1216.243569] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1216.243574] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1216.243578] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1216.243585] R13: 00007fff4a017d4f R14: 00007f1a3115e300 R15: 0000000000022000 [ 1216.247793] 0 [ 1216.262302] warn_alloc_show_mem: 1 callbacks suppressed [ 1216.262305] Mem-Info: [ 1216.271250] 0 [ 1216.302669] active_anon:211176 inactive_anon:10786 isolated_anon:0 [ 1216.302669] active_file:11 inactive_file:16 isolated_file:0 [ 1216.302669] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1216.302669] slab_reclaimable:15381 slab_unreclaimable:128120 [ 1216.302669] mapped:52685 shmem:11027 pagetables:35686 bounce:0 [ 1216.302669] free:13964 free_pcp:79 free_cma:0 [ 1216.317230] Node 0 active_anon:836356kB inactive_anon:29848kB active_file:28kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116088kB dirty:0kB writeback:0kB shmem:30808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1216.322157] Node 1 [ 1216.323872] Node 1 active_anon:8348kB inactive_anon:13296kB active_file:16kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94652kB dirty:0kB writeback:0kB shmem:13300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1216.323876] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1216.323895] lowmem_reserve[]: [ 1216.332800] Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:8348kB inactive_anon:13296kB active_file:16kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3392kB pagetables:9692kB bounce:0kB free_pcp:192kB local_pcp:72kB free_cma:0kB [ 1216.336832] 0 [ 1216.352997] lowmem_reserve[]: [ 1216.360445] 2717 [ 1216.374522] 0 [ 1216.383590] 2718 [ 1216.425663] 0 [ 1216.448901] 2718 [ 1216.483038] 0 [ 1216.505576] 2718 [ 1216.540957] 0 [ 1216.550306] 0 [ 1216.551954] Node 0 [ 1216.553783] DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:836352kB inactive_anon:29848kB active_file:28kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50080kB pagetables:133052kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1216.553787] lowmem_reserve[]: 0 0 0 0 0 [ 1216.553807] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1216.553825] lowmem_reserve[]: 0 0 0 0 [ 1216.562946] Node 0 [ 1216.589904] 0 [ 1216.623996] DMA: 4*4kB (ME) 4*8kB (UME) 4*16kB (UME) 7*32kB (UM) 2*64kB (ME) 2*128kB (ME) 2*256kB (ME) [ 1216.625872] Node 1 Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:8348kB inactive_anon:13296kB active_file:16kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3392kB pagetables:9692kB bounce:0kB free_pcp:192kB local_pcp:120kB free_cma:0kB [ 1216.643236] 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10960kB [ 1216.672226] lowmem_reserve[]: 0 0 0 0 0 [ 1216.677532] Node 0 DMA: 4*4kB (ME) 4*8kB (UME) 4*16kB (UME) 7*32kB (UM) 2*64kB (ME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10960kB [ 1216.682707] Node 0 DMA32: 3130*4kB (UME) 515*8kB (UME) 81*16kB (M) 0*32kB 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18064kB [ 1216.698483] Node 0 DMA32: 3130*4kB (UME) 515*8kB (UME) 81*16kB (M) 0*32kB 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18064kB [ 1216.716399] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1216.725001] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1216.739181] Node 1 Normal: 336*4kB (UM) 66*8kB (M) 0*16kB 650*32kB (U) 21*64kB (U) 10*128kB (U) 4*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26832kB [ 1216.746423] Node 1 Normal: 336*4kB (UM) 66*8kB (M) 0*16kB 650*32kB (U) 21*64kB (U) 10*128kB (U) 4*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26832kB [ 1216.764062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1216.774866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1216.787117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1216.789067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1216.804532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1216.804538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1216.818531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1216.827796] 11054 total pagecache pages [ 1216.830909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1216.843514] 0 pages in swap cache [ 1216.846971] Swap cache stats: add 0, delete 0, find 0/0 [ 1216.848604] 11054 total pagecache pages [ 1216.856350] 0 pages in swap cache [ 1216.859466] Free swap = 0kB [ 1216.859797] Swap cache stats: add 0, delete 0, find 0/0 [ 1216.864576] Total swap = 0kB [ 1216.871212] 2097051 pages RAM [ 1216.872775] Free swap = 0kB [ 1216.877410] Total swap = 0kB [ 1216.880426] 2097051 pages RAM [ 1216.881409] 0 pages HighMem/MovableOnly [ 1216.885440] 0 pages HighMem/MovableOnly [ 1216.887554] 363840 pages reserved [ 1216.891509] 363840 pages reserved [ 1216.900814] 0 pages cma reserved [ 1216.905956] 0 pages cma reserved [ 1216.909342] Out of memory (oom_kill_allocating_task): Kill process 9308 (systemd-journal) score 0 or sacrifice child [ 1216.936313] Killed process 9308 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1788kB [ 1216.949919] oom_reaper: reaped process 9308 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1844kB [ 1217.201515] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1217.218150] systemd cpuset=/ mems_allowed=0-1 [ 1217.222737] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.224-syzkaller #0 [ 1217.229667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1217.239017] Call Trace: [ 1217.241607] dump_stack+0x1b2/0x281 [ 1217.245240] dump_header+0x178/0x82f [ 1217.248959] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1217.254062] ? ___ratelimit+0x2cd/0x530 [ 1217.258037] oom_kill_process.cold+0x10/0xb18 [ 1217.262536] ? lock_downgrade+0x740/0x740 [ 1217.266688] out_of_memory+0x2dc/0x1190 [ 1217.270668] ? oom_killer_disable+0x1c0/0x1c0 [ 1217.275162] ? mutex_trylock+0x152/0x1a0 [ 1217.279222] __alloc_pages_nodemask+0x23e1/0x2720 [ 1217.284069] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1217.288903] alloc_pages_current+0x155/0x260 [ 1217.293295] filemap_fault+0xea3/0x1980 [ 1217.297258] ext4_filemap_fault+0x84/0xb0 [ 1217.301386] __do_fault+0xfa/0x380 [ 1217.304932] __handle_mm_fault+0x2497/0x4620 [ 1217.309324] ? trace_hardirqs_on+0x10/0x10 [ 1217.313536] ? vm_insert_page+0x7c0/0x7c0 [ 1217.317661] ? lock_downgrade+0x740/0x740 [ 1217.321808] handle_mm_fault+0x391/0x860 [ 1217.325853] __do_page_fault+0x549/0xad0 [ 1217.329897] ? spurious_fault+0x640/0x640 [ 1217.334023] ? do_page_fault+0x60/0x500 [ 1217.337979] ? page_fault+0x2f/0x50 [ 1217.341585] page_fault+0x45/0x50 [ 1217.345018] RIP: c7100ca4: (null) [ 1217.349229] RSP: c80379a0:00007ffc9f179f40 EFLAGS: 5595c8039540 [ 1217.373077] Mem-Info: [ 1217.381592] active_anon:211061 inactive_anon:10785 isolated_anon:0 [ 1217.381592] active_file:97 inactive_file:81 isolated_file:10 [ 1217.381592] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1217.381592] slab_reclaimable:15373 slab_unreclaimable:128089 [ 1217.381592] mapped:52365 shmem:11027 pagetables:35666 bounce:0 [ 1217.381592] free:14069 free_pcp:28 free_cma:0 [ 1217.417143] Node 0 active_anon:835948kB inactive_anon:29848kB active_file:64kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116160kB dirty:0kB writeback:0kB shmem:30808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1217.445087] Node 1 active_anon:8296kB inactive_anon:13292kB active_file:224kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):40kB mapped:93000kB dirty:0kB writeback:0kB shmem:13300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1217.472471] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1217.499497] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1217.502569] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1217.511653] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1217.520357] Node 0 DMA32 free:18868kB min:36200kB low:45248kB high:54296kB active_anon:835940kB inactive_anon:29848kB active_file:116kB inactive_file:328kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50048kB pagetables:132964kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1217.553996] CPU: 1 PID: 10383 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 1217.554870] lowmem_reserve[]: [ 1217.561891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1217.561898] 0 [ 1217.564980] Call Trace: [ 1217.564998] dump_stack+0x1b2/0x281 [ 1217.565011] warn_alloc.cold+0x96/0x1cc [ 1217.565022] ? zone_watermark_ok_safe+0x220/0x220 [ 1217.574375] 0 [ 1217.576162] __alloc_pages_nodemask+0x2127/0x2720 [ 1217.578710] 0 [ 1217.582327] ? lock_acquire+0x170/0x3f0 [ 1217.582342] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1217.586286] 0 [ 1217.591117] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1217.592902] 0 [ 1217.597718] ? __mutex_unlock_slowpath+0x75/0x770 [ 1217.603454] alloc_pages_current+0x155/0x260 [ 1217.603468] ion_page_pool_alloc+0x118/0x1b0 [ 1217.603479] ion_system_heap_allocate+0x133/0x8c0 [ 1217.608294] Node 0 [ 1217.610081] ? _raw_spin_unlock+0x29/0x40 [ 1217.615543] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1217.617305] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1217.622133] lowmem_reserve[]: [ 1217.626516] ? ion_system_contig_heap_create+0x130/0x130 [ 1217.630905] 0 [ 1217.635746] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1217.635758] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1217.635771] ion_alloc+0x27a/0x810 [ 1217.635785] ? ion_dma_buf_release+0x40/0x40 [ 1217.638005] 0 [ 1217.642140] ? __might_fault+0x177/0x1b0 [ 1217.642151] ion_ioctl+0xea/0x1f0 [ 1217.642162] ? ion_query_heaps+0x360/0x360 [ 1217.667058] 0 [ 1217.671954] ? ion_query_heaps+0x360/0x360 [ 1217.675042] 0 [ 1217.680463] do_vfs_ioctl+0x75a/0xff0 [ 1217.682251] 0 [ 1217.687241] ? ioctl_preallocate+0x1a0/0x1a0 [ 1217.695573] ? lock_downgrade+0x740/0x740 [ 1217.695587] ? __fget+0x225/0x360 [ 1217.695596] ? do_vfs_ioctl+0xff0/0xff0 [ 1217.699979] Node 1 [ 1217.701768] ? security_file_ioctl+0x83/0xb0 [ 1217.705827] Normal free:26372kB min:53696kB low:67120kB high:80544kB active_anon:8296kB inactive_anon:13292kB active_file:836kB inactive_file:496kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3424kB pagetables:9688kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1217.709237] SyS_ioctl+0x7f/0xb0 [ 1217.713457] lowmem_reserve[]: [ 1217.715229] ? do_vfs_ioctl+0xff0/0xff0 [ 1217.719433] 0 [ 1217.721220] do_syscall_64+0x1d5/0x640 [ 1217.725007] 0 [ 1217.726809] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1217.731184] 0 [ 1217.735313] RIP: 0033:0x465f69 [ 1217.735318] RSP: 002b:00007f1a3115e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1217.735330] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1217.738755] 0 [ 1217.742708] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1217.742714] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1217.742719] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1217.742723] R13: 00007fff4a017d4f R14: 00007f1a3115e300 R15: 0000000000022000 [ 1217.810458] Mem-Info: [ 1217.814328] 0 [ 1217.822669] active_anon:211061 inactive_anon:10785 isolated_anon:0 [ 1217.822669] active_file:47 inactive_file:31 isolated_file:10 [ 1217.822669] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1217.822669] slab_reclaimable:15373 slab_unreclaimable:128089 [ 1217.822669] mapped:52265 shmem:11027 pagetables:35666 bounce:0 [ 1217.822669] free:14195 free_pcp:13 free_cma:0 [ 1217.830120] Node 0 active_anon:835948kB inactive_anon:29848kB active_file:64kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116160kB dirty:0kB writeback:0kB shmem:30808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1217.838519] Node 0 [ 1217.844684] Node 1 active_anon:8296kB inactive_anon:13292kB active_file:124kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):40kB mapped:92900kB dirty:0kB writeback:0kB shmem:13300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1217.844689] Node 0 [ 1217.851943] DMA: [ 1217.854379] DMA free:11036kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1217.854383] lowmem_reserve[]: [ 1217.861110] 5*4kB [ 1217.894025] 0 [ 1217.917776] (UME) [ 1217.924324] 2717 [ 1217.947766] 5*8kB [ 1217.954362] 2718 [ 1217.977760] (UME) [ 1217.985151] 2718 [ 1217.986823] 1*16kB [ 1217.988887] 2718 [ 1217.991018] (E) [ 1217.993675] Node 0 [ 1217.997273] 7*32kB (UM) 4*64kB (UME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11052kB [ 1218.011431] DMA32 free:18808kB min:36200kB low:45248kB high:54296kB active_anon:835940kB inactive_anon:29848kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50048kB pagetables:132964kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1218.019846] Node 0 [ 1218.046535] lowmem_reserve[]: 0 0 0 0 0 [ 1218.052790] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1218.064081] DMA32: [ 1218.086465] lowmem_reserve[]: [ 1218.087477] 3258*4kB [ 1218.088730] 0 [ 1218.091820] (UME) [ 1218.098206] 0 [ 1218.098832] 534*8kB [ 1218.100353] 0 0 [ 1218.107099] (UME) 90*16kB (UM) 2*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18808kB [ 1218.110062] 0 [ 1218.122107] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1218.136715] Node 1 Normal free:27360kB min:53696kB low:67120kB high:80544kB active_anon:8296kB inactive_anon:13292kB active_file:48kB inactive_file:84kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3424kB pagetables:9688kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1218.141297] Node 1 Normal: 346*4kB (UM) 73*8kB (UM) 5*16kB (UM) 3*32kB (UM) 14*64kB (UM) 10*128kB (M) 44*256kB (U) 23*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27360kB [ 1218.175496] lowmem_reserve[]: [ 1218.196767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1218.198560] 0 [ 1218.199890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1218.210516] 0 [ 1218.213026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1218.228933] 0 0 0 [ 1218.231875] Node 0 DMA: 5*4kB (UME) 5*8kB (UME) 1*16kB (E) 7*32kB (UM) 4*64kB (UME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11052kB [ 1218.237219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1218.256377] Node 0 DMA32: 3258*4kB (UME) 534*8kB (UME) 90*16kB (UM) 2*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18808kB [ 1218.263237] 11061 total pagecache pages [ 1218.279421] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1218.281513] 0 pages in swap cache [ 1218.292010] Node 1 [ 1218.303310] Swap cache stats: add 0, delete 0, find 0/0 [ 1218.304111] Normal: [ 1218.305562] Free swap = 0kB [ 1218.310909] 346*4kB [ 1218.318848] Total swap = 0kB [ 1218.321827] (UM) [ 1218.326318] 2097051 pages RAM [ 1218.327999] 73*8kB [ 1218.328376] 0 pages HighMem/MovableOnly [ 1218.331464] (UM) [ 1218.339212] 363840 pages reserved [ 1218.346825] 0 pages cma reserved [ 1218.346991] 5*16kB [ 1218.350184] Out of memory: Kill process 20394 (syz-executor.2) score 1005 or sacrifice child [ 1218.350189] (UM) [ 1218.358110] Killed process 20394 (syz-executor.2) total-vm:93252kB, anon-rss:2196kB, file-rss:34628kB, shmem-rss:0kB [ 1218.381225] 3*32kB (UM) 14*64kB (UM) 10*128kB (M) 44*256kB (U) 23*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27360kB [ 1218.391672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1218.404970] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1218.419984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1218.420012] syz-executor.4 cpuset= [ 1218.430690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1218.441081] / [ 1218.447303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1218.450852] mems_allowed=0-1 [ 1218.457611] 11061 total pagecache pages [ 1218.457624] 0 pages in swap cache [ 1218.457629] Swap cache stats: add 0, delete 0, find 0/0 [ 1218.457632] Free swap = 0kB [ 1218.457635] Total swap = 0kB [ 1218.457642] 2097051 pages RAM [ 1218.457645] 0 pages HighMem/MovableOnly [ 1218.457648] 363840 pages reserved [ 1218.457658] 0 pages cma reserved [ 1218.496265] CPU: 0 PID: 9358 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1218.504064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1218.513411] Call Trace: [ 1218.515999] dump_stack+0x1b2/0x281 [ 1218.519625] dump_header+0x178/0x82f [ 1218.523339] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1218.528439] ? ___ratelimit+0x2cd/0x530 [ 1218.532163] syz-executor.2: page allocation failure: order:0 [ 1218.532398] oom_kill_process.cold+0x10/0xb18 [ 1218.532416] out_of_memory+0xe3e/0x1190 [ 1218.538191] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1218.542670] ? oom_killer_disable+0x1c0/0x1c0 [ 1218.542677] ? mutex_trylock+0x152/0x1a0 [ 1218.542687] __alloc_pages_nodemask+0x23e1/0x2720 [ 1218.542708] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1218.542732] alloc_pages_current+0x155/0x260 [ 1218.542743] filemap_fault+0xea3/0x1980 [ 1218.542761] ext4_filemap_fault+0x84/0xb0 [ 1218.561615] (null) [ 1218.562315] __do_fault+0xfa/0x380 [ 1218.562324] __handle_mm_fault+0x2497/0x4620 [ 1218.562334] ? vm_insert_page+0x7c0/0x7c0 [ 1218.562343] ? nanosleep_copyout+0x100/0x100 [ 1218.562361] handle_mm_fault+0x391/0x860 [ 1218.562373] __do_page_fault+0x549/0xad0 [ 1218.562384] ? spurious_fault+0x640/0x640 [ 1218.562391] ? do_page_fault+0x60/0x500 [ 1218.562401] ? page_fault+0x2f/0x50 [ 1218.562409] page_fault+0x45/0x50 [ 1218.570499] syz-executor.2 cpuset= [ 1218.572062] RIP: 12837c:0x2 [ 1218.572065] RSP: 0013:00007fff969f0a1c EFLAGS: 00000000 [ 1218.573977] Mem-Info: [ 1218.585455] / [ 1218.588662] active_anon:211061 inactive_anon:10785 isolated_anon:0 [ 1218.588662] active_file:24 inactive_file:2 isolated_file:0 [ 1218.588662] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1218.588662] slab_reclaimable:15373 slab_unreclaimable:128086 [ 1218.588662] mapped:52225 shmem:11027 pagetables:35666 bounce:0 [ 1218.588662] free:13944 free_pcp:60 free_cma:0 [ 1218.590362] mems_allowed=0-1 [ 1218.599837] Node 0 active_anon:835948kB inactive_anon:29848kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116084kB dirty:0kB writeback:0kB shmem:30808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1218.612103] CPU: 1 PID: 10383 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 1218.622423] Node 1 active_anon:8296kB inactive_anon:13292kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92816kB dirty:0kB writeback:0kB shmem:13300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1218.623172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1218.626605] Node 0 [ 1218.630121] Call Trace: [ 1218.633063] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1218.638388] dump_stack+0x1b2/0x281 [ 1218.640761] lowmem_reserve[]: [ 1218.642464] warn_alloc.cold+0x96/0x1cc [ 1218.642487] ? zone_watermark_ok_safe+0x220/0x220 [ 1218.675794] 0 [ 1218.678866] ? usleep_range+0x130/0x130 [ 1218.706528] 2717 [ 1218.714374] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1218.714387] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1218.714398] ? run_timer_softirq+0x5a0/0x5a0 [ 1218.741542] 2718 [ 1218.750872] __alloc_pages_nodemask+0x2127/0x2720 [ 1218.750888] ? lock_acquire+0x170/0x3f0 [ 1218.753116] 2718 [ 1218.755673] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1218.781247] 2718 [ 1218.784857] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1218.784873] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1218.791938] alloc_pages_current+0x155/0x260 [ 1218.796766] Node 0 [ 1218.798536] ion_page_pool_alloc+0x118/0x1b0 [ 1218.802504] DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:835940kB inactive_anon:29848kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50048kB pagetables:132964kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1218.804525] ion_system_heap_allocate+0x133/0x8c0 [ 1218.809595] lowmem_reserve[]: [ 1218.814596] ? _raw_spin_unlock+0x29/0x40 [ 1218.814605] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1218.814616] ? ion_system_contig_heap_create+0x130/0x130 [ 1218.818996] 0 [ 1218.821042] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1218.825872] 0 [ 1218.829816] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1218.831851] 0 [ 1218.836675] ion_alloc+0x27a/0x810 [ 1218.836689] ? ion_dma_buf_release+0x40/0x40 [ 1218.836701] ? __might_fault+0x177/0x1b0 [ 1218.838737] 0 [ 1218.843212] ion_ioctl+0xea/0x1f0 [ 1218.843220] ? ion_query_heaps+0x360/0x360 [ 1218.843233] ? ion_query_heaps+0x360/0x360 [ 1218.848653] 0 [ 1218.853042] do_vfs_ioctl+0x75a/0xff0 [ 1218.853053] ? ioctl_preallocate+0x1a0/0x1a0 [ 1218.853062] ? lock_downgrade+0x740/0x740 [ 1218.859664] ? __fget+0x225/0x360 [ 1218.887983] Node 0 [ 1218.892779] ? do_vfs_ioctl+0xff0/0xff0 [ 1218.892792] ? security_file_ioctl+0x83/0xb0 [ 1218.895887] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1218.900015] SyS_ioctl+0x7f/0xb0 [ 1218.904941] lowmem_reserve[]: [ 1218.910375] ? do_vfs_ioctl+0xff0/0xff0 [ 1218.912171] 0 [ 1218.917158] do_syscall_64+0x1d5/0x640 [ 1218.918932] 0 [ 1218.923765] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1218.923774] RIP: 0033:0x465f69 [ 1218.925566] 0 [ 1218.929104] RSP: 002b:00007f1a3115e188 EFLAGS: 00000246 [ 1218.933536] 0 [ 1218.937534] ORIG_RAX: 0000000000000010 [ 1218.937542] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1218.939326] 0 [ 1218.942754] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1218.942759] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1218.942763] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1218.942769] R13: 00007fff4a017d4f R14: 00007f1a3115e300 R15: 0000000000022000 [ 1218.953146] Mem-Info: [ 1218.953166] active_anon:211061 inactive_anon:10785 isolated_anon:0 [ 1218.953166] active_file:26 inactive_file:0 isolated_file:0 [ 1218.953166] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1218.953166] slab_reclaimable:15373 slab_unreclaimable:127955 [ 1218.953166] mapped:52225 shmem:11027 pagetables:35666 bounce:0 [ 1218.953166] free:14050 free_pcp:94 free_cma:0 [ 1218.953183] Node 0 active_anon:835948kB inactive_anon:29848kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116084kB dirty:0kB writeback:0kB shmem:30808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1218.953196] Node 1 active_anon:8296kB inactive_anon:13292kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92816kB dirty:0kB writeback:0kB shmem:13300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1218.953200] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1218.953220] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1218.953249] Node 0 DMA32 free:18488kB min:36200kB low:45248kB high:54296kB active_anon:835940kB inactive_anon:29848kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50048kB pagetables:132964kB bounce:0kB free_pcp:256kB local_pcp:256kB free_cma:0kB [ 1218.953269] lowmem_reserve[]: 0 0 0 0 0 [ 1218.953289] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1218.953307] lowmem_reserve[]: 0 0 0 0 0 [ 1218.953326] Node 1 Normal free:26740kB min:53696kB low:67120kB high:80544kB active_anon:8296kB inactive_anon:13292kB active_file:104kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3424kB pagetables:9688kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1218.953347] lowmem_reserve[]: 0 0 0 0 0 [ 1218.953366] Node 0 DMA: 5*4kB (UME) 5*8kB (UME) 2*16kB (UE) 4*32kB (UM) 4*64kB (UME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 1218.953442] Node 0 DMA32: 3072*4kB (UME) 543*8kB (UME) 92*16kB (UM) 3*32kB (U) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18584kB [ 1218.953502] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1218.953540] Node 1 Normal: 341*4kB (UM) 72*8kB (M) 2*16kB (M) 2*32kB (UM) 14*64kB (UM) 10*128kB (M) 42*256kB (U) 23*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26740kB [ 1218.953614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1218.953620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1218.953627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1218.953634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1218.953638] 11061 total pagecache pages [ 1218.953649] 0 pages in swap cache [ 1218.953655] Swap cache stats: add 0, delete 0, find 0/0 [ 1218.953658] Free swap = 0kB [ 1218.953661] Total swap = 0kB [ 1218.953667] 2097051 pages RAM [ 1218.953670] 0 pages HighMem/MovableOnly [ 1218.953673] 363840 pages reserved [ 1218.953676] 0 pages cma reserved [ 1219.112224] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1219.227019] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1219.234350] Node 1 [ 1219.293489] systemd[1]: Stopped Journal Service. [ 1219.297351] Normal free:209520kB min:53696kB low:67120kB high:80544kB active_anon:8296kB inactive_anon:13292kB active_file:168kB inactive_file:5564kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3424kB pagetables:9688kB bounce:0kB free_pcp:144kB local_pcp:0kB free_cma:0kB [ 1219.478330] systemd[1]: Starting Journal Service... [ 1219.485690] lowmem_reserve[]: 0 0 0 0 0 [ 1219.489701] Node 0 DMA: 5*4kB (UME) 5*8kB (UME) 2*16kB (UE) 4*32kB (UM) 12*64kB (UME) 10*128kB (UME) 7*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 13788kB [ 1219.509854] Node 0 DMA32: 2625*4kB (ME) 489*8kB (UME) 83*16kB (UM) 2*32kB (UM) 17*64kB (UM) 54*128kB (U) 157*256kB (U) 79*512kB (U) 7*1024kB (U) 3*2048kB (U) 0*4096kB = 117756kB [ 1219.529732] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1219.540530] Node 1 Normal: 0*4kB 2*8kB (UM) 0*16kB 1*32kB (U) 2490*64kB (UM) 806*128kB (UM) 215*256kB (UM) 17*512kB (U) 110*1024kB (U) 9*2048kB (U) 0*4096kB = 457392kB [ 1219.575515] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1219.584434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1219.602493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1219.611362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1219.641972] 12874 total pagecache pages [ 1219.645979] 0 pages in swap cache [ 1219.649426] Swap cache stats: add 0, delete 0, find 0/0 [ 1219.661974] Free swap = 0kB [ 1219.665014] Total swap = 0kB [ 1219.668027] 2097051 pages RAM [ 1219.671119] 0 pages HighMem/MovableOnly [ 1219.675268] 363840 pages reserved [ 1219.678715] 0 pages cma reserved [ 1219.682307] Out of memory (oom_kill_allocating_task): Kill process 9358 (syz-executor.4) score 0 or sacrifice child [ 1219.692949] Killed process 10350 (syz-executor.4) total-vm:93252kB, anon-rss:2192kB, file-rss:34820kB, shmem-rss:0kB [ 1219.713332] oom_reaper: reaped process 20394 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1219.733427] oom_reaper: reaped process 10350 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1220.038528] systemd-journald[10395]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 10:38:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 10:38:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) 10:38:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) 10:38:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) 10:38:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)) 10:38:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) 10:38:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)) 10:38:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) 10:38:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) [ 1221.163177] systemd[1]: Started Journal Service. [ 1221.366069] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1221.378165] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1221.401245] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1221.401812] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1221.411522] CPU: 0 PID: 10408 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1221.419401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1221.428758] Call Trace: [ 1221.431349] dump_stack+0x1b2/0x281 [ 1221.434979] warn_alloc.cold+0x96/0x1cc [ 1221.438955] ? zone_watermark_ok_safe+0x220/0x220 [ 1221.443799] __alloc_pages_nodemask+0x2127/0x2720 [ 1221.448631] ? __schedule+0x893/0x1de0 [ 1221.452521] ? lock_acquire+0x170/0x3f0 [ 1221.456507] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1221.461349] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1221.466799] ? __mutex_unlock_slowpath+0x75/0x770 [ 1221.471644] alloc_pages_current+0x155/0x260 [ 1221.476050] ion_page_pool_alloc+0x118/0x1b0 [ 1221.480542] ion_system_heap_allocate+0x133/0x8c0 [ 1221.485384] ? ion_alloc+0x187/0x810 [ 1221.489098] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1221.494548] ? ion_system_contig_heap_create+0x130/0x130 [ 1221.499999] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1221.505014] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1221.509858] ion_alloc+0x204/0x810 [ 1221.513403] ? ion_dma_buf_release+0x40/0x40 [ 1221.517799] ? __might_fault+0x177/0x1b0 [ 1221.521845] ion_ioctl+0xea/0x1f0 [ 1221.525281] ? ion_query_heaps+0x360/0x360 [ 1221.529502] ? ion_query_heaps+0x360/0x360 [ 1221.533720] do_vfs_ioctl+0x75a/0xff0 [ 1221.537502] ? ioctl_preallocate+0x1a0/0x1a0 [ 1221.541890] ? lock_downgrade+0x740/0x740 [ 1221.546021] ? __fget+0x225/0x360 [ 1221.549457] ? do_vfs_ioctl+0xff0/0xff0 [ 1221.553417] ? security_file_ioctl+0x83/0xb0 [ 1221.557809] SyS_ioctl+0x7f/0xb0 [ 1221.561154] ? do_vfs_ioctl+0xff0/0xff0 [ 1221.565109] do_syscall_64+0x1d5/0x640 [ 1221.568985] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1221.574157] RIP: 0033:0x465f69 [ 1221.577327] RSP: 002b:00007f98092b3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1221.585016] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1221.592265] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1221.599540] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1221.606789] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1221.614038] R13: 00007fff969f075f R14: 00007f98092b3300 R15: 0000000000022000 [ 1221.627791] CPU: 1 PID: 10412 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 1221.635701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1221.645052] Call Trace: [ 1221.647645] dump_stack+0x1b2/0x281 [ 1221.651277] warn_alloc.cold+0x96/0x1cc [ 1221.655254] ? zone_watermark_ok_safe+0x220/0x220 [ 1221.660110] __alloc_pages_nodemask+0x2127/0x2720 [ 1221.664957] ? lock_acquire+0x170/0x3f0 [ 1221.668939] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1221.673788] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1221.679244] ? __mutex_unlock_slowpath+0x75/0x770 [ 1221.684092] alloc_pages_current+0x155/0x260 [ 1221.688504] ion_page_pool_alloc+0x118/0x1b0 [ 1221.692916] ion_system_heap_allocate+0x133/0x8c0 [ 1221.697757] ? ion_alloc+0x187/0x810 [ 1221.701466] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1221.706916] ? ion_system_contig_heap_create+0x130/0x130 [ 1221.712364] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1221.717377] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1221.722220] ion_alloc+0x204/0x810 [ 1221.725762] ? ion_dma_buf_release+0x40/0x40 [ 1221.730166] ? __might_fault+0x177/0x1b0 [ 1221.734227] ion_ioctl+0xea/0x1f0 [ 1221.737678] ? ion_query_heaps+0x360/0x360 [ 1221.741920] ? ion_query_heaps+0x360/0x360 [ 1221.746153] do_vfs_ioctl+0x75a/0xff0 [ 1221.749954] ? ioctl_preallocate+0x1a0/0x1a0 [ 1221.754361] ? lock_downgrade+0x740/0x740 [ 1221.758512] ? __fget+0x225/0x360 [ 1221.761964] ? do_vfs_ioctl+0xff0/0xff0 [ 1221.765938] ? security_file_ioctl+0x83/0xb0 [ 1221.770349] SyS_ioctl+0x7f/0xb0 [ 1221.773713] ? do_vfs_ioctl+0xff0/0xff0 [ 1221.777689] do_syscall_64+0x1d5/0x640 [ 1221.781582] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1221.786768] RIP: 0033:0x465f69 [ 1221.789954] RSP: 002b:00007f1a3115e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1221.797657] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1221.804923] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1221.812195] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1221.819462] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1221.826731] R13: 00007fff4a017d4f R14: 00007f1a3115e300 R15: 0000000000022000 [ 1221.880717] Mem-Info: [ 1221.889157] active_anon:211213 inactive_anon:12818 isolated_anon:0 [ 1221.889157] active_file:1085 inactive_file:1155 isolated_file:2 [ 1221.889157] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1221.889157] slab_reclaimable:15207 slab_unreclaimable:133930 [ 1221.889157] mapped:54571 shmem:13075 pagetables:35663 bounce:0 [ 1221.889157] free:169191 free_pcp:518 free_cma:0 [ 1221.967095] Node 0 active_anon:835588kB inactive_anon:29868kB active_file:2248kB inactive_file:1732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119088kB dirty:48kB writeback:0kB shmem:30828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1222.025529] Node 1 active_anon:9268kB inactive_anon:21404kB active_file:2256kB inactive_file:3148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99200kB dirty:16kB writeback:0kB shmem:21472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1222.053200] Node 0 DMA free:11344kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:36kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1222.080671] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1222.086476] Node 0 DMA32 free:518244kB min:36200kB low:45248kB high:54296kB active_anon:835584kB inactive_anon:29832kB active_file:2232kB inactive_file:1728kB unevictable:0kB writepending:48kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:49984kB pagetables:132656kB bounce:0kB free_pcp:1244kB local_pcp:656kB free_cma:0kB [ 1222.117175] lowmem_reserve[]: 0 0 0 0 0 [ 1222.121248] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1222.154625] lowmem_reserve[]: 0 0 0 0 0 [ 1222.163599] Node 1 Normal free:202076kB min:53696kB low:67120kB high:80544kB active_anon:9268kB inactive_anon:21404kB active_file:2256kB inactive_file:3148kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3456kB pagetables:9996kB bounce:0kB free_pcp:1344kB local_pcp:664kB free_cma:0kB [ 1222.226265] lowmem_reserve[]: 0 0 0 0 0 [ 1222.234710] Node 0 DMA: 8*4kB (UME) 10*8kB (UE) 8*16kB (UE) 8*32kB (U) 13*64kB (UME) 10*128kB (UME) 7*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 14128kB [ 1222.268466] Node 0 DMA32: 4776*4kB (UME) 3564*8kB (UME) 8585*16kB (UME) 3649*32kB (UME) 1322*64kB (UM) 324*128kB (U) 132*256kB (U) 44*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 486192kB [ 1222.294556] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1222.316348] Node 1 Normal: 1868*4kB (UM) 1729*8kB (UM) 1169*16kB (UM) 1027*32kB (UM) 3169*64kB (UM) 56*128kB (UM) 62*256kB (UM) 28*512kB (UM) 41*1024kB (U) 4*2048kB (U) 0*4096kB = 363240kB [ 1222.339189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1222.348699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1222.361664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1222.371462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1222.384505] 15570 total pagecache pages [ 1222.388642] 0 pages in swap cache [ 1222.393756] Swap cache stats: add 0, delete 0, find 0/0 [ 1222.399260] Free swap = 0kB [ 1222.406239] Total swap = 0kB [ 1222.409384] 2097051 pages RAM [ 1222.414042] 0 pages HighMem/MovableOnly [ 1222.418129] 363840 pages reserved [ 1222.421678] 0 pages cma reserved 10:38:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:38:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:38:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)) 10:38:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:38:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:38:42 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:38:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:38:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, 0x0) 10:38:42 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) [ 1225.533648] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1225.536526] syz-executor.4: [ 1225.558145] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1225.566737] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1225.576316] CPU: 0 PID: 10454 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 1225.591560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1225.600912] Call Trace: [ 1225.603509] dump_stack+0x1b2/0x281 [ 1225.607144] warn_alloc.cold+0x96/0x1cc [ 1225.609463] syz-executor.4 cpuset= [ 1225.611125] ? zone_watermark_ok_safe+0x220/0x220 [ 1225.611146] __alloc_pages_nodemask+0x2127/0x2720 [ 1225.620470] / [ 1225.624330] ? lock_acquire+0x170/0x3f0 [ 1225.630012] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1225.634554] mems_allowed=0-1 [ 1225.634859] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1225.643393] ? __mutex_unlock_slowpath+0x75/0x770 [ 1225.648233] alloc_pages_current+0x155/0x260 [ 1225.652636] ion_page_pool_alloc+0x118/0x1b0 [ 1225.657040] ion_system_heap_allocate+0x133/0x8c0 [ 1225.661880] ? ion_alloc+0x187/0x810 [ 1225.665587] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1225.671032] ? ion_system_contig_heap_create+0x130/0x130 [ 1225.676479] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1225.681500] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1225.686341] ion_alloc+0x204/0x810 [ 1225.689874] ? ion_dma_buf_release+0x40/0x40 [ 1225.694275] ? __might_fault+0x177/0x1b0 [ 1225.698323] ion_ioctl+0xea/0x1f0 [ 1225.701768] ? ion_query_heaps+0x360/0x360 [ 1225.705996] ? ion_query_heaps+0x360/0x360 [ 1225.710215] do_vfs_ioctl+0x75a/0xff0 [ 1225.714001] ? ioctl_preallocate+0x1a0/0x1a0 [ 1225.718395] ? lock_downgrade+0x740/0x740 [ 1225.722536] ? __fget+0x225/0x360 [ 1225.725981] ? do_vfs_ioctl+0xff0/0xff0 [ 1225.729945] ? security_file_ioctl+0x83/0xb0 [ 1225.734343] SyS_ioctl+0x7f/0xb0 [ 1225.737700] ? do_vfs_ioctl+0xff0/0xff0 [ 1225.741673] do_syscall_64+0x1d5/0x640 [ 1225.745644] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1225.750822] RIP: 0033:0x465f69 [ 1225.754001] RSP: 002b:00007f1a3115e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1225.761698] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1225.768968] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1225.776229] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1225.783492] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1225.790777] R13: 00007fff4a017d4f R14: 00007f1a3115e300 R15: 0000000000022000 [ 1225.799567] warn_alloc_show_mem: 1 callbacks suppressed [ 1225.799570] Mem-Info: [ 1225.807592] active_anon:211260 inactive_anon:12817 isolated_anon:24 [ 1225.807592] active_file:1293 inactive_file:1341 isolated_file:1 [ 1225.807592] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1225.807592] slab_reclaimable:15137 slab_unreclaimable:135416 [ 1225.807592] mapped:54334 shmem:13076 pagetables:35703 bounce:0 [ 1225.807592] free:85230 free_pcp:346 free_cma:0 [ 1225.814114] CPU: 1 PID: 10453 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1225.842171] Node 0 active_anon:835552kB inactive_anon:29868kB active_file:984kB inactive_file:1160kB unevictable:0kB isolated(anon):96kB isolated(file):4kB mapped:118092kB dirty:0kB writeback:0kB shmem:30828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1225.849394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1225.849399] Call Trace: [ 1225.849416] dump_stack+0x1b2/0x281 [ 1225.849430] warn_alloc.cold+0x96/0x1cc [ 1225.878069] Node 1 active_anon:9488kB inactive_anon:21400kB active_file:4188kB inactive_file:4204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99244kB dirty:0kB writeback:0kB shmem:21476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1225.886890] ? zone_watermark_ok_safe+0x220/0x220 [ 1225.886913] __alloc_pages_nodemask+0x2127/0x2720 [ 1225.886929] ? lock_acquire+0x170/0x3f0 [ 1225.886942] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1225.886958] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1225.890088] Node 0 [ 1225.893148] ? __mutex_unlock_slowpath+0x75/0x770 [ 1225.893165] alloc_pages_current+0x155/0x260 [ 1225.893178] ion_page_pool_alloc+0x118/0x1b0 [ 1225.893189] ion_system_heap_allocate+0x133/0x8c0 [ 1225.893199] ? ion_alloc+0x187/0x810 [ 1225.897583] DMA free:11124kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1225.924674] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1225.924688] ? ion_system_contig_heap_create+0x130/0x130 [ 1225.924699] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1225.924708] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1225.924719] ion_alloc+0x204/0x810 [ 1225.924733] ? ion_dma_buf_release+0x40/0x40 [ 1225.924744] ? __might_fault+0x177/0x1b0 [ 1225.924756] ion_ioctl+0xea/0x1f0 [ 1225.930226] lowmem_reserve[]: [ 1225.934443] ? ion_query_heaps+0x360/0x360 [ 1225.934457] ? ion_query_heaps+0x360/0x360 [ 1225.934467] do_vfs_ioctl+0x75a/0xff0 [ 1225.934478] ? ioctl_preallocate+0x1a0/0x1a0 [ 1225.934487] ? lock_downgrade+0x740/0x740 [ 1225.934503] ? __fget+0x225/0x360 [ 1225.938869] 0 [ 1225.943287] ? do_vfs_ioctl+0xff0/0xff0 [ 1225.943298] ? security_file_ioctl+0x83/0xb0 [ 1225.943308] SyS_ioctl+0x7f/0xb0 [ 1225.943315] ? do_vfs_ioctl+0xff0/0xff0 [ 1225.943325] do_syscall_64+0x1d5/0x640 [ 1225.943341] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1225.949158] 2717 [ 1225.950999] RIP: 0033:0x465f69 [ 1225.951005] RSP: 002b:00007f98092b3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1225.951015] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1225.951022] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1225.956224] 2718 [ 1225.960233] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1225.960238] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1225.960244] R13: 00007fff969f075f R14: 00007f98092b3300 R15: 0000000000022000 [ 1226.141830] 2718 2718 [ 1226.144550] Node 0 DMA32 free:499216kB min:36200kB low:45248kB high:54296kB active_anon:835672kB inactive_anon:29836kB active_file:984kB inactive_file:1192kB unevictable:0kB writepending:72kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:49984kB pagetables:132656kB bounce:0kB free_pcp:1420kB local_pcp:744kB free_cma:0kB [ 1226.175594] lowmem_reserve[]: 0 0 0 0 0 [ 1226.179798] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1226.206366] lowmem_reserve[]: 0 0 0 0 0 [ 1226.212069] Node 1 Normal free:146460kB min:53696kB low:67120kB high:80544kB active_anon:9364kB inactive_anon:21400kB active_file:4240kB inactive_file:4156kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3456kB pagetables:9996kB bounce:0kB free_pcp:620kB local_pcp:0kB free_cma:0kB [ 1226.242747] lowmem_reserve[]: 0 0 0 0 0 [ 1226.250261] Node 0 DMA: 366*4kB (UME) 6*8kB (UME) 2*16kB (UE) 1*32kB (U) 4*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 12584kB [ 1226.288955] Node 0 DMA32: 3937*4kB (UME) 16395*8kB (UME) 9276*16kB (UME) 2276*32kB (UME) 734*64kB (U) 80*128kB (UM) 37*256kB (U) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 436892kB [ 1226.327798] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1226.351266] Node 1 Normal: 2220*4kB (UM) 2193*8kB (UM) 1804*16kB (UM) 1848*32kB (UM) 1555*64kB (UM) 26*128kB (UM) 6*256kB (UM) 8*512kB (UM) 7*1024kB (U) 1*2048kB (U) 10*4096kB (U) = 273080kB [ 1226.386996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1226.406972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1226.428780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1226.450755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1226.472943] 15730 total pagecache pages [ 1226.485561] 0 pages in swap cache [ 1226.492333] Swap cache stats: add 0, delete 0, find 0/0 [ 1226.507506] Free swap = 0kB [ 1226.514562] Total swap = 0kB [ 1226.521071] 2097051 pages RAM [ 1226.528386] 0 pages HighMem/MovableOnly [ 1226.537083] 363840 pages reserved [ 1226.545207] 0 pages cma reserved [ 1228.160515] oom_reaper: reaped process 10453 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1228.175431] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1228.203398] systemd-journal cpuset=/ mems_allowed=0-1 [ 1228.208637] CPU: 0 PID: 10395 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 1228.216600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1228.221270] syz-executor.4: page allocation failure: order:0 [ 1228.225964] Call Trace: [ 1228.225979] dump_stack+0x1b2/0x281 [ 1228.235306] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1228.237957] dump_header+0x178/0x82f [ 1228.245605] syz-executor.4 cpuset= [ 1228.249249] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1228.249250] / mems_allowed=0-1 [ 1228.252772] ? ___ratelimit+0x2cd/0x530 [ 1228.252783] oom_kill_process.cold+0x10/0xb18 [ 1228.252799] out_of_memory+0xe3e/0x1190 [ 1228.252812] ? oom_killer_disable+0x1c0/0x1c0 [ 1228.252819] ? mutex_trylock+0x152/0x1a0 [ 1228.252828] __alloc_pages_nodemask+0x23e1/0x2720 [ 1228.252848] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1228.291625] alloc_pages_current+0x155/0x260 [ 1228.296023] filemap_fault+0xea3/0x1980 [ 1228.299983] ext4_filemap_fault+0x84/0xb0 [ 1228.304115] __do_fault+0xfa/0x380 [ 1228.307636] __handle_mm_fault+0x2497/0x4620 [ 1228.312030] ? ep_poll+0x1ab/0xa50 [ 1228.315555] ? vm_insert_page+0x7c0/0x7c0 [ 1228.319689] handle_mm_fault+0x391/0x860 [ 1228.323733] __do_page_fault+0x549/0xad0 [ 1228.327777] ? spurious_fault+0x640/0x640 [ 1228.331910] ? do_page_fault+0x60/0x500 [ 1228.335872] ? page_fault+0x2f/0x50 [ 1228.339475] page_fault+0x45/0x50 [ 1228.342913] RIP: 0001:0xffffffffffffffff [ 1228.346954] RSP: 73db21e0:00007ffee2f4dff0 EFLAGS: 7ffee2f4de00 [ 1228.346973] CPU: 1 PID: 10453 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1228.356236] Mem-Info: [ 1228.360894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1228.363326] active_anon:210750 inactive_anon:12818 isolated_anon:0 [ 1228.363326] active_file:14 inactive_file:21 isolated_file:0 [ 1228.363326] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1228.363326] slab_reclaimable:15095 slab_unreclaimable:135593 [ 1228.363326] mapped:52638 shmem:13075 pagetables:35663 bounce:0 [ 1228.363326] free:13897 free_pcp:121 free_cma:0 [ 1228.372618] Call Trace: [ 1228.372638] dump_stack+0x1b2/0x281 [ 1228.372659] warn_alloc.cold+0x96/0x1cc [ 1228.406151] Node 0 active_anon:833628kB inactive_anon:29872kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116124kB dirty:0kB writeback:0kB shmem:30832kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1228.408694] ? zone_watermark_ok_safe+0x220/0x220 [ 1228.412326] Node 1 active_anon:9372kB inactive_anon:21400kB active_file:44kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94428kB dirty:0kB writeback:0kB shmem:21468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1228.416259] ? usleep_range+0x130/0x130 [ 1228.444092] Node 0 [ 1228.448899] ? try_to_free_pages+0x23f/0x6e0 [ 1228.476046] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.479976] ? _find_next_bit+0xdb/0x100 [ 1228.482195] lowmem_reserve[]: [ 1228.486574] ? run_timer_softirq+0x5a0/0x5a0 [ 1228.512150] 0 [ 1228.516184] __alloc_pages_nodemask+0x2127/0x2720 [ 1228.519255] 2717 [ 1228.523651] ? lock_acquire+0x170/0x3f0 [ 1228.523666] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1228.525437] 2718 [ 1228.530279] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1228.530295] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1228.532345] 2718 [ 1228.536290] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 1228.541096] 2718 [ 1228.543143] alloc_pages_current+0x155/0x260 [ 1228.543157] ion_page_pool_alloc+0x118/0x1b0 [ 1228.553072] ion_system_heap_allocate+0x133/0x8c0 [ 1228.553081] ? ion_alloc+0x187/0x810 [ 1228.553091] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1228.555127] Node 0 [ 1228.559868] ? ion_system_contig_heap_create+0x130/0x130 [ 1228.561929] DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:833624kB inactive_anon:29836kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:49984kB pagetables:132656kB bounce:0kB free_pcp:244kB local_pcp:124kB free_cma:0kB [ 1228.566295] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1228.570673] lowmem_reserve[]: [ 1228.575496] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1228.575507] ion_alloc+0x204/0x810 [ 1228.575522] ? ion_dma_buf_release+0x40/0x40 [ 1228.579202] 0 [ 1228.584632] ? __might_fault+0x177/0x1b0 [ 1228.584644] ion_ioctl+0xea/0x1f0 [ 1228.584653] ? ion_query_heaps+0x360/0x360 [ 1228.586859] 0 [ 1228.592294] ? ion_query_heaps+0x360/0x360 [ 1228.592303] do_vfs_ioctl+0x75a/0xff0 [ 1228.592315] ? ioctl_preallocate+0x1a0/0x1a0 [ 1228.620940] 0 [ 1228.625925] ? lock_downgrade+0x740/0x740 [ 1228.625938] ? __fget+0x225/0x360 [ 1228.625947] ? do_vfs_ioctl+0xff0/0xff0 [ 1228.629042] 0 [ 1228.633882] ? security_file_ioctl+0x83/0xb0 [ 1228.633891] SyS_ioctl+0x7f/0xb0 [ 1228.633899] ? do_vfs_ioctl+0xff0/0xff0 [ 1228.637411] 0 [ 1228.641804] do_syscall_64+0x1d5/0x640 [ 1228.641819] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1228.641828] RIP: 0033:0x465f69 [ 1228.647636] RSP: 002b:00007f98092b3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1228.651067] Node 0 [ 1228.655276] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1228.655282] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1228.655287] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1228.655291] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1228.655298] R13: 00007fff969f075f R14: 00007f98092b3300 R15: 0000000000022000 [ 1228.657084] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.671204] warn_alloc_show_mem: 1 callbacks suppressed [ 1228.671207] Mem-Info: [ 1228.683169] lowmem_reserve[]: [ 1228.688109] active_anon:210750 inactive_anon:12818 isolated_anon:0 [ 1228.688109] active_file:14 inactive_file:21 isolated_file:0 [ 1228.688109] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1228.688109] slab_reclaimable:15095 slab_unreclaimable:135593 [ 1228.688109] mapped:52638 shmem:13075 pagetables:35663 bounce:0 [ 1228.688109] free:13897 free_pcp:121 free_cma:0 [ 1228.689055] 0 [ 1228.692444] Node 0 active_anon:833628kB inactive_anon:29872kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116124kB dirty:0kB writeback:0kB shmem:30832kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 702464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1228.692459] Node 1 active_anon:9372kB inactive_anon:21400kB active_file:44kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94428kB dirty:0kB writeback:0kB shmem:21468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1228.692463] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.692482] lowmem_reserve[]: 0 2717 [ 1228.703485] 0 [ 1228.710195] 2718 [ 1228.710526] 0 [ 1228.718964] 2718 [ 1228.725697] 0 [ 1228.729562] 2718 [ 1228.741996] 0 [ 1228.756874] Node 0 DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:833624kB inactive_anon:29836kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:49984kB pagetables:132656kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 1228.756895] lowmem_reserve[]: 0 0 0 0 0 [ 1228.756915] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.756933] lowmem_reserve[]: 0 0 0 [ 1228.791453] Node 1 [ 1228.796340] 0 [ 1228.833838] Normal free:26576kB min:53696kB low:67120kB high:80544kB active_anon:9372kB inactive_anon:21400kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3456kB pagetables:9996kB bounce:0kB free_pcp:240kB local_pcp:96kB free_cma:0kB [ 1228.859606] 0 [ 1228.890527] lowmem_reserve[]: [ 1228.920320] 0 [ 1228.921069] Node 1 [ 1228.924763] 0 [ 1228.925500] Normal free:26576kB min:53696kB low:67120kB high:80544kB active_anon:9372kB inactive_anon:21400kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3456kB pagetables:9996kB bounce:0kB free_pcp:240kB local_pcp:144kB free_cma:0kB [ 1228.926792] 0 [ 1228.959611] lowmem_reserve[]: [ 1228.967524] 0 [ 1228.989327] 0 [ 1228.989387] 0 [ 1228.991630] 0 0 0 0 [ 1228.991646] Node 0 DMA: 6*4kB (UME) 5*8kB (UME) 1*16kB (E) 0*32kB 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB [ 1229.025097] (ME) [ 1229.033941] Node 0 [ 1229.066155] 1*2048kB [ 1229.072909] DMA: [ 1229.073503] (E) [ 1229.089037] 6*4kB [ 1229.094938] 1*4096kB [ 1229.097904] (UME) [ 1229.098164] (M) [ 1229.100552] 5*8kB [ 1229.102730] = 10960kB [ 1229.102735] Node 0 DMA32: 2765*4kB (ME) 641*8kB (UME) 123*16kB (UME) 0*32kB [ 1229.108280] (UME) [ 1229.109247] 0*64kB [ 1229.118374] 1*16kB (E) 0*32kB 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10960kB [ 1229.123889] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18156kB [ 1229.138482] Node 0 DMA32: 2765*4kB (ME) 641*8kB (UME) 123*16kB (UME) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18156kB [ 1229.145465] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1229.160675] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1229.173264] Node 1 Normal: 577*4kB (M) 164*8kB (M) 56*16kB (M) 50*32kB (UM) 50*64kB (M) 20*128kB (M) 6*256kB (M) 6*512kB (UM) 0*1024kB 1*2048kB (U) 2*4096kB (U) = 26724kB [ 1229.183972] Node 1 Normal: 577*4kB (M) 164*8kB (M) 56*16kB (M) 50*32kB (UM) 50*64kB (M) 20*128kB (M) 6*256kB (M) 6*512kB (UM) 0*1024kB 1*2048kB (U) 2*4096kB (U) = 26724kB [ 1229.199307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1229.215093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1229.223601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1229.233004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1229.237600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1229.249557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1229.258428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1229.267285] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1229.270678] 13105 total pagecache pages [ 1229.279265] 13105 total pagecache pages [ 1229.279275] 0 pages in swap cache [ 1229.279280] Swap cache stats: add 0, delete 0, find 0/0 [ 1229.279283] Free swap = 0kB [ 1229.279287] Total swap = 0kB [ 1229.279293] 2097051 pages RAM [ 1229.279296] 0 pages HighMem/MovableOnly [ 1229.279299] 363840 pages reserved [ 1229.279302] 0 pages cma reserved [ 1229.279308] Out of memory (oom_kill_allocating_task): Kill process 10395 (systemd-journal) score 0 or sacrifice child [ 1229.279335] Killed process 10395 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1544kB [ 1229.288433] 0 pages in swap cache [ 1229.294182] oom_reaper: reaped process 10395 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1544kB [ 1229.296164] Swap cache stats: add 0, delete 0, find 0/0 [ 1229.329298] oom_reaper: reaped process 10454 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1229.342694] Free swap = 0kB [ 1229.373236] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1229.389116] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1229.393980] CPU: 1 PID: 12521 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 1229.401543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1229.410902] Call Trace: [ 1229.413485] dump_stack+0x1b2/0x281 [ 1229.417106] dump_header+0x178/0x82f [ 1229.420814] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1229.425906] ? ___ratelimit+0x2cd/0x530 [ 1229.429875] oom_kill_process.cold+0x10/0xb18 [ 1229.432463] Total swap = 0kB [ 1229.434367] out_of_memory+0xe3e/0x1190 [ 1229.437362] 2097051 pages RAM [ 1229.441320] ? oom_killer_disable+0x1c0/0x1c0 [ 1229.441328] ? mutex_trylock+0x152/0x1a0 [ 1229.441337] __alloc_pages_nodemask+0x23e1/0x2720 [ 1229.441356] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1229.444464] 0 pages HighMem/MovableOnly [ 1229.448952] alloc_pages_current+0x155/0x260 [ 1229.452990] 363840 pages reserved [ 1229.457798] filemap_fault+0xea3/0x1980 [ 1229.462626] 0 pages cma reserved [ 1229.466577] ext4_filemap_fault+0x84/0xb0 [ 1229.485823] __do_fault+0xfa/0x380 [ 1229.489359] __handle_mm_fault+0x2497/0x4620 [ 1229.493763] ? vm_insert_page+0x7c0/0x7c0 [ 1229.497916] handle_mm_fault+0x391/0x860 [ 1229.501971] __do_page_fault+0x549/0xad0 [ 1229.506023] ? spurious_fault+0x640/0x640 [ 1229.510162] ? do_page_fault+0x60/0x500 [ 1229.514128] ? page_fault+0x2f/0x50 [ 1229.517744] page_fault+0x45/0x50 [ 1229.521186] RIP: 57f0600:0x7f [ 1229.524280] RSP: 02b6:000000c00054de40 EFLAGS: 00000003 [ 1229.531290] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1229.541146] Mem-Info: [ 1229.551403] active_anon:210083 inactive_anon:12818 isolated_anon:0 [ 1229.551403] active_file:16 inactive_file:39 isolated_file:0 [ 1229.551403] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1229.551403] slab_reclaimable:15082 slab_unreclaimable:135590 [ 1229.551403] mapped:52247 shmem:13075 pagetables:35625 bounce:0 [ 1229.551403] free:32452 free_pcp:152 free_cma:0 [ 1229.571115] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1229.606685] CPU: 0 PID: 10454 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 1229.614571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1229.623927] Call Trace: [ 1229.626522] dump_stack+0x1b2/0x281 [ 1229.630156] warn_alloc.cold+0x96/0x1cc [ 1229.631176] Node 0 active_anon:831552kB inactive_anon:29872kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116124kB dirty:0kB writeback:0kB shmem:30832kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 700416kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1229.634126] ? zone_watermark_ok_safe+0x220/0x220 [ 1229.666790] ? usleep_range+0x130/0x130 [ 1229.670764] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1229.675869] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1229.680887] ? run_timer_softirq+0x5a0/0x5a0 [ 1229.685304] __alloc_pages_nodemask+0x2127/0x2720 [ 1229.690156] ? lock_acquire+0x170/0x3f0 [ 1229.691128] Node 1 active_anon:8780kB inactive_anon:21400kB active_file:48kB inactive_file:1944kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93864kB dirty:0kB writeback:0kB shmem:21468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1229.694130] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1229.726318] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1229.730830] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1229.736287] ? alloc_pages_current+0x37/0x260 [ 1229.740777] alloc_pages_current+0x155/0x260 [ 1229.745190] ion_page_pool_alloc+0x118/0x1b0 [ 1229.749598] ion_system_heap_allocate+0x133/0x8c0 [ 1229.754440] ? ion_alloc+0x187/0x810 [ 1229.758151] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1229.763605] ? ion_system_contig_heap_create+0x130/0x130 [ 1229.769054] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1229.774074] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1229.778912] ion_alloc+0x204/0x810 [ 1229.782455] ? ion_dma_buf_release+0x40/0x40 [ 1229.786862] ? __might_fault+0x177/0x1b0 [ 1229.786922] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1229.790922] ion_ioctl+0xea/0x1f0 [ 1229.790932] ? ion_query_heaps+0x360/0x360 [ 1229.824778] ? ion_query_heaps+0x360/0x360 [ 1229.829011] do_vfs_ioctl+0x75a/0xff0 [ 1229.832813] ? ioctl_preallocate+0x1a0/0x1a0 [ 1229.837217] ? lock_downgrade+0x740/0x740 [ 1229.841365] ? __fget+0x225/0x360 [ 1229.844818] ? do_vfs_ioctl+0xff0/0xff0 [ 1229.848786] ? security_file_ioctl+0x83/0xb0 [ 1229.853198] SyS_ioctl+0x7f/0xb0 [ 1229.856557] ? do_vfs_ioctl+0xff0/0xff0 [ 1229.860532] do_syscall_64+0x1d5/0x640 [ 1229.864464] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1229.869648] RIP: 0033:0x465f69 [ 1229.872837] RSP: 002b:00007f1a3115e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1229.876088] lowmem_reserve[]: [ 1229.880551] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1229.880557] 0 [ 1229.883638] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1229.883643] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1229.883647] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1229.883652] R13: 00007fff4a017d4f R14: 00007f1a3115e300 R15: 0000000000022000 [ 1229.958571] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1229.972987] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1229.992835] systemd[1]: Stopped Journal Service. [ 1230.014694] 2717 2718 2718 2718 [ 1230.018101] Node 0 DMA32 free:218752kB min:36200kB low:45248kB high:54296kB active_anon:831580kB inactive_anon:29836kB active_file:260kB inactive_file:1708kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:49952kB pagetables:132672kB bounce:0kB free_pcp:1408kB local_pcp:700kB free_cma:0kB [ 1230.055140] systemd[1]: Starting Journal Service... [ 1230.091195] lowmem_reserve[]: 0 0 0 0 0 [ 1230.094889] Mem-Info: [ 1230.095225] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1230.097646] active_anon:210111 inactive_anon:12817 isolated_anon:0 [ 1230.097646] active_file:100 inactive_file:1182 isolated_file:0 [ 1230.097646] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1230.097646] slab_reclaimable:15076 slab_unreclaimable:135550 [ 1230.097646] mapped:53130 shmem:13075 pagetables:35677 bounce:0 [ 1230.097646] free:114186 free_pcp:439 free_cma:0 [ 1230.097663] Node 0 active_anon:831688kB inactive_anon:29868kB active_file:260kB inactive_file:2108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117496kB dirty:12kB writeback:0kB shmem:30832kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 698368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1230.158953] lowmem_reserve[]: 0 0 0 0 0 [ 1230.231066] Node 1 Normal free:26880kB min:53696kB low:67120kB high:80544kB active_anon:8756kB inactive_anon:21400kB active_file:140kB inactive_file:2620kB unevictable:0kB writepending:88kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3488kB pagetables:9888kB bounce:0kB free_pcp:416kB local_pcp:64kB free_cma:0kB [ 1230.261291] lowmem_reserve[]: 0 0 0 0 0 [ 1230.271172] Node 1 active_anon:8756kB inactive_anon:21400kB active_file:140kB inactive_file:2620kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:95024kB dirty:88kB writeback:0kB shmem:21468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1230.271787] Node 0 DMA: 185*4kB (UME) 5*8kB (UME) 1*16kB (E) 0*32kB 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11676kB [ 1230.351068] Node 0 DMA free:11020kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1230.351097] Node 0 DMA32: 18139*4kB (UME) 17499*8kB (UME) 6556*16kB (UME) 1135*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 353764kB [ 1230.411059] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1230.428555] Node 0 DMA32 free:353520kB min:36200kB low:45248kB high:54296kB active_anon:831780kB inactive_anon:29836kB active_file:360kB inactive_file:3508kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:49984kB pagetables:132672kB bounce:0kB free_pcp:164kB local_pcp:56kB free_cma:0kB [ 1230.441146] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1230.489206] Node 1 Normal: 3368*4kB (UM) 4950*8kB (UM) 4087*16kB (U) 2952*32kB (UM) 160*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 223168kB [ 1230.501028] lowmem_reserve[]: 0 0 0 0 0 [ 1230.510579] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1230.521115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1230.572719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1230.575872] lowmem_reserve[]: 0 0 0 0 0 [ 1230.595032] Node 1 Normal free:256848kB min:53696kB low:67120kB high:80544kB active_anon:8756kB inactive_anon:21400kB active_file:140kB inactive_file:2620kB unevictable:0kB writepending:88kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3488kB pagetables:9888kB bounce:0kB free_pcp:1312kB local_pcp:620kB free_cma:0kB [ 1230.601054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1230.641850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1230.661062] 15057 total pagecache pages [ 1230.665197] 0 pages in swap cache [ 1230.668789] Swap cache stats: add 0, delete 0, find 0/0 [ 1230.671036] lowmem_reserve[]: 0 0 0 0 0 [ 1230.681353] Free swap = 0kB [ 1230.684374] Total swap = 0kB [ 1230.684694] Node 0 DMA: [ 1230.687543] 2097051 pages RAM [ 1230.687548] 0 pages HighMem/MovableOnly [ 1230.690204] 185*4kB (UME) 5*8kB (UME) 1*16kB (E) 0*32kB 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11036kB [ 1230.711048] 363840 pages reserved [ 1230.727695] 0 pages cma reserved [ 1230.731284] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1230.743145] Node 0 DMA32: 19308*4kB (UME) 18173*8kB [ 1230.743267] Out of memory (oom_kill_allocating_task): Kill process 12521 (syz-fuzzer) score 0 or sacrifice child [ 1230.748472] Killed process 9356 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1230.760604] systemd-journald[10496]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1230.769026] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1230.794656] oom_reaper: reaped process 9356 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1230.801222] CPU: 1 PID: 10453 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1230.812414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.821003] (UME) [ 1230.821758] Call Trace: [ 1230.821761] 6736*16kB (UME) [ 1230.823906] dump_stack+0x1b2/0x281 [ 1230.826461] 1204*32kB (UME) [ 1230.829466] warn_alloc.cold+0x96/0x1cc [ 1230.840034] ? zone_watermark_ok_safe+0x220/0x220 [ 1230.841016] 0*64kB 0*128kB 0*256kB 0*512kB [ 1230.844884] __alloc_pages_nodemask+0x2127/0x2720 [ 1230.844890] 0*1024kB [ 1230.849195] ? lock_acquire+0x170/0x3f0 [ 1230.860385] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1230.865232] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1230.870688] ? __mutex_unlock_slowpath+0x75/0x770 [ 1230.871000] 0*2048kB 0*4096kB [ 1230.875528] alloc_pages_current+0x155/0x260 [ 1230.875531] = 368920kB [ 1230.875536] Node 0 [ 1230.878707] ion_page_pool_alloc+0x118/0x1b0 [ 1230.884150] systemd-journald[10496]: /dev/kmsg buffer overrun, some messages lost. [ 1230.885686] ion_system_heap_allocate+0x133/0x8c0 [ 1230.890993] Normal: [ 1230.892296] ? _raw_spin_unlock+0x29/0x40 [ 1230.899970] 0*4kB [ 1230.904792] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1230.904801] ? ion_system_contig_heap_create+0x130/0x130 [ 1230.904811] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1230.904823] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1230.930972] 0*8kB 0*16kB [ 1230.933671] ion_alloc+0x27a/0x810 [ 1230.933685] ? ion_dma_buf_release+0x40/0x40 [ 1230.936413] 0*32kB [ 1230.939948] ? __might_fault+0x177/0x1b0 [ 1230.950615] ion_ioctl+0xea/0x1f0 [ 1230.950965] 0*64kB 0*128kB [ 1230.955024] ? ion_query_heaps+0x360/0x360 [ 1230.955036] ? ion_query_heaps+0x360/0x360 [ 1230.957938] 0*256kB [ 1230.962151] do_vfs_ioctl+0x75a/0xff0 [ 1230.962163] ? ioctl_preallocate+0x1a0/0x1a0 [ 1230.962173] ? lock_downgrade+0x740/0x740 [ 1230.980963] 0*512kB 0*1024kB 0*2048kB [ 1230.980997] ? __fget+0x225/0x360 [ 1230.981007] ? do_vfs_ioctl+0xff0/0xff0 [ 1230.984868] 0*4096kB [ 1230.988304] ? security_file_ioctl+0x83/0xb0 [ 1230.999035] SyS_ioctl+0x7f/0xb0 [ 1231.002396] ? do_vfs_ioctl+0xff0/0xff0 [ 1231.006368] do_syscall_64+0x1d5/0x640 [ 1231.010255] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1231.010964] = 0kB [ 1231.015437] RIP: 0033:0x465f69 [ 1231.017477] Node 1 [ 1231.020642] RSP: 002b:00007f98092b3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1231.030550] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1231.030979] Normal: [ 1231.037808] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1231.037815] 4333*4kB [ 1231.040127] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1231.057032] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1231.060982] (UM) [ 1231.064294] R13: 00007fff969f075f R14: 00007f98092b3300 R15: 0000000000022000 [ 1231.064300] 5890*8kB (UM) 5024*16kB (U) 3897*32kB (UM) 2*64kB (U) 2*128kB (U) 0*256kB 2*512kB (U) 0*1024kB 0*2048kB 6*4096kB (U) = 295524kB [ 1231.154578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1231.174481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1231.215117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1231.224361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1231.254494] 18079 total pagecache pages [ 1231.258507] 0 pages in swap cache [ 1231.262269] Swap cache stats: add 0, delete 0, find 0/0 [ 1231.267624] Free swap = 0kB [ 1231.270630] Total swap = 0kB [ 1231.277540] 2097051 pages RAM [ 1231.280660] 0 pages HighMem/MovableOnly [ 1231.294042] systemd[1]: Started Journal Service. [ 1231.294803] 363840 pages reserved [ 1231.314457] 0 pages cma reserved [ 1231.561931] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1231.590979] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1231.596168] CPU: 0 PID: 10454 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 1231.604049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.613398] Call Trace: [ 1231.615985] dump_stack+0x1b2/0x281 [ 1231.619613] warn_alloc.cold+0x96/0x1cc [ 1231.623582] ? zone_watermark_ok_safe+0x220/0x220 [ 1231.628433] __alloc_pages_nodemask+0x2127/0x2720 [ 1231.633277] ? lock_acquire+0x170/0x3f0 [ 1231.637253] ? lock_acquire+0x170/0x3f0 [ 1231.641233] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1231.646081] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1231.651527] ? __mutex_unlock_slowpath+0x75/0x770 [ 1231.656367] alloc_pages_current+0x155/0x260 [ 1231.660775] ion_page_pool_alloc+0x118/0x1b0 [ 1231.665179] ion_system_heap_allocate+0x133/0x8c0 [ 1231.670036] ? _raw_spin_unlock+0x29/0x40 [ 1231.674179] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1231.679196] ? ion_system_contig_heap_create+0x130/0x130 [ 1231.684645] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1231.689656] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1231.694492] ion_alloc+0x27a/0x810 [ 1231.698039] ? ion_dma_buf_release+0x40/0x40 [ 1231.702447] ? __might_fault+0x177/0x1b0 [ 1231.706528] ion_ioctl+0xea/0x1f0 [ 1231.709984] ? ion_query_heaps+0x360/0x360 [ 1231.714221] ? ion_query_heaps+0x360/0x360 [ 1231.718454] do_vfs_ioctl+0x75a/0xff0 [ 1231.722342] ? ioctl_preallocate+0x1a0/0x1a0 [ 1231.726744] ? lock_downgrade+0x740/0x740 [ 1231.730888] ? __fget+0x225/0x360 [ 1231.734331] ? do_vfs_ioctl+0xff0/0xff0 [ 1231.738302] ? security_file_ioctl+0x83/0xb0 [ 1231.742708] SyS_ioctl+0x7f/0xb0 [ 1231.746069] ? do_vfs_ioctl+0xff0/0xff0 [ 1231.750043] do_syscall_64+0x1d5/0x640 [ 1231.753934] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1231.759114] RIP: 0033:0x465f69 [ 1231.762296] RSP: 002b:00007f1a3115e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1231.769998] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1231.777265] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1231.784525] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1231.791789] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1231.799055] R13: 00007fff4a017d4f R14: 00007f1a3115e300 R15: 0000000000022000 [ 1231.830957] warn_alloc_show_mem: 1 callbacks suppressed [ 1231.830985] Mem-Info: [ 1231.838787] active_anon:210171 inactive_anon:14850 isolated_anon:11 [ 1231.838787] active_file:1164 inactive_file:1156 isolated_file:2 [ 1231.838787] unevictable:0 dirty:34 writeback:0 unstable:0 [ 1231.838787] slab_reclaimable:15076 slab_unreclaimable:136762 [ 1231.838787] mapped:45807 shmem:15123 pagetables:35636 bounce:0 [ 1231.838787] free:48877 free_pcp:302 free_cma:0 [ 1231.921004] Node 0 active_anon:831976kB inactive_anon:38028kB active_file:72kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:116388kB dirty:48kB writeback:0kB shmem:39024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 698368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1231.985474] Node 1 active_anon:8704kB inactive_anon:21372kB active_file:88kB inactive_file:176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59420kB dirty:20kB writeback:0kB shmem:21468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1232.028533] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1232.057695] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1232.070779] systemd-journal cpuset=/ mems_allowed=0-1 [ 1232.076168] CPU: 0 PID: 10496 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 1232.084139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.093490] Call Trace: [ 1232.094247] lowmem_reserve[]: 0 2717 [ 1232.096076] dump_stack+0x1b2/0x281 [ 1232.096088] dump_header+0x178/0x82f [ 1232.099792] 2718 [ 1232.103495] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1232.103504] ? ___ratelimit+0x2cd/0x530 [ 1232.103512] oom_kill_process.cold+0x10/0xb18 [ 1232.103528] out_of_memory+0xe3e/0x1190 [ 1232.103540] ? oom_killer_disable+0x1c0/0x1c0 [ 1232.103546] ? mutex_trylock+0x152/0x1a0 [ 1232.103558] __alloc_pages_nodemask+0x23e1/0x2720 [ 1232.124910] 2718 [ 1232.126804] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1232.140300] 2718 [ 1232.142190] alloc_pages_current+0x155/0x260 [ 1232.142202] filemap_fault+0xea3/0x1980 [ 1232.142220] ext4_filemap_fault+0x84/0xb0 [ 1232.142231] __do_fault+0xfa/0x380 [ 1232.149116] __handle_mm_fault+0x2497/0x4620 [ 1232.165291] Node 0 DMA32 free:17576kB min:36200kB low:45248kB high:54296kB active_anon:831944kB inactive_anon:38028kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:49952kB pagetables:132744kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1232.169498] ? vm_insert_page+0x7c0/0x7c0 [ 1232.169510] ? retint_kernel+0x2d/0x2d [ 1232.201022] syz-executor.4: [ 1232.202530] handle_mm_fault+0x391/0x860 [ 1232.206381] page allocation failure: order:0 [ 1232.209384] __do_page_fault+0x549/0xad0 [ 1232.216400] lowmem_reserve[]: [ 1232.217809] ? spurious_fault+0x640/0x640 [ 1232.221887] 0 [ 1232.224941] ? do_page_fault+0x60/0x500 [ 1232.229054] 0 [ 1232.230837] ? page_fault+0x2f/0x50 [ 1232.230846] page_fault+0x45/0x50 [ 1232.230854] RIP: 52a3e040:0x7ffd90d5e470 [ 1232.230858] RSP: 90d5e4b0:000000000000000d EFLAGS: ffffffff [ 1232.247858] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1232.250885] Mem-Info: [ 1232.253627] (null) [ 1232.264865] active_anon:210172 inactive_anon:14850 isolated_anon:0 [ 1232.264865] active_file:31 inactive_file:35 isolated_file:0 [ 1232.264865] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1232.264865] slab_reclaimable:15066 slab_unreclaimable:136860 [ 1232.264865] mapped:43919 shmem:15123 pagetables:35614 bounce:0 [ 1232.264865] free:13813 free_pcp:0 free_cma:0 [ 1232.265268] syz-executor.4 cpuset= [ 1232.298661] 0 0 0 [ 1232.304380] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1232.305625] Node 0 active_anon:831984kB inactive_anon:38028kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116356kB dirty:0kB writeback:0kB shmem:39024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 698368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1232.330027] lowmem_reserve[]: 0 0 0 0 0 [ 1232.361949] Node 1 Normal free:26724kB min:53696kB low:67120kB high:80544kB active_anon:8704kB inactive_anon:21372kB active_file:260kB inactive_file:140kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3456kB pagetables:9712kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1232.363385] / [ 1232.390803] lowmem_reserve[]: 0 0 0 0 0 [ 1232.396524] Node 0 DMA: 170*4kB (UME) 4*8kB (ME) 2*16kB (UE) 1*32kB (U) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB [ 1232.396600] mems_allowed=0-1 [ 1232.396612] CPU: 0 PID: 10453 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1232.407583] (ME) [ 1232.410611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.418503] 2*1024kB [ 1232.420517] Call Trace: [ 1232.429910] (ME) [ 1232.432251] dump_stack+0x1b2/0x281 [ 1232.432266] warn_alloc.cold+0x96/0x1cc [ 1232.434843] Node 1 active_anon:8704kB inactive_anon:21372kB active_file:68kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59320kB dirty:20kB writeback:0kB shmem:21468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1232.436869] ? zone_watermark_ok_safe+0x220/0x220 [ 1232.440465] Node 0 [ 1232.444418] ? usleep_range+0x130/0x130 [ 1232.444426] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1232.444437] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1232.444447] ? run_timer_softirq+0x5a0/0x5a0 [ 1232.444461] __alloc_pages_nodemask+0x2127/0x2720 [ 1232.444474] ? lock_acquire+0x170/0x3f0 [ 1232.444488] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1232.444499] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1232.444515] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1232.471910] 1*2048kB [ 1232.476647] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1232.478853] (E) [ 1232.482811] alloc_pages_current+0x155/0x260 [ 1232.482826] ion_page_pool_alloc+0x118/0x1b0 [ 1232.482837] ion_system_heap_allocate+0x133/0x8c0 [ 1232.482849] ? _raw_spin_unlock+0x29/0x40 [ 1232.487922] 1*4096kB [ 1232.492921] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1232.492931] ? ion_system_contig_heap_create+0x130/0x130 [ 1232.492940] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1232.492949] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1232.492962] ion_alloc+0x27a/0x810 [ 1232.497342] (M) [ 1232.502170] ? ion_dma_buf_release+0x40/0x40 [ 1232.502182] ? __might_fault+0x177/0x1b0 [ 1232.502196] ion_ioctl+0xea/0x1f0 [ 1232.506160] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1232.510966] ? ion_query_heaps+0x360/0x360 [ 1232.510979] ? ion_query_heaps+0x360/0x360 [ 1232.510989] do_vfs_ioctl+0x75a/0xff0 [ 1232.511002] ? ioctl_preallocate+0x1a0/0x1a0 [ 1232.515467] lowmem_reserve[]: [ 1232.520894] ? lock_downgrade+0x740/0x740 [ 1232.520912] ? __fget+0x225/0x360 [ 1232.520921] ? do_vfs_ioctl+0xff0/0xff0 [ 1232.520931] ? security_file_ioctl+0x83/0xb0 [ 1232.520940] SyS_ioctl+0x7f/0xb0 [ 1232.527057] = 10952kB [ 1232.528150] ? do_vfs_ioctl+0xff0/0xff0 [ 1232.530100] Node 0 [ 1232.534488] do_syscall_64+0x1d5/0x640 [ 1232.534505] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1232.534513] RIP: 0033:0x465f69 [ 1232.534517] RSP: 002b:00007f98092b3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1232.534526] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1232.534531] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1232.534536] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1232.534541] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1232.534546] R13: 00007fff969f075f R14: 00007f98092b3300 R15: 0000000000022000 [ 1232.550872] 0 [ 1232.590882] DMA32: [ 1232.689935] 2717 2718 2718 2718 [ 1232.774256] Node 0 DMA32 free:66820kB min:36200kB low:45248kB high:54296kB active_anon:831944kB inactive_anon:38028kB active_file:56kB inactive_file:260kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:49952kB pagetables:132744kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 1232.800872] 2281*4kB (UME) 804*8kB (ME) 114*16kB (UME) 5*32kB (UM) 703*64kB (UM) 75*128kB (UM) 18*256kB (U) 2*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 80836kB [ 1232.840850] lowmem_reserve[]: 0 0 0 0 0 [ 1232.840896] Node 0 Normal: [ 1232.844863] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1232.847784] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1232.900948] Node 1 Normal: 1*4kB (M) 0*8kB 2*16kB (UM) 733*32kB (U) 4441*64kB (UM) 426*128kB (UM) 101*256kB (UM) 44*512kB (UM) 127*1024kB (UM) 19*2048kB (U) 15*4096kB (U) = 641028kB [ 1232.921425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1232.924237] lowmem_reserve[]: [ 1232.930274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1232.930281] 0 [ 1232.933540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1232.964681] 0 0 0 0 [ 1232.967027] Node 1 Normal free:641028kB min:53696kB low:67120kB high:80544kB active_anon:8704kB inactive_anon:21372kB active_file:12kB inactive_file:2104kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3456kB pagetables:9712kB bounce:0kB free_pcp:176kB local_pcp:120kB free_cma:0kB [ 1232.970837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1233.034485] lowmem_reserve[]: 0 0 0 0 0 [ 1233.038510] Node 0 DMA: 170*4kB (UME) 4*8kB (ME) 2*16kB (UE) 1*32kB (U) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11656kB [ 1233.040863] 15778 total pagecache pages [ 1233.058236] Node 0 DMA32: 18603*4kB (UME) 3282*8kB (UME) 116*16kB (UME) 5*32kB (UM) 724*64kB (UM) 81*128kB (UM) 29*256kB (U) 6*512kB (U) 4*1024kB (U) 1*2048kB (U) 0*4096kB = 176028kB [ 1233.070856] 0 pages in swap cache [ 1233.079292] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1233.090085] Swap cache stats: add 0, delete 0, find 0/0 [ 1233.090090] Free swap = 0kB [ 1233.090092] Total swap = 0kB [ 1233.090100] 2097051 pages RAM [ 1233.090102] 0 pages HighMem/MovableOnly [ 1233.090105] 363840 pages reserved [ 1233.090108] 0 pages cma reserved [ 1233.119500] Node 1 Normal: 1*4kB (M) 0*8kB 2*16kB (UM) 733*32kB (U) 4441*64kB (UM) 426*128kB (UM) 101*256kB (UM) 44*512kB (UM) 127*1024kB (UM) 19*2048kB (U) 15*4096kB (U) = 641028kB [ 1233.140051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1233.148975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1233.173525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1233.202693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1233.222169] 15778 total pagecache pages [ 1233.226163] 0 pages in swap cache [ 1233.229603] Swap cache stats: add 0, delete 0, find 0/0 [ 1233.256215] Free swap = 0kB [ 1233.259255] Total swap = 0kB [ 1233.262315] 2097051 pages RAM [ 1233.265586] 0 pages HighMem/MovableOnly [ 1233.269579] 363840 pages reserved [ 1233.290818] 0 pages cma reserved [ 1233.294213] Out of memory (oom_kill_allocating_task): Kill process 10496 (systemd-journal) score 0 or sacrifice child [ 1233.305192] Killed process 10496 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1468kB [ 1233.342077] oom_reaper: reaped process 10496 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1468kB [ 1233.433282] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1233.478669] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 10:38:51 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) [ 1233.567743] systemd[1]: Stopped Journal Service. [ 1233.610518] systemd[1]: Starting Journal Service... [ 1233.637019] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1233.735702] systemd-journald[10518]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1234.086933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.126332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.154864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.169583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.185839] device bridge_slave_1 left promiscuous mode [ 1234.195964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.203611] device bridge_slave_0 left promiscuous mode [ 1234.210061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.225122] device veth1_macvtap left promiscuous mode [ 1234.231078] device veth0_macvtap left promiscuous mode [ 1234.236901] device veth1_vlan left promiscuous mode 10:38:52 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:52 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) [ 1234.255217] device veth0_vlan left promiscuous mode 10:38:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:38:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) [ 1234.878616] device hsr_slave_1 left promiscuous mode [ 1234.964112] device hsr_slave_0 left promiscuous mode 10:38:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1235.014318] team0 (unregistering): Port device team_slave_1 removed [ 1235.055605] team0 (unregistering): Port device team_slave_0 removed [ 1235.128304] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1235.195598] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1235.224146] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) 10:38:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1235.329723] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1235.357861] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1235.366225] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1235.379274] CPU: 0 PID: 10522 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 1235.387178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.396534] Call Trace: [ 1235.399129] dump_stack+0x1b2/0x281 [ 1235.402769] warn_alloc.cold+0x96/0x1cc [ 1235.406751] ? zone_watermark_ok_safe+0x220/0x220 [ 1235.411618] __alloc_pages_nodemask+0x2127/0x2720 [ 1235.421193] ? lock_acquire+0x170/0x3f0 [ 1235.423331] syz-executor.0 cpuset= [ 1235.425181] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1235.425200] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1235.425212] ? __mutex_unlock_slowpath+0x75/0x770 [ 1235.433674] / [ 1235.439018] alloc_pages_current+0x155/0x260 [ 1235.449952] ion_page_pool_alloc+0x118/0x1b0 [ 1235.454457] ion_system_heap_allocate+0x133/0x8c0 [ 1235.459307] ? ion_alloc+0x187/0x810 [ 1235.463033] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1235.468496] ? ion_system_contig_heap_create+0x130/0x130 [ 1235.471246] mems_allowed=0-1 10:38:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1235.473960] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1235.473974] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1235.473988] ion_alloc+0x204/0x810 [ 1235.474002] ? ion_dma_buf_release+0x40/0x40 [ 1235.494847] ? __might_fault+0x177/0x1b0 [ 1235.498914] ion_ioctl+0xea/0x1f0 [ 1235.502397] ? ion_query_heaps+0x360/0x360 [ 1235.506735] ? ion_query_heaps+0x360/0x360 [ 1235.510968] do_vfs_ioctl+0x75a/0xff0 [ 1235.514765] ? ioctl_preallocate+0x1a0/0x1a0 [ 1235.519176] ? lock_downgrade+0x740/0x740 [ 1235.523326] ? __fget+0x225/0x360 [ 1235.526778] ? do_vfs_ioctl+0xff0/0xff0 [ 1235.530754] ? security_file_ioctl+0x83/0xb0 [ 1235.531679] syz-executor.2 cpuset= [ 1235.535170] SyS_ioctl+0x7f/0xb0 [ 1235.535182] ? do_vfs_ioctl+0xff0/0xff0 [ 1235.535195] do_syscall_64+0x1d5/0x640 [ 1235.535213] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1235.535224] RIP: 0033:0x465f69 [ 1235.558467] RSP: 002b:00007f7b1dce0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.566175] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1235.570453] / [ 1235.573437] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1235.573446] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1235.589759] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1235.593986] mems_allowed=0-1 [ 1235.597026] R13: 00007ffc6d6ecd2f R14: 00007f7b1dce0300 R15: 0000000000022000 [ 1235.616293] CPU: 1 PID: 10533 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1235.624554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.633908] Call Trace: [ 1235.636501] dump_stack+0x1b2/0x281 [ 1235.640137] warn_alloc.cold+0x96/0x1cc [ 1235.644118] ? zone_watermark_ok_safe+0x220/0x220 [ 1235.647213] bond0 (unregistering): Released all slaves [ 1235.648998] __alloc_pages_nodemask+0x2127/0x2720 [ 1235.649010] ? retint_kernel+0x2d/0x2d [ 1235.649025] ? lock_acquire+0x170/0x3f0 [ 1235.658369] warn_alloc_show_mem: 1 callbacks suppressed [ 1235.658372] Mem-Info: [ 1235.659127] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1235.666434] active_anon:210899 inactive_anon:16880 isolated_anon:24 [ 1235.666434] active_file:1648 inactive_file:3432 isolated_file:44 [ 1235.666434] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1235.666434] slab_reclaimable:15066 slab_unreclaimable:134812 [ 1235.666434] mapped:47487 shmem:17168 pagetables:35689 bounce:0 [ 1235.666434] free:60950 free_pcp:245 free_cma:0 [ 1235.666956] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1235.672758] Node 0 active_anon:833412kB inactive_anon:37956kB active_file:3504kB inactive_file:11032kB unevictable:0kB isolated(anon):96kB isolated(file):48kB mapped:124896kB dirty:8kB writeback:0kB shmem:39012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 700416kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1235.674692] ? __mutex_unlock_slowpath+0x75/0x770 [ 1235.679526] Node 1 active_anon:10184kB inactive_anon:29564kB active_file:3088kB inactive_file:2696kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:65052kB dirty:24kB writeback:0kB shmem:29660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1235.713510] alloc_pages_current+0x155/0x260 [ 1235.713524] ion_page_pool_alloc+0x118/0x1b0 [ 1235.713534] ion_system_heap_allocate+0x133/0x8c0 [ 1235.713545] ? ion_alloc+0x187/0x810 [ 1235.718970] Node 0 [ 1235.747433] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1235.747445] ? ion_system_contig_heap_create+0x130/0x130 [ 1235.747454] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1235.747465] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1235.752313] DMA free:11124kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1235.780047] ion_alloc+0x204/0x810 [ 1235.780064] ? ion_dma_buf_release+0x40/0x40 [ 1235.780076] ? __might_fault+0x177/0x1b0 [ 1235.780090] ion_ioctl+0xea/0x1f0 [ 1235.784499] lowmem_reserve[]: [ 1235.788876] ? ion_query_heaps+0x360/0x360 [ 1235.793708] 0 [ 1235.797393] ? ion_query_heaps+0x360/0x360 [ 1235.799598] 2717 [ 1235.805030] do_vfs_ioctl+0x75a/0xff0 [ 1235.805041] ? ioctl_preallocate+0x1a0/0x1a0 [ 1235.805052] ? lock_downgrade+0x740/0x740 [ 1235.810473] 2718 [ 1235.815506] ? __fget+0x225/0x360 [ 1235.815515] ? do_vfs_ioctl+0xff0/0xff0 [ 1235.815526] ? security_file_ioctl+0x83/0xb0 [ 1235.820343] 2718 [ 1235.845918] SyS_ioctl+0x7f/0xb0 [ 1235.845925] ? do_vfs_ioctl+0xff0/0xff0 [ 1235.845936] do_syscall_64+0x1d5/0x640 [ 1235.845952] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1235.849466] 2718 [ 1235.853945] RIP: 0033:0x465f69 [ 1235.853950] RSP: 002b:00007fdb50538188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.853959] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1235.853966] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1235.861439] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1235.861445] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1235.861450] R13: 00007fff7572ef8f R14: 00007fdb50538300 R15: 0000000000022000 [ 1235.863013] syz-executor.5: [ 1235.878952] Node 0 [ 1235.895341] CPU: 1 PID: 10528 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 1235.895348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.943444] DMA32 free:194964kB min:36200kB low:45248kB high:54296kB active_anon:833372kB inactive_anon:37956kB active_file:3252kB inactive_file:10320kB unevictable:0kB writepending:8kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50400kB pagetables:132664kB bounce:0kB free_pcp:828kB local_pcp:112kB free_cma:0kB [ 1235.949587] Call Trace: [ 1235.949608] dump_stack+0x1b2/0x281 [ 1235.949622] warn_alloc.cold+0x96/0x1cc [ 1235.949633] ? zone_watermark_ok_safe+0x220/0x220 [ 1235.949653] __alloc_pages_nodemask+0x2127/0x2720 [ 1236.042838] ? io_schedule_timeout+0x140/0x140 [ 1236.047417] ? lock_acquire+0x170/0x3f0 [ 1236.051386] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1236.056224] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1236.061701] ? __mutex_unlock_slowpath+0x75/0x770 [ 1236.066534] alloc_pages_current+0x155/0x260 [ 1236.070934] ion_page_pool_alloc+0x118/0x1b0 [ 1236.075338] ion_system_heap_allocate+0x133/0x8c0 [ 1236.080196] ? ion_alloc+0x187/0x810 [ 1236.083907] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1236.089355] ? ion_system_contig_heap_create+0x130/0x130 [ 1236.094800] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1236.099814] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1236.104646] ion_alloc+0x204/0x810 [ 1236.108178] ? ion_dma_buf_release+0x40/0x40 [ 1236.112615] ? __might_fault+0x177/0x1b0 [ 1236.116702] ion_ioctl+0xea/0x1f0 [ 1236.120178] ? ion_query_heaps+0x360/0x360 [ 1236.124400] ? ion_query_heaps+0x360/0x360 [ 1236.128623] do_vfs_ioctl+0x75a/0xff0 [ 1236.132416] ? ioctl_preallocate+0x1a0/0x1a0 [ 1236.136845] ? lock_downgrade+0x740/0x740 [ 1236.140987] ? __fget+0x225/0x360 [ 1236.144431] ? do_vfs_ioctl+0xff0/0xff0 [ 1236.148417] ? security_file_ioctl+0x83/0xb0 [ 1236.152853] SyS_ioctl+0x7f/0xb0 [ 1236.156207] ? do_vfs_ioctl+0xff0/0xff0 [ 1236.160175] do_syscall_64+0x1d5/0x640 [ 1236.164060] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1236.169235] RIP: 0033:0x465f69 [ 1236.172412] RSP: 002b:00007f1a3115e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 10:38:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) [ 1236.180106] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1236.187365] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1236.194625] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1236.201882] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1236.209142] R13: 00007fff4a017d4f R14: 00007f1a3115e300 R15: 0000000000022000 [ 1236.225049] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1236.256449] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1236.269456] CPU: 1 PID: 10532 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1236.277369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.286837] Call Trace: [ 1236.289418] dump_stack+0x1b2/0x281 [ 1236.293039] warn_alloc.cold+0x96/0x1cc [ 1236.297005] ? zone_watermark_ok_safe+0x220/0x220 [ 1236.301847] __alloc_pages_nodemask+0x2127/0x2720 [ 1236.306682] ? io_schedule_timeout+0x140/0x140 [ 1236.311258] ? lock_acquire+0x170/0x3f0 [ 1236.315225] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1236.320062] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1236.325505] ? __mutex_unlock_slowpath+0x75/0x770 [ 1236.330336] ? alloc_pages_current+0x123/0x260 [ 1236.334910] alloc_pages_current+0x155/0x260 [ 1236.339309] ion_page_pool_alloc+0x118/0x1b0 [ 1236.343707] ion_system_heap_allocate+0x133/0x8c0 [ 1236.348541] ? ion_alloc+0x187/0x810 [ 1236.352247] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1236.357688] ? ion_system_contig_heap_create+0x130/0x130 [ 1236.363127] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1236.368133] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1236.372968] ion_alloc+0x204/0x810 [ 1236.376501] ? ion_dma_buf_release+0x40/0x40 [ 1236.380898] ? __might_fault+0x177/0x1b0 [ 1236.384947] ion_ioctl+0xea/0x1f0 [ 1236.388388] ? ion_query_heaps+0x360/0x360 [ 1236.392612] ? ion_query_heaps+0x360/0x360 [ 1236.396848] do_vfs_ioctl+0x75a/0xff0 [ 1236.400637] ? ioctl_preallocate+0x1a0/0x1a0 [ 1236.405035] ? lock_downgrade+0x740/0x740 [ 1236.409175] ? __fget+0x225/0x360 [ 1236.412663] ? do_vfs_ioctl+0xff0/0xff0 [ 1236.416629] ? security_file_ioctl+0x83/0xb0 [ 1236.421029] SyS_ioctl+0x7f/0xb0 [ 1236.424381] ? do_vfs_ioctl+0xff0/0xff0 [ 1236.428343] do_syscall_64+0x1d5/0x640 [ 1236.432226] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1236.437406] RIP: 0033:0x465f69 [ 1236.440584] RSP: 002b:00007fc9caa07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.448316] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 10:38:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) [ 1236.455590] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1236.462857] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1236.470117] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1236.477376] R13: 00007ffdf9c5846f R14: 00007fc9caa07300 R15: 0000000000022000 [ 1236.492531] lowmem_reserve[]: 0 0 0 0 0 10:38:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) [ 1236.510328] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1236.584175] lowmem_reserve[]: 0 0 0 0 0 [ 1236.588982] Node 1 Normal free:164224kB min:53696kB low:67120kB high:80544kB active_anon:10036kB inactive_anon:29560kB active_file:3224kB inactive_file:2616kB unevictable:0kB writepending:84kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3488kB pagetables:10092kB bounce:0kB free_pcp:752kB local_pcp:8kB free_cma:0kB [ 1236.628650] lowmem_reserve[]: 0 0 0 0 0 [ 1236.633261] Node 0 DMA: 226*4kB (UME) 8*8kB (UME) 1*16kB (E) 1*32kB (U) 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11896kB [ 1236.654766] Node 0 DMA32: 1285*4kB (UME) 8152*8kB (UE) 4311*16kB (UE) 1427*32kB (U) 140*64kB (UM) 26*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 197284kB [ 1236.677230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1236.714841] Node 1 Normal: 13306*4kB (UM) 9637*8kB (UM) 2056*16kB (UM) 2428*32kB (UM) 472*64kB (UM) 2*128kB (U) 4*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 12*4096kB (U) = 323600kB [ 1236.751175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1236.770672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1236.788454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1236.801504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1236.810393] 22622 total pagecache pages [ 1236.815687] 0 pages in swap cache [ 1236.819358] Swap cache stats: add 0, delete 0, find 0/0 [ 1236.825938] Free swap = 0kB [ 1236.829186] Total swap = 0kB [ 1236.833434] 2097051 pages RAM [ 1236.834572] Mem-Info: [ 1236.836754] 0 pages HighMem/MovableOnly [ 1236.845194] 363840 pages reserved [ 1236.846068] active_anon:210868 inactive_anon:16880 isolated_anon:0 [ 1236.846068] active_file:1888 inactive_file:3637 isolated_file:32 [ 1236.846068] unevictable:0 dirty:45 writeback:0 unstable:0 [ 1236.846068] slab_reclaimable:15066 slab_unreclaimable:135821 [ 1236.846068] mapped:56362 shmem:17168 pagetables:35711 bounce:0 [ 1236.846068] free:161511 free_pcp:370 free_cma:0 [ 1236.848816] 0 pages cma reserved [ 1236.934305] Node 0 active_anon:833436kB inactive_anon:37960kB active_file:4328kB inactive_file:11932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160332kB dirty:96kB writeback:0kB shmem:39016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 700416kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1236.998871] Node 1 active_anon:10036kB inactive_anon:29560kB active_file:3104kB inactive_file:2496kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65116kB dirty:84kB writeback:0kB shmem:29656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1237.072267] Node 0 DMA free:11896kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.166804] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1237.186481] Node 0 DMA32 free:47724kB min:36200kB low:45248kB high:54296kB active_anon:833296kB inactive_anon:37960kB active_file:3728kB inactive_file:11636kB unevictable:0kB writepending:96kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50432kB pagetables:132752kB bounce:0kB free_pcp:796kB local_pcp:648kB free_cma:0kB [ 1237.297116] lowmem_reserve[]: 0 0 0 0 0 [ 1237.310150] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.402327] lowmem_reserve[]: 0 0 0 0 0 [ 1237.419402] Node 1 Normal free:509756kB min:53696kB low:67120kB high:80544kB active_anon:10036kB inactive_anon:29560kB active_file:3224kB inactive_file:2616kB unevictable:0kB writepending:84kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3488kB pagetables:10092kB bounce:0kB free_pcp:592kB local_pcp:72kB free_cma:0kB [ 1237.541958] lowmem_reserve[]: 0 0 0 0 0 [ 1237.545981] Node 0 DMA: 24*4kB (UME) 8*8kB (UME) 1*16kB (E) 1*32kB (U) 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11088kB [ 1237.610461] Node 0 DMA32: 562*4kB (ME) 776*8kB (ME) 143*16kB (ME) 568*32kB (UME) 369*64kB (UM) 28*128kB (UM) 4*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 57656kB [ 1237.663749] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1237.703338] Node 1 Normal: 181*4kB (M) 8486*8kB (UM) 3965*16kB (UM) 4286*32kB (UM) 1096*64kB (UM) 3*128kB (U) 4*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 12*4096kB (U) = 391956kB [ 1237.763319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1237.803742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1237.823306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1237.850468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1237.859080] 22572 total pagecache pages [ 1237.903726] 0 pages in swap cache [ 1237.907329] Swap cache stats: add 0, delete 0, find 0/0 [ 1237.950495] Free swap = 0kB [ 1237.953646] Total swap = 0kB [ 1237.956670] 2097051 pages RAM [ 1237.959800] 0 pages HighMem/MovableOnly [ 1237.990447] 363840 pages reserved [ 1237.994068] 0 pages cma reserved [ 1239.328794] oom_reaper: reaped process 10528 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1239.439314] oom_reaper: reaped process 10522 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1239.475105] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1239.492421] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1239.503676] systemd-journal cpuset=/ mems_allowed=0-1 [ 1239.507784] syz-executor.1 cpuset=/ [ 1239.509478] CPU: 1 PID: 10518 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 1239.509484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.513138] mems_allowed=0-1 [ 1239.521055] Call Trace: [ 1239.521073] dump_stack+0x1b2/0x281 [ 1239.521086] dump_header+0x178/0x82f [ 1239.521097] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1239.548619] ? ___ratelimit+0x2cd/0x530 [ 1239.552585] oom_kill_process.cold+0x10/0xb18 [ 1239.557074] out_of_memory+0xe3e/0x1190 [ 1239.561040] ? oom_killer_disable+0x1c0/0x1c0 [ 1239.565520] ? mutex_trylock+0x152/0x1a0 [ 1239.569570] __alloc_pages_nodemask+0x23e1/0x2720 [ 1239.574413] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1239.579253] alloc_pages_current+0x155/0x260 [ 1239.583651] filemap_fault+0xea3/0x1980 [ 1239.587629] ext4_filemap_fault+0x84/0xb0 [ 1239.591764] __do_fault+0xfa/0x380 [ 1239.595290] __handle_mm_fault+0x2497/0x4620 [ 1239.599682] ? ep_poll+0x1ab/0xa50 [ 1239.603212] ? vm_insert_page+0x7c0/0x7c0 [ 1239.607355] handle_mm_fault+0x391/0x860 [ 1239.611404] __do_page_fault+0x549/0xad0 [ 1239.615457] ? spurious_fault+0x640/0x640 [ 1239.619590] ? do_page_fault+0x60/0x500 [ 1239.623549] ? page_fault+0x2f/0x50 [ 1239.627162] page_fault+0x45/0x50 [ 1239.630606] RIP: 0001:0xffffffffffffffff [ 1239.634650] RSP: 8276a1e0:00007ffdc7c89240 EFLAGS: 7ffdc7c89050 [ 1239.634668] CPU: 0 PID: 10522 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 1239.648609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.653815] syz-executor.2: [ 1239.657963] Call Trace: [ 1239.657967] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1239.661010] dump_stack+0x1b2/0x281 [ 1239.661023] warn_alloc.cold+0x96/0x1cc [ 1239.661034] ? zone_watermark_ok_safe+0x220/0x220 [ 1239.661042] ? usleep_range+0x130/0x130 [ 1239.661050] ? try_to_free_pages+0x23f/0x6e0 [ 1239.661059] ? _find_next_bit+0xdb/0x100 [ 1239.661069] ? run_timer_softirq+0x5a0/0x5a0 [ 1239.661085] __alloc_pages_nodemask+0x2127/0x2720 [ 1239.661101] ? lock_acquire+0x170/0x3f0 [ 1239.661116] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1239.674439] Mem-Info: [ 1239.677192] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1239.689792] (null) [ 1239.689975] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1239.699673] syz-executor.2 cpuset= [ 1239.702843] alloc_pages_current+0x155/0x260 [ 1239.702859] ion_page_pool_alloc+0x118/0x1b0 [ 1239.702869] ion_system_heap_allocate+0x133/0x8c0 [ 1239.702879] ? ion_alloc+0x187/0x810 [ 1239.702889] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1239.702899] ? ion_system_contig_heap_create+0x130/0x130 [ 1239.702909] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1239.702919] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1239.702931] ion_alloc+0x204/0x810 [ 1239.721112] active_anon:210363 inactive_anon:16880 isolated_anon:0 [ 1239.721112] active_file:1 inactive_file:21 isolated_file:0 [ 1239.721112] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1239.721112] slab_reclaimable:15065 slab_unreclaimable:135441 [ 1239.721112] mapped:52612 shmem:17168 pagetables:35733 bounce:0 [ 1239.721112] free:13803 free_pcp:110 free_cma:0 [ 1239.723561] ? ion_dma_buf_release+0x40/0x40 [ 1239.725697] Node 0 active_anon:831492kB inactive_anon:37960kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149712kB dirty:0kB writeback:0kB shmem:39016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 700416kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1239.731133] ? __might_fault+0x177/0x1b0 [ 1239.731145] ion_ioctl+0xea/0x1f0 [ 1239.731154] ? ion_query_heaps+0x360/0x360 [ 1239.731165] ? ion_query_heaps+0x360/0x360 [ 1239.731174] do_vfs_ioctl+0x75a/0xff0 [ 1239.731184] ? ioctl_preallocate+0x1a0/0x1a0 [ 1239.731193] ? lock_downgrade+0x740/0x740 [ 1239.731207] ? __fget+0x225/0x360 [ 1239.731217] ? do_vfs_ioctl+0xff0/0xff0 [ 1239.731228] ? security_file_ioctl+0x83/0xb0 [ 1239.731239] SyS_ioctl+0x7f/0xb0 [ 1239.731246] ? do_vfs_ioctl+0xff0/0xff0 [ 1239.731256] do_syscall_64+0x1d5/0x640 [ 1239.731271] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1239.731280] RIP: 0033:0x465f69 [ 1239.747204] / [ 1239.748435] RSP: 002b:00007f7b1dce0188 EFLAGS: 00000246 [ 1239.755589] mems_allowed=0-1 [ 1239.757576] ORIG_RAX: 0000000000000010 [ 1239.776234] Node 1 active_anon:9960kB inactive_anon:29560kB active_file:0kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60736kB dirty:8kB writeback:0kB shmem:29656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1239.776579] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1239.918341] Node 0 [ 1239.943521] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1239.943526] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1239.943530] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1239.943534] R13: 00007ffc6d6ecd2f R14: 00007f7b1dce0300 R15: 0000000000022000 [ 1239.956502] warn_alloc_show_mem: 2 callbacks suppressed [ 1239.956505] Mem-Info: [ 1239.973935] CPU: 1 PID: 10528 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 1239.982225] active_anon:210341 inactive_anon:16880 isolated_anon:0 [ 1239.982225] active_file:13 inactive_file:13 isolated_file:0 [ 1239.982225] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1239.982225] slab_reclaimable:15064 slab_unreclaimable:135438 [ 1239.982225] mapped:52590 shmem:17168 pagetables:35732 bounce:0 [ 1239.982225] free:13803 free_pcp:110 free_cma:0 [ 1239.982479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.987841] Node 0 active_anon:831492kB inactive_anon:37960kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149712kB dirty:0kB writeback:0kB shmem:39016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 698368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1239.990228] Call Trace: [ 1239.990247] dump_stack+0x1b2/0x281 [ 1239.990260] warn_alloc.cold+0x96/0x1cc [ 1239.990272] ? zone_watermark_ok_safe+0x220/0x220 [ 1239.998153] Node 1 active_anon:9872kB inactive_anon:29560kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60648kB dirty:0kB writeback:0kB shmem:29656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1240.031621] ? usleep_range+0x130/0x130 [ 1240.031630] ? try_to_free_pages+0x23f/0x6e0 [ 1240.031640] ? _find_next_bit+0xdb/0x100 [ 1240.031650] ? run_timer_softirq+0x5a0/0x5a0 [ 1240.041015] Node 0 [ 1240.068839] __alloc_pages_nodemask+0x2127/0x2720 [ 1240.068855] ? lock_acquire+0x170/0x3f0 [ 1240.071447] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1240.075043] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1240.079138] lowmem_reserve[]: [ 1240.083984] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1240.083999] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1240.084016] alloc_pages_current+0x155/0x260 [ 1240.084029] ion_page_pool_alloc+0x118/0x1b0 [ 1240.111202] 0 [ 1240.115144] ion_system_heap_allocate+0x133/0x8c0 [ 1240.119525] 2717 [ 1240.123576] ? ion_alloc+0x187/0x810 [ 1240.123587] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1240.123595] ? ion_system_contig_heap_create+0x130/0x130 [ 1240.123607] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1240.127997] 2718 [ 1240.130235] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1240.130246] ion_alloc+0x204/0x810 [ 1240.130263] ? ion_dma_buf_release+0x40/0x40 [ 1240.135088] 2718 [ 1240.139054] ? __might_fault+0x177/0x1b0 [ 1240.164667] 2718 [ 1240.169481] ion_ioctl+0xea/0x1f0 [ 1240.177051] ? ion_query_heaps+0x360/0x360 [ 1240.182503] Node 0 [ 1240.186888] ? ion_query_heaps+0x360/0x360 [ 1240.191304] DMA32 free:17596kB min:36200kB low:45248kB high:54296kB active_anon:831452kB inactive_anon:37960kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50336kB pagetables:132840kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1240.193072] do_vfs_ioctl+0x75a/0xff0 [ 1240.197892] lowmem_reserve[]: [ 1240.199994] ? ioctl_preallocate+0x1a0/0x1a0 [ 1240.203748] 0 [ 1240.209170] ? lock_downgrade+0x740/0x740 [ 1240.209185] ? __fget+0x225/0x360 [ 1240.214632] 0 [ 1240.219620] ? do_vfs_ioctl+0xff0/0xff0 [ 1240.221699] 0 [ 1240.226515] ? security_file_ioctl+0x83/0xb0 [ 1240.230039] 0 [ 1240.234445] SyS_ioctl+0x7f/0xb0 [ 1240.234453] ? do_vfs_ioctl+0xff0/0xff0 [ 1240.234466] do_syscall_64+0x1d5/0x640 [ 1240.236511] 0 [ 1240.240568] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1240.240577] RIP: 0033:0x465f69 [ 1240.246056] RSP: 002b:00007f1a3115e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1240.250299] Node 0 [ 1240.252505] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1240.256736] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1240.285166] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1240.285171] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1240.285175] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1240.285180] R13: 00007fff4a017d4f R14: 00007f1a3115e300 R15: 0000000000022000 [ 1240.293471] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1240.312819] lowmem_reserve[]: 0 0 0 0 0 [ 1240.321817] lowmem_reserve[]: [ 1240.337550] Node 1 [ 1240.345404] 0 [ 1240.363322] Normal free:26664kB min:53696kB low:67120kB high:80544kB active_anon:9872kB inactive_anon:29560kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3456kB pagetables:10088kB bounce:0kB free_pcp:320kB local_pcp:208kB free_cma:0kB [ 1240.391191] 2717 [ 1240.406246] lowmem_reserve[]: [ 1240.413707] 2718 [ 1240.426953] 0 [ 1240.446586] 2718 [ 1240.460165] 0 [ 1240.487965] 2718 [ 1240.494527] Node 0 DMA32 free:17596kB min:36200kB low:45248kB high:54296kB active_anon:831452kB inactive_anon:37960kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50336kB pagetables:132840kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1240.498646] 0 [ 1240.534250] lowmem_reserve[]: 0 0 0 0 0 [ 1240.537040] 0 [ 1240.540098] Node 0 [ 1240.540100] 0 [ 1240.547326] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1240.551372] Node 0 [ 1240.582609] lowmem_reserve[]: 0 0 0 0 0 [ 1240.585688] DMA: [ 1240.588858] Node 1 [ 1240.588861] 6*4kB (UME) [ 1240.596831] Normal free:26664kB min:53696kB low:67120kB high:80544kB active_anon:9872kB inactive_anon:29560kB active_file:24kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3456kB pagetables:10088kB bounce:0kB free_pcp:320kB local_pcp:112kB free_cma:0kB [ 1240.600001] 4*8kB [ 1240.638286] lowmem_reserve[]: [ 1240.641092] (ME) [ 1240.642316] 0 [ 1240.644210] 1*16kB [ 1240.646261] 0 [ 1240.648048] (E) [ 1240.652137] 0 0 0 [ 1240.656340] Node 0 DMA: 6*4kB (UME) 4*8kB (ME) 1*16kB (E) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1240.666827] 0*32kB [ 1240.675770] Node 0 DMA32: 2401*4kB (UME) 763*8kB (UME) 118*16kB (UME) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17596kB [ 1240.688644] 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1240.695182] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1240.731964] Node 0 DMA32: 2401*4kB (UME) 763*8kB (UME) 118*16kB (UME) 0*32kB 7*64kB (U) 18*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20348kB [ 1240.759471] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (M) 36*32kB (M) 1243*64kB (UM) 88*128kB (UM) 28*256kB (UM) 18*512kB (UM) 13*1024kB (U) 5*2048kB (UM) 5*4096kB (U) = 152412kB [ 1240.773868] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1240.816528] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (U) 1*32kB (M) 1987*64kB (UM) 220*128kB (UM) 56*256kB (UM) 44*512kB (UM) 13*1024kB (U) 5*2048kB (UM) 5*4096kB (U) = 236284kB [ 1240.871176] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1240.880405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1240.892631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1240.900509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1240.920905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1240.929935] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1240.945014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1240.956808] 19389 total pagecache pages [ 1240.993316] 0 pages in swap cache [ 1240.993921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1241.003072] Swap cache stats: add 0, delete 0, find 0/0 [ 1241.017028] IPVS: ftp: loaded support on port[0] = 21 [ 1241.031265] 19595 total pagecache pages [ 1241.039650] Free swap = 0kB [ 1241.047076] 0 pages in swap cache [ 1241.058465] Total swap = 0kB [ 1241.077679] Swap cache stats: add 0, delete 0, find 0/0 [ 1241.079870] 2097051 pages RAM [ 1241.087355] Free swap = 0kB [ 1241.093447] 0 pages HighMem/MovableOnly [ 1241.097437] 363840 pages reserved [ 1241.103410] Total swap = 0kB [ 1241.106455] 2097051 pages RAM [ 1241.120590] 0 pages cma reserved [ 1241.121151] 0 pages HighMem/MovableOnly [ 1241.127945] 363840 pages reserved [ 1241.140245] Out of memory (oom_kill_allocating_task): Kill process 10518 (systemd-journal) score 0 or sacrifice child [ 1241.160318] 0 pages cma reserved [ 1241.193834] Killed process 10518 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:1428kB [ 1241.222220] oom_reaper: reaped process 10518 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1464kB [ 1241.396210] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1241.404038] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1241.460430] systemd[1]: Stopped Journal Service. [ 1241.741183] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1241.760586] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1241.807393] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1241.818443] systemd[1]: Starting Journal Service... [ 1241.840064] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1241.845216] CPU: 0 PID: 10522 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 1241.853179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1241.862542] Call Trace: [ 1241.865139] dump_stack+0x1b2/0x281 [ 1241.868776] warn_alloc.cold+0x96/0x1cc [ 1241.872754] ? zone_watermark_ok_safe+0x220/0x220 [ 1241.877613] __alloc_pages_nodemask+0x2127/0x2720 [ 1241.882459] ? lock_acquire+0x170/0x3f0 [ 1241.886435] ? lock_acquire+0x170/0x3f0 [ 1241.890417] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1241.895269] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1241.900723] ? __mutex_unlock_slowpath+0x75/0x770 [ 1241.905574] alloc_pages_current+0x155/0x260 [ 1241.909989] ion_page_pool_alloc+0x118/0x1b0 [ 1241.914404] ion_system_heap_allocate+0x133/0x8c0 [ 1241.919250] ? _raw_spin_unlock+0x29/0x40 [ 1241.923402] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1241.928339] ? ion_system_contig_heap_create+0x130/0x130 [ 1241.933792] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1241.938811] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1241.943657] ion_alloc+0x27a/0x810 [ 1241.947206] ? ion_dma_buf_release+0x40/0x40 [ 1241.951619] ? __might_fault+0x177/0x1b0 [ 1241.955682] ion_ioctl+0xea/0x1f0 [ 1241.959130] ? ion_query_heaps+0x360/0x360 [ 1241.963370] ? ion_query_heaps+0x360/0x360 [ 1241.967605] do_vfs_ioctl+0x75a/0xff0 [ 1241.971407] ? ioctl_preallocate+0x1a0/0x1a0 [ 1241.975813] ? lock_downgrade+0x740/0x740 [ 1241.979961] ? __fget+0x225/0x360 [ 1241.983418] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.987390] ? security_file_ioctl+0x83/0xb0 [ 1241.991797] SyS_ioctl+0x7f/0xb0 [ 1241.995183] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.999158] do_syscall_64+0x1d5/0x640 [ 1242.003049] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1242.008237] RIP: 0033:0x465f69 [ 1242.011420] RSP: 002b:00007f7b1dce0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1242.019126] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1242.026402] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1242.033674] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1242.040945] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1242.048218] R13: 00007ffc6d6ecd2f R14: 00007f7b1dce0300 R15: 0000000000022000 [ 1242.070076] CPU: 0 PID: 10528 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 1242.077989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1242.087344] Call Trace: [ 1242.089940] dump_stack+0x1b2/0x281 [ 1242.093577] warn_alloc.cold+0x96/0x1cc [ 1242.097550] ? zone_watermark_ok_safe+0x220/0x220 [ 1242.102406] __alloc_pages_nodemask+0x2127/0x2720 [ 1242.107252] ? lock_acquire+0x170/0x3f0 [ 1242.111242] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1242.116094] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1242.121547] ? __mutex_unlock_slowpath+0x75/0x770 [ 1242.126403] alloc_pages_current+0x155/0x260 [ 1242.130814] ion_page_pool_alloc+0x118/0x1b0 [ 1242.135224] ion_system_heap_allocate+0x133/0x8c0 [ 1242.140066] ? _raw_spin_unlock+0x29/0x40 [ 1242.144218] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1242.149141] ? ion_system_contig_heap_create+0x130/0x130 [ 1242.154589] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1242.159622] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1242.164464] ion_alloc+0x27a/0x810 [ 1242.168005] ? ion_dma_buf_release+0x40/0x40 [ 1242.172412] ? __might_fault+0x177/0x1b0 [ 1242.176471] ion_ioctl+0xea/0x1f0 [ 1242.179921] ? ion_query_heaps+0x360/0x360 [ 1242.184157] ? ion_query_heaps+0x360/0x360 [ 1242.188386] do_vfs_ioctl+0x75a/0xff0 [ 1242.192185] ? ioctl_preallocate+0x1a0/0x1a0 [ 1242.196591] ? lock_downgrade+0x740/0x740 [ 1242.200740] ? __fget+0x225/0x360 [ 1242.204192] ? do_vfs_ioctl+0xff0/0xff0 [ 1242.208158] ? security_file_ioctl+0x83/0xb0 [ 1242.212565] SyS_ioctl+0x7f/0xb0 [ 1242.215927] ? do_vfs_ioctl+0xff0/0xff0 [ 1242.219899] do_syscall_64+0x1d5/0x640 [ 1242.223787] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1242.228970] RIP: 0033:0x465f69 [ 1242.232152] RSP: 002b:00007f1a3115e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1242.239855] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1242.247121] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1242.254391] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1242.261656] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1242.268925] R13: 00007fff4a017d4f R14: 00007f1a3115e300 R15: 0000000000022000 [ 1242.483211] warn_alloc_show_mem: 1 callbacks suppressed [ 1242.483216] Mem-Info: [ 1242.491420] active_anon:210300 inactive_anon:16881 isolated_anon:0 [ 1242.491420] active_file:119 inactive_file:122 isolated_file:51 [ 1242.491420] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1242.491420] slab_reclaimable:15067 slab_unreclaimable:134920 [ 1242.491420] mapped:52429 shmem:17172 pagetables:35747 bounce:0 [ 1242.491420] free:25695 free_pcp:231 free_cma:0 [ 1242.532082] Node 0 active_anon:831428kB inactive_anon:37960kB active_file:44kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):92kB mapped:149732kB dirty:0kB writeback:0kB shmem:39016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 698368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1242.566451] kworker/u4:1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1242.594874] kworker/u4:1 cpuset=/ mems_allowed=0-1 [ 1242.599836] CPU: 0 PID: 10651 Comm: kworker/u4:1 Not tainted 4.14.224-syzkaller #0 [ 1242.605773] Node 1 active_anon:9772kB inactive_anon:29564kB active_file:44kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59284kB dirty:88kB writeback:0kB shmem:29672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1242.607530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1242.637668] Node 0 [ 1242.644183] Call Trace: [ 1242.644200] dump_stack+0x1b2/0x281 [ 1242.644212] dump_header+0x178/0x82f [ 1242.644222] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1242.644233] ? ___ratelimit+0x2cd/0x530 [ 1242.646669] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1242.649017] oom_kill_process.cold+0x10/0xb18 [ 1242.652684] lowmem_reserve[]: [ 1242.656317] ? lock_downgrade+0x740/0x740 [ 1242.661903] 0 [ 1242.665370] out_of_memory+0x2dc/0x1190 [ 1242.699989] 2717 [ 1242.702622] ? oom_killer_disable+0x1c0/0x1c0 [ 1242.704398] 2718 [ 1242.708351] ? mutex_trylock+0x152/0x1a0 [ 1242.720963] __alloc_pages_nodemask+0x23e1/0x2720 [ 1242.723419] 2718 2718 [ 1242.725805] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1242.728281] Node 0 [ 1242.733116] ? cache_grow_begin+0x41/0x630 [ 1242.733126] cache_grow_begin+0x91/0x630 [ 1242.733134] ? cache_grow_begin+0x91/0x630 [ 1242.733143] fallback_alloc+0x207/0x2c0 [ 1242.733153] kmem_cache_alloc+0x1e5/0x3c0 [ 1242.733163] getname_kernel+0x4e/0x340 [ 1242.733175] call_usermodehelper_exec_async+0x2df/0x510 [ 1242.735420] DMA32 free:17692kB min:36200kB low:45248kB high:54296kB active_anon:831388kB inactive_anon:37960kB active_file:44kB inactive_file:92kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50400kB pagetables:132904kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1242.739604] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1242.743662] lowmem_reserve[]: [ 1242.747857] ret_from_fork+0x24/0x30 [ 1242.752666] 0 [ 1242.760816] Mem-Info: [ 1242.781745] 0 [ 1242.799106] active_anon:210300 inactive_anon:16881 isolated_anon:0 [ 1242.799106] active_file:22 inactive_file:56 isolated_file:23 [ 1242.799106] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1242.799106] slab_reclaimable:15067 slab_unreclaimable:134920 [ 1242.799106] mapped:52254 shmem:17172 pagetables:35747 bounce:0 [ 1242.799106] free:13733 free_pcp:0 free_cma:0 [ 1242.802099] 0 [ 1242.805743] Node 0 active_anon:831428kB inactive_anon:37960kB active_file:44kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):92kB mapped:149732kB dirty:0kB writeback:0kB shmem:39016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 698368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1242.807517] 0 [ 1242.812954] Node 1 active_anon:9772kB inactive_anon:29564kB active_file:44kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59284kB dirty:88kB writeback:0kB shmem:29672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1242.859534] 0 [ 1242.884650] Node 0 [ 1242.908563] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1242.916227] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1242.934455] lowmem_reserve[]: 0 0 0 0 0 [ 1242.968870] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1242.973963] Node 0 DMA32 free:17812kB min:36200kB low:45248kB high:54296kB active_anon:831392kB inactive_anon:37960kB active_file:44kB inactive_file:80kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50368kB pagetables:132904kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1242.982702] Node 1 Normal free:26408kB min:53696kB low:67120kB high:80544kB active_anon:9772kB inactive_anon:29564kB active_file:140kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3744kB pagetables:10084kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1243.006332] Bluetooth: hci0 command 0x0409 tx timeout [ 1243.031938] lowmem_reserve[]: 0 0 0 0 0 [ 1243.041003] Node 0 DMA: 6*4kB (UME) 4*8kB (ME) 1*16kB (E) 0*32kB 4*64kB (UME) [ 1243.041059] lowmem_reserve[]: [ 1243.041063] 3*128kB (UME) [ 1243.048407] 0 0 [ 1243.051543] 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1243.051578] Node 0 DMA32: 2318*4kB (UME) 722*8kB (UMEH) 115*16kB (UME) 33*32kB (U) 0*64kB [ 1243.058306] 0 0 0 [ 1243.081638] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17944kB [ 1243.082747] Node 0 [ 1243.088521] Node 0 Normal: [ 1243.096269] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1243.111881] 0*4kB [ 1243.136416] lowmem_reserve[]: 0 0 0 0 0 [ 1243.142219] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1243.147069] Node 1 [ 1243.164998] Node 1 Normal: 482*4kB (UME) 121*8kB (ME) 67*16kB (M) 623*32kB (UME) 13*64kB (ME) 2*128kB (ME) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 26784kB [ 1243.169323] Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:9772kB inactive_anon:29564kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3712kB pagetables:10084kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1243.188838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1243.219970] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1243.226882] lowmem_reserve[]: 0 0 0 0 0 [ 1243.244586] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1243.249716] CPU: 1 PID: 10528 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 1243.250653] Node 0 [ 1243.257587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1243.257593] DMA: [ 1243.259804] Call Trace: [ 1243.269177] 6*4kB [ 1243.271206] dump_stack+0x1b2/0x281 [ 1243.271220] warn_alloc.cold+0x96/0x1cc [ 1243.273775] (UME) [ 1243.275910] ? zone_watermark_ok_safe+0x220/0x220 [ 1243.279510] 4*8kB [ 1243.283464] ? usleep_range+0x130/0x130 [ 1243.283473] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1243.283486] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1243.285607] (ME) [ 1243.290429] ? run_timer_softirq+0x5a0/0x5a0 [ 1243.290448] __alloc_pages_nodemask+0x2127/0x2720 [ 1243.292570] 1*16kB [ 1243.296531] ? lock_acquire+0x170/0x3f0 [ 1243.301614] (E) [ 1243.306606] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1243.308635] 0*32kB 4*64kB [ 1243.313035] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1243.313051] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1243.317860] (UME) [ 1243.320097] alloc_pages_current+0x155/0x260 [ 1243.320115] ion_page_pool_alloc+0x118/0x1b0 [ 1243.324058] 3*128kB [ 1243.326020] ion_system_heap_allocate+0x133/0x8c0 [ 1243.330866] (UME) [ 1243.333681] ? _raw_spin_unlock+0x29/0x40 [ 1243.338169] 2*256kB [ 1243.343600] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1243.343610] ? ion_system_contig_heap_create+0x130/0x130 [ 1243.343625] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1243.345746] (ME) [ 1243.350139] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1243.350150] ion_alloc+0x27a/0x810 [ 1243.350164] ? ion_dma_buf_release+0x40/0x40 [ 1243.354554] 3*512kB [ 1243.356865] ? __might_fault+0x177/0x1b0 [ 1243.361699] (UME) [ 1243.363823] ion_ioctl+0xea/0x1f0 [ 1243.367939] 2*1024kB [ 1243.370246] ? ion_query_heaps+0x360/0x360 [ 1243.370259] ? ion_query_heaps+0x360/0x360 [ 1243.370268] do_vfs_ioctl+0x75a/0xff0 [ 1243.375169] (ME) [ 1243.380604] ? ioctl_preallocate+0x1a0/0x1a0 [ 1243.380612] ? lock_downgrade+0x740/0x740 [ 1243.380625] ? __fget+0x225/0x360 [ 1243.385633] 1*2048kB [ 1243.387682] ? do_vfs_ioctl+0xff0/0xff0 [ 1243.392521] (E) [ 1243.396028] ? security_file_ioctl+0x83/0xb0 [ 1243.400435] 1*4096kB [ 1243.402731] SyS_ioctl+0x7f/0xb0 [ 1243.406762] (M) [ 1243.408895] ? do_vfs_ioctl+0xff0/0xff0 [ 1243.412340] = 10952kB [ 1243.414719] do_syscall_64+0x1d5/0x640 [ 1243.418923] Node 0 [ 1243.423147] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1243.423158] RIP: 0033:0x465f69 [ 1243.426931] DMA32: [ 1243.428973] RSP: 002b:00007f1a3115e188 EFLAGS: 00000246 [ 1243.433391] 2319*4kB [ 1243.437499] ORIG_RAX: 0000000000000010 [ 1243.440945] (UME) [ 1243.443322] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1243.447271] 723*8kB [ 1243.449223] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1243.449229] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1243.453629] (UME) [ 1243.456002] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1243.456009] R13: 00007fff4a017d4f R14: 00007f1a3115e300 R15: 0000000000022000 [ 1243.459353] 115*16kB [ 1243.471002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1243.494284] (UME) [ 1243.503086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1243.527313] 33*32kB [ 1243.538898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1243.559712] (U) [ 1243.568343] 17204 total pagecache pages [ 1243.578428] 0 pages in swap cache [ 1243.590415] Swap cache stats: add 0, delete 0, find 0/0 [ 1243.595790] Free swap = 0kB [ 1243.598799] Total swap = 0kB [ 1243.604320] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17956kB [ 1243.607446] 2097051 pages RAM [ 1243.617114] 0 pages HighMem/MovableOnly [ 1243.626196] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1243.627148] 363840 pages reserved [ 1243.649032] 0 pages cma reserved [ 1243.695476] Node 1 Normal: 482*4kB (UME) 121*8kB (ME) 67*16kB (M) 623*32kB (UME) 13*64kB (ME) 2*128kB (ME) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 26784kB [ 1243.713593] warn_alloc_show_mem: 1 callbacks suppressed [ 1243.713597] Mem-Info: [ 1243.727321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1243.736131] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1243.744083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1243.757048] active_anon:210301 inactive_anon:16881 isolated_anon:0 [ 1243.757048] active_file:32 inactive_file:0 isolated_file:0 [ 1243.757048] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1243.757048] slab_reclaimable:15067 slab_unreclaimable:134941 [ 1243.757048] mapped:52225 shmem:17172 pagetables:35747 bounce:0 [ 1243.757048] free:13919 free_pcp:0 free_cma:0 [ 1243.776936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1243.808175] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1243.815785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1243.827597] CPU: 1 PID: 10522 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 1243.835492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1243.838429] 17204 total pagecache pages [ 1243.844840] Call Trace: [ 1243.844861] dump_stack+0x1b2/0x281 [ 1243.844873] warn_alloc.cold+0x96/0x1cc [ 1243.844885] ? zone_watermark_ok_safe+0x220/0x220 [ 1243.848844] 0 pages in swap cache [ 1243.851408] ? usleep_range+0x130/0x130 [ 1243.851416] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1243.851430] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1243.855032] Swap cache stats: add 0, delete 0, find 0/0 [ 1243.858990] ? run_timer_softirq+0x5a0/0x5a0 [ 1243.863824] Free swap = 0kB [ 1243.867263] __alloc_pages_nodemask+0x2127/0x2720 [ 1243.871252] Total swap = 0kB [ 1243.876314] ? lock_acquire+0x170/0x3f0 [ 1243.881323] 2097051 pages RAM [ 1243.886651] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1243.891074] 0 pages HighMem/MovableOnly [ 1243.894060] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1243.898874] 363840 pages reserved [ 1243.901880] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1243.901899] alloc_pages_current+0x155/0x260 [ 1243.901917] ion_page_pool_alloc+0x118/0x1b0 [ 1243.905857] 0 pages cma reserved [ 1243.908946] ion_system_heap_allocate+0x133/0x8c0 [ 1243.913796] Out of memory: Kill process 20409 (syz-executor.2) score 1005 or sacrifice child [ 1243.917742] ? _raw_spin_unlock+0x29/0x40 [ 1243.922270] Killed process 20409 (syz-executor.2) total-vm:93252kB, anon-rss:2196kB, file-rss:34628kB, shmem-rss:0kB [ 1243.925646] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1243.931850] Node 0 active_anon:831432kB inactive_anon:37960kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149708kB dirty:0kB writeback:0kB shmem:39016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 698368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1243.935468] ? ion_system_contig_heap_create+0x130/0x130 [ 1243.939888] Node 1 active_anon:9772kB inactive_anon:29564kB active_file:124kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:29672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1243.943198] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1243.948010] Node 0 [ 1243.956569] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1243.956581] ion_alloc+0x27a/0x810 [ 1243.956596] ? ion_dma_buf_release+0x40/0x40 [ 1243.960750] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1243.971359] ? __might_fault+0x177/0x1b0 [ 1243.971373] ion_ioctl+0xea/0x1f0 [ 1243.976275] lowmem_reserve[]: [ 1244.003945] ? ion_query_heaps+0x360/0x360 [ 1244.003957] ? ion_query_heaps+0x360/0x360 [ 1244.003967] do_vfs_ioctl+0x75a/0xff0 [ 1244.009392] 0 [ 1244.036525] ? ioctl_preallocate+0x1a0/0x1a0 [ 1244.036533] ? lock_downgrade+0x740/0x740 [ 1244.036546] ? __fget+0x225/0x360 [ 1244.041544] 2717 [ 1244.043752] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.048566] 2718 [ 1244.052088] ? security_file_ioctl+0x83/0xb0 [ 1244.052098] SyS_ioctl+0x7f/0xb0 [ 1244.052107] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.056489] 2718 [ 1244.082076] do_syscall_64+0x1d5/0x640 [ 1244.082094] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1244.082102] RIP: 0033:0x465f69 [ 1244.082110] RSP: 002b:00007f7b1dce0188 EFLAGS: 00000246 [ 1244.086157] 2718 [ 1244.089588] ORIG_RAX: 0000000000000010 [ 1244.096884] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1244.101108] Node 0 [ 1244.104872] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1244.106662] DMA32 free:17940kB min:36200kB low:45248kB high:54296kB active_anon:831392kB inactive_anon:37960kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50336kB pagetables:132904kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.111048] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1244.111054] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1244.111059] R13: 00007ffc6d6ecd2f R14: 00007f7b1dce0300 R15: 0000000000022000 [ 1244.252003] lowmem_reserve[]: 0 0 0 0 0 [ 1244.256034] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.289293] oom_reaper: reaped process 20409 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1244.388112] lowmem_reserve[]: 0 0 0 0 0 [ 1244.412007] Node 1 Normal free:28576kB min:53696kB low:67120kB high:80544kB active_anon:9772kB inactive_anon:29564kB active_file:84kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3712kB pagetables:10084kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.435965] kworker/u4:5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1244.469215] lowmem_reserve[]: [ 1244.537756] kworker/u4:5 cpuset= [ 1244.540066] 0 0 0 0 0 [ 1244.546746] Node 0 DMA: 6*4kB (UME) 4*8kB (ME) 1*16kB (E) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1244.548178] / [ 1244.587580] Node 0 [ 1244.588231] mems_allowed=0-1 [ 1244.589322] DMA32: [ 1244.599370] CPU: 1 PID: 10676 Comm: kworker/u4:5 Not tainted 4.14.224-syzkaller #0 [ 1244.604314] 2353*4kB [ 1244.609294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1244.609300] (UME) [ 1244.611683] Call Trace: [ 1244.611700] dump_stack+0x1b2/0x281 [ 1244.611712] dump_header+0x178/0x82f [ 1244.611724] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1244.621105] 727*8kB [ 1244.623246] ? ___ratelimit+0x2cd/0x530 [ 1244.625799] (UME) [ 1244.629405] oom_kill_process.cold+0x10/0xb18 [ 1244.633111] 115*16kB [ 1244.638180] ? lock_downgrade+0x740/0x740 [ 1244.640495] (UME) [ 1244.644439] out_of_memory+0x2dc/0x1190 [ 1244.646560] 34*32kB [ 1244.651038] ? oom_killer_disable+0x1c0/0x1c0 [ 1244.651046] ? mutex_trylock+0x152/0x1a0 [ 1244.651056] __alloc_pages_nodemask+0x23e1/0x2720 [ 1244.653443] (U) [ 1244.657580] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1244.659695] 10*64kB [ 1244.663658] ? cache_grow_begin+0x41/0x630 [ 1244.663668] cache_grow_begin+0x91/0x630 [ 1244.665974] (U) [ 1244.670447] ? cache_grow_begin+0x91/0x630 [ 1244.670457] fallback_alloc+0x207/0x2c0 [ 1244.670469] kmem_cache_alloc+0x1e5/0x3c0 [ 1244.674501] 0*128kB [ 1244.679322] getname_kernel+0x4e/0x340 [ 1244.681288] 0*256kB [ 1244.686096] call_usermodehelper_exec_async+0x2df/0x510 [ 1244.688391] 0*512kB [ 1244.692602] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1244.692611] ret_from_fork+0x24/0x30 [ 1244.703317] Mem-Info: [ 1244.724630] 0*1024kB [ 1244.748599] active_anon:209768 inactive_anon:16881 isolated_anon:0 [ 1244.748599] active_file:47 inactive_file:28 isolated_file:0 [ 1244.748599] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1244.748599] slab_reclaimable:15067 slab_unreclaimable:134937 [ 1244.748599] mapped:52225 shmem:17172 pagetables:35710 bounce:0 [ 1244.748599] free:15012 free_pcp:1 free_cma:0 [ 1244.758861] 1*2048kB [ 1244.806350] Node 0 active_anon:829300kB inactive_anon:37960kB active_file:104kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149708kB dirty:0kB writeback:0kB shmem:39016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 698368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1244.808705] (M) [ 1244.808814] Node 1 active_anon:9772kB inactive_anon:29564kB active_file:84kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:29672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1244.853914] 0*4096kB = 20844kB [ 1244.869033] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1244.889110] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.899105] Node 1 [ 1244.935477] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1244.941301] Normal: 493*4kB (UME) 120*8kB (ME) 66*16kB (UM) 627*32kB (UME) 15*64kB (UME) 4*128kB (UME) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 0*2048kB 0*4096kB = 28852kB [ 1244.956382] Node 0 DMA32 free:20844kB min:36200kB low:45248kB high:54296kB active_anon:829260kB inactive_anon:37960kB active_file:12kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50336kB pagetables:132756kB bounce:0kB free_pcp:28kB local_pcp:24kB free_cma:0kB [ 1244.976974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1245.023881] lowmem_reserve[]: 0 0 0 0 0 [ 1245.027910] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.031421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1245.085222] Bluetooth: hci0 command 0x041b tx timeout [ 1245.096628] lowmem_reserve[]: 0 0 0 0 0 [ 1245.106351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1245.115017] Node 1 Normal free:28844kB min:53696kB low:67120kB high:80544kB active_anon:9772kB inactive_anon:29564kB active_file:20kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3680kB pagetables:9984kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.128957] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1245.158465] lowmem_reserve[]: 0 0 0 0 0 [ 1245.169221] Node 0 DMA: 6*4kB (UME) 4*8kB (ME) 1*16kB (E) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1245.173928] 17215 total pagecache pages [ 1245.188490] 0 pages in swap cache [ 1245.199139] Node 0 DMA32: 2361*4kB (UME) 735*8kB (UME) 115*16kB (UME) 34*32kB (U) 10*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 21196kB [ 1245.212172] Swap cache stats: add 0, delete 0, find 0/0 [ 1245.219239] Free swap = 0kB [ 1245.228406] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1245.258352] Node 1 Normal: 493*4kB (UME) 120*8kB (ME) 66*16kB (UM) 627*32kB (UME) 15*64kB (UME) 4*128kB (UME) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 0*2048kB 0*4096kB = 28852kB [ 1245.261319] Total swap = 0kB [ 1245.277391] 2097051 pages RAM [ 1245.289378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1245.318786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1245.318795] 0 pages HighMem/MovableOnly [ 1245.356592] 363840 pages reserved [ 1245.358069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1245.360087] 0 pages cma reserved [ 1245.422836] chnl_net:caif_netlink_parms(): no params data found [ 1245.451418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1245.528920] 19990 total pagecache pages [ 1245.545168] 0 pages in swap cache [ 1245.580906] Swap cache stats: add 0, delete 0, find 0/0 [ 1245.587276] Free swap = 0kB [ 1245.593949] Total swap = 0kB [ 1245.597056] 2097051 pages RAM 10:39:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) [ 1245.621761] 0 pages HighMem/MovableOnly [ 1245.640011] 363840 pages reserved [ 1245.658827] 0 pages cma reserved [ 1245.667190] Out of memory: Kill process 20475 (syz-executor.2) score 1005 or sacrifice child [ 1245.696568] Killed process 20475 (syz-executor.2) total-vm:93252kB, anon-rss:2196kB, file-rss:34628kB, shmem-rss:0kB [ 1245.714914] systemd-journald[10643]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1245.958848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.984876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.018898] device bridge_slave_0 entered promiscuous mode [ 1246.058116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.096790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.126269] device bridge_slave_1 entered promiscuous mode [ 1246.237736] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1246.291248] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1246.743391] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1246.761146] team0: Port device team_slave_0 added [ 1246.780562] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1246.787878] team0: Port device team_slave_1 added [ 1247.102470] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1247.120683] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1247.129630] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1247.138838] CPU: 0 PID: 10711 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 1247.146803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1247.151809] systemd-journal cpuset= [ 1247.156145] Call Trace: [ 1247.156153] / [ 1247.159767] dump_stack+0x1b2/0x281 [ 1247.167661] warn_alloc.cold+0x96/0x1cc [ 1247.171656] ? zone_watermark_ok_safe+0x220/0x220 [ 1247.176529] __alloc_pages_nodemask+0x2127/0x2720 [ 1247.181372] ? lock_acquire+0x170/0x3f0 [ 1247.185346] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1247.190194] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1247.195641] ? __mutex_unlock_slowpath+0x75/0x770 [ 1247.200483] alloc_pages_current+0x155/0x260 [ 1247.204903] ion_page_pool_alloc+0x118/0x1b0 [ 1247.209306] ion_system_heap_allocate+0x133/0x8c0 [ 1247.214144] ? ion_alloc+0x187/0x810 [ 1247.217854] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1247.219176] mems_allowed=0-1 [ 1247.223291] ? ion_system_contig_heap_create+0x130/0x130 [ 1247.223300] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1247.223310] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1247.223320] ion_alloc+0x204/0x810 [ 1247.223331] ? ion_dma_buf_release+0x40/0x40 [ 1247.223342] ? __might_fault+0x177/0x1b0 [ 1247.253667] ion_ioctl+0xea/0x1f0 [ 1247.257116] ? ion_query_heaps+0x360/0x360 [ 1247.261375] ? ion_query_heaps+0x360/0x360 [ 1247.265605] do_vfs_ioctl+0x75a/0xff0 [ 1247.269401] ? ioctl_preallocate+0x1a0/0x1a0 [ 1247.273806] ? lock_downgrade+0x740/0x740 [ 1247.277946] ? __fget+0x225/0x360 [ 1247.281386] ? do_vfs_ioctl+0xff0/0xff0 [ 1247.285354] ? security_file_ioctl+0x83/0xb0 [ 1247.289753] SyS_ioctl+0x7f/0xb0 [ 1247.293111] ? do_vfs_ioctl+0xff0/0xff0 [ 1247.297094] do_syscall_64+0x1d5/0x640 [ 1247.300968] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1247.306140] RIP: 0033:0x465f69 [ 1247.309307] RSP: 002b:00007f7b1dce0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1247.317003] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1247.324263] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1247.331527] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1247.338788] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1247.346051] R13: 00007ffc6d6ecd2f R14: 00007f7b1dce0300 R15: 0000000000022000 [ 1247.359583] Bluetooth: hci0 command 0x040f tx timeout [ 1247.371669] CPU: 1 PID: 10643 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 1247.379653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1247.389001] Call Trace: [ 1247.391586] dump_stack+0x1b2/0x281 [ 1247.395212] dump_header+0x178/0x82f [ 1247.398917] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1247.404011] ? ___ratelimit+0x2cd/0x530 [ 1247.407979] oom_kill_process.cold+0x10/0xb18 [ 1247.412478] out_of_memory+0xe3e/0x1190 [ 1247.416449] ? oom_killer_disable+0x1c0/0x1c0 [ 1247.420938] ? mutex_trylock+0x152/0x1a0 [ 1247.424996] __alloc_pages_nodemask+0x23e1/0x2720 [ 1247.429859] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1247.434717] alloc_pages_current+0x155/0x260 [ 1247.439125] filemap_fault+0xea3/0x1980 [ 1247.443100] ext4_filemap_fault+0x84/0xb0 [ 1247.447244] __do_fault+0xfa/0x380 [ 1247.450777] __handle_mm_fault+0x2497/0x4620 [ 1247.455184] ? ____cache_alloc_node+0xf4/0x1d0 [ 1247.459756] ? vm_insert_page+0x7c0/0x7c0 [ 1247.460525] warn_alloc_show_mem: 1 callbacks suppressed [ 1247.460527] Mem-Info: [ 1247.463893] ? check_stack_object+0x86/0xa0 [ 1247.469256] active_anon:209231 inactive_anon:18913 isolated_anon:0 [ 1247.469256] active_file:22 inactive_file:5 isolated_file:0 [ 1247.469256] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1247.469256] slab_reclaimable:15137 slab_unreclaimable:135559 [ 1247.469256] mapped:52547 shmem:19219 pagetables:35638 bounce:0 [ 1247.469256] free:25066 free_pcp:0 free_cma:0 [ 1247.471647] handle_mm_fault+0x391/0x860 [ 1247.471660] __do_page_fault+0x549/0xad0 [ 1247.471672] ? spurious_fault+0x640/0x640 [ 1247.475988] Node 0 active_anon:827064kB inactive_anon:42316kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149712kB dirty:0kB writeback:0kB shmem:43372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 694272kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1247.509193] ? do_page_fault+0x60/0x500 [ 1247.509203] ? page_fault+0x2f/0x50 [ 1247.509209] page_fault+0x45/0x50 [ 1247.509219] RIP: c1f9f040:0x7fffd40c4700 [ 1247.513283] Node 1 active_anon:9860kB inactive_anon:33336kB active_file:80kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60476kB dirty:0kB writeback:0kB shmem:33504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1247.517296] RSP: 0041:00007fffd40c4740 EFLAGS: ffffffff [ 1247.521438] Node 0 [ 1247.616623] Mem-Info: [ 1247.621434] active_anon:209231 inactive_anon:18913 isolated_anon:0 [ 1247.621434] active_file:22 inactive_file:5 isolated_file:26 [ 1247.621434] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1247.621434] slab_reclaimable:15137 slab_unreclaimable:135559 [ 1247.621434] mapped:52547 shmem:19219 pagetables:35638 bounce:0 [ 1247.621434] free:25066 free_pcp:0 free_cma:0 [ 1247.624676] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.654885] Node 0 active_anon:827064kB inactive_anon:42316kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149712kB dirty:0kB writeback:0kB shmem:43372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 694272kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1247.654900] Node 1 active_anon:9860kB inactive_anon:33336kB active_file:80kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):104kB mapped:60476kB dirty:0kB writeback:0kB shmem:33504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1247.654904] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.654918] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1247.654938] Node 0 DMA32 free:36188kB min:36200kB low:45248kB high:54296kB active_anon:827024kB inactive_anon:42316kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50272kB pagetables:132640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.654955] lowmem_reserve[]: 0 0 0 0 0 [ 1247.654974] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.654988] lowmem_reserve[]: 0 [ 1247.684139] lowmem_reserve[]: [ 1247.708438] 0 0 [ 1247.739802] 0 [ 1247.763692] 0 [ 1247.779544] 2717 [ 1247.795881] 0 [ 1247.808592] 2718 [ 1247.825392] Node 1 Normal free:53124kB min:53696kB low:67120kB high:80544kB active_anon:9860kB inactive_anon:33336kB active_file:64kB inactive_file:240kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3456kB pagetables:9912kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.825412] lowmem_reserve[]: [ 1247.832117] 2718 [ 1247.833754] 0 [ 1247.835535] 2718 [ 1247.837315] 0 [ 1247.841193] 0 0 0 [ 1247.841208] Node 0 [ 1247.845955] Node 0 [ 1247.871922] DMA: 6*4kB (UME) 4*8kB (ME) 1*16kB (E) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB [ 1247.879038] DMA32 free:36188kB min:36200kB low:45248kB high:54296kB active_anon:827024kB inactive_anon:42316kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50272kB pagetables:132640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.882513] (UME) [ 1247.897551] lowmem_reserve[]: [ 1247.899339] 2*1024kB [ 1247.931282] 0 [ 1247.932656] (ME) [ 1247.935048] 0 [ 1247.936829] 1*2048kB [ 1247.938866] 0 [ 1247.940696] (E) 1*4096kB [ 1247.944727] 0 [ 1247.944871] (M) [ 1247.947607] 0 [ 1247.949397] = 10952kB [ 1247.953166] Node 0 [ 1247.955549] Node 0 [ 1247.955555] DMA32: [ 1247.957779] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.960118] 1256*4kB (UME) 722*8kB (UME) 115*16kB [ 1247.966855] lowmem_reserve[]: [ 1247.987320] (UME) 2*32kB (UM) 3*64kB (UM) 86*128kB (UM) 40*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36192kB [ 1248.041114] 0 0 0 0 0 [ 1248.043672] Node 1 Normal free:53596kB min:53696kB low:67120kB high:80544kB active_anon:9860kB inactive_anon:33336kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3456kB pagetables:9912kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1248.060837] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1248.166942] Node 1 Normal: 541*4kB (UME) 159*8kB (ME) 87*16kB (UME) 64*32kB (UM) 42*64kB (ME) 12*128kB (M) 10*256kB (UM) 74*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 53596kB [ 1248.181422] lowmem_reserve[]: 0 0 0 0 0 [ 1248.186848] Node 0 DMA: 6*4kB (UME) 4*8kB (ME) 1*16kB (E) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1248.249716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1248.258599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1248.315358] Node 0 DMA32: 1256*4kB (UME) 722*8kB (UME) 115*16kB (UME) 2*32kB (UM) 3*64kB (UM) 86*128kB (UM) 40*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36192kB [ 1248.343455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1248.386599] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1248.388545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1248.454769] Node 1 Normal: 541*4kB (UME) 159*8kB (ME) 87*16kB (UME) 64*32kB (UM) 42*64kB (ME) 12*128kB (M) 10*256kB (UM) 74*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 53596kB [ 1248.502695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1248.507173] 19250 total pagecache pages [ 1248.545206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1248.555363] 0 pages in swap cache [ 1248.558824] Swap cache stats: add 0, delete 0, find 0/0 [ 1248.598439] Free swap = 0kB [ 1248.602225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1248.618997] Total swap = 0kB [ 1248.633903] 2097051 pages RAM [ 1248.637019] 0 pages HighMem/MovableOnly [ 1248.651024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1248.674968] 19250 total pagecache pages [ 1248.678969] 0 pages in swap cache [ 1248.681012] 363840 pages reserved [ 1248.685854] 0 pages cma reserved [ 1248.689211] Out of memory (oom_kill_allocating_task): Kill process 10643 (systemd-journal) score 0 or sacrifice child [ 1248.735866] Swap cache stats: add 0, delete 0, find 0/0 [ 1248.767805] Free swap = 0kB [ 1248.777911] Killed process 10643 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1228kB [ 1248.785978] Total swap = 0kB [ 1248.815713] 2097051 pages RAM [ 1248.818836] 0 pages HighMem/MovableOnly [ 1248.834434] oom_reaper: reaped process 10643 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1228kB [ 1248.874926] 363840 pages reserved [ 1248.878414] 0 pages cma reserved [ 1248.972244] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1249.034837] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1249.059221] CPU: 1 PID: 10562 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1249.067126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1249.076472] Call Trace: [ 1249.079073] dump_stack+0x1b2/0x281 [ 1249.082705] dump_header+0x178/0x82f [ 1249.086422] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1249.091524] ? ___ratelimit+0x2cd/0x530 [ 1249.095495] oom_kill_process.cold+0x10/0xb18 [ 1249.099997] out_of_memory+0xe3e/0x1190 [ 1249.103978] ? oom_killer_disable+0x1c0/0x1c0 [ 1249.108465] ? mutex_trylock+0x152/0x1a0 [ 1249.112520] __alloc_pages_nodemask+0x23e1/0x2720 [ 1249.117361] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1249.122204] ? kernfs_add_one+0x2e5/0x3a0 [ 1249.126333] ? mark_held_locks+0xa6/0xf0 [ 1249.130375] ? cache_grow_begin+0x41/0x630 [ 1249.134611] cache_grow_begin+0x91/0x630 [ 1249.138688] ? cache_grow_begin+0x91/0x630 [ 1249.142959] fallback_alloc+0x207/0x2c0 [ 1249.146918] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 1249.151568] kobject_uevent_env+0x20c/0xf40 [ 1249.155869] ? internal_create_group+0x48f/0x710 [ 1249.160602] netdev_queue_update_kobjects+0x296/0x350 [ 1249.165771] netdev_register_kobject+0x34a/0x410 [ 1249.170504] register_netdevice+0x955/0xe40 [ 1249.174805] ? netdev_change_features+0xa0/0xa0 [ 1249.179455] ? memcpy+0x35/0x50 [ 1249.182709] ? nla_strlcpy+0xcc/0x100 [ 1249.186486] veth_newlink+0x467/0x890 [ 1249.190263] ? veth_close+0xb0/0xb0 [ 1249.193872] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1249.198860] ? fs_reclaim_release+0xd0/0x110 [ 1249.203256] ? rtnl_create_link+0x129/0x890 [ 1249.207555] rtnl_newlink+0xf88/0x1830 [ 1249.211418] ? __lock_acquire+0x5fc/0x3f20 [ 1249.215667] ? veth_close+0xb0/0xb0 [ 1249.219268] ? trace_hardirqs_on+0x10/0x10 [ 1249.223478] ? rtnl_dellink+0x6a0/0x6a0 [ 1249.227442] ? trace_hardirqs_on+0x10/0x10 [ 1249.231654] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1249.237516] ? deref_stack_reg+0x124/0x1a0 [ 1249.241744] ? lock_acquire+0x170/0x3f0 [ 1249.245693] ? lock_downgrade+0x740/0x740 [ 1249.249818] ? rtnl_dellink+0x6a0/0x6a0 [ 1249.253769] rtnetlink_rcv_msg+0x3be/0xb10 [ 1249.257980] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1249.262451] ? __netlink_lookup+0x345/0x5d0 [ 1249.266756] netlink_rcv_skb+0x125/0x390 [ 1249.270794] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1249.275282] ? netlink_ack+0x9a0/0x9a0 [ 1249.279147] netlink_unicast+0x437/0x610 [ 1249.283203] ? netlink_sendskb+0xd0/0xd0 [ 1249.287253] ? __check_object_size+0x179/0x230 [ 1249.291810] netlink_sendmsg+0x62e/0xb80 [ 1249.295850] ? nlmsg_notify+0x170/0x170 [ 1249.299817] ? security_socket_sendmsg+0x83/0xb0 [ 1249.304548] ? nlmsg_notify+0x170/0x170 [ 1249.308498] sock_sendmsg+0xb5/0x100 [ 1249.312188] SyS_sendto+0x1c7/0x2c0 [ 1249.315790] ? SyS_getpeername+0x220/0x220 [ 1249.320002] ? task_work_run+0xfd/0x190 [ 1249.323957] ? _raw_spin_unlock_irq+0x24/0x80 [ 1249.328427] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1249.333435] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1249.337930] ? task_work_run+0xfd/0x190 [ 1249.341887] ? do_syscall_64+0x4c/0x640 [ 1249.345849] ? SyS_getpeername+0x220/0x220 [ 1249.350062] do_syscall_64+0x1d5/0x640 [ 1249.353934] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1249.359102] RIP: 0033:0x4193fc [ 1249.362269] RSP: 002b:00007ffc75912f00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1249.369957] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193fc [ 1249.377250] RDX: 000000000000006c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1249.384496] RBP: 0000000000000000 R08: 00007ffc75912f54 R09: 000000000000000c [ 1249.391743] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1249.398989] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1249.419425] Bluetooth: hci0 command 0x0419 tx timeout [ 1249.465702] Mem-Info: [ 1249.468141] active_anon:209116 inactive_anon:18912 isolated_anon:0 [ 1249.468141] active_file:23 inactive_file:5 isolated_file:0 [ 1249.468141] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1249.468141] slab_reclaimable:15137 slab_unreclaimable:135532 [ 1249.468141] mapped:52225 shmem:19219 pagetables:35613 bounce:0 [ 1249.468141] free:25187 free_pcp:134 free_cma:0 [ 1249.617741] Node 0 active_anon:827048kB inactive_anon:42316kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149708kB dirty:0kB writeback:0kB shmem:43372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 694272kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1249.663203] Node 1 active_anon:9416kB inactive_anon:33332kB active_file:100kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:33504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1249.735721] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1249.851284] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1249.856349] Node 0 DMA32 free:36124kB min:36200kB low:45248kB high:54296kB active_anon:827008kB inactive_anon:42316kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50240kB pagetables:132640kB bounce:0kB free_pcp:164kB local_pcp:124kB free_cma:0kB [ 1249.915258] lowmem_reserve[]: 0 0 0 0 0 [ 1249.919278] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.083963] lowmem_reserve[]: 0 0 0 0 0 [ 1250.087981] Node 1 Normal free:53672kB min:53696kB low:67120kB high:80544kB active_anon:9416kB inactive_anon:33332kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3456kB pagetables:9812kB bounce:0kB free_pcp:368kB local_pcp:124kB free_cma:0kB [ 1250.267122] lowmem_reserve[]: 0 0 0 0 0 [ 1250.287856] Node 0 DMA: 6*4kB (UME) 4*8kB (ME) 1*16kB (E) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1250.375951] Node 0 DMA32: 1257*4kB (ME) 721*8kB (UME) 115*16kB (UME) 2*32kB (UM) 2*64kB (M) 86*128kB (UM) 40*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36124kB [ 1250.466643] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1250.529106] Node 1 Normal: 516*4kB (UME) 149*8kB (UME) 87*16kB (UME) 62*32kB (UM) 43*64kB (ME) 14*128kB (M) 8*256kB (M) 73*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 53672kB [ 1250.569314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.578170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1250.648281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.690733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1250.728232] 19250 total pagecache pages [ 1250.732267] 0 pages in swap cache [ 1250.735711] Swap cache stats: add 0, delete 0, find 0/0 [ 1250.792907] Free swap = 0kB [ 1250.795950] Total swap = 0kB [ 1250.799121] 2097051 pages RAM [ 1250.833399] 0 pages HighMem/MovableOnly [ 1250.837393] 363840 pages reserved [ 1250.864422] 0 pages cma reserved [ 1250.867812] Out of memory (oom_kill_allocating_task): Kill process 10562 (syz-executor.4) score 0 or sacrifice child [ 1250.912688] Killed process 10562 (syz-executor.4) total-vm:93120kB, anon-rss:80kB, file-rss:34576kB, shmem-rss:0kB [ 1250.971248] oom_reaper: reaped process 10562 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1251.108947] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1251.121455] systemd cpuset=/ mems_allowed=0-1 [ 1251.126552] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.224-syzkaller #0 [ 1251.133485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1251.142832] Call Trace: [ 1251.145420] dump_stack+0x1b2/0x281 [ 1251.149042] dump_header+0x178/0x82f [ 1251.152747] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1251.157845] ? ___ratelimit+0x2cd/0x530 [ 1251.161814] oom_kill_process.cold+0x10/0xb18 [ 1251.166300] ? lock_downgrade+0x740/0x740 [ 1251.170442] out_of_memory+0x2dc/0x1190 [ 1251.174413] ? oom_killer_disable+0x1c0/0x1c0 [ 1251.178897] ? mutex_trylock+0x152/0x1a0 [ 1251.182953] __alloc_pages_nodemask+0x23e1/0x2720 [ 1251.187796] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1251.192646] alloc_pages_current+0x155/0x260 [ 1251.197049] filemap_fault+0xea3/0x1980 [ 1251.201024] ext4_filemap_fault+0x84/0xb0 [ 1251.205163] __do_fault+0xfa/0x380 [ 1251.208692] __handle_mm_fault+0x2497/0x4620 [ 1251.213094] ? ep_poll+0x1ab/0xa50 [ 1251.216628] ? vm_insert_page+0x7c0/0x7c0 [ 1251.220787] handle_mm_fault+0x391/0x860 [ 1251.224844] __do_page_fault+0x549/0xad0 [ 1251.228897] ? spurious_fault+0x640/0x640 [ 1251.233051] ? do_page_fault+0x60/0x500 [ 1251.237015] ? page_fault+0x2f/0x50 [ 1251.240634] page_fault+0x45/0x50 [ 1251.244076] RIP: 0001:0xffffffffffffffff [ 1251.248129] RSP: c8037f50:00007ffc9f17a080 EFLAGS: 7ffc9f179db0 [ 1251.867861] Mem-Info: [ 1251.914748] active_anon:209102 inactive_anon:18912 isolated_anon:0 [ 1251.914748] active_file:13 inactive_file:7 isolated_file:0 [ 1251.914748] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1251.914748] slab_reclaimable:15138 slab_unreclaimable:135408 [ 1251.914748] mapped:52240 shmem:19219 pagetables:35613 bounce:0 [ 1251.914748] free:25203 free_pcp:49 free_cma:0 [ 1252.149386] Node 0 active_anon:827044kB inactive_anon:42316kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149708kB dirty:0kB writeback:0kB shmem:43372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 694272kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1252.205406] Node 1 active_anon:9364kB inactive_anon:33332kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:33504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1252.265065] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.387610] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1252.403751] Node 0 DMA32 free:36116kB min:36200kB low:45248kB high:54296kB active_anon:827004kB inactive_anon:42316kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50368kB pagetables:132552kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.555044] lowmem_reserve[]: 0 0 0 0 0 [ 1252.559075] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.605972] lowmem_reserve[]: 0 0 0 0 0 [ 1252.610034] Node 1 Normal free:53296kB min:53696kB low:67120kB high:80544kB active_anon:9364kB inactive_anon:33332kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3488kB pagetables:9812kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1252.669390] lowmem_reserve[]: 0 0 0 0 0 [ 1252.673413] Node 0 DMA: 6*4kB (UME) 4*8kB (ME) 1*16kB (E) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1252.762544] Node 0 DMA32: 1302*4kB (UME) 739*8kB (UME) 115*16kB (UME) 4*32kB (UM) 2*64kB (M) 86*128kB (UM) 40*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36512kB [ 1252.822285] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1252.892034] Node 1 Normal: 536*4kB (UME) 151*8kB (ME) 87*16kB (UME) 60*32kB (ME) 44*64kB (UME) 16*128kB (UME) 8*256kB (M) 72*512kB (UME) 3*1024kB (ME) 0*2048kB 0*4096kB = 53512kB [ 1252.992338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1253.036150] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1253.079331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1253.088190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1253.165213] 19251 total pagecache pages [ 1253.177922] 0 pages in swap cache [ 1253.186272] Swap cache stats: add 0, delete 0, find 0/0 [ 1253.191696] Free swap = 0kB [ 1253.194703] Total swap = 0kB [ 1253.197711] 2097051 pages RAM [ 1253.209258] 0 pages HighMem/MovableOnly [ 1253.213230] 363840 pages reserved [ 1253.216669] 0 pages cma reserved [ 1253.229150] Out of memory: Kill process 20494 (syz-executor.2) score 1005 or sacrifice child [ 1253.237765] Killed process 20494 (syz-executor.2) total-vm:93252kB, anon-rss:2196kB, file-rss:34628kB, shmem-rss:0kB [ 1253.346295] oom_reaper: reaped process 20494 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1253.415343] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1253.496175] in:imklog cpuset=/ mems_allowed=0-1 [ 1253.529818] CPU: 0 PID: 9313 Comm: in:imklog Not tainted 4.14.224-syzkaller #0 [ 1253.537207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1253.546558] Call Trace: [ 1253.549147] dump_stack+0x1b2/0x281 [ 1253.552772] dump_header+0x178/0x82f [ 1253.556481] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1253.561583] ? ___ratelimit+0x2cd/0x530 [ 1253.565552] oom_kill_process.cold+0x10/0xb18 [ 1253.570049] out_of_memory+0xe3e/0x1190 [ 1253.574020] ? oom_killer_disable+0x1c0/0x1c0 [ 1253.578507] ? mutex_trylock+0x152/0x1a0 [ 1253.582562] __alloc_pages_nodemask+0x23e1/0x2720 [ 1253.587413] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1253.592268] alloc_pages_current+0x155/0x260 [ 1253.596674] filemap_fault+0xea3/0x1980 [ 1253.600657] ext4_filemap_fault+0x84/0xb0 [ 1253.604799] __do_fault+0xfa/0x380 [ 1253.608335] __handle_mm_fault+0x2497/0x4620 [ 1253.612739] ? vm_insert_page+0x7c0/0x7c0 [ 1253.616878] ? lock_downgrade+0x740/0x740 [ 1253.621037] handle_mm_fault+0x391/0x860 [ 1253.625094] __do_page_fault+0x549/0xad0 [ 1253.629156] ? spurious_fault+0x640/0x640 [ 1253.633298] ? do_page_fault+0x60/0x500 [ 1253.637266] ? page_fault+0x2f/0x50 [ 1253.640885] page_fault+0x45/0x50 [ 1253.644329] RIP: fffff7e7:0x1f9f [ 1253.647682] RSP: e03394a0:00007fe1e03394ac EFLAGS: 7fe1e0339da0 [ 1254.049736] syz-executor.4 (10562) used greatest stack depth: 24088 bytes left [ 1254.256880] Mem-Info: [ 1254.267669] active_anon:208565 inactive_anon:18912 isolated_anon:0 [ 1254.267669] active_file:38 inactive_file:0 isolated_file:0 [ 1254.267669] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1254.267669] slab_reclaimable:15138 slab_unreclaimable:135331 [ 1254.267669] mapped:52225 shmem:19219 pagetables:35566 bounce:0 [ 1254.267669] free:25170 free_pcp:0 free_cma:0 [ 1254.339447] Node 0 active_anon:824896kB inactive_anon:42316kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149708kB dirty:0kB writeback:0kB shmem:43372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 692224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1254.551469] Node 1 active_anon:9364kB inactive_anon:33332kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:33504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1254.780059] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1254.951928] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1254.957001] Node 0 DMA32 free:35856kB min:36200kB low:45248kB high:54296kB active_anon:824860kB inactive_anon:42316kB active_file:48kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50240kB pagetables:132456kB bounce:0kB free_pcp:352kB local_pcp:228kB free_cma:0kB [ 1255.184292] lowmem_reserve[]: 0 0 0 0 0 [ 1255.188374] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.368438] lowmem_reserve[]: 0 0 0 0 0 [ 1255.392380] Node 1 Normal free:53124kB min:53696kB low:67120kB high:80544kB active_anon:9364kB inactive_anon:33332kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3488kB pagetables:9812kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.564070] lowmem_reserve[]: 0 0 0 0 0 [ 1255.568113] Node 0 DMA: 6*4kB (UME) 4*8kB (ME) 1*16kB (E) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1255.616178] Node 0 DMA32: 1274*4kB (UME) 720*8kB (ME) 115*16kB (UME) 2*32kB (UM) 3*64kB (UM) 71*128kB (UM) 40*256kB (U) 4*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 36376kB [ 1255.671077] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1255.742664] Node 1 Normal: 535*4kB (UME) 150*8kB (ME) 85*16kB (ME) 61*32kB (ME) 44*64kB (UME) 16*128kB (UME) 9*256kB (UM) 71*512kB (UME) 3*1024kB (ME) 0*2048kB 0*4096kB = 53244kB [ 1255.835329] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1255.856574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1255.912072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1255.954544] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1255.966393] 19251 total pagecache pages [ 1255.970449] 0 pages in swap cache [ 1255.973890] Swap cache stats: add 0, delete 0, find 0/0 [ 1255.987762] Free swap = 0kB [ 1255.990840] Total swap = 0kB [ 1255.993849] 2097051 pages RAM [ 1255.996938] 0 pages HighMem/MovableOnly [ 1256.005169] 363840 pages reserved [ 1256.008624] 0 pages cma reserved [ 1256.025018] Out of memory (oom_kill_allocating_task): Kill process 9313 (in:imklog) score 0 or sacrifice child [ 1256.037434] Killed process 9309 (rsyslogd) total-vm:254332kB, anon-rss:1052kB, file-rss:0kB, shmem-rss:0kB [ 1256.090738] oom_reaper: reaped process 9309 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1256.316773] oom_reaper: reaped process 10532 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1256.401505] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1256.415418] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1256.421626] CPU: 0 PID: 10532 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1256.429512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1256.438862] Call Trace: [ 1256.441452] dump_stack+0x1b2/0x281 [ 1256.445070] dump_header+0x178/0x82f [ 1256.448766] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1256.453859] ? ___ratelimit+0x2cd/0x530 [ 1256.457841] oom_kill_process.cold+0x10/0xb18 [ 1256.462354] out_of_memory+0xe3e/0x1190 [ 1256.466328] ? oom_killer_disable+0x1c0/0x1c0 [ 1256.470813] ? mutex_trylock+0x152/0x1a0 [ 1256.474875] __alloc_pages_nodemask+0x23e1/0x2720 [ 1256.479727] ? lock_acquire+0x170/0x3f0 [ 1256.483707] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1256.488545] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1256.493039] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1256.498484] alloc_pages_current+0x155/0x260 [ 1256.502890] ion_page_pool_alloc+0x118/0x1b0 [ 1256.507290] ion_system_heap_allocate+0x133/0x8c0 [ 1256.512118] ? ion_alloc+0x187/0x810 [ 1256.515827] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1256.521273] ? ion_system_contig_heap_create+0x130/0x130 [ 1256.526711] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1256.531716] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1256.536559] ion_alloc+0x204/0x810 [ 1256.540102] ? ion_dma_buf_release+0x40/0x40 [ 1256.544510] ? __might_fault+0x177/0x1b0 [ 1256.548560] ion_ioctl+0xea/0x1f0 [ 1256.552002] ? ion_query_heaps+0x360/0x360 [ 1256.556232] ? ion_query_heaps+0x360/0x360 [ 1256.560462] do_vfs_ioctl+0x75a/0xff0 [ 1256.564281] ? ioctl_preallocate+0x1a0/0x1a0 [ 1256.568680] ? lock_downgrade+0x740/0x740 [ 1256.572823] ? __fget+0x225/0x360 [ 1256.576270] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.580242] ? security_file_ioctl+0x83/0xb0 [ 1256.584650] SyS_ioctl+0x7f/0xb0 [ 1256.588079] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.592044] do_syscall_64+0x1d5/0x640 [ 1256.595935] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1256.601121] RIP: 0033:0x465f69 [ 1256.604304] RSP: 002b:00007fc9caa07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.612006] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1256.619270] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1256.626528] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1256.633783] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1256.641046] R13: 00007ffdf9c5846f R14: 00007fc9caa07300 R15: 0000000000022000 [ 1256.652440] Mem-Info: [ 1256.654879] active_anon:208266 inactive_anon:18912 isolated_anon:0 [ 1256.654879] active_file:23 inactive_file:0 isolated_file:0 [ 1256.654879] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1256.654879] slab_reclaimable:15139 slab_unreclaimable:135158 [ 1256.654879] mapped:52245 shmem:19219 pagetables:35536 bounce:0 [ 1256.654879] free:13906 free_pcp:0 free_cma:0 [ 1256.694602] Node 0 active_anon:824152kB inactive_anon:42316kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149712kB dirty:0kB writeback:0kB shmem:43372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 692224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1256.728329] Node 1 active_anon:8912kB inactive_anon:33332kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59268kB dirty:0kB writeback:0kB shmem:33504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1256.772223] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1256.809618] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1256.814790] Node 0 DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:824068kB inactive_anon:42316kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50144kB pagetables:132424kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1256.850461] lowmem_reserve[]: 0 0 0 0 0 [ 1256.854478] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1256.886258] lowmem_reserve[]: 0 0 0 0 0 [ 1256.890297] Node 1 Normal free:27168kB min:53696kB low:67120kB high:80544kB active_anon:8860kB inactive_anon:33332kB active_file:104kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3424kB pagetables:9720kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1256.925813] lowmem_reserve[]: 0 0 0 0 0 [ 1256.929885] Node 0 DMA: 6*4kB (UME) 4*8kB (ME) 1*16kB (E) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1256.949787] Node 0 DMA32: 1457*4kB (UME) 723*8kB (UME) 115*16kB (UME) 1*32kB (M) 3*64kB (UM) 2*128kB (UM) 0*256kB 4*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 18028kB [ 1256.968153] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1256.991055] Node 1 Normal: 538*4kB (M) 199*8kB (UME) 89*16kB (UME) 59*32kB (UM) 42*64kB (ME) 13*128kB (M) 8*256kB (M) 19*512kB (UM) 2*1024kB (M) 1*2048kB (E) 0*4096kB = 27280kB [ 1257.015604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1257.024521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1257.037369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1257.056917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1257.065586] 19253 total pagecache pages [ 1257.074006] 0 pages in swap cache [ 1257.077454] Swap cache stats: add 0, delete 0, find 0/0 [ 1257.082948] Free swap = 0kB [ 1257.085969] Total swap = 0kB [ 1257.091278] 2097051 pages RAM [ 1257.094398] 0 pages HighMem/MovableOnly [ 1257.098357] 363840 pages reserved [ 1257.101846] 0 pages cma reserved [ 1257.105200] Out of memory (oom_kill_allocating_task): Kill process 10532 (syz-executor.5) score 0 or sacrifice child [ 1257.116153] Killed process 10532 (syz-executor.5) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1257.127238] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1257.130741] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1257.139150] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1257.139175] CPU: 1 PID: 10532 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1257.139181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1257.139184] Call Trace: [ 1257.139203] dump_stack+0x1b2/0x281 [ 1257.170202] (null) [ 1257.171530] warn_alloc.cold+0x96/0x1cc [ 1257.174087] , order=0, oom_score_adj=0 [ 1257.177697] ? zone_watermark_ok_safe+0x220/0x220 [ 1257.179843] syz-executor.4 cpuset= [ 1257.183783] ? wait_for_completion_io+0x10/0x10 [ 1257.187724] / [ 1257.192558] __alloc_pages_nodemask+0x2127/0x2720 [ 1257.196124] mems_allowed=0-1 [ 1257.200759] ? lock_acquire+0x170/0x3f0 [ 1257.200774] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1257.219122] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1257.223602] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1257.229039] alloc_pages_current+0x155/0x260 [ 1257.233431] ion_page_pool_alloc+0x118/0x1b0 [ 1257.237821] ion_system_heap_allocate+0x133/0x8c0 [ 1257.242642] ? ion_alloc+0x187/0x810 [ 1257.246336] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1257.251768] ? ion_system_contig_heap_create+0x130/0x130 [ 1257.257204] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1257.262202] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1257.267027] ion_alloc+0x204/0x810 [ 1257.270571] ? ion_dma_buf_release+0x40/0x40 [ 1257.274961] ? __might_fault+0x177/0x1b0 [ 1257.279006] ion_ioctl+0xea/0x1f0 [ 1257.282440] ? ion_query_heaps+0x360/0x360 [ 1257.286658] ? ion_query_heaps+0x360/0x360 [ 1257.290876] do_vfs_ioctl+0x75a/0xff0 [ 1257.294657] ? ioctl_preallocate+0x1a0/0x1a0 [ 1257.299042] ? lock_downgrade+0x740/0x740 [ 1257.303173] ? __fget+0x225/0x360 [ 1257.306606] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.310563] ? security_file_ioctl+0x83/0xb0 [ 1257.314956] SyS_ioctl+0x7f/0xb0 [ 1257.318302] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.322275] do_syscall_64+0x1d5/0x640 [ 1257.326149] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1257.331335] RIP: 0033:0x465f69 [ 1257.334518] RSP: 002b:00007fc9caa07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1257.342206] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1257.349469] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1257.356718] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1257.363971] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1257.371220] R13: 00007ffdf9c5846f R14: 00007fc9caa07300 R15: 0000000000022000 [ 1257.378502] CPU: 0 PID: 10560 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1257.378888] Mem-Info: [ 1257.386398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1257.386404] Call Trace: [ 1257.388870] active_anon:208242 inactive_anon:18912 isolated_anon:0 [ 1257.388870] active_file:29 inactive_file:25 isolated_file:0 [ 1257.388870] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1257.388870] slab_reclaimable:15139 slab_unreclaimable:135110 [ 1257.388870] mapped:52225 shmem:19219 pagetables:35536 bounce:0 [ 1257.388870] free:14077 free_pcp:9 free_cma:0 [ 1257.398157] dump_stack+0x1b2/0x281 [ 1257.400768] Node 0 active_anon:824108kB inactive_anon:42316kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149708kB dirty:0kB writeback:0kB shmem:43372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 692224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1257.434045] dump_header+0x178/0x82f [ 1257.434056] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1257.434066] ? ___ratelimit+0x2cd/0x530 [ 1257.434074] oom_kill_process.cold+0x10/0xb18 [ 1257.434093] out_of_memory+0xe3e/0x1190 [ 1257.437708] Node 1 active_anon:8860kB inactive_anon:33332kB active_file:108kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:33504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1257.465358] ? oom_killer_disable+0x1c0/0x1c0 [ 1257.465365] ? mutex_trylock+0x152/0x1a0 [ 1257.465376] __alloc_pages_nodemask+0x23e1/0x2720 [ 1257.465395] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1257.465418] alloc_pages_current+0x155/0x260 [ 1257.469118] Node 0 [ 1257.474186] filemap_fault+0xea3/0x1980 [ 1257.478143] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.482614] ext4_filemap_fault+0x84/0xb0 [ 1257.482625] __do_fault+0xfa/0x380 [ 1257.482635] __handle_mm_fault+0x2497/0x4620 [ 1257.482645] ? kill_orphaned_pgrp+0x310/0x310 [ 1257.486590] lowmem_reserve[]: [ 1257.513825] ? vm_insert_page+0x7c0/0x7c0 [ 1257.513834] ? lock_downgrade+0x740/0x740 [ 1257.513851] handle_mm_fault+0x391/0x860 [ 1257.513863] __do_page_fault+0x549/0xad0 [ 1257.513873] ? spurious_fault+0x640/0x640 [ 1257.513882] ? do_page_fault+0x60/0x500 [ 1257.518352] 0 [ 1257.522393] ? page_fault+0x2f/0x50 [ 1257.522401] page_fault+0x45/0x50 [ 1257.522407] RIP: 56ca68: (null) [ 1257.522412] RSP: 0000:00007ffc759137b0 EFLAGS: ffffffff [ 1257.547976] Mem-Info: [ 1257.568464] 2717 2718 2718 2718 [ 1257.568482] Node 0 DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:824068kB inactive_anon:42316kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50144kB pagetables:132424kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 1257.568503] lowmem_reserve[]: 0 0 0 0 0 [ 1257.568523] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.568540] lowmem_reserve[]: 0 0 0 0 0 [ 1257.568560] Node 1 Normal free:27280kB min:53696kB low:67120kB high:80544kB active_anon:8860kB inactive_anon:33332kB active_file:108kB inactive_file:92kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3424kB pagetables:9720kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.568578] lowmem_reserve[]: 0 0 0 [ 1257.591959] active_anon:208242 inactive_anon:18912 isolated_anon:0 [ 1257.591959] active_file:29 inactive_file:25 isolated_file:0 [ 1257.591959] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1257.591959] slab_reclaimable:15139 slab_unreclaimable:135110 [ 1257.591959] mapped:52225 shmem:19219 pagetables:35536 bounce:0 [ 1257.591959] free:14077 free_pcp:9 free_cma:0 [ 1257.592647] 0 [ 1257.596718] Node 0 active_anon:824108kB inactive_anon:42316kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149708kB dirty:0kB writeback:0kB shmem:43372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 692224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1257.596732] Node 1 active_anon:8860kB inactive_anon:33332kB active_file:108kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:33504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1257.600801] 0 [ 1257.600808] Node 0 DMA: 6*4kB (UME) 4*8kB (ME) 1*16kB (E) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1257.600885] Node 0 DMA32: 1457*4kB (UME) 729*8kB (UME) 115*16kB (UME) 1*32kB (M) 3*64kB (UM) 2*128kB (UM) [ 1257.624218] Node 0 [ 1257.626024] 0*256kB [ 1257.645985] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.665981] 4*512kB [ 1257.689757] lowmem_reserve[]: [ 1257.695474] (U) [ 1257.718549] 0 [ 1257.728186] 0*1024kB [ 1257.751179] 2717 [ 1257.765255] 1*2048kB [ 1257.766981] 2718 [ 1257.801865] (M) [ 1257.835708] 2718 [ 1257.846148] 0*4096kB [ 1257.861309] 2718 [ 1257.890137] = 18076kB [ 1257.908272] Node 0 DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:824068kB inactive_anon:42316kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50144kB pagetables:132424kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 1257.911783] Node 0 [ 1257.947854] lowmem_reserve[]: [ 1257.949706] Normal: [ 1257.950615] 0 [ 1257.953203] 0*4kB [ 1257.955529] 0 [ 1257.957307] 0*8kB [ 1257.959450] 0 0 0 [ 1257.959463] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.959479] lowmem_reserve[]: 0 0 0 0 0 [ 1257.959496] Node 1 Normal free:27280kB min:53696kB low:67120kB high:80544kB active_anon:8860kB inactive_anon:33332kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3424kB pagetables:9720kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.959513] lowmem_reserve[]: 0 0 0 0 0 [ 1257.959532] Node 0 DMA: 6*4kB (UME) 4*8kB (ME) 1*16kB (E) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB [ 1257.971840] 0*16kB [ 1258.001038] (UME) [ 1258.035905] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1258.047810] 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1258.067135] Node 1 Normal: 538*4kB (M) 199*8kB (UME) 89*16kB (UME) 59*32kB (UM) 42*64kB (ME) 13*128kB (M) 8*256kB (M) 19*512kB (UM) 2*1024kB (M) 1*2048kB (E) 0*4096kB = 27280kB [ 1258.071144] Node 0 DMA32: 1456*4kB (ME) 722*8kB (ME) 115*16kB (UME) 1*32kB (M) 2*64kB (M) 2*128kB (UM) 0*256kB 4*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 17952kB [ 1258.095602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.118241] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1258.125658] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1258.137605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.137828] Node 1 Normal: 538*4kB (M) 199*8kB (UME) 89*16kB (UME) 59*32kB (UM) 42*64kB (ME) 13*128kB (M) 8*256kB (M) 19*512kB (UM) 2*1024kB (M) 1*2048kB (E) 0*4096kB = 27280kB [ 1258.156818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1258.171260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.181800] 19253 total pagecache pages [ 1258.185780] 0 pages in swap cache [ 1258.187380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1258.192799] Swap cache stats: add 0, delete 0, find 0/0 [ 1258.201951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.206824] Free swap = 0kB [ 1258.221510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1258.226578] Total swap = 0kB [ 1258.235368] 2097051 pages RAM [ 1258.236188] 19253 total pagecache pages [ 1258.238457] 0 pages HighMem/MovableOnly [ 1258.238461] 363840 pages reserved [ 1258.245482] 0 pages in swap cache [ 1258.257710] 0 pages cma reserved [ 1258.259862] Swap cache stats: add 0, delete 0, find 0/0 [ 1258.266419] Free swap = 0kB [ 1258.282188] Total swap = 0kB [ 1258.302655] 2097051 pages RAM [ 1258.305793] 0 pages HighMem/MovableOnly [ 1258.318243] 363840 pages reserved [ 1258.321747] 0 pages cma reserved [ 1258.325119] Out of memory (oom_kill_allocating_task): Kill process 10560 (syz-executor.4) score 0 or sacrifice child [ 1258.353930] Killed process 10560 (syz-executor.4) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1258.376224] oom_reaper: reaped process 10560 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1258.479721] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1258.530840] systemd[1]: rsyslog.service: Unit entered failed state. [ 1258.560337] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1258.569862] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1258.595249] systemd[1]: Failed to start Journal Service. [ 1258.636021] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1258.668950] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1258.677280] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1258.711878] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1258.731142] systemd[1]: Stopped Journal Service. [ 1258.799849] device bridge_slave_1 left promiscuous mode [ 1258.805390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.844303] device bridge_slave_0 left promiscuous mode [ 1258.859107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.872740] team0 (unregistering): Port device team_slave_1 removed [ 1258.883829] team0 (unregistering): Port device team_slave_0 removed [ 1258.910929] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1258.922683] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1259.000913] bond0 (unregistering): Released all slaves [ 1259.120159] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1259.138620] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1259.143774] CPU: 0 PID: 10532 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1259.147638] systemd-journald[10769]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1259.151650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1259.151654] Call Trace: [ 1259.151669] dump_stack+0x1b2/0x281 [ 1259.151682] warn_alloc.cold+0x96/0x1cc [ 1259.151694] ? zone_watermark_ok_safe+0x220/0x220 [ 1259.151713] __alloc_pages_nodemask+0x2127/0x2720 [ 1259.151723] ? lock_acquire+0x170/0x3f0 [ 1259.151736] ? lock_acquire+0x170/0x3f0 [ 1259.151751] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1259.151767] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1259.151778] ? __mutex_unlock_slowpath+0x75/0x770 [ 1259.151792] alloc_pages_current+0x155/0x260 [ 1259.151809] ion_page_pool_alloc+0x118/0x1b0 [ 1259.227591] ion_system_heap_allocate+0x133/0x8c0 [ 1259.232439] ? _raw_spin_unlock+0x29/0x40 [ 1259.236591] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1259.241523] ? ion_system_contig_heap_create+0x130/0x130 [ 1259.246968] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1259.251988] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1259.256841] ion_alloc+0x27a/0x810 [ 1259.260385] ? ion_dma_buf_release+0x40/0x40 [ 1259.264796] ? __might_fault+0x177/0x1b0 [ 1259.268856] ion_ioctl+0xea/0x1f0 [ 1259.272304] ? ion_query_heaps+0x360/0x360 [ 1259.276541] ? ion_query_heaps+0x360/0x360 [ 1259.280774] do_vfs_ioctl+0x75a/0xff0 [ 1259.284570] ? ioctl_preallocate+0x1a0/0x1a0 [ 1259.288973] ? lock_downgrade+0x740/0x740 [ 1259.293117] ? __fget+0x225/0x360 [ 1259.296570] ? do_vfs_ioctl+0xff0/0xff0 [ 1259.300543] ? security_file_ioctl+0x83/0xb0 [ 1259.304947] SyS_ioctl+0x7f/0xb0 [ 1259.308303] ? do_vfs_ioctl+0xff0/0xff0 [ 1259.312277] do_syscall_64+0x1d5/0x640 [ 1259.316174] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1259.321365] RIP: 0033:0x465f69 [ 1259.324546] RSP: 002b:00007fc9caa07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1259.332259] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1259.339530] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1259.346794] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1259.354058] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1259.361323] R13: 00007ffdf9c5846f R14: 00007fc9caa07300 R15: 0000000000022000 [ 1259.363299] systemd-journald[10769]: /dev/kmsg buffer overrun, some messages lost. [ 1259.517392] Mem-Info: [ 1259.531527] active_anon:208465 inactive_anon:20910 isolated_anon:24 [ 1259.531527] active_file:2064 inactive_file:2042 isolated_file:32 [ 1259.531527] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1259.531527] slab_reclaimable:15253 slab_unreclaimable:134565 [ 1259.531527] mapped:47619 shmem:21240 pagetables:35557 bounce:0 [ 1259.531527] free:24983 free_pcp:177 free_cma:0 [ 1259.605577] Node 0 active_anon:825500kB inactive_anon:50416kB active_file:5544kB inactive_file:5620kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:125328kB dirty:32kB writeback:0kB shmem:51472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 692224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1259.697449] Node 1 active_anon:8460kB inactive_anon:33224kB active_file:0kB inactive_file:84kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:59248kB dirty:0kB writeback:0kB shmem:33488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1259.735467] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1259.764961] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1259.770691] Node 0 DMA32 free:35684kB min:36200kB low:45248kB high:54296kB active_anon:825360kB inactive_anon:50416kB active_file:968kB inactive_file:964kB unevictable:0kB writepending:32kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50176kB pagetables:132508kB bounce:0kB free_pcp:344kB local_pcp:128kB free_cma:0kB [ 1259.868619] lowmem_reserve[]: 0 0 0 0 0 [ 1259.872647] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1259.961968] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1259.988553] lowmem_reserve[]: 0 0 0 0 0 [ 1259.992575] Node 1 Normal free:53672kB min:53696kB low:67120kB high:80544kB active_anon:8536kB inactive_anon:33264kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3360kB pagetables:9744kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1260.029098] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1260.033895] CPU: 0 PID: 7972 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 1260.041334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.050685] Call Trace: [ 1260.053282] dump_stack+0x1b2/0x281 [ 1260.056907] dump_header+0x178/0x82f [ 1260.060618] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1260.065718] ? ___ratelimit+0x2cd/0x530 [ 1260.069688] oom_kill_process.cold+0x10/0xb18 [ 1260.074193] out_of_memory+0xe3e/0x1190 [ 1260.078169] ? oom_killer_disable+0x1c0/0x1c0 [ 1260.082658] ? mutex_trylock+0x152/0x1a0 [ 1260.086718] __alloc_pages_nodemask+0x23e1/0x2720 [ 1260.091570] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1260.096421] alloc_pages_current+0x155/0x260 [ 1260.100825] filemap_fault+0xea3/0x1980 [ 1260.104824] ext4_filemap_fault+0x84/0xb0 [ 1260.108965] __do_fault+0xfa/0x380 [ 1260.112498] __handle_mm_fault+0x2497/0x4620 [ 1260.116899] ? vm_insert_page+0x7c0/0x7c0 [ 1260.121048] ? lock_downgrade+0x740/0x740 [ 1260.124463] lowmem_reserve[]: 0 0 0 [ 1260.125197] handle_mm_fault+0x391/0x860 [ 1260.125199] 0 0 [ 1260.128814] __do_page_fault+0x549/0xad0 [ 1260.128825] ? spurious_fault+0x640/0x640 [ 1260.128832] ? do_page_fault+0x60/0x500 [ 1260.128842] ? page_fault+0x2f/0x50 [ 1260.128849] page_fault+0x45/0x50 [ 1260.128856] RIP: 0000:0x93f280 [ 1260.128860] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1260.129329] Mem-Info: [ 1260.169103] Node 0 DMA: 154*4kB (UME) 6*8kB (UME) 2*16kB (UE) 0*32kB 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11000kB [ 1260.187998] Node 0 DMA32: 539*4kB (UME) 399*8kB (UME) 711*16kB (UME) 307*32kB (UM) 64*64kB (UM) 20*128kB (UM) 4*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35764kB [ 1260.206891] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1260.212281] active_anon:208532 inactive_anon:20942 isolated_anon:0 [ 1260.212281] active_file:17 inactive_file:17 isolated_file:0 [ 1260.212281] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1260.212281] slab_reclaimable:15295 slab_unreclaimable:134762 [ 1260.212281] mapped:43832 shmem:21263 pagetables:35585 bounce:0 [ 1260.212281] free:25087 free_pcp:31 free_cma:0 [ 1260.217654] Node 1 Normal: 278*4kB (UME) 12*8kB (ME) 1341*16kB (UE) 923*32kB (UME) 5*64kB (UME) 1*128kB (E) 2*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 53672kB [ 1260.288547] Node 0 active_anon:825592kB inactive_anon:50504kB active_file:156kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116136kB dirty:0kB writeback:0kB shmem:51564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 692224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1260.293440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1260.342618] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1260.348539] Node 1 active_anon:8536kB inactive_anon:33264kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:33488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1260.359296] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1260.393118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1260.404061] 21297 total pagecache pages [ 1260.408039] 0 pages in swap cache [ 1260.417053] Swap cache stats: add 0, delete 0, find 0/0 [ 1260.424704] Free swap = 0kB [ 1260.427714] Total swap = 0kB [ 1260.434525] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1260.435973] 2097051 pages RAM [ 1260.478506] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1260.480934] 0 pages HighMem/MovableOnly [ 1260.483567] Node 0 [ 1260.487527] 363840 pages reserved [ 1260.487545] DMA32 free:35676kB min:36200kB low:45248kB high:54296kB active_anon:825552kB inactive_anon:50504kB active_file:156kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:50240kB pagetables:132596kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1260.497439] 0 pages cma reserved [ 1260.568498] lowmem_reserve[]: 0 0 0 0 0 [ 1260.572538] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1260.628509] lowmem_reserve[]: 0 0 0 0 0 [ 1260.632545] Node 1 Normal free:37056kB min:53696kB low:67120kB high:80544kB active_anon:8536kB inactive_anon:33264kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:3360kB pagetables:9744kB bounce:0kB free_pcp:212kB local_pcp:120kB free_cma:0kB [ 1260.728476] lowmem_reserve[]: 0 0 0 0 0 [ 1260.732509] Node 0 DMA: 144*4kB (UME) 6*8kB (UME) 2*16kB (UE) 0*32kB 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10960kB [ 1260.766034] Node 0 DMA32: 538*4kB (UME) 399*8kB (UME) 141*16kB (UME) 40*32kB (UM) 64*64kB (UM) 20*128kB (UM) 4*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18096kB [ 1260.783703] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1260.794522] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1260.808932] Node 1 Normal: 277*4kB (ME) 12*8kB (ME) 3*16kB (UE) 747*32kB (UME) 9*64kB (UME) 1*128kB (E) 2*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 26884kB [ 1260.825272] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1260.832577] CPU: 1 PID: 10532 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1260.840455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.849802] Call Trace: [ 1260.852391] dump_stack+0x1b2/0x281 [ 1260.856013] warn_alloc.cold+0x96/0x1cc [ 1260.859987] ? zone_watermark_ok_safe+0x220/0x220 [ 1260.861931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1260.864824] ? usleep_range+0x130/0x130 [ 1260.873721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1260.877607] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1260.886189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1260.891263] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1260.891275] ? run_timer_softirq+0x5a0/0x5a0 [ 1260.900102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1260.905210] __alloc_pages_nodemask+0x2127/0x2720 [ 1260.909639] 21319 total pagecache pages [ 1260.918160] ? lock_acquire+0x170/0x3f0 [ 1260.923001] 0 pages in swap cache [ 1260.926930] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1260.930892] Swap cache stats: add 0, delete 0, find 0/0 [ 1260.934313] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1260.939138] Free swap = 0kB [ 1260.944479] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1260.948955] Total swap = 0kB [ 1260.951943] ? policy_node+0x28/0x110 [ 1260.957364] 2097051 pages RAM [ 1260.960365] alloc_pages_current+0x155/0x260 [ 1260.960379] ion_page_pool_alloc+0x118/0x1b0 [ 1260.960389] ion_system_heap_allocate+0x133/0x8c0 [ 1260.964163] 0 pages HighMem/MovableOnly [ 1260.967265] ? _raw_spin_unlock+0x29/0x40 [ 1260.971697] 363840 pages reserved [ 1260.976070] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1260.980912] 0 pages cma reserved [ 1260.984845] ? ion_system_contig_heap_create+0x130/0x130 [ 1260.988987] Out of memory (oom_kill_allocating_task): Kill process 7972 (syz-fuzzer) score 0 or sacrifice child [ 1260.992410] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1260.997365] Killed process 7994 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1261.000659] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1261.000672] ion_alloc+0x27a/0x810 [ 1261.000687] ? ion_dma_buf_release+0x40/0x40 [ 1261.044059] ? __might_fault+0x177/0x1b0 [ 1261.048115] ion_ioctl+0xea/0x1f0 [ 1261.051552] ? ion_query_heaps+0x360/0x360 [ 1261.055769] ? ion_query_heaps+0x360/0x360 [ 1261.059988] do_vfs_ioctl+0x75a/0xff0 [ 1261.063772] ? ioctl_preallocate+0x1a0/0x1a0 [ 1261.068161] ? lock_downgrade+0x740/0x740 [ 1261.072296] ? __fget+0x225/0x360 [ 1261.075748] ? do_vfs_ioctl+0xff0/0xff0 [ 1261.079719] ? security_file_ioctl+0x83/0xb0 [ 1261.084128] SyS_ioctl+0x7f/0xb0 [ 1261.087480] ? do_vfs_ioctl+0xff0/0xff0 [ 1261.091436] do_syscall_64+0x1d5/0x640 [ 1261.095328] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1261.100499] RIP: 0033:0x465f69 [ 1261.103689] RSP: 002b:00007fc9caa07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1261.111378] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1261.118750] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1261.126019] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1261.133275] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1261.140540] R13: 00007ffdf9c5846f R14: 00007fc9caa07300 R15: 0000000000022000 [ 1261.151183] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1261.165351] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1261.170184] CPU: 1 PID: 12521 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 1261.177715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1261.187063] Call Trace: [ 1261.189652] dump_stack+0x1b2/0x281 [ 1261.193274] dump_header+0x178/0x82f [ 1261.196979] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1261.202072] ? ___ratelimit+0x2cd/0x530 [ 1261.206038] oom_kill_process.cold+0x10/0xb18 [ 1261.210530] out_of_memory+0xe3e/0x1190 [ 1261.214486] ? oom_killer_disable+0x1c0/0x1c0 [ 1261.218961] ? mutex_trylock+0x152/0x1a0 [ 1261.223001] __alloc_pages_nodemask+0x23e1/0x2720 [ 1261.227832] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1261.232665] alloc_pages_current+0x155/0x260 [ 1261.237056] filemap_fault+0xea3/0x1980 [ 1261.241030] ext4_filemap_fault+0x84/0xb0 [ 1261.245157] __do_fault+0xfa/0x380 [ 1261.248676] __handle_mm_fault+0x2497/0x4620 [ 1261.253065] ? vm_insert_page+0x7c0/0x7c0 [ 1261.257215] handle_mm_fault+0x391/0x860 [ 1261.261255] __do_page_fault+0x549/0xad0 [ 1261.265296] ? spurious_fault+0x640/0x640 [ 1261.269423] ? do_page_fault+0x60/0x500 [ 1261.273376] ? page_fault+0x2f/0x50 [ 1261.276980] page_fault+0x45/0x50 [ 1261.280415] RIP: 57f0600:0x1255a83fb8e [ 1261.284278] RSP: 00bd:000000c00054de40 EFLAGS: 00000003 [ 1263.222438] Mem-Info: [ 1263.231592] active_anon:156988 inactive_anon:20942 isolated_anon:0 [ 1263.231592] active_file:55 inactive_file:229 isolated_file:54 [ 1263.231592] unevictable:0 dirty:21 writeback:0 unstable:0 [ 1263.231592] slab_reclaimable:15303 slab_unreclaimable:131891 [ 1263.231592] mapped:35245 shmem:21263 pagetables:24663 bounce:0 [ 1263.231592] free:84227 free_pcp:585 free_cma:0 [ 1263.397133] Mem-Info: [ 1263.401402] active_anon:157113 inactive_anon:20942 isolated_anon:0 [ 1263.401402] active_file:84 inactive_file:2070 isolated_file:22 [ 1263.401402] unevictable:0 dirty:71 writeback:0 unstable:0 [ 1263.401402] slab_reclaimable:15303 slab_unreclaimable:130028 [ 1263.401402] mapped:36645 shmem:21263 pagetables:24663 bounce:0 [ 1263.401402] free:72606 free_pcp:447 free_cma:0 [ 1263.559072] Node 0 active_anon:622696kB inactive_anon:50504kB active_file:4272kB inactive_file:4372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96988kB dirty:0kB writeback:0kB shmem:51564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 518144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1263.587373] Node 0 active_anon:622696kB inactive_anon:50504kB active_file:4272kB inactive_file:4372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96988kB dirty:0kB writeback:0kB shmem:51564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 518144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1263.638417] Node 1 active_anon:6056kB inactive_anon:33264kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:33488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1263.678949] Node 1 active_anon:6056kB inactive_anon:33264kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:33488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1263.710244] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.712427] Node 0 [ 1263.740533] lowmem_reserve[]: [ 1263.742313] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.744344] 0 [ 1263.747937] lowmem_reserve[]: [ 1263.784967] 2717 2718 2718 2718 [ 1263.801667] Node 0 DMA32 free:35900kB min:36200kB low:45248kB high:54296kB active_anon:622656kB inactive_anon:50504kB active_file:3724kB inactive_file:3860kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36768kB pagetables:91784kB bounce:0kB free_pcp:1056kB local_pcp:436kB free_cma:0kB [ 1263.811963] 0 [ 1263.832742] lowmem_reserve[]: 0 0 0 0 0 [ 1263.835328] 2717 [ 1263.858638] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.871210] 2718 [ 1263.887006] lowmem_reserve[]: 0 0 0 0 0 [ 1263.893296] Node 1 Normal free:53980kB min:53696kB low:67120kB high:80544kB active_anon:6240kB inactive_anon:33264kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2432kB pagetables:7016kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.923837] lowmem_reserve[]: 0 0 0 0 0 [ 1263.927856] Node 0 DMA: 144*4kB (UME) 6*8kB (UME) 2*16kB (UE) 0*32kB 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10960kB [ 1263.951985] 2718 2718 [ 1263.954523] Node 0 DMA32 free:35844kB min:36200kB low:45248kB high:54296kB active_anon:622656kB inactive_anon:50504kB active_file:3192kB inactive_file:2772kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36768kB pagetables:91784kB bounce:0kB free_pcp:984kB local_pcp:400kB free_cma:0kB [ 1263.968259] Node 0 [ 1264.005387] lowmem_reserve[]: [ 1264.006296] DMA32: [ 1264.009448] 0 0 0 0 0 [ 1264.015464] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1264.041010] 2244*4kB (ME) 1384*8kB (UME) 375*16kB (ME) 66*32kB (M) 45*64kB (UM) 18*128kB (UM) 4*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35904kB [ 1264.041071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1264.041115] Node 1 Normal: 642*4kB (UME) 532*8kB (UME) 246*16kB (UME) 982*32kB (UME) 87*64kB (UME) 38*128kB (UE) 2*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 53640kB [ 1264.041184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1264.041190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1264.041196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1264.041201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1264.041204] 22422 total pagecache pages [ 1264.041215] 0 pages in swap cache [ 1264.041219] Swap cache stats: add 0, delete 0, find 0/0 [ 1264.041222] Free swap = 0kB [ 1264.041225] Total swap = 0kB [ 1264.041230] 2097051 pages RAM [ 1264.041233] 0 pages HighMem/MovableOnly [ 1264.041235] 363840 pages reserved [ 1264.041239] 0 pages cma reserved [ 1264.371349] lowmem_reserve[]: 0 0 0 0 0 [ 1264.375386] Node 1 Normal free:113080kB min:53696kB low:67120kB high:80544kB active_anon:6020kB inactive_anon:33264kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2304kB pagetables:6684kB bounce:0kB free_pcp:628kB local_pcp:620kB free_cma:0kB [ 1264.448255] lowmem_reserve[]: 0 0 0 0 0 [ 1264.452292] Node 0 DMA: 30*4kB (UME) 4*8kB (ME) 2*16kB (UE) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11064kB [ 1264.468169] Node 0 DMA32: 2689*4kB (UME) 1436*8kB (UME) 372*16kB (UME) 61*32kB (UM) 42*64kB (UM) 15*128kB (UM) 4*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36804kB [ 1264.484022] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1264.495113] Node 1 Normal: 472*4kB (UME) 147*8kB (UME) 30*16kB (UME) 22*32kB (ME) 20*64kB (ME) 6*128kB (ME) 3*256kB (UME) 21*512kB (UME) 15*1024kB (U) 4*2048kB (U) 3*4096kB (U) = 53656kB [ 1264.512396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1264.521636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1264.530508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1264.540248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1264.549136] 21846 total pagecache pages [ 1264.553351] 0 pages in swap cache [ 1264.556807] Swap cache stats: add 0, delete 0, find 0/0 [ 1264.564746] Free swap = 0kB [ 1264.567774] Total swap = 0kB [ 1264.573434] 2097051 pages RAM [ 1264.576548] 0 pages HighMem/MovableOnly [ 1264.580820] 363840 pages reserved [ 1264.584275] 0 pages cma reserved [ 1264.587633] Out of memory (oom_kill_allocating_task): Kill process 12521 (syz-fuzzer) score 0 or sacrifice child [ 1264.599765] Killed process 10785 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:448kB, shmem-rss:0kB [ 1264.629572] oom_reaper: reaped process 10785 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1264.790638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.797375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.818727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1264.825571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.836796] device bridge_slave_1 left promiscuous mode [ 1264.842364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.852721] device bridge_slave_0 left promiscuous mode [ 1264.858318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.867333] device veth1_macvtap left promiscuous mode [ 1264.873744] device veth0_macvtap left promiscuous mode [ 1264.879156] device veth1_vlan left promiscuous mode [ 1264.884207] device veth0_vlan left promiscuous mode [ 1265.010432] oom_reaper: reaped process 10533 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1265.049208] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1265.071224] systemd-journal cpuset=/ mems_allowed=0-1 [ 1265.088059] CPU: 1 PID: 10769 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 1265.096060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1265.105406] Call Trace: [ 1265.107993] dump_stack+0x1b2/0x281 [ 1265.111627] dump_header+0x178/0x82f [ 1265.115332] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1265.120410] ? ___ratelimit+0x2cd/0x530 [ 1265.124362] oom_kill_process.cold+0x10/0xb18 [ 1265.128836] out_of_memory+0xe3e/0x1190 [ 1265.132792] ? oom_killer_disable+0x1c0/0x1c0 [ 1265.137260] ? mutex_trylock+0x152/0x1a0 [ 1265.141299] __alloc_pages_nodemask+0x23e1/0x2720 [ 1265.146167] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1265.150993] ? cache_grow_begin+0x41/0x630 [ 1265.155244] cache_grow_begin+0x91/0x630 [ 1265.159283] ? cache_grow_begin+0x91/0x630 [ 1265.163493] fallback_alloc+0x207/0x2c0 [ 1265.167444] kmem_cache_alloc+0x1e5/0x3c0 [ 1265.171570] getname_flags+0xc8/0x550 [ 1265.175349] user_path_at_empty+0x2a/0x50 [ 1265.179477] SyS_faccessat+0x21b/0x680 [ 1265.183342] ? SyS_fallocate+0x80/0x80 [ 1265.187205] ? do_syscall_64+0x4c/0x640 [ 1265.191156] ? SyS_faccessat+0x680/0x680 [ 1265.195193] do_syscall_64+0x1d5/0x640 [ 1265.199062] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1265.204229] RIP: 0033:0x7f211ab4b9c7 [ 1265.207916] RSP: 002b:00007ffcc2624268 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1265.215608] RAX: ffffffffffffffda RBX: 00007ffcc2627180 RCX: 00007f211ab4b9c7 [ 1265.222854] RDX: 00007f211b5bca00 RSI: 0000000000000000 RDI: 00005610342a39a3 [ 1265.230102] RBP: 00007ffcc26242a0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.237348] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1265.244601] R13: 0000000000000000 R14: 00007ffcc2627180 R15: 00007ffcc2624790 [ 1265.256099] Mem-Info: [ 1265.264285] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1265.266652] active_anon:157135 inactive_anon:20940 isolated_anon:0 [ 1265.266652] active_file:19 inactive_file:9 isolated_file:0 [ 1265.266652] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1265.266652] slab_reclaimable:15298 slab_unreclaimable:130592 [ 1265.266652] mapped:43878 shmem:21259 pagetables:24583 bounce:0 [ 1265.266652] free:13899 free_pcp:30 free_cma:0 [ 1265.279996] syz-executor.0 cpuset= [ 1265.324167] Node 0 active_anon:622592kB inactive_anon:50496kB active_file:68kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116320kB dirty:28kB writeback:0kB shmem:51548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 518144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1265.324952] / [ 1265.327739] Node 1 active_anon:5948kB inactive_anon:33264kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:33488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1265.363697] mems_allowed=0-1 [ 1265.389991] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1265.401136] CPU: 0 PID: 10533 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1265.421327] lowmem_reserve[]: [ 1265.424087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1265.424094] 0 [ 1265.427174] Call Trace: [ 1265.440886] dump_stack+0x1b2/0x281 [ 1265.441711] 2717 2718 [ 1265.444509] warn_alloc.cold+0x96/0x1cc [ 1265.444514] 2718 [ 1265.446994] ? zone_watermark_ok_safe+0x220/0x220 [ 1265.451017] 2718 [ 1265.452996] ? usleep_range+0x130/0x130 [ 1265.459848] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1265.459860] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1265.459869] ? run_timer_softirq+0x5a0/0x5a0 [ 1265.459885] __alloc_pages_nodemask+0x2127/0x2720 [ 1265.459900] ? lock_acquire+0x170/0x3f0 [ 1265.459915] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1265.469115] Node 0 [ 1265.473977] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1265.481892] DMA32 free:17940kB min:36200kB low:45248kB high:54296kB active_anon:622552kB inactive_anon:50496kB active_file:68kB inactive_file:40kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36768kB pagetables:91752kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1265.483190] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1265.487131] lowmem_reserve[]: [ 1265.491959] ? retint_kernel+0x2d/0x2d [ 1265.491973] alloc_pages_current+0x155/0x260 [ 1265.491986] ion_page_pool_alloc+0x118/0x1b0 [ 1265.491996] ion_system_heap_allocate+0x133/0x8c0 [ 1265.492005] ? ion_alloc+0x187/0x810 [ 1265.492014] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1265.492026] ? ion_system_contig_heap_create+0x130/0x130 [ 1265.496053] 0 [ 1265.498718] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1265.498729] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1265.498740] ion_alloc+0x204/0x810 [ 1265.498755] ? ion_dma_buf_release+0x40/0x40 [ 1265.498766] ? __might_fault+0x177/0x1b0 [ 1265.532517] 0 [ 1265.532642] ion_ioctl+0xea/0x1f0 [ 1265.535714] 0 [ 1265.539583] ? ion_query_heaps+0x360/0x360 [ 1265.539595] ? ion_query_heaps+0x360/0x360 [ 1265.539604] do_vfs_ioctl+0x75a/0xff0 [ 1265.539615] ? ioctl_preallocate+0x1a0/0x1a0 [ 1265.539623] ? lock_downgrade+0x740/0x740 [ 1265.539636] ? __fget+0x225/0x360 [ 1265.544016] 0 [ 1265.548408] ? do_vfs_ioctl+0xff0/0xff0 [ 1265.548418] ? security_file_ioctl+0x83/0xb0 [ 1265.548427] SyS_ioctl+0x7f/0xb0 [ 1265.548434] ? do_vfs_ioctl+0xff0/0xff0 [ 1265.548445] do_syscall_64+0x1d5/0x640 [ 1265.548461] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1265.548468] RIP: 0033:0x465f69 [ 1265.548474] RSP: 002b:00007fdb50538188 EFLAGS: 00000246 [ 1265.558384] 0 [ 1265.562413] ORIG_RAX: 0000000000000010 [ 1265.569620] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1265.569625] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1265.569630] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1265.569635] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1265.569640] R13: 00007fff7572ef8f R14: 00007fdb50538300 R15: 0000000000022000 [ 1265.589497] Mem-Info: [ 1265.596677] Node 0 [ 1265.596771] active_anon:157135 inactive_anon:20940 isolated_anon:0 [ 1265.596771] active_file:19 inactive_file:9 isolated_file:0 [ 1265.596771] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1265.596771] slab_reclaimable:15298 slab_unreclaimable:130592 [ 1265.596771] mapped:43878 shmem:21259 pagetables:24583 bounce:0 [ 1265.596771] free:13868 free_pcp:60 free_cma:0 [ 1265.598584] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1265.598587] lowmem_reserve[]: 0 0 0 0 0 [ 1265.598606] Node 1 Normal free:26580kB min:53696kB low:67120kB high:80544kB active_anon:5948kB inactive_anon:33264kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6580kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1265.598623] lowmem_reserve[]: 0 0 0 0 0 [ 1265.598641] Node 0 DMA: 6*4kB (UME) [ 1265.617525] Node 0 active_anon:622592kB inactive_anon:50496kB active_file:68kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116320kB dirty:28kB writeback:0kB shmem:51548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 518144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1265.624855] 4*8kB [ 1265.643920] Node 1 active_anon:5948kB inactive_anon:33264kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:33488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1265.650070] (ME) 1*16kB (E) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1265.650120] Node 0 DMA32: 2115*4kB (UME) 817*8kB (UME) 170*16kB (UME) 7*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17940kB [ 1265.650174] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1265.650217] Node 1 Normal: 473*4kB (UME) 146*8kB (ME) 30*16kB (UME) 22*32kB (ME) 21*64kB (UME) 6*128kB (ME) 3*256kB (UME) 4*512kB (UME) 1*1024kB (U) 2*2048kB (U) 3*4096kB (U) = 26580kB [ 1265.650292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1265.650298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1265.650304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1265.650309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1265.650313] 21295 total pagecache pages [ 1265.650324] 0 pages in swap cache [ 1265.650328] Swap cache stats: add 0, delete 0, find 0/0 [ 1265.650331] Free swap = 0kB [ 1265.650335] Total swap = 0kB [ 1265.650340] 2097051 pages RAM [ 1265.650343] 0 pages HighMem/MovableOnly [ 1265.650346] 363840 pages reserved [ 1265.650349] 0 pages cma reserved [ 1265.650355] Out of memory (oom_kill_allocating_task): Kill process 10769 (systemd-journal) score 0 or sacrifice child [ 1265.650480] Killed process 10769 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1372kB [ 1265.651554] oom_reaper: reaped process 10769 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1372kB [ 1265.665299] Node 0 [ 1265.684930] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1265.701928] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1265.709092] systemd-journal: [ 1265.754802] lowmem_reserve[]: [ 1265.769759] page allocation failure: order:1 [ 1265.812130] 0 [ 1265.838003] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1265.876845] 2717 [ 1265.896161] (null) [ 1265.911415] 2718 [ 1265.923932] systemd-journal cpuset= [ 1265.936579] 2718 [ 1265.949974] / [ 1265.962551] 2718 [ 1265.965988] mems_allowed=0-1 [ 1265.976216] CPU: 1 PID: 10769 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 1265.976716] Node 0 [ 1265.980148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1265.980152] Call Trace: [ 1265.980169] dump_stack+0x1b2/0x281 [ 1265.980181] warn_alloc.cold+0x96/0x1cc [ 1265.980191] ? zone_watermark_ok_safe+0x220/0x220 [ 1265.980200] ? usleep_range+0x130/0x130 [ 1265.980209] ? _find_next_bit+0xdb/0x100 [ 1265.980218] ? run_timer_softirq+0x5a0/0x5a0 [ 1265.980232] __alloc_pages_nodemask+0x2127/0x2720 [ 1265.980252] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1265.980273] ? cache_grow_begin+0x41/0x630 [ 1265.995662] DMA32 free:17940kB min:36200kB low:45248kB high:54296kB active_anon:622088kB inactive_anon:50496kB active_file:68kB inactive_file:72kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36768kB pagetables:91752kB bounce:0kB free_pcp:684kB local_pcp:120kB free_cma:0kB [ 1266.005014] cache_grow_begin+0x91/0x630 [ 1266.005025] ? cache_grow_begin+0x91/0x630 [ 1266.005036] fallback_alloc+0x207/0x2c0 [ 1266.015344] lowmem_reserve[]: [ 1266.017555] kmem_cache_alloc+0x1e5/0x3c0 [ 1266.026810] 0 [ 1266.052363] getname_flags+0xc8/0x550 [ 1266.052374] user_path_at_empty+0x2a/0x50 [ 1266.052383] SyS_faccessat+0x21b/0x680 [ 1266.055463] 0 [ 1266.058553] ? SyS_fallocate+0x80/0x80 [ 1266.058562] ? do_syscall_64+0x4c/0x640 [ 1266.058571] ? SyS_faccessat+0x680/0x680 [ 1266.062950] 0 [ 1266.064733] do_syscall_64+0x1d5/0x640 [ 1266.070689] 0 [ 1266.072726] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1266.074844] 0 [ 1266.076887] RIP: 0033:0x7f211ab4b9c7 [ 1266.082534] RSP: 002b:00007ffcc2624268 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1266.084247] Node 0 [ 1266.086296] RAX: ffffffffffffffda RBX: 00007ffcc2627180 RCX: 00007f211ab4b9c7 [ 1266.086302] RDX: 00007f211b5bca00 RSI: 0000000000000000 RDI: 00005610342a39a3 [ 1266.089443] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1266.097338] RBP: 00007ffcc26242a0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.099571] lowmem_reserve[]: [ 1266.108881] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1266.108885] R13: 0000000000000000 R14: 00007ffcc2627180 R15: 00007ffcc2624790 [ 1266.114375] (null) [ 1266.115092] 0 [ 1266.119108] , order=0, oom_score_adj=0 [ 1266.119114] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1266.119133] CPU: 1 PID: 4245 Comm: ion_system_heap Not tainted 4.14.224-syzkaller #0 [ 1266.119138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.119141] Call Trace: [ 1266.119155] dump_stack+0x1b2/0x281 [ 1266.119167] dump_header+0x178/0x82f [ 1266.119177] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1266.119187] ? ___ratelimit+0x2cd/0x530 [ 1266.119196] oom_kill_process.cold+0x10/0xb18 [ 1266.119206] ? lock_downgrade+0x740/0x740 [ 1266.119219] out_of_memory+0x2dc/0x1190 [ 1266.119231] ? oom_killer_disable+0x1c0/0x1c0 [ 1266.119239] ? mutex_trylock+0x152/0x1a0 [ 1266.119250] __alloc_pages_nodemask+0x23e1/0x2720 [ 1266.119270] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1266.119286] ? ion_heap_sglist_zero+0x165/0x220 [ 1266.119297] ? cache_grow_begin+0x41/0x630 [ 1266.119307] cache_grow_begin+0x91/0x630 [ 1266.119316] ? cache_grow_begin+0x91/0x630 [ 1266.119326] fallback_alloc+0x207/0x2c0 [ 1266.119338] kmem_cache_alloc_node_trace+0xed/0x400 [ 1266.119349] __get_vm_area_node+0xed/0x340 [ 1266.119358] vmap+0xd5/0x290 [ 1266.119365] ? ion_heap_clear_pages+0x23/0x70 [ 1266.119372] ? vunmap+0x50/0x50 [ 1266.119378] ? __vunmap+0x21c/0x300 [ 1266.119390] ion_heap_clear_pages+0x23/0x70 [ 1266.119398] ion_heap_sglist_zero+0x165/0x220 [ 1266.119407] ? ion_heap_clear_pages+0x70/0x70 [ 1266.119433] ? pagerange_is_ram_callback+0x100/0x100 [ 1266.119442] ? ion_heap_deferred_free+0x222/0x470 [ 1266.140021] 0 [ 1266.141520] ion_system_heap_free+0x1d0/0x240 [ 1266.146330] 0 [ 1266.150552] ion_buffer_destroy+0x132/0x190 [ 1266.150561] ion_heap_deferred_free+0x22a/0x470 [ 1266.150569] ? __schedule+0x857/0x1de0 [ 1266.150580] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1266.179200] 0 [ 1266.183257] ? wait_woken+0x230/0x230 [ 1266.187463] 0 [ 1266.191433] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1266.191442] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1266.191450] kthread+0x30d/0x420 [ 1266.191459] ? kthread_create_on_node+0xd0/0xd0 [ 1266.198662] ret_from_fork+0x24/0x30 [ 1266.204029] Mem-Info: [ 1266.204241] Node 1 [ 1266.208440] active_anon:157019 inactive_anon:20940 isolated_anon:0 [ 1266.208440] active_file:18 inactive_file:18 isolated_file:0 [ 1266.208440] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1266.208440] slab_reclaimable:15298 slab_unreclaimable:130568 [ 1266.208440] mapped:43878 shmem:21259 pagetables:24583 bounce:0 [ 1266.208440] free:13868 free_pcp:202 free_cma:0 [ 1266.208454] Node 0 active_anon:622128kB inactive_anon:50496kB active_file:68kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116320kB dirty:28kB writeback:0kB shmem:51548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 518144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1266.208467] Node 1 active_anon:5948kB inactive_anon:33264kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:33488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1266.208470] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1266.232451] Normal free:26580kB min:53696kB low:67120kB high:80544kB active_anon:5948kB inactive_anon:33264kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6580kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1266.244509] lowmem_reserve[]: [ 1266.262901] lowmem_reserve[]: [ 1266.276882] 0 [ 1266.306055] 0 [ 1266.325005] 2717 [ 1266.334235] 0 [ 1266.353515] 2718 [ 1266.362961] 0 [ 1266.384827] 2718 [ 1266.391858] 0 [ 1266.412084] 2718 [ 1266.418247] 0 [ 1266.461335] Node 0 [ 1266.468121] Node 0 [ 1266.477723] DMA32 free:18640kB min:36200kB low:45248kB high:54296kB active_anon:622088kB inactive_anon:50496kB active_file:68kB inactive_file:72kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36768kB pagetables:91752kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1266.485012] DMA: [ 1266.499870] lowmem_reserve[]: [ 1266.506558] 6*4kB [ 1266.525683] 0 [ 1266.532052] (UME) [ 1266.576008] 0 [ 1266.590890] 4*8kB [ 1266.635617] 0 [ 1266.647593] (ME) [ 1266.685422] 0 [ 1266.691826] 1*16kB [ 1266.706516] 0 [ 1266.734033] (E) [ 1266.755778] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1266.758412] 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1266.796929] lowmem_reserve[]: 0 0 0 0 0 [ 1266.797608] Node 0 DMA32: 2185*4kB (UME) 841*8kB (UME) 177*16kB (UME) 9*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18588kB [ 1266.807454] Node 1 [ 1266.823338] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1266.832435] Normal free:26580kB min:53696kB low:67120kB high:80544kB active_anon:5948kB inactive_anon:33264kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6580kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1266.836324] Node 1 Normal: 473*4kB (UME) 150*8kB (UME) 30*16kB (UME) 22*32kB (ME) 21*64kB (UME) 7*128kB (UME) 3*256kB (UME) 4*512kB (UME) 1*1024kB (U) 2*2048kB (U) 3*4096kB (U) = 26740kB [ 1266.882673] lowmem_reserve[]: 0 0 0 0 0 [ 1266.889281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1266.906551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1266.907229] Node 0 [ 1266.915204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1266.915210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1266.915214] 21295 total pagecache pages [ 1266.915225] 0 pages in swap cache [ 1266.915230] Swap cache stats: add 0, delete 0, find 0/0 [ 1266.915236] Free swap = 0kB [ 1266.933558] DMA: [ 1266.940495] Total swap = 0kB [ 1266.957572] 6*4kB (UME) 4*8kB (ME) 1*16kB (E) 0*32kB 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1266.960061] 2097051 pages RAM [ 1266.979434] 0 pages HighMem/MovableOnly [ 1266.983413] 363840 pages reserved [ 1266.986854] 0 pages cma reserved 10:39:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) [ 1266.987204] Node 0 DMA32: 2161*4kB (UME) 840*8kB (UM) 168*16kB (UME) 9*32kB (UM) 105*64kB (U) 33*128kB (U) 18*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33892kB [ 1267.259185] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1267.270562] Node 1 Normal: 1724*4kB (UME) 236*8kB (UM) 53*16kB (UM) 57*32kB (UME) 879*64kB (UE) 160*128kB (UE) 60*256kB (UME) 18*512kB (UME) 15*1024kB (UM) 3*2048kB (UM) 1*4096kB (U) = 138368kB [ 1267.408029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1267.408034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1267.408038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1267.408043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1267.408046] 24231 total pagecache pages [ 1267.408055] 0 pages in swap cache [ 1267.408060] Swap cache stats: add 0, delete 0, find 0/0 [ 1267.408063] Free swap = 0kB [ 1267.408065] Total swap = 0kB [ 1267.408071] 2097051 pages RAM [ 1267.408074] 0 pages HighMem/MovableOnly [ 1267.408077] 363840 pages reserved [ 1267.408079] 0 pages cma reserved [ 1267.408086] Out of memory: Kill process 20057 (syz-executor.3) score 1005 or sacrifice child [ 1267.408134] Killed process 20057 (syz-executor.3) total-vm:93252kB, anon-rss:2192kB, file-rss:34628kB, shmem-rss:0kB [ 1267.434424] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1267.437717] oom_reaper: reaped process 20057 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1267.441229] systemd[1]: Failed to start Journal Service. [ 1267.448341] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1267.458104] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1267.458391] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1267.458748] systemd[1]: Stopped Journal Service. [ 1267.484876] systemd[1]: Starting Journal Service... [ 1268.011847] systemd-journald[10805]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1268.860770] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1268.881212] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1268.886358] CPU: 0 PID: 10533 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1268.894233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.903589] Call Trace: [ 1268.906181] dump_stack+0x1b2/0x281 [ 1268.909824] warn_alloc.cold+0x96/0x1cc [ 1268.913803] ? zone_watermark_ok_safe+0x220/0x220 [ 1268.918663] __alloc_pages_nodemask+0x2127/0x2720 [ 1268.923514] ? _raw_spin_unlock_irq+0x24/0x80 [ 1268.928035] ? lock_acquire+0x170/0x3f0 [ 1268.932020] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1268.936875] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1268.942329] ? __mutex_unlock_slowpath+0x75/0x770 [ 1268.947179] alloc_pages_current+0x155/0x260 [ 1268.951592] ion_page_pool_alloc+0x118/0x1b0 [ 1268.956000] ion_system_heap_allocate+0x133/0x8c0 [ 1268.960846] ? _raw_spin_unlock+0x29/0x40 [ 1268.964995] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1268.969925] ? ion_system_contig_heap_create+0x130/0x130 [ 1268.975372] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1268.980388] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1268.985232] ion_alloc+0x27a/0x810 [ 1268.988807] ? ion_dma_buf_release+0x40/0x40 [ 1268.993213] ? __might_fault+0x177/0x1b0 [ 1268.997271] ion_ioctl+0xea/0x1f0 [ 1269.000720] ? ion_query_heaps+0x360/0x360 [ 1269.004956] ? ion_query_heaps+0x360/0x360 [ 1269.009191] do_vfs_ioctl+0x75a/0xff0 [ 1269.012992] ? ioctl_preallocate+0x1a0/0x1a0 [ 1269.017397] ? lock_downgrade+0x740/0x740 [ 1269.021546] ? __fget+0x225/0x360 [ 1269.024998] ? do_vfs_ioctl+0xff0/0xff0 [ 1269.028971] ? security_file_ioctl+0x83/0xb0 [ 1269.033387] SyS_ioctl+0x7f/0xb0 [ 1269.036749] ? do_vfs_ioctl+0xff0/0xff0 [ 1269.040720] do_syscall_64+0x1d5/0x640 [ 1269.044616] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1269.049931] RIP: 0033:0x465f69 [ 1269.053116] RSP: 002b:00007fdb50538188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1269.060822] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1269.068088] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1269.075358] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1269.082767] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1269.090040] R13: 00007fff7572ef8f R14: 00007fdb50538300 R15: 0000000000022000 [ 1269.102351] warn_alloc_show_mem: 1 callbacks suppressed [ 1269.102354] Mem-Info: [ 1269.110226] active_anon:156612 inactive_anon:22973 isolated_anon:2 [ 1269.110226] active_file:1764 inactive_file:1792 isolated_file:0 [ 1269.110226] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1269.110226] slab_reclaimable:15299 slab_unreclaimable:133038 [ 1269.110226] mapped:46351 shmem:23311 pagetables:24533 bounce:0 [ 1269.110226] free:220868 free_pcp:340 free_cma:0 [ 1269.147702] Node 0 active_anon:620520kB inactive_anon:58632kB active_file:1888kB inactive_file:1896kB unevictable:0kB isolated(anon):8kB isolated(file):0kB mapped:118280kB dirty:20kB writeback:0kB shmem:59756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 516096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1269.176197] Bluetooth: hci0 command 0x0409 tx timeout [ 1269.184794] Node 1 active_anon:5928kB inactive_anon:33260kB active_file:5168kB inactive_file:5272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67224kB dirty:0kB writeback:0kB shmem:33488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1269.215635] Node 0 DMA free:11480kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.278824] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1269.283896] Node 0 DMA32 free:394620kB min:36200kB low:45248kB high:54296kB active_anon:620480kB inactive_anon:58632kB active_file:1888kB inactive_file:1896kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36736kB pagetables:91656kB bounce:0kB free_pcp:1324kB local_pcp:632kB free_cma:0kB [ 1269.358214] lowmem_reserve[]: 0 0 0 0 0 [ 1269.362250] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.393151] lowmem_reserve[]: 0 0 0 0 0 [ 1269.401862] systemd[1]: Started Journal Service. [ 1269.404439] Node 1 Normal free:698768kB min:53696kB low:67120kB high:80544kB active_anon:5928kB inactive_anon:33260kB active_file:5168kB inactive_file:5272kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6476kB bounce:0kB free_pcp:1416kB local_pcp:712kB free_cma:0kB [ 1269.441077] lowmem_reserve[]: 0 0 0 0 0 [ 1269.445760] Node 0 DMA: 263*4kB (UME) 7*8kB (UME) 4*16kB (UE) 2*32kB (U) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11540kB [ 1269.462027] Node 0 DMA32: 21453*4kB (UME) 16651*8kB (UME) 9307*16kB (UME) 2612*32kB (UME) 392*64kB (UME) 50*128kB (U) 4*256kB (U) 3*512kB (U) 0*1024kB 1*2048kB (U) 0*4096kB = 487612kB [ 1269.480019] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1269.491266] Node 1 Normal: 24419*4kB (UM) 15116*8kB (UM) 8683*16kB (UM) 6217*32kB (UM) 2873*64kB (U) 200*128kB (U) 41*256kB (U) 6*512kB (U) 3*1024kB (U) 3*2048kB (U) 3*4096kB (U) = 801020kB [ 1269.519171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1269.528123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1269.536703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1269.549339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1269.558574] 26982 total pagecache pages [ 1269.562553] 0 pages in swap cache [ 1269.566000] Swap cache stats: add 0, delete 0, find 0/0 [ 1269.572651] Free swap = 0kB [ 1269.575673] Total swap = 0kB [ 1269.579511] 2097051 pages RAM [ 1269.582617] 0 pages HighMem/MovableOnly [ 1269.586582] 363840 pages reserved [ 1269.591268] 0 pages cma reserved [ 1269.967445] device hsr_slave_1 left promiscuous mode [ 1269.977066] device hsr_slave_0 left promiscuous mode [ 1269.995027] team0 (unregistering): Port device team_slave_1 removed [ 1270.005164] team0 (unregistering): Port device team_slave_0 removed [ 1270.020224] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1270.031571] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1270.064829] bond0 (unregistering): Released all slaves 10:39:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) [ 1270.893949] IPVS: ftp: loaded support on port[0] = 21 [ 1271.032504] chnl_net:caif_netlink_parms(): no params data found [ 1271.162806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.170114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.177468] device bridge_slave_0 entered promiscuous mode [ 1271.187838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.194257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.204635] device bridge_slave_1 entered promiscuous mode [ 1271.229087] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1271.238196] Bluetooth: hci0 command 0x041b tx timeout [ 1271.238391] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1271.267506] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1271.275596] team0: Port device team_slave_0 added [ 1271.281278] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1271.288651] team0: Port device team_slave_1 added [ 1271.309493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.315761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.341256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.352795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.359117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.384398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.395468] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1271.403593] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1271.430032] device hsr_slave_0 entered promiscuous mode [ 1271.436092] device hsr_slave_1 entered promiscuous mode [ 1271.442394] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1271.449628] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1271.544961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.551417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.558111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.564509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.619230] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1271.625318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.637380] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1271.647294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1271.658014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.664877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.678793] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1271.684878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.694651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1271.702840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.709260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.728152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1271.736021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.742475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.753765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1271.769996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1271.777212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1271.785019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1271.795426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1271.806945] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1271.813181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1271.820479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1271.835573] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1271.844224] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1271.851142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1271.860222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1271.872941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.954937] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1271.970084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1272.019496] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1272.026913] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1272.035479] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1272.046761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1272.054813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1272.061880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1272.071463] device veth0_vlan entered promiscuous mode [ 1272.082024] device veth1_vlan entered promiscuous mode [ 1272.088606] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1272.095224] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1272.103391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1272.120106] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1272.131643] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1272.138589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1272.146356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1272.156745] device veth0_macvtap entered promiscuous mode [ 1272.164105] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1272.174306] device veth1_macvtap entered promiscuous mode [ 1272.180675] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1272.190804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1272.201390] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1272.210693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1272.221067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.233626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1272.243718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.254297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1272.266168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.275418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1272.285229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.298330] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1272.306262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.313871] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1272.328484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1272.343465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1272.351635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1272.361310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1272.371810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.381477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1272.391544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.400747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1272.410786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.419995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1272.429809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.440175] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1272.447079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.454796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1272.466293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:39:30 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:39:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:30 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:39:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:31 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:31 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x80800) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x42000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x1, r2, 0x30, 0x1, @in={0x2, 0x4e21, @loopback}}}, 0xa0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r8}}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), r8, 0xfffffb57}}, 0x18) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r7, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r10}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r10, 0x9}}, 0x10) 10:39:31 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) [ 1273.052723] IPVS: ftp: loaded support on port[0] = 21 [ 1273.321967] Bluetooth: hci0 command 0x040f tx timeout [ 1273.354149] chnl_net:caif_netlink_parms(): no params data found [ 1273.523861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.535338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.544176] device bridge_slave_0 entered promiscuous mode [ 1273.578497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.602545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.614330] device bridge_slave_1 entered promiscuous mode [ 1273.674201] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1273.742620] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1273.794833] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1273.818117] team0: Port device team_slave_0 added [ 1273.827942] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1273.852118] team0: Port device team_slave_1 added [ 1273.885434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.895231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.924290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.936085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.946143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.976702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.993189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1274.001058] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1274.037120] device hsr_slave_0 entered promiscuous mode [ 1274.043220] device hsr_slave_1 entered promiscuous mode [ 1274.054520] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1274.062433] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1274.196940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.203387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.210219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.216608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.271569] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1274.279705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.292197] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1274.302838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1274.313650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.322623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.342490] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1274.349055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.355503] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1274.372066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1274.379663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1274.397721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1274.405437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.411844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.433415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1274.443275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1274.457581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1274.474493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.480904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.512781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1274.528883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1274.541182] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1274.548471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1274.567912] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1274.570760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1274.584934] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1274.592577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1274.617160] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1274.619338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1274.627372] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1274.634692] CPU: 0 PID: 11127 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1274.638128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1274.642568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1274.642573] Call Trace: [ 1274.642590] dump_stack+0x1b2/0x281 [ 1274.642602] warn_alloc.cold+0x96/0x1cc [ 1274.642614] ? zone_watermark_ok_safe+0x220/0x220 [ 1274.657069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1274.658708] __alloc_pages_nodemask+0x2127/0x2720 [ 1274.658719] ? io_schedule_timeout+0x140/0x140 [ 1274.658734] ? lock_acquire+0x170/0x3f0 [ 1274.658751] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1274.658765] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1274.658775] ? __mutex_unlock_slowpath+0x75/0x770 [ 1274.658788] alloc_pages_current+0x155/0x260 [ 1274.658802] ion_page_pool_alloc+0x118/0x1b0 [ 1274.658814] ion_system_heap_allocate+0x133/0x8c0 [ 1274.658824] ? ion_alloc+0x187/0x810 [ 1274.658832] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1274.658843] ? ion_system_contig_heap_create+0x130/0x130 [ 1274.658852] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1274.658862] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1274.658873] ion_alloc+0x204/0x810 [ 1274.658885] ? ion_dma_buf_release+0x40/0x40 [ 1274.658895] ? __might_fault+0x177/0x1b0 [ 1274.658906] ion_ioctl+0xea/0x1f0 [ 1274.658915] ? ion_query_heaps+0x360/0x360 [ 1274.658926] ? ion_query_heaps+0x360/0x360 [ 1274.658935] do_vfs_ioctl+0x75a/0xff0 [ 1274.658945] ? ioctl_preallocate+0x1a0/0x1a0 [ 1274.658951] ? lock_downgrade+0x740/0x740 [ 1274.658961] ? __fget+0x225/0x360 [ 1274.658968] ? do_vfs_ioctl+0xff0/0xff0 [ 1274.658976] ? security_file_ioctl+0x83/0xb0 [ 1274.658985] SyS_ioctl+0x7f/0xb0 [ 1274.658992] ? do_vfs_ioctl+0xff0/0xff0 [ 1274.659003] do_syscall_64+0x1d5/0x640 [ 1274.659017] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1274.671680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1274.673984] RIP: 0033:0x465f69 [ 1274.673990] RSP: 002b:00007fdb50538188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1274.674000] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1274.674005] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1274.674009] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1274.674016] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1274.695144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1274.698669] R13: 00007fff7572ef8f R14: 00007fdb50538300 R15: 0000000000022000 [ 1274.703080] CPU: 0 PID: 11132 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 1274.714802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1274.717820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1274.717824] Call Trace: [ 1274.717840] dump_stack+0x1b2/0x281 [ 1274.717854] warn_alloc.cold+0x96/0x1cc [ 1274.717865] ? zone_watermark_ok_safe+0x220/0x220 [ 1274.717885] __alloc_pages_nodemask+0x2127/0x2720 [ 1274.723529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1274.726424] ? lock_acquire+0x170/0x3f0 [ 1274.726443] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1274.739974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1274.742317] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1274.742331] ? __mutex_unlock_slowpath+0x75/0x770 [ 1274.753013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1274.755081] alloc_pages_current+0x155/0x260 [ 1274.762201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1274.762563] ion_page_pool_alloc+0x118/0x1b0 [ 1274.771572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1274.774784] ion_system_heap_allocate+0x133/0x8c0 [ 1274.774796] ? ion_alloc+0x187/0x810 [ 1274.774805] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1274.774816] ? ion_system_contig_heap_create+0x130/0x130 [ 1274.783942] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1274.786784] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1274.795615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1274.798478] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1274.798493] ion_alloc+0x204/0x810 [ 1274.798506] ? ion_dma_buf_release+0x40/0x40 [ 1274.798517] ? __might_fault+0x177/0x1b0 [ 1274.798528] ion_ioctl+0xea/0x1f0 [ 1274.798537] ? ion_query_heaps+0x360/0x360 [ 1274.798549] ? ion_query_heaps+0x360/0x360 [ 1274.798558] do_vfs_ioctl+0x75a/0xff0 [ 1274.798569] ? ioctl_preallocate+0x1a0/0x1a0 [ 1274.798577] ? lock_downgrade+0x740/0x740 [ 1274.798588] ? __fget+0x225/0x360 [ 1274.798596] ? do_vfs_ioctl+0xff0/0xff0 [ 1274.798606] ? security_file_ioctl+0x83/0xb0 [ 1274.833707] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1274.836920] SyS_ioctl+0x7f/0xb0 [ 1274.836928] ? do_vfs_ioctl+0xff0/0xff0 [ 1274.836941] do_syscall_64+0x1d5/0x640 [ 1274.858931] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1274.865824] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1274.865834] RIP: 0033:0x465f69 [ 1274.865840] RSP: 002b:00007f7b1dce0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1274.865849] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1274.865858] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1274.880602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1274.880991] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1274.891695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1274.896982] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1274.896988] R13: 00007ffc6d6ecd2f R14: 00007f7b1dce0300 R15: 0000000000022000 [ 1274.898139] Mem-Info: [ 1274.915648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.931917] active_anon:157265 inactive_anon:22978 isolated_anon:24 [ 1274.931917] active_file:3098 inactive_file:3999 isolated_file:0 [ 1274.931917] unevictable:0 dirty:92 writeback:0 unstable:0 [ 1274.931917] slab_reclaimable:14735 slab_unreclaimable:129978 [ 1274.931917] mapped:57509 shmem:23316 pagetables:24631 bounce:0 [ 1274.931917] free:227115 free_pcp:204 free_cma:0 [ 1275.046007] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1275.087489] Bluetooth: hci1 command 0x0409 tx timeout [ 1275.115747] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1275.124633] Node 0 active_anon:622536kB inactive_anon:58636kB active_file:3052kB inactive_file:2556kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:119500kB dirty:208kB writeback:0kB shmem:59756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 518144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1275.138527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1275.161355] Node 1 active_anon:6428kB inactive_anon:33276kB active_file:9196kB inactive_file:12652kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:110516kB dirty:96kB writeback:0kB shmem:33508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1275.171308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1275.213395] Node 0 DMA free:11132kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1275.296905] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1275.322514] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1275.335056] Node 0 DMA32 free:369600kB min:36200kB low:45248kB high:54296kB active_anon:622496kB inactive_anon:58636kB active_file:2984kB inactive_file:2420kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36704kB pagetables:91832kB bounce:0kB free_pcp:84kB local_pcp:0kB free_cma:0kB [ 1275.345787] syz-executor.5: [ 1275.397360] Bluetooth: hci0 command 0x0419 tx timeout [ 1275.399458] page allocation failure: order:4 [ 1275.405047] lowmem_reserve[]: [ 1275.405593] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1275.415811] 0 [ 1275.423018] (null) [ 1275.423024] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1275.434313] 0 0 0 0 [ 1275.439069] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1275.440109] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1275.490834] CPU: 1 PID: 11133 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1275.493312] lowmem_reserve[]: [ 1275.498744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.498749] Call Trace: [ 1275.498768] dump_stack+0x1b2/0x281 [ 1275.498781] warn_alloc.cold+0x96/0x1cc [ 1275.498792] ? zone_watermark_ok_safe+0x220/0x220 [ 1275.498812] __alloc_pages_nodemask+0x2127/0x2720 [ 1275.508806] 0 [ 1275.511260] ? lock_acquire+0x170/0x3f0 [ 1275.511276] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1275.519373] 0 [ 1275.521444] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1275.521456] ? __mutex_unlock_slowpath+0x75/0x770 [ 1275.529731] 0 [ 1275.531175] alloc_pages_current+0x155/0x260 [ 1275.531193] ion_page_pool_alloc+0x118/0x1b0 [ 1275.534107] 0 [ 1275.536952] ion_system_heap_allocate+0x133/0x8c0 [ 1275.536962] ? ion_alloc+0x187/0x810 [ 1275.536973] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1275.551056] 0 [ 1275.553853] ? ion_system_contig_heap_create+0x130/0x130 [ 1275.553864] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1275.553876] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1275.560087] ion_alloc+0x204/0x810 [ 1275.570257] Node 1 [ 1275.571101] ? ion_dma_buf_release+0x40/0x40 [ 1275.579447] Normal free:511788kB min:53696kB low:67120kB high:80544kB active_anon:6428kB inactive_anon:33276kB active_file:9096kB inactive_file:12760kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2432kB pagetables:6692kB bounce:0kB free_pcp:136kB local_pcp:0kB free_cma:0kB [ 1275.580227] ? __might_fault+0x177/0x1b0 [ 1275.585510] lowmem_reserve[]: [ 1275.587456] ion_ioctl+0xea/0x1f0 [ 1275.587466] ? ion_query_heaps+0x360/0x360 [ 1275.587478] ? ion_query_heaps+0x360/0x360 [ 1275.587488] do_vfs_ioctl+0x75a/0xff0 [ 1275.587502] ? ioctl_preallocate+0x1a0/0x1a0 [ 1275.594784] 0 [ 1275.597337] ? lock_downgrade+0x740/0x740 [ 1275.597353] ? __fget+0x225/0x360 [ 1275.597362] ? do_vfs_ioctl+0xff0/0xff0 [ 1275.597372] ? security_file_ioctl+0x83/0xb0 [ 1275.597386] SyS_ioctl+0x7f/0xb0 [ 1275.603563] 0 [ 1275.607560] ? do_vfs_ioctl+0xff0/0xff0 [ 1275.607574] do_syscall_64+0x1d5/0x640 [ 1275.607590] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1275.607598] RIP: 0033:0x465f69 [ 1275.607602] RSP: 002b:00007fc9caa07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1275.673683] 0 [ 1275.676726] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1275.676732] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1275.676738] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1275.676743] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1275.676749] R13: 00007ffdf9c5846f R14: 00007fc9caa07300 R15: 0000000000022000 [ 1275.692962] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1275.735055] 0 [ 1275.751626] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1275.768915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1275.770811] 0 [ 1275.776766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1275.788002] Node 0 DMA: 225*4kB (UME) 155*8kB (UME) 4*16kB (UE) 3*32kB (U) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11132kB [ 1275.792698] device veth0_vlan entered promiscuous mode [ 1275.811500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1275.819589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1275.826529] Node 0 DMA32: 1177*4kB (ME) 12555*8kB (UMEH) 6570*16kB (UMEH) 1566*32kB (UMEH) 14*64kB (MH) 5*128kB (MH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 262172kB [ 1275.830182] device veth1_vlan entered promiscuous mode [ 1275.854869] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1275.860909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1275.866227] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1275.885088] Node 1 Normal: 6866*4kB (UM) 6748*8kB (UM) 6566*16kB (UM) 10166*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 511816kB [ 1275.893199] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1275.913815] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1275.920990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1275.922365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1275.937289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1275.942572] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1275.945876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1275.953346] warn_alloc_show_mem: 1 callbacks suppressed [ 1275.953349] Mem-Info: [ 1275.975334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1275.983742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1275.991242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1275.991248] 30022 total pagecache pages [ 1275.991260] 0 pages in swap cache [ 1275.991265] Swap cache stats: add 0, delete 0, find 0/0 [ 1275.991269] Free swap = 0kB [ 1275.991272] Total swap = 0kB [ 1275.991279] 2097051 pages RAM [ 1275.991282] 0 pages HighMem/MovableOnly [ 1275.991286] 363840 pages reserved [ 1275.991289] 0 pages cma reserved [ 1276.041004] active_anon:157241 inactive_anon:22978 isolated_anon:12 [ 1276.041004] active_file:3037 inactive_file:3733 isolated_file:0 [ 1276.041004] unevictable:0 dirty:38 writeback:0 unstable:0 [ 1276.041004] slab_reclaimable:14723 slab_unreclaimable:129807 [ 1276.041004] mapped:57529 shmem:23316 pagetables:24631 bounce:0 [ 1276.041004] free:161384 free_pcp:90 free_cma:0 [ 1276.078962] Node 0 active_anon:622536kB inactive_anon:58636kB active_file:2952kB inactive_file:2380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119600kB dirty:56kB writeback:0kB shmem:59756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 518144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1276.113892] device veth0_macvtap entered promiscuous mode [ 1276.121137] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1276.134276] device veth1_macvtap entered promiscuous mode [ 1276.140645] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1276.147652] Node 1 active_anon:6392kB inactive_anon:33276kB active_file:9240kB inactive_file:12492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110516kB dirty:0kB writeback:0kB shmem:33508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1276.179614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1276.189857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1276.203239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1276.213310] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1276.244324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.254025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1276.267984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.281009] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1276.286067] Node 0 DMA32 free:44608kB min:36200kB low:45248kB high:54296kB active_anon:622496kB inactive_anon:58636kB active_file:2932kB inactive_file:2368kB unevictable:0kB writepending:48kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36704kB pagetables:91832kB bounce:0kB free_pcp:320kB local_pcp:188kB free_cma:0kB [ 1276.321198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1276.331316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.345423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1276.355693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.369261] lowmem_reserve[]: 0 0 0 0 0 [ 1276.373283] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1276.403874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1276.414122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.428511] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1276.435494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.446333] lowmem_reserve[]: 0 0 0 0 0 [ 1276.451551] Node 1 Normal free:183836kB min:53696kB low:67120kB high:80544kB active_anon:6392kB inactive_anon:33276kB active_file:9240kB inactive_file:12492kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2432kB pagetables:6692kB bounce:0kB free_pcp:296kB local_pcp:172kB free_cma:0kB [ 1276.485740] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1276.494402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1276.506667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1276.515097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1276.528420] lowmem_reserve[]: 0 0 0 0 0 [ 1276.532440] Node 0 DMA: 220*4kB (UME) 155*8kB (UME) 4*16kB (UE) 3*32kB (U) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11112kB [ 1276.555029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1276.566078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.579490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1276.617186] Node 0 DMA32: 1209*4kB (UME) 460*8kB (UMEH) 134*16kB (MEH) 744*32kB (UMEH) 16*64kB (UMH) 5*128kB (MH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36388kB [ 1276.665870] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1276.680342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.700658] Node 1 Normal: 142*4kB (UM) 120*8kB (M) 81*16kB (M) 1522*32kB (UM) 18*64kB (M) 5*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53576kB [ 1276.707175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1276.741105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1276.750143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1276.780929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1276.817191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.826324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1276.842473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1276.848394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.860509] 26698 total pagecache pages [ 1276.864640] 0 pages in swap cache [ 1276.868158] Swap cache stats: add 0, delete 0, find 0/0 [ 1276.873515] Free swap = 0kB [ 1276.876522] Total swap = 0kB [ 1276.917209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1276.917939] 2097051 pages RAM [ 1276.926947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.954181] 0 pages HighMem/MovableOnly [ 1276.967192] 363840 pages reserved [ 1276.970664] 0 pages cma reserved [ 1277.026372] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1277.041385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.079266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1277.107629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1277.157552] Bluetooth: hci1 command 0x041b tx timeout [ 1279.251510] Bluetooth: hci1 command 0x040f tx timeout [ 1279.438381] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1279.479198] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1279.496111] CPU: 1 PID: 11492 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 1279.504033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1279.513390] Call Trace: [ 1279.515986] dump_stack+0x1b2/0x281 [ 1279.519613] warn_alloc.cold+0x96/0x1cc [ 1279.523629] ? zone_watermark_ok_safe+0x220/0x220 [ 1279.528493] __alloc_pages_nodemask+0x2127/0x2720 [ 1279.533343] ? lock_acquire+0x170/0x3f0 [ 1279.537314] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1279.542143] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1279.547588] ? __mutex_unlock_slowpath+0x75/0x770 [ 1279.552411] ? alloc_pages_current+0x37/0x260 [ 1279.556891] alloc_pages_current+0x155/0x260 [ 1279.561287] ion_page_pool_alloc+0x118/0x1b0 [ 1279.565676] ion_system_heap_allocate+0x133/0x8c0 [ 1279.570499] ? ion_alloc+0x187/0x810 [ 1279.574223] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1279.579653] ? ion_system_contig_heap_create+0x130/0x130 [ 1279.585083] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1279.590081] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1279.594904] ion_alloc+0x204/0x810 [ 1279.598427] ? ion_dma_buf_release+0x40/0x40 [ 1279.602816] ? __might_fault+0x177/0x1b0 [ 1279.606859] ion_ioctl+0xea/0x1f0 [ 1279.610294] ? ion_query_heaps+0x360/0x360 [ 1279.614511] ? ion_query_heaps+0x360/0x360 [ 1279.618727] do_vfs_ioctl+0x75a/0xff0 [ 1279.622505] ? ioctl_preallocate+0x1a0/0x1a0 [ 1279.626895] ? lock_downgrade+0x740/0x740 [ 1279.631027] ? __fget+0x225/0x360 [ 1279.634457] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.638413] ? security_file_ioctl+0x83/0xb0 [ 1279.642801] SyS_ioctl+0x7f/0xb0 [ 1279.646147] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.650102] do_syscall_64+0x1d5/0x640 [ 1279.653973] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1279.659141] RIP: 0033:0x465f69 [ 1279.662310] RSP: 002b:00007fd411f11188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.669997] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1279.677249] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1279.684498] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1279.691748] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1279.698999] R13: 00007ffc2318de8f R14: 00007fd411f11300 R15: 0000000000022000 [ 1279.754297] Mem-Info: [ 1279.756758] active_anon:157145 inactive_anon:22977 isolated_anon:12 [ 1279.756758] active_file:14 inactive_file:11 isolated_file:0 [ 1279.756758] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1279.756758] slab_reclaimable:14681 slab_unreclaimable:129001 [ 1279.756758] mapped:52789 shmem:23315 pagetables:24610 bounce:0 [ 1279.756758] free:25118 free_pcp:241 free_cma:0 [ 1279.790431] Node 0 active_anon:622156kB inactive_anon:58636kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117072kB dirty:0kB writeback:12kB shmem:59756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 518144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1279.818846] Node 1 active_anon:6424kB inactive_anon:33272kB active_file:52kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94020kB dirty:0kB writeback:0kB shmem:33504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1279.846239] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1279.872612] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1279.878095] Node 0 DMA32 free:35812kB min:36200kB low:45248kB high:54296kB active_anon:622116kB inactive_anon:58636kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36704kB pagetables:91740kB bounce:0kB free_pcp:704kB local_pcp:120kB free_cma:0kB [ 1279.907462] lowmem_reserve[]: 0 0 0 0 0 [ 1279.911460] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1279.937056] lowmem_reserve[]: 0 0 0 0 0 [ 1279.941054] Node 1 Normal free:153300kB min:53696kB low:67120kB high:80544kB active_anon:6424kB inactive_anon:33272kB active_file:228kB inactive_file:232kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2400kB pagetables:6700kB bounce:0kB free_pcp:1012kB local_pcp:380kB free_cma:0kB [ 1279.971690] lowmem_reserve[]: 0 0 0 0 0 [ 1279.975863] Node 0 DMA: 175*4kB (UME) 124*8kB (UME) 13*16kB (UE) 6*32kB (U) 2*64kB (ME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11052kB [ 1280.025890] Node 0 DMA32: 1877*4kB (UMEH) 641*8kB (UMEH) 119*16kB (UMEH) 594*32kB (UMEH) 9*64kB (UH) 4*128kB (H) 2*256kB (H) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 37196kB [ 1280.061408] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1280.093718] Node 1 Normal: 2*4kB (UM) 0*8kB 2312*16kB (UM) 875*32kB (UM) 33*64kB (UM) 8*128kB (UM) 1*256kB (U) 22*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 79656kB [ 1280.126742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1280.141626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1280.156177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1280.169937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1280.179836] 24631 total pagecache pages [ 1280.184172] 0 pages in swap cache [ 1280.194546] Swap cache stats: add 0, delete 0, find 0/0 [ 1280.201800] Free swap = 0kB [ 1280.205177] Total swap = 0kB [ 1280.213085] 2097051 pages RAM [ 1280.216804] 0 pages HighMem/MovableOnly [ 1280.222442] 363840 pages reserved [ 1280.226504] 0 pages cma reserved [ 1281.317007] Bluetooth: hci1 command 0x0419 tx timeout 10:39:40 executing program 2: r0 = socket(0x9, 0x3, 0x6) r1 = socket(0xb, 0x6, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00', r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20004) 10:39:40 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x105000, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x12, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008105}, 0x80c0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00', 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x800c0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00', r5) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) 10:39:40 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:40 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x111}}, 0x20) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101100, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r3}}, 0x10) r4 = socket(0xa, 0xa, 0x1ff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', r1) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00042bbd7000fddbdf25140000040800a1de6c33c5fa22dc610d068004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x4) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18) 10:39:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:40 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x20300, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) 10:39:40 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:40 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:40 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:40 executing program 2: select(0x0, 0x0, &(0x7f00000000c0)={0x80, 0x8, 0x4, 0x1, 0x9, 0x8, 0x9, 0x1e5f}, &(0x7f0000000100)={0xc6e, 0x86, 0x0, 0x3, 0x401, 0x5, 0x8001, 0x7fffffff}, &(0x7f0000000140)) 10:39:40 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x400) getitimer(0x2, &(0x7f0000000000)) 10:39:40 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x111}}, 0x20) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101100, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r3}}, 0x10) r4 = socket(0xa, 0xa, 0x1ff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', r1) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00042bbd7000fddbdf25140000040800a1de6c33c5fa22dc610d068004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x4) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18) 10:39:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1282.836807] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1282.849879] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1282.855083] CPU: 1 PID: 11513 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 1282.862966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1282.872321] Call Trace: [ 1282.874916] dump_stack+0x1b2/0x281 [ 1282.878547] warn_alloc.cold+0x96/0x1cc [ 1282.882521] ? zone_watermark_ok_safe+0x220/0x220 [ 1282.887375] __alloc_pages_nodemask+0x2127/0x2720 [ 1282.892222] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1282.896717] ? finish_task_switch+0x178/0x610 [ 1282.901210] ? finish_task_switch+0x14d/0x610 [ 1282.905710] ? lock_acquire+0x170/0x3f0 [ 1282.909691] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1282.914544] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1282.920000] ? __mutex_unlock_slowpath+0x75/0x770 [ 1282.924841] ? alloc_pages_current+0x135/0x260 [ 1282.929421] alloc_pages_current+0x155/0x260 [ 1282.933835] ion_page_pool_alloc+0x118/0x1b0 [ 1282.938240] ion_system_heap_allocate+0x133/0x8c0 [ 1282.943081] ? ion_alloc+0x187/0x810 [ 1282.946808] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1282.952254] ? ion_system_contig_heap_create+0x130/0x130 [ 1282.957702] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1282.962717] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1282.967561] ion_alloc+0x204/0x810 [ 1282.971101] ? ion_dma_buf_release+0x40/0x40 [ 1282.975505] ? __might_fault+0x177/0x1b0 [ 1282.979564] ion_ioctl+0xea/0x1f0 [ 1282.983013] ? ion_query_heaps+0x360/0x360 [ 1282.987245] ? ion_query_heaps+0x360/0x360 [ 1282.991473] do_vfs_ioctl+0x75a/0xff0 [ 1282.995268] ? ioctl_preallocate+0x1a0/0x1a0 [ 1282.999671] ? lock_downgrade+0x740/0x740 [ 1283.003814] ? __fget+0x225/0x360 [ 1283.007374] ? do_vfs_ioctl+0xff0/0xff0 [ 1283.011355] ? security_file_ioctl+0x83/0xb0 [ 1283.015768] SyS_ioctl+0x7f/0xb0 [ 1283.019135] ? do_vfs_ioctl+0xff0/0xff0 [ 1283.023109] do_syscall_64+0x1d5/0x640 [ 1283.027005] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1283.032192] RIP: 0033:0x465f69 [ 1283.035376] RSP: 002b:00007fdb50538188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1283.043082] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1283.050358] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1283.057627] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1283.064896] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1283.072165] R13: 00007fff7572ef8f R14: 00007fdb50538300 R15: 0000000000022000 [ 1283.081924] Mem-Info: [ 1283.084427] active_anon:157136 inactive_anon:22977 isolated_anon:0 [ 1283.084427] active_file:1615 inactive_file:1876 isolated_file:0 [ 1283.084427] unevictable:0 dirty:61 writeback:0 unstable:0 [ 1283.084427] slab_reclaimable:14665 slab_unreclaimable:129555 [ 1283.084427] mapped:55280 shmem:23315 pagetables:24562 bounce:0 [ 1283.084427] free:153084 free_pcp:364 free_cma:0 [ 1283.119128] Node 0 active_anon:622052kB inactive_anon:58628kB active_file:1128kB inactive_file:1516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118760kB dirty:72kB writeback:0kB shmem:59748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 518144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1283.147923] Node 1 active_anon:6424kB inactive_anon:33280kB active_file:5440kB inactive_file:5884kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102260kB dirty:244kB writeback:0kB shmem:33512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1283.176651] Node 0 DMA free:11488kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.203029] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1283.208867] Node 0 DMA32 free:444860kB min:36200kB low:45248kB high:54296kB active_anon:622012kB inactive_anon:58628kB active_file:1128kB inactive_file:1516kB unevictable:0kB writepending:72kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36704kB pagetables:91564kB bounce:0kB free_pcp:916kB local_pcp:224kB free_cma:0kB [ 1283.239394] lowmem_reserve[]: 0 0 0 0 0 [ 1283.243474] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.270224] lowmem_reserve[]: 0 0 0 0 0 [ 1283.274306] Node 1 Normal free:447476kB min:53696kB low:67120kB high:80544kB active_anon:6424kB inactive_anon:33280kB active_file:5440kB inactive_file:5884kB unevictable:0kB writepending:244kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2336kB pagetables:6668kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB [ 1283.304941] lowmem_reserve[]: 0 0 0 0 0 [ 1283.309685] Node 0 DMA: 102*4kB (UME) 85*8kB (UME) 62*16kB (UE) 6*32kB (U) 4*64kB (UME) 4*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11488kB [ 1283.326552] Node 0 DMA32: 14358*4kB (UMEH) 11046*8kB (UMEH) 8787*16kB (UMEH) 2045*32kB (UMEH) 997*64kB (UH) 133*128kB (UH) 38*256kB (UH) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 444440kB [ 1283.343730] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1283.355626] Node 1 Normal: 4874*4kB (UM) 6330*8kB (UM) 8046*16kB (UM) 7574*32kB (UM) 1723*64kB (UM) 45*128kB (UM) 3*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 6*4096kB (U) = 583128kB [ 1283.372948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1283.382629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1283.392959] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1283.402584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1283.411958] 26807 total pagecache pages [ 1283.416021] 0 pages in swap cache [ 1283.420727] Swap cache stats: add 0, delete 0, find 0/0 [ 1283.426164] Free swap = 0kB [ 1283.430213] Total swap = 0kB [ 1283.433298] 2097051 pages RAM [ 1283.436440] 0 pages HighMem/MovableOnly [ 1283.441763] 363840 pages reserved [ 1283.445283] 0 pages cma reserved 10:39:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:41 executing program 3: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7fffffff, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000080)={r0, 0x100}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x181001, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x2a0500, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x7ff, 0x2) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000000100)={0x0, 0x1}) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x7e, 0x7, {"ef77a7077e365d8034dc025f7be3967c"}, 0x3, 0x80000004, 0x4}}}, 0x90) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000240)={0x8, &(0x7f0000000200)=[{}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000280)={r5}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000140)) 10:39:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:39:41 executing program 2: select(0x0, 0x0, &(0x7f00000000c0)={0x80, 0x8, 0x4, 0x1, 0x9, 0x8, 0x9, 0x1e5f}, &(0x7f0000000100)={0xc6e, 0x86, 0x0, 0x3, 0x401, 0x5, 0x8001, 0x7fffffff}, &(0x7f0000000140)) 10:39:41 executing program 5: r0 = socket(0x23, 0x5, 0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffffffff000, 0x159020) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70010000", @ANYRESDEC=r2, @ANYRESHEX=r0], 0x170}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x2f43, 0x0, 0x10000}) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f00000000c0)=0xcfd, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000001c0)={0x20, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000180)={0x0, r3}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 10:39:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:39:41 executing program 2: select(0x0, 0x0, &(0x7f00000000c0)={0x80, 0x8, 0x4, 0x1, 0x9, 0x8, 0x9, 0x1e5f}, &(0x7f0000000100)={0xc6e, 0x86, 0x0, 0x3, 0x401, 0x5, 0x8001, 0x7fffffff}, &(0x7f0000000140)) 10:39:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x39, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r3, 0xb7d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r4, 0x400}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3, 0xff}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r8}, 0x8) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) 10:39:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) 10:39:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x39, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r3, 0xb7d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r4, 0x400}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3, 0xff}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r8}, 0x8) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) 10:39:42 executing program 2: select(0x0, 0x0, 0x0, &(0x7f0000000100)={0xc6e, 0x86, 0x0, 0x3, 0x401, 0x5, 0x8001, 0x7fffffff}, &(0x7f0000000140)) 10:39:42 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) fcntl$setstatus(r1, 0x4, 0x44800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4b, @mcast1, 0x3ff}, {0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, r6, 0x1c2d}}, 0x48) 10:39:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) 10:39:42 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x1, 0xd1785c569d000ab5, 0x0, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x6400) 10:39:42 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 10:39:42 executing program 2: select(0x0, 0x0, 0x0, 0x0, 0x0) 10:39:42 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) 10:39:42 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:42 executing program 5: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @window={0x3, 0x3, 0xc7}, @window={0x3, 0xfffa, 0x7626}, @timestamp, @mss={0x2, 0x1}], 0x5) 10:39:42 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:42 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:39:43 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:43 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) [ 1284.795308] FAULT_INJECTION: forcing a failure. [ 1284.795308] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.872213] CPU: 1 PID: 11680 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1284.880137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1284.889499] Call Trace: [ 1284.892097] dump_stack+0x1b2/0x281 [ 1284.895736] should_fail.cold+0x10a/0x149 [ 1284.899898] should_failslab+0xd6/0x130 [ 1284.903885] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1284.908561] ion_alloc+0x187/0x810 [ 1284.912110] ? ion_dma_buf_release+0x40/0x40 [ 1284.916527] ? __might_fault+0x177/0x1b0 [ 1284.920595] ion_ioctl+0xea/0x1f0 [ 1284.924052] ? ion_query_heaps+0x360/0x360 [ 1284.928285] ? SyS_write+0x1b7/0x210 [ 1284.932006] ? ion_query_heaps+0x360/0x360 [ 1284.936241] do_vfs_ioctl+0x75a/0xff0 [ 1284.940044] ? ioctl_preallocate+0x1a0/0x1a0 [ 1284.944453] ? lock_downgrade+0x740/0x740 [ 1284.948605] ? __fget+0x225/0x360 [ 1284.952060] ? do_vfs_ioctl+0xff0/0xff0 [ 1284.956034] ? security_file_ioctl+0x83/0xb0 [ 1284.960442] SyS_ioctl+0x7f/0xb0 [ 1284.963806] ? do_vfs_ioctl+0xff0/0xff0 [ 1284.967784] do_syscall_64+0x1d5/0x640 [ 1284.971677] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.976869] RIP: 0033:0x465f69 [ 1284.980051] RSP: 002b:00007fc9caa07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1284.987756] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1284.995022] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1285.002292] RBP: 00007fc9caa071d0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.009566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.016835] R13: 00007ffdf9c5846f R14: 00007fc9caa07300 R15: 0000000000022000 10:39:43 executing program 2: select(0x0, 0x0, 0x0, 0x0, 0x0) 10:39:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:44 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:39:44 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:39:44 executing program 5 (fault-call:1 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1285.973204] FAULT_INJECTION: forcing a failure. [ 1285.973204] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1285.989353] CPU: 0 PID: 11723 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1285.997268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.006633] Call Trace: [ 1286.009223] dump_stack+0x1b2/0x281 [ 1286.012858] should_fail.cold+0x10a/0x149 [ 1286.017015] __alloc_pages_nodemask+0x22c/0x2720 [ 1286.021775] ? lock_acquire+0x170/0x3f0 [ 1286.025755] ? ion_page_pool_alloc+0x28/0x1b0 [ 1286.027333] FAULT_INJECTION: forcing a failure. [ 1286.027333] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.030254] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1286.030265] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1286.030282] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1286.056210] ? __mutex_unlock_slowpath+0x75/0x770 [ 1286.061062] alloc_pages_current+0x155/0x260 [ 1286.065474] ion_page_pool_alloc+0x118/0x1b0 [ 1286.069923] ion_system_heap_allocate+0x133/0x8c0 [ 1286.074773] ? ion_alloc+0x187/0x810 [ 1286.078497] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1286.083957] ? ion_system_contig_heap_create+0x130/0x130 [ 1286.089412] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1286.094429] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1286.099268] ion_alloc+0x204/0x810 [ 1286.102808] ? ion_dma_buf_release+0x40/0x40 [ 1286.107202] ? __might_fault+0x177/0x1b0 [ 1286.111252] ion_ioctl+0xea/0x1f0 [ 1286.114690] ? ion_query_heaps+0x360/0x360 [ 1286.118915] ? SyS_write+0x1b7/0x210 [ 1286.122625] ? ion_query_heaps+0x360/0x360 [ 1286.126843] do_vfs_ioctl+0x75a/0xff0 [ 1286.130629] ? ioctl_preallocate+0x1a0/0x1a0 [ 1286.135022] ? lock_downgrade+0x740/0x740 [ 1286.139161] ? __fget+0x225/0x360 [ 1286.142608] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.146568] ? security_file_ioctl+0x83/0xb0 [ 1286.150961] SyS_ioctl+0x7f/0xb0 [ 1286.154312] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.158277] do_syscall_64+0x1d5/0x640 [ 1286.162160] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1286.167333] RIP: 0033:0x465f69 [ 1286.170507] RSP: 002b:00007fc9caa07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1286.178200] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1286.185474] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1286.192724] RBP: 00007fc9caa071d0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.199981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.207241] R13: 00007ffdf9c5846f R14: 00007fc9caa07300 R15: 0000000000022000 [ 1286.214508] CPU: 1 PID: 11731 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1286.222395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.231746] Call Trace: [ 1286.234353] dump_stack+0x1b2/0x281 [ 1286.237979] should_fail.cold+0x10a/0x149 [ 1286.242129] should_failslab+0xd6/0x130 [ 1286.246116] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1286.250796] ion_alloc+0x187/0x810 [ 1286.254354] ? ion_dma_buf_release+0x40/0x40 [ 1286.258779] ? __might_fault+0x177/0x1b0 [ 1286.262852] ion_ioctl+0xea/0x1f0 [ 1286.266325] ? ion_query_heaps+0x360/0x360 [ 1286.270569] ? SyS_write+0x1b7/0x210 [ 1286.274310] ? ion_query_heaps+0x360/0x360 [ 1286.278558] do_vfs_ioctl+0x75a/0xff0 [ 1286.282374] ? ioctl_preallocate+0x1a0/0x1a0 [ 1286.286794] ? lock_downgrade+0x740/0x740 [ 1286.290956] ? __fget+0x225/0x360 [ 1286.294419] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.298406] ? security_file_ioctl+0x83/0xb0 [ 1286.302824] SyS_ioctl+0x7f/0xb0 [ 1286.306202] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.310190] do_syscall_64+0x1d5/0x640 [ 1286.314099] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1286.319301] RIP: 0033:0x465f69 10:39:44 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:44 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:44 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:44 executing program 2: select(0x0, 0x0, 0x0, 0x0, 0x0) [ 1286.322502] RSP: 002b:00007f343bb89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1286.330221] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1286.337506] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1286.344784] RBP: 00007f343bb891d0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.352065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.359344] R13: 00007ffd1e89b06f R14: 00007f343bb89300 R15: 0000000000022000 10:39:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:39:44 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) [ 1286.441238] FAULT_INJECTION: forcing a failure. [ 1286.441238] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.501819] CPU: 1 PID: 11747 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1286.509752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.519122] Call Trace: [ 1286.521745] dump_stack+0x1b2/0x281 [ 1286.525394] should_fail.cold+0x10a/0x149 [ 1286.529563] should_failslab+0xd6/0x130 [ 1286.533559] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1286.538234] ion_alloc+0x187/0x810 [ 1286.541778] ? ion_dma_buf_release+0x40/0x40 [ 1286.546195] ? __might_fault+0x177/0x1b0 [ 1286.550268] ion_ioctl+0xea/0x1f0 [ 1286.553739] ? ion_query_heaps+0x360/0x360 [ 1286.557985] ? SyS_write+0x1b7/0x210 [ 1286.561710] ? ion_query_heaps+0x360/0x360 [ 1286.565946] do_vfs_ioctl+0x75a/0xff0 [ 1286.569758] ? ioctl_preallocate+0x1a0/0x1a0 [ 1286.574160] ? lock_downgrade+0x740/0x740 [ 1286.578310] ? __fget+0x225/0x360 [ 1286.581762] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.585740] ? security_file_ioctl+0x83/0xb0 [ 1286.590149] SyS_ioctl+0x7f/0xb0 [ 1286.593512] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.597484] do_syscall_64+0x1d5/0x640 10:39:44 executing program 3 (fault-call:1 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) 10:39:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1286.601497] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1286.606683] RIP: 0033:0x465f69 [ 1286.609866] RSP: 002b:00007f202b29f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1286.617569] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1286.624836] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1286.632099] RBP: 00007f202b29f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.639369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.646639] R13: 00007ffe34c2804f R14: 00007f202b29f300 R15: 0000000000022000 [ 1286.725350] FAULT_INJECTION: forcing a failure. [ 1286.725350] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1286.746869] CPU: 1 PID: 11767 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1286.754789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.764159] Call Trace: [ 1286.766755] dump_stack+0x1b2/0x281 [ 1286.770396] should_fail.cold+0x10a/0x149 [ 1286.774557] __alloc_pages_nodemask+0x22c/0x2720 [ 1286.779325] ? lock_acquire+0x170/0x3f0 [ 1286.783316] ? ion_page_pool_alloc+0x28/0x1b0 [ 1286.787825] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1286.792678] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1286.797196] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1286.802657] ? __mutex_unlock_slowpath+0x75/0x770 [ 1286.807513] alloc_pages_current+0x155/0x260 [ 1286.811928] ion_page_pool_alloc+0x118/0x1b0 [ 1286.816345] ion_system_heap_allocate+0x133/0x8c0 [ 1286.821196] ? ion_alloc+0x187/0x810 [ 1286.824910] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1286.830363] ? ion_system_contig_heap_create+0x130/0x130 [ 1286.835821] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1286.840848] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1286.845696] ion_alloc+0x204/0x810 [ 1286.849249] ? ion_dma_buf_release+0x40/0x40 [ 1286.853660] ? __might_fault+0x177/0x1b0 [ 1286.857731] ion_ioctl+0xea/0x1f0 [ 1286.861188] ? ion_query_heaps+0x360/0x360 [ 1286.865419] ? SyS_write+0x1b7/0x210 [ 1286.869137] ? ion_query_heaps+0x360/0x360 [ 1286.873382] do_vfs_ioctl+0x75a/0xff0 [ 1286.877185] ? ioctl_preallocate+0x1a0/0x1a0 [ 1286.881602] ? lock_downgrade+0x740/0x740 [ 1286.885753] ? __fget+0x225/0x360 [ 1286.889205] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.893178] ? security_file_ioctl+0x83/0xb0 [ 1286.897594] SyS_ioctl+0x7f/0xb0 [ 1286.900962] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.904934] do_syscall_64+0x1d5/0x640 [ 1286.908836] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1286.914159] RIP: 0033:0x465f69 [ 1286.917345] RSP: 002b:00007f343bb89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1286.925051] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1286.932317] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1286.939584] RBP: 00007f343bb891d0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.946851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.954121] R13: 00007ffd1e89b06f R14: 00007f343bb89300 R15: 0000000000022000 [ 1287.643032] syz-executor.3: page allocation failure: order:4 [ 1287.643048] syz-executor.5: page allocation failure: order:4 [ 1287.650043] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1287.650056] syz-executor.3 cpuset= [ 1287.655974] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1287.667327] / [ 1287.668690] (null) [ 1287.674475] mems_allowed=0-1 [ 1287.677347] syz-executor.5 cpuset= [ 1287.680756] CPU: 1 PID: 11767 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1287.682134] / [ 1287.684936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1287.693089] mems_allowed=0-1 [ 1287.694485] Call Trace: [ 1287.694503] dump_stack+0x1b2/0x281 [ 1287.694516] warn_alloc.cold+0x96/0x1cc [ 1287.717056] ? zone_watermark_ok_safe+0x220/0x220 [ 1287.721917] __alloc_pages_nodemask+0x2127/0x2720 [ 1287.726744] ? __schedule+0x893/0x1de0 [ 1287.730618] ? lock_acquire+0x170/0x3f0 [ 1287.734578] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1287.739411] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1287.744846] ? __mutex_unlock_slowpath+0x75/0x770 [ 1287.749668] ? retint_kernel+0x2d/0x2d [ 1287.753539] alloc_pages_current+0x155/0x260 [ 1287.757935] ion_page_pool_alloc+0x118/0x1b0 [ 1287.762326] ion_system_heap_allocate+0x133/0x8c0 [ 1287.767157] ? ion_alloc+0x187/0x810 [ 1287.770852] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1287.776288] ? ion_system_contig_heap_create+0x130/0x130 [ 1287.781725] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1287.786732] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1287.791564] ion_alloc+0x204/0x810 [ 1287.795195] ? ion_dma_buf_release+0x40/0x40 [ 1287.799618] ? __might_fault+0x177/0x1b0 [ 1287.803671] ion_ioctl+0xea/0x1f0 [ 1287.807109] ? ion_query_heaps+0x360/0x360 [ 1287.811324] ? SyS_write+0x1b7/0x210 [ 1287.815021] ? ion_query_heaps+0x360/0x360 [ 1287.819240] do_vfs_ioctl+0x75a/0xff0 [ 1287.823027] ? ioctl_preallocate+0x1a0/0x1a0 [ 1287.827416] ? lock_downgrade+0x740/0x740 [ 1287.831572] ? __fget+0x225/0x360 [ 1287.835015] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.838975] ? security_file_ioctl+0x83/0xb0 [ 1287.843368] SyS_ioctl+0x7f/0xb0 [ 1287.846715] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.850674] do_syscall_64+0x1d5/0x640 [ 1287.854552] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1287.859728] RIP: 0033:0x465f69 [ 1287.862905] RSP: 002b:00007f343bb89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1287.870596] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1287.877847] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1287.885100] RBP: 00007f343bb891d0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.892353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.899606] R13: 00007ffd1e89b06f R14: 00007f343bb89300 R15: 0000000000022000 [ 1287.906870] CPU: 0 PID: 11723 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1287.912324] Mem-Info: [ 1287.914857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1287.914861] Call Trace: [ 1287.914880] dump_stack+0x1b2/0x281 [ 1287.914896] warn_alloc.cold+0x96/0x1cc [ 1287.917412] active_anon:157699 inactive_anon:22977 isolated_anon:0 [ 1287.917412] active_file:1817 inactive_file:1892 isolated_file:0 [ 1287.917412] unevictable:0 dirty:130 writeback:0 unstable:0 [ 1287.917412] slab_reclaimable:14522 slab_unreclaimable:135598 [ 1287.917412] mapped:55357 shmem:23315 pagetables:24590 bounce:0 [ 1287.917412] free:209344 free_pcp:184 free_cma:0 [ 1287.926659] ? zone_watermark_ok_safe+0x220/0x220 [ 1287.926685] __alloc_pages_nodemask+0x2127/0x2720 [ 1287.926701] ? lock_acquire+0x170/0x3f0 [ 1287.926715] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1287.926731] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1287.926743] ? __mutex_unlock_slowpath+0x75/0x770 [ 1287.926757] alloc_pages_current+0x155/0x260 [ 1287.926770] ion_page_pool_alloc+0x118/0x1b0 [ 1287.926782] ion_system_heap_allocate+0x133/0x8c0 [ 1287.932741] Node 0 active_anon:624740kB inactive_anon:58648kB active_file:1636kB inactive_file:1908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119144kB dirty:188kB writeback:0kB shmem:59768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 520192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1287.932954] ? ion_alloc+0x187/0x810 [ 1287.936992] Node 1 active_anon:6056kB inactive_anon:33260kB active_file:5632kB inactive_file:5660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102284kB dirty:332kB writeback:0kB shmem:33492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1287.970989] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1287.971000] ? ion_system_contig_heap_create+0x130/0x130 [ 1287.971008] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1287.971019] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1287.971028] ion_alloc+0x204/0x810 [ 1287.971042] ? ion_dma_buf_release+0x40/0x40 [ 1287.971053] ? __might_fault+0x177/0x1b0 [ 1287.971065] ion_ioctl+0xea/0x1f0 [ 1287.971074] ? ion_query_heaps+0x360/0x360 [ 1287.971082] ? SyS_write+0x1b7/0x210 [ 1287.971093] ? ion_query_heaps+0x360/0x360 [ 1287.971101] do_vfs_ioctl+0x75a/0xff0 [ 1287.971111] ? ioctl_preallocate+0x1a0/0x1a0 [ 1287.971117] ? lock_downgrade+0x740/0x740 [ 1287.971130] ? __fget+0x225/0x360 [ 1287.971137] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.971148] ? security_file_ioctl+0x83/0xb0 [ 1287.979905] Node 0 [ 1287.980798] SyS_ioctl+0x7f/0xb0 [ 1287.984893] DMA free:11108kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1287.989663] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.989680] do_syscall_64+0x1d5/0x640 [ 1287.989696] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1287.989704] RIP: 0033:0x465f69 [ 1287.989708] RSP: 002b:00007fc9caa07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1287.989717] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1287.989722] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1287.989727] RBP: 00007fc9caa071d0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.989735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.995246] lowmem_reserve[]: [ 1287.999981] R13: 00007ffdf9c5846f R14: 00007fc9caa07300 R15: 0000000000022000 [ 1288.242534] 0 2717 2718 2718 2718 [ 1288.246093] Node 0 DMA32 free:183036kB min:36200kB low:45248kB high:54296kB active_anon:624632kB inactive_anon:58648kB active_file:1636kB inactive_file:1920kB unevictable:0kB writepending:200kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36768kB pagetables:91772kB bounce:0kB free_pcp:96kB local_pcp:8kB free_cma:0kB [ 1288.275705] lowmem_reserve[]: 0 0 0 0 0 [ 1288.279789] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1288.305850] lowmem_reserve[]: 0 0 0 0 0 [ 1288.310181] Node 1 Normal free:461820kB min:53696kB low:67120kB high:80544kB active_anon:6056kB inactive_anon:33260kB active_file:5688kB inactive_file:5564kB unevictable:0kB writepending:332kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2304kB pagetables:6564kB bounce:0kB free_pcp:700kB local_pcp:16kB free_cma:0kB [ 1288.339956] lowmem_reserve[]: 0 0 0 0 0 [ 1288.343963] Node 0 DMA: 101*4kB (UME) 84*8kB (UME) 63*16kB (UE) 6*32kB (U) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11108kB [ 1288.360094] Node 0 DMA32: 1040*4kB (MEH) 391*8kB (UMEH) 91*16kB (MEH) 2560*32kB (UMEH) 5*64kB (UH) 3*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 92136kB [ 1288.375664] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1288.387205] Node 1 Normal: 4816*4kB (UME) 6275*8kB (UM) 8169*16kB (UM) 8127*32kB (UM) 32*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 462280kB [ 1288.402509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1288.412143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1288.421528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1288.431143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1288.445944] 27017 total pagecache pages [ 1288.452083] 0 pages in swap cache [ 1288.455597] Swap cache stats: add 0, delete 0, find 0/0 [ 1288.465569] Free swap = 0kB [ 1288.469357] Total swap = 0kB [ 1288.472430] 2097051 pages RAM [ 1288.475577] 0 pages HighMem/MovableOnly [ 1288.484441] 363840 pages reserved [ 1288.488725] 0 pages cma reserved 10:39:48 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x12000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) 10:39:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x222683, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x2040, 0x0) r1 = userfaultfd(0x80000) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="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", &(0x7f0000000200)=@udp=r2, 0x2}, 0x20) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x1}) 10:39:48 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:39:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:39:48 executing program 2 (fault-call:0 fault-nth:0): select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 10:39:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) 10:39:48 executing program 2: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f00000003c0)={r0, 0x22}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000580)={r0, &(0x7f00000004c0)=""/188}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000400)={0x0, 0x9}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x81, 0x5, 0x10000, 0x0, 0x10001, 0x3, 0x0, 0x4766}, &(0x7f0000000200)={0x0, 0x8001, 0xe4, 0x7, 0x4, 0x8001, 0x3, 0x7ff}, &(0x7f0000000240)={0x81, 0xcf99, 0x3ff, 0x7fffffff, 0x9, 0xffff, 0xf222, 0x3}, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x7fffffff]}, 0x8}) pselect6(0x40, &(0x7f0000000000)={0x68c, 0x3ff, 0x7, 0x0, 0x0, 0xa, 0x2, 0x5}, &(0x7f0000000040)={0x2, 0x75ee, 0x2, 0x81, 0x3, 0xf7, 0x7, 0x8}, &(0x7f0000000080)={0x4, 0x6, 0x9, 0x1, 0x10000, 0x5, 0x3fff800000000000, 0xff}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000100), 0x8}) socketpair(0x9, 0x90f6019fd12f8a3f, 0x4, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000480)) 10:39:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:39:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 10:39:48 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x2710}) 10:39:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x280043, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x4, {0xa, 0x4e24, 0xdf9, @remote, 0x2}, r2}}, 0x38) [ 1290.018788] FAULT_INJECTION: forcing a failure. [ 1290.018788] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1290.088519] CPU: 1 PID: 11802 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1290.096441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1290.105800] Call Trace: [ 1290.108395] dump_stack+0x1b2/0x281 [ 1290.112030] should_fail.cold+0x10a/0x149 [ 1290.116185] __alloc_pages_nodemask+0x22c/0x2720 [ 1290.120953] ? lock_acquire+0x170/0x3f0 [ 1290.124931] ? ion_page_pool_alloc+0x28/0x1b0 [ 1290.129441] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1290.134294] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1290.138798] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1290.144253] ? __mutex_unlock_slowpath+0x75/0x770 [ 1290.149109] alloc_pages_current+0x155/0x260 [ 1290.153527] ion_page_pool_alloc+0x118/0x1b0 [ 1290.157947] ion_system_heap_allocate+0x133/0x8c0 [ 1290.162800] ? ion_alloc+0x187/0x810 [ 1290.166512] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1290.171946] ? ion_system_contig_heap_create+0x130/0x130 [ 1290.177378] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1290.182498] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1290.187338] ion_alloc+0x204/0x810 [ 1290.190863] ? ion_dma_buf_release+0x40/0x40 [ 1290.195274] ? __might_fault+0x177/0x1b0 [ 1290.199317] ion_ioctl+0xea/0x1f0 [ 1290.202751] ? ion_query_heaps+0x360/0x360 [ 1290.206963] ? SyS_write+0x1b7/0x210 [ 1290.210660] ? ion_query_heaps+0x360/0x360 [ 1290.214907] do_vfs_ioctl+0x75a/0xff0 [ 1290.218689] ? ioctl_preallocate+0x1a0/0x1a0 [ 1290.223076] ? lock_downgrade+0x740/0x740 [ 1290.227221] ? __fget+0x225/0x360 [ 1290.230653] ? do_vfs_ioctl+0xff0/0xff0 [ 1290.234606] ? security_file_ioctl+0x83/0xb0 10:39:48 executing program 2: syslog(0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}) [ 1290.238995] SyS_ioctl+0x7f/0xb0 [ 1290.242340] ? do_vfs_ioctl+0xff0/0xff0 [ 1290.246297] do_syscall_64+0x1d5/0x640 [ 1290.250175] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1290.255344] RIP: 0033:0x465f69 [ 1290.258530] RSP: 002b:00007f202b29f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1290.266219] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1290.273466] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1290.280722] RBP: 00007f202b29f1d0 R08: 0000000000000000 R09: 0000000000000000 10:39:48 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280)='wireguard\x00', 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000100", @ANYRESDEC=r0, @ANYBLOB="00032cbd7000fbdbdf2501000000060006004e200000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="92eae8472ac0428ca87fffff85263df4000000", @ANYRES16=r2, @ANYBLOB="00012abd7000fbdbdf250100000014000600726f7365300000000000000000000000140006006261746164765f736c6176655f3000002900070073797374656d5f753a6f626a6563745f723a617564697463746c5f657865635f743a733000000000050001000000000014000200fe8000000000000000000000000000bb14000300fe80000000000000000000000000003214000300fe8000000000000000000000000000aa2a00070073797374656d5f753a6f626a6563745f723a7075626c69635f636f6e74656e745f743a733000000005000100010000001400060064756d6d793000"/238], 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x40004) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) read$fb(r3, &(0x7f00000000c0)=""/140, 0x8c) [ 1290.287970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1290.295241] R13: 00007ffe34c2804f R14: 00007f202b29f300 R15: 0000000000022000 [ 1290.480020] dlm: non-version read from control device 140 [ 1291.003145] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1291.025994] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1291.032677] CPU: 0 PID: 11802 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1291.040567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1291.049906] Call Trace: [ 1291.052482] dump_stack+0x1b2/0x281 [ 1291.056092] warn_alloc.cold+0x96/0x1cc [ 1291.060048] ? zone_watermark_ok_safe+0x220/0x220 [ 1291.064881] __alloc_pages_nodemask+0x2127/0x2720 [ 1291.069723] ? __schedule+0x893/0x1de0 [ 1291.073619] ? lock_acquire+0x170/0x3f0 [ 1291.077584] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1291.082438] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1291.087876] ? __mutex_unlock_slowpath+0x75/0x770 [ 1291.092705] alloc_pages_current+0x155/0x260 [ 1291.097098] ion_page_pool_alloc+0x118/0x1b0 [ 1291.101504] ion_system_heap_allocate+0x133/0x8c0 [ 1291.106329] ? ion_alloc+0x187/0x810 [ 1291.110022] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1291.115452] ? ion_system_contig_heap_create+0x130/0x130 [ 1291.120883] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1291.125881] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1291.130703] ion_alloc+0x204/0x810 [ 1291.134231] ? ion_dma_buf_release+0x40/0x40 [ 1291.138623] ? __might_fault+0x177/0x1b0 [ 1291.142666] ion_ioctl+0xea/0x1f0 [ 1291.146098] ? ion_query_heaps+0x360/0x360 [ 1291.150314] ? SyS_write+0x1b7/0x210 [ 1291.154009] ? ion_query_heaps+0x360/0x360 [ 1291.158221] do_vfs_ioctl+0x75a/0xff0 [ 1291.162002] ? ioctl_preallocate+0x1a0/0x1a0 [ 1291.166408] ? lock_downgrade+0x740/0x740 [ 1291.170538] ? __fget+0x225/0x360 [ 1291.173971] ? do_vfs_ioctl+0xff0/0xff0 [ 1291.177926] ? security_file_ioctl+0x83/0xb0 [ 1291.182316] SyS_ioctl+0x7f/0xb0 [ 1291.185662] ? do_vfs_ioctl+0xff0/0xff0 [ 1291.189618] do_syscall_64+0x1d5/0x640 [ 1291.193494] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1291.198662] RIP: 0033:0x465f69 [ 1291.201830] RSP: 002b:00007f202b29f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1291.209517] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1291.216785] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1291.224035] RBP: 00007f202b29f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1291.231287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.238538] R13: 00007ffe34c2804f R14: 00007f202b29f300 R15: 0000000000022000 [ 1291.335633] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1291.336649] dlm: non-version read from control device 140 [ 1291.363955] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1291.379131] CPU: 0 PID: 11825 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1291.387124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1291.396460] Call Trace: [ 1291.399034] dump_stack+0x1b2/0x281 [ 1291.402644] warn_alloc.cold+0x96/0x1cc [ 1291.406601] ? zone_watermark_ok_safe+0x220/0x220 [ 1291.411430] __alloc_pages_nodemask+0x2127/0x2720 [ 1291.416259] ? lock_acquire+0x170/0x3f0 [ 1291.420219] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1291.425047] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1291.430479] ? __mutex_unlock_slowpath+0x75/0x770 [ 1291.435303] ? alloc_pages_current+0x123/0x260 [ 1291.439867] alloc_pages_current+0x155/0x260 [ 1291.444260] ion_page_pool_alloc+0x118/0x1b0 [ 1291.448654] ion_system_heap_allocate+0x133/0x8c0 [ 1291.453477] ? ion_alloc+0x187/0x810 [ 1291.457172] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1291.462601] ? ion_system_contig_heap_create+0x130/0x130 [ 1291.468033] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1291.473032] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1291.477858] ion_alloc+0x204/0x810 [ 1291.481382] ? ion_dma_buf_release+0x40/0x40 [ 1291.485770] ? __might_fault+0x177/0x1b0 [ 1291.489812] ion_ioctl+0xea/0x1f0 [ 1291.493247] ? ion_query_heaps+0x360/0x360 [ 1291.497466] ? ion_query_heaps+0x360/0x360 [ 1291.501700] do_vfs_ioctl+0x75a/0xff0 [ 1291.505496] ? ioctl_preallocate+0x1a0/0x1a0 [ 1291.509885] ? lock_downgrade+0x740/0x740 [ 1291.514015] ? __fget+0x225/0x360 [ 1291.517465] ? do_vfs_ioctl+0xff0/0xff0 [ 1291.521420] ? security_file_ioctl+0x83/0xb0 [ 1291.525809] SyS_ioctl+0x7f/0xb0 [ 1291.529154] ? do_vfs_ioctl+0xff0/0xff0 [ 1291.533112] do_syscall_64+0x1d5/0x640 [ 1291.536986] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1291.542155] RIP: 0033:0x465f69 [ 1291.545337] RSP: 002b:00007f343bb89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1291.553030] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1291.560280] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1291.567534] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1291.574783] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1291.582036] R13: 00007ffd1e89b06f R14: 00007f343bb89300 R15: 0000000000022000 [ 1291.661488] warn_alloc_show_mem: 1 callbacks suppressed [ 1291.661492] Mem-Info: [ 1291.682607] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1291.683254] active_anon:158281 inactive_anon:22977 isolated_anon:0 [ 1291.683254] active_file:1378 inactive_file:2614 isolated_file:0 [ 1291.683254] unevictable:0 dirty:69 writeback:0 unstable:0 [ 1291.683254] slab_reclaimable:14335 slab_unreclaimable:137141 [ 1291.683254] mapped:55509 shmem:23315 pagetables:24637 bounce:0 [ 1291.683254] free:173776 free_pcp:170 free_cma:0 [ 1291.695234] syz-executor.5 cpuset= [ 1291.733682] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1291.745074] Node 0 active_anon:627064kB inactive_anon:58648kB active_file:4892kB inactive_file:9996kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127076kB dirty:220kB writeback:0kB shmem:59768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 524288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1291.753837] / [ 1291.791084] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1291.805510] CPU: 1 PID: 11848 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1291.813425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1291.816126] Node 1 active_anon:6060kB inactive_anon:33260kB active_file:520kB inactive_file:460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94860kB dirty:56kB writeback:0kB shmem:33492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1291.822778] Call Trace: [ 1291.822797] dump_stack+0x1b2/0x281 [ 1291.822810] warn_alloc.cold+0x96/0x1cc [ 1291.860275] ? zone_watermark_ok_safe+0x220/0x220 [ 1291.865140] __alloc_pages_nodemask+0x2127/0x2720 [ 1291.869995] ? lock_acquire+0x170/0x3f0 [ 1291.873984] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1291.878840] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1291.884316] ? __mutex_unlock_slowpath+0x75/0x770 [ 1291.888887] Node 0 DMA free:11084kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1291.889184] alloc_pages_current+0x155/0x260 [ 1291.889199] ion_page_pool_alloc+0x118/0x1b0 [ 1291.924202] ion_system_heap_allocate+0x133/0x8c0 [ 1291.929053] ? ion_alloc+0x187/0x810 [ 1291.932765] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1291.938216] ? ion_system_contig_heap_create+0x130/0x130 [ 1291.943667] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1291.946623] lowmem_reserve[]: [ 1291.948683] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1291.948696] ion_alloc+0x204/0x810 [ 1291.954125] 0 [ 1291.956623] ? ion_dma_buf_release+0x40/0x40 [ 1291.956635] ? __might_fault+0x177/0x1b0 [ 1291.956646] ion_ioctl+0xea/0x1f0 [ 1291.956658] ? ion_query_heaps+0x360/0x360 [ 1291.966894] 2717 [ 1291.970412] ? ion_query_heaps+0x360/0x360 [ 1291.970422] do_vfs_ioctl+0x75a/0xff0 [ 1291.979200] 2718 [ 1291.980132] ? ioctl_preallocate+0x1a0/0x1a0 [ 1291.990080] 2718 [ 1291.990178] ? lock_downgrade+0x740/0x740 [ 1291.999187] 2718 [ 1292.000746] ? __fget+0x225/0x360 [ 1292.000756] ? do_vfs_ioctl+0xff0/0xff0 [ 1292.006242] ? security_file_ioctl+0x83/0xb0 [ 1292.006253] SyS_ioctl+0x7f/0xb0 [ 1292.006262] ? do_vfs_ioctl+0xff0/0xff0 [ 1292.006277] do_syscall_64+0x1d5/0x640 [ 1292.006295] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1292.014573] Node 0 [ 1292.014632] RIP: 0033:0x465f69 [ 1292.021520] DMA32 free:135836kB min:36200kB low:45248kB high:54296kB active_anon:627024kB inactive_anon:58648kB active_file:4892kB inactive_file:9996kB unevictable:0kB writepending:220kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36832kB pagetables:91984kB bounce:0kB free_pcp:236kB local_pcp:208kB free_cma:0kB [ 1292.021933] RSP: 002b:00007fc9ca9e6188 EFLAGS: 00000246 [ 1292.031609] lowmem_reserve[]: [ 1292.033197] ORIG_RAX: 0000000000000010 [ 1292.033203] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1292.033208] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1292.033215] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1292.041039] 0 [ 1292.065532] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1292.065538] R13: 00007ffdf9c5846f R14: 00007fc9ca9e6300 R15: 0000000000022000 [ 1292.073071] mems_allowed=0-1 [ 1292.112589] 0 [ 1292.120994] CPU: 1 PID: 11845 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1292.126140] 0 [ 1292.130674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1292.130678] Call Trace: [ 1292.130697] dump_stack+0x1b2/0x281 [ 1292.139562] 0 [ 1292.141829] warn_alloc.cold+0x96/0x1cc [ 1292.141841] ? zone_watermark_ok_safe+0x220/0x220 [ 1292.147970] 0 [ 1292.148036] __alloc_pages_nodemask+0x2127/0x2720 [ 1292.153766] ? retint_kernel+0x2d/0x2d [ 1292.153782] ? lock_acquire+0x170/0x3f0 [ 1292.165487] Node 0 [ 1292.169104] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1292.169123] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1292.169137] ? __mutex_unlock_slowpath+0x75/0x770 [ 1292.178789] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1292.180140] ? alloc_pages_current+0x37/0x260 [ 1292.180151] alloc_pages_current+0x155/0x260 [ 1292.196074] lowmem_reserve[]: [ 1292.215308] ion_page_pool_alloc+0x118/0x1b0 [ 1292.215320] ion_system_heap_allocate+0x133/0x8c0 [ 1292.215333] ? ion_alloc+0x187/0x810 [ 1292.238511] 0 [ 1292.240252] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1292.240266] ? ion_system_contig_heap_create+0x130/0x130 [ 1292.244398] 0 [ 1292.247486] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1292.247497] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1292.247510] ion_alloc+0x204/0x810 [ 1292.247526] ? ion_dma_buf_release+0x40/0x40 [ 1292.266063] 0 [ 1292.268101] ? __might_fault+0x177/0x1b0 [ 1292.268116] ion_ioctl+0xea/0x1f0 [ 1292.272617] 0 [ 1292.274297] ? ion_query_heaps+0x360/0x360 [ 1292.274310] ? ion_query_heaps+0x360/0x360 [ 1292.280254] 0 [ 1292.281786] do_vfs_ioctl+0x75a/0xff0 [ 1292.281799] ? ioctl_preallocate+0x1a0/0x1a0 [ 1292.287810] ? lock_downgrade+0x740/0x740 [ 1292.298113] Node 1 [ 1292.302127] ? __fget+0x225/0x360 [ 1292.302138] ? do_vfs_ioctl+0xff0/0xff0 [ 1292.314397] Normal free:374392kB min:53696kB low:67120kB high:80544kB active_anon:6060kB inactive_anon:33260kB active_file:500kB inactive_file:440kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2304kB pagetables:6564kB bounce:0kB free_pcp:40kB local_pcp:68kB free_cma:0kB [ 1292.315896] ? security_file_ioctl+0x83/0xb0 [ 1292.315907] SyS_ioctl+0x7f/0xb0 [ 1292.315915] ? do_vfs_ioctl+0xff0/0xff0 [ 1292.315926] do_syscall_64+0x1d5/0x640 [ 1292.315943] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1292.365218] RIP: 0033:0x465f69 [ 1292.368402] RSP: 002b:00007fc9caa07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1292.376108] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1292.381146] lowmem_reserve[]: [ 1292.383403] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1292.383409] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1292.383413] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1292.383421] R13: 00007ffdf9c5846f R14: 00007fc9caa07300 R15: 0000000000022000 [ 1292.392262] 0 0 0 0 0 [ 1292.451190] Node 0 DMA: 6*4kB (UME) 22*8kB (UME) 15*16kB (UE) 11*32kB (U) 9*64kB (UME) 8*128kB (UME) 10*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 11096kB [ 1292.485754] Node 0 DMA32: 1032*4kB (UME) 381*8kB (UMEH) 98*16kB (UMEH) 1072*32kB (UMEH) 4*64kB (H) 5*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44712kB [ 1292.512652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1292.541778] Node 1 Normal: 119*4kB (ME) 46*8kB (M) 14*16kB (M) 5709*32kB (UM) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 184012kB [ 1292.572459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1292.592323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1292.610381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1292.630006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1292.642341] 27284 total pagecache pages [ 1292.672060] 0 pages in swap cache [ 1292.677987] Swap cache stats: add 0, delete 0, find 0/0 [ 1292.739554] Free swap = 0kB [ 1292.760015] Total swap = 0kB [ 1292.772440] 2097051 pages RAM [ 1292.786061] 0 pages HighMem/MovableOnly [ 1292.804113] 363840 pages reserved [ 1292.819271] 0 pages cma reserved [ 1293.138809] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1293.170429] systemd-journal cpuset=/ mems_allowed=0-1 [ 1293.190489] CPU: 1 PID: 10805 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 1293.198479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1293.207813] Call Trace: [ 1293.210384] dump_stack+0x1b2/0x281 [ 1293.213993] dump_header+0x178/0x82f [ 1293.217689] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1293.222783] ? ___ratelimit+0x2cd/0x530 [ 1293.226735] oom_kill_process.cold+0x10/0xb18 [ 1293.231235] out_of_memory+0xe3e/0x1190 [ 1293.235191] ? oom_killer_disable+0x1c0/0x1c0 [ 1293.239666] ? mutex_trylock+0x152/0x1a0 [ 1293.243709] __alloc_pages_nodemask+0x23e1/0x2720 [ 1293.248538] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1293.253366] ? cache_grow_begin+0x41/0x630 [ 1293.257581] cache_grow_begin+0x91/0x630 [ 1293.261620] ? cache_grow_begin+0x91/0x630 [ 1293.265833] fallback_alloc+0x207/0x2c0 [ 1293.269788] kmem_cache_alloc+0x1e5/0x3c0 [ 1293.273916] getname_flags+0xc8/0x550 [ 1293.277697] user_path_at_empty+0x2a/0x50 [ 1293.281824] SyS_faccessat+0x21b/0x680 [ 1293.285691] ? SyS_fallocate+0x80/0x80 [ 1293.289556] ? do_syscall_64+0x4c/0x640 [ 1293.293506] ? SyS_faccessat+0x680/0x680 [ 1293.297547] do_syscall_64+0x1d5/0x640 [ 1293.301424] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1293.306606] RIP: 0033:0x7f96f97879c7 [ 1293.310297] RSP: 002b:00007ffec46cb2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1293.317991] RAX: ffffffffffffffda RBX: 00007ffec46ce210 RCX: 00007f96f97879c7 [ 1293.325239] RDX: 00007f96fa1f8a00 RSI: 0000000000000000 RDI: 000056135face9a3 [ 1293.332518] RBP: 00007ffec46cb330 R08: 0000000000000000 R09: 0000000000000000 [ 1293.339765] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1293.347011] R13: 0000000000000000 R14: 00007ffec46ce210 R15: 00007ffec46cb820 [ 1293.445696] Mem-Info: [ 1293.448256] active_anon:158288 inactive_anon:22977 isolated_anon:0 [ 1293.448256] active_file:37 inactive_file:30 isolated_file:0 [ 1293.448256] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1293.448256] slab_reclaimable:14321 slab_unreclaimable:136842 [ 1293.448256] mapped:52873 shmem:23315 pagetables:24611 bounce:0 [ 1293.448256] free:25323 free_pcp:189 free_cma:0 [ 1293.528767] Node 0 active_anon:627092kB inactive_anon:58648kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117464kB dirty:0kB writeback:0kB shmem:59768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 522240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1293.569250] Node 1 active_anon:6060kB inactive_anon:33260kB active_file:28kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94028kB dirty:0kB writeback:0kB shmem:33492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1293.608579] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1293.647995] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1293.653066] Node 0 DMA32 free:36012kB min:36200kB low:45248kB high:54296kB active_anon:627052kB inactive_anon:58648kB active_file:232kB inactive_file:216kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36832kB pagetables:91880kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1293.694736] lowmem_reserve[]: 0 0 0 0 0 [ 1293.700767] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1293.736806] lowmem_reserve[]: 0 0 0 0 0 [ 1293.740827] Node 1 Normal free:53572kB min:53696kB low:67120kB high:80544kB active_anon:6060kB inactive_anon:33260kB active_file:28kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2304kB pagetables:6564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1293.780672] lowmem_reserve[]: 0 0 0 0 0 [ 1293.784698] Node 0 DMA: 3*4kB (ME) 21*8kB (UME) 15*16kB (UE) 11*32kB (U) 9*64kB (UME) 8*128kB (UME) 10*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 11076kB [ 1293.806709] Node 0 DMA32: 2011*4kB (ME) 483*8kB (UMEH) 130*16kB (MEH) 428*32kB (UMEH) 37*64kB (MH) 18*128kB (MH) 7*256kB (MH) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36196kB [ 1293.828937] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1293.841877] Node 1 Normal: 262*4kB (UME) 63*8kB (UM) 15*16kB (UM) 1603*32kB (UM) 8*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53600kB [ 1293.862116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1293.871031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1293.884510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1293.909726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1293.922614] 23342 total pagecache pages [ 1293.928969] 0 pages in swap cache [ 1293.932440] Swap cache stats: add 0, delete 0, find 0/0 [ 1293.941559] Free swap = 0kB [ 1293.944585] Total swap = 0kB [ 1293.957790] 2097051 pages RAM [ 1293.960930] 0 pages HighMem/MovableOnly [ 1293.964898] 363840 pages reserved [ 1293.985800] 0 pages cma reserved [ 1293.989240] Out of memory (oom_kill_allocating_task): Kill process 10805 (systemd-journal) score 0 or sacrifice child [ 1294.015554] Killed process 10805 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:4kB, shmem-rss:2468kB [ 1294.027339] oom_reaper: reaped process 10805 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2468kB [ 1294.106542] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1294.132679] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1294.139019] CPU: 0 PID: 7972 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 1294.146465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1294.155810] Call Trace: [ 1294.158394] dump_stack+0x1b2/0x281 [ 1294.162021] dump_header+0x178/0x82f [ 1294.165731] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1294.170831] ? ___ratelimit+0x2cd/0x530 [ 1294.174797] oom_kill_process.cold+0x10/0xb18 [ 1294.179279] out_of_memory+0xe3e/0x1190 [ 1294.183233] ? oom_killer_disable+0x1c0/0x1c0 [ 1294.187706] ? mutex_trylock+0x152/0x1a0 [ 1294.191882] __alloc_pages_nodemask+0x23e1/0x2720 [ 1294.196722] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1294.201602] alloc_pages_current+0x155/0x260 [ 1294.205996] filemap_fault+0xea3/0x1980 [ 1294.209958] ext4_filemap_fault+0x84/0xb0 [ 1294.214098] __do_fault+0xfa/0x380 [ 1294.217629] __handle_mm_fault+0x2497/0x4620 [ 1294.222023] ? vm_insert_page+0x7c0/0x7c0 [ 1294.226153] ? lock_downgrade+0x740/0x740 [ 1294.230309] handle_mm_fault+0x391/0x860 [ 1294.234373] __do_page_fault+0x549/0xad0 [ 1294.238429] ? spurious_fault+0x640/0x640 [ 1294.242567] ? do_page_fault+0x60/0x500 [ 1294.246547] ? page_fault+0x2f/0x50 [ 1294.250149] page_fault+0x45/0x50 [ 1294.253576] RIP: 0000:0x93f280 [ 1294.256745] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1294.259078] Mem-Info: [ 1294.266981] active_anon:158170 inactive_anon:22976 isolated_anon:0 [ 1294.266981] active_file:16 inactive_file:3 isolated_file:3 [ 1294.266981] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1294.266981] slab_reclaimable:14302 slab_unreclaimable:136644 [ 1294.266981] mapped:52247 shmem:23315 pagetables:24587 bounce:0 [ 1294.266981] free:13840 free_pcp:0 free_cma:0 [ 1294.302973] Node 0 active_anon:626620kB inactive_anon:58644kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:114980kB dirty:0kB writeback:0kB shmem:59768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 522240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1294.330951] Node 1 active_anon:6060kB inactive_anon:33260kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94008kB dirty:0kB writeback:0kB shmem:33492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1294.358902] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.385193] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1294.387081] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1294.390921] Node 0 DMA32 free:17788kB min:36200kB low:45248kB high:54296kB active_anon:626580kB inactive_anon:58644kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36800kB pagetables:91784kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.412996] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1294.445186] CPU: 0 PID: 11845 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1294.447482] lowmem_reserve[]: [ 1294.453054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1294.453061] 0 [ 1294.456143] Call Trace: [ 1294.456163] dump_stack+0x1b2/0x281 [ 1294.456176] warn_alloc.cold+0x96/0x1cc [ 1294.456189] ? zone_watermark_ok_safe+0x220/0x220 [ 1294.456201] ? usleep_range+0x130/0x130 [ 1294.465551] syz-executor.5: [ 1294.467325] ? try_to_free_pages+0x23f/0x6e0 [ 1294.467334] ? _find_next_bit+0xdb/0x100 [ 1294.467344] ? run_timer_softirq+0x5a0/0x5a0 [ 1294.467359] __alloc_pages_nodemask+0x2127/0x2720 [ 1294.467375] ? lock_acquire+0x170/0x3f0 [ 1294.467389] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1294.477174] 0 [ 1294.477521] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1294.482334] 0 [ 1294.486315] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1294.486336] alloc_pages_current+0x155/0x260 [ 1294.486349] ion_page_pool_alloc+0x118/0x1b0 [ 1294.486360] ion_system_heap_allocate+0x133/0x8c0 [ 1294.486369] ? ion_alloc+0x187/0x810 [ 1294.486377] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1294.486388] ? ion_system_contig_heap_create+0x130/0x130 [ 1294.491227] page allocation failure: order:0 [ 1294.493774] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1294.500360] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1294.502199] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1294.508778] 0 [ 1294.510972] ion_alloc+0x204/0x810 [ 1294.517535] (null) [ 1294.517577] ? ion_dma_buf_release+0x40/0x40 [ 1294.522038] syz-executor.5 cpuset= [ 1294.523848] ? __might_fault+0x177/0x1b0 [ 1294.531060] 0 [ 1294.533687] ion_ioctl+0xea/0x1f0 [ 1294.542898] ? ion_query_heaps+0x360/0x360 [ 1294.548348] / [ 1294.552020] ? ion_query_heaps+0x360/0x360 [ 1294.559189] Node 0 [ 1294.561839] do_vfs_ioctl+0x75a/0xff0 [ 1294.568593] mems_allowed=0-1 [ 1294.573912] ? ioctl_preallocate+0x1a0/0x1a0 [ 1294.580490] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.580511] ? lock_downgrade+0x740/0x740 [ 1294.584022] lowmem_reserve[]: [ 1294.586161] ? __fget+0x225/0x360 [ 1294.586171] ? do_vfs_ioctl+0xff0/0xff0 [ 1294.586180] ? security_file_ioctl+0x83/0xb0 [ 1294.586189] SyS_ioctl+0x7f/0xb0 [ 1294.586197] ? do_vfs_ioctl+0xff0/0xff0 [ 1294.586207] do_syscall_64+0x1d5/0x640 [ 1294.586223] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1294.586231] RIP: 0033:0x465f69 [ 1294.586235] RSP: 002b:00007fc9caa07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1294.586247] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1294.592450] 0 [ 1294.594155] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1294.607484] 0 [ 1294.607616] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1294.607623] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1294.609318] 0 [ 1294.613528] R13: 00007ffdf9c5846f R14: 00007fc9caa07300 R15: 0000000000022000 [ 1294.617671] warn_alloc_show_mem: 3 callbacks suppressed [ 1294.617674] Mem-Info: [ 1294.635379] CPU: 1 PID: 11848 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1294.653897] active_anon:158170 inactive_anon:22976 isolated_anon:0 [ 1294.653897] active_file:13 inactive_file:14 isolated_file:0 [ 1294.653897] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1294.653897] slab_reclaimable:14302 slab_unreclaimable:136644 [ 1294.653897] mapped:52225 shmem:23315 pagetables:24587 bounce:0 [ 1294.653897] free:13908 free_pcp:0 free_cma:0 [ 1294.656250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1294.656254] Call Trace: [ 1294.656273] dump_stack+0x1b2/0x281 [ 1294.656288] warn_alloc.cold+0x96/0x1cc [ 1294.659375] Node 0 active_anon:626620kB inactive_anon:58644kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114892kB dirty:0kB writeback:0kB shmem:59768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 522240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1294.662800] ? zone_watermark_ok_safe+0x220/0x220 [ 1294.666858] Node 1 active_anon:6060kB inactive_anon:33260kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94008kB dirty:0kB writeback:0kB shmem:33492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1294.671225] ? usleep_range+0x130/0x130 [ 1294.674562] Node 0 [ 1294.678515] ? try_to_free_pages+0x23f/0x6e0 [ 1294.678524] ? _find_next_bit+0xdb/0x100 [ 1294.678534] ? run_timer_softirq+0x5a0/0x5a0 [ 1294.682405] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.687571] __alloc_pages_nodemask+0x2127/0x2720 [ 1294.687587] ? lock_acquire+0x170/0x3f0 [ 1294.690746] lowmem_reserve[]: [ 1294.698439] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1294.698452] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1294.705712] 0 [ 1294.707492] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1294.714731] 2717 [ 1294.716526] alloc_pages_current+0x155/0x260 [ 1294.716539] ion_page_pool_alloc+0x118/0x1b0 [ 1294.723784] 2718 [ 1294.731040] ion_system_heap_allocate+0x133/0x8c0 [ 1294.731049] ? ion_alloc+0x187/0x810 [ 1294.731059] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1294.732834] 2718 [ 1294.740087] ? ion_system_contig_heap_create+0x130/0x130 [ 1294.740095] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1294.740106] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1294.745442] 2718 [ 1294.747839] ion_alloc+0x204/0x810 [ 1294.747855] ? ion_dma_buf_release+0x40/0x40 [ 1294.789019] ? __might_fault+0x177/0x1b0 [ 1294.789033] ion_ioctl+0xea/0x1f0 [ 1294.789043] ? ion_query_heaps+0x360/0x360 [ 1294.798391] Node 0 [ 1294.800948] ? ion_query_heaps+0x360/0x360 [ 1294.804555] DMA32 free:17788kB min:36200kB low:45248kB high:54296kB active_anon:626580kB inactive_anon:58644kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36800kB pagetables:91784kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.808499] do_vfs_ioctl+0x75a/0xff0 [ 1294.808510] ? ioctl_preallocate+0x1a0/0x1a0 [ 1294.808521] ? lock_downgrade+0x740/0x740 [ 1294.836355] lowmem_reserve[]: [ 1294.841169] ? __fget+0x225/0x360 [ 1294.868310] 0 [ 1294.872280] ? do_vfs_ioctl+0xff0/0xff0 [ 1294.874488] 0 [ 1294.878894] ? security_file_ioctl+0x83/0xb0 [ 1294.878904] SyS_ioctl+0x7f/0xb0 [ 1294.878912] ? do_vfs_ioctl+0xff0/0xff0 [ 1294.878923] do_syscall_64+0x1d5/0x640 [ 1294.878940] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1294.882974] 0 [ 1294.887364] RIP: 0033:0x465f69 [ 1294.887369] RSP: 002b:00007fc9ca9e6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1294.887379] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1294.887387] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1294.912971] 0 [ 1294.917777] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1294.917783] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1294.917788] R13: 00007ffdf9c5846f R14: 00007fc9ca9e6300 R15: 0000000000022000 [ 1294.931286] 0 [ 1294.945045] 0 [ 1294.953471] 0 [ 1294.980558] Node 0 [ 1294.986689] Node 1 [ 1294.996609] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1295.002132] Normal free:26900kB min:53696kB low:67120kB high:80544kB active_anon:6060kB inactive_anon:33260kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2304kB pagetables:6564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1295.003661] lowmem_reserve[]: [ 1295.011458] lowmem_reserve[]: [ 1295.024061] 0 [ 1295.058921] 0 [ 1295.066894] 0 [ 1295.082564] 0 [ 1295.091351] 0 [ 1295.107811] 0 [ 1295.116068] 0 [ 1295.131212] 0 [ 1295.137367] 0 [ 1295.159386] 0 [ 1295.225638] Node 1 Normal free:26920kB min:53696kB low:67120kB high:80544kB active_anon:6060kB inactive_anon:33260kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2304kB pagetables:6564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1295.241149] Node 0 [ 1295.263773] lowmem_reserve[]: 0 0 0 0 0 [ 1295.270043] Node 0 DMA: 3*4kB (ME) 7*8kB (UME) 15*16kB (UE) 11*32kB (U) 9*64kB (UME) 8*128kB (UME) 10*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 10964kB [ 1295.272297] DMA: [ 1295.293550] Node 0 DMA32: 2101*4kB (UME) 457*8kB (MEH) 110*16kB (MEH) 30*32kB (UMEH) 25*64kB (UMH) 5*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17788kB [ 1295.300901] 3*4kB [ 1295.316890] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1295.329307] (ME) 7*8kB (UME) 15*16kB (UE) 11*32kB (U) 9*64kB (UME) 8*128kB (UME) 10*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 10964kB [ 1295.333727] Node 1 Normal: 230*4kB (UME) 61*8kB (M) 15*16kB (UM) 765*32kB (UM) 777*64kB (UM) 10*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 78160kB [ 1295.365767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1295.365773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1295.365779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1295.365784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1295.365788] 23342 total pagecache pages [ 1295.365801] 0 pages in swap cache [ 1295.389551] Node 0 [ 1295.408397] Swap cache stats: add 0, delete 0, find 0/0 [ 1295.440501] DMA32: 2101*4kB (UME) 457*8kB (MEH) 110*16kB (MEH) 30*32kB (UMEH) 194*64kB (UMH) 6*128kB (UH) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28732kB [ 1295.440979] Free swap = 0kB [ 1295.455510] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1295.469372] Node 1 Normal: 1*4kB (E) 0*8kB 2*16kB (UM) 700*32kB (UM) 767*64kB (U) 10*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 73572kB [ 1295.483599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1295.492489] Total swap = 0kB [ 1295.492498] 2097051 pages RAM [ 1295.493887] 0 pages HighMem/MovableOnly [ 1295.495911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1295.502913] 363840 pages reserved [ 1295.502917] 0 pages cma reserved [ 1295.555663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1295.564751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1295.573623] 24785 total pagecache pages [ 1295.577938] 0 pages in swap cache [ 1295.595646] Swap cache stats: add 0, delete 0, find 0/0 [ 1295.601205] Free swap = 0kB [ 1295.604355] Total swap = 0kB [ 1295.623380] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1295.635657] 2097051 pages RAM [ 1295.638784] 0 pages HighMem/MovableOnly [ 1295.642757] 363840 pages reserved [ 1295.647513] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1295.665652] 0 pages cma reserved [ 1295.669052] Out of memory (oom_kill_allocating_task): Kill process 7972 (syz-fuzzer) score 0 or sacrifice child [ 1295.701323] systemd[1]: Stopped Journal Service. [ 1295.712542] Killed process 11058 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1295.780166] oom_reaper: reaped process 11848 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1295.854114] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1295.876479] systemd cpuset=/ mems_allowed=0-1 [ 1295.881023] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.224-syzkaller #0 [ 1295.887949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1295.897299] Call Trace: [ 1295.899889] dump_stack+0x1b2/0x281 [ 1295.903519] dump_header+0x178/0x82f [ 1295.907232] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1295.912326] ? ___ratelimit+0x2cd/0x530 [ 1295.916282] oom_kill_process.cold+0x10/0xb18 [ 1295.920757] ? lock_downgrade+0x740/0x740 [ 1295.924975] out_of_memory+0x2dc/0x1190 [ 1295.928934] ? oom_killer_disable+0x1c0/0x1c0 [ 1295.933409] ? mutex_trylock+0x152/0x1a0 [ 1295.937455] __alloc_pages_nodemask+0x23e1/0x2720 [ 1295.942287] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1295.947121] alloc_pages_current+0x155/0x260 [ 1295.951510] filemap_fault+0xea3/0x1980 [ 1295.955469] ext4_filemap_fault+0x84/0xb0 [ 1295.959602] __do_fault+0xfa/0x380 [ 1295.963120] __handle_mm_fault+0x2497/0x4620 [ 1295.967513] ? vm_insert_page+0x7c0/0x7c0 [ 1295.971649] handle_mm_fault+0x391/0x860 [ 1295.975692] __do_page_fault+0x549/0xad0 [ 1295.979734] ? spurious_fault+0x640/0x640 [ 1295.983861] ? do_page_fault+0x60/0x500 [ 1295.987813] ? page_fault+0x2f/0x50 [ 1295.991416] page_fault+0x45/0x50 [ 1295.994853] RIP: c804b5b0: (null) [ 1295.999063] RSP: 0004:00007ffc9f179e20 EFLAGS: 00000000 [ 1296.025600] Mem-Info: [ 1296.033416] active_anon:157590 inactive_anon:22976 isolated_anon:0 [ 1296.033416] active_file:253 inactive_file:276 isolated_file:25 [ 1296.033416] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1296.033416] slab_reclaimable:14284 slab_unreclaimable:136484 [ 1296.033416] mapped:44034 shmem:23315 pagetables:24541 bounce:0 [ 1296.033416] free:18858 free_pcp:208 free_cma:0 [ 1296.108765] Node 0 active_anon:624352kB inactive_anon:58644kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114892kB dirty:0kB writeback:0kB shmem:59768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 520192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1296.141886] Node 1 active_anon:6008kB inactive_anon:33260kB active_file:340kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:59944kB dirty:0kB writeback:0kB shmem:33492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1296.181750] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1296.213290] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.215818] syz-executor.5 cpuset= [ 1296.254133] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1296.265599] / mems_allowed=0-1 [ 1296.266125] Node 0 DMA32 free:18752kB min:36200kB low:45248kB high:54296kB active_anon:624312kB inactive_anon:58644kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36800kB pagetables:91780kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.269262] CPU: 1 PID: 11848 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1296.298057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1296.298062] Call Trace: [ 1296.298083] dump_stack+0x1b2/0x281 [ 1296.298095] warn_alloc.cold+0x96/0x1cc [ 1296.298106] ? zone_watermark_ok_safe+0x220/0x220 [ 1296.298126] __alloc_pages_nodemask+0x2127/0x2720 [ 1296.298140] ? lock_acquire+0x170/0x3f0 [ 1296.298155] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1296.298172] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1296.298184] ? __mutex_unlock_slowpath+0x75/0x770 [ 1296.298192] ? retint_kernel+0x2d/0x2d [ 1296.298204] alloc_pages_current+0x155/0x260 [ 1296.298218] ion_page_pool_alloc+0x118/0x1b0 [ 1296.298230] ion_system_heap_allocate+0x133/0x8c0 [ 1296.306117] lowmem_reserve[]: [ 1296.315441] ? _raw_spin_unlock+0x29/0x40 [ 1296.318013] 0 [ 1296.321636] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1296.325593] 0 [ 1296.330409] ? ion_system_contig_heap_create+0x130/0x130 [ 1296.335219] 0 [ 1296.339179] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1296.339189] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1296.339201] ion_alloc+0x27a/0x810 [ 1296.344013] 0 [ 1296.349448] ? ion_dma_buf_release+0x40/0x40 [ 1296.349461] ? __might_fault+0x177/0x1b0 [ 1296.354284] 0 [ 1296.358156] ion_ioctl+0xea/0x1f0 [ 1296.358165] ? ion_query_heaps+0x360/0x360 [ 1296.358177] ? ion_query_heaps+0x360/0x360 [ 1296.366953] do_vfs_ioctl+0x75a/0xff0 [ 1296.366964] ? ioctl_preallocate+0x1a0/0x1a0 [ 1296.366974] ? lock_downgrade+0x740/0x740 [ 1296.371786] Node 0 [ 1296.374876] ? __fget+0x225/0x360 [ 1296.379016] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.380786] ? do_vfs_ioctl+0xff0/0xff0 [ 1296.385701] lowmem_reserve[]: [ 1296.387477] ? security_file_ioctl+0x83/0xb0 [ 1296.392895] 0 [ 1296.394680] SyS_ioctl+0x7f/0xb0 [ 1296.399682] 0 [ 1296.404496] ? do_vfs_ioctl+0xff0/0xff0 [ 1296.408023] 0 [ 1296.409797] do_syscall_64+0x1d5/0x640 [ 1296.414172] 0 0 [ 1296.418227] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1296.418237] RIP: 0033:0x465f69 [ 1296.423440] RSP: 002b:00007fc9ca9e6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1296.427671] Node 1 [ 1296.431869] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1296.435669] Normal free:51416kB min:53696kB low:67120kB high:80544kB active_anon:6008kB inactive_anon:33260kB active_file:592kB inactive_file:576kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6384kB bounce:0kB free_pcp:492kB local_pcp:120kB free_cma:0kB [ 1296.440030] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1296.440037] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1296.444158] lowmem_reserve[]: [ 1296.446372] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1296.446378] R13: 00007ffdf9c5846f R14: 00007fc9ca9e6300 R15: 0000000000022000 [ 1296.459543] warn_alloc_show_mem: 1 callbacks suppressed [ 1296.459546] Mem-Info: [ 1296.481598] 0 [ 1296.482014] active_anon:157590 inactive_anon:22976 isolated_anon:0 [ 1296.482014] active_file:37 inactive_file:20 isolated_file:25 [ 1296.482014] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1296.482014] slab_reclaimable:14284 slab_unreclaimable:136484 [ 1296.482014] mapped:43534 shmem:23315 pagetables:24541 bounce:0 [ 1296.482014] free:20293 free_pcp:0 free_cma:0 [ 1296.489736] 0 [ 1296.491581] Node 0 active_anon:624352kB inactive_anon:58644kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114892kB dirty:0kB writeback:0kB shmem:59768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 520192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1296.493385] 0 [ 1296.505598] Node 1 active_anon:6008kB inactive_anon:33260kB active_file:120kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:59244kB dirty:0kB writeback:0kB shmem:33492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1296.511447] 0 [ 1296.513320] Node 0 [ 1296.521504] 0 [ 1296.528177] DMA free:11004kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.559037] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1296.559060] Node 0 DMA32 free:18752kB min:36200kB low:45248kB high:54296kB active_anon:624312kB inactive_anon:58644kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36800kB pagetables:91780kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.559080] lowmem_reserve[]: 0 0 0 0 0 [ 1296.559101] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.559118] lowmem_reserve[]: [ 1296.570672] Node 0 [ 1296.575059] 0 [ 1296.576907] DMA: [ 1296.584152] 0 0 [ 1296.591554] 3*4kB [ 1296.597035] 0 [ 1296.599979] (ME) [ 1296.601089] 0 [ 1296.635325] 4*8kB [ 1296.665564] (ME) [ 1296.669946] Node 1 [ 1296.697082] 11*16kB [ 1296.698771] Normal free:51416kB min:53696kB low:67120kB high:80544kB active_anon:6008kB inactive_anon:33260kB active_file:592kB inactive_file:576kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6384kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.699276] (UE) [ 1296.725043] lowmem_reserve[]: [ 1296.730631] 11*32kB [ 1296.760035] 0 [ 1296.763372] (U) [ 1296.788530] 0 [ 1296.795111] 9*64kB [ 1296.795557] 0 [ 1296.797602] (UME) [ 1296.799554] 0 0 [ 1296.801686] 9*128kB [ 1296.803480] Node 0 [ 1296.806872] (UME) [ 1296.817176] DMA: [ 1296.844486] 10*256kB [ 1296.857234] 3*4kB [ 1296.857724] (UME) [ 1296.859609] (ME) [ 1296.861387] 4*512kB (UME) [ 1296.863515] 4*8kB (ME) [ 1296.865532] 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 11004kB [ 1296.865551] Node 0 DMA32: 2345*4kB (UME) [ 1296.867900] 11*16kB [ 1296.870097] 617*8kB [ 1296.872223] (UE) [ 1296.874261] (UMEH) [ 1296.876944] 11*32kB [ 1296.882542] 113*16kB [ 1296.883035] (U) [ 1296.886426] (UMEH) [ 1296.888498] 9*64kB [ 1296.894015] 31*32kB [ 1296.898217] (UME) [ 1296.904057] (UMEH) [ 1296.904827] 9*128kB [ 1296.907090] 4*64kB [ 1296.909494] (UME) [ 1296.911882] (H) [ 1296.913835] 10*256kB [ 1296.916250] 5*128kB [ 1296.918382] (UME) [ 1296.920657] (H) [ 1296.922788] 4*512kB [ 1296.925003] 3*256kB [ 1296.927554] (UME) [ 1296.929704] (H) [ 1296.931740] 2*1024kB [ 1296.933695] 0*512kB [ 1296.936342] (ME) [ 1296.938430] 0*1024kB [ 1296.940558] 1*2048kB [ 1296.942509] 0*2048kB [ 1296.944807] (E) [ 1296.948446] 0*4096kB [ 1296.962129] 0*4096kB [ 1296.962780] = 18780kB [ 1296.965171] = 11004kB [ 1296.968227] Node 0 [ 1296.970500] Node 0 [ 1296.971996] Normal: [ 1296.974384] DMA32: [ 1296.976929] 0*4kB [ 1296.979052] 2345*4kB [ 1296.981266] 0*8kB [ 1296.983567] (UME) [ 1296.985804] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 1296.987947] 617*8kB [ 1296.990337] 0*512kB [ 1296.992462] (UMEH) [ 1296.994591] 0*1024kB [ 1296.999916] 113*16kB [ 1297.002339] 0*2048kB [ 1297.004160] (UMEH) [ 1297.006407] 0*4096kB = 0kB [ 1297.006413] Node 1 Normal: 238*4kB (UME) [ 1297.011219] 31*32kB (UMEH) [ 1297.013619] 54*8kB [ 1297.015890] 4*64kB [ 1297.019185] (UM) [ 1297.022842] (H) [ 1297.025803] 43*16kB [ 1297.027998] 5*128kB (H) [ 1297.030218] (UM) [ 1297.032254] 3*256kB (H) [ 1297.034218] 1537*32kB [ 1297.036550] 0*512kB [ 1297.039199] (UM) [ 1297.041238] 0*1024kB [ 1297.043886] 0*64kB [ 1297.046395] 0*2048kB [ 1297.048692] 0*128kB [ 1297.050736] 0*4096kB [ 1297.053123] 0*256kB [ 1297.055338] = 18780kB [ 1297.057782] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51256kB [ 1297.057803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1297.060897] Node 0 [ 1297.062494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1297.064791] Normal: 0*4kB [ 1297.067452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1297.092290] 0*8kB [ 1297.094326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1297.095213] 0*16kB 0*32kB [ 1297.104292] syz-executor.5: [ 1297.132166] 23349 total pagecache pages [ 1297.141461] 0 pages in swap cache [ 1297.144913] Swap cache stats: add 0, delete 0, find 0/0 [ 1297.151375] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1297.157639] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1297.174993] Node 1 Normal: 238*4kB (UME) 54*8kB (UM) 43*16kB (UM) 1537*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51256kB [ 1297.180498] Free swap = 0kB [ 1297.191568] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1297.201316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1297.208099] CPU: 0 PID: 11845 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1297.218025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1297.222140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1297.227368] Call Trace: [ 1297.227388] dump_stack+0x1b2/0x281 [ 1297.227401] warn_alloc.cold+0x96/0x1cc [ 1297.227413] ? zone_watermark_ok_safe+0x220/0x220 [ 1297.227434] __alloc_pages_nodemask+0x2127/0x2720 [ 1297.227449] ? lock_acquire+0x170/0x3f0 [ 1297.227463] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1297.227479] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1297.248131] Total swap = 0kB [ 1297.251005] ? __mutex_unlock_slowpath+0x75/0x770 [ 1297.264380] 2097051 pages RAM [ 1297.264603] ? retint_kernel+0x2d/0x2d [ 1297.273530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1297.277869] alloc_pages_current+0x155/0x260 [ 1297.277886] ion_page_pool_alloc+0x118/0x1b0 [ 1297.277897] ion_system_heap_allocate+0x133/0x8c0 [ 1297.277909] ? _raw_spin_unlock+0x29/0x40 [ 1297.277919] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1297.277928] ? ion_system_contig_heap_create+0x130/0x130 [ 1297.277938] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1297.277948] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1297.293124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1297.293750] ion_alloc+0x27a/0x810 [ 1297.299962] 0 pages HighMem/MovableOnly [ 1297.302531] ? ion_dma_buf_release+0x40/0x40 [ 1297.319527] 23349 total pagecache pages [ 1297.321823] ? __might_fault+0x177/0x1b0 [ 1297.333676] 363840 pages reserved [ 1297.340219] ion_ioctl+0xea/0x1f0 [ 1297.340230] ? ion_query_heaps+0x360/0x360 [ 1297.340242] ? ion_query_heaps+0x360/0x360 [ 1297.340253] do_vfs_ioctl+0x75a/0xff0 [ 1297.340264] ? ioctl_preallocate+0x1a0/0x1a0 [ 1297.340273] ? lock_downgrade+0x740/0x740 [ 1297.340284] ? __fget+0x225/0x360 [ 1297.340293] ? do_vfs_ioctl+0xff0/0xff0 [ 1297.355913] 0 pages in swap cache [ 1297.356123] ? security_file_ioctl+0x83/0xb0 [ 1297.360158] Swap cache stats: add 0, delete 0, find 0/0 [ 1297.363594] SyS_ioctl+0x7f/0xb0 [ 1297.383887] 0 pages cma reserved [ 1297.387771] ? do_vfs_ioctl+0xff0/0xff0 [ 1297.387784] do_syscall_64+0x1d5/0x640 [ 1297.387801] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1297.387809] RIP: 0033:0x465f69 [ 1297.387814] RSP: 002b:00007fc9caa07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1297.387824] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1297.387830] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1297.387836] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1297.387841] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1297.387846] R13: 00007ffdf9c5846f R14: 00007fc9caa07300 R15: 0000000000022000 [ 1297.495376] Free swap = 0kB [ 1297.502690] Total swap = 0kB [ 1297.504628] Out of memory: Kill process 20088 (syz-executor.3) score 1005 or sacrifice child [ 1297.509235] 2097051 pages RAM [ 1297.521587] 0 pages HighMem/MovableOnly [ 1297.529723] 363840 pages reserved [ 1297.532784] syz-executor.5: [ 1297.533178] 0 pages cma reserved [ 1297.533185] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1297.577960] Killed process 20088 (syz-executor.3) total-vm:93252kB, anon-rss:2192kB, file-rss:34628kB, shmem-rss:0kB [ 1297.594881] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1297.604681] CPU: 0 PID: 11845 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1297.612573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1297.621923] Call Trace: [ 1297.624513] dump_stack+0x1b2/0x281 [ 1297.628139] warn_alloc.cold+0x96/0x1cc [ 1297.632108] ? zone_watermark_ok_safe+0x220/0x220 [ 1297.636944] ? usleep_range+0x130/0x130 [ 1297.640909] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1297.646009] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1297.651021] ? run_timer_softirq+0x5a0/0x5a0 [ 1297.655427] __alloc_pages_nodemask+0x2127/0x2720 [ 1297.655546] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1297.660265] ? lock_acquire+0x170/0x3f0 [ 1297.660279] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1297.680317] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1297.684813] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1297.690267] ? alloc_pages_current+0x123/0x260 [ 1297.694660] (null) [ 1297.694841] alloc_pages_current+0x155/0x260 [ 1297.701375] ion_page_pool_alloc+0x118/0x1b0 [ 1297.705783] ion_system_heap_allocate+0x133/0x8c0 [ 1297.710625] ? _raw_spin_unlock+0x29/0x40 [ 1297.711080] syz-executor.5 cpuset= [ 1297.714763] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1297.714768] / [ 1297.718290] ? ion_system_contig_heap_create+0x130/0x130 [ 1297.730352] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1297.735365] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1297.739049] mems_allowed=0-1 [ 1297.740202] ion_alloc+0x27a/0x810 [ 1297.746831] ? ion_dma_buf_release+0x40/0x40 [ 1297.751245] ? __might_fault+0x177/0x1b0 [ 1297.755298] ion_ioctl+0xea/0x1f0 [ 1297.758742] ? ion_query_heaps+0x360/0x360 [ 1297.762968] ? ion_query_heaps+0x360/0x360 [ 1297.767189] do_vfs_ioctl+0x75a/0xff0 [ 1297.770988] ? ioctl_preallocate+0x1a0/0x1a0 [ 1297.775386] ? lock_downgrade+0x740/0x740 [ 1297.779529] ? __fget+0x225/0x360 [ 1297.782973] ? do_vfs_ioctl+0xff0/0xff0 [ 1297.786944] ? security_file_ioctl+0x83/0xb0 [ 1297.791348] SyS_ioctl+0x7f/0xb0 [ 1297.794703] ? do_vfs_ioctl+0xff0/0xff0 [ 1297.798675] do_syscall_64+0x1d5/0x640 [ 1297.802559] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1297.807736] RIP: 0033:0x465f69 [ 1297.810916] RSP: 002b:00007fc9caa07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1297.818616] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1297.825881] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1297.833145] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1297.840419] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1297.847693] R13: 00007ffdf9c5846f R14: 00007fc9caa07300 R15: 0000000000022000 [ 1297.854975] CPU: 1 PID: 11848 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1297.862866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1297.872217] Call Trace: [ 1297.874807] dump_stack+0x1b2/0x281 [ 1297.878419] warn_alloc.cold+0x96/0x1cc [ 1297.882397] ? zone_watermark_ok_safe+0x220/0x220 [ 1297.887229] ? usleep_range+0x130/0x130 [ 1297.891239] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1297.896408] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1297.901433] ? run_timer_softirq+0x5a0/0x5a0 [ 1297.905840] __alloc_pages_nodemask+0x2127/0x2720 [ 1297.910669] ? lock_acquire+0x170/0x3f0 [ 1297.914626] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1297.919451] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1297.923933] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1297.929368] ? retint_kernel+0x2d/0x2d [ 1297.933240] alloc_pages_current+0x155/0x260 [ 1297.937650] ion_page_pool_alloc+0x118/0x1b0 [ 1297.942057] ion_system_heap_allocate+0x133/0x8c0 [ 1297.946895] ? _raw_spin_unlock+0x29/0x40 [ 1297.951030] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1297.955942] ? ion_system_contig_heap_create+0x130/0x130 [ 1297.961372] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1297.966370] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1297.971197] ion_alloc+0x27a/0x810 [ 1297.974722] ? ion_dma_buf_release+0x40/0x40 [ 1297.979118] ? __might_fault+0x177/0x1b0 [ 1297.983161] ion_ioctl+0xea/0x1f0 [ 1297.986595] ? ion_query_heaps+0x360/0x360 [ 1297.990815] ? ion_query_heaps+0x360/0x360 [ 1297.995029] do_vfs_ioctl+0x75a/0xff0 [ 1297.998811] ? ioctl_preallocate+0x1a0/0x1a0 [ 1298.003197] ? lock_downgrade+0x740/0x740 [ 1298.007328] ? __fget+0x225/0x360 [ 1298.010761] ? do_vfs_ioctl+0xff0/0xff0 [ 1298.014715] ? security_file_ioctl+0x83/0xb0 [ 1298.019104] SyS_ioctl+0x7f/0xb0 [ 1298.022448] ? do_vfs_ioctl+0xff0/0xff0 [ 1298.026404] do_syscall_64+0x1d5/0x640 [ 1298.030297] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1298.035466] RIP: 0033:0x465f69 [ 1298.038636] RSP: 002b:00007fc9ca9e6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1298.046325] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1298.053584] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1298.060833] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1298.068082] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1298.075330] R13: 00007ffdf9c5846f R14: 00007fc9ca9e6300 R15: 0000000000022000 [ 1298.088606] warn_alloc_show_mem: 1 callbacks suppressed [ 1298.088609] Mem-Info: [ 1298.096518] active_anon:157590 inactive_anon:22976 isolated_anon:0 [ 1298.096518] active_file:17 inactive_file:17 isolated_file:0 [ 1298.096518] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1298.096518] slab_reclaimable:14219 slab_unreclaimable:136317 [ 1298.096518] mapped:43521 shmem:23315 pagetables:24541 bounce:0 [ 1298.096518] free:14062 free_pcp:176 free_cma:0 [ 1298.117143] oom_reaper: reaped process 20088 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1298.133772] Node 0 active_anon:622220kB inactive_anon:58644kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114892kB dirty:0kB writeback:0kB shmem:59768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 520192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1298.189209] Node 1 active_anon:6008kB inactive_anon:33260kB active_file:36kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59192kB dirty:0kB writeback:0kB shmem:33492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1298.265504] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1298.305165] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1298.315443] Node 0 DMA32 free:68268kB min:36200kB low:45248kB high:54296kB active_anon:622180kB inactive_anon:58644kB active_file:36kB inactive_file:776kB unevictable:0kB writepending:8kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36736kB pagetables:91684kB bounce:0kB free_pcp:1212kB local_pcp:644kB free_cma:0kB [ 1298.421382] lowmem_reserve[]: 0 0 0 0 0 [ 1298.441542] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1298.446015] systemd[1]: Starting Journal Service... [ 1298.499445] lowmem_reserve[]: 0 0 0 0 0 [ 1298.503463] Node 1 Normal free:457944kB min:53696kB low:67120kB high:80544kB active_anon:6308kB inactive_anon:33260kB active_file:1764kB inactive_file:3324kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2304kB pagetables:6532kB bounce:0kB free_pcp:392kB local_pcp:312kB free_cma:0kB [ 1298.529396] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1298.575751] lowmem_reserve[]: 0 0 0 0 0 [ 1298.588790] Node 0 DMA: 4*4kB (UME) 5*8kB (UME) 3*16kB (UE) 0*32kB 4*64kB (UME) 8*128kB (UME) 10*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 11112kB [ 1298.609814] Node 0 DMA32: 1468*4kB (UME) 508*8kB (UME) 103*16kB (UME) 18*32kB (ME) 310*64kB (UM) 32*128kB (U) 5*256kB (U) 7*512kB (U) 0*1024kB 2*2048kB (UM) 0*4096kB = 45056kB [ 1298.659252] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1298.692524] Node 1 Normal: 2*4kB (ME) 2*8kB (UM) 2*16kB (UM) 0*32kB 2727*64kB (U) 695*128kB (U) 24*256kB (U) 1*512kB (M) 7*1024kB (U) 0*2048kB 0*4096kB = 277368kB [ 1298.717697] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1298.728390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1298.737364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1298.746361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1298.754932] 25642 total pagecache pages [ 1298.759232] 0 pages in swap cache [ 1298.762684] Swap cache stats: add 0, delete 0, find 0/0 [ 1298.768855] Free swap = 0kB [ 1298.771869] Total swap = 0kB [ 1298.774878] 2097051 pages RAM [ 1298.778324] 0 pages HighMem/MovableOnly [ 1298.782957] 363840 pages reserved [ 1298.786716] 0 pages cma reserved [ 1298.981178] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1299.007571] systemd-journald[11869]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1299.137946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.144679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.195802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.202624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.227157] device bridge_slave_1 left promiscuous mode [ 1299.232718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.276225] device bridge_slave_0 left promiscuous mode [ 1299.281775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.298143] device veth1_macvtap left promiscuous mode [ 1299.303479] device veth0_macvtap left promiscuous mode [ 1299.325396] device veth1_vlan left promiscuous mode [ 1299.330528] device veth0_vlan left promiscuous mode [ 1299.769052] device hsr_slave_1 left promiscuous mode [ 1299.795153] device hsr_slave_0 left promiscuous mode [ 1300.171003] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1300.183395] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1300.188658] CPU: 1 PID: 4245 Comm: ion_system_heap Not tainted 4.14.224-syzkaller #0 [ 1300.196530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1300.205875] Call Trace: [ 1300.208455] dump_stack+0x1b2/0x281 [ 1300.212076] dump_header+0x178/0x82f [ 1300.215782] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1300.220875] ? ___ratelimit+0x2cd/0x530 [ 1300.224842] oom_kill_process.cold+0x10/0xb18 [ 1300.229336] ? lock_downgrade+0x740/0x740 [ 1300.233479] out_of_memory+0x2dc/0x1190 [ 1300.237448] ? oom_killer_disable+0x1c0/0x1c0 [ 1300.241934] ? mutex_trylock+0x152/0x1a0 [ 1300.245990] __alloc_pages_nodemask+0x23e1/0x2720 [ 1300.250839] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1300.255682] ? kmem_cache_alloc_node_trace+0x153/0x400 [ 1300.260956] ? cache_grow_begin+0x41/0x630 [ 1300.265185] cache_grow_begin+0x91/0x630 [ 1300.269305] ? cache_grow_begin+0x91/0x630 [ 1300.273559] fallback_alloc+0x207/0x2c0 [ 1300.277567] kmem_cache_alloc_node_trace+0xed/0x400 [ 1300.282603] alloc_vmap_area+0xf0/0x7c0 [ 1300.286566] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1300.292010] ? purge_vmap_area_lazy+0xb0/0xb0 [ 1300.296528] ? __get_vm_area_node+0xed/0x340 [ 1300.300914] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1300.306168] __get_vm_area_node+0x126/0x340 [ 1300.310467] vmap+0xd5/0x290 [ 1300.313516] ? ion_heap_clear_pages+0x23/0x70 [ 1300.318036] ? vunmap+0x50/0x50 [ 1300.321295] ? __vunmap+0x21c/0x300 [ 1300.324900] ion_heap_clear_pages+0x23/0x70 [ 1300.329201] ion_heap_sglist_zero+0x165/0x220 [ 1300.333692] ? ion_heap_clear_pages+0x70/0x70 [ 1300.338166] ? finish_task_switch+0x178/0x610 [ 1300.342644] ? pagerange_is_ram_callback+0x100/0x100 [ 1300.347725] ? ion_heap_deferred_free+0x222/0x470 [ 1300.352547] ion_system_heap_free+0x1d0/0x240 [ 1300.357037] ion_buffer_destroy+0x132/0x190 [ 1300.361355] ion_heap_deferred_free+0x22a/0x470 [ 1300.366001] ? __schedule+0x857/0x1de0 [ 1300.369866] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1300.374513] ? wait_woken+0x230/0x230 [ 1300.378297] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1300.383396] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1300.388060] kthread+0x30d/0x420 [ 1300.391401] ? kthread_create_on_node+0xd0/0xd0 [ 1300.396045] ret_from_fork+0x24/0x30 [ 1300.400697] Mem-Info: [ 1300.403117] active_anon:157245 inactive_anon:25007 isolated_anon:0 [ 1300.403117] active_file:32 inactive_file:11 isolated_file:0 [ 1300.403117] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1300.403117] slab_reclaimable:14212 slab_unreclaimable:133548 [ 1300.403117] mapped:43874 shmem:25359 pagetables:24535 bounce:0 [ 1300.403117] free:25188 free_pcp:29 free_cma:0 [ 1300.436699] Node 0 active_anon:621792kB inactive_anon:58580kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114980kB dirty:0kB writeback:0kB shmem:59760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 518144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1300.464505] Node 1 active_anon:7188kB inactive_anon:41448kB active_file:36kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60516kB dirty:0kB writeback:0kB shmem:41676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1300.491775] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1300.518254] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1300.523294] Node 0 DMA32 free:36180kB min:36200kB low:45248kB high:54296kB active_anon:621752kB inactive_anon:58580kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36704kB pagetables:91576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1300.552234] lowmem_reserve[]: 0 0 0 0 0 [ 1300.590397] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1300.666774] lowmem_reserve[]: 0 0 0 0 0 [ 1300.670796] Node 1 Normal free:53516kB min:53696kB low:67120kB high:80544kB active_anon:7188kB inactive_anon:41448kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2336kB pagetables:6564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1300.722452] lowmem_reserve[]: 0 0 0 0 0 [ 1300.726502] Node 0 DMA: 4*4kB (UME) 4*8kB (ME) 2*16kB (E) 1*32kB (U) 3*64kB (UME) 8*128kB (UME) 10*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 11056kB [ 1300.765219] Node 0 DMA32: 2332*4kB (UME) 411*8kB (UME) 106*16kB (UME) 21*32kB (UME) 27*64kB (ME) 1*128kB (E) 0*256kB 0*512kB 1*1024kB (U) 9*2048kB (UM) 0*4096kB = 36296kB [ 1300.834594] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1300.940780] Node 1 Normal: 290*4kB (ME) 103*8kB (UM) 43*16kB (UM) 31*32kB (M) 53*64kB (UM) 153*128kB (UM) 87*256kB (UM) 5*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 53520kB [ 1301.249145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1301.285211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1301.293812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1301.381869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1301.390521] 25390 total pagecache pages [ 1301.394495] 0 pages in swap cache [ 1301.432526] Swap cache stats: add 0, delete 0, find 0/0 [ 1301.456391] Free swap = 0kB [ 1301.459413] Total swap = 0kB [ 1301.462424] 2097051 pages RAM [ 1301.465554] 0 pages HighMem/MovableOnly [ 1301.469514] 363840 pages reserved [ 1301.472950] 0 pages cma reserved [ 1301.570987] Out of memory: Kill process 20124 (syz-executor.3) score 1005 or sacrifice child [ 1301.583583] Killed process 20124 (syz-executor.3) total-vm:93252kB, anon-rss:2192kB, file-rss:34628kB, shmem-rss:0kB [ 1301.699383] oom_reaper: reaped process 20124 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1301.856928] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1301.892495] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1301.912971] CPU: 0 PID: 15886 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 1301.920527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1301.929877] Call Trace: [ 1301.932467] dump_stack+0x1b2/0x281 [ 1301.936093] dump_header+0x178/0x82f [ 1301.939802] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1301.944898] ? ___ratelimit+0x2cd/0x530 [ 1301.948875] oom_kill_process.cold+0x10/0xb18 [ 1301.953391] out_of_memory+0xe3e/0x1190 [ 1301.957365] ? oom_killer_disable+0x1c0/0x1c0 [ 1301.961851] ? mutex_trylock+0x152/0x1a0 [ 1301.965912] __alloc_pages_nodemask+0x23e1/0x2720 [ 1301.970763] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1301.975613] alloc_pages_current+0x155/0x260 [ 1301.980015] filemap_fault+0xea3/0x1980 [ 1301.983993] ext4_filemap_fault+0x84/0xb0 [ 1301.988134] __do_fault+0xfa/0x380 [ 1301.991682] __handle_mm_fault+0x2497/0x4620 [ 1301.996087] ? vm_insert_page+0x7c0/0x7c0 [ 1302.000240] handle_mm_fault+0x391/0x860 [ 1302.004301] __do_page_fault+0x549/0xad0 [ 1302.008361] ? spurious_fault+0x640/0x640 [ 1302.012503] ? do_page_fault+0x60/0x500 [ 1302.016471] ? page_fault+0x2f/0x50 [ 1302.020090] page_fault+0x45/0x50 [ 1302.023534] RIP: 657c780:0xc0000681e0 [ 1302.027321] RSP: 02b7:000000c000aa1e30 EFLAGS: 00000003 [ 1302.028914] team0 (unregistering): Port device team_slave_1 removed [ 1302.119008] Mem-Info: [ 1302.121468] active_anon:156708 inactive_anon:25007 isolated_anon:0 [ 1302.121468] active_file:42 inactive_file:0 isolated_file:0 [ 1302.121468] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1302.121468] slab_reclaimable:14212 slab_unreclaimable:133572 [ 1302.121468] mapped:43852 shmem:25359 pagetables:24510 bounce:0 [ 1302.121468] free:25202 free_pcp:30 free_cma:0 [ 1302.180061] Node 0 active_anon:619644kB inactive_anon:58580kB active_file:36kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114896kB dirty:0kB writeback:0kB shmem:59760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 516096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1302.274261] Node 1 active_anon:7188kB inactive_anon:41448kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60512kB dirty:0kB writeback:0kB shmem:41676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1302.355085] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1302.467303] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1302.472374] Node 0 DMA32 free:36200kB min:36200kB low:45248kB high:54296kB active_anon:619604kB inactive_anon:58580kB active_file:124kB inactive_file:76kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36672kB pagetables:91476kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1302.533985] lowmem_reserve[]: 0 0 0 0 0 [ 1302.545205] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1302.661485] lowmem_reserve[]: 0 0 0 0 0 [ 1302.667125] Node 1 Normal free:53552kB min:53696kB low:67120kB high:80544kB active_anon:7188kB inactive_anon:41448kB active_file:124kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2336kB pagetables:6564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1302.725577] lowmem_reserve[]: 0 0 0 0 0 [ 1302.729622] Node 0 DMA: 4*4kB (UME) 4*8kB (ME) 2*16kB (E) 1*32kB (U) 3*64kB (UME) 8*128kB (UME) 10*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 11056kB [ 1302.765631] team0 (unregistering): Port device team_slave_0 removed [ 1302.821301] Node 0 DMA32: 2337*4kB (UME) 424*8kB (UME) 105*16kB (UME) 22*32kB (UME) 27*64kB (ME) 2*128kB (UE) 1*256kB (U) 1*512kB (U) 0*1024kB 9*2048kB (UM) 0*4096kB = 36308kB [ 1302.841330] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1302.852708] Node 1 Normal: 288*4kB (ME) 102*8kB (UM) 44*16kB (UM) 32*32kB (M) 53*64kB (UM) 153*128kB (UM) 87*256kB (UM) 5*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 53552kB [ 1302.870828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1302.879802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1302.879822] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1302.888446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1302.888471] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1302.913367] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1302.913628] 25406 total pagecache pages [ 1302.924423] 0 pages in swap cache [ 1302.927928] Swap cache stats: add 0, delete 0, find 0/0 [ 1302.933291] Free swap = 0kB [ 1302.936372] Total swap = 0kB [ 1302.939390] 2097051 pages RAM [ 1302.942486] 0 pages HighMem/MovableOnly [ 1302.946503] 363840 pages reserved [ 1302.949950] 0 pages cma reserved [ 1302.950510] bond0 (unregistering): Released all slaves [ 1302.953308] Out of memory (oom_kill_allocating_task): Kill process 15886 (syz-fuzzer) score 0 or sacrifice child [ 1302.969035] Killed process 9357 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1302.989321] oom_reaper: reaped process 9357 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1303.398723] oom_reaper: reaped process 11802 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1303.549777] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1303.588943] systemd cpuset=/ mems_allowed=0-1 [ 1303.593498] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.224-syzkaller #0 [ 1303.600417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.609764] Call Trace: [ 1303.612354] dump_stack+0x1b2/0x281 [ 1303.615977] dump_header+0x178/0x82f [ 1303.619682] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1303.624775] ? ___ratelimit+0x2cd/0x530 [ 1303.628740] oom_kill_process.cold+0x10/0xb18 [ 1303.633236] ? lock_downgrade+0x740/0x740 [ 1303.637397] out_of_memory+0x2dc/0x1190 [ 1303.641377] ? oom_killer_disable+0x1c0/0x1c0 [ 1303.645864] ? mutex_trylock+0x152/0x1a0 [ 1303.649917] __alloc_pages_nodemask+0x23e1/0x2720 [ 1303.654758] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1303.659607] alloc_pages_current+0x155/0x260 [ 1303.664008] filemap_fault+0xea3/0x1980 [ 1303.667982] ext4_filemap_fault+0x84/0xb0 [ 1303.672119] __do_fault+0xfa/0x380 [ 1303.675651] __handle_mm_fault+0x2497/0x4620 [ 1303.680051] ? vm_insert_page+0x7c0/0x7c0 [ 1303.684199] handle_mm_fault+0x391/0x860 [ 1303.688257] __do_page_fault+0x549/0xad0 [ 1303.692311] ? spurious_fault+0x640/0x640 [ 1303.696449] ? do_page_fault+0x60/0x500 [ 1303.700413] ? page_fault+0x2f/0x50 [ 1303.704037] page_fault+0x45/0x50 [ 1303.707475] RIP: 9f179da8: (null) [ 1303.711691] RSP: 9f179c70:00007ffc9f179c60 EFLAGS: 7f3462491ea9 [ 1303.720008] Mem-Info: [ 1303.729240] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1303.730330] active_anon:156169 inactive_anon:25007 isolated_anon:0 [ 1303.730330] active_file:61 inactive_file:0 isolated_file:0 [ 1303.730330] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1303.730330] slab_reclaimable:14212 slab_unreclaimable:131985 [ 1303.730330] mapped:35177 shmem:25359 pagetables:24473 bounce:0 [ 1303.730330] free:13895 free_pcp:60 free_cma:0 [ 1303.764956] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1303.781847] Node 0 active_anon:617532kB inactive_anon:58580kB active_file:72kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114896kB dirty:0kB writeback:0kB shmem:59760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 516096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1303.804969] CPU: 0 PID: 11802 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1303.816648] Node 1 active_anon:7144kB inactive_anon:41448kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25812kB dirty:0kB writeback:0kB shmem:41676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1303.817579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.851572] Node 0 [ 1303.853970] Call Trace: [ 1303.853980] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1303.853985] lowmem_reserve[]: [ 1303.856215] dump_stack+0x1b2/0x281 [ 1303.856229] warn_alloc.cold+0x96/0x1cc [ 1303.856240] ? zone_watermark_ok_safe+0x220/0x220 [ 1303.856250] ? usleep_range+0x130/0x130 [ 1303.856257] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1303.856269] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1303.858843] 0 [ 1303.884418] ? run_timer_softirq+0x5a0/0x5a0 [ 1303.884433] __alloc_pages_nodemask+0x2127/0x2720 [ 1303.884448] ? lock_acquire+0x170/0x3f0 [ 1303.884461] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1303.884472] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1303.884491] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1303.884506] ? alloc_pages_current+0x16/0x260 [ 1303.884516] alloc_pages_current+0x155/0x260 [ 1303.884526] ion_page_pool_alloc+0x118/0x1b0 [ 1303.884537] ion_system_heap_allocate+0x133/0x8c0 [ 1303.894433] 2717 [ 1303.895212] ? ion_alloc+0x187/0x810 [ 1303.895223] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1303.895233] ? ion_system_contig_heap_create+0x130/0x130 [ 1303.895242] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1303.895253] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1303.895264] ion_alloc+0x204/0x810 [ 1303.900084] 2718 [ 1303.904046] ? ion_dma_buf_release+0x40/0x40 [ 1303.916756] 2718 [ 1303.920563] ? __might_fault+0x177/0x1b0 [ 1303.930495] 2718 [ 1303.934175] ion_ioctl+0xea/0x1f0 [ 1303.944072] ? ion_query_heaps+0x360/0x360 [ 1303.953572] Node 0 [ 1303.957322] ? SyS_write+0x1b7/0x210 [ 1303.957341] ? ion_query_heaps+0x360/0x360 [ 1303.957351] do_vfs_ioctl+0x75a/0xff0 [ 1303.957364] ? ioctl_preallocate+0x1a0/0x1a0 [ 1303.957372] ? lock_downgrade+0x740/0x740 [ 1303.957384] ? __fget+0x225/0x360 [ 1303.957392] ? do_vfs_ioctl+0xff0/0xff0 [ 1303.957402] ? security_file_ioctl+0x83/0xb0 [ 1303.957411] SyS_ioctl+0x7f/0xb0 [ 1303.964626] DMA32 free:18332kB min:36200kB low:45248kB high:54296kB active_anon:617428kB inactive_anon:58580kB active_file:84kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36640kB pagetables:91472kB bounce:0kB free_pcp:120kB local_pcp:4kB free_cma:0kB [ 1303.967980] ? do_vfs_ioctl+0xff0/0xff0 [ 1303.967992] do_syscall_64+0x1d5/0x640 [ 1303.968009] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1303.968016] RIP: 0033:0x465f69 [ 1303.968020] RSP: 002b:00007f202b29f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1303.968029] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1303.968035] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1303.968040] RBP: 00007f202b29f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1303.968046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1303.968050] R13: 00007ffe34c2804f R14: 00007f202b29f300 R15: 0000000000022000 [ 1304.143916] lowmem_reserve[]: 0 0 0 0 0 [ 1304.147972] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1304.175692] lowmem_reserve[]: 0 0 0 0 0 [ 1304.179717] Node 1 Normal free:27136kB min:53696kB low:67120kB high:80544kB active_anon:7092kB inactive_anon:41448kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2304kB pagetables:6388kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1304.210556] lowmem_reserve[]: 0 0 0 0 0 [ 1304.214553] Node 0 DMA: 3*4kB (ME) 4*8kB (ME) 3*16kB (UE) 0*32kB 2*64kB (ME) 8*128kB (UME) 10*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 10972kB [ 1304.231728] Node 0 DMA32: 2355*4kB (UME) 415*8kB (UME) 106*16kB (UME) 21*32kB (UME) 29*64kB (UME) 1*128kB (E) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 18372kB [ 1304.251258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1304.262043] warn_alloc_show_mem: 1 callbacks suppressed [ 1304.262047] Mem-Info: [ 1304.273963] active_anon:156136 inactive_anon:25007 isolated_anon:0 [ 1304.273963] active_file:17 inactive_file:17 isolated_file:0 [ 1304.273963] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1304.273963] slab_reclaimable:14212 slab_unreclaimable:131903 [ 1304.273963] mapped:35153 shmem:25359 pagetables:24464 bounce:0 [ 1304.273963] free:14110 free_pcp:67 free_cma:0 [ 1304.311705] Node 1 Normal: 306*4kB (UME) 105*8kB (UM) 45*16kB (UM) 33*32kB (M) 52*64kB (UM) 16*128kB (M) 52*256kB (UM) 5*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 27136kB [ 1304.331392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1304.340284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1304.352921] Node 0 active_anon:617452kB inactive_anon:58580kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114896kB dirty:0kB writeback:0kB shmem:59760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 514048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1304.385018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1304.393857] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1304.404511] 25393 total pagecache pages [ 1304.410531] 0 pages in swap cache [ 1304.414004] Swap cache stats: add 0, delete 0, find 0/0 [ 1304.421560] Node 1 active_anon:7092kB inactive_anon:41448kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25716kB dirty:0kB writeback:0kB shmem:41676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1304.452703] Free swap = 0kB [ 1304.455877] Total swap = 0kB [ 1304.458887] 2097051 pages RAM [ 1304.461978] 0 pages HighMem/MovableOnly [ 1304.469958] 363840 pages reserved [ 1304.473405] 0 pages cma reserved [ 1304.476811] Out of memory: Kill process 20150 (syz-executor.3) score 1005 or sacrifice child [ 1304.489404] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1304.503117] Killed process 20150 (syz-executor.3) total-vm:93252kB, anon-rss:2192kB, file-rss:34628kB, shmem-rss:0kB [ 1304.519060] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1304.531389] Node 0 DMA32 free:18332kB min:36200kB low:45248kB high:54296kB active_anon:617412kB inactive_anon:58580kB active_file:164kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36608kB pagetables:91468kB bounce:0kB free_pcp:148kB local_pcp:16kB free_cma:0kB [ 1304.564603] lowmem_reserve[]: 0 0 0 0 0 [ 1304.568654] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1304.582758] oom_reaper: reaped process 20150 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1304.597794] lowmem_reserve[]: 0 0 0 0 0 [ 1304.608235] Node 1 Normal free:27136kB min:53696kB low:67120kB high:80544kB active_anon:7092kB inactive_anon:41448kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2304kB pagetables:6388kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1304.627940] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1304.646486] lowmem_reserve[]: 0 0 0 0 0 [ 1304.664932] Node 0 DMA: 3*4kB (ME) 4*8kB (ME) 3*16kB (UE) 0*32kB 2*64kB (ME) 8*128kB (UME) 10*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 10972kB [ 1304.689801] Node 0 DMA32: 2383*4kB (UME) 423*8kB (UME) 104*16kB (ME) 22*32kB (UME) 29*64kB (UME) 2*128kB (UE) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 0*4096kB = 20724kB [ 1304.698512] (null) [ 1304.711711] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1304.724663] Node 1 Normal: 306*4kB (UME) 104*8kB (M) 45*16kB (UM) 33*32kB (M) 52*64kB (UM) 17*128kB (UM) 52*256kB (UM) 5*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 27256kB [ 1304.746685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1304.759719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1304.770442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1304.773975] , order=0, oom_score_adj=0 [ 1304.782768] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1304.802020] 25405 total pagecache pages [ 1304.804827] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1304.807828] 0 pages in swap cache [ 1304.811899] CPU: 0 PID: 4245 Comm: ion_system_heap Not tainted 4.14.224-syzkaller #0 [ 1304.814832] Swap cache stats: add 0, delete 0, find 0/0 [ 1304.822683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1304.822687] Call Trace: [ 1304.822703] dump_stack+0x1b2/0x281 [ 1304.822714] dump_header+0x178/0x82f [ 1304.822724] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1304.822733] ? ___ratelimit+0x2cd/0x530 [ 1304.822742] oom_kill_process.cold+0x10/0xb18 [ 1304.822753] ? lock_downgrade+0x740/0x740 [ 1304.822767] out_of_memory+0x2dc/0x1190 [ 1304.822779] ? oom_killer_disable+0x1c0/0x1c0 [ 1304.822785] ? mutex_trylock+0x152/0x1a0 [ 1304.822795] __alloc_pages_nodemask+0x23e1/0x2720 [ 1304.822814] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1304.822830] ? ion_heap_sglist_zero+0x165/0x220 [ 1304.836563] Free swap = 0kB [ 1304.837514] ? cache_grow_begin+0x41/0x630 [ 1304.840085] Total swap = 0kB [ 1304.843693] cache_grow_begin+0x91/0x630 [ 1304.852440] 2097051 pages RAM [ 1304.852466] ? cache_grow_begin+0x91/0x630 [ 1304.859836] 0 pages HighMem/MovableOnly [ 1304.860913] fallback_alloc+0x207/0x2c0 [ 1304.870042] 363840 pages reserved [ 1304.873495] kmem_cache_alloc_node_trace+0xed/0x400 [ 1304.881091] 0 pages cma reserved [ 1304.882400] __get_vm_area_node+0xed/0x340 [ 1304.937506] vmap+0xd5/0x290 [ 1304.940532] ? ion_heap_clear_pages+0x23/0x70 [ 1304.945029] ? vunmap+0x50/0x50 [ 1304.948312] ? __vunmap+0x21c/0x300 [ 1304.951947] ion_heap_clear_pages+0x23/0x70 [ 1304.956266] ion_heap_sglist_zero+0x165/0x220 [ 1304.960758] ? ion_heap_clear_pages+0x70/0x70 [ 1304.965250] ? finish_task_switch+0x178/0x610 [ 1304.969757] ? pagerange_is_ram_callback+0x100/0x100 [ 1304.974859] ? ion_heap_deferred_free+0x222/0x470 [ 1304.979703] ion_system_heap_free+0x1d0/0x240 [ 1304.984204] ion_buffer_destroy+0x132/0x190 [ 1304.988530] ion_heap_deferred_free+0x22a/0x470 [ 1304.993195] ? __schedule+0x857/0x1de0 [ 1304.997082] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1305.001751] ? wait_woken+0x230/0x230 [ 1305.005550] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1305.010650] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1305.015318] kthread+0x30d/0x420 [ 1305.018678] ? kthread_create_on_node+0xd0/0xd0 [ 1305.023346] ret_from_fork+0x24/0x30 [ 1305.767891] Mem-Info: [ 1305.770981] active_anon:155060 inactive_anon:25007 isolated_anon:0 [ 1305.770981] active_file:742 inactive_file:1983 isolated_file:0 [ 1305.770981] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1305.770981] slab_reclaimable:14212 slab_unreclaimable:131599 [ 1305.770981] mapped:36978 shmem:25359 pagetables:24439 bounce:0 [ 1305.770981] free:84678 free_pcp:157 free_cma:0 [ 1305.810014] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1305.822055] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1305.830405] CPU: 1 PID: 11802 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1305.838303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1305.847658] Call Trace: [ 1305.850252] dump_stack+0x1b2/0x281 [ 1305.853883] warn_alloc.cold+0x96/0x1cc [ 1305.857861] ? zone_watermark_ok_safe+0x220/0x220 [ 1305.862718] __alloc_pages_nodemask+0x2127/0x2720 [ 1305.867560] ? __phys_addr+0x73/0xe0 [ 1305.871277] ? lock_acquire+0x170/0x3f0 [ 1305.875256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1305.880105] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1305.885565] ? __mutex_unlock_slowpath+0x75/0x770 [ 1305.890413] alloc_pages_current+0x155/0x260 [ 1305.894939] ion_page_pool_alloc+0x118/0x1b0 [ 1305.899354] ion_system_heap_allocate+0x133/0x8c0 [ 1305.904203] ? _raw_spin_unlock+0x29/0x40 [ 1305.908353] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1305.913289] ? ion_system_contig_heap_create+0x130/0x130 [ 1305.918743] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1305.923755] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1305.928601] ion_alloc+0x27a/0x810 [ 1305.932142] ? ion_dma_buf_release+0x40/0x40 [ 1305.936548] ? __might_fault+0x177/0x1b0 [ 1305.940612] ion_ioctl+0xea/0x1f0 [ 1305.944062] ? ion_query_heaps+0x360/0x360 [ 1305.948292] ? SyS_write+0x1b7/0x210 [ 1305.952115] ? ion_query_heaps+0x360/0x360 [ 1305.956357] do_vfs_ioctl+0x75a/0xff0 [ 1305.960164] ? ioctl_preallocate+0x1a0/0x1a0 [ 1305.964574] ? lock_downgrade+0x740/0x740 [ 1305.968728] ? __fget+0x225/0x360 [ 1305.972181] ? do_vfs_ioctl+0xff0/0xff0 [ 1305.976154] ? security_file_ioctl+0x83/0xb0 [ 1305.980566] SyS_ioctl+0x7f/0xb0 [ 1305.983930] ? do_vfs_ioctl+0xff0/0xff0 [ 1305.987906] do_syscall_64+0x1d5/0x640 [ 1305.991798] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1305.996985] RIP: 0033:0x465f69 [ 1306.000169] RSP: 002b:00007f202b29f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1306.007876] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1306.015148] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1306.022417] RBP: 00007f202b29f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1306.029690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1306.036964] R13: 00007ffe34c2804f R14: 00007f202b29f300 R15: 0000000000022000 [ 1306.051969] Mem-Info: [ 1306.054405] active_anon:155063 inactive_anon:25004 isolated_anon:0 [ 1306.054405] active_file:959 inactive_file:1678 isolated_file:0 [ 1306.054405] unevictable:0 dirty:33 writeback:0 unstable:0 [ 1306.054405] slab_reclaimable:14212 slab_unreclaimable:131588 [ 1306.054405] mapped:36950 shmem:25355 pagetables:24413 bounce:0 [ 1306.054405] free:206991 free_pcp:351 free_cma:0 [ 1306.091934] Node 0 active_anon:613292kB inactive_anon:58580kB active_file:3832kB inactive_file:6148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121928kB dirty:132kB writeback:0kB shmem:59760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 509952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1306.123588] Node 1 active_anon:6960kB inactive_anon:41436kB active_file:4kB inactive_file:564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25872kB dirty:0kB writeback:0kB shmem:41660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1306.154097] Node 0 DMA free:12572kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:60kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1306.183765] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1306.188996] Node 0 DMA32 free:331936kB min:36200kB low:45248kB high:54296kB active_anon:613252kB inactive_anon:58580kB active_file:3832kB inactive_file:6088kB unevictable:0kB writepending:132kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36544kB pagetables:91264kB bounce:0kB free_pcp:648kB local_pcp:12kB free_cma:0kB [ 1306.222354] lowmem_reserve[]: 0 0 0 0 0 [ 1306.226530] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1306.256894] lowmem_reserve[]: 0 0 0 0 0 [ 1306.261350] Node 1 Normal free:801856kB min:53696kB low:67120kB high:80544kB active_anon:6960kB inactive_anon:41436kB active_file:4kB inactive_file:564kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2304kB pagetables:6388kB bounce:0kB free_pcp:720kB local_pcp:0kB free_cma:0kB [ 1306.294784] lowmem_reserve[]: 0 0 0 0 0 [ 1306.299138] Node 0 DMA: 7*4kB (UME) 22*8kB (UME) 17*16kB (UME) 14*32kB (U) 14*64kB (UE) 2*128kB (ME) 9*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 12572kB [ 1306.319432] Node 0 DMA32: 10155*4kB (UE) 10262*8kB (UME) 3988*16kB (UME) 3838*32kB (UME) 990*64kB (UM) 110*128kB (U) 33*256kB (U) 4*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 399324kB [ 1306.340322] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1306.352254] Node 1 Normal: 6442*4kB (UME) 7702*8kB (UM) 9011*16kB (UM) 7256*32kB (UM) 6834*64kB (UM) 331*128kB (U) 12*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 946568kB [ 1306.372588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1306.381650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1306.393488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1306.402553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1306.414384] 28363 total pagecache pages [ 1306.418554] 0 pages in swap cache [ 1306.422005] Swap cache stats: add 0, delete 0, find 0/0 [ 1306.430732] Free swap = 0kB [ 1306.433758] Total swap = 0kB [ 1306.436942] 2097051 pages RAM [ 1306.440039] 0 pages HighMem/MovableOnly [ 1306.444001] 363840 pages reserved [ 1306.450719] 0 pages cma reserved [ 1306.464892] Node 0 active_anon:613292kB inactive_anon:58580kB active_file:3932kB inactive_file:7348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123028kB dirty:132kB writeback:0kB shmem:59760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 509952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1306.499675] Node 1 active_anon:6960kB inactive_anon:41436kB active_file:4kB inactive_file:564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25872kB dirty:0kB writeback:0kB shmem:41660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1306.527544] Node 0 DMA free:12572kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:60kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1306.557720] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1306.569164] Node 0 DMA32 free:362264kB min:36200kB low:45248kB high:54296kB active_anon:613252kB inactive_anon:58580kB active_file:4992kB inactive_file:6100kB unevictable:0kB writepending:132kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36544kB pagetables:91264kB bounce:0kB free_pcp:264kB local_pcp:92kB free_cma:0kB [ 1306.605149] lowmem_reserve[]: 0 0 0 0 0 [ 1306.609177] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1306.647233] lowmem_reserve[]: 0 0 0 0 0 [ 1306.662025] Node 1 Normal free:1109956kB min:53696kB low:67120kB high:80544kB active_anon:6960kB inactive_anon:41436kB active_file:4kB inactive_file:564kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2304kB pagetables:6388kB bounce:0kB free_pcp:644kB local_pcp:0kB free_cma:0kB [ 1306.916400] lowmem_reserve[]: 0 0 0 0 0 [ 1306.920539] systemd[1]: Started Journal Service. [ 1306.937777] Node 0 DMA: 7*4kB (UME) 22*8kB (UME) 17*16kB (UME) 14*32kB (U) 14*64kB (UE) 2*128kB (ME) 9*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 12572kB [ 1306.958582] Node 0 DMA32: 1094*4kB (UME) 396*8kB (UME) 74*16kB (UE) 12*32kB (E) 397*64kB (UM) 127*128kB (U) 64*256kB (U) 10*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 74328kB [ 1306.976896] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1306.996117] Node 1 Normal: 3369*4kB (UME) 7345*8kB (UM) 8654*16kB (UM) 6906*32kB (UM) 9065*64kB (UM) 650*128kB (UM) 24*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1101196kB [ 1307.015916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1307.027661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1307.037976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1307.052134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.060436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.071562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.079656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.091154] device bridge_slave_1 left promiscuous mode [ 1307.098047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.106292] device bridge_slave_0 left promiscuous mode [ 1307.111830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.119458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1307.131942] 28381 total pagecache pages [ 1307.136896] device veth1_macvtap left promiscuous mode [ 1307.142212] device veth0_macvtap left promiscuous mode [ 1307.148717] device veth1_vlan left promiscuous mode [ 1307.153772] device veth0_vlan left promiscuous mode [ 1307.206647] 0 pages in swap cache [ 1307.210128] Swap cache stats: add 0, delete 0, find 0/0 [ 1307.222011] Free swap = 0kB [ 1307.257068] device hsr_slave_1 left promiscuous mode [ 1307.264339] Total swap = 0kB [ 1307.267486] 2097051 pages RAM [ 1307.269094] device hsr_slave_0 left promiscuous mode [ 1307.270580] 0 pages HighMem/MovableOnly [ 1307.270585] 363840 pages reserved [ 1307.283159] 0 pages cma reserved [ 1307.286623] Out of memory: Kill process 20173 (syz-executor.3) score 1005 or sacrifice child [ 1307.295726] Killed process 20173 (syz-executor.3) total-vm:93252kB, anon-rss:2192kB, file-rss:34628kB, shmem-rss:0kB [ 1307.308554] team0 (unregistering): Port device team_slave_1 removed [ 1307.318080] team0 (unregistering): Port device team_slave_0 removed [ 1307.351488] oom_reaper: reaped process 20173 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1307.367287] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1307.381360] bond0 (unregistering): Releasing backup interface bond_slave_0 10:40:05 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x101040, 0x0) 10:40:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x43c, 0x800) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x10000, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r2, 0x7fff}) 10:40:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:40:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) [ 1307.434093] bond0 (unregistering): Released all slaves 10:40:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x8000, 0x0) 10:40:05 executing program 2: clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x4, 0x646, 0xfa, 0x7, 0x2, 0x0, 0x6}, &(0x7f0000000100)={0x260, 0x4, 0x7b4f, 0x7fffffff, 0x8001, 0x1ff, 0x85, 0x6}, &(0x7f0000000180)={0x10000, 0x3f, 0x80000000, 0x3, 0x1ff, 0x0, 0x8, 0x7b}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) clock_gettime(0x0, &(0x7f0000000080)) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 10:40:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:40:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) 10:40:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0xa}) 10:40:05 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa, 0x0, 0xffffffffffffffff}) r2 = signalfd4(r0, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0x9, 0x28}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000000)={0x7, [0x6, 0x74, 0x4, 0xe5bd, 0x3ff, 0xfffffffffffffffa, 0x5]}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x80001, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) openat$cgroup_int(r4, &(0x7f00000001c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "7c38d247873ede5b", "02d6c45f4e4c5514ce4a8cd8453d6012", "fc845494", "e8286b4066a08a31"}, 0x28) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000340)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000280)="9a92eb5c8cca6813f25bb59f9cc34d0b858a4f291e6acd0b8d2c1832c4b34d91b8694eb4afe022c69f158b064b285e561e33170793", &(0x7f00000002c0)=@tcp6}, 0x20) 10:40:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:40:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280)='wireguard\x00', 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000100", @ANYRESDEC=r0, @ANYBLOB="00032cbd7000fbdbdf2501000000060006004e200000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="92eae8472ac0428ca87fffff85263df4000000", @ANYRES16=r2, @ANYBLOB="00012abd7000fbdbdf250100000014000600726f7365300000000000000000000000140006006261746164765f736c6176655f3000002900070073797374656d5f753a6f626a6563745f723a617564697463746c5f657865635f743a733000000000050001000000000014000200fe8000000000000000000000000000bb14000300fe80000000000000000000000000003214000300fe8000000000000000000000000000aa2a00070073797374656d5f753a6f626a6563745f723a7075626c69635f636f6e74656e745f743a733000000005000100010000001400060064756d6d793000"/238], 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x40004) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) read$fb(r3, &(0x7f00000000c0)=""/140, 0x8c) 10:40:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:40:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff}) 10:40:06 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x2710}) [ 1307.958527] dlm: non-version read from control device 140 [ 1308.558174] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1308.569212] syz-executor.4: [ 1308.573689] syz-executor.4: [ 1308.574626] page allocation failure: order:4 [ 1308.578179] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1308.595937] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1308.607703] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1308.633395] (null) [ 1308.642400] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1308.650241] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1308.662795] CPU: 0 PID: 11910 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1308.667726] syz-executor.4 cpuset= [ 1308.670699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1308.670703] Call Trace: [ 1308.670722] dump_stack+0x1b2/0x281 [ 1308.670736] warn_alloc.cold+0x96/0x1cc [ 1308.689623] / [ 1308.689895] ? zone_watermark_ok_safe+0x220/0x220 [ 1308.700405] __alloc_pages_nodemask+0x2127/0x2720 [ 1308.705257] ? lock_acquire+0x170/0x3f0 [ 1308.709245] ? lock_acquire+0x170/0x3f0 [ 1308.710615] mems_allowed=0-1 [ 1308.713225] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1308.713242] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1308.726708] ? __mutex_unlock_slowpath+0x75/0x770 [ 1308.731562] alloc_pages_current+0x155/0x260 [ 1308.735979] ion_page_pool_alloc+0x118/0x1b0 [ 1308.740403] ion_system_heap_allocate+0x133/0x8c0 [ 1308.745246] ? ion_alloc+0x187/0x810 [ 1308.748953] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1308.754395] ? ion_system_contig_heap_create+0x130/0x130 [ 1308.759838] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1308.764861] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1308.769689] ion_alloc+0x204/0x810 [ 1308.773222] ? ion_dma_buf_release+0x40/0x40 [ 1308.777625] ? __might_fault+0x177/0x1b0 [ 1308.781684] ion_ioctl+0xea/0x1f0 [ 1308.785133] ? ion_query_heaps+0x360/0x360 [ 1308.789377] ? ion_query_heaps+0x360/0x360 [ 1308.793611] do_vfs_ioctl+0x75a/0xff0 [ 1308.797411] ? ioctl_preallocate+0x1a0/0x1a0 [ 1308.801816] ? lock_downgrade+0x740/0x740 [ 1308.805965] ? __fget+0x225/0x360 [ 1308.809405] ? do_vfs_ioctl+0xff0/0xff0 [ 1308.809668] syz-executor.4 cpuset= [ 1308.813364] ? security_file_ioctl+0x83/0xb0 [ 1308.813376] SyS_ioctl+0x7f/0xb0 [ 1308.813384] ? do_vfs_ioctl+0xff0/0xff0 [ 1308.828645] do_syscall_64+0x1d5/0x640 [ 1308.832526] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1308.837702] RIP: 0033:0x465f69 [ 1308.840881] RSP: 002b:00007f343bb89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1308.846972] / [ 1308.848584] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1308.848594] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1308.862427] mems_allowed=0-1 [ 1308.864814] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1308.864820] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1308.864826] R13: 00007ffd1e89b06f R14: 00007f343bb89300 R15: 0000000000022000 [ 1308.890263] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1308.902784] CPU: 1 PID: 11921 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1308.910680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1308.920159] Call Trace: [ 1308.922760] dump_stack+0x1b2/0x281 [ 1308.926399] warn_alloc.cold+0x96/0x1cc [ 1308.930384] ? zone_watermark_ok_safe+0x220/0x220 [ 1308.935254] __alloc_pages_nodemask+0x2127/0x2720 [ 1308.940101] ? _raw_spin_unlock_irq+0x24/0x80 [ 1308.944606] ? lock_acquire+0x170/0x3f0 [ 1308.948694] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1308.953547] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1308.959017] ? __mutex_unlock_slowpath+0x75/0x770 [ 1308.963872] alloc_pages_current+0x155/0x260 [ 1308.968287] ion_page_pool_alloc+0x118/0x1b0 [ 1308.972699] ion_system_heap_allocate+0x133/0x8c0 [ 1308.977544] ? ion_alloc+0x187/0x810 [ 1308.981261] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1308.986716] ? ion_system_contig_heap_create+0x130/0x130 [ 1308.992174] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1308.997198] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1309.002047] ion_alloc+0x204/0x810 [ 1309.005597] ? ion_dma_buf_release+0x40/0x40 [ 1309.010013] ? __might_fault+0x177/0x1b0 [ 1309.014075] ion_ioctl+0xea/0x1f0 [ 1309.017537] ? ion_query_heaps+0x360/0x360 [ 1309.021782] ? ion_query_heaps+0x360/0x360 [ 1309.026023] do_vfs_ioctl+0x75a/0xff0 [ 1309.029834] ? ioctl_preallocate+0x1a0/0x1a0 [ 1309.034249] ? lock_downgrade+0x740/0x740 [ 1309.038408] ? __fget+0x225/0x360 [ 1309.041861] ? do_vfs_ioctl+0xff0/0xff0 [ 1309.045838] ? security_file_ioctl+0x83/0xb0 [ 1309.050246] SyS_ioctl+0x7f/0xb0 [ 1309.053608] ? do_vfs_ioctl+0xff0/0xff0 [ 1309.057586] do_syscall_64+0x1d5/0x640 [ 1309.061478] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1309.066664] RIP: 0033:0x465f69 [ 1309.069874] RSP: 002b:00007f202b27e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1309.077586] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1309.084863] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1309.092135] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1309.099411] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1309.106679] R13: 00007ffe34c2804f R14: 00007f202b27e300 R15: 0000000000022000 [ 1309.130479] CPU: 0 PID: 11917 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1309.138396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.147745] Call Trace: [ 1309.150346] dump_stack+0x1b2/0x281 [ 1309.153971] warn_alloc.cold+0x96/0x1cc [ 1309.157941] ? zone_watermark_ok_safe+0x220/0x220 [ 1309.162785] __alloc_pages_nodemask+0x2127/0x2720 [ 1309.167629] ? lock_acquire+0x170/0x3f0 [ 1309.171779] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1309.176620] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1309.182064] ? __mutex_unlock_slowpath+0x75/0x770 [ 1309.186899] alloc_pages_current+0x155/0x260 [ 1309.191295] ion_page_pool_alloc+0x118/0x1b0 [ 1309.195694] ion_system_heap_allocate+0x133/0x8c0 [ 1309.200520] ? ion_alloc+0x187/0x810 [ 1309.204220] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1309.209661] ? ion_system_contig_heap_create+0x130/0x130 [ 1309.215099] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1309.220102] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1309.224937] ion_alloc+0x204/0x810 [ 1309.228472] ? ion_dma_buf_release+0x40/0x40 [ 1309.232870] ? __might_fault+0x177/0x1b0 [ 1309.236931] ion_ioctl+0xea/0x1f0 [ 1309.240375] ? ion_query_heaps+0x360/0x360 [ 1309.244605] ? ion_query_heaps+0x360/0x360 [ 1309.248842] do_vfs_ioctl+0x75a/0xff0 [ 1309.249912] syz-executor.1 cpuset= [ 1309.252640] ? ioctl_preallocate+0x1a0/0x1a0 [ 1309.252649] ? lock_downgrade+0x740/0x740 [ 1309.252661] ? __fget+0x225/0x360 [ 1309.268147] ? do_vfs_ioctl+0xff0/0xff0 [ 1309.272120] ? security_file_ioctl+0x83/0xb0 [ 1309.276531] SyS_ioctl+0x7f/0xb0 [ 1309.276856] / [ 1309.279890] ? do_vfs_ioctl+0xff0/0xff0 [ 1309.285564] do_syscall_64+0x1d5/0x640 [ 1309.289176] mems_allowed=0-1 [ 1309.289453] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1309.297711] RIP: 0033:0x465f69 [ 1309.300890] RSP: 002b:00007f343bb68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1309.308588] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1309.315845] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1309.323098] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1309.330351] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1309.337603] R13: 00007ffd1e89b06f R14: 00007f343bb68300 R15: 0000000000022000 [ 1309.347735] CPU: 1 PID: 11926 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 1309.355644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.365002] Call Trace: [ 1309.367599] dump_stack+0x1b2/0x281 [ 1309.371233] warn_alloc.cold+0x96/0x1cc [ 1309.375213] ? zone_watermark_ok_safe+0x220/0x220 [ 1309.380066] __alloc_pages_nodemask+0x2127/0x2720 [ 1309.384917] ? lock_acquire+0x170/0x3f0 [ 1309.388896] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1309.393747] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1309.399199] ? __mutex_unlock_slowpath+0x75/0x770 [ 1309.404046] alloc_pages_current+0x155/0x260 [ 1309.408459] ion_page_pool_alloc+0x118/0x1b0 [ 1309.412876] ion_system_heap_allocate+0x133/0x8c0 [ 1309.417716] ? ion_alloc+0x187/0x810 [ 1309.421428] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1309.426879] ? ion_system_contig_heap_create+0x130/0x130 [ 1309.427878] Mem-Info: [ 1309.432325] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1309.432338] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1309.441474] active_anon:154848 inactive_anon:25004 isolated_anon:0 [ 1309.441474] active_file:1985 inactive_file:5344 isolated_file:0 [ 1309.441474] unevictable:0 dirty:109 writeback:0 unstable:0 [ 1309.441474] slab_reclaimable:14298 slab_unreclaimable:133269 [ 1309.441474] mapped:57224 shmem:25355 pagetables:24507 bounce:0 [ 1309.441474] free:176020 free_pcp:421 free_cma:0 [ 1309.444559] ion_alloc+0x204/0x810 [ 1309.444574] ? ion_dma_buf_release+0x40/0x40 [ 1309.444587] ? __might_fault+0x177/0x1b0 [ 1309.444598] ion_ioctl+0xea/0x1f0 [ 1309.444607] ? ion_query_heaps+0x360/0x360 [ 1309.444627] ? ion_query_heaps+0x360/0x360 [ 1309.502554] do_vfs_ioctl+0x75a/0xff0 [ 1309.506362] ? ioctl_preallocate+0x1a0/0x1a0 [ 1309.510776] ? lock_downgrade+0x740/0x740 [ 1309.514933] ? __fget+0x225/0x360 [ 1309.518382] ? do_vfs_ioctl+0xff0/0xff0 [ 1309.518826] Node 0 active_anon:613236kB inactive_anon:58580kB active_file:7504kB inactive_file:20940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:202532kB dirty:424kB writeback:0kB shmem:59760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 509952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1309.522347] ? security_file_ioctl+0x83/0xb0 [ 1309.522360] SyS_ioctl+0x7f/0xb0 [ 1309.558469] ? do_vfs_ioctl+0xff0/0xff0 [ 1309.562440] do_syscall_64+0x1d5/0x640 [ 1309.566336] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1309.568661] Node 1 active_anon:6156kB inactive_anon:41436kB active_file:436kB inactive_file:436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26364kB dirty:12kB writeback:0kB shmem:41660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1309.571526] RIP: 0033:0x465f69 [ 1309.571532] RSP: 002b:00007f7b1dce0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1309.571545] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1309.599068] Node 0 [ 1309.602039] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1309.602044] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1309.602049] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1309.602054] R13: 00007ffc6d6ecd2f R14: 00007f7b1dce0300 R15: 0000000000022000 [ 1309.609982] CPU: 1 PID: 11914 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1309.624415] DMA free:12608kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:132kB inactive_file:32kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.626681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.626686] Call Trace: [ 1309.626703] dump_stack+0x1b2/0x281 [ 1309.626717] warn_alloc.cold+0x96/0x1cc [ 1309.626728] ? zone_watermark_ok_safe+0x220/0x220 [ 1309.626748] __alloc_pages_nodemask+0x2127/0x2720 [ 1309.626765] ? lock_acquire+0x170/0x3f0 [ 1309.626780] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1309.626803] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1309.626814] ? __mutex_unlock_slowpath+0x75/0x770 [ 1309.626823] ? retint_kernel+0x2d/0x2d [ 1309.626836] alloc_pages_current+0x155/0x260 [ 1309.626852] ion_page_pool_alloc+0x118/0x1b0 [ 1309.635066] lowmem_reserve[]: [ 1309.641372] ion_system_heap_allocate+0x133/0x8c0 [ 1309.641383] ? ion_alloc+0x187/0x810 [ 1309.649919] 0 [ 1309.656502] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1309.656514] ? ion_system_contig_heap_create+0x130/0x130 [ 1309.656523] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1309.656533] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1309.656545] ion_alloc+0x204/0x810 [ 1309.716843] 2717 [ 1309.720369] ? ion_dma_buf_release+0x40/0x40 [ 1309.720381] ? __might_fault+0x177/0x1b0 [ 1309.735920] 2718 [ 1309.738923] ion_ioctl+0xea/0x1f0 [ 1309.738933] ? ion_query_heaps+0x360/0x360 [ 1309.746955] 2718 [ 1309.751254] ? ion_query_heaps+0x360/0x360 [ 1309.751265] do_vfs_ioctl+0x75a/0xff0 [ 1309.762782] 2718 [ 1309.767634] ? ioctl_preallocate+0x1a0/0x1a0 [ 1309.767643] ? lock_downgrade+0x740/0x740 [ 1309.767656] ? __fget+0x225/0x360 [ 1309.767667] ? do_vfs_ioctl+0xff0/0xff0 [ 1309.781023] ? security_file_ioctl+0x83/0xb0 [ 1309.781034] SyS_ioctl+0x7f/0xb0 [ 1309.787561] Node 0 [ 1309.791517] ? do_vfs_ioctl+0xff0/0xff0 [ 1309.791530] do_syscall_64+0x1d5/0x640 [ 1309.796954] DMA32 free:252244kB min:36200kB low:45248kB high:54296kB active_anon:613196kB inactive_anon:58580kB active_file:7372kB inactive_file:20908kB unevictable:0kB writepending:424kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36768kB pagetables:91728kB bounce:0kB free_pcp:532kB local_pcp:188kB free_cma:0kB [ 1309.797019] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1309.806869] lowmem_reserve[]: [ 1309.807505] RIP: 0033:0x465f69 [ 1309.815773] 0 [ 1309.817733] RSP: 002b:00007f202b29f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1309.817744] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1309.817751] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1309.824152] 0 [ 1309.825309] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1309.825314] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1309.825318] R13: 00007ffe34c2804f R14: 00007f202b29f300 R15: 0000000000022000 [ 1309.997241] 0 0 0 [ 1310.008228] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1310.052582] lowmem_reserve[]: 0 0 0 0 0 [ 1310.069079] Node 1 Normal free:448712kB min:53696kB low:67120kB high:80544kB active_anon:6156kB inactive_anon:41436kB active_file:436kB inactive_file:436kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6300kB bounce:0kB free_pcp:696kB local_pcp:696kB free_cma:0kB [ 1310.139318] lowmem_reserve[]: 0 0 0 0 0 [ 1310.155773] Node 0 DMA: 2*4kB (ME) 2*8kB (E) 3*16kB (ME) 1*32kB (M) 4*64kB (UE) 2*128kB (UE) 9*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11112kB [ 1310.201106] Node 0 DMA32: 664*4kB (ME) 325*8kB (UE) 74*16kB (E) 27*32kB (UME) 545*64kB (UM) 23*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45128kB [ 1310.245413] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1310.274875] Node 1 Normal: 34*4kB (ME) 27*8kB (UM) 3633*16kB (UM) 6828*32kB (UM) 158*64kB (U) 62*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 295024kB [ 1310.331847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.380521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1310.421887] IPVS: ftp: loaded support on port[0] = 21 [ 1310.448099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.492646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1310.538066] 32596 total pagecache pages [ 1310.553893] 0 pages in swap cache [ 1310.581166] Swap cache stats: add 0, delete 0, find 0/0 [ 1310.614284] Free swap = 0kB [ 1310.638090] Total swap = 0kB [ 1310.658774] 2097051 pages RAM [ 1310.677587] 0 pages HighMem/MovableOnly [ 1310.721246] 363840 pages reserved [ 1310.794432] 0 pages cma reserved [ 1310.987005] IPVS: ftp: loaded support on port[0] = 21 [ 1311.465315] oom_reaper: reaped process 11910 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1311.596425] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1311.663921] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1311.690421] CPU: 0 PID: 11949 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1311.698337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1311.707690] Call Trace: [ 1311.710280] dump_stack+0x1b2/0x281 [ 1311.713922] dump_header+0x178/0x82f [ 1311.717634] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1311.722734] ? ___ratelimit+0x2cd/0x530 [ 1311.726705] oom_kill_process.cold+0x10/0xb18 [ 1311.731203] out_of_memory+0xe3e/0x1190 [ 1311.735177] ? oom_killer_disable+0x1c0/0x1c0 [ 1311.739752] ? mutex_trylock+0x152/0x1a0 [ 1311.743811] __alloc_pages_nodemask+0x23e1/0x2720 [ 1311.748661] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1311.753512] ? mark_held_locks+0xa6/0xf0 [ 1311.757571] ? cache_grow_begin+0x41/0x630 [ 1311.761802] cache_grow_begin+0x91/0x630 [ 1311.765988] ? cache_grow_begin+0x91/0x630 [ 1311.770230] fallback_alloc+0x207/0x2c0 [ 1311.774208] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 1311.778873] ? dev_uevent_filter+0xd0/0xd0 [ 1311.783106] kobject_uevent_env+0x20c/0xf40 [ 1311.787426] ? wait_for_completion_io+0x10/0x10 [ 1311.792093] device_add+0xa47/0x15c0 [ 1311.795807] ? device_is_dependent+0x2a0/0x2a0 [ 1311.800384] netdev_register_kobject+0x181/0x410 [ 1311.805137] register_netdevice+0x955/0xe40 [ 1311.809565] ? netdev_change_features+0xa0/0xa0 [ 1311.814234] __tun_chr_ioctl.isra.0+0x15a8/0x3310 [ 1311.819081] ? tun_attach.isra.0+0x1060/0x1060 [ 1311.823657] ? do_lock_file_wait+0x210/0x210 [ 1311.828063] ? trace_hardirqs_on+0x10/0x10 [ 1311.832291] ? trace_hardirqs_on+0x10/0x10 [ 1311.836525] ? do_dup2+0x1d7/0x3d0 [ 1311.840062] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1311.845077] do_vfs_ioctl+0x75a/0xff0 [ 1311.848870] ? dnotify_flush+0x19/0x2c0 [ 1311.852837] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1311.858282] ? ioctl_preallocate+0x1a0/0x1a0 [ 1311.862687] ? lock_acquire+0x170/0x3f0 [ 1311.866653] ? dnotify_flush+0x19/0x2c0 [ 1311.870619] ? fput+0xb/0x140 [ 1311.873715] ? filp_close+0x102/0x140 [ 1311.877513] ? security_file_ioctl+0x83/0xb0 [ 1311.881915] SyS_ioctl+0x7f/0xb0 [ 1311.885275] ? do_vfs_ioctl+0xff0/0xff0 [ 1311.889242] do_syscall_64+0x1d5/0x640 [ 1311.893130] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1311.898309] RIP: 0033:0x465d27 [ 1311.901488] RSP: 002b:00007ffe121cf968 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1311.909194] RAX: ffffffffffffffda RBX: 000000000056ca68 RCX: 0000000000465d27 [ 1311.916467] RDX: 00007ffe121cf990 RSI: 00000000400454ca RDI: 00000000000000f0 [ 1311.923736] RBP: 00007ffe121cfa40 R08: 00007ffe121cf990 R09: 0000000000000000 [ 1311.931001] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1311.938267] R13: 000000000056ca68 R14: 0000000000000000 R15: 0000000000400538 [ 1311.944433] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1311.957455] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1311.966322] Mem-Info: [ 1311.971707] active_anon:155106 inactive_anon:25008 isolated_anon:0 [ 1311.971707] active_file:19 inactive_file:0 isolated_file:0 [ 1311.971707] unevictable:0 dirty:2 writeback:2 unstable:0 [ 1311.971707] slab_reclaimable:14301 slab_unreclaimable:133806 [ 1311.971707] mapped:52727 shmem:25362 pagetables:24584 bounce:0 [ 1311.971707] free:14041 free_pcp:67 free_cma:0 [ 1311.978688] syz-executor.3 cpuset= [ 1312.015450] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1312.024123] CPU: 1 PID: 11910 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1312.032012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.034341] Node 0 active_anon:613576kB inactive_anon:58584kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184528kB dirty:0kB writeback:0kB shmem:59768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 509952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1312.041366] Call Trace: [ 1312.069286] Node 1 active_anon:6748kB inactive_anon:41448kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26288kB dirty:0kB writeback:0kB shmem:41680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1312.071813] dump_stack+0x1b2/0x281 [ 1312.098908] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.102495] warn_alloc.cold+0x96/0x1cc [ 1312.102508] ? zone_watermark_ok_safe+0x220/0x220 [ 1312.128761] lowmem_reserve[]: [ 1312.132696] ? usleep_range+0x130/0x130 [ 1312.137531] 0 [ 1312.140601] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1312.144580] 2717 [ 1312.146354] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1312.151424] 2718 [ 1312.153490] ? run_timer_softirq+0x5a0/0x5a0 [ 1312.158494] 2718 [ 1312.160532] __alloc_pages_nodemask+0x2127/0x2720 [ 1312.164921] 2718 [ 1312.166962] ? lock_acquire+0x170/0x3f0 [ 1312.173816] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1312.177796] Node 0 [ 1312.182627] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1312.182644] DMA32 free:18452kB min:36200kB low:45248kB high:54296kB active_anon:613536kB inactive_anon:58584kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36928kB pagetables:91948kB bounce:0kB free_pcp:148kB local_pcp:28kB free_cma:0kB [ 1312.184857] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1312.184876] alloc_pages_current+0x155/0x260 [ 1312.189339] lowmem_reserve[]: [ 1312.217777] ion_page_pool_alloc+0x118/0x1b0 [ 1312.217787] ion_system_heap_allocate+0x133/0x8c0 [ 1312.217798] ? ion_alloc+0x187/0x810 [ 1312.223225] 0 [ 1312.227612] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1312.227623] ? ion_system_contig_heap_create+0x130/0x130 [ 1312.227633] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1312.230715] 0 [ 1312.235105] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1312.235116] ion_alloc+0x204/0x810 [ 1312.235130] ? ion_dma_buf_release+0x40/0x40 [ 1312.239940] 0 [ 1312.243634] ? __might_fault+0x177/0x1b0 [ 1312.245428] 0 [ 1312.250863] ion_ioctl+0xea/0x1f0 [ 1312.256302] 0 [ 1312.261287] ? ion_query_heaps+0x360/0x360 [ 1312.267886] ? ion_query_heaps+0x360/0x360 [ 1312.267895] do_vfs_ioctl+0x75a/0xff0 [ 1312.267906] ? ioctl_preallocate+0x1a0/0x1a0 [ 1312.271421] Node 0 [ 1312.275807] ? lock_downgrade+0x740/0x740 [ 1312.275820] ? __fget+0x225/0x360 [ 1312.275829] ? do_vfs_ioctl+0xff0/0xff0 [ 1312.277615] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.281648] ? security_file_ioctl+0x83/0xb0 [ 1312.283421] lowmem_reserve[]: [ 1312.286856] SyS_ioctl+0x7f/0xb0 [ 1312.286864] ? do_vfs_ioctl+0xff0/0xff0 [ 1312.286876] do_syscall_64+0x1d5/0x640 [ 1312.288650] 0 [ 1312.292872] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1312.297093] 0 [ 1312.300857] RIP: 0033:0x465f69 [ 1312.305252] 0 [ 1312.307452] RSP: 002b:00007f343bb89188 EFLAGS: 00000246 [ 1312.311573] 0 [ 1312.315017] ORIG_RAX: 0000000000000010 [ 1312.315023] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1312.315029] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1312.315034] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1312.315040] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1312.319012] 0 [ 1312.343881] R13: 00007ffd1e89b06f R14: 00007f343bb89300 R15: 0000000000022000 [ 1312.349713] warn_alloc_show_mem: 4 callbacks suppressed [ 1312.349716] Mem-Info: [ 1312.391161] / [ 1312.400695] active_anon:155081 inactive_anon:25008 isolated_anon:0 [ 1312.400695] active_file:14 inactive_file:12 isolated_file:0 [ 1312.400695] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1312.400695] slab_reclaimable:14301 slab_unreclaimable:133782 [ 1312.400695] mapped:52704 shmem:25362 pagetables:24584 bounce:0 [ 1312.400695] free:14041 free_pcp:67 free_cma:0 [ 1312.433621] Node 0 active_anon:613576kB inactive_anon:58584kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184528kB dirty:0kB writeback:0kB shmem:59768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 509952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1312.446332] Bluetooth: hci1 command 0x0409 tx timeout [ 1312.506205] Node 1 Normal free:26740kB min:53696kB low:67120kB high:80544kB active_anon:6748kB inactive_anon:41448kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6388kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1312.512360] Node 1 active_anon:6748kB inactive_anon:41448kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26288kB dirty:0kB writeback:0kB shmem:41680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1312.538150] mems_allowed=0-1 [ 1312.578415] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.581069] lowmem_reserve[]: [ 1312.619320] CPU: 0 PID: 11917 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1312.623265] lowmem_reserve[]: [ 1312.630305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.630309] Call Trace: [ 1312.630326] dump_stack+0x1b2/0x281 [ 1312.630339] warn_alloc.cold+0x96/0x1cc [ 1312.630350] ? zone_watermark_ok_safe+0x220/0x220 [ 1312.630358] ? usleep_range+0x130/0x130 [ 1312.630366] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1312.630377] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1312.630388] ? run_timer_softirq+0x5a0/0x5a0 [ 1312.630404] __alloc_pages_nodemask+0x2127/0x2720 [ 1312.630417] ? lock_acquire+0x170/0x3f0 [ 1312.630431] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1312.649954] 0 [ 1312.653001] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1312.673738] 2717 [ 1312.676270] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1312.676289] alloc_pages_current+0x155/0x260 [ 1312.676304] ion_page_pool_alloc+0x118/0x1b0 [ 1312.676315] ion_system_heap_allocate+0x133/0x8c0 [ 1312.676325] ? ion_alloc+0x187/0x810 [ 1312.676334] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1312.676343] ? ion_system_contig_heap_create+0x130/0x130 [ 1312.676355] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1312.697162] 2718 [ 1312.698268] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1312.703689] 2718 [ 1312.708081] ion_alloc+0x204/0x810 [ 1312.708095] ? ion_dma_buf_release+0x40/0x40 [ 1312.708106] ? __might_fault+0x177/0x1b0 [ 1312.708118] ion_ioctl+0xea/0x1f0 [ 1312.708127] ? ion_query_heaps+0x360/0x360 [ 1312.708140] ? ion_query_heaps+0x360/0x360 [ 1312.708151] do_vfs_ioctl+0x75a/0xff0 [ 1312.708163] ? ioctl_preallocate+0x1a0/0x1a0 [ 1312.708176] ? lock_downgrade+0x740/0x740 [ 1312.708189] ? __fget+0x225/0x360 [ 1312.708197] ? do_vfs_ioctl+0xff0/0xff0 [ 1312.708209] ? security_file_ioctl+0x83/0xb0 [ 1312.728421] 0 [ 1312.731974] SyS_ioctl+0x7f/0xb0 [ 1312.752869] 2718 [ 1312.753787] ? do_vfs_ioctl+0xff0/0xff0 [ 1312.757930] Bluetooth: hci2 command 0x0409 tx timeout [ 1312.761266] do_syscall_64+0x1d5/0x640 [ 1312.781998] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1312.794093] 0 [ 1312.795544] RIP: 0033:0x465f69 [ 1312.795549] RSP: 002b:00007f343bb68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1312.795558] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1312.795563] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1312.795567] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1312.795573] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1312.795578] R13: 00007ffd1e89b06f R14: 00007f343bb68300 R15: 0000000000022000 [ 1312.873215] Node 0 DMA32 free:18452kB min:36200kB low:45248kB high:54296kB active_anon:613536kB inactive_anon:58584kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36896kB pagetables:91948kB bounce:0kB free_pcp:152kB local_pcp:124kB free_cma:0kB [ 1312.915739] lowmem_reserve[]: 0 0 0 0 0 [ 1312.943923] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.066927] lowmem_reserve[]: 0 0 0 0 0 [ 1313.074286] Node 1 Normal free:60376kB min:53696kB low:67120kB high:80544kB active_anon:6828kB inactive_anon:41448kB active_file:2212kB inactive_file:1552kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6396kB bounce:0kB free_pcp:1200kB local_pcp:484kB free_cma:0kB [ 1313.074969] 0 0 0 [ 1313.156162] Node 0 DMA: 10*4kB (UME) 4*8kB (ME) 3*16kB (UE) 0*32kB 2*64kB (ME) 2*128kB (ME) 9*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11000kB [ 1313.171647] lowmem_reserve[]: 0 0 0 0 0 [ 1313.175738] Node 0 DMA: 10*4kB (UME) 4*8kB (ME) 3*16kB (UE) 0*32kB 2*64kB (ME) 2*128kB (ME) 9*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11000kB [ 1313.195117] Node 0 DMA32: 2315*4kB (UME) 1940*8kB (UME) 196*16kB (UME) 215*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34796kB [ 1313.209147] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1313.209412] Node 0 [ 1313.219917] Node 1 Normal: 248*4kB (UME) 91*8kB (UM) 49*16kB (UM) 46*32kB (UM) 8*64kB (UM) 3*128kB (UM) 56*256kB (UM) 18*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 28424kB [ 1313.219993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.220000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.220006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.220012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.220016] 25455 total pagecache pages [ 1313.220028] 0 pages in swap cache [ 1313.220033] Swap cache stats: add 0, delete 0, find 0/0 [ 1313.220037] Free swap = 0kB [ 1313.220040] Total swap = 0kB [ 1313.220047] 2097051 pages RAM [ 1313.220050] 0 pages HighMem/MovableOnly [ 1313.220053] 363840 pages reserved [ 1313.220057] 0 pages cma reserved [ 1313.330942] DMA32: 2037*4kB (UME) 2060*8kB (UME) 221*16kB (UME) 243*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35940kB [ 1313.347026] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1313.357845] Node 1 Normal: 211*4kB (UME) 83*8kB (UM) 35*16kB (UM) 441*32kB (UM) 5*64kB (U) 1*128kB (M) 2*256kB (UM) 17*512kB (U) 2*1024kB (M) 0*2048kB 0*4096kB = 27892kB [ 1313.375595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.385131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.393716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.408886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.418346] 25428 total pagecache pages [ 1313.422336] 0 pages in swap cache [ 1313.427956] Swap cache stats: add 0, delete 0, find 0/0 [ 1313.433340] Free swap = 0kB [ 1313.447557] Total swap = 0kB [ 1313.450750] 2097051 pages RAM [ 1313.453856] 0 pages HighMem/MovableOnly [ 1313.474911] 363840 pages reserved [ 1313.478394] 0 pages cma reserved [ 1313.481754] Out of memory (oom_kill_allocating_task): Kill process 11949 (syz-executor.5) score 0 or sacrifice child [ 1313.494278] Killed process 11949 (syz-executor.5) total-vm:93120kB, anon-rss:72kB, file-rss:34136kB, shmem-rss:0kB [ 1313.518881] oom_reaper: reaped process 11949 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1313.554400] rs:main Q:Reg invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1313.567395] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1313.572442] CPU: 1 PID: 10774 Comm: rs:main Q:Reg Not tainted 4.14.224-syzkaller #0 [ 1313.580234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1313.589576] Call Trace: [ 1313.592154] dump_stack+0x1b2/0x281 [ 1313.595762] dump_header+0x178/0x82f [ 1313.599454] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1313.604537] ? ___ratelimit+0x2cd/0x530 [ 1313.608492] oom_kill_process.cold+0x10/0xb18 [ 1313.612971] out_of_memory+0xe3e/0x1190 [ 1313.616928] ? oom_killer_disable+0x1c0/0x1c0 [ 1313.621404] ? mutex_trylock+0x152/0x1a0 [ 1313.625447] __alloc_pages_nodemask+0x23e1/0x2720 [ 1313.630279] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1313.635134] alloc_pages_current+0x155/0x260 [ 1313.639532] filemap_fault+0xea3/0x1980 [ 1313.643490] ext4_filemap_fault+0x84/0xb0 [ 1313.647617] __do_fault+0xfa/0x380 [ 1313.651163] __handle_mm_fault+0x2497/0x4620 [ 1313.655561] ? vm_insert_page+0x7c0/0x7c0 [ 1313.659695] ? vfs_write+0x35d/0x4d0 [ 1313.663398] handle_mm_fault+0x391/0x860 [ 1313.667442] __do_page_fault+0x549/0xad0 [ 1313.671484] ? spurious_fault+0x640/0x640 [ 1313.675612] ? do_page_fault+0x60/0x500 [ 1313.679609] ? page_fault+0x2f/0x50 [ 1313.683215] page_fault+0x45/0x50 [ 1313.686658] RIP: 0000:0x558720e9f290 [ 1313.690347] RSP: 2263dd70:0000000000000000 EFLAGS: 55872263e260 [ 1313.699356] Mem-Info: [ 1313.707906] active_anon:155039 inactive_anon:25008 isolated_anon:0 [ 1313.707906] active_file:32 inactive_file:31 isolated_file:8 [ 1313.707906] unevictable:0 dirty:1 writeback:1 unstable:0 [ 1313.707906] slab_reclaimable:14306 slab_unreclaimable:133636 [ 1313.707906] mapped:52747 shmem:25363 pagetables:24549 bounce:0 [ 1313.707906] free:18364 free_pcp:0 free_cma:0 [ 1313.741535] Node 0 active_anon:613428kB inactive_anon:58584kB active_file:64kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184628kB dirty:0kB writeback:4kB shmem:59772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 509952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1313.769514] Node 1 active_anon:6728kB inactive_anon:41448kB active_file:64kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:26360kB dirty:4kB writeback:0kB shmem:41680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1313.796872] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.828910] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1313.833979] Node 0 DMA32 free:36132kB min:36200kB low:45248kB high:54296kB active_anon:613488kB inactive_anon:58584kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36864kB pagetables:91800kB bounce:0kB free_pcp:240kB local_pcp:240kB free_cma:0kB [ 1313.876003] lowmem_reserve[]: 0 0 0 0 0 [ 1313.880039] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.908089] lowmem_reserve[]: 0 0 0 0 0 [ 1313.912109] Node 1 Normal free:26564kB min:53696kB low:67120kB high:80544kB active_anon:6828kB inactive_anon:41448kB active_file:108kB inactive_file:520kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6396kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.955275] lowmem_reserve[]: 0 0 0 0 0 [ 1313.959306] Node 0 DMA: 9*4kB (UME) 5*8kB (UME) 2*16kB (E) 0*32kB 2*64kB (ME) 2*128kB (ME) 9*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10988kB [ 1313.989715] Node 0 DMA32: 2035*4kB (UME) 2041*8kB (UME) 232*16kB (UME) 244*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35988kB [ 1314.022635] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1314.041022] Node 1 Normal: 213*4kB (UME) 100*8kB (UM) 43*16kB (UM) 451*32kB (UM) 1*64kB (U) 2*128kB (UM) 1*256kB (M) 14*512kB (U) 2*1024kB (M) 0*2048kB 0*4096kB = 26564kB [ 1314.057343] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1314.072884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1314.082111] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1314.099726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1314.108369] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1314.113488] CPU: 0 PID: 11910 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1314.121358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.130708] Call Trace: [ 1314.133298] dump_stack+0x1b2/0x281 [ 1314.136930] warn_alloc.cold+0x96/0x1cc [ 1314.140900] ? zone_watermark_ok_safe+0x220/0x220 [ 1314.145757] __alloc_pages_nodemask+0x2127/0x2720 [ 1314.150603] ? lock_acquire+0x170/0x3f0 [ 1314.153614] syz-executor.3 cpuset= [ 1314.154572] ? lock_acquire+0x170/0x3f0 [ 1314.154587] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1314.154604] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1314.154615] ? __mutex_unlock_slowpath+0x75/0x770 [ 1314.154626] ? __list_del_entry_valid+0xb3/0xf0 [ 1314.154639] alloc_pages_current+0x155/0x260 [ 1314.154654] ion_page_pool_alloc+0x118/0x1b0 [ 1314.154665] ion_system_heap_allocate+0x133/0x8c0 [ 1314.154675] ? _raw_spin_unlock+0x29/0x40 [ 1314.154683] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1314.154694] ? ion_system_contig_heap_create+0x130/0x130 [ 1314.183061] / [ 1314.186301] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1314.216717] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1314.221562] ion_alloc+0x27a/0x810 [ 1314.225105] ? ion_dma_buf_release+0x40/0x40 [ 1314.229515] ? __might_fault+0x177/0x1b0 [ 1314.233574] ion_ioctl+0xea/0x1f0 [ 1314.237026] ? ion_query_heaps+0x360/0x360 [ 1314.241258] ? ion_query_heaps+0x360/0x360 [ 1314.245490] do_vfs_ioctl+0x75a/0xff0 [ 1314.249294] ? ioctl_preallocate+0x1a0/0x1a0 [ 1314.253698] ? lock_downgrade+0x740/0x740 [ 1314.257850] ? __fget+0x225/0x360 [ 1314.261299] ? do_vfs_ioctl+0xff0/0xff0 [ 1314.265270] ? security_file_ioctl+0x83/0xb0 [ 1314.269677] SyS_ioctl+0x7f/0xb0 [ 1314.273038] ? do_vfs_ioctl+0xff0/0xff0 [ 1314.277010] do_syscall_64+0x1d5/0x640 [ 1314.279103] mems_allowed=0-1 [ 1314.280896] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1314.289175] RIP: 0033:0x465f69 [ 1314.292356] RSP: 002b:00007f343bb89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1314.300060] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1314.307324] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1314.314586] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1314.321849] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1314.329112] R13: 00007ffd1e89b06f R14: 00007f343bb89300 R15: 0000000000022000 [ 1314.343352] CPU: 1 PID: 11917 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1314.348363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1314.351247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.360096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1314.369401] Call Trace: [ 1314.369422] dump_stack+0x1b2/0x281 [ 1314.369436] warn_alloc.cold+0x96/0x1cc [ 1314.377999] 25387 total pagecache pages [ 1314.380552] ? zone_watermark_ok_safe+0x220/0x220 [ 1314.384177] 0 pages in swap cache [ 1314.388123] __alloc_pages_nodemask+0x2127/0x2720 [ 1314.392061] Swap cache stats: add 0, delete 0, find 0/0 [ 1314.396892] ? lock_acquire+0x170/0x3f0 [ 1314.396907] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1314.400333] Free swap = 0kB [ 1314.405163] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1314.405176] ? __mutex_unlock_slowpath+0x75/0x770 [ 1314.410518] Total swap = 0kB [ 1314.414478] alloc_pages_current+0x155/0x260 [ 1314.414491] ion_page_pool_alloc+0x118/0x1b0 [ 1314.414502] ion_system_heap_allocate+0x133/0x8c0 [ 1314.419323] 2097051 pages RAM [ 1314.422323] ? _raw_spin_unlock+0x29/0x40 [ 1314.427764] 0 pages HighMem/MovableOnly [ 1314.432570] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1314.435578] 363840 pages reserved [ 1314.439951] ? ion_system_contig_heap_create+0x130/0x130 [ 1314.444351] 0 pages cma reserved [ 1314.449179] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1314.452259] Out of memory (oom_kill_allocating_task): Kill process 10774 (rs:main Q:Reg) score 0 or sacrifice child [ 1314.456388] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1314.456399] ion_alloc+0x27a/0x810 [ 1314.456414] ? ion_dma_buf_release+0x40/0x40 [ 1314.460406] Killed process 10770 (rsyslogd) total-vm:254332kB, anon-rss:948kB, file-rss:0kB, shmem-rss:0kB [ 1314.465287] ? __might_fault+0x177/0x1b0 [ 1314.465299] ion_ioctl+0xea/0x1f0 [ 1314.465309] ? ion_query_heaps+0x360/0x360 [ 1314.470779] oom_reaper: reaped process 10770 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1314.474223] ? ion_query_heaps+0x360/0x360 [ 1314.474234] do_vfs_ioctl+0x75a/0xff0 [ 1314.474245] ? ioctl_preallocate+0x1a0/0x1a0 [ 1314.474253] ? lock_downgrade+0x740/0x740 [ 1314.474270] ? __fget+0x225/0x360 [ 1314.474281] ? do_vfs_ioctl+0xff0/0xff0 [ 1314.478010] warn_alloc_show_mem: 1 callbacks suppressed [ 1314.478012] Mem-Info: [ 1314.482639] ? security_file_ioctl+0x83/0xb0 [ 1314.493276] active_anon:154797 inactive_anon:25009 isolated_anon:0 [ 1314.493276] active_file:11 inactive_file:12 isolated_file:0 [ 1314.493276] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1314.493276] slab_reclaimable:14309 slab_unreclaimable:133185 [ 1314.493276] mapped:52717 shmem:25364 pagetables:24507 bounce:0 [ 1314.493276] free:18454 free_pcp:184 free_cma:0 [ 1314.498043] SyS_ioctl+0x7f/0xb0 [ 1314.498052] ? do_vfs_ioctl+0xff0/0xff0 [ 1314.498067] do_syscall_64+0x1d5/0x640 [ 1314.501592] Node 0 active_anon:612568kB inactive_anon:58588kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184528kB dirty:0kB writeback:0kB shmem:59776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 509952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1314.505974] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1314.505983] RIP: 0033:0x465f69 [ 1314.505991] RSP: 002b:00007f343bb68188 EFLAGS: 00000246 [ 1314.515790] Node 1 active_anon:6620kB inactive_anon:41448kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26340kB dirty:0kB writeback:0kB shmem:41680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1314.519797] ORIG_RAX: 0000000000000010 [ 1314.519804] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1314.523229] Node 0 [ 1314.527456] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1314.527461] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1314.527466] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1314.527471] R13: 00007ffd1e89b06f R14: 00007f343bb68300 R15: 0000000000022000 [ 1314.666113] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1314.704205] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.737700] (null) [ 1314.745658] lowmem_reserve[]: [ 1314.777230] , order=0, oom_score_adj=0 [ 1314.782167] 0 2717 2718 2718 2718 [ 1314.788304] Node 0 DMA32 free:30740kB min:36200kB low:45248kB high:54296kB active_anon:612528kB inactive_anon:58588kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36704kB pagetables:91640kB bounce:0kB free_pcp:184kB local_pcp:60kB free_cma:0kB [ 1314.791561] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 1314.840934] CPU: 1 PID: 11957 Comm: systemd-rfkill Not tainted 4.14.224-syzkaller #0 [ 1314.848413] lowmem_reserve[]: [ 1314.848839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.848847] 0 [ 1314.851942] Call Trace: [ 1314.851963] dump_stack+0x1b2/0x281 [ 1314.861355] 0 [ 1314.863093] dump_header+0x178/0x82f [ 1314.865672] 0 [ 1314.869262] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1314.871036] 0 [ 1314.874730] ? ___ratelimit+0x2cd/0x530 [ 1314.874742] oom_kill_process.cold+0x10/0xb18 [ 1314.874759] out_of_memory+0xe3e/0x1190 [ 1314.876530] 0 [ 1314.881617] ? oom_killer_disable+0x1c0/0x1c0 [ 1314.887374] ? mutex_trylock+0x152/0x1a0 [ 1314.887387] __alloc_pages_nodemask+0x23e1/0x2720 [ 1314.887407] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1314.887428] alloc_pages_current+0x155/0x260 [ 1314.891909] Node 0 [ 1314.895863] filemap_fault+0xea3/0x1980 [ 1314.895880] ext4_filemap_fault+0x84/0xb0 [ 1314.895890] __do_fault+0xfa/0x380 [ 1314.897702] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.902182] __handle_mm_fault+0x2497/0x4620 [ 1314.906282] lowmem_reserve[]: [ 1314.911060] ? vm_insert_page+0x7c0/0x7c0 [ 1314.915893] 0 [ 1314.920272] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 1314.922478] 0 0 [ 1314.926435] ? ktime_get_ts64+0x261/0x3a0 [ 1314.926454] handle_mm_fault+0x391/0x860 [ 1314.930663] 0 [ 1314.934186] __do_page_fault+0x549/0xad0 [ 1314.934198] ? spurious_fault+0x640/0x640 [ 1314.934208] ? do_page_fault+0x60/0x500 [ 1314.959098] 0 [ 1314.963477] ? page_fault+0x2f/0x50 [ 1314.970682] page_fault+0x45/0x50 [ 1314.972458] Node 1 [ 1314.978230] RIP: 5ee84f50: (null) [ 1314.978235] RSP: 54c4040:00007ffc5ee84f58 EFLAGS: 0000000b [ 1314.985528] Bluetooth: hci2 command 0x041b tx timeout [ 1314.991914] syz-executor.3: [ 1314.999714] Mem-Info: [ 1315.010952] page allocation failure: order:0 [ 1315.013467] active_anon:154749 inactive_anon:25009 isolated_anon:0 [ 1315.013467] active_file:10 inactive_file:12 isolated_file:0 [ 1315.013467] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1315.013467] slab_reclaimable:14309 slab_unreclaimable:133180 [ 1315.013467] mapped:52717 shmem:25364 pagetables:24507 bounce:0 [ 1315.013467] free:13843 free_pcp:61 free_cma:0 [ 1315.013813] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1315.023439] Node 0 active_anon:612472kB inactive_anon:58588kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184528kB dirty:0kB writeback:0kB shmem:59776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 509952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1315.028243] Normal free:26660kB min:53696kB low:67120kB high:80544kB active_anon:6524kB inactive_anon:41448kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.030671] Node 1 active_anon:6524kB inactive_anon:41448kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26340kB dirty:0kB writeback:0kB shmem:41680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1315.032088] lowmem_reserve[]: [ 1315.039618] Node 0 [ 1315.082222] syz-executor.3 cpuset= [ 1315.115099] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.147211] 0 [ 1315.170293] lowmem_reserve[]: [ 1315.182974] / [ 1315.205387] 0 2717 2718 2718 2718 [ 1315.210635] Node 0 DMA32 free:17752kB min:36200kB low:45248kB high:54296kB active_anon:612432kB inactive_anon:58588kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36672kB pagetables:91640kB bounce:0kB free_pcp:244kB local_pcp:124kB free_cma:0kB [ 1315.213991] 0 [ 1315.246013] mems_allowed=0-1 [ 1315.250926] CPU: 0 PID: 11917 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1315.253635] lowmem_reserve[]: [ 1315.258791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1315.258795] Call Trace: [ 1315.258814] dump_stack+0x1b2/0x281 [ 1315.258828] warn_alloc.cold+0x96/0x1cc [ 1315.258838] ? zone_watermark_ok_safe+0x220/0x220 [ 1315.258847] ? usleep_range+0x130/0x130 [ 1315.258856] ? try_to_free_pages+0x23f/0x6e0 [ 1315.258871] ? _find_next_bit+0xdb/0x100 [ 1315.263845] 0 [ 1315.271306] ? run_timer_softirq+0x5a0/0x5a0 [ 1315.271321] __alloc_pages_nodemask+0x2127/0x2720 [ 1315.271336] ? lock_acquire+0x170/0x3f0 [ 1315.271351] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1315.271362] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1315.271378] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1315.271397] alloc_pages_current+0x155/0x260 [ 1315.271409] ion_page_pool_alloc+0x118/0x1b0 [ 1315.271420] ion_system_heap_allocate+0x133/0x8c0 [ 1315.271431] ? _raw_spin_unlock+0x29/0x40 [ 1315.286701] 0 [ 1315.290351] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1315.303909] 0 [ 1315.304960] ? ion_system_contig_heap_create+0x130/0x130 [ 1315.304971] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1315.304982] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1315.304993] ion_alloc+0x27a/0x810 [ 1315.305009] ? ion_dma_buf_release+0x40/0x40 [ 1315.305019] ? __might_fault+0x177/0x1b0 [ 1315.305030] ion_ioctl+0xea/0x1f0 [ 1315.305038] ? ion_query_heaps+0x360/0x360 [ 1315.305050] ? ion_query_heaps+0x360/0x360 [ 1315.312939] 0 [ 1315.313831] do_vfs_ioctl+0x75a/0xff0 [ 1315.329923] 0 [ 1315.332960] ? ioctl_preallocate+0x1a0/0x1a0 [ 1315.343042] 0 [ 1315.346300] ? lock_downgrade+0x740/0x740 [ 1315.346314] ? __fget+0x225/0x360 [ 1315.346324] ? do_vfs_ioctl+0xff0/0xff0 [ 1315.346333] ? security_file_ioctl+0x83/0xb0 [ 1315.346343] SyS_ioctl+0x7f/0xb0 [ 1315.346351] ? do_vfs_ioctl+0xff0/0xff0 [ 1315.346362] do_syscall_64+0x1d5/0x640 [ 1315.346379] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1315.346387] RIP: 0033:0x465f69 [ 1315.354002] 0 [ 1315.354868] RSP: 002b:00007f343bb68188 EFLAGS: 00000246 [ 1315.373659] ORIG_RAX: 0000000000000010 [ 1315.380246] 0 [ 1315.382098] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1315.396823] Node 0 [ 1315.399525] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1315.401318] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.405693] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1315.405697] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1315.405702] R13: 00007ffd1e89b06f R14: 00007f343bb68300 R15: 0000000000022000 [ 1315.418644] warn_alloc_show_mem: 1 callbacks suppressed [ 1315.418647] Mem-Info: [ 1315.434307] active_anon:154749 inactive_anon:25009 isolated_anon:0 [ 1315.434307] active_file:10 inactive_file:12 isolated_file:0 [ 1315.434307] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1315.434307] slab_reclaimable:14309 slab_unreclaimable:133180 [ 1315.434307] mapped:52717 shmem:25364 pagetables:24507 bounce:0 [ 1315.434307] free:13843 free_pcp:61 free_cma:0 [ 1315.438381] Node 0 [ 1315.439960] Node 0 active_anon:612472kB inactive_anon:58588kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184528kB dirty:0kB writeback:0kB shmem:59776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 509952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1315.443122] DMA: [ 1315.457459] Node 1 active_anon:6524kB inactive_anon:41448kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26340kB dirty:0kB writeback:0kB shmem:41680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1315.467619] lowmem_reserve[]: [ 1315.480746] Node 0 [ 1315.499693] 4*4kB [ 1315.513219] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.527887] (UME) [ 1315.574623] lowmem_reserve[]: [ 1315.595034] 0 [ 1315.634860] 0 [ 1315.657407] 0 0 0 0 [ 1315.665045] 4*8kB (ME) 2*16kB (E) 0*32kB 2*64kB (ME) 2*128kB (ME) 9*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10960kB [ 1315.673531] 2717 [ 1315.682128] Node 1 [ 1315.682677] 2718 [ 1315.684249] Normal free:26660kB min:53696kB low:67120kB high:80544kB active_anon:6524kB inactive_anon:41448kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.686443] 2718 [ 1315.688485] lowmem_reserve[]: [ 1315.722769] Node 0 DMA32: 2182*4kB (ME) 436*8kB (ME) 106*16kB (ME) 120*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17752kB [ 1315.731782] 2718 [ 1315.743773] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1315.761045] 0 0 0 0 0 [ 1315.763564] Node 0 DMA: 4*4kB (UME) 4*8kB (ME) 2*16kB (E) 0*32kB 2*64kB (ME) 2*128kB (ME) 9*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10960kB [ 1315.769738] Node 0 [ 1315.782795] Node 1 Normal: 221*4kB (UME) 106*8kB (UM) 44*16kB (UM) 451*32kB (UM) 1*64kB (U) 2*128kB (UM) 1*256kB (M) 14*512kB (U) 2*1024kB (M) 0*2048kB 0*4096kB = 26660kB [ 1315.790590] DMA32 free:17752kB min:36200kB low:45248kB high:54296kB active_anon:612432kB inactive_anon:58588kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36672kB pagetables:91640kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 1315.811884] Node 0 [ 1315.841767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.845307] lowmem_reserve[]: [ 1315.852890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.852892] 0 0 [ 1315.863057] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.875976] 0 0 0 [ 1315.878147] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.882841] DMA32: [ 1315.912084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.915903] lowmem_reserve[]: 0 [ 1315.922953] 25386 total pagecache pages [ 1315.922963] 0 pages in swap cache [ 1315.937936] 2182*4kB (ME) 436*8kB (ME) 106*16kB (ME) 120*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17752kB [ 1315.941104] 0 [ 1315.950368] Swap cache stats: add 0, delete 0, find 0/0 [ 1315.950372] Free swap = 0kB [ 1315.950375] Total swap = 0kB [ 1315.950382] 2097051 pages RAM [ 1315.950385] 0 pages HighMem/MovableOnly [ 1315.950389] 363840 pages reserved [ 1315.950392] 0 pages cma reserved [ 1315.952255] Node 0 [ 1315.972434] 0 [ 1315.978100] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1315.988487] 0 0 [ 1315.993517] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1316.004685] CPU: 1 PID: 11910 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1316.009642] Node 1 [ 1316.012556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1316.012575] Normal free:26764kB min:53696kB low:67120kB high:80544kB active_anon:6524kB inactive_anon:41448kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1316.014799] Call Trace: [ 1316.014819] dump_stack+0x1b2/0x281 [ 1316.014831] warn_alloc.cold+0x96/0x1cc [ 1316.014843] ? zone_watermark_ok_safe+0x220/0x220 [ 1316.014852] ? usleep_range+0x130/0x130 [ 1316.014860] ? try_to_free_pages+0x23f/0x6e0 [ 1316.014869] ? _find_next_bit+0xdb/0x100 [ 1316.014879] ? run_timer_softirq+0x5a0/0x5a0 [ 1316.014894] __alloc_pages_nodemask+0x2127/0x2720 [ 1316.024257] Normal: [ 1316.052174] ? lock_acquire+0x170/0x3f0 [ 1316.052191] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1316.052202] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1316.052217] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1316.054862] lowmem_reserve[]: [ 1316.058481] ? __list_del_entry_valid+0xb3/0xf0 [ 1316.062445] 0 [ 1316.067278] alloc_pages_current+0x155/0x260 [ 1316.067294] ion_page_pool_alloc+0x118/0x1b0 [ 1316.067304] ion_system_heap_allocate+0x133/0x8c0 [ 1316.067318] ? _raw_spin_unlock+0x29/0x40 [ 1316.071286] 0 [ 1316.075685] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1316.075695] ? ion_system_contig_heap_create+0x130/0x130 [ 1316.075705] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1316.075715] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1316.075725] ion_alloc+0x27a/0x810 [ 1316.079782] 0*4kB [ 1316.084167] ? ion_dma_buf_release+0x40/0x40 [ 1316.084179] ? __might_fault+0x177/0x1b0 [ 1316.084191] ion_ioctl+0xea/0x1f0 [ 1316.089006] 0*8kB [ 1316.091311] ? ion_query_heaps+0x360/0x360 [ 1316.095285] 0 [ 1316.100086] ? ion_query_heaps+0x360/0x360 [ 1316.104568] 0 [ 1316.109983] do_vfs_ioctl+0x75a/0xff0 [ 1316.113057] 0 [ 1316.117711] ? ioctl_preallocate+0x1a0/0x1a0 [ 1316.117719] ? lock_downgrade+0x740/0x740 [ 1316.117732] ? __fget+0x225/0x360 [ 1316.119511] 0*16kB [ 1316.123894] ? do_vfs_ioctl+0xff0/0xff0 [ 1316.128293] 0*32kB [ 1316.133105] ? security_file_ioctl+0x83/0xb0 [ 1316.139015] SyS_ioctl+0x7f/0xb0 [ 1316.143924] Node 0 [ 1316.149353] ? do_vfs_ioctl+0xff0/0xff0 [ 1316.149364] do_syscall_64+0x1d5/0x640 [ 1316.149382] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1316.154421] 0*64kB [ 1316.159225] RIP: 0033:0x465f69 [ 1316.162739] 0*128kB 0*256kB [ 1316.164868] RSP: 002b:00007f343bb89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1316.164878] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1316.164884] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1316.164888] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1316.164895] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1316.169282] DMA: [ 1316.173317] R13: 00007ffd1e89b06f R14: 00007f343bb89300 R15: 0000000000022000 [ 1316.176763] 0*512kB [ 1316.302605] 4*4kB (UME) 4*8kB (ME) 2*16kB (E) 0*32kB 2*64kB (ME) 2*128kB (ME) 9*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10960kB [ 1316.348345] Node 0 DMA32: 1252*4kB (ME) 436*8kB (ME) 106*16kB (ME) 22*32kB (UME) 1147*64kB (U) 221*128kB (U) 7*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 114896kB [ 1316.382676] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1316.427052] Node 1 Normal: 221*4kB (UME) 112*8kB (UM) 50*16kB (UM) 478*32kB (UM) 4432*64kB (UM) 95*128kB (UM) 19*256kB (UM) 14*512kB (U) 5*1024kB (UM) 0*2048kB 0*4096kB = 330836kB [ 1316.450072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1316.493297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1316.510586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1316.579914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1316.626824] 27421 total pagecache pages [ 1316.647356] 0 pages in swap cache [ 1316.662978] Swap cache stats: add 0, delete 0, find 0/0 [ 1316.683634] Free swap = 0kB [ 1316.697546] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1316.702306] Total swap = 0kB [ 1316.712777] Node 1 Normal: 153*4kB (ME) 42*8kB (M) 5*16kB (M) 281*32kB (UM) 5856*64kB (UM) 792*128kB (UM) 187*256kB (U) 30*512kB (U) 5*1024kB (UM) 0*2048kB 0*4096kB = 554532kB [ 1316.736485] 2097051 pages RAM [ 1316.739976] 0 pages HighMem/MovableOnly [ 1316.761692] chnl_net:caif_netlink_parms(): no params data found [ 1316.770185] 363840 pages reserved [ 1316.773655] 0 pages cma reserved [ 1316.798792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1316.838225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1316.860691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1316.883150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1316.908011] 30232 total pagecache pages [ 1316.912024] 0 pages in swap cache [ 1316.928535] Swap cache stats: add 0, delete 0, find 0/0 [ 1316.951460] Free swap = 0kB [ 1316.968030] Total swap = 0kB [ 1316.971084] 2097051 pages RAM [ 1316.975428] 0 pages HighMem/MovableOnly [ 1316.979396] 363840 pages reserved [ 1316.982835] 0 pages cma reserved [ 1317.018336] Out of memory (oom_kill_allocating_task): Kill process 11957 (systemd-rfkill) score 0 or sacrifice child [ 1317.063881] Killed process 11957 (systemd-rfkill) total-vm:37800kB, anon-rss:436kB, file-rss:0kB, shmem-rss:0kB [ 1317.073978] Bluetooth: hci2 command 0x040f tx timeout [ 1317.104929] oom_reaper: reaped process 11957 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1317.352467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.383932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.391244] device bridge_slave_0 entered promiscuous mode [ 1317.474709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.511387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.567378] device bridge_slave_1 entered promiscuous mode [ 1317.979979] oom_reaper: reaped process 11914 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1318.073158] oom_reaper: reaped process 11926 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1318.898581] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1318.948626] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1319.031274] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1319.062991] team0: Port device team_slave_0 added [ 1319.108881] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1319.134627] team0: Port device team_slave_1 added [ 1319.153898] Bluetooth: hci2 command 0x0419 tx timeout [ 1319.200046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.243926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.303800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.346673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.352940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.383416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.457267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1319.484551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1319.561161] device hsr_slave_0 entered promiscuous mode [ 1319.577491] device hsr_slave_1 entered promiscuous mode [ 1319.597582] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1319.617478] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1319.930913] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1319.975995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.986037] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1320.016288] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1320.022470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1320.030644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1320.040725] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1320.047682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.067052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1320.084559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1320.092531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1320.104299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.110678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.129360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1320.136936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1320.148491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1320.156581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1320.169149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.175585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.185875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1320.215526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1320.222483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1320.230590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1320.243934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1320.253209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1320.283846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1320.291639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1320.324339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1320.332124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1320.354466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1320.364391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1320.377852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1320.404171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1320.411857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1320.438126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1320.464182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1320.502026] IPVS: ftp: loaded support on port[0] = 21 [ 1320.509280] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1320.532063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1320.626256] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1320.642353] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1320.680268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1320.687470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1321.137659] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1321.163058] systemd-journal cpuset=/ mems_allowed=0-1 [ 1321.168499] CPU: 0 PID: 11869 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 1321.176461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1321.185797] Call Trace: [ 1321.188379] dump_stack+0x1b2/0x281 [ 1321.191986] dump_header+0x178/0x82f [ 1321.195681] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1321.200762] ? ___ratelimit+0x2cd/0x530 [ 1321.204714] oom_kill_process.cold+0x10/0xb18 [ 1321.209196] out_of_memory+0xe3e/0x1190 [ 1321.213151] ? oom_killer_disable+0x1c0/0x1c0 [ 1321.217622] ? mutex_trylock+0x152/0x1a0 [ 1321.221678] __alloc_pages_nodemask+0x23e1/0x2720 [ 1321.226507] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1321.231338] ? cache_grow_begin+0x41/0x630 [ 1321.235553] cache_grow_begin+0x91/0x630 [ 1321.239594] ? cache_grow_begin+0x91/0x630 [ 1321.243807] fallback_alloc+0x207/0x2c0 [ 1321.247762] kmem_cache_alloc+0x1e5/0x3c0 [ 1321.251889] getname_flags+0xc8/0x550 [ 1321.255671] user_path_at_empty+0x2a/0x50 [ 1321.259798] SyS_faccessat+0x21b/0x680 [ 1321.263666] ? SyS_fallocate+0x80/0x80 [ 1321.267546] ? do_syscall_64+0x4c/0x640 [ 1321.271496] ? SyS_faccessat+0x680/0x680 [ 1321.275535] do_syscall_64+0x1d5/0x640 [ 1321.279405] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1321.284574] RIP: 0033:0x7f9c677299c7 [ 1321.288261] RSP: 002b:00007ffc5bd07138 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1321.295949] RAX: ffffffffffffffda RBX: 00007ffc5bd0a050 RCX: 00007f9c677299c7 [ 1321.303197] RDX: 00007f9c6819aa00 RSI: 0000000000000000 RDI: 000055da500e29a3 [ 1321.310445] RBP: 00007ffc5bd07170 R08: 0000000000000000 R09: 0000000000000000 [ 1321.317695] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1321.324944] R13: 0000000000000000 R14: 00007ffc5bd0a050 R15: 00007ffc5bd07660 [ 1321.348337] Mem-Info: [ 1321.350787] active_anon:154440 inactive_anon:25010 isolated_anon:0 [ 1321.350787] active_file:25 inactive_file:14 isolated_file:0 [ 1321.350787] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1321.350787] slab_reclaimable:14246 slab_unreclaimable:135136 [ 1321.350787] mapped:52819 shmem:25364 pagetables:24506 bounce:0 [ 1321.350787] free:13819 free_pcp:0 free_cma:0 [ 1321.385928] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1321.402114] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1321.409439] CPU: 1 PID: 11926 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 1321.417325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1321.426672] Call Trace: [ 1321.429260] dump_stack+0x1b2/0x281 [ 1321.432883] warn_alloc.cold+0x96/0x1cc [ 1321.436854] ? zone_watermark_ok_safe+0x220/0x220 [ 1321.441686] ? usleep_range+0x130/0x130 [ 1321.445654] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1321.449111] Node 0 active_anon:610296kB inactive_anon:58580kB active_file:52kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164176kB dirty:4kB writeback:0kB shmem:59768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1321.450747] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1321.478588] Node 1 active_anon:7464kB inactive_anon:41460kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47100kB dirty:0kB writeback:0kB shmem:41688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1321.483559] ? run_timer_softirq+0x5a0/0x5a0 [ 1321.483580] __alloc_pages_nodemask+0x2127/0x2720 [ 1321.510719] Node 0 [ 1321.515105] ? lock_acquire+0x170/0x3f0 [ 1321.515120] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1321.519939] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1321.522171] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1321.526130] lowmem_reserve[]: [ 1321.530947] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1321.556531] 0 [ 1321.561017] alloc_pages_current+0x155/0x260 [ 1321.564101] 2717 [ 1321.569530] ion_page_pool_alloc+0x118/0x1b0 [ 1321.571299] 2718 [ 1321.575718] ion_system_heap_allocate+0x133/0x8c0 [ 1321.575729] ? ion_alloc+0x187/0x810 [ 1321.575740] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1321.577775] 2718 [ 1321.582165] ? ion_system_contig_heap_create+0x130/0x130 [ 1321.584220] 2718 [ 1321.589032] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1321.598167] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1321.598179] ion_alloc+0x204/0x810 [ 1321.598193] ? ion_dma_buf_release+0x40/0x40 [ 1321.600247] Node 0 [ 1321.605680] ? __might_fault+0x177/0x1b0 [ 1321.605693] ion_ioctl+0xea/0x1f0 [ 1321.605702] ? ion_query_heaps+0x360/0x360 [ 1321.607756] DMA32 free:17964kB min:36200kB low:45248kB high:54296kB active_anon:610256kB inactive_anon:58580kB active_file:256kB inactive_file:380kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36576kB pagetables:91444kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 1321.612743] ? ion_query_heaps+0x360/0x360 [ 1321.617572] lowmem_reserve[]: [ 1321.621081] do_vfs_ioctl+0x75a/0xff0 [ 1321.625474] 0 [ 1321.627685] ? ioctl_preallocate+0x1a0/0x1a0 [ 1321.631715] 0 [ 1321.635150] ? lock_downgrade+0x740/0x740 [ 1321.635164] ? __fget+0x225/0x360 [ 1321.635172] ? do_vfs_ioctl+0xff0/0xff0 [ 1321.639379] 0 [ 1321.667824] ? security_file_ioctl+0x83/0xb0 [ 1321.667834] SyS_ioctl+0x7f/0xb0 [ 1321.667841] ? do_vfs_ioctl+0xff0/0xff0 [ 1321.667851] do_syscall_64+0x1d5/0x640 [ 1321.667871] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1321.672096] 0 [ 1321.675183] RIP: 0033:0x465f69 [ 1321.675187] RSP: 002b:00007f7b1dce0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1321.675197] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1321.675204] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1321.678993] 0 [ 1321.680770] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1321.680776] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1321.686942] R13: 00007ffc6d6ecd2f R14: 00007f7b1dce0300 R15: 0000000000022000 [ 1321.691064] Node 0 [ 1321.700241] warn_alloc_show_mem: 1 callbacks suppressed [ 1321.700244] Mem-Info: [ 1321.700716] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1321.704728] active_anon:154440 inactive_anon:25010 isolated_anon:0 [ 1321.704728] active_file:25 inactive_file:14 isolated_file:0 [ 1321.704728] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1321.704728] slab_reclaimable:14246 slab_unreclaimable:135136 [ 1321.704728] mapped:52819 shmem:25364 pagetables:24506 bounce:0 [ 1321.704728] free:13819 free_pcp:9 free_cma:0 [ 1321.704744] Node 0 active_anon:610296kB inactive_anon:58580kB active_file:52kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164176kB dirty:4kB writeback:0kB shmem:59768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1321.704759] Node 1 active_anon:7464kB inactive_anon:41460kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47100kB dirty:0kB writeback:0kB shmem:41688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1321.704763] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1321.704781] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1321.704800] Node 0 DMA32 free:17964kB min:36200kB low:45248kB high:54296kB active_anon:610256kB inactive_anon:58580kB active_file:256kB inactive_file:380kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36576kB pagetables:91444kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 1321.704818] lowmem_reserve[]: 0 0 0 0 0 [ 1321.704834] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1321.704857] lowmem_reserve[]: 0 0 0 0 0 [ 1321.704876] Node 1 Normal free:26352kB min:53696kB low:67120kB high:80544kB active_anon:7464kB inactive_anon:41460kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2432kB pagetables:6580kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1321.704895] lowmem_reserve[]: 0 0 0 0 0 [ 1321.704912] Node 0 DMA: 4*4kB (UME) 4*8kB (ME) 2*16kB (E) 0*32kB 2*64kB (ME) 2*128kB (ME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 1321.704980] Node 0 DMA32: 2354*4kB (UME) 465*8kB (UME) 195*16kB (UME) 29*32kB (UME) 15*64kB (UM) [ 1321.708439] syz-executor.4: [ 1321.712324] 0*128kB 0*256kB [ 1321.716278] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1321.716298] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1321.716318] CPU: 0 PID: 11921 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1321.716323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1321.716327] Call Trace: [ 1321.716342] dump_stack+0x1b2/0x281 [ 1321.716360] warn_alloc.cold+0x96/0x1cc [ 1321.716373] ? zone_watermark_ok_safe+0x220/0x220 [ 1321.716382] ? usleep_range+0x130/0x130 [ 1321.716392] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1321.726276] 0*512kB [ 1321.726533] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1321.734989] 0*1024kB [ 1321.741470] ? run_timer_softirq+0x5a0/0x5a0 [ 1321.752261] 0*2048kB [ 1321.757771] __alloc_pages_nodemask+0x2127/0x2720 [ 1321.757788] ? lock_acquire+0x170/0x3f0 [ 1321.757802] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1321.757813] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1321.757827] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1321.757840] ? retint_kernel+0x2d/0x2d [ 1321.770353] 0*4096kB [ 1321.772359] alloc_pages_current+0x155/0x260 [ 1321.774607] = 18144kB [ 1321.779916] ion_page_pool_alloc+0x118/0x1b0 [ 1321.782293] Node 0 [ 1321.807174] ion_system_heap_allocate+0x133/0x8c0 [ 1321.807184] ? ion_alloc+0x187/0x810 [ 1321.807194] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1321.807203] ? ion_system_contig_heap_create+0x130/0x130 [ 1321.807212] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1321.807222] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1321.807234] ion_alloc+0x204/0x810 [ 1321.807246] ? ion_dma_buf_release+0x40/0x40 [ 1321.807258] ? __might_fault+0x177/0x1b0 [ 1321.807270] ion_ioctl+0xea/0x1f0 [ 1321.807278] ? ion_query_heaps+0x360/0x360 [ 1321.807289] ? ion_query_heaps+0x360/0x360 [ 1321.807309] do_vfs_ioctl+0x75a/0xff0 [ 1321.846022] Normal: [ 1321.868402] ? ioctl_preallocate+0x1a0/0x1a0 [ 1321.868412] ? lock_downgrade+0x740/0x740 [ 1321.868424] ? __fget+0x225/0x360 [ 1321.868432] ? do_vfs_ioctl+0xff0/0xff0 [ 1321.868441] ? security_file_ioctl+0x83/0xb0 [ 1321.868450] SyS_ioctl+0x7f/0xb0 [ 1321.868456] ? do_vfs_ioctl+0xff0/0xff0 [ 1321.868466] do_syscall_64+0x1d5/0x640 [ 1321.868482] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1321.868491] RIP: 0033:0x465f69 [ 1321.868496] RSP: 002b:00007f202b27e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1321.868509] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1321.901042] 0*4kB [ 1321.921976] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1321.921981] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1321.921986] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1321.921990] R13: 00007ffe34c2804f R14: 00007f202b27e300 R15: 0000000000022000 [ 1321.933580] lowmem_reserve[]: [ 1321.962122] 0*8kB [ 1321.990059] 0 [ 1322.025677] page allocation failure: order:0 [ 1322.040892] 0 [ 1322.052034] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1322.055085] 0 [ 1322.069952] 0*16kB [ 1322.082288] 0 [ 1322.092310] (null) [ 1322.093198] 0 [ 1322.097195] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1322.097217] CPU: 1 PID: 11914 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1322.097223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1322.097227] Call Trace: [ 1322.097248] dump_stack+0x1b2/0x281 [ 1322.111110] warn_alloc.cold+0x96/0x1cc [ 1322.113421] Node 1 [ 1322.118427] ? zone_watermark_ok_safe+0x220/0x220 [ 1322.118436] ? usleep_range+0x130/0x130 [ 1322.118444] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1322.118456] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1322.121459] Normal free:26352kB min:53696kB low:67120kB high:80544kB active_anon:7464kB inactive_anon:41460kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2432kB pagetables:6580kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1322.125233] ? run_timer_softirq+0x5a0/0x5a0 [ 1322.125250] __alloc_pages_nodemask+0x2127/0x2720 [ 1322.125265] ? lock_acquire+0x170/0x3f0 [ 1322.127645] lowmem_reserve[]: [ 1322.132475] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1322.136439] 0 [ 1322.141248] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1322.145757] 0 [ 1322.151268] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1322.155137] 0 [ 1322.157537] alloc_pages_current+0x155/0x260 [ 1322.161922] 0 [ 1322.164324] ion_page_pool_alloc+0x118/0x1b0 [ 1322.164335] ion_system_heap_allocate+0x133/0x8c0 [ 1322.168718] 0 [ 1322.170940] ? ion_alloc+0x187/0x810 [ 1322.179453] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1322.184890] Node 0 [ 1322.190311] ? ion_system_contig_heap_create+0x130/0x130 [ 1322.195310] DMA: [ 1322.200124] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1322.203650] 4*4kB [ 1322.208051] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1322.212081] (UME) [ 1322.215517] ion_alloc+0x204/0x810 [ 1322.215532] ? ion_dma_buf_release+0x40/0x40 [ 1322.219738] 4*8kB [ 1322.223954] ? __might_fault+0x177/0x1b0 [ 1322.223966] ion_ioctl+0xea/0x1f0 [ 1322.223975] ? ion_query_heaps+0x360/0x360 [ 1322.227749] (ME) [ 1322.230066] ? ion_query_heaps+0x360/0x360 [ 1322.234458] 2*16kB [ 1322.238573] do_vfs_ioctl+0x75a/0xff0 [ 1322.242002] (E) [ 1322.245962] ? ioctl_preallocate+0x1a0/0x1a0 [ 1322.245982] ? lock_downgrade+0x740/0x740 [ 1322.250360] 0*32kB [ 1322.253710] ? __fget+0x225/0x360 [ 1322.253718] ? do_vfs_ioctl+0xff0/0xff0 [ 1322.253730] ? security_file_ioctl+0x83/0xb0 [ 1322.273509] 2*64kB [ 1322.277598] SyS_ioctl+0x7f/0xb0 [ 1322.284881] (ME) [ 1322.286996] ? do_vfs_ioctl+0xff0/0xff0 [ 1322.303505] 2*128kB [ 1322.308760] do_syscall_64+0x1d5/0x640 [ 1322.333511] (ME) [ 1322.336291] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1322.338054] 5*256kB [ 1322.340269] RIP: 0033:0x465f69 [ 1322.342043] (UME) [ 1322.344168] RSP: 002b:00007f202b29f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1322.344178] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1322.344183] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1322.344188] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1322.344195] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1322.353507] 4*512kB [ 1322.358921] R13: 00007ffe34c2804f R14: 00007f202b29f300 R15: 0000000000022000 [ 1322.383507] (UME) [ 1322.393905] 0*32kB [ 1322.428363] 3*1024kB [ 1322.433025] 0*64kB [ 1322.437947] Bluetooth: hci1 command 0x0409 tx timeout [ 1322.447154] 0*128kB [ 1322.473968] (UME) [ 1322.489502] 0*256kB [ 1322.563491] 2*2048kB [ 1322.567887] 0*512kB [ 1322.569741] (UE) 0*4096kB = 10960kB [ 1322.569753] Node 0 DMA32: 2414*4kB (UME) 2093*8kB (UMEH) 2402*16kB (UMEH) 108*32kB (UME) 19*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 69504kB [ 1322.569805] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 1322.577202] 0*1024kB [ 1322.606819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.611153] 0*2048kB [ 1322.623491] 0*128kB [ 1322.629987] 0*4096kB [ 1322.656312] 0*256kB [ 1322.657160] = 0kB [ 1322.673854] 0*512kB [ 1322.679370] Node 1 [ 1322.684610] 0*1024kB [ 1322.699723] Normal: [ 1322.732564] warn_alloc_show_mem: 1 callbacks suppressed [ 1322.732567] Mem-Info: [ 1322.743908] active_anon:154440 inactive_anon:25010 isolated_anon:0 [ 1322.743908] active_file:66 inactive_file:641 isolated_file:0 [ 1322.743908] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1322.743908] slab_reclaimable:14246 slab_unreclaimable:134546 [ 1322.743908] mapped:53187 shmem:25364 pagetables:24506 bounce:0 [ 1322.743908] free:47066 free_pcp:332 free_cma:0 [ 1322.782100] 0*2048kB 0*4096kB = 0kB [ 1322.794351] 689*4kB (UME) 1714*8kB (UM) 1314*16kB (U) 4*32kB (U) 306*64kB (UM) 15*128kB (U) 50*256kB (UM) 6*512kB (UM) 6*1024kB (M) 1*2048kB (M) 3*4096kB (U) = 95476kB [ 1322.805929] Node 1 Normal: 778*4kB (UME) 1800*8kB (UM) 2078*16kB (UM) 4*32kB (U) 306*64kB (UM) 15*128kB (U) 50*256kB (UM) 6*512kB (UM) 6*1024kB (M) 1*2048kB (M) 3*4096kB (U) = 108744kB [ 1322.816815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1322.837736] Node 0 active_anon:610296kB inactive_anon:58580kB active_file:416kB inactive_file:616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164348kB dirty:0kB writeback:0kB shmem:59768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1322.846295] chnl_net:caif_netlink_parms(): no params data found [ 1322.873996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1322.885665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1322.893840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1322.903366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1322.916070] Node 1 active_anon:7464kB inactive_anon:41460kB active_file:48kB inactive_file:2328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48620kB dirty:0kB writeback:0kB shmem:41688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1322.916903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1322.944378] 26607 total pagecache pages [ 1322.973791] 0 pages in swap cache [ 1322.977272] Swap cache stats: add 0, delete 0, find 0/0 [ 1322.982634] Free swap = 0kB [ 1322.991682] Total swap = 0kB [ 1323.012406] Node 0 DMA free:11664kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1323.015415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1323.047593] 2097051 pages RAM [ 1323.063623] 0 pages HighMem/MovableOnly [ 1323.067634] 363840 pages reserved [ 1323.089618] 0 pages cma reserved [ 1323.099011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1323.143693] 26623 total pagecache pages [ 1323.143717] lowmem_reserve[]: 0 2717 [ 1323.147693] 0 pages in swap cache [ 1323.147700] Swap cache stats: add 0, delete 0, find 0/0 [ 1323.151397] 2718 [ 1323.167254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.176567] 2718 2718 [ 1323.183540] Free swap = 0kB [ 1323.184022] Node 0 [ 1323.186570] Total swap = 0kB [ 1323.186594] DMA32 free:122556kB min:36200kB low:45248kB high:54296kB active_anon:610352kB inactive_anon:58580kB active_file:2120kB inactive_file:488kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36640kB pagetables:91472kB bounce:0kB free_pcp:1340kB local_pcp:696kB free_cma:0kB [ 1323.188806] 2097051 pages RAM [ 1323.191828] lowmem_reserve[]: [ 1323.221142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.274440] device bridge_slave_0 entered promiscuous mode [ 1323.280877] 0 0 0 0 0 [ 1323.281700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.283678] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1323.303507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.343453] 0 pages HighMem/MovableOnly [ 1323.347453] 363840 pages reserved [ 1323.350889] 0 pages cma reserved [ 1323.363705] lowmem_reserve[]: 0 0 0 0 0 [ 1323.367737] Node 1 Normal free:232684kB min:53696kB low:67120kB high:80544kB active_anon:7464kB inactive_anon:41460kB active_file:52kB inactive_file:2376kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2432kB pagetables:6580kB bounce:0kB free_pcp:1352kB local_pcp:632kB free_cma:0kB [ 1323.374350] device bridge_slave_1 entered promiscuous mode [ 1323.402721] Out of memory (oom_kill_allocating_task): Kill process 11869 (systemd-journal) score 0 or sacrifice child [ 1323.433528] lowmem_reserve[]: 0 0 0 0 0 [ 1323.437547] Node 0 DMA: 180*4kB (UME) 10*8kB (UME) 3*16kB (UE) 3*32kB (U) 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11184kB [ 1323.443486] Killed process 11869 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:2236kB [ 1323.483459] Node 0 DMA32: 3049*4kB (UME) 2006*8kB (UMEH) 2553*16kB (UMEH) 953*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 100612kB [ 1323.489680] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1323.528682] oom_reaper: reaped process 11869 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2236kB [ 1323.543456] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1323.554485] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1323.562295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1323.580934] Node 1 Normal: 3799*4kB (UME) 2094*8kB (UM) 3048*16kB (U) 1812*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 138700kB [ 1323.581128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1323.595003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1323.595010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1323.595016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1323.595021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1323.595025] 26771 total pagecache pages [ 1323.595043] 0 pages in swap cache [ 1323.595049] Swap cache stats: add 0, delete 0, find 0/0 [ 1323.595052] Free swap = 0kB [ 1323.595056] Total swap = 0kB [ 1323.595063] 2097051 pages RAM [ 1323.595066] 0 pages HighMem/MovableOnly [ 1323.595070] 363840 pages reserved [ 1323.595073] 0 pages cma reserved [ 1323.703669] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1323.736977] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1323.765162] systemd[1]: Stopped Journal Service. [ 1323.790246] systemd[1]: Starting Journal Service... [ 1323.819380] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1323.830030] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1323.900597] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1323.918486] team0: Port device team_slave_0 added [ 1323.937724] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1323.966867] team0: Port device team_slave_1 added [ 1323.979824] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1324.004306] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1324.011125] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1324.043660] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1324.050656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1324.058632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1324.076582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.082940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.109170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.121301] device veth0_vlan entered promiscuous mode [ 1324.127929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1324.135225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1324.142877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.157259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.217727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.242754] device veth1_vlan entered promiscuous mode [ 1324.258788] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1324.287338] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1324.299353] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1324.335037] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1324.391191] device hsr_slave_0 entered promiscuous mode [ 1324.423895] device hsr_slave_1 entered promiscuous mode [ 1324.444103] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1324.452624] systemd-journald[12482]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1324.472244] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1324.513456] Bluetooth: hci1 command 0x041b tx timeout [ 1324.516459] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1324.571917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1324.587844] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1324.662538] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1324.695422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1324.714293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1324.761331] device veth0_macvtap entered promiscuous mode [ 1324.772226] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1324.799426] device veth1_macvtap entered promiscuous mode [ 1324.809788] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1324.862074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1324.930289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1324.965615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1324.983328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.992460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1325.023312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.032451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1325.063309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.083340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1325.093079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.156144] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1325.163128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1325.187495] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1325.207069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1325.214794] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1325.236859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1325.272266] systemd[1]: Started Journal Service. [ 1325.274484] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1325.314835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1325.334533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.351740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1325.403277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.412414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1325.463302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.472455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1325.483363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.494447] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1325.501335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1325.537580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1325.547522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1325.667796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.697473] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1325.736432] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1325.742575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1325.773865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1325.787762] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1325.807843] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.848035] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1325.861455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1325.874491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1325.882381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.888796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.946556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1325.977533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1325.985089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1326.003797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1326.011494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.017915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.068437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1326.076785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1326.097446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1326.121010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1326.136041] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1326.153892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1326.176986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1326.201225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1326.217072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1326.225020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1326.273746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1326.284470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1326.299097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1326.321265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1326.343655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1326.376749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1326.397783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1326.425684] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1326.431744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1326.508753] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1326.521950] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1326.557664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1326.567826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1326.592392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1326.599468] Bluetooth: hci1 command 0x040f tx timeout 10:40:25 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x2710}) [ 1326.928621] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1326.949949] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1326.951168] syz-executor.4: [ 1326.979286] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1326.988344] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1327.003479] CPU: 0 PID: 11914 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1327.008949] page allocation failure: order:4 [ 1327.011412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1327.011415] Call Trace: [ 1327.011432] dump_stack+0x1b2/0x281 [ 1327.011446] warn_alloc.cold+0x96/0x1cc [ 1327.011457] ? zone_watermark_ok_safe+0x220/0x220 [ 1327.011475] __alloc_pages_nodemask+0x2127/0x2720 [ 1327.016982] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1327.025204] ? __schedule+0x893/0x1de0 [ 1327.025220] ? lock_acquire+0x170/0x3f0 [ 1327.025234] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1327.025249] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1327.025260] ? __mutex_unlock_slowpath+0x75/0x770 [ 1327.025274] alloc_pages_current+0x155/0x260 [ 1327.025287] ion_page_pool_alloc+0x118/0x1b0 [ 1327.025297] ion_system_heap_allocate+0x133/0x8c0 [ 1327.025308] ? _raw_spin_unlock+0x29/0x40 [ 1327.025317] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1327.025326] ? ion_system_contig_heap_create+0x130/0x130 [ 1327.025338] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1327.025347] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1327.025358] ion_alloc+0x27a/0x810 [ 1327.025371] ? ion_dma_buf_release+0x40/0x40 [ 1327.025382] ? __might_fault+0x177/0x1b0 [ 1327.025394] ion_ioctl+0xea/0x1f0 [ 1327.025402] ? ion_query_heaps+0x360/0x360 [ 1327.025413] ? ion_query_heaps+0x360/0x360 [ 1327.025422] do_vfs_ioctl+0x75a/0xff0 [ 1327.025432] ? ioctl_preallocate+0x1a0/0x1a0 [ 1327.025442] ? lock_downgrade+0x740/0x740 [ 1327.038060] (null) [ 1327.040440] ? __fget+0x225/0x360 [ 1327.040450] ? do_vfs_ioctl+0xff0/0xff0 [ 1327.040459] ? security_file_ioctl+0x83/0xb0 [ 1327.040470] SyS_ioctl+0x7f/0xb0 [ 1327.040478] ? do_vfs_ioctl+0xff0/0xff0 [ 1327.040488] do_syscall_64+0x1d5/0x640 [ 1327.040505] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1327.040512] RIP: 0033:0x465f69 [ 1327.040519] RSP: 002b:00007f202b29f188 EFLAGS: 00000246 [ 1327.046062] syz-executor.4 cpuset= [ 1327.052427] ORIG_RAX: 0000000000000010 [ 1327.052433] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1327.052438] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1327.052442] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1327.052447] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1327.052452] R13: 00007ffe34c2804f R14: 00007f202b29f300 R15: 0000000000022000 [ 1327.063647] CPU: 0 PID: 11926 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 1327.074689] / [ 1327.075704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1327.082291] mems_allowed=0-1 [ 1327.084487] Call Trace: [ 1327.084504] dump_stack+0x1b2/0x281 [ 1327.084519] warn_alloc.cold+0x96/0x1cc [ 1327.084531] ? zone_watermark_ok_safe+0x220/0x220 [ 1327.084551] __alloc_pages_nodemask+0x2127/0x2720 [ 1327.084567] ? lock_acquire+0x170/0x3f0 [ 1327.084580] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1327.084595] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1327.084607] ? __mutex_unlock_slowpath+0x75/0x770 [ 1327.084620] alloc_pages_current+0x155/0x260 [ 1327.084634] ion_page_pool_alloc+0x118/0x1b0 [ 1327.084645] ion_system_heap_allocate+0x133/0x8c0 [ 1327.084655] ? _raw_spin_unlock+0x29/0x40 [ 1327.084663] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1327.084672] ? ion_system_contig_heap_create+0x130/0x130 [ 1327.084682] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1327.084691] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1327.084701] ion_alloc+0x27a/0x810 [ 1327.084716] ? ion_dma_buf_release+0x40/0x40 [ 1327.084727] ? __might_fault+0x177/0x1b0 [ 1327.084739] ion_ioctl+0xea/0x1f0 [ 1327.084748] ? ion_query_heaps+0x360/0x360 [ 1327.084760] ? ion_query_heaps+0x360/0x360 [ 1327.084770] do_vfs_ioctl+0x75a/0xff0 [ 1327.084781] ? ioctl_preallocate+0x1a0/0x1a0 [ 1327.084789] ? lock_downgrade+0x740/0x740 [ 1327.084802] ? __fget+0x225/0x360 [ 1327.142786] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1327.145911] ? do_vfs_ioctl+0xff0/0xff0 [ 1327.145923] ? security_file_ioctl+0x83/0xb0 [ 1327.145931] SyS_ioctl+0x7f/0xb0 [ 1327.145938] ? do_vfs_ioctl+0xff0/0xff0 [ 1327.145949] do_syscall_64+0x1d5/0x640 [ 1327.145964] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1327.145972] RIP: 0033:0x465f69 [ 1327.145977] RSP: 002b:00007f7b1dce0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1327.145987] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1327.145995] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1327.174018] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1327.175197] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1327.180454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1327.183539] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1327.183544] R13: 00007ffc6d6ecd2f R14: 00007f7b1dce0300 R15: 0000000000022000 [ 1327.199319] Mem-Info: [ 1327.208861] CPU: 1 PID: 11921 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1327.211067] active_anon:154444 inactive_anon:27041 isolated_anon:0 [ 1327.211067] active_file:1876 inactive_file:2364 isolated_file:0 [ 1327.211067] unevictable:0 dirty:40 writeback:0 unstable:0 [ 1327.211067] slab_reclaimable:14161 slab_unreclaimable:134561 [ 1327.211067] mapped:55345 shmem:27411 pagetables:24510 bounce:0 [ 1327.211067] free:176542 free_pcp:630 free_cma:0 [ 1327.218312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1327.218315] Call Trace: [ 1327.218331] dump_stack+0x1b2/0x281 [ 1327.218343] warn_alloc.cold+0x96/0x1cc [ 1327.218355] ? zone_watermark_ok_safe+0x220/0x220 [ 1327.218376] __alloc_pages_nodemask+0x2127/0x2720 [ 1327.218385] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1327.218394] ? finish_task_switch+0x178/0x610 [ 1327.218401] ? finish_task_switch+0x14d/0x610 [ 1327.218413] ? lock_acquire+0x170/0x3f0 [ 1327.218428] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1327.218444] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1327.218456] ? __mutex_unlock_slowpath+0x75/0x770 [ 1327.218466] ? alloc_pages_current+0x73/0x260 [ 1327.218476] alloc_pages_current+0x155/0x260 [ 1327.218490] ion_page_pool_alloc+0x118/0x1b0 [ 1327.218504] ion_system_heap_allocate+0x133/0x8c0 [ 1327.232102] Node 0 active_anon:611896kB inactive_anon:66772kB active_file:6640kB inactive_file:7912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174528kB dirty:156kB writeback:0kB shmem:67960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1327.233032] ? _raw_spin_unlock+0x29/0x40 [ 1327.241512] Node 1 active_anon:5880kB inactive_anon:41392kB active_file:864kB inactive_file:1544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46852kB dirty:4kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1327.242595] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1327.252514] Node 0 [ 1327.255012] ? ion_system_contig_heap_create+0x130/0x130 [ 1327.255024] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1327.255034] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1327.255045] ion_alloc+0x27a/0x810 [ 1327.258974] DMA free:10996kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.261249] ? ion_dma_buf_release+0x40/0x40 [ 1327.265809] lowmem_reserve[]: [ 1327.270023] ? __might_fault+0x177/0x1b0 [ 1327.275418] 0 [ 1327.278797] ion_ioctl+0xea/0x1f0 [ 1327.283629] 2717 [ 1327.289041] ? ion_query_heaps+0x360/0x360 [ 1327.313113] 2718 [ 1327.316523] ? ion_query_heaps+0x360/0x360 [ 1327.321941] 2718 [ 1327.326937] do_vfs_ioctl+0x75a/0xff0 [ 1327.326950] ? ioctl_preallocate+0x1a0/0x1a0 [ 1327.326960] ? lock_downgrade+0x740/0x740 [ 1327.353117] 2718 [ 1327.355622] ? __fget+0x225/0x360 [ 1327.363782] ? do_vfs_ioctl+0xff0/0xff0 [ 1327.363792] ? security_file_ioctl+0x83/0xb0 [ 1327.363803] SyS_ioctl+0x7f/0xb0 [ 1327.374584] Node 0 [ 1327.378269] ? do_vfs_ioctl+0xff0/0xff0 [ 1327.382231] DMA32 free:544984kB min:36200kB low:45248kB high:54296kB active_anon:611988kB inactive_anon:66772kB active_file:6612kB inactive_file:8032kB unevictable:0kB writepending:204kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36704kB pagetables:91644kB bounce:0kB free_pcp:792kB local_pcp:204kB free_cma:0kB [ 1327.386609] do_syscall_64+0x1d5/0x640 [ 1327.386624] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1327.386631] RIP: 0033:0x465f69 [ 1327.386638] RSP: 002b:00007f202b27e188 EFLAGS: 00000246 [ 1327.413108] lowmem_reserve[]: [ 1327.413843] ORIG_RAX: 0000000000000010 [ 1327.421099] 0 [ 1327.428350] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1327.428355] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1327.428359] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1327.428363] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1327.428368] R13: 00007ffe34c2804f R14: 00007f202b27e300 R15: 0000000000022000 [ 1327.436569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1327.493103] 0 [ 1327.548973] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1327.684751] 0 [ 1327.705658] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1327.765825] 0 [ 1327.767359] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1327.769824] 0 [ 1327.897156] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.901898] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1327.922886] lowmem_reserve[]: 0 0 0 0 0 [ 1327.922926] Node 1 Normal free:99612kB min:53696kB low:67120kB high:80544kB active_anon:5880kB inactive_anon:41392kB active_file:864kB inactive_file:1544kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2368kB pagetables:6396kB bounce:0kB free_pcp:1456kB local_pcp:736kB free_cma:0kB [ 1327.922947] lowmem_reserve[]: 0 0 0 0 0 [ 1327.922970] Node 0 DMA: 8*4kB (UME) 23*8kB (UME) 20*16kB (UE) 15*32kB (U) 2*64kB (ME) 3*128kB (UME) 5*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11000kB [ 1327.986636] Node 0 DMA32: 8*4kB (MEH) 362*8kB (EH) 5815*16kB (UMEH) 5622*32kB (UMEH) 45*64kB (UMH) 8*128kB (UMH) 2*256kB (UM) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 281312kB [ 1327.993323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1328.002705] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1328.023690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1328.031429] Node 1 Normal: 1429*4kB (UME) 1935*8kB (UM) 1553*16kB (UM) 1423*32kB (UM) 41*64kB (U) 35*128kB (U) 0*256kB 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 99708kB [ 1328.032875] device veth0_vlan entered promiscuous mode [ 1328.073094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.082067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1328.087301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1328.098431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1328.105102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.105112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1328.141615] device veth1_vlan entered promiscuous mode [ 1328.143076] 31663 total pagecache pages [ 1328.150896] 0 pages in swap cache [ 1328.173082] Swap cache stats: add 0, delete 0, find 0/0 [ 1328.178476] Free swap = 0kB [ 1328.181190] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1328.181488] Total swap = 0kB [ 1328.203073] 2097051 pages RAM [ 1328.206251] 0 pages HighMem/MovableOnly [ 1328.210220] 363840 pages reserved [ 1328.215887] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1328.222770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1328.223202] 0 pages cma reserved [ 1328.233993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1328.248022] device veth0_macvtap entered promiscuous mode [ 1328.254877] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1328.265349] device veth1_macvtap entered promiscuous mode [ 1328.271684] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1328.282716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1328.294465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1328.304342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1328.314363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.324563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1328.353794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.362941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1328.423195] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1328.437272] systemd-journal cpuset=/ mems_allowed=0-1 [ 1328.442500] CPU: 0 PID: 12482 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 1328.450464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1328.451774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.459812] Call Trace: [ 1328.459830] dump_stack+0x1b2/0x281 [ 1328.459842] dump_header+0x178/0x82f [ 1328.459852] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1328.459860] ? ___ratelimit+0x2cd/0x530 [ 1328.459869] oom_kill_process.cold+0x10/0xb18 [ 1328.492453] out_of_memory+0xe3e/0x1190 [ 1328.496434] ? oom_killer_disable+0x1c0/0x1c0 [ 1328.500929] ? mutex_trylock+0x152/0x1a0 [ 1328.504998] __alloc_pages_nodemask+0x23e1/0x2720 [ 1328.509840] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1328.514673] ? cache_grow_begin+0x41/0x630 [ 1328.518890] cache_grow_begin+0x91/0x630 [ 1328.522929] ? cache_grow_begin+0x91/0x630 [ 1328.527144] fallback_alloc+0x207/0x2c0 [ 1328.531098] kmem_cache_alloc+0x1e5/0x3c0 [ 1328.535226] getname_flags+0xc8/0x550 [ 1328.539008] user_path_at_empty+0x2a/0x50 [ 1328.543137] SyS_faccessat+0x21b/0x680 [ 1328.547002] ? SyS_fallocate+0x80/0x80 [ 1328.550870] ? do_syscall_64+0x4c/0x640 [ 1328.554823] ? SyS_faccessat+0x680/0x680 [ 1328.558862] do_syscall_64+0x1d5/0x640 [ 1328.562732] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1328.567901] RIP: 0033:0x7f18634069c7 [ 1328.571590] RSP: 002b:00007ffc4d5674d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1328.579280] RAX: ffffffffffffffda RBX: 00007ffc4d56a3f0 RCX: 00007f18634069c7 [ 1328.586529] RDX: 00007f1863e77a00 RSI: 0000000000000000 RDI: 000055a01b3b59a3 [ 1328.593777] RBP: 00007ffc4d567510 R08: 0000000000000000 R09: 0000000000000000 [ 1328.601024] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1328.608274] R13: 0000000000000000 R14: 00007ffc4d56a3f0 R15: 00007ffc4d567a00 [ 1328.630340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1328.644527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.655569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1328.667249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.676585] Bluetooth: hci1 command 0x0419 tx timeout [ 1328.783030] Mem-Info: [ 1328.785489] active_anon:154396 inactive_anon:27041 isolated_anon:0 [ 1328.785489] active_file:539 inactive_file:472 isolated_file:40 [ 1328.785489] unevictable:0 dirty:70 writeback:0 unstable:0 [ 1328.785489] slab_reclaimable:14146 slab_unreclaimable:134361 [ 1328.785489] mapped:53577 shmem:27411 pagetables:24485 bounce:0 [ 1328.785489] free:15056 free_pcp:209 free_cma:0 [ 1328.882552] Node 0 active_anon:611812kB inactive_anon:66772kB active_file:88kB inactive_file:224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165628kB dirty:276kB writeback:0kB shmem:67960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1328.944860] Node 1 active_anon:5764kB inactive_anon:41392kB active_file:384kB inactive_file:320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45588kB dirty:4kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1329.036105] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1329.063241] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1329.068457] Node 0 DMA32 free:18108kB min:36200kB low:45248kB high:54296kB active_anon:611804kB inactive_anon:66772kB active_file:128kB inactive_file:180kB unevictable:0kB writepending:204kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36608kB pagetables:91544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1329.097787] lowmem_reserve[]: 0 0 0 0 0 [ 1329.101804] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1329.127491] lowmem_reserve[]: 0 0 0 0 0 [ 1329.131481] Node 1 Normal free:26424kB min:53696kB low:67120kB high:80544kB active_anon:5764kB inactive_anon:41392kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2368kB pagetables:6396kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB [ 1329.160272] lowmem_reserve[]: 0 0 0 0 0 [ 1329.164317] Node 0 DMA: 3*4kB (ME) 22*8kB (UME) 20*16kB (UE) 15*32kB (U) 2*64kB (ME) 3*128kB (UME) 5*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10972kB [ 1329.180089] Node 0 DMA32: 1735*4kB (UMEH) 608*8kB (MEH) 165*16kB (UMEH) 43*32kB (UMEH) 12*64kB (UMH) 2*128kB (H) 1*256kB (U) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 18124kB [ 1329.196156] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1329.206854] Node 1 Normal: 175*4kB (UME) 63*8kB (M) 16*16kB (M) 522*32kB (UM) 51*64kB (UM) 35*128kB (U) 0*256kB 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26932kB [ 1329.221414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1329.230283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1329.239520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1329.248407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1329.257026] 27516 total pagecache pages [ 1329.260999] 0 pages in swap cache [ 1329.264515] Swap cache stats: add 0, delete 0, find 0/0 [ 1329.269867] Free swap = 0kB [ 1329.272870] Total swap = 0kB [ 1329.275960] 2097051 pages RAM [ 1329.279043] 0 pages HighMem/MovableOnly [ 1329.283031] 363840 pages reserved [ 1329.286472] 0 pages cma reserved [ 1329.289830] Out of memory (oom_kill_allocating_task): Kill process 12482 (systemd-journal) score 0 or sacrifice child [ 1329.300645] Killed process 12482 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:4kB, shmem-rss:1556kB [ 1329.312494] oom_reaper: reaped process 12482 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1556kB [ 1329.363336] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1329.393240] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1329.398402] CPU: 1 PID: 12216 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1329.406391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1329.415733] Call Trace: [ 1329.418342] dump_stack+0x1b2/0x281 [ 1329.421955] dump_header+0x178/0x82f [ 1329.425647] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1329.430724] ? ___ratelimit+0x2cd/0x530 [ 1329.434677] oom_kill_process.cold+0x10/0xb18 [ 1329.439151] out_of_memory+0xe3e/0x1190 [ 1329.443135] ? oom_killer_disable+0x1c0/0x1c0 [ 1329.447608] ? mutex_trylock+0x152/0x1a0 [ 1329.451645] __alloc_pages_nodemask+0x23e1/0x2720 [ 1329.456470] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1329.461341] ? mark_held_locks+0xa6/0xf0 [ 1329.465379] ? cache_grow_begin+0x41/0x630 [ 1329.469590] cache_grow_begin+0x91/0x630 [ 1329.473630] ? cache_grow_begin+0x91/0x630 [ 1329.477842] fallback_alloc+0x207/0x2c0 [ 1329.481795] kmem_cache_alloc_node+0xe3/0x410 [ 1329.486270] __alloc_skb+0x5c/0x510 [ 1329.489891] rtmsg_fib+0x1e8/0x4c0 [ 1329.493441] fib_table_insert+0x69c/0x1330 [ 1329.497657] ? fib_triestat_seq_show+0xd70/0xd70 [ 1329.502386] ? fib_magic+0x145/0x460 [ 1329.506078] ? fib_new_table+0xdd/0x410 [ 1329.510045] fib_magic+0x328/0x460 [ 1329.513572] ? fib_new_table+0x410/0x410 [ 1329.517633] ? igmp_group_added+0x41a/0x650 [ 1329.521936] fib_add_ifaddr+0x3a6/0x450 [ 1329.525889] fib_netdev_event+0x399/0x4d0 [ 1329.530014] notifier_call_chain+0x108/0x1a0 [ 1329.534409] __dev_notify_flags+0xdf/0x260 [ 1329.538621] ? dev_change_name+0x6a0/0x6a0 [ 1329.542830] ? dev_set_allmulti+0x30/0x30 [ 1329.546961] ? mark_held_locks+0xa6/0xf0 [ 1329.550997] dev_change_flags+0xe6/0x130 [ 1329.555037] do_setlink+0x83f/0x2bf0 [ 1329.558815] ? __save_stack_trace+0xa0/0x160 [ 1329.563197] ? rtnl_fdb_add+0x770/0x770 [ 1329.567148] ? check_preemption_disabled+0x35/0x240 [ 1329.572139] ? trace_hardirqs_on+0x10/0x10 [ 1329.576350] ? deref_stack_reg+0x124/0x1a0 [ 1329.580560] ? kasan_slab_free+0x12d/0x1a0 [ 1329.584774] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1329.590634] ? kasan_slab_free+0xc3/0x1a0 [ 1329.594773] ? kfree_skbmem+0x98/0x100 [ 1329.598636] ? consume_skb+0xed/0x380 [ 1329.602413] ? unwind_next_frame+0xe54/0x17d0 [ 1329.606886] ? __save_stack_trace+0x63/0x160 [ 1329.611270] ? deref_stack_reg+0x124/0x1a0 [ 1329.615496] ? is_bpf_text_address+0x91/0x150 [ 1329.619967] ? lock_acquire+0x170/0x3f0 [ 1329.623919] ? lock_downgrade+0x740/0x740 [ 1329.628047] ? validate_nla+0x192/0x5e0 [ 1329.631996] ? nla_parse+0x157/0x1f0 [ 1329.635689] rtnl_newlink+0x1267/0x1830 [ 1329.639639] ? rtnl_newlink+0xa25/0x1830 [ 1329.643693] ? __lock_acquire+0x5fc/0x3f20 [ 1329.647910] ? kmem_cache_free+0x7c/0x2b0 [ 1329.652031] ? rtnl_dellink+0x6a0/0x6a0 [ 1329.655997] ? trace_hardirqs_on+0x10/0x10 [ 1329.660212] ? netlink_deliver_tap+0x60c/0x7d0 [ 1329.664770] ? netlink_unicast+0x485/0x610 [ 1329.668984] ? netlink_sendmsg+0x62e/0xb80 [ 1329.673198] ? sock_sendmsg+0x40/0x100 [ 1329.677076] ? SyS_sendto+0x1c7/0x2c0 [ 1329.680851] ? do_syscall_64+0x1d5/0x640 [ 1329.684889] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1329.690230] ? __lock_acquire+0x5fc/0x3f20 [ 1329.694453] ? lock_acquire+0x170/0x3f0 [ 1329.698403] ? lock_downgrade+0x740/0x740 [ 1329.702526] ? rtnl_dellink+0x6a0/0x6a0 [ 1329.706476] rtnetlink_rcv_msg+0x3be/0xb10 [ 1329.710689] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1329.715159] ? __netlink_lookup+0x345/0x5d0 [ 1329.719454] ? netdev_pick_tx+0x2e0/0x2e0 [ 1329.723580] netlink_rcv_skb+0x125/0x390 [ 1329.727616] ? memcpy+0x35/0x50 [ 1329.730886] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1329.735359] ? netlink_ack+0x9a0/0x9a0 [ 1329.739227] netlink_unicast+0x437/0x610 [ 1329.743266] ? netlink_sendskb+0xd0/0xd0 [ 1329.747301] ? __check_object_size+0x179/0x230 [ 1329.751874] netlink_sendmsg+0x62e/0xb80 [ 1329.755915] ? nlmsg_notify+0x170/0x170 [ 1329.759869] ? security_socket_sendmsg+0x83/0xb0 [ 1329.764600] ? nlmsg_notify+0x170/0x170 [ 1329.768552] sock_sendmsg+0xb5/0x100 [ 1329.772239] SyS_sendto+0x1c7/0x2c0 [ 1329.775843] ? SyS_getpeername+0x220/0x220 [ 1329.780097] ? task_work_run+0xfd/0x190 [ 1329.784050] ? _raw_spin_unlock_irq+0x24/0x80 [ 1329.788521] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1329.793527] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1329.798001] ? task_work_run+0xfd/0x190 [ 1329.801952] ? do_syscall_64+0x4c/0x640 [ 1329.805908] ? SyS_getpeername+0x220/0x220 [ 1329.810118] do_syscall_64+0x1d5/0x640 [ 1329.813986] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1329.819166] RIP: 0033:0x4193fc [ 1329.822330] RSP: 002b:00007ffc26d47500 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1329.830013] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193fc [ 1329.837268] RDX: 000000000000002c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1329.844513] RBP: 0000000000000000 R08: 00007ffc26d47554 R09: 000000000000000c [ 1329.851759] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1329.859007] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1329.874745] Mem-Info: [ 1329.877180] active_anon:154285 inactive_anon:27041 isolated_anon:0 [ 1329.877180] active_file:15 inactive_file:1 isolated_file:0 [ 1329.877180] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1329.877180] slab_reclaimable:14146 slab_unreclaimable:134378 [ 1329.877180] mapped:52615 shmem:27411 pagetables:24485 bounce:0 [ 1329.877180] free:13866 free_pcp:0 free_cma:0 [ 1329.902924] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1329.913974] Node 0 active_anon:611376kB inactive_anon:66772kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165604kB dirty:0kB writeback:0kB shmem:67960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1329.954838] Node 1 active_anon:5764kB inactive_anon:41392kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44856kB dirty:0kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1329.975616] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1329.999055] CPU: 0 PID: 11914 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1330.006955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1330.016304] Call Trace: [ 1330.016996] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1330.018895] dump_stack+0x1b2/0x281 [ 1330.018908] warn_alloc.cold+0x96/0x1cc [ 1330.052708] ? zone_watermark_ok_safe+0x220/0x220 [ 1330.057380] lowmem_reserve[]: [ 1330.057550] ? usleep_range+0x130/0x130 [ 1330.057552] 0 2717 [ 1330.060666] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1330.068127] 2718 2718 [ 1330.071934] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1330.071945] ? run_timer_softirq+0x5a0/0x5a0 [ 1330.074509] syz-executor.1: [ 1330.079425] __alloc_pages_nodemask+0x2127/0x2720 [ 1330.087406] 2718 [ 1330.091633] ? lock_acquire+0x170/0x3f0 [ 1330.093715] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1330.097648] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1330.097660] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1330.110877] Node 0 [ 1330.112341] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1330.116853] DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:611336kB inactive_anon:66772kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36608kB pagetables:91544kB bounce:0kB free_pcp:380kB local_pcp:324kB free_cma:0kB [ 1330.119034] alloc_pages_current+0x155/0x260 [ 1330.127767] (null) [ 1330.152896] ion_page_pool_alloc+0x118/0x1b0 [ 1330.152907] ion_system_heap_allocate+0x133/0x8c0 [ 1330.152919] ? _raw_spin_unlock+0x29/0x40 [ 1330.152927] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1330.152938] ? ion_system_contig_heap_create+0x130/0x130 [ 1330.152949] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1330.152960] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1330.152970] ion_alloc+0x27a/0x810 [ 1330.152983] ? ion_dma_buf_release+0x40/0x40 [ 1330.160630] lowmem_reserve[]: [ 1330.163898] ? __might_fault+0x177/0x1b0 [ 1330.163911] ion_ioctl+0xea/0x1f0 [ 1330.163921] ? ion_query_heaps+0x360/0x360 [ 1330.163932] ? ion_query_heaps+0x360/0x360 [ 1330.163942] do_vfs_ioctl+0x75a/0xff0 [ 1330.168758] 0 [ 1330.172889] ? ioctl_preallocate+0x1a0/0x1a0 [ 1330.172898] ? lock_downgrade+0x740/0x740 [ 1330.172910] ? __fget+0x225/0x360 [ 1330.172918] ? do_vfs_ioctl+0xff0/0xff0 [ 1330.172927] ? security_file_ioctl+0x83/0xb0 [ 1330.172937] SyS_ioctl+0x7f/0xb0 [ 1330.172945] ? do_vfs_ioctl+0xff0/0xff0 [ 1330.172956] do_syscall_64+0x1d5/0x640 [ 1330.172971] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1330.172980] RIP: 0033:0x465f69 [ 1330.181184] 0 [ 1330.183311] RSP: 002b:00007f202b29f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1330.183321] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1330.183326] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1330.183331] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1330.183336] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1330.183341] R13: 00007ffe34c2804f R14: 00007f202b29f300 R15: 0000000000022000 [ 1330.194990] warn_alloc_show_mem: 2 callbacks suppressed [ 1330.194993] Mem-Info: [ 1330.200563] syz-executor.1 cpuset= [ 1330.201230] active_anon:154285 inactive_anon:27041 isolated_anon:0 [ 1330.201230] active_file:15 inactive_file:0 isolated_file:0 [ 1330.201230] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1330.201230] slab_reclaimable:14121 slab_unreclaimable:134379 [ 1330.201230] mapped:52615 shmem:27411 pagetables:24485 bounce:0 [ 1330.201230] free:13868 free_pcp:95 free_cma:0 [ 1330.204381] / mems_allowed=0-1 [ 1330.204397] CPU: 1 PID: 11926 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 1330.212227] Node 0 active_anon:611376kB inactive_anon:66772kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165604kB dirty:0kB writeback:0kB shmem:67960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1330.216078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1330.216082] Call Trace: [ 1330.216100] dump_stack+0x1b2/0x281 [ 1330.216114] warn_alloc.cold+0x96/0x1cc [ 1330.216124] ? zone_watermark_ok_safe+0x220/0x220 [ 1330.216133] ? usleep_range+0x130/0x130 [ 1330.216141] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1330.216153] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1330.216163] ? run_timer_softirq+0x5a0/0x5a0 [ 1330.220386] Node 1 active_anon:5764kB inactive_anon:41392kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44856kB dirty:0kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1330.224167] __alloc_pages_nodemask+0x2127/0x2720 [ 1330.224187] ? lock_acquire+0x170/0x3f0 [ 1330.225963] Node 0 [ 1330.230357] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1330.234499] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1330.237937] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1330.241880] lowmem_reserve[]: [ 1330.246276] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1330.246294] alloc_pages_current+0x155/0x260 [ 1330.249629] 0 [ 1330.253588] ion_page_pool_alloc+0x118/0x1b0 [ 1330.253597] ion_system_heap_allocate+0x133/0x8c0 [ 1330.253608] ? _raw_spin_unlock+0x29/0x40 [ 1330.257468] 2717 [ 1330.262641] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1330.265818] 2718 [ 1330.267590] ? ion_system_contig_heap_create+0x130/0x130 [ 1330.275280] 2718 [ 1330.282524] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1330.289776] 2718 [ 1330.297020] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1330.297035] ion_alloc+0x27a/0x810 [ 1330.311574] ? ion_dma_buf_release+0x40/0x40 [ 1330.316921] Node 0 [ 1330.319300] ? __might_fault+0x177/0x1b0 [ 1330.322831] DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:611336kB inactive_anon:66772kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36608kB pagetables:91544kB bounce:0kB free_pcp:380kB local_pcp:56kB free_cma:0kB [ 1330.356119] ion_ioctl+0xea/0x1f0 [ 1330.356128] ? ion_query_heaps+0x360/0x360 [ 1330.356140] ? ion_query_heaps+0x360/0x360 [ 1330.359304] lowmem_reserve[]: [ 1330.367170] do_vfs_ioctl+0x75a/0xff0 [ 1330.367184] ? ioctl_preallocate+0x1a0/0x1a0 [ 1330.394931] 0 [ 1330.404255] ? lock_downgrade+0x740/0x740 [ 1330.404278] ? __fget+0x225/0x360 [ 1330.406833] 0 [ 1330.410441] ? do_vfs_ioctl+0xff0/0xff0 [ 1330.414431] 0 [ 1330.419245] ? security_file_ioctl+0x83/0xb0 [ 1330.423223] 0 [ 1330.428320] SyS_ioctl+0x7f/0xb0 [ 1330.433324] 0 [ 1330.437702] ? do_vfs_ioctl+0xff0/0xff0 [ 1330.469483] do_syscall_64+0x1d5/0x640 [ 1330.473444] Node 0 [ 1330.475655] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1330.480480] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1330.506041] RIP: 0033:0x465f69 [ 1330.506046] RSP: 002b:00007f7b1dce0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1330.506054] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1330.506059] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1330.506063] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1330.506070] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1330.510546] lowmem_reserve[]: [ 1330.513630] R13: 00007ffc6d6ecd2f R14: 00007f7b1dce0300 R15: 0000000000022000 [ 1330.522920] 0 [ 1330.531690] 0 [ 1330.534601] 0 [ 1330.538700] 0 [ 1330.540730] 0 [ 1330.557811] 0 [ 1330.562480] 0 [ 1330.567365] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1330.567383] lowmem_reserve[]: 0 [ 1330.578219] 0 [ 1330.581744] 0 0 [ 1330.622360] 0 [ 1330.627707] Node 1 [ 1330.629285] 0 [ 1330.642016] Normal free:26432kB min:53696kB low:67120kB high:80544kB active_anon:5764kB inactive_anon:41392kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2368kB pagetables:6396kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1330.647093] lowmem_reserve[]: [ 1330.648865] Node 1 [ 1330.650645] 0 0 [ 1330.655100] Normal free:26432kB min:53696kB low:67120kB high:80544kB active_anon:5764kB inactive_anon:41392kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2368kB pagetables:6396kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1330.655103] lowmem_reserve[]: 0 0 0 0 0 [ 1330.655121] Node 0 DMA: 3*4kB (ME) 22*8kB [ 1330.665683] 0 [ 1330.666083] (UME) [ 1330.669900] 0 [ 1330.672113] 20*16kB [ 1330.687861] 0 [ 1330.702596] (UE) 15*32kB (U) [ 1330.720830] 2*64kB [ 1330.735900] Node 0 [ 1330.742725] (ME) [ 1330.754818] DMA: [ 1330.754948] 3*128kB [ 1330.756734] 3*4kB [ 1330.758512] (UME) [ 1330.760289] (ME) [ 1330.762068] 5*256kB [ 1330.772966] 22*8kB [ 1330.791206] (UME) [ 1330.805553] (UME) [ 1330.831879] 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10972kB [ 1330.831904] Node 0 DMA32: 1707*4kB (UME) 607*8kB (UME) 187*16kB (UME) 42*32kB (UME) [ 1330.846208] 20*16kB [ 1330.867086] 10*64kB (UM) 3*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 18068kB [ 1330.867123] Node 0 Normal: 0*4kB [ 1330.881986] (UE) [ 1330.883478] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1330.883512] Node 1 Normal: 174*4kB (ME) 63*8kB (M) 17*16kB (UM) 506*32kB (UM) 51*64kB (UM) 35*128kB (U) 0*256kB 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26432kB [ 1330.883578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1330.883583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1330.883590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1330.888399] 15*32kB [ 1330.888473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1330.890687] (U) [ 1330.892966] 27441 total pagecache pages [ 1330.892978] 0 pages in swap cache [ 1330.892982] Swap cache stats: add 0, delete 0, find 0/0 [ 1330.892985] Free swap = 0kB [ 1330.892989] Total swap = 0kB [ 1330.892995] 2097051 pages RAM [ 1330.892998] 0 pages HighMem/MovableOnly [ 1330.893002] 363840 pages reserved [ 1330.893004] 0 pages cma reserved [ 1330.893011] Out of memory (oom_kill_allocating_task): Kill process 12216 (syz-executor.5) score 0 or sacrifice child [ 1330.893035] Killed process 12216 (syz-executor.5) total-vm:93120kB, anon-rss:76kB, file-rss:33356kB, shmem-rss:0kB [ 1330.902901] 2*64kB [ 1330.937046] syz-executor.5: [ 1330.946281] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask= [ 1330.962855] page allocation failure: order:0 [ 1331.081815] Bluetooth: hci4 command 0x0406 tx timeout [ 1331.086763] (ME) 3*128kB (UME) 5*256kB (UME) 2*512kB (ME) 3*1024kB (UME) [ 1331.092086] (null), order=0, oom_score_adj=0 [ 1331.104846] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1331.111183] CPU: 1 PID: 12219 Comm: rs:main Q:Reg Not tainted 4.14.224-syzkaller #0 [ 1331.115621] 2*2048kB [ 1331.118977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1331.118983] (UE) [ 1331.121370] Call Trace: [ 1331.135340] dump_stack+0x1b2/0x281 [ 1331.138961] dump_header+0x178/0x82f [ 1331.142666] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1331.147768] ? ___ratelimit+0x2cd/0x530 [ 1331.151746] oom_kill_process.cold+0x10/0xb18 [ 1331.156253] out_of_memory+0xe3e/0x1190 [ 1331.160227] ? oom_killer_disable+0x1c0/0x1c0 [ 1331.164714] ? mutex_trylock+0x152/0x1a0 [ 1331.168772] __alloc_pages_nodemask+0x23e1/0x2720 [ 1331.172830] 0*4096kB = 10972kB [ 1331.173613] ? trace_hardirqs_on+0x10/0x10 [ 1331.176785] Node 0 DMA32: [ 1331.181011] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1331.181013] 1272*4kB (ME) [ 1331.183847] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1331.183871] alloc_pages_current+0x155/0x260 [ 1331.200482] pagecache_get_page+0x3f5/0xab0 [ 1331.204807] grab_cache_page_write_begin+0x63/0x90 [ 1331.209734] ext4_da_write_begin+0x249/0xe70 [ 1331.212820] 606*8kB (UME) [ 1331.214131] ? __ext4_journal_stop+0xe7/0x1b0 [ 1331.214142] ? ext4_write_begin+0x1260/0x1260 [ 1331.216970] 183*16kB [ 1331.221445] ? balance_dirty_pages_ratelimited+0x890/0x1800 [ 1331.234016] generic_perform_write+0x1c9/0x420 [ 1331.238594] ? __mnt_drop_write_file+0x5f/0x90 [ 1331.243168] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1331.247834] ? current_time+0xb0/0xb0 [ 1331.251649] ? ext4_file_write_iter+0x1cc/0xd20 [ 1331.252825] (ME) 40*32kB [ 1331.256310] __generic_file_write_iter+0x227/0x590 [ 1331.256322] ext4_file_write_iter+0x276/0xd20 [ 1331.259063] (UME) [ 1331.263974] ? aa_file_perm+0x304/0xab0 [ 1331.263982] ? ext4_file_read_iter+0x330/0x330 [ 1331.263992] ? trace_hardirqs_on+0x10/0x10 [ 1331.264001] ? iov_iter_init+0xa6/0x1c0 [ 1331.282827] 151*64kB [ 1331.283347] __vfs_write+0x44c/0x630 [ 1331.287291] (UM) 227*128kB [ 1331.289694] ? kernel_read+0x110/0x110 [ 1331.300215] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1331.302823] (U) 12*256kB [ 1331.305229] vfs_write+0x17f/0x4d0 [ 1331.305240] SyS_write+0xf2/0x210 [ 1331.307981] (U) [ 1331.311502] ? SyS_read+0x210/0x210 [ 1331.320503] ? __do_page_fault+0x159/0xad0 [ 1331.324736] ? do_syscall_64+0x4c/0x640 [ 1331.328711] ? SyS_read+0x210/0x210 [ 1331.332335] do_syscall_64+0x1d5/0x640 [ 1331.332818] 0*512kB 1*1024kB [ 1331.336219] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1331.336224] (U) [ 1331.339309] RIP: 0033:0x7fd16d8461cd [ 1331.350150] RSP: 002b:00007fd16ae01590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1331.352817] 0*2048kB [ 1331.357851] RAX: ffffffffffffffda RBX: 00007fd1600256d0 RCX: 00007fd16d8461cd [ 1331.357857] 0*4096kB [ 1331.360244] RDX: 0000000000000181 RSI: 00007fd1600256d0 RDI: 0000000000000006 [ 1331.377165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1331.382819] = 56960kB [ 1331.384432] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fd160025450 [ 1331.386830] Node 0 [ 1331.394075] R13: 00007fd16ae015b0 R14: 0000562db44073a0 R15: 0000000000000181 [ 1331.395634] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1331.412191] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1331.418425] CPU: 1 PID: 12216 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1331.419009] Normal: [ 1331.426314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1331.426318] Call Trace: [ 1331.426334] dump_stack+0x1b2/0x281 [ 1331.426345] warn_alloc.cold+0x96/0x1cc [ 1331.426354] ? lock_downgrade+0x740/0x740 [ 1331.426363] ? zone_watermark_ok_safe+0x220/0x220 [ 1331.426372] ? wake_up_q+0x82/0xd0 [ 1331.426382] ? unreserve_highatomic_pageblock+0x336/0x460 [ 1331.426392] ? wait_for_completion_io+0x10/0x10 [ 1331.426403] __alloc_pages_nodemask+0x2127/0x2720 [ 1331.426424] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1331.426442] ? mark_held_locks+0xa6/0xf0 [ 1331.426453] ? cache_grow_begin+0x41/0x630 [ 1331.442816] 0*4kB [ 1331.444298] cache_grow_begin+0x91/0x630 [ 1331.448253] 0*8kB [ 1331.452385] ? cache_grow_begin+0x91/0x630 [ 1331.472816] 0*16kB [ 1331.475748] fallback_alloc+0x207/0x2c0 [ 1331.480566] 0*32kB 0*64kB [ 1331.484618] kmem_cache_alloc_node+0xe3/0x410 [ 1331.484629] __alloc_skb+0x5c/0x510 [ 1331.484642] rtmsg_fib+0x1e8/0x4c0 [ 1331.502810] 0*128kB [ 1331.503608] fib_table_insert+0x69c/0x1330 [ 1331.507550] 0*256kB 0*512kB [ 1331.510390] ? fib_triestat_seq_show+0xd70/0xd70 [ 1331.522807] 0*1024kB [ 1331.524305] ? fib_magic+0x145/0x460 [ 1331.528513] 0*2048kB 0*4096kB [ 1331.531523] ? fib_new_table+0xdd/0x410 [ 1331.549502] fib_magic+0x328/0x460 [ 1331.552806] = 0kB [ 1331.553042] ? fib_new_table+0x410/0x410 [ 1331.555083] Node 1 [ 1331.559123] ? igmp_group_added+0x41a/0x650 [ 1331.559125] Normal: 174*4kB [ 1331.561355] fib_add_ifaddr+0x3a6/0x450 [ 1331.572646] fib_netdev_event+0x399/0x4d0 [ 1331.572799] (ME) 63*8kB [ 1331.576788] notifier_call_chain+0x108/0x1a0 [ 1331.576800] __dev_notify_flags+0xdf/0x260 [ 1331.579453] (M) [ 1331.583842] ? dev_change_name+0x6a0/0x6a0 [ 1331.583848] ? dev_set_allmulti+0x30/0x30 [ 1331.583856] ? mark_held_locks+0xa6/0xf0 [ 1331.583865] dev_change_flags+0xe6/0x130 [ 1331.583874] do_setlink+0x83f/0x2bf0 [ 1331.610212] ? __save_stack_trace+0xa0/0x160 [ 1331.612802] 17*16kB [ 1331.614613] ? rtnl_fdb_add+0x770/0x770 [ 1331.614615] (UM) 506*32kB [ 1331.616925] ? check_preemption_disabled+0x35/0x240 [ 1331.620888] (UM) [ 1331.623713] ? trace_hardirqs_on+0x10/0x10 [ 1331.623721] ? deref_stack_reg+0x124/0x1a0 [ 1331.623728] ? kasan_slab_free+0x12d/0x1a0 [ 1331.623738] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1331.640581] 8930*64kB [ 1331.643429] ? kasan_slab_free+0xc3/0x1a0 [ 1331.643438] ? kfree_skbmem+0x98/0x100 [ 1331.643444] ? consume_skb+0xed/0x380 [ 1331.643454] ? unwind_next_frame+0xe54/0x17d0 [ 1331.649319] (UM) 1043*128kB [ 1331.651803] ? __save_stack_trace+0x63/0x160 [ 1331.672792] (U) [ 1331.675434] ? deref_stack_reg+0x124/0x1a0 [ 1331.675437] 137*256kB (U) [ 1331.677401] ? is_bpf_text_address+0x91/0x150 [ 1331.681616] 24*512kB [ 1331.684442] ? lock_acquire+0x170/0x3f0 [ 1331.684449] ? lock_downgrade+0x740/0x740 [ 1331.684460] ? validate_nla+0x192/0x5e0 [ 1331.684469] ? nla_parse+0x157/0x1f0 [ 1331.702791] (U) [ 1331.703382] rtnl_newlink+0x1267/0x1830 [ 1331.707074] 5*1024kB (U) [ 1331.709035] ? rtnl_newlink+0xa25/0x1830 [ 1331.719776] ? __lock_acquire+0x5fc/0x3f20 [ 1331.722788] 5*2048kB (U) 0*4096kB [ 1331.724014] ? kmem_cache_free+0x7c/0x2b0 [ 1331.724019] = 785408kB [ 1331.727538] ? rtnl_dellink+0x6a0/0x6a0 [ 1331.731669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1331.734142] ? trace_hardirqs_on+0x10/0x10 [ 1331.734149] ? netlink_deliver_tap+0x60c/0x7d0 [ 1331.734154] ? netlink_unicast+0x485/0x610 [ 1331.734160] ? netlink_sendmsg+0x62e/0xb80 [ 1331.734169] ? sock_sendmsg+0x40/0x100 [ 1331.752792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1331.755726] ? SyS_sendto+0x1c7/0x2c0 [ 1331.759939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1331.764151] ? do_syscall_64+0x1d5/0x640 [ 1331.764161] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1331.764175] ? __lock_acquire+0x5fc/0x3f20 [ 1331.764205] ? lock_acquire+0x170/0x3f0 [ 1331.782800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1331.789234] ? lock_downgrade+0x740/0x740 [ 1331.802791] 28218 total pagecache pages [ 1331.802852] ? rtnl_dellink+0x6a0/0x6a0 [ 1331.806807] 0 pages in swap cache [ 1331.815356] rtnetlink_rcv_msg+0x3be/0xb10 [ 1331.815368] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1331.815376] ? __netlink_lookup+0x345/0x5d0 [ 1331.815390] ? netdev_pick_tx+0x2e0/0x2e0 [ 1331.842787] Swap cache stats: add 0, delete 0, find 0/0 [ 1331.843871] netlink_rcv_skb+0x125/0x390 [ 1331.847998] Free swap = 0kB [ 1331.848003] Total swap = 0kB [ 1331.853347] ? memcpy+0x35/0x50 [ 1331.853355] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1331.853363] ? netlink_ack+0x9a0/0x9a0 [ 1331.853378] netlink_unicast+0x437/0x610 [ 1331.872785] 2097051 pages RAM [ 1331.875032] ? netlink_sendskb+0xd0/0xd0 [ 1331.879065] 0 pages HighMem/MovableOnly [ 1331.882154] ? __check_object_size+0x179/0x230 [ 1331.892777] 363840 pages reserved [ 1331.894736] netlink_sendmsg+0x62e/0xb80 [ 1331.898163] 0 pages cma reserved [ 1331.902233] ? nlmsg_notify+0x170/0x170 [ 1331.909556] ? security_socket_sendmsg+0x83/0xb0 [ 1331.914310] ? nlmsg_notify+0x170/0x170 [ 1331.918277] sock_sendmsg+0xb5/0x100 [ 1331.921983] SyS_sendto+0x1c7/0x2c0 [ 1331.925605] ? SyS_getpeername+0x220/0x220 [ 1331.929834] ? task_work_run+0xfd/0x190 [ 1331.933810] ? _raw_spin_unlock_irq+0x24/0x80 [ 1331.938305] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1331.943320] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1331.947804] ? task_work_run+0xfd/0x190 [ 1331.951769] ? do_syscall_64+0x4c/0x640 [ 1331.955740] ? SyS_getpeername+0x220/0x220 [ 1331.959969] do_syscall_64+0x1d5/0x640 [ 1331.963857] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1331.969043] RIP: 0033:0x4193fc [ 1331.972227] RSP: 002b:00007ffc26d47500 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1331.979932] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193fc [ 1331.987201] RDX: 000000000000002c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1331.994466] RBP: 0000000000000000 R08: 00007ffc26d47554 R09: 000000000000000c [ 1332.001737] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1332.009009] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1332.021672] Mem-Info: [ 1332.025064] active_anon:154300 inactive_anon:27040 isolated_anon:0 [ 1332.025064] active_file:114 inactive_file:895 isolated_file:0 [ 1332.025064] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1332.025064] slab_reclaimable:14115 slab_unreclaimable:133957 [ 1332.025064] mapped:52711 shmem:27411 pagetables:24469 bounce:0 [ 1332.025064] free:483382 free_pcp:246 free_cma:0 [ 1332.061854] Node 0 active_anon:611436kB inactive_anon:66768kB active_file:448kB inactive_file:4272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166288kB dirty:0kB writeback:0kB shmem:67960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1332.091289] Node 1 active_anon:5764kB inactive_anon:41392kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44856kB dirty:0kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1332.124187] Node 0 DMA free:12764kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1332.155571] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1332.170331] Node 0 DMA32 free:350296kB min:36200kB low:45248kB high:54296kB active_anon:611396kB inactive_anon:66768kB active_file:448kB inactive_file:6472kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36608kB pagetables:91480kB bounce:0kB free_pcp:972kB local_pcp:296kB free_cma:0kB [ 1332.204032] lowmem_reserve[]: 0 0 0 0 0 [ 1332.209364] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1332.243277] lowmem_reserve[]: 0 0 0 0 0 [ 1332.248219] Node 1 Normal free:2197632kB min:53696kB low:67120kB high:80544kB active_anon:5764kB inactive_anon:41392kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2368kB pagetables:6396kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1332.279163] lowmem_reserve[]: 0 0 0 0 0 [ 1332.284213] Node 0 DMA: 3*4kB (ME) 22*8kB (UME) 20*16kB (UE) 15*32kB (U) 15*64kB (UME) 5*128kB (UME) 6*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 12828kB [ 1332.302809] Node 0 DMA32: 15357*4kB (UMEH) 13994*8kB (UMEH) 201*16kB (UME) 40*32kB (UME) 2589*64kB (UME) 620*128kB (U) 142*256kB (U) 23*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 473108kB [ 1332.321046] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1332.329966] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1332.341362] Node 1 Normal: 174*4kB (ME) 63*8kB (M) 17*16kB (UM) 506*32kB (UM) 11704*64kB (UM) 5333*128kB (U) 1459*256kB (U) 266*512kB (U) 101*1024kB (U) 46*2048kB (U) 10*4096kB (U) = 2197632kB [ 1332.360236] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1332.369861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1332.379451] systemd[1]: Stopped Journal Service. [ 1332.398292] systemd[1]: Starting Journal Service... [ 1332.403413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1332.412094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1332.422071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1332.432563] 29883 total pagecache pages [ 1332.437729] 0 pages in swap cache [ 1332.441858] Swap cache stats: add 0, delete 0, find 0/0 [ 1332.448345] Free swap = 0kB [ 1332.451996] Total swap = 0kB [ 1332.455376] 2097051 pages RAM [ 1332.460084] 0 pages HighMem/MovableOnly [ 1332.464466] 363840 pages reserved [ 1332.468008] 0 pages cma reserved [ 1332.471451] Out of memory (oom_kill_allocating_task): Kill process 12219 (rs:main Q:Reg) score 0 or sacrifice child [ 1332.484152] Killed process 12180 (rsyslogd) total-vm:254332kB, anon-rss:988kB, file-rss:0kB, shmem-rss:0kB [ 1332.506729] oom_reaper: reaped process 12216 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1332.521584] oom_reaper: reaped process 12180 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1332.537866] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1332.557289] warn_alloc_show_mem: 1 callbacks suppressed [ 1332.557293] Mem-Info: [ 1332.565143] active_anon:154050 inactive_anon:27040 isolated_anon:0 [ 1332.565143] active_file:714 inactive_file:2220 isolated_file:0 [ 1332.565143] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1332.565143] slab_reclaimable:14115 slab_unreclaimable:133826 [ 1332.565143] mapped:53911 shmem:27411 pagetables:24395 bounce:0 [ 1332.565143] free:732168 free_pcp:539 free_cma:0 [ 1332.597891] systemd[1]: rsyslog.service: Unit entered failed state. [ 1332.623304] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1332.648420] Node 0 active_anon:611036kB inactive_anon:66768kB active_file:4048kB inactive_file:9272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172588kB dirty:0kB writeback:0kB shmem:67960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1332.685840] Node 1 active_anon:5564kB inactive_anon:41392kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44856kB dirty:0kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1332.717642] Node 0 DMA free:12848kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1332.745108] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1332.751735] systemd-journald[12636]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1332.766943] Node 0 DMA32 free:696364kB min:36200kB low:45248kB high:54296kB active_anon:610996kB inactive_anon:66768kB active_file:5248kB inactive_file:9492kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36544kB pagetables:91332kB bounce:0kB free_pcp:1160kB local_pcp:508kB free_cma:0kB [ 1332.809599] lowmem_reserve[]: 0 0 0 0 0 [ 1332.814272] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1332.848337] lowmem_reserve[]: 0 0 0 0 0 [ 1332.852378] Node 1 Normal free:2251360kB min:53696kB low:67120kB high:80544kB active_anon:5564kB inactive_anon:41392kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6396kB bounce:0kB free_pcp:1120kB local_pcp:724kB free_cma:0kB [ 1332.885672] lowmem_reserve[]: 0 0 0 0 0 [ 1332.889686] Node 0 DMA: 8*4kB (UME) 23*8kB (UME) 20*16kB (UE) 15*32kB (U) 15*64kB (UME) 5*128kB (UME) 6*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 12856kB [ 1332.910102] Node 0 DMA32: 16093*4kB (UMEH) 18005*8kB (UEH) 6471*16kB (UMEH) 2768*32kB (UME) 2559*64kB (UE) 617*128kB (U) 141*256kB (UM) 16*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 687564kB [ 1332.926683] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1332.930353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1332.943224] systemd[1]: Stopped System Logging Service. [ 1332.949820] Node 1 Normal: 1119*4kB (UME) 1256*8kB (UM) 642*16kB (UM) 1413*32kB (UM) 11709*64kB (UM) 5338*128kB (U) 1459*256kB (U) 267*512kB (U) 101*1024kB (U) 46*2048kB (U) 10*4096kB (U) = 2251452kB [ 1332.973111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1332.981969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1332.983699] systemd[1]: Starting System Logging Service... [ 1333.000010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1333.012918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1333.021510] 33421 total pagecache pages [ 1333.028756] 0 pages in swap cache [ 1333.032228] Swap cache stats: add 0, delete 0, find 0/0 [ 1333.038325] Free swap = 0kB [ 1333.041348] Total swap = 0kB [ 1333.048328] 2097051 pages RAM [ 1333.051449] 0 pages HighMem/MovableOnly [ 1333.056122] 363840 pages reserved [ 1333.059576] 0 pages cma reserved [ 1333.066345] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1333.083450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1333.090340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1333.101386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1333.125195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1333.149603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1333.214106] syz-executor.5 (12216) used greatest stack depth: 23688 bytes left 10:40:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x40800) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x170, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa98}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x12a000, @mcast1, 0x80000000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3f, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}, 0x1ff}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, [], 0x1}, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}]}, 0x170}}, 0x20000000) 10:40:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0xffffffffffff4214, 0xc}) syz_emit_ethernet(0xfc0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xfffffffffffffffe) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) 10:40:31 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280)='NLBL_UNLBL\x00', 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x420, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8001) syz_emit_ethernet(0x249, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd62c4e0c4021311"], 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x13f, 0x2}}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) 10:40:31 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x2710}) 10:40:31 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000e80)) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x200, 0x200080) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) signalfd4(r4, &(0x7f0000000140)={[0x200]}, 0x8, 0x1800) 10:40:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0xa, 0x0, 0xffffffffffffffff}) r2 = signalfd4(r0, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0x9, 0x28}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000000)={0x7, [0x6, 0x74, 0x4, 0xe5bd, 0x3ff, 0xfffffffffffffffa, 0x5]}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x80001, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) openat$cgroup_int(r4, &(0x7f00000001c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "7c38d247873ede5b", "02d6c45f4e4c5514ce4a8cd8453d6012", "fc845494", "e8286b4066a08a31"}, 0x28) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000340)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000280)="9a92eb5c8cca6813f25bb59f9cc34d0b858a4f291e6acd0b8d2c1832c4b34d91b8694eb4afe022c69f158b064b285e561e33170793", &(0x7f00000002c0)=@tcp6}, 0x20) 10:40:31 executing program 2: ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000180)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000000)={0xffffffff, 0xfffffff8}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 10:40:31 executing program 0: select(0x0, 0x0, 0x0, 0x0, 0x0) 10:40:31 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x2}], 0xa5, 0x0, &(0x7f0000000040)="45f6f4b7936ab4e0d32bcb53fd1a9ca43d864ad5c9f0180079fa2106940b6f3169f7b7c0b0dddc6a685598f7e961b362b7cae1df356b5279c0d97dc1b86edd825fffbe7bf09a0e88d14651f9c9bad75c8e54fbbdce320786367a67fab814729d2d3d82803b70405dc165c4d3c502b7af57189d58a84aa9418fb19fb86ecc5399d87680501a924a764cf8fda02297cbd1e26cf0315a33b3d73cca9d734ec59c72c26f9ca43e"}) 10:40:31 executing program 2: select(0xfffffffffffffde7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}) 10:40:31 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x3e, 0x200202) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000000)) [ 1333.716016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1333.731158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.754639] batman_adv: batadv0: Removing interface: batadv_slave_1 10:40:32 executing program 2: ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x8, 0x70, 0x0, 0xe9e4, 0x6, 0x2, 0x5, 0x7fff]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) [ 1333.772083] device bridge_slave_1 left promiscuous mode [ 1333.785659] bridge0: port 2(bridge_slave_1) entered disabled state 10:40:32 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000300)={0x0, 0x1}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000180)={0x3, 0x0, [{0x4, 0x3, 0x4, 0x7, 0x400, 0x1, 0x7fff}, {0x0, 0x1ff, 0x0, 0x8, 0xffffffff, 0x10000, 0x42}, {0x7, 0xfffffffb, 0x7, 0xcb, 0x6, 0x9, 0xfff}]}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x9, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000240)={0x6, r3}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x10001, 0x4) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) r4 = socket(0x18, 0x4, 0xdeea) bind$bt_sco(r4, &(0x7f0000000100)={0x1f, @fixed={[], 0x10}}, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0)={0x7, 0x7, 0xb8, 0x0, 0xfffff001, 0xff, 0x0, 0x4a, 0x0, 0x1, 0x19, 0x0, 0x0, 0x2, 0xfffffe00, 0x7, 0x7, 0x3, 0x0, [], 0x3, 0x80}) select(0x40, &(0x7f0000000000)={0x20, 0x504, 0x6, 0x0, 0xfffffffffffffffe, 0x5, 0xffffffffffff1af6, 0x6}, &(0x7f0000000040)={0xdea, 0x5, 0xffff, 0x1, 0x20, 0x1, 0x40, 0x1f}, &(0x7f0000000080)={0x758, 0x10000, 0x9a61, 0x6a4, 0xfffffffffffffffb, 0x81, 0x9, 0x4}, &(0x7f00000000c0)={0x77359400}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) readahead(r5, 0x7, 0x97) [ 1333.836982] device bridge_slave_0 left promiscuous mode [ 1333.866825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.903113] device veth1_macvtap left promiscuous mode [ 1333.916797] device veth0_macvtap left promiscuous mode [ 1333.931027] device veth1_vlan left promiscuous mode [ 1333.940643] device veth0_vlan left promiscuous mode [ 1334.270376] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1334.282303] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1334.282326] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1334.282347] CPU: 0 PID: 12667 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1334.282370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.282373] Call Trace: [ 1334.282390] dump_stack+0x1b2/0x281 [ 1334.282402] warn_alloc.cold+0x96/0x1cc [ 1334.282413] ? zone_watermark_ok_safe+0x220/0x220 [ 1334.282436] __alloc_pages_nodemask+0x2127/0x2720 [ 1334.282445] ? __schedule+0x893/0x1de0 [ 1334.282461] ? lock_acquire+0x170/0x3f0 [ 1334.282476] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1334.282491] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1334.282502] ? __mutex_unlock_slowpath+0x75/0x770 [ 1334.282516] alloc_pages_current+0x155/0x260 [ 1334.282538] ion_page_pool_alloc+0x118/0x1b0 [ 1334.299517] syz-executor.1: [ 1334.307291] ion_system_heap_allocate+0x133/0x8c0 [ 1334.307302] ? ion_alloc+0x187/0x810 [ 1334.307312] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1334.307320] ? ion_system_contig_heap_create+0x130/0x130 [ 1334.307330] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1334.307340] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1334.307350] ion_alloc+0x204/0x810 [ 1334.307365] ? ion_dma_buf_release+0x40/0x40 [ 1334.337665] page allocation failure: order:4 [ 1334.340387] ? __might_fault+0x177/0x1b0 [ 1334.340403] ion_ioctl+0xea/0x1f0 [ 1334.340414] ? ion_query_heaps+0x360/0x360 [ 1334.348529] syz-executor.3 cpuset= [ 1334.349207] ? ion_query_heaps+0x360/0x360 [ 1334.356836] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1334.359464] do_vfs_ioctl+0x75a/0xff0 [ 1334.359475] ? ioctl_preallocate+0x1a0/0x1a0 [ 1334.359488] ? lock_downgrade+0x740/0x740 [ 1334.367344] / [ 1334.368273] ? __fget+0x225/0x360 [ 1334.371319] (null) [ 1334.376088] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.376099] ? security_file_ioctl+0x83/0xb0 [ 1334.376108] SyS_ioctl+0x7f/0xb0 [ 1334.376115] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.376126] do_syscall_64+0x1d5/0x640 [ 1334.376143] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1334.376151] RIP: 0033:0x465f69 [ 1334.376155] RSP: 002b:00007f202b29f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1334.376164] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1334.376169] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1334.376176] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1334.388477] mems_allowed=0-1 [ 1334.390727] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1334.390732] R13: 00007ffe34c2804f R14: 00007f202b29f300 R15: 0000000000022000 [ 1334.399138] syz-executor.3: [ 1334.411753] syz-executor.1 cpuset= [ 1334.413530] page allocation failure: order:4 [ 1334.421317] / [ 1334.425704] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1334.443941] device hsr_slave_1 left promiscuous mode [ 1334.452250] (null) [ 1334.456731] CPU: 1 PID: 12672 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1334.458100] syz-executor.3 cpuset= [ 1334.459808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.459812] Call Trace: [ 1334.459828] dump_stack+0x1b2/0x281 [ 1334.459842] warn_alloc.cold+0x96/0x1cc [ 1334.463907] / [ 1334.468185] ? zone_watermark_ok_safe+0x220/0x220 [ 1334.471598] mems_allowed=0-1 [ 1334.475499] __alloc_pages_nodemask+0x2127/0x2720 [ 1334.475511] ? trace_hardirqs_on+0x10/0x10 [ 1334.475523] ? lock_acquire+0x170/0x3f0 [ 1334.527907] Mem-Info: [ 1334.534761] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1334.534780] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1334.544460] active_anon:154408 inactive_anon:29071 isolated_anon:0 [ 1334.544460] active_file:2382 inactive_file:5082 isolated_file:24 [ 1334.544460] unevictable:0 dirty:76 writeback:0 unstable:0 [ 1334.544460] slab_reclaimable:14027 slab_unreclaimable:133873 [ 1334.544460] mapped:48995 shmem:29456 pagetables:24512 bounce:0 [ 1334.544460] free:121972 free_pcp:25 free_cma:0 [ 1334.545681] ? __mutex_unlock_slowpath+0x75/0x770 [ 1334.545696] alloc_pages_current+0x155/0x260 [ 1334.548546] Node 0 active_anon:612204kB inactive_anon:74908kB active_file:9516kB inactive_file:20324kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:171604kB dirty:300kB writeback:0kB shmem:76160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1334.554505] ion_page_pool_alloc+0x118/0x1b0 [ 1334.554516] ion_system_heap_allocate+0x133/0x8c0 [ 1334.554524] ? ion_alloc+0x187/0x810 [ 1334.554536] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1334.572627] Node 1 active_anon:5428kB inactive_anon:41376kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24376kB dirty:4kB writeback:0kB shmem:41664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1334.573203] ? ion_system_contig_heap_create+0x130/0x130 [ 1334.585973] Node 0 [ 1334.588704] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1334.588718] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1334.600459] DMA free:11100kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1334.602263] ion_alloc+0x204/0x810 [ 1334.602278] ? ion_dma_buf_release+0x40/0x40 [ 1334.613769] lowmem_reserve[]: [ 1334.615270] ? __might_fault+0x177/0x1b0 [ 1334.615284] ion_ioctl+0xea/0x1f0 [ 1334.619920] 0 [ 1334.622495] ? ion_query_heaps+0x360/0x360 [ 1334.622508] ? ion_query_heaps+0x360/0x360 [ 1334.635720] 2717 [ 1334.661938] do_vfs_ioctl+0x75a/0xff0 [ 1334.661951] ? ioctl_preallocate+0x1a0/0x1a0 [ 1334.661959] ? lock_downgrade+0x740/0x740 [ 1334.661971] ? __fget+0x225/0x360 [ 1334.699908] 2718 [ 1334.703995] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.704006] ? security_file_ioctl+0x83/0xb0 [ 1334.704016] SyS_ioctl+0x7f/0xb0 [ 1334.712226] 2718 [ 1334.712551] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.712564] do_syscall_64+0x1d5/0x640 [ 1334.712581] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1334.724746] 2718 [ 1334.745101] RIP: 0033:0x465f69 [ 1334.745105] RSP: 002b:00007f343bb68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1334.745115] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1334.745120] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1334.745128] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1334.788166] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1334.788171] R13: 00007ffd1e89b06f R14: 00007f343bb68300 R15: 0000000000022000 [ 1334.812992] mems_allowed=0-1 [ 1334.830243] CPU: 0 PID: 12663 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1334.923843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.933179] Call Trace: [ 1334.935754] dump_stack+0x1b2/0x281 [ 1334.939365] warn_alloc.cold+0x96/0x1cc [ 1334.943343] ? zone_watermark_ok_safe+0x220/0x220 [ 1334.948177] __alloc_pages_nodemask+0x2127/0x2720 [ 1334.953006] ? lock_acquire+0x170/0x3f0 [ 1334.956966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1334.961794] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1334.967228] ? __mutex_unlock_slowpath+0x75/0x770 [ 1334.972081] ? retint_kernel+0x2d/0x2d [ 1334.975951] alloc_pages_current+0x155/0x260 [ 1334.980344] ion_page_pool_alloc+0x118/0x1b0 [ 1334.984735] ion_system_heap_allocate+0x133/0x8c0 [ 1334.989564] ? ion_alloc+0x187/0x810 [ 1334.993261] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1334.998691] ? ion_system_contig_heap_create+0x130/0x130 [ 1335.004122] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1335.009126] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1335.013953] ion_alloc+0x204/0x810 [ 1335.017475] ? ion_dma_buf_release+0x40/0x40 [ 1335.021864] ? __might_fault+0x177/0x1b0 [ 1335.025908] ion_ioctl+0xea/0x1f0 [ 1335.029342] ? ion_query_heaps+0x360/0x360 [ 1335.033561] ? ion_query_heaps+0x360/0x360 [ 1335.037776] do_vfs_ioctl+0x75a/0xff0 [ 1335.041563] ? ioctl_preallocate+0x1a0/0x1a0 [ 1335.045952] ? lock_downgrade+0x740/0x740 [ 1335.050085] ? __fget+0x225/0x360 [ 1335.053519] ? do_vfs_ioctl+0xff0/0xff0 [ 1335.057475] ? security_file_ioctl+0x83/0xb0 [ 1335.061865] SyS_ioctl+0x7f/0xb0 [ 1335.065212] ? do_vfs_ioctl+0xff0/0xff0 [ 1335.069169] do_syscall_64+0x1d5/0x640 [ 1335.073041] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1335.078230] RIP: 0033:0x465f69 [ 1335.081411] RSP: 002b:00007f343bb89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.089111] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1335.096362] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1335.103611] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1335.110861] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1335.118111] R13: 00007ffd1e89b06f R14: 00007f343bb89300 R15: 0000000000022000 [ 1335.126476] syz-executor.4: [ 1335.126484] CPU: 1 PID: 12665 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 1335.126492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1335.129757] page allocation failure: order:4 [ 1335.137381] Call Trace: [ 1335.137402] dump_stack+0x1b2/0x281 [ 1335.137414] warn_alloc.cold+0x96/0x1cc [ 1335.137425] ? zone_watermark_ok_safe+0x220/0x220 [ 1335.137446] __alloc_pages_nodemask+0x2127/0x2720 [ 1335.137460] ? lock_acquire+0x170/0x3f0 [ 1335.137473] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1335.137488] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1335.137500] ? __mutex_unlock_slowpath+0x75/0x770 [ 1335.137512] alloc_pages_current+0x155/0x260 [ 1335.137527] ion_page_pool_alloc+0x118/0x1b0 [ 1335.169329] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1335.171074] ion_system_heap_allocate+0x133/0x8c0 [ 1335.171085] ? ion_alloc+0x187/0x810 [ 1335.177300] (null) [ 1335.179882] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1335.179896] ? ion_system_contig_heap_create+0x130/0x130 [ 1335.179905] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1335.179917] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1335.187129] syz-executor.4 cpuset= [ 1335.190182] ion_alloc+0x204/0x810 [ 1335.190198] ? ion_dma_buf_release+0x40/0x40 [ 1335.190209] ? __might_fault+0x177/0x1b0 [ 1335.196173] / [ 1335.198999] ion_ioctl+0xea/0x1f0 [ 1335.208085] Node 0 [ 1335.210907] ? ion_query_heaps+0x360/0x360 [ 1335.210921] ? ion_query_heaps+0x360/0x360 [ 1335.210934] do_vfs_ioctl+0x75a/0xff0 [ 1335.214862] mems_allowed=0-1 [ 1335.216827] ? ioctl_preallocate+0x1a0/0x1a0 [ 1335.216838] ? lock_downgrade+0x740/0x740 [ 1335.216852] ? __fget+0x225/0x360 [ 1335.224996] DMA32 free:404032kB min:36200kB low:45248kB high:54296kB active_anon:612140kB inactive_anon:74908kB active_file:9720kB inactive_file:20192kB unevictable:0kB writepending:344kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36864kB pagetables:91764kB bounce:0kB free_pcp:200kB local_pcp:200kB free_cma:0kB [ 1335.227730] ? do_vfs_ioctl+0xff0/0xff0 [ 1335.227742] ? security_file_ioctl+0x83/0xb0 [ 1335.227752] SyS_ioctl+0x7f/0xb0 [ 1335.227761] ? do_vfs_ioctl+0xff0/0xff0 [ 1335.240679] lowmem_reserve[]: [ 1335.241122] do_syscall_64+0x1d5/0x640 [ 1335.241139] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1335.251390] 0 [ 1335.253089] RIP: 0033:0x465f69 [ 1335.253094] RSP: 002b:00007f7b1dce0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.253104] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1335.253108] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1335.253112] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1335.253118] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1335.253123] R13: 00007ffc6d6ecd2f R14: 00007f7b1dce0300 R15: 0000000000022000 [ 1335.393704] CPU: 1 PID: 12718 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1335.402334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1335.403624] 0 [ 1335.411768] Call Trace: [ 1335.411786] dump_stack+0x1b2/0x281 [ 1335.411799] warn_alloc.cold+0x96/0x1cc [ 1335.413717] 0 [ 1335.416153] ? zone_watermark_ok_safe+0x220/0x220 [ 1335.416175] __alloc_pages_nodemask+0x2127/0x2720 [ 1335.419858] 0 [ 1335.423731] ? lock_acquire+0x170/0x3f0 [ 1335.423745] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1335.423763] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1335.425635] 0 [ 1335.430368] ? __mutex_unlock_slowpath+0x75/0x770 [ 1335.430377] ? retint_kernel+0x2d/0x2d [ 1335.430390] alloc_pages_current+0x155/0x260 [ 1335.436999] ion_page_pool_alloc+0x118/0x1b0 [ 1335.437010] ion_system_heap_allocate+0x133/0x8c0 [ 1335.441046] Node 0 [ 1335.445786] ? ion_alloc+0x187/0x810 [ 1335.445796] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1335.445806] ? ion_system_contig_heap_create+0x130/0x130 [ 1335.445818] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1335.451378] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.453032] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1335.453044] ion_alloc+0x204/0x810 [ 1335.453058] ? ion_dma_buf_release+0x40/0x40 [ 1335.457983] lowmem_reserve[]: [ 1335.461744] ? __might_fault+0x177/0x1b0 [ 1335.461758] ion_ioctl+0xea/0x1f0 [ 1335.466286] 0 [ 1335.470533] ? ion_query_heaps+0x360/0x360 [ 1335.470545] ? ion_query_heaps+0x360/0x360 [ 1335.470555] do_vfs_ioctl+0x75a/0xff0 [ 1335.475507] 0 [ 1335.477598] ? ioctl_preallocate+0x1a0/0x1a0 [ 1335.477606] ? lock_downgrade+0x740/0x740 [ 1335.477619] ? __fget+0x225/0x360 [ 1335.481397] 0 [ 1335.486738] ? do_vfs_ioctl+0xff0/0xff0 [ 1335.486749] ? security_file_ioctl+0x83/0xb0 [ 1335.486759] SyS_ioctl+0x7f/0xb0 [ 1335.486766] ? do_vfs_ioctl+0xff0/0xff0 [ 1335.486776] do_syscall_64+0x1d5/0x640 [ 1335.492351] 0 [ 1335.497208] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1335.497216] RIP: 0033:0x465f69 [ 1335.497221] RSP: 002b:00007f202b25d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.522343] 0 [ 1335.526943] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465f69 [ 1335.526948] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1335.526953] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1335.526958] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1335.526963] R13: 00007ffe34c2804f R14: 00007f202b25d300 R15: 0000000000022000 [ 1335.654643] device hsr_slave_0 left promiscuous mode [ 1335.662399] warn_alloc_show_mem: 1 callbacks suppressed [ 1335.662402] Mem-Info: [ 1335.683268] active_anon:154427 inactive_anon:29071 isolated_anon:7 [ 1335.683268] active_file:2433 inactive_file:5124 isolated_file:22 [ 1335.683268] unevictable:0 dirty:87 writeback:0 unstable:0 [ 1335.683268] slab_reclaimable:13993 slab_unreclaimable:134716 [ 1335.683268] mapped:52358 shmem:29456 pagetables:24487 bounce:0 [ 1335.683268] free:68652 free_pcp:60 free_cma:0 [ 1335.727543] team0 (unregistering): Port device team_slave_1 removed [ 1335.752877] team0 (unregistering): Port device team_slave_0 removed [ 1335.775788] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1335.791309] Node 0 active_anon:612280kB inactive_anon:74908kB active_file:9720kB inactive_file:20492kB unevictable:0kB isolated(anon):28kB isolated(file):88kB mapped:206556kB dirty:344kB writeback:0kB shmem:76160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1335.822726] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1335.853802] Node 1 active_anon:5428kB inactive_anon:41376kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24376kB dirty:4kB writeback:0kB shmem:41664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1335.890421] bond0 (unregistering): Released all slaves [ 1335.925679] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.989989] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1336.013721] Node 1 Normal free:54252kB min:53696kB low:67120kB high:80544kB active_anon:5428kB inactive_anon:41376kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2208kB pagetables:6184kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1336.047651] Node 0 DMA32 free:35856kB min:36200kB low:45248kB high:54296kB active_anon:612276kB inactive_anon:74908kB active_file:11664kB inactive_file:10296kB unevictable:0kB writepending:388kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36896kB pagetables:91940kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 1336.138922] lowmem_reserve[]: 0 0 0 0 0 [ 1336.150074] lowmem_reserve[]: 0 0 0 0 0 [ 1336.163922] Node 0 DMA: 2*4kB (M) 23*8kB (UME) 20*16kB (UE) 16*32kB (UE) 3*64kB (UME) 5*128kB (UME) 6*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11072kB [ 1336.196291] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1336.252458] Node 0 DMA32: 974*4kB (MEH) 633*8kB (MEH) 236*16kB (MEH) 590*32kB (UME) 55*64kB (UM) 9*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36288kB [ 1336.292660] lowmem_reserve[]: 0 0 0 0 0 [ 1336.296701] Node 1 Normal free:53716kB min:53696kB low:67120kB high:80544kB active_anon:5428kB inactive_anon:41376kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2208kB pagetables:6184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1336.332447] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1336.375697] Node 1 Normal: 176*4kB (UME) 37*8kB (M) 468*16kB (UM) 1392*32kB (UM) 3*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53736kB [ 1336.419641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.442418] lowmem_reserve[]: 0 0 0 0 0 [ 1336.446461] Node 0 DMA: 2*4kB (M) 23*8kB (UME) 20*16kB (UE) 16*32kB (UE) 3*64kB (UME) 5*128kB (UME) 6*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11072kB [ 1336.472428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1336.481042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.513012] Node 0 DMA32: 1179*4kB (UMEH) 674*8kB (UMEH) 236*16kB (MEH) 469*32kB (UME) 70*64kB (UM) 14*128kB (M) 4*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36700kB [ 1336.532584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1336.589457] 30984 total pagecache pages [ 1336.620088] 0 pages in swap cache [ 1336.623641] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1336.634555] Swap cache stats: add 0, delete 0, find 0/0 [ 1336.639912] Free swap = 0kB [ 1336.673391] Total swap = 0kB [ 1336.676442] 2097051 pages RAM [ 1336.679541] 0 pages HighMem/MovableOnly [ 1336.683886] Node 1 Normal: 176*4kB (UME) 37*8kB (M) 468*16kB (UM) 1392*32kB (UM) 3*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53736kB [ 1336.712427] 363840 pages reserved [ 1336.715906] 0 pages cma reserved [ 1336.722517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.731363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1336.755107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.772522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1336.825751] 29884 total pagecache pages [ 1336.829794] 0 pages in swap cache [ 1336.841539] Swap cache stats: add 0, delete 0, find 0/0 [ 1336.866507] Free swap = 0kB [ 1336.869553] Total swap = 0kB [ 1336.873226] 2097051 pages RAM [ 1336.885580] 0 pages HighMem/MovableOnly [ 1336.889611] 363840 pages reserved [ 1336.905710] 0 pages cma reserved [ 1337.512338] oom_reaper: reaped process 12665 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1337.552133] oom_reaper: reaped process 12672 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1337.603032] oom_reaper: reaped process 12667 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1337.693251] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1337.715384] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 1337.720604] CPU: 1 PID: 12653 Comm: systemd-rfkill Not tainted 4.14.224-syzkaller #0 [ 1337.728473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.737827] Call Trace: [ 1337.740428] dump_stack+0x1b2/0x281 [ 1337.744056] dump_header+0x178/0x82f [ 1337.747778] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1337.752878] ? ___ratelimit+0x2cd/0x530 [ 1337.756868] oom_kill_process.cold+0x10/0xb18 [ 1337.761358] out_of_memory+0xe3e/0x1190 [ 1337.765317] ? oom_killer_disable+0x1c0/0x1c0 [ 1337.769790] ? mutex_trylock+0x152/0x1a0 [ 1337.773829] __alloc_pages_nodemask+0x23e1/0x2720 [ 1337.778679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1337.783510] alloc_pages_current+0x155/0x260 [ 1337.787908] filemap_fault+0xea3/0x1980 [ 1337.791887] ext4_filemap_fault+0x84/0xb0 [ 1337.796014] __do_fault+0xfa/0x380 [ 1337.799557] __handle_mm_fault+0x2497/0x4620 [ 1337.803945] ? vm_insert_page+0x7c0/0x7c0 [ 1337.808076] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 1337.814083] ? ktime_get_ts64+0x261/0x3a0 [ 1337.818215] handle_mm_fault+0x391/0x860 [ 1337.822255] __do_page_fault+0x549/0xad0 [ 1337.826298] ? spurious_fault+0x640/0x640 [ 1337.830423] ? do_page_fault+0x60/0x500 [ 1337.834385] ? page_fault+0x2f/0x50 [ 1337.837992] page_fault+0x45/0x50 [ 1337.841423] RIP: 15f20580:0x1 [ 1337.844504] RSP: 2e6c1040:00007ffe15f20588 EFLAGS: 0000000b [ 1337.844795] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1337.856045] syz-executor.4: [ 1337.862511] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1337.870631] CPU: 1 PID: 12672 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1337.878498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.887844] Call Trace: [ 1337.890429] dump_stack+0x1b2/0x281 [ 1337.892342] syz-executor.4: page allocation failure: order:0 [ 1337.894079] warn_alloc.cold+0x96/0x1cc [ 1337.894092] ? zone_watermark_ok_safe+0x220/0x220 [ 1337.899882] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1337.903834] ? usleep_range+0x130/0x130 [ 1337.903842] ? try_to_free_pages+0x23f/0x6e0 [ 1337.903850] ? _find_next_bit+0xdb/0x100 [ 1337.903859] ? run_timer_softirq+0x5a0/0x5a0 [ 1337.903875] __alloc_pages_nodemask+0x2127/0x2720 [ 1337.913367] page allocation failure: order:0 [ 1337.915771] ? lock_acquire+0x170/0x3f0 [ 1337.919835] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1337.924227] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1337.924237] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1337.924252] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1337.950222] (null) [ 1337.953188] alloc_pages_current+0x155/0x260 [ 1337.953203] ion_page_pool_alloc+0x118/0x1b0 [ 1337.958017] syz-executor.4 cpuset= [ 1337.962493] ion_system_heap_allocate+0x133/0x8c0 [ 1337.962503] ? ion_alloc+0x187/0x810 [ 1337.962516] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1337.970138] (null) [ 1337.974461] ? ion_system_contig_heap_create+0x130/0x130 [ 1337.974470] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1337.974482] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1337.987792] syz-executor.4 cpuset= [ 1337.990910] ion_alloc+0x204/0x810 [ 1337.998970] / [ 1338.003921] ? ion_dma_buf_release+0x40/0x40 [ 1338.008930] / [ 1338.013729] ? __might_fault+0x177/0x1b0 [ 1338.017273] mems_allowed=0-1 [ 1338.020758] ion_ioctl+0xea/0x1f0 [ 1338.022464] mems_allowed=0-1 [ 1338.026836] ? ion_query_heaps+0x360/0x360 [ 1338.046339] ? ion_query_heaps+0x360/0x360 [ 1338.050552] do_vfs_ioctl+0x75a/0xff0 [ 1338.054351] ? ioctl_preallocate+0x1a0/0x1a0 [ 1338.058735] ? lock_downgrade+0x740/0x740 [ 1338.062877] ? __fget+0x225/0x360 [ 1338.066309] ? do_vfs_ioctl+0xff0/0xff0 [ 1338.070420] ? security_file_ioctl+0x83/0xb0 [ 1338.074832] SyS_ioctl+0x7f/0xb0 [ 1338.078206] ? do_vfs_ioctl+0xff0/0xff0 [ 1338.082185] do_syscall_64+0x1d5/0x640 [ 1338.086072] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1338.091239] RIP: 0033:0x465f69 [ 1338.094406] RSP: 002b:00007f343bb68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1338.102271] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1338.109535] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1338.116796] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1338.124053] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1338.131308] R13: 00007ffd1e89b06f R14: 00007f343bb68300 R15: 0000000000022000 [ 1338.138576] CPU: 0 PID: 12667 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1338.146811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.152319] warn_alloc_show_mem: 2 callbacks suppressed [ 1338.152322] Mem-Info: [ 1338.156244] Call Trace: [ 1338.161599] active_anon:154403 inactive_anon:29071 isolated_anon:0 [ 1338.161599] active_file:8 inactive_file:20 isolated_file:0 [ 1338.161599] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1338.161599] slab_reclaimable:13938 slab_unreclaimable:132780 [ 1338.161599] mapped:52642 shmem:29456 pagetables:24531 bounce:0 [ 1338.161599] free:13918 free_pcp:52 free_cma:0 [ 1338.164090] dump_stack+0x1b2/0x281 [ 1338.164103] warn_alloc.cold+0x96/0x1cc [ 1338.164116] ? zone_watermark_ok_safe+0x220/0x220 [ 1338.172319] Node 0 active_anon:612184kB inactive_anon:74908kB active_file:28kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186192kB dirty:0kB writeback:0kB shmem:76160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1338.199980] ? usleep_range+0x130/0x130 [ 1338.199990] ? try_to_free_pages+0x23f/0x6e0 [ 1338.199999] ? _find_next_bit+0xdb/0x100 [ 1338.200008] ? run_timer_softirq+0x5a0/0x5a0 [ 1338.200021] __alloc_pages_nodemask+0x2127/0x2720 [ 1338.200036] ? lock_acquire+0x170/0x3f0 [ 1338.200051] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1338.200062] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1338.200075] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1338.200094] alloc_pages_current+0x155/0x260 [ 1338.200105] ion_page_pool_alloc+0x118/0x1b0 [ 1338.200115] ion_system_heap_allocate+0x133/0x8c0 [ 1338.200125] ? ion_alloc+0x187/0x810 [ 1338.200134] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1338.200143] ? ion_system_contig_heap_create+0x130/0x130 [ 1338.200153] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1338.200163] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1338.200174] ion_alloc+0x204/0x810 [ 1338.200187] ? ion_dma_buf_release+0x40/0x40 [ 1338.232290] Node 1 active_anon:5428kB inactive_anon:41376kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24376kB dirty:0kB writeback:0kB shmem:41664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1338.240395] ? __might_fault+0x177/0x1b0 [ 1338.262282] Node 0 [ 1338.266026] ion_ioctl+0xea/0x1f0 [ 1338.270860] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1338.275338] ? ion_query_heaps+0x360/0x360 [ 1338.275351] ? ion_query_heaps+0x360/0x360 [ 1338.275362] do_vfs_ioctl+0x75a/0xff0 [ 1338.275373] ? ioctl_preallocate+0x1a0/0x1a0 [ 1338.275384] ? lock_downgrade+0x740/0x740 [ 1338.302305] lowmem_reserve[]: [ 1338.303516] ? __fget+0x225/0x360 [ 1338.308936] 0 [ 1338.313931] ? do_vfs_ioctl+0xff0/0xff0 [ 1338.313941] ? security_file_ioctl+0x83/0xb0 [ 1338.313950] SyS_ioctl+0x7f/0xb0 [ 1338.313958] ? do_vfs_ioctl+0xff0/0xff0 [ 1338.313969] do_syscall_64+0x1d5/0x640 [ 1338.313985] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1338.332274] 2717 [ 1338.353632] RIP: 0033:0x465f69 [ 1338.353636] RSP: 002b:00007f202b29f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1338.353646] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1338.353651] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1338.353656] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1338.353660] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1338.353665] R13: 00007ffe34c2804f R14: 00007f202b29f300 R15: 0000000000022000 [ 1338.354382] syz-executor.3: [ 1338.357843] CPU: 1 PID: 12718 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1338.359990] page allocation failure: order:0 [ 1338.363412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.363416] Call Trace: [ 1338.363432] dump_stack+0x1b2/0x281 [ 1338.363446] warn_alloc.cold+0x96/0x1cc [ 1338.404586] syz-executor.1: [ 1338.405639] ? zone_watermark_ok_safe+0x220/0x220 [ 1338.409779] page allocation failure: order:0 [ 1338.412865] ? usleep_range+0x130/0x130 [ 1338.412873] ? try_to_free_pages+0x23f/0x6e0 [ 1338.412882] ? _find_next_bit+0xdb/0x100 [ 1338.412892] ? run_timer_softirq+0x5a0/0x5a0 [ 1338.428337] Mem-Info: [ 1338.429821] __alloc_pages_nodemask+0x2127/0x2720 [ 1338.433817] active_anon:154403 inactive_anon:29071 isolated_anon:0 [ 1338.433817] active_file:14 inactive_file:14 isolated_file:0 [ 1338.433817] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1338.433817] slab_reclaimable:13938 slab_unreclaimable:132780 [ 1338.433817] mapped:52642 shmem:29456 pagetables:24531 bounce:0 [ 1338.433817] free:13923 free_pcp:53 free_cma:0 [ 1338.438856] ? lock_acquire+0x170/0x3f0 [ 1338.444047] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1338.446067] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1338.449230] (null) [ 1338.456915] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1338.456931] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1338.456945] ? retint_kernel+0x2d/0x2d [ 1338.464218] Node 0 active_anon:612184kB inactive_anon:74908kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186192kB dirty:0kB writeback:0kB shmem:76160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1338.471446] alloc_pages_current+0x155/0x260 [ 1338.479929] syz-executor.1 cpuset= [ 1338.487167] ion_page_pool_alloc+0x118/0x1b0 [ 1338.487180] ion_system_heap_allocate+0x133/0x8c0 [ 1338.494454] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1338.497434] ? ion_alloc+0x187/0x810 [ 1338.505408] Node 1 active_anon:5428kB inactive_anon:41376kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24376kB dirty:0kB writeback:0kB shmem:41664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1338.509768] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1338.519114] (null) [ 1338.521664] ? ion_system_contig_heap_create+0x130/0x130 [ 1338.525279] / [ 1338.529228] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1338.532239] syz-executor.3 cpuset= [ 1338.537059] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1338.541435] / [ 1338.545392] ion_alloc+0x204/0x810 [ 1338.549805] Node 0 [ 1338.553830] ? ion_dma_buf_release+0x40/0x40 [ 1338.553842] ? __might_fault+0x177/0x1b0 [ 1338.558227] mems_allowed=0-1 [ 1338.560612] ion_ioctl+0xea/0x1f0 [ 1338.565468] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1338.598825] ? ion_query_heaps+0x360/0x360 [ 1338.598837] ? ion_query_heaps+0x360/0x360 [ 1338.598846] do_vfs_ioctl+0x75a/0xff0 [ 1338.612227] mems_allowed=0-1 [ 1338.614777] ? ioctl_preallocate+0x1a0/0x1a0 [ 1338.672218] lowmem_reserve[]: [ 1338.675637] ? lock_downgrade+0x740/0x740 [ 1338.675650] ? __fget+0x225/0x360 [ 1338.702215] 0 [ 1338.713459] ? do_vfs_ioctl+0xff0/0xff0 [ 1338.713469] ? security_file_ioctl+0x83/0xb0 [ 1338.713478] SyS_ioctl+0x7f/0xb0 [ 1338.762212] 2717 [ 1338.763875] ? do_vfs_ioctl+0xff0/0xff0 [ 1338.839398] do_syscall_64+0x1d5/0x640 [ 1338.842211] 2718 2718 [ 1338.843274] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1338.843275] 2718 [ 1338.845756] RIP: 0033:0x465f69 [ 1338.850917] Node 0 [ 1338.852955] RSP: 002b:00007f202b25d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1338.852965] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465f69 [ 1338.852970] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1338.852975] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1338.852981] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1338.882216] DMA32 free:17856kB min:36200kB low:45248kB high:54296kB active_anon:612144kB inactive_anon:74908kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36864kB pagetables:91940kB bounce:0kB free_pcp:212kB local_pcp:4kB free_cma:0kB [ 1338.887795] R13: 00007ffe34c2804f R14: 00007f202b25d300 R15: 0000000000022000 [ 1338.922197] lowmem_reserve[]: [ 1338.924337] 2718 [ 1338.933811] CPU: 1 PID: 12665 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 1338.943723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.953065] Call Trace: [ 1338.953264] 0 [ 1338.955644] dump_stack+0x1b2/0x281 [ 1338.955649] 0 [ 1338.957432] warn_alloc.cold+0x96/0x1cc [ 1338.961038] 0 [ 1338.962836] ? zone_watermark_ok_safe+0x220/0x220 [ 1338.962845] ? usleep_range+0x130/0x130 [ 1338.962854] ? try_to_free_pages+0x23f/0x6e0 [ 1338.962864] ? _find_next_bit+0xdb/0x100 [ 1338.985998] ? run_timer_softirq+0x5a0/0x5a0 [ 1338.990392] __alloc_pages_nodemask+0x2127/0x2720 [ 1338.992204] 0 0 [ 1338.995236] ? lock_acquire+0x170/0x3f0 [ 1338.995249] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1338.997201] Node 0 [ 1339.001161] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1339.012673] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1339.018109] alloc_pages_current+0x155/0x260 [ 1339.022597] ion_page_pool_alloc+0x118/0x1b0 [ 1339.026999] ion_system_heap_allocate+0x133/0x8c0 [ 1339.031830] ? ion_alloc+0x187/0x810 [ 1339.032213] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.035532] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1339.065839] ? ion_system_contig_heap_create+0x130/0x130 [ 1339.071273] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1339.076374] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1339.081231] ion_alloc+0x204/0x810 [ 1339.084770] ? ion_dma_buf_release+0x40/0x40 [ 1339.089160] ? __might_fault+0x177/0x1b0 [ 1339.093211] ion_ioctl+0xea/0x1f0 [ 1339.096662] ? ion_query_heaps+0x360/0x360 [ 1339.100884] ? ion_query_heaps+0x360/0x360 [ 1339.105102] do_vfs_ioctl+0x75a/0xff0 [ 1339.108883] ? ioctl_preallocate+0x1a0/0x1a0 [ 1339.113277] ? lock_downgrade+0x740/0x740 [ 1339.117419] ? __fget+0x225/0x360 [ 1339.119072] lowmem_reserve[]: 0 [ 1339.120860] ? do_vfs_ioctl+0xff0/0xff0 [ 1339.120870] ? security_file_ioctl+0x83/0xb0 [ 1339.129701] 0 [ 1339.132479] SyS_ioctl+0x7f/0xb0 [ 1339.132488] ? do_vfs_ioctl+0xff0/0xff0 [ 1339.132498] do_syscall_64+0x1d5/0x640 [ 1339.132515] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1339.134287] 0 [ 1339.137632] RIP: 0033:0x465f69 [ 1339.141575] 0 [ 1339.145437] RSP: 002b:00007f7b1dce0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1339.145447] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1339.145452] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1339.145457] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1339.145465] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1339.182185] 0 [ 1339.186784] R13: 00007ffc6d6ecd2f R14: 00007f7b1dce0300 R15: 0000000000022000 [ 1339.187280] 2718 2718 [ 1339.205782] Node 0 DMA32 free:17980kB min:36200kB low:45248kB high:54296kB active_anon:612144kB inactive_anon:74908kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36864kB pagetables:91940kB bounce:0kB free_pcp:364kB local_pcp:236kB free_cma:0kB [ 1339.211722] CPU: 0 PID: 12663 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1339.236015] lowmem_reserve[]: [ 1339.242904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1339.242907] Call Trace: [ 1339.242924] dump_stack+0x1b2/0x281 [ 1339.242937] warn_alloc.cold+0x96/0x1cc [ 1339.242948] ? zone_watermark_ok_safe+0x220/0x220 [ 1339.242961] ? usleep_range+0x130/0x130 [ 1339.246042] 0 [ 1339.255375] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1339.255387] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1339.255397] ? run_timer_softirq+0x5a0/0x5a0 [ 1339.255411] __alloc_pages_nodemask+0x2127/0x2720 [ 1339.255425] ? lock_acquire+0x170/0x3f0 [ 1339.255440] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1339.258016] 0 [ 1339.261604] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1339.265580] 0 [ 1339.270376] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1339.274377] 0 [ 1339.276111] ? retint_kernel+0x2d/0x2d [ 1339.281181] 0 [ 1339.286179] alloc_pages_current+0x155/0x260 [ 1339.286193] ion_page_pool_alloc+0x118/0x1b0 [ 1339.286205] ion_system_heap_allocate+0x133/0x8c0 [ 1339.295412] ? ion_alloc+0x187/0x810 [ 1339.295422] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1339.295431] ? ion_system_contig_heap_create+0x130/0x130 [ 1339.295441] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1339.295450] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1339.295461] ion_alloc+0x204/0x810 [ 1339.299427] Node 0 [ 1339.304439] ? ion_dma_buf_release+0x40/0x40 [ 1339.304452] ? __might_fault+0x177/0x1b0 [ 1339.304464] ion_ioctl+0xea/0x1f0 [ 1339.306249] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.310729] ? ion_query_heaps+0x360/0x360 [ 1339.312581] lowmem_reserve[]: [ 1339.317940] ? ion_query_heaps+0x360/0x360 [ 1339.319711] 0 [ 1339.323579] do_vfs_ioctl+0x75a/0xff0 [ 1339.323591] ? ioctl_preallocate+0x1a0/0x1a0 [ 1339.323599] ? lock_downgrade+0x740/0x740 [ 1339.323612] ? __fget+0x225/0x360 [ 1339.325386] 0 [ 1339.329772] ? do_vfs_ioctl+0xff0/0xff0 [ 1339.334216] 0 [ 1339.338976] ? security_file_ioctl+0x83/0xb0 [ 1339.342678] 0 [ 1339.348103] SyS_ioctl+0x7f/0xb0 [ 1339.353585] 0 [ 1339.358519] ? do_vfs_ioctl+0xff0/0xff0 [ 1339.366857] do_syscall_64+0x1d5/0x640 [ 1339.369062] Node 1 [ 1339.373456] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1339.373464] RIP: 0033:0x465f69 [ 1339.373469] RSP: 002b:00007f343bb89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1339.373479] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1339.373484] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1339.373489] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1339.373494] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1339.373498] R13: 00007ffd1e89b06f R14: 00007f343bb89300 R15: 0000000000022000 [ 1339.572240] Normal free:715152kB min:53696kB low:67120kB high:80544kB active_anon:5428kB inactive_anon:41376kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2208kB pagetables:6184kB bounce:0kB free_pcp:120kB local_pcp:252kB free_cma:0kB [ 1339.612288] Node 1 Normal free:715536kB min:53696kB low:67120kB high:80544kB active_anon:5428kB inactive_anon:41376kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2208kB pagetables:6184kB bounce:0kB free_pcp:632kB local_pcp:380kB free_cma:0kB [ 1339.612309] lowmem_reserve[]: 0 0 0 0 0 [ 1339.612328] Node 0 DMA: 2*4kB (M) 9*8kB (UME) 20*16kB (UE) 16*32kB (UE) 3*64kB (UME) 5*128kB (UME) 6*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10960kB [ 1339.688865] lowmem_reserve[]: 0 0 0 0 0 [ 1339.696712] Node 0 DMA: 2*4kB (M) 9*8kB (UME) 20*16kB (UE) 16*32kB (UE) 3*64kB (UME) 5*128kB (UME) 6*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10960kB [ 1339.716617] Node 0 DMA32: 1620*4kB (UME) 652*8kB (UME) 214*16kB (UME) 89*32kB (UME) 1192*64kB (UM) 139*128kB (U) 44*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 123312kB [ 1339.736132] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1339.746993] Node 1 Normal: 178*4kB (ME) 37*8kB (M) 8*16kB (UM) 781*32kB (UM) 5476*64kB (UM) 1697*128kB (U) 318*256kB (U) 27*512kB (U) 24*1024kB (U) 1*2048kB (U) 0*4096kB = 715664kB [ 1339.759565] Node 0 DMA32: 1603*4kB (UME) 656*8kB (UME) 214*16kB (UME) 94*32kB (UME) 1192*64kB (UM) 139*128kB (U) 44*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 123436kB [ 1339.767072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.779297] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1339.799179] Node 1 Normal: 178*4kB (ME) 37*8kB (M) 8*16kB (UM) 781*32kB (UM) 5476*64kB (UM) 1697*128kB (U) 318*256kB (U) 27*512kB (U) 24*1024kB (U) 1*2048kB (U) 0*4096kB = 715664kB [ 1339.801074] warn_alloc_show_mem: 1 callbacks suppressed [ 1339.801112] Mem-Info: [ 1339.827176] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1339.832170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.836407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.845163] active_anon:154403 inactive_anon:29071 isolated_anon:0 [ 1339.845163] active_file:61 inactive_file:237 isolated_file:14 [ 1339.845163] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1339.845163] slab_reclaimable:13938 slab_unreclaimable:132755 [ 1339.845163] mapped:52842 shmem:29456 pagetables:24531 bounce:0 [ 1339.845163] free:205769 free_pcp:423 free_cma:0 [ 1339.857262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1339.901023] 29963 total pagecache pages [ 1339.905568] 0 pages in swap cache [ 1339.909351] Swap cache stats: add 0, delete 0, find 0/0 [ 1339.945462] Free swap = 0kB [ 1339.948674] Total swap = 0kB [ 1339.957983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1339.972775] 2097051 pages RAM [ 1339.982595] 0 pages HighMem/MovableOnly [ 1339.986593] 363840 pages reserved [ 1339.988332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.990143] 0 pages cma reserved [ 1340.015233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1340.036058] 30569 total pagecache pages [ 1340.040156] 0 pages in swap cache [ 1340.055244] Node 0 active_anon:612184kB inactive_anon:74908kB active_file:1408kB inactive_file:1404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188472kB dirty:0kB writeback:0kB shmem:76160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1340.088266] Swap cache stats: add 0, delete 0, find 0/0 [ 1340.112148] Free swap = 0kB [ 1340.115199] Total swap = 0kB [ 1340.118221] 2097051 pages RAM [ 1340.121322] 0 pages HighMem/MovableOnly [ 1340.152149] 363840 pages reserved [ 1340.156307] 0 pages cma reserved [ 1340.163126] Out of memory (oom_kill_allocating_task): Kill process 12653 (systemd-rfkill) score 0 or sacrifice child [ 1340.192156] Node 1 active_anon:5528kB inactive_anon:41376kB active_file:704kB inactive_file:1676kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26076kB dirty:100kB writeback:0kB shmem:41664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1340.232146] Killed process 12653 (systemd-rfkill) total-vm:37800kB, anon-rss:372kB, file-rss:0kB, shmem-rss:0kB [ 1340.263374] oom_reaper: reaped process 12653 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1340.282462] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.342987] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1340.348078] Node 0 DMA32 free:80816kB min:36200kB low:45248kB high:54296kB active_anon:611744kB inactive_anon:74908kB active_file:1476kB inactive_file:2528kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36896kB pagetables:92088kB bounce:0kB free_pcp:1140kB local_pcp:720kB free_cma:0kB [ 1340.408506] IPVS: ftp: loaded support on port[0] = 21 [ 1340.492751] warn_alloc: 2 callbacks suppressed [ 1340.492755] syz-executor.4: [ 1340.498569] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1340.502807] syz-executor.3: [ 1340.520907] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1340.538053] lowmem_reserve[]: 0 0 0 0 0 [ 1340.542674] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.555707] syz-executor.3 cpuset= [ 1340.571699] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1340.592333] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1340.598029] CPU: 1 PID: 12718 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 1340.610654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.612567] syz-executor.3 cpuset= [ 1340.620001] Call Trace: [ 1340.620007] / [ 1340.623530] dump_stack+0x1b2/0x281 [ 1340.631402] warn_alloc.cold+0x96/0x1cc [ 1340.635371] ? zone_watermark_ok_safe+0x220/0x220 [ 1340.636298] lowmem_reserve[]: 0 0 0 0 [ 1340.640217] __alloc_pages_nodemask+0x2127/0x2720 [ 1340.640227] ? __schedule+0x893/0x1de0 [ 1340.644040] mems_allowed=0-1 [ 1340.648840] ? lock_acquire+0x170/0x3f0 [ 1340.652720] 0 [ 1340.655788] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1340.659730] Node 1 [ 1340.661523] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1340.673977] ? __mutex_unlock_slowpath+0x75/0x770 [ 1340.678805] alloc_pages_current+0x155/0x260 [ 1340.682087] Normal free:49764kB min:53696kB low:67120kB high:80544kB active_anon:5528kB inactive_anon:41376kB active_file:236kB inactive_file:24kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2208kB pagetables:6184kB bounce:0kB free_pcp:668kB local_pcp:668kB free_cma:0kB [ 1340.683220] ion_page_pool_alloc+0x118/0x1b0 [ 1340.716140] ion_system_heap_allocate+0x133/0x8c0 [ 1340.720968] ? _raw_spin_unlock+0x29/0x40 [ 1340.725098] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1340.730020] ? ion_system_contig_heap_create+0x130/0x130 [ 1340.735538] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1340.740551] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1340.742066] lowmem_reserve[]: 0 [ 1340.745379] ion_alloc+0x27a/0x810 [ 1340.745393] ? ion_dma_buf_release+0x40/0x40 [ 1340.748646] 0 [ 1340.752169] ? __might_fault+0x177/0x1b0 [ 1340.752182] ion_ioctl+0xea/0x1f0 [ 1340.752192] ? ion_query_heaps+0x360/0x360 [ 1340.770024] ? ion_query_heaps+0x360/0x360 [ 1340.772060] 0 0 [ 1340.774241] do_vfs_ioctl+0x75a/0xff0 [ 1340.774253] ? ioctl_preallocate+0x1a0/0x1a0 [ 1340.776204] 0 [ 1340.779983] ? lock_downgrade+0x740/0x740 [ 1340.790264] ? __fget+0x225/0x360 [ 1340.793722] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.793724] Node 0 DMA: [ 1340.797681] ? security_file_ioctl+0x83/0xb0 [ 1340.797684] 7*4kB (UM) [ 1340.800340] SyS_ioctl+0x7f/0xb0 [ 1340.810628] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.814583] do_syscall_64+0x1d5/0x640 [ 1340.818459] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1340.822065] 10*8kB [ 1340.823639] RIP: 0033:0x465f69 [ 1340.823641] (UME) 19*16kB [ 1340.825860] RSP: 002b:00007f202b25d188 EFLAGS: 00000246 [ 1340.829029] (UE) [ 1340.831848] ORIG_RAX: 0000000000000010 [ 1340.831856] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465f69 [ 1340.850441] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1340.852058] 14*32kB [ 1340.857691] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1340.857697] (UE) [ 1340.859995] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1340.876530] R13: 00007ffe34c2804f R14: 00007f202b25d300 R15: 0000000000022000 [ 1340.882051] 5*64kB (UME) 5*128kB (UME) 6*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11036kB [ 1340.900989] / mems_allowed=0-1 [ 1340.901666] CPU: 0 PID: 12663 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1340.912094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.921454] Call Trace: [ 1340.924054] dump_stack+0x1b2/0x281 [ 1340.927690] warn_alloc.cold+0x96/0x1cc [ 1340.931663] ? zone_watermark_ok_safe+0x220/0x220 [ 1340.936515] __alloc_pages_nodemask+0x2127/0x2720 [ 1340.941355] ? lock_acquire+0x170/0x3f0 [ 1340.945318] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1340.950151] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1340.955591] ? __mutex_unlock_slowpath+0x75/0x770 [ 1340.960419] alloc_pages_current+0x155/0x260 [ 1340.964813] ion_page_pool_alloc+0x118/0x1b0 [ 1340.969207] ion_system_heap_allocate+0x133/0x8c0 [ 1340.974035] ? _raw_spin_unlock+0x29/0x40 [ 1340.978167] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1340.983078] ? ion_system_contig_heap_create+0x130/0x130 [ 1340.988510] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1340.993520] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1340.998357] ion_alloc+0x27a/0x810 [ 1341.001899] ? ion_dma_buf_release+0x40/0x40 [ 1341.006323] ? __might_fault+0x177/0x1b0 [ 1341.010376] ion_ioctl+0xea/0x1f0 [ 1341.013819] ? ion_query_heaps+0x360/0x360 [ 1341.018144] ? ion_query_heaps+0x360/0x360 [ 1341.022383] do_vfs_ioctl+0x75a/0xff0 [ 1341.026187] ? ioctl_preallocate+0x1a0/0x1a0 [ 1341.030600] ? lock_downgrade+0x740/0x740 [ 1341.034755] ? __fget+0x225/0x360 [ 1341.038201] ? do_vfs_ioctl+0xff0/0xff0 [ 1341.042165] ? security_file_ioctl+0x83/0xb0 [ 1341.046564] SyS_ioctl+0x7f/0xb0 [ 1341.049912] ? do_vfs_ioctl+0xff0/0xff0 [ 1341.053883] do_syscall_64+0x1d5/0x640 [ 1341.057771] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1341.062952] RIP: 0033:0x465f69 [ 1341.066142] RSP: 002b:00007f343bb89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1341.073944] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1341.081203] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1341.088463] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1341.095724] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1341.102991] R13: 00007ffd1e89b06f R14: 00007f343bb89300 R15: 0000000000022000 [ 1341.110176] Node 0 DMA32: 971*4kB (UME) 636*8kB (UME) 1647*16kB (UME) 1471*32kB [ 1341.118083] CPU: 1 PID: 12672 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 1341.133750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.143111] Call Trace: [ 1341.145703] dump_stack+0x1b2/0x281 [ 1341.149336] warn_alloc.cold+0x96/0x1cc [ 1341.149487] warn_alloc_show_mem: 2 callbacks suppressed [ 1341.149490] Mem-Info: [ 1341.153302] ? zone_watermark_ok_safe+0x220/0x220 [ 1341.153322] __alloc_pages_nodemask+0x2127/0x2720 [ 1341.153340] ? lock_acquire+0x170/0x3f0 [ 1341.158697] active_anon:154503 inactive_anon:29074 isolated_anon:0 [ 1341.158697] active_file:767 inactive_file:1419 isolated_file:0 [ 1341.158697] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1341.158697] slab_reclaimable:13888 slab_unreclaimable:134123 [ 1341.158697] mapped:54185 shmem:29460 pagetables:24532 bounce:0 [ 1341.158697] free:36188 free_pcp:226 free_cma:0 [ 1341.161086] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1341.165950] Node 0 active_anon:612576kB inactive_anon:74920kB active_file:3056kB inactive_file:5664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192364kB dirty:32kB writeback:0kB shmem:76176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1341.170743] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1341.174722] Node 1 active_anon:5436kB inactive_anon:41376kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24376kB dirty:0kB writeback:0kB shmem:41664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1341.208437] ? __mutex_unlock_slowpath+0x75/0x770 [ 1341.208451] alloc_pages_current+0x155/0x260 [ 1341.208466] ion_page_pool_alloc+0x118/0x1b0 [ 1341.213293] Node 0 [ 1341.241455] ion_system_heap_allocate+0x133/0x8c0 [ 1341.241466] ? _raw_spin_unlock+0x29/0x40 [ 1341.241477] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1341.246929] DMA free:11036kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.274142] ? ion_system_contig_heap_create+0x130/0x130 [ 1341.274153] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1341.274166] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1341.278978] lowmem_reserve[]: [ 1341.283370] ion_alloc+0x27a/0x810 [ 1341.283387] ? ion_dma_buf_release+0x40/0x40 [ 1341.287767] 0 [ 1341.290001] ? __might_fault+0x177/0x1b0 [ 1341.294831] 2717 [ 1341.298945] ion_ioctl+0xea/0x1f0 [ 1341.303856] 2718 [ 1341.329587] ? ion_query_heaps+0x360/0x360 [ 1341.329603] ? ion_query_heaps+0x360/0x360 [ 1341.335056] 2718 [ 1341.340038] do_vfs_ioctl+0x75a/0xff0 [ 1341.344866] 2718 [ 1341.347936] ? ioctl_preallocate+0x1a0/0x1a0 [ 1341.355834] ? lock_downgrade+0x740/0x740 [ 1341.355847] ? __fget+0x225/0x360 [ 1341.355856] ? do_vfs_ioctl+0xff0/0xff0 [ 1341.357639] Node 0 [ 1341.361680] ? security_file_ioctl+0x83/0xb0 [ 1341.363742] DMA32 free:83200kB min:36200kB low:45248kB high:54296kB active_anon:612536kB inactive_anon:74920kB active_file:3056kB inactive_file:5664kB unevictable:0kB writepending:32kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36896kB pagetables:91940kB bounce:0kB free_pcp:228kB local_pcp:96kB free_cma:0kB [ 1341.367147] SyS_ioctl+0x7f/0xb0 [ 1341.369178] lowmem_reserve[]: [ 1341.373389] ? do_vfs_ioctl+0xff0/0xff0 [ 1341.373401] do_syscall_64+0x1d5/0x640 [ 1341.373416] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1341.377624] 0 [ 1341.379664] RIP: 0033:0x465f69 [ 1341.383450] 0 [ 1341.385476] RSP: 002b:00007f343bb68188 EFLAGS: 00000246 [ 1341.389853] 0 0 [ 1341.393978] ORIG_RAX: 0000000000000010 [ 1341.393984] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1341.393989] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1341.393994] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1341.394004] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1341.397448] 0 [ 1341.401403] R13: 00007ffd1e89b06f R14: 00007f343bb68300 R15: 0000000000022000 [ 1341.414794] (UE) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 82460kB [ 1341.526689] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1341.537720] Node 1 Normal: 601*4kB (UME) 697*8kB (UM) 146*16kB (UM) 1241*32kB (UM) 8*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50540kB [ 1341.555544] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.558969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.591822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.600637] chnl_net:caif_netlink_parms(): no params data found [ 1341.607582] syz-executor.5: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1341.608895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.618365] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1341.618425] CPU: 0 PID: 12722 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1341.618430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.618433] Call Trace: [ 1341.618447] dump_stack+0x1b2/0x281 [ 1341.618460] warn_alloc.cold+0x96/0x1cc [ 1341.618470] ? zone_watermark_ok_safe+0x220/0x220 [ 1341.618477] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1341.618490] ? wake_all_kswapds+0x175/0x360 [ 1341.618505] __alloc_pages_nodemask+0x2127/0x2720 [ 1341.618514] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1341.618522] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1341.618541] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1341.618549] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1341.618567] ? cache_alloc_refill+0x1da/0x350 [ 1341.618575] ? ____cache_alloc_node+0x156/0x1d0 [ 1341.618587] cache_grow_begin+0x91/0x630 [ 1341.618596] ? cache_grow_begin+0x91/0x630 [ 1341.618606] fallback_alloc+0x207/0x2c0 [ 1341.618619] __kmalloc+0x213/0x400 [ 1341.618630] ? batadv_hash_new+0xaa/0x270 [ 1341.618640] batadv_hash_new+0xaa/0x270 [ 1341.618648] ? batadv_hash_set_lock_class+0x9a/0xf0 [ 1341.618661] batadv_tt_init+0x2b2/0x390 [ 1341.618670] batadv_mesh_init+0x478/0x630 [ 1341.618682] batadv_softif_init_late+0xa26/0xc90 [ 1341.636136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.640477] ? batadv_get_strings+0x40/0x40 [ 1341.649867] 31841 total pagecache pages [ 1341.652379] ? dev_valid_name+0x1a0/0x1a0 [ 1341.652389] ? batadv_get_strings+0x40/0x40 [ 1341.652396] register_netdevice+0x291/0xe40 [ 1341.652407] ? netdev_change_features+0xa0/0xa0 [ 1341.652415] ? rtnl_create_link+0x129/0x890 [ 1341.652426] rtnl_newlink+0x14dc/0x1830 [ 1341.652432] ? rtnl_newlink+0x43d/0x1830 [ 1341.652440] ? __lock_acquire+0x5fc/0x3f20 [ 1341.652457] ? trace_hardirqs_on+0x10/0x10 [ 1341.660421] 0 pages in swap cache [ 1341.664873] ? rtnl_dellink+0x6a0/0x6a0 [ 1341.664882] ? trace_hardirqs_on+0x10/0x10 [ 1341.664890] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1341.664898] ? deref_stack_reg+0x124/0x1a0 [ 1341.664938] ? lock_acquire+0x170/0x3f0 [ 1341.664944] ? lock_downgrade+0x740/0x740 [ 1341.664953] ? rtnl_dellink+0x6a0/0x6a0 [ 1341.664963] rtnetlink_rcv_msg+0x3be/0xb10 [ 1341.674192] Swap cache stats: add 0, delete 0, find 0/0 [ 1341.674713] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1341.679535] Free swap = 0kB [ 1341.684534] ? __netlink_lookup+0x345/0x5d0 [ 1341.684547] netlink_rcv_skb+0x125/0x390 [ 1341.684555] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1341.684563] ? netlink_ack+0x9a0/0x9a0 [ 1341.684578] netlink_unicast+0x437/0x610 [ 1341.684588] ? netlink_sendskb+0xd0/0xd0 [ 1341.684596] ? __check_object_size+0x179/0x230 [ 1341.684607] netlink_sendmsg+0x62e/0xb80 [ 1341.694785] Total swap = 0kB [ 1341.699259] ? nlmsg_notify+0x170/0x170 [ 1341.703793] 2097051 pages RAM [ 1341.708398] ? security_socket_sendmsg+0x83/0xb0 [ 1341.713948] 0 pages HighMem/MovableOnly [ 1341.716649] ? nlmsg_notify+0x170/0x170 [ 1341.720597] 363840 pages reserved [ 1341.724116] sock_sendmsg+0xb5/0x100 [ 1341.724126] SyS_sendto+0x1c7/0x2c0 [ 1341.724133] ? SyS_getpeername+0x220/0x220 [ 1341.724148] ? sock_poll+0x220/0x220 [ 1341.724162] ? SyS_socket+0x12f/0x1b0 [ 1341.724170] ? move_addr_to_kernel+0x60/0x60 [ 1341.724178] ? do_syscall_64+0x4c/0x640 [ 1341.724184] ? SyS_getpeername+0x220/0x220 [ 1341.724192] do_syscall_64+0x1d5/0x640 [ 1341.724209] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1341.733202] 0 pages cma reserved [ 1341.737397] RIP: 0033:0x4193fc [ 1341.962844] RSP: 002b:00007ffcc5216080 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1341.970577] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193fc [ 1341.977843] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1341.985109] RBP: 0000000000000000 R08: 00007ffcc52160d4 R09: 000000000000000c [ 1341.992375] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1341.999652] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1342.018968] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1342.031988] lowmem_reserve[]: 0 0 0 0 0 [ 1342.036003] Node 1 Normal free:50452kB min:53696kB low:67120kB high:80544kB active_anon:5436kB inactive_anon:41376kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2208kB pagetables:6188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.042628] syz-executor.1 cpuset= [ 1342.070696] lowmem_reserve[]: 0 0 0 0 0 [ 1342.079030] Node 0 DMA: 7*4kB (UM) 10*8kB (UME) 19*16kB (UE) 14*32kB (UE) 5*64kB (UME) 5*128kB (UME) 6*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11036kB [ 1342.095655] Node 0 DMA32: 471*4kB (ME) 384*8kB (UME) 84*16kB (UME) 1529*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55292kB [ 1342.132055] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1342.144847] / mems_allowed=0-1 [ 1342.148139] CPU: 1 PID: 12665 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 1342.156016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.165368] Call Trace: [ 1342.167960] dump_stack+0x1b2/0x281 [ 1342.171590] warn_alloc.cold+0x96/0x1cc [ 1342.171984] Node 1 Normal: [ 1342.175560] ? zone_watermark_ok_safe+0x220/0x220 [ 1342.175580] __alloc_pages_nodemask+0x2127/0x2720 [ 1342.178485] 677*4kB [ 1342.183311] ? lock_acquire+0x170/0x3f0 [ 1342.183325] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1342.183342] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1342.204875] ? __mutex_unlock_slowpath+0x75/0x770 [ 1342.209725] alloc_pages_current+0x155/0x260 [ 1342.214141] ion_page_pool_alloc+0x118/0x1b0 [ 1342.218559] ion_system_heap_allocate+0x133/0x8c0 [ 1342.222350] (UME) 708*8kB [ 1342.223418] ? _raw_spin_unlock+0x29/0x40 [ 1342.223431] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1342.226255] (UM) [ 1342.230381] ? ion_system_contig_heap_create+0x130/0x130 [ 1342.230391] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1342.230403] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1342.252634] ion_alloc+0x27a/0x810 [ 1342.256179] ? ion_dma_buf_release+0x40/0x40 [ 1342.260588] ? __might_fault+0x177/0x1b0 [ 1342.264650] ion_ioctl+0xea/0x1f0 [ 1342.265698] 148*16kB (UM) [ 1342.268184] ? ion_query_heaps+0x360/0x360 [ 1342.268197] ? ion_query_heaps+0x360/0x360 [ 1342.271023] 1241*32kB [ 1342.275248] do_vfs_ioctl+0x75a/0xff0 [ 1342.275259] ? ioctl_preallocate+0x1a0/0x1a0 [ 1342.275267] ? lock_downgrade+0x740/0x740 [ 1342.275281] ? __fget+0x225/0x360 [ 1342.297719] ? do_vfs_ioctl+0xff0/0xff0 [ 1342.301708] ? security_file_ioctl+0x83/0xb0 [ 1342.306115] SyS_ioctl+0x7f/0xb0 [ 1342.309475] ? do_vfs_ioctl+0xff0/0xff0 [ 1342.313171] (UM) 0*64kB [ 1342.313447] do_syscall_64+0x1d5/0x640 [ 1342.313464] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1342.316111] 0*128kB [ 1342.319974] RIP: 0033:0x465f69 [ 1342.319978] RSP: 002b:00007f7b1dce0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1342.319987] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1342.319992] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1342.319999] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1342.341961] 0*256kB [ 1342.345578] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1342.345584] R13: 00007ffc6d6ecd2f R14: 00007f7b1dce0300 R15: 0000000000022000 [ 1342.395041] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1342.432046] Bluetooth: hci1 command 0x0409 tx timeout [ 1342.442094] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1342.447155] CPU: 1 PID: 12703 Comm: rs:main Q:Reg Not tainted 4.14.224-syzkaller #0 [ 1342.451964] 0*512kB [ 1342.455023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.455027] 0*1024kB 0*2048kB [ 1342.457337] Call Trace: [ 1342.472436] dump_stack+0x1b2/0x281 [ 1342.476068] dump_header+0x178/0x82f [ 1342.479783] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1342.484894] ? ___ratelimit+0x2cd/0x530 [ 1342.488871] oom_kill_process.cold+0x10/0xb18 [ 1342.493377] out_of_memory+0xe3e/0x1190 [ 1342.497094] 0*4096kB = 50452kB [ 1342.497354] ? oom_killer_disable+0x1c0/0x1c0 [ 1342.500542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.505011] ? mutex_trylock+0x152/0x1a0 [ 1342.505021] __alloc_pages_nodemask+0x23e1/0x2720 [ 1342.505040] ? trace_hardirqs_on+0x10/0x10 [ 1342.505051] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1342.505061] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1342.505082] alloc_pages_current+0x155/0x260 [ 1342.540815] pagecache_get_page+0x3f5/0xab0 [ 1342.545119] grab_cache_page_write_begin+0x63/0x90 [ 1342.550031] ext4_da_write_begin+0x249/0xe70 [ 1342.554418] ? __ext4_journal_stop+0xe7/0x1b0 [ 1342.558891] ? ext4_write_begin+0x1260/0x1260 [ 1342.563363] ? balance_dirty_pages_ratelimited+0x8cd/0x1800 [ 1342.569053] generic_perform_write+0x1c9/0x420 [ 1342.573618] ? __mnt_drop_write_file+0x5f/0x90 [ 1342.578189] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1342.582836] ? current_time+0xb0/0xb0 [ 1342.586612] ? ext4_file_write_iter+0x1cc/0xd20 [ 1342.591256] __generic_file_write_iter+0x227/0x590 [ 1342.596182] ext4_file_write_iter+0x276/0xd20 [ 1342.600678] ? aa_file_perm+0x304/0xab0 [ 1342.604649] ? ext4_file_read_iter+0x330/0x330 [ 1342.609222] ? trace_hardirqs_on+0x10/0x10 [ 1342.613507] ? iov_iter_init+0xa6/0x1c0 [ 1342.617503] __vfs_write+0x44c/0x630 [ 1342.621196] ? kernel_read+0x110/0x110 [ 1342.625067] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1342.630060] vfs_write+0x17f/0x4d0 [ 1342.633578] SyS_write+0xf2/0x210 [ 1342.637009] ? SyS_read+0x210/0x210 [ 1342.640610] ? __do_page_fault+0x159/0xad0 [ 1342.644823] ? do_syscall_64+0x4c/0x640 [ 1342.648773] ? SyS_read+0x210/0x210 [ 1342.652379] do_syscall_64+0x1d5/0x640 [ 1342.656335] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1342.661517] RIP: 0033:0x7efd603b41cd [ 1342.665304] RSP: 002b:00007efd5d96f580 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1342.672988] RAX: ffffffffffffffda RBX: 00007efd5400a140 RCX: 00007efd603b41cd [ 1342.680237] RDX: 0000000000001000 RSI: 00007efd5400a140 RDI: 0000000000000006 [ 1342.687483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1342.694751] R10: 0000000000000000 R11: 0000000000000293 R12: 00007efd54009ec0 [ 1342.702007] R13: 00007efd5d96f5a0 R14: 0000000000000030 R15: 0000000000001000 [ 1342.729612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1342.749869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.759998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1342.780245] 30895 total pagecache pages [ 1342.787314] 0 pages in swap cache [ 1342.801007] Swap cache stats: add 0, delete 0, find 0/0 [ 1342.806431] Free swap = 0kB [ 1342.809445] Total swap = 0kB [ 1342.821960] 2097051 pages RAM [ 1342.825161] 0 pages HighMem/MovableOnly [ 1342.829180] warn_alloc_show_mem: 3 callbacks suppressed [ 1342.829184] Mem-Info: [ 1342.835278] 363840 pages reserved [ 1342.840480] 0 pages cma reserved [ 1342.851954] active_anon:154438 inactive_anon:29073 isolated_anon:12 [ 1342.851954] active_file:486 inactive_file:540 isolated_file:64 [ 1342.851954] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1342.851954] slab_reclaimable:13888 slab_unreclaimable:133452 [ 1342.851954] mapped:53744 shmem:29460 pagetables:24533 bounce:0 [ 1342.851954] free:13881 free_pcp:122 free_cma:0 [ 1342.891306] Node 0 active_anon:612316kB inactive_anon:74916kB active_file:1748kB inactive_file:1824kB unevictable:0kB isolated(anon):48kB isolated(file):256kB mapped:190100kB dirty:92kB writeback:0kB shmem:76176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1342.923684] Node 1 active_anon:5436kB inactive_anon:41376kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24376kB dirty:0kB writeback:0kB shmem:41664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1342.954342] Mem-Info: [ 1342.956799] active_anon:154439 inactive_anon:29073 isolated_anon:12 [ 1342.956799] active_file:218 inactive_file:197 isolated_file:64 [ 1342.956799] unevictable:0 dirty:24 writeback:0 unstable:0 [ 1342.956799] slab_reclaimable:13888 slab_unreclaimable:133452 [ 1342.956799] mapped:53125 shmem:29460 pagetables:24533 bounce:0 [ 1342.956799] free:14157 free_pcp:161 free_cma:0 [ 1342.993986] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.002306] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1343.027359] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1343.031584] ------------[ cut here ]------------ [ 1343.036703] Node 0 active_anon:612320kB inactive_anon:74916kB active_file:440kB inactive_file:352kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:187412kB dirty:96kB writeback:0kB shmem:76176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 507904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1343.041324] WARNING: CPU: 0 PID: 12722 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1343.041330] Kernel panic - not syncing: panic_on_warn set ... [ 1343.041330] [ 1343.072882] Node 0 [ 1343.078850] CPU: 0 PID: 12722 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 1343.087982] DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:612280kB inactive_anon:74916kB active_file:732kB inactive_file:772kB unevictable:0kB writepending:96kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:36864kB pagetables:91944kB bounce:0kB free_pcp:628kB local_pcp:0kB free_cma:0kB [ 1343.088409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.097531] lowmem_reserve[]: [ 1343.124984] Call Trace: [ 1343.125003] dump_stack+0x1b2/0x281 [ 1343.125015] panic+0x1f9/0x42d [ 1343.125023] ? add_taint.cold+0x16/0x16 [ 1343.125035] ? debug_print_object.cold+0xa7/0xdb [ 1343.125045] ? debug_print_object.cold+0xa7/0xdb [ 1343.125052] __warn.cold+0x20/0x44 [ 1343.125059] ? ist_end_non_atomic+0x10/0x10 [ 1343.125067] ? debug_print_object.cold+0xa7/0xdb [ 1343.125078] report_bug+0x208/0x250 [ 1343.125087] do_error_trap+0x195/0x2d0 [ 1343.125095] ? math_error+0x2d0/0x2d0 [ 1343.125111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1343.137322] Node 1 active_anon:5436kB inactive_anon:41376kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24376kB dirty:0kB writeback:0kB shmem:41664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1343.137536] invalid_op+0x1b/0x40 [ 1343.140087] Node 0 [ 1343.143707] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1343.143711] RSP: 0018:ffff88800ce9f248 EFLAGS: 00010086 [ 1343.143717] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1343.143721] RDX: 0000000000000000 RSI: ffffffff878bbb80 RDI: ffffed10019d3e3f [ 1343.143725] RBP: ffffffff878b6e40 R08: 0000000000000061 R09: 0000000000000001 [ 1343.143729] R10: 0000000000000000 R11: ffff888038e14140 R12: 0000000000000000 [ 1343.143733] R13: 0000000000000000 R14: ffff888095b23070 R15: 1ffff110019d3e52 [ 1343.143749] ? debug_print_object.cold+0xa7/0xdb [ 1343.143760] debug_object_assert_init+0x1d3/0x2d0 [ 1343.143771] ? debug_object_active_state+0x330/0x330 [ 1343.143780] ? rtnl_newlink+0x14dc/0x1830 [ 1343.148124] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.150914] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1343.159369] lowmem_reserve[]: [ 1343.160394] ? netlink_rcv_skb+0x125/0x390 [ 1343.164084] 0 [ 1343.168337] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1343.175887] 0 [ 1343.176676] del_timer+0x5d/0xe0 [ 1343.180706] 0 [ 1343.184486] ? process_timeout+0x20/0x20 [ 1343.184498] try_to_grab_pending+0x243/0x610 [ 1343.184508] __cancel_work_timer+0x90/0x460 [ 1343.184516] ? work_on_cpu_safe+0x70/0x70 [ 1343.184531] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1343.189353] 2717 [ 1343.216483] batadv_nc_mesh_free+0x41/0x120 [ 1343.216493] batadv_mesh_free+0x70/0x150 [ 1343.216502] batadv_mesh_init+0x561/0x630 [ 1343.216510] batadv_softif_init_late+0xa26/0xc90 [ 1343.216518] ? batadv_get_strings+0x40/0x40 [ 1343.216525] ? dev_valid_name+0x1a0/0x1a0 [ 1343.216534] ? batadv_get_strings+0x40/0x40 [ 1343.216542] register_netdevice+0x291/0xe40 [ 1343.216557] ? netdev_change_features+0xa0/0xa0 [ 1343.216566] ? rtnl_create_link+0x129/0x890 [ 1343.216575] rtnl_newlink+0x14dc/0x1830 [ 1343.216581] ? rtnl_newlink+0x43d/0x1830 [ 1343.216591] ? __lock_acquire+0x5fc/0x3f20 [ 1343.223233] 0 [ 1343.227592] ? trace_hardirqs_on+0x10/0x10 [ 1343.234581] 0 [ 1343.240185] ? rtnl_dellink+0x6a0/0x6a0 [ 1343.248607] 2718 [ 1343.254685] ? trace_hardirqs_on+0x10/0x10 [ 1343.254695] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1343.254703] ? deref_stack_reg+0x124/0x1a0 [ 1343.254740] ? lock_acquire+0x170/0x3f0 [ 1343.254747] ? lock_downgrade+0x740/0x740 [ 1343.254756] ? rtnl_dellink+0x6a0/0x6a0 [ 1343.271925] 0 [ 1343.274090] rtnetlink_rcv_msg+0x3be/0xb10 [ 1343.278920] Node 0 [ 1343.284008] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1343.284017] ? __netlink_lookup+0x345/0x5d0 [ 1343.284029] netlink_rcv_skb+0x125/0x390 [ 1343.284036] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1343.284043] ? netlink_ack+0x9a0/0x9a0 [ 1343.284056] netlink_unicast+0x437/0x610 [ 1343.284066] ? netlink_sendskb+0xd0/0xd0 [ 1343.284074] ? __check_object_size+0x179/0x230 [ 1343.284083] netlink_sendmsg+0x62e/0xb80 [ 1343.284094] ? nlmsg_notify+0x170/0x170 [ 1343.284104] ? security_socket_sendmsg+0x83/0xb0 [ 1343.284113] ? nlmsg_notify+0x170/0x170 [ 1343.517919] sock_sendmsg+0xb5/0x100 [ 1343.521613] SyS_sendto+0x1c7/0x2c0 [ 1343.525218] ? SyS_getpeername+0x220/0x220 [ 1343.529433] ? sock_poll+0x220/0x220 [ 1343.533138] ? SyS_socket+0x12f/0x1b0 [ 1343.536929] ? move_addr_to_kernel+0x60/0x60 [ 1343.541316] ? do_syscall_64+0x4c/0x640 [ 1343.545269] ? SyS_getpeername+0x220/0x220 [ 1343.549480] do_syscall_64+0x1d5/0x640 [ 1343.553360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1343.558533] RIP: 0033:0x4193fc [ 1343.561701] RSP: 002b:00007ffcc5216080 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1343.569420] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193fc [ 1343.576668] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1343.583914] RBP: 0000000000000000 R08: 00007ffcc52160d4 R09: 000000000000000c [ 1343.591173] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1343.598431] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1343.606663] Kernel Offset: disabled [ 1343.610389] Rebooting in 86400 seconds..