[ 238.208602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.255278] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 238.280947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.289069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.340280] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 238.349242] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 238.380379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.388328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.431993] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 238.455396] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 238.473456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.521392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.528293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.565541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.587904] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 238.649764] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 238.696274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.704394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.748026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.976437] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 238.989677] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 239.000897] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 239.007486] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 239.022549] CPU: 0 PID: 7765 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 239.024662] syz-executor.4 cpuset= [ 239.030471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.030475] Call Trace: [ 239.030493] dump_stack+0xf7/0x13b [ 239.030503] warn_alloc.cold.110+0xa2/0x1be [ 239.030508] ? zone_watermark_ok_safe+0x260/0x260 [ 239.030521] ? __alloc_pages_direct_compact+0xc2/0x330 [ 239.030527] __alloc_pages_slowpath+0x2052/0x2650 [ 239.030542] ? trace_hardirqs_off+0x10/0x10 [ 239.030549] ? warn_alloc+0x100/0x100 [ 239.030555] ? get_page_from_freelist+0x1046/0x23b0 [ 239.030570] ? __might_sleep+0x93/0xb0 [ 239.030575] __alloc_pages_nodemask+0x60d/0x770 [ 239.030582] ? __alloc_pages_slowpath+0x2650/0x2650 [ 239.030593] ? wait_for_completion+0x440/0x440 [ 239.030605] alloc_pages_current+0xd6/0x1b0 [ 239.030617] ion_page_pool_alloc+0x102/0x180 [ 239.030623] ion_system_heap_allocate+0x14e/0x930 [ 239.030632] ? ion_system_heap_free+0x270/0x270 [ 239.030643] ion_alloc+0x216/0x770 [ 239.030652] ? ion_dma_buf_release+0x40/0x40 [ 239.030663] ? kasan_check_write+0x14/0x20 [ 239.030669] ion_ioctl+0xe2/0x1b6 [ 239.030675] ? ion_alloc.cold.15+0x32/0x32 [ 239.030688] do_vfs_ioctl+0x180/0xfb0 [ 239.030695] ? __fget+0x1ad/0x2f0 [ 239.030703] ? ioctl_preallocate+0x1a0/0x1a0 [ 239.030711] ? __fget+0x1ca/0x2f0 [ 239.030724] ? security_file_ioctl+0x6a/0xa0 [ 239.030730] ? SyS_clock_settime+0x1a0/0x1a0 [ 239.030734] ? security_file_ioctl+0x6a/0xa0 [ 239.030741] SyS_ioctl+0x74/0x80 [ 239.030747] ? do_vfs_ioctl+0xfb0/0xfb0 [ 239.030755] do_syscall_64+0x1c7/0x5b0 [ 239.030760] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.030771] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 239.030777] RIP: 0033:0x45af49 [ 239.030780] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.030787] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 239.030790] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 239.030793] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 239.030797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 239.030800] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 239.040118] Mem-Info: [ 239.083001] syz4 [ 239.088780] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 239.089454] mems_allowed=0-1 [ 239.102334] syz-executor.0 cpuset= [ 239.143897] CPU: 1 PID: 7762 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 239.149680] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 239.150481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.150485] Call Trace: [ 239.150502] dump_stack+0xf7/0x13b [ 239.150514] warn_alloc.cold.110+0xa2/0x1be [ 239.150520] ? zone_watermark_ok_safe+0x260/0x260 [ 239.150536] ? __alloc_pages_direct_compact+0xc2/0x330 [ 239.150544] __alloc_pages_slowpath+0x2052/0x2650 [ 239.150562] ? trace_hardirqs_off+0x10/0x10 [ 239.150572] ? warn_alloc+0x100/0x100 [ 239.150581] ? get_page_from_freelist+0x1046/0x23b0 [ 239.150599] ? __might_sleep+0x93/0xb0 [ 239.150607] __alloc_pages_nodemask+0x60d/0x770 [ 239.150616] ? __alloc_pages_slowpath+0x2650/0x2650 [ 239.150627] ? wait_for_completion+0x440/0x440 [ 239.150638] alloc_pages_current+0xd6/0x1b0 [ 239.190112] active_anon:5417 inactive_anon:196 isolated_anon:0 [ 239.190112] active_file:848 inactive_file:1872 isolated_file:0 [ 239.190112] unevictable:0 dirty:13 writeback:0 unstable:0 [ 239.190112] slab_reclaimable:13959 slab_unreclaimable:97819 [ 239.190112] mapped:1697 shmem:250 pagetables:417 bounce:0 [ 239.190112] free:41672 free_pcp:153 free_cma:0 [ 239.193956] ion_page_pool_alloc+0x102/0x180 [ 239.197131] Node 0 active_anon:21332kB inactive_anon:772kB active_file:3380kB inactive_file:7472kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6788kB dirty:48kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 239.204923] ion_system_heap_allocate+0x14e/0x930 [ 239.204931] ? ion_system_heap_free+0x270/0x270 [ 239.204940] ion_alloc+0x216/0x770 [ 239.204948] ? ion_dma_buf_release+0x40/0x40 [ 239.204959] ? kasan_check_write+0x14/0x20 [ 239.204966] ion_ioctl+0xe2/0x1b6 [ 239.204971] ? ion_alloc.cold.15+0x32/0x32 [ 239.204985] do_vfs_ioctl+0x180/0xfb0 [ 239.204993] ? __fget+0x1ad/0x2f0 [ 239.220081] syz0 [ 239.227530] ? ioctl_preallocate+0x1a0/0x1a0 [ 239.250112] mems_allowed=0-1 [ 239.255028] ? __fget+0x1ca/0x2f0 [ 239.270116] Node 1 active_anon:336kB inactive_anon:12kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 239.272659] ? security_file_ioctl+0x6a/0xa0 [ 239.279745] Node 0 [ 239.289456] ? SyS_clock_settime+0x1a0/0x1a0 [ 239.289467] ? security_file_ioctl+0x6a/0xa0 [ 239.289479] SyS_ioctl+0x74/0x80 [ 239.289486] ? do_vfs_ioctl+0xfb0/0xfb0 [ 239.289493] do_syscall_64+0x1c7/0x5b0 [ 239.289498] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.289510] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 239.289516] RIP: 0033:0x45af49 [ 239.289519] RSP: 002b:00007fb6b5215c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.289525] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 239.289528] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 239.289533] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 239.330271] DMA free:10544kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.333363] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b52166d4 [ 239.338109] lowmem_reserve[]: [ 239.343985] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 239.410542] CPU: 1 PID: 7771 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 239.420084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.424817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.438175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.441632] Call Trace: [ 239.441654] dump_stack+0xf7/0x13b [ 239.441666] warn_alloc.cold.110+0xa2/0x1be [ 239.441671] ? zone_watermark_ok_safe+0x260/0x260 [ 239.441685] ? __alloc_pages_direct_compact+0xc2/0x330 [ 239.441692] __alloc_pages_slowpath+0x2052/0x2650 [ 239.441707] ? trace_hardirqs_off+0x10/0x10 [ 239.540072] 0 [ 239.544011] ? warn_alloc+0x100/0x100 [ 239.547332] 2570 [ 239.555065] ? get_page_from_freelist+0x1046/0x23b0 [ 239.555083] ? __might_sleep+0x93/0xb0 [ 239.555090] __alloc_pages_nodemask+0x60d/0x770 [ 239.555102] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 239.555111] ? __alloc_pages_slowpath+0x2650/0x2650 [ 239.580107] 2570 [ 239.606424] ? wait_for_completion+0x440/0x440 [ 239.606437] alloc_pages_current+0xd6/0x1b0 [ 239.606449] ion_page_pool_alloc+0x102/0x180 [ 239.606455] ion_system_heap_allocate+0x14e/0x930 [ 239.606462] ? ion_system_heap_free+0x270/0x270 [ 239.606473] ion_alloc+0x216/0x770 [ 239.650066] 2570 [ 239.656424] ? ion_dma_buf_release+0x40/0x40 [ 239.659001] 2570 [ 239.662555] ? kasan_check_write+0x14/0x20 [ 239.662565] ion_ioctl+0xe2/0x1b6 [ 239.662572] ? ion_alloc.cold.15+0x32/0x32 [ 239.662584] do_vfs_ioctl+0x180/0xfb0 [ 239.662591] ? __fget+0x1ad/0x2f0 [ 239.662598] ? ioctl_preallocate+0x1a0/0x1a0 [ 239.692717] ? __fget+0x1ca/0x2f0 [ 239.694779] Node 0 [ 239.699806] ? security_file_ioctl+0x6a/0xa0 [ 239.710057] DMA32 free:45260kB min:36384kB low:45480kB high:54576kB active_anon:21332kB inactive_anon:772kB active_file:3380kB inactive_file:7472kB unevictable:0kB writepending:48kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1544kB bounce:0kB free_pcp:564kB local_pcp:204kB free_cma:0kB [ 239.713183] ? SyS_clock_settime+0x1a0/0x1a0 [ 239.713191] ? security_file_ioctl+0x6a/0xa0 [ 239.718191] lowmem_reserve[]: [ 239.720344] SyS_ioctl+0x74/0x80 [ 239.720351] ? do_vfs_ioctl+0xfb0/0xfb0 [ 239.720358] do_syscall_64+0x1c7/0x5b0 [ 239.720363] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.720375] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 239.720380] RIP: 0033:0x45af49 [ 239.720383] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.720389] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 239.720392] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 239.720396] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 239.740067] 0 [ 239.743173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 239.746701] 0 0 0 [ 239.748756] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 239.770062] 0 [ 239.945936] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.978340] lowmem_reserve[]: 0 0 0 0 0 [ 239.982719] Node 1 Normal free:53448kB min:53504kB low:66880kB high:80256kB active_anon:336kB inactive_anon:12kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.016266] lowmem_reserve[]: 0 0 0 0 0 [ 240.020358] Node 0 DMA: 15*4kB (U) 37*8kB (U) 35*16kB (UE) 25*32kB (U) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10484kB [ 240.041289] Node 0 DMA32: 128*4kB (MEH) 111*8kB (MEH) 48*16kB (MH) 991*32kB (UMH) 14*64kB (MH) 6*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36312kB [ 240.057035] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 240.068483] Node 1 Normal: 28*4kB (M) 11*8kB (M) 436*16kB (UE) 1443*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53352kB [ 240.082887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.091968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 240.101904] kworker/u4:1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 240.116042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.122821] kworker/u4:1 cpuset= [ 240.126840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 240.131497] / [ 240.138935] 309 total pagecache pages [ 240.139706] mems_allowed=0-1 [ 240.140707] 0 pages in swap cache [ 240.140716] Swap cache stats: add 0, delete 0, find 0/0 [ 240.140719] Free swap = 0kB [ 240.140721] Total swap = 0kB [ 240.140727] 1965979 pages RAM [ 240.140729] 0 pages HighMem/MovableOnly [ 240.140731] 335868 pages reserved [ 240.140733] 0 pages cma reserved [ 240.184682] CPU: 0 PID: 7795 Comm: kworker/u4:1 Not tainted 4.14.172-syzkaller #0 [ 240.192337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.201700] Call Trace: [ 240.204296] dump_stack+0xf7/0x13b [ 240.208015] dump_header+0x160/0x63f [ 240.211880] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 240.216999] ? ___ratelimit+0x243/0x519 [ 240.220992] ? do_raw_spin_unlock+0x16a/0x250 [ 240.225509] oom_kill_process.cold.24+0xb/0xa1a [ 240.230183] ? out_of_memory+0x7f9/0x1030 [ 240.234635] ? lock_downgrade+0x7f0/0x7f0 [ 240.238836] out_of_memory+0x2b0/0x1030 [ 240.242829] ? oom_killer_disable+0x1a0/0x1a0 [ 240.247487] ? __alloc_pages_slowpath+0xb69/0x2650 [ 240.252424] __alloc_pages_slowpath+0x1ef3/0x2650 [ 240.257280] ? warn_alloc+0x100/0x100 [ 240.261103] ? get_page_from_freelist+0x1046/0x23b0 [ 240.266125] ? __might_sleep+0x93/0xb0 [ 240.270012] __alloc_pages_nodemask+0x60d/0x770 [ 240.274679] ? __alloc_pages_slowpath+0x2650/0x2650 [ 240.279697] ? cache_grow_begin+0x331/0x3f0 [ 240.284021] cache_grow_begin+0x80/0x3f0 [ 240.288079] fallback_alloc+0x203/0x2c0 [ 240.292056] ____cache_alloc_node+0x1c7/0x1e0 [ 240.296553] kmem_cache_alloc+0x1f8/0x790 [ 240.300704] ? rw_verify_area+0xb8/0x2b0 [ 240.304771] getname_kernel+0x4e/0x330 [ 240.308660] open_exec+0xc/0x50 [ 240.311957] load_elf_binary+0x6fd/0x4c90 [ 240.316129] ? trace_hardirqs_off+0x10/0x10 [ 240.320453] ? lock_downgrade+0x7f0/0x7f0 [ 240.324705] ? trace_hardirqs_on+0x10/0x10 [ 240.328951] ? notesize.isra.5+0x70/0x70 [ 240.333039] ? lock_downgrade+0x7f0/0x7f0 [ 240.337203] search_binary_handler+0x12b/0x630 [ 240.341809] do_execveat_common.isra.32+0x1023/0x1e00 [ 240.347004] ? rcu_read_lock_sched_held+0x90/0x120 [ 240.351933] ? prepare_bprm_creds+0x100/0x100 [ 240.356428] ? memcpy+0x45/0x50 [ 240.359706] do_execve+0x1e/0x20 [ 240.363072] call_usermodehelper_exec_async+0x280/0x4b0 [ 240.368444] ? umh_complete+0x60/0x60 [ 240.372248] ret_from_fork+0x24/0x30 [ 240.466073] Mem-Info: [ 240.468543] active_anon:5418 inactive_anon:196 isolated_anon:0 [ 240.468543] active_file:0 inactive_file:21 isolated_file:0 [ 240.468543] unevictable:0 dirty:0 writeback:0 unstable:0 [ 240.468543] slab_reclaimable:13960 slab_unreclaimable:97446 [ 240.468543] mapped:26 shmem:250 pagetables:418 bounce:0 [ 240.468543] free:25078 free_pcp:55 free_cma:0 [ 240.524427] Node 0 active_anon:21336kB inactive_anon:772kB active_file:0kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 240.623546] Node 1 active_anon:336kB inactive_anon:12kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 240.682100] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.788984] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 240.799893] Node 0 DMA32 free:36356kB min:36384kB low:45480kB high:54576kB active_anon:21336kB inactive_anon:772kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1548kB bounce:0kB free_pcp:212kB local_pcp:112kB free_cma:0kB [ 240.857203] lowmem_reserve[]: 0 0 0 0 0 [ 240.862054] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.943350] lowmem_reserve[]: 0 0 0 0 0 [ 240.947401] Node 1 Normal free:53472kB min:53504kB low:66880kB high:80256kB active_anon:336kB inactive_anon:12kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 241.008564] lowmem_reserve[]: 0 0 0 0 0 [ 241.017532] Node 0 DMA: 15*4kB (U) 37*8kB (U) 35*16kB (UE) 25*32kB (U) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10484kB [ 241.116009] Node 0 DMA32: 88*4kB (ME) 70*8kB (UME) 44*16kB (UME) 982*32kB (UME) 11*64kB (ME) 6*128kB (ME) 5*256kB (ME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 36304kB [ 241.235941] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 241.285255] Node 1 Normal: 32*4kB (UM) 13*8kB (UM) 443*16kB (UE) 1443*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53496kB [ 241.363314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.416242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 241.468817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.518654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 241.559989] 270 total pagecache pages [ 241.577790] 0 pages in swap cache [ 241.615536] Swap cache stats: add 0, delete 0, find 0/0 [ 241.635655] Free swap = 0kB [ 241.638729] Total swap = 0kB [ 241.681880] 1965979 pages RAM [ 241.685042] 0 pages HighMem/MovableOnly [ 241.689044] 335868 pages reserved [ 241.747322] 0 pages cma reserved [ 241.766469] Out of memory: Kill process 7746 (syz-executor.3) score 999 or sacrifice child [ 241.832107] Killed process 7747 (syz-executor.3) total-vm:38300kB, anon-rss:144kB, file-rss:0kB, shmem-rss:0kB [ 241.926497] oom_reaper: reaped process 7747 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 241.967489] rs:main Q:Reg invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 241.988786] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 241.993974] CPU: 0 PID: 6992 Comm: rs:main Q:Reg Not tainted 4.14.172-syzkaller #0 [ 242.002496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.011989] Call Trace: [ 242.014596] dump_stack+0xf7/0x13b [ 242.018169] dump_header+0x160/0x63f [ 242.021922] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 242.027047] ? ___ratelimit+0x243/0x519 [ 242.031029] ? do_raw_spin_unlock+0x16a/0x250 [ 242.035537] oom_kill_process.cold.24+0xb/0xa1a [ 242.040206] ? out_of_memory+0x7f9/0x1030 [ 242.044531] ? lock_downgrade+0x7f0/0x7f0 [ 242.048687] out_of_memory+0x2b0/0x1030 [ 242.052756] ? oom_killer_disable+0x1a0/0x1a0 [ 242.057250] ? __alloc_pages_slowpath+0xb69/0x2650 [ 242.062189] __alloc_pages_slowpath+0x1ef3/0x2650 [ 242.067377] ? warn_alloc+0x100/0x100 [ 242.071194] ? get_page_from_freelist+0x1046/0x23b0 [ 242.076342] ? __might_sleep+0x93/0xb0 [ 242.080383] __alloc_pages_nodemask+0x60d/0x770 [ 242.084011] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 242.085070] ? __alloc_pages_slowpath+0x2650/0x2650 [ 242.085082] ? lock_downgrade+0x7f0/0x7f0 [ 242.099481] (null) [ 242.101485] alloc_pages_current+0xd6/0x1b0 [ 242.101499] __page_cache_alloc+0x1da/0x330 [ 242.101507] filemap_fault+0xbc8/0x1ae0 [ 242.101521] ? __lock_page_or_retry+0x820/0x820 [ 242.101532] ? lock_acquire+0x173/0x400 [ 242.101542] ? ext4_filemap_fault+0x75/0xb0 [ 242.101552] ext4_filemap_fault+0x7d/0xb0 [ 242.108699] syz-executor.3 cpuset= [ 242.112338] __do_fault+0xf3/0x340 [ 242.112346] __handle_mm_fault+0x21eb/0x3870 [ 242.112353] ? copy_page_range+0x1d10/0x1d10 [ 242.112362] ? find_held_lock+0x36/0x1d0 [ 242.112377] handle_mm_fault+0x234/0x6e0 [ 242.112383] ? find_vma+0x1a/0x150 [ 242.112391] __do_page_fault+0x44d/0xb00 [ 242.112397] ? SyS_write+0x1c5/0x250 [ 242.112404] ? firmware_map_remove+0x177/0x177 [ 242.112415] ? vmalloc_fault+0xc90/0xc90 [ 242.119599] syz3 [ 242.120690] ? retint_user+0x18/0x18 [ 242.128320] mems_allowed=0-1 [ 242.129400] ? page_fault+0x2f/0x50 [ 242.194990] do_page_fault+0x64/0x3fb [ 242.198797] ? page_fault+0x2f/0x50 [ 242.202423] page_fault+0x45/0x50 [ 242.205867] RIP: 0033:0x41a3cc [ 242.209040] RSP: 002b:00007f7904e9ec00 EFLAGS: 00010246 [ 242.214390] RAX: 0000000000000000 RBX: 0000000002115f40 RCX: 0000000000000001 [ 242.221668] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.229099] RBP: 00007f7904e9ec40 R08: 00000000020c5b80 R09: 0000000000001b50 [ 242.236419] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000020b5a10 [ 242.243694] R13: 00000000020c6120 R14: 00000000020b5a38 R15: 00000000020b5a10 [ 242.252904] CPU: 1 PID: 7747 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 242.260852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.265354] Mem-Info: [ 242.270212] Call Trace: [ 242.270233] dump_stack+0xf7/0x13b [ 242.270244] warn_alloc.cold.110+0xa2/0x1be [ 242.270249] ? zone_watermark_ok_safe+0x260/0x260 [ 242.270255] ? usleep_range+0x120/0x120 [ 242.270264] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 242.272689] active_anon:5391 inactive_anon:196 isolated_anon:0 [ 242.272689] active_file:10 inactive_file:10 isolated_file:0 [ 242.272689] unevictable:0 dirty:0 writeback:0 unstable:0 [ 242.272689] slab_reclaimable:13959 slab_unreclaimable:97446 [ 242.272689] mapped:2 shmem:250 pagetables:418 bounce:0 [ 242.272689] free:13824 free_pcp:118 free_cma:0 [ 242.275264] ? call_timer_fn+0x570/0x570 [ 242.278785] Node 0 active_anon:21232kB inactive_anon:772kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 242.283090] ? unreserve_highatomic_pageblock+0x315/0x450 [ 242.283099] __alloc_pages_slowpath+0x2052/0x2650 [ 242.283113] ? warn_alloc+0x100/0x100 [ 242.283120] ? get_page_from_freelist+0x1046/0x23b0 [ 242.283134] ? __might_sleep+0x93/0xb0 [ 242.287985] Node 1 active_anon:332kB inactive_anon:12kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 242.291974] __alloc_pages_nodemask+0x60d/0x770 [ 242.291982] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 242.291987] ? __alloc_pages_slowpath+0x2650/0x2650 [ 242.291998] ? wait_for_completion+0x440/0x440 [ 242.292008] alloc_pages_current+0xd6/0x1b0 [ 242.297130] Node 0 DMA free:10384kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.329513] ion_page_pool_alloc+0x102/0x180 [ 242.329520] ion_system_heap_allocate+0x14e/0x930 [ 242.329527] ? ion_system_heap_free+0x270/0x270 [ 242.329536] ion_alloc+0x216/0x770 [ 242.329544] ? ion_dma_buf_release+0x40/0x40 [ 242.329556] ? kasan_check_write+0x14/0x20 [ 242.333632] lowmem_reserve[]: [ 242.360432] ion_ioctl+0xe2/0x1b6 [ 242.360440] ? ion_alloc.cold.15+0x32/0x32 [ 242.360452] do_vfs_ioctl+0x180/0xfb0 [ 242.360459] ? __fget+0x1ad/0x2f0 [ 242.360465] ? ioctl_preallocate+0x1a0/0x1a0 [ 242.360473] ? __fget+0x1ca/0x2f0 [ 242.366051] 0 [ 242.370931] ? security_file_ioctl+0x6a/0xa0 [ 242.370940] ? SyS_clock_settime+0x1a0/0x1a0 [ 242.370943] ? security_file_ioctl+0x6a/0xa0 [ 242.370953] SyS_ioctl+0x74/0x80 [ 242.370960] ? do_vfs_ioctl+0xfb0/0xfb0 [ 242.370967] do_syscall_64+0x1c7/0x5b0 [ 242.370974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.374777] 2570 [ 242.379809] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 242.383720] 2570 [ 242.409860] RIP: 0033:0x45af49 [ 242.409864] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.409870] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 242.409873] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 242.409875] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 242.409877] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 242.409880] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 242.416171] warn_alloc_show_mem: 2 callbacks suppressed [ 242.416176] Mem-Info: [ 242.430124] 2570 [ 242.440140] active_anon:5391 inactive_anon:196 isolated_anon:0 [ 242.440140] active_file:10 inactive_file:10 isolated_file:0 [ 242.440140] unevictable:0 dirty:0 writeback:0 unstable:0 [ 242.440140] slab_reclaimable:13959 slab_unreclaimable:97446 [ 242.440140] mapped:2 shmem:250 pagetables:418 bounce:0 [ 242.440140] free:13824 free_pcp:118 free_cma:0 [ 242.469850] 2570 [ 242.480335] Node 0 active_anon:21232kB inactive_anon:772kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 242.493856] Node 0 [ 242.503487] Node 1 active_anon:332kB inactive_anon:12kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 242.511016] DMA32 free:18200kB min:36384kB low:45480kB high:54576kB active_anon:21232kB inactive_anon:772kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1548kB bounce:0kB free_pcp:352kB local_pcp:204kB free_cma:0kB [ 242.514031] Node 0 [ 242.515154] lowmem_reserve[]: [ 242.519558] DMA free:10384kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.533220] 0 [ 242.541060] lowmem_reserve[]: [ 242.554498] 0 [ 242.556143] 0 [ 242.558354] 0 [ 242.569153] 2570 [ 242.584901] 0 [ 242.593380] 2570 [ 242.602683] 0 [ 242.603409] 2570 [ 242.616573] 2570 [ 242.658518] Node 0 [ 242.716352] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.738380] Node 0 [ 242.750240] lowmem_reserve[]: [ 242.769790] DMA32 free:18200kB min:36384kB low:45480kB high:54576kB active_anon:21232kB inactive_anon:772kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1548kB bounce:0kB free_pcp:352kB local_pcp:148kB free_cma:0kB [ 242.780623] 0 [ 242.786848] lowmem_reserve[]: [ 242.788867] 0 0 [ 242.791220] 0 0 0 0 0 [ 242.791236] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.791248] lowmem_reserve[]: 0 0 0 0 0 [ 242.791263] Node 1 Normal free:26712kB min:53504kB low:66880kB high:80256kB active_anon:332kB inactive_anon:12kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:124kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 242.791274] lowmem_reserve[]: 0 0 0 0 0 [ 242.791289] Node 0 DMA: 0*4kB 32*8kB (U) 35*16kB (UE) 25*32kB (U) 1*64kB (E) 2*128kB (UE) 1*256kB [ 242.818294] 0 [ 242.832779] (E) [ 242.852754] 0 [ 242.866547] 2*512kB [ 242.898118] (UE) [ 242.928350] Node 1 [ 242.940120] 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10384kB [ 242.949705] Normal free:26712kB min:53504kB low:66880kB high:80256kB active_anon:332kB inactive_anon:12kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:124kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 242.957719] Node 0 DMA32: 88*4kB (ME) 72*8kB (UME) 43*16kB (UME) 417*32kB (UME) 11*64kB (ME) 6*128kB (ME) 5*256kB (ME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 18224kB [ 242.988901] lowmem_reserve[]: [ 243.009424] Node 0 [ 243.011553] 0 [ 243.012616] Normal: [ 243.014800] 0 [ 243.016587] 0*4kB [ 243.018892] 0 0 [ 243.027976] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 243.032914] 0 [ 243.038934] Node 1 Normal: [ 243.048518] Node 0 [ 243.048732] 28*4kB (M) 11*8kB (M) 5*16kB (UE) 826*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26712kB [ 243.054902] DMA: [ 243.073031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.075645] 0*4kB 32*8kB (U) 35*16kB (UE) 25*32kB (U) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10384kB [ 243.088459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 243.110240] Node 0 DMA32: 88*4kB (ME) 72*8kB (UME) 43*16kB (UME) 417*32kB (UME) 11*64kB (ME) 6*128kB (ME) 5*256kB (ME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 18224kB [ 243.116755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.134181] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 243.140954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 243.153547] Node 1 Normal: 28*4kB (M) 11*8kB (M) 5*16kB (UE) 826*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26712kB [ 243.159219] 270 total pagecache pages [ 243.176466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.177785] 0 pages in swap cache [ 243.188130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 243.188823] Swap cache stats: add 0, delete 0, find 0/0 [ 243.203685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.209658] Free swap = 0kB [ 243.215606] Total swap = 0kB [ 243.218619] 1965979 pages RAM [ 243.219492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 243.229538] 0 pages HighMem/MovableOnly [ 243.235454] 335868 pages reserved [ 243.239005] 0 pages cma reserved [ 243.240559] 270 total pagecache pages [ 243.246392] 0 pages in swap cache [ 243.249841] Swap cache stats: add 0, delete 0, find 0/0 [ 243.280251] Free swap = 0kB [ 243.283321] Total swap = 0kB [ 243.286341] 1965979 pages RAM [ 243.289595] 0 pages HighMem/MovableOnly [ 243.330128] 335868 pages reserved [ 243.333633] 0 pages cma reserved [ 243.336995] Out of memory: Kill process 7761 (syz-executor.4) score 999 or sacrifice child [ 243.370141] Killed process 7762 (syz-executor.4) total-vm:38036kB, anon-rss:128kB, file-rss:0kB, shmem-rss:0kB [ 243.410639] oom_reaper: reaped process 7762 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 243.639844] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 243.682825] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 243.689952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.707325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.736908] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 243.764351] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 243.801509] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 243.833855] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 243.860288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.868017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.892920] device veth0_vlan entered promiscuous mode [ 243.904402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.924845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.948965] device veth1_vlan entered promiscuous mode [ 243.964566] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 243.993171] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 244.024524] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 244.045305] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 244.170801] oom_reaper: reaped process 7765 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 244.212813] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 244.220178] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 244.231009] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 244.250261] CPU: 0 PID: 7765 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 244.258084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.267437] Call Trace: [ 244.270024] dump_stack+0xf7/0x13b [ 244.273565] dump_header+0x160/0x63f [ 244.277277] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 244.277812] syz-executor.3 cpuset= [ 244.282388] ? ___ratelimit+0x243/0x519 [ 244.282396] ? do_raw_spin_unlock+0x16a/0x250 [ 244.282405] oom_kill_process.cold.24+0xb/0xa1a [ 244.282409] ? out_of_memory+0x7f9/0x1030 [ 244.282417] ? lock_downgrade+0x7f0/0x7f0 [ 244.282427] out_of_memory+0x2b0/0x1030 [ 244.282435] ? oom_killer_disable+0x1a0/0x1a0 [ 244.282443] ? __alloc_pages_slowpath+0xb69/0x2650 [ 244.282450] __alloc_pages_slowpath+0x1ef3/0x2650 [ 244.285984] syz3 [ 244.289957] ? warn_alloc+0x100/0x100 [ 244.296093] syz-executor.4: [ 244.299527] ? get_page_from_freelist+0x1046/0x23b0 [ 244.308353] mems_allowed=0-1 [ 244.311793] ? __might_sleep+0x93/0xb0 [ 244.311806] __alloc_pages_nodemask+0x60d/0x770 [ 244.311814] ? __alloc_pages_slowpath+0x2650/0x2650 [ 244.311825] ? wait_for_completion+0x440/0x440 [ 244.311831] ? __list_del_entry_valid+0xb6/0xf3 [ 244.311840] alloc_pages_current+0xd6/0x1b0 [ 244.311851] ion_page_pool_alloc+0x102/0x180 [ 244.311856] ion_system_heap_allocate+0x14e/0x930 [ 244.311864] ? ion_system_heap_free+0x270/0x270 [ 244.311873] ion_alloc+0x216/0x770 [ 244.311883] ? ion_dma_buf_release+0x40/0x40 [ 244.318051] page allocation failure: order:0 [ 244.321557] ? kasan_check_write+0x14/0x20 [ 244.321568] ion_ioctl+0xe2/0x1b6 [ 244.321573] ? ion_alloc.cold.15+0x32/0x32 [ 244.321585] do_vfs_ioctl+0x180/0xfb0 [ 244.321593] ? __fget+0x1ad/0x2f0 [ 244.321599] ? ioctl_preallocate+0x1a0/0x1a0 [ 244.321606] ? __fget+0x1ca/0x2f0 [ 244.321618] ? security_file_ioctl+0x6a/0xa0 [ 244.321624] ? SyS_clock_settime+0x1a0/0x1a0 [ 244.321628] ? security_file_ioctl+0x6a/0xa0 [ 244.321634] SyS_ioctl+0x74/0x80 [ 244.321640] ? do_vfs_ioctl+0xfb0/0xfb0 [ 244.321648] do_syscall_64+0x1c7/0x5b0 [ 244.321653] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.321664] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.321669] RIP: 0033:0x45af49 [ 244.321671] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.321677] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 244.321679] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 244.321682] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 244.321685] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 244.321688] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 244.333645] Mem-Info: [ 244.338910] CPU: 1 PID: 7747 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 244.343800] active_anon:5344 inactive_anon:196 isolated_anon:0 [ 244.343800] active_file:17 inactive_file:15 isolated_file:0 [ 244.343800] unevictable:0 dirty:0 writeback:0 unstable:0 [ 244.343800] slab_reclaimable:13984 slab_unreclaimable:97320 [ 244.343800] mapped:2 shmem:250 pagetables:417 bounce:0 [ 244.343800] free:13790 free_pcp:29 free_cma:0 [ 244.348036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.352913] Node 0 active_anon:21132kB inactive_anon:772kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 244.357878] Call Trace: [ 244.362498] Node 1 active_anon:244kB inactive_anon:12kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 244.367142] dump_stack+0xf7/0x13b [ 244.371524] Node 0 [ 244.376044] warn_alloc.cold.110+0xa2/0x1be [ 244.381048] DMA free:10372kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.385670] ? zone_watermark_ok_safe+0x260/0x260 [ 244.389196] lowmem_reserve[]: [ 244.393603] ? __alloc_pages_direct_compact+0xc2/0x330 [ 244.393610] __alloc_pages_slowpath+0x2052/0x2650 [ 244.393623] ? trace_hardirqs_off+0x10/0x10 [ 244.393630] ? warn_alloc+0x100/0x100 [ 244.393635] ? get_page_from_freelist+0x1046/0x23b0 [ 244.393648] ? __might_sleep+0x93/0xb0 [ 244.393656] __alloc_pages_nodemask+0x60d/0x770 [ 244.398134] 0 [ 244.402359] ? trace_hardirqs_off+0x10/0x10 [ 244.402367] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 244.402374] ? __alloc_pages_slowpath+0x2650/0x2650 [ 244.402381] ? wait_for_completion+0x440/0x440 [ 244.402392] alloc_pages_current+0xd6/0x1b0 [ 244.405819] 2570 [ 244.410046] ion_page_pool_alloc+0x102/0x180 [ 244.410053] ion_system_heap_allocate+0x14e/0x930 [ 244.410060] ? do_raw_spin_unlock+0x16a/0x250 [ 244.410068] ? ion_system_heap_free+0x270/0x270 [ 244.413847] 2570 [ 244.417310] ion_alloc+0x27f/0x770 [ 244.421726] 2570 [ 244.425244] ? ion_dma_buf_release+0x40/0x40 [ 244.430089] 2570 [ 244.434468] ? kasan_check_write+0x14/0x20 [ 244.438854] Node 0 [ 244.442211] ion_ioctl+0xe2/0x1b6 [ 244.442217] ? ion_alloc.cold.15+0x32/0x32 [ 244.442229] do_vfs_ioctl+0x180/0xfb0 [ 244.442236] ? __fget+0x1ad/0x2f0 [ 244.442243] ? ioctl_preallocate+0x1a0/0x1a0 [ 244.446207] DMA32 free:18084kB min:36384kB low:45480kB high:54576kB active_anon:21132kB inactive_anon:772kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6880kB pagetables:1544kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 244.450093] ? __fget+0x1ca/0x2f0 [ 244.450106] ? security_file_ioctl+0x6a/0xa0 [ 244.450112] ? SyS_clock_settime+0x1a0/0x1a0 [ 244.450117] ? security_file_ioctl+0x6a/0xa0 [ 244.454943] lowmem_reserve[]: [ 244.460135] SyS_ioctl+0x74/0x80 [ 244.460142] ? do_vfs_ioctl+0xfb0/0xfb0 [ 244.460149] do_syscall_64+0x1c7/0x5b0 [ 244.460155] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.460168] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.463330] 0 [ 244.471284] RIP: 0033:0x45af49 [ 244.471286] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.471292] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 244.471295] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 244.471297] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 244.471300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 244.471303] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 244.475062] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 244.478846] 0 [ 244.486196] (null) [ 244.486203] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 244.486223] CPU: 1 PID: 7762 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 244.486226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.486229] Call Trace: [ 244.486244] dump_stack+0xf7/0x13b [ 244.486255] warn_alloc.cold.110+0xa2/0x1be [ 244.486261] ? zone_watermark_ok_safe+0x260/0x260 [ 244.486268] ? usleep_range+0x120/0x120 [ 244.486275] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 244.486283] ? call_timer_fn+0x570/0x570 [ 244.486290] ? unreserve_highatomic_pageblock+0x315/0x450 [ 244.486300] __alloc_pages_slowpath+0x2052/0x2650 [ 244.486314] ? warn_alloc+0x100/0x100 [ 244.486320] ? get_page_from_freelist+0x1046/0x23b0 [ 244.486336] ? __might_sleep+0x93/0xb0 [ 244.486342] __alloc_pages_nodemask+0x60d/0x770 [ 244.486348] ? __alloc_pages_slowpath+0x2650/0x2650 [ 244.486356] ? wait_for_completion+0x440/0x440 [ 244.486361] ? __list_del_entry_valid+0xb6/0xf3 [ 244.486371] alloc_pages_current+0xd6/0x1b0 [ 244.486381] ion_page_pool_alloc+0x102/0x180 [ 244.486387] ion_system_heap_allocate+0x14e/0x930 [ 244.486395] ? ion_system_heap_free+0x270/0x270 [ 244.486404] ion_alloc+0x216/0x770 [ 244.486414] ? ion_dma_buf_release+0x40/0x40 [ 244.486425] ? kasan_check_write+0x14/0x20 [ 244.486432] ion_ioctl+0xe2/0x1b6 [ 244.486437] ? ion_alloc.cold.15+0x32/0x32 [ 244.486448] do_vfs_ioctl+0x180/0xfb0 [ 244.486455] ? __fget+0x1ad/0x2f0 [ 244.486462] ? ioctl_preallocate+0x1a0/0x1a0 [ 244.486471] ? __fget+0x1ca/0x2f0 [ 244.486484] ? security_file_ioctl+0x6a/0xa0 [ 244.486488] ? SyS_clock_settime+0x1a0/0x1a0 [ 244.486493] ? security_file_ioctl+0x6a/0xa0 [ 244.486498] SyS_ioctl+0x74/0x80 [ 244.486503] ? do_vfs_ioctl+0xfb0/0xfb0 [ 244.486510] do_syscall_64+0x1c7/0x5b0 [ 244.486515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.486524] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.486529] RIP: 0033:0x45af49 [ 244.486534] RSP: 002b:00007fb6b5215c78 EFLAGS: 00000246 [ 244.520091] 0 [ 244.551924] ORIG_RAX: 0000000000000010 [ 244.551929] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 244.551932] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 244.551935] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 244.551937] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b52166d4 [ 244.551949] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 244.555123] Mem-Info: [ 244.628397] 0 [ 244.661523] active_anon:5344 inactive_anon:196 isolated_anon:0 [ 244.661523] active_file:17 inactive_file:15 isolated_file:0 [ 244.661523] unevictable:0 dirty:0 writeback:0 unstable:0 [ 244.661523] slab_reclaimable:13984 slab_unreclaimable:97320 [ 244.661523] mapped:2 shmem:250 pagetables:417 bounce:0 [ 244.661523] free:13764 free_pcp:59 free_cma:0 [ 244.671852] 0 [ 244.671862] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.671873] lowmem_reserve[]: 0 0 0 0 0 [ 244.671890] Node 1 Normal free:26704kB min:53504kB low:66880kB high:80256kB active_anon:244kB inactive_anon:12kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.671901] lowmem_reserve[]: 0 0 0 0 0 [ 244.671915] Node 0 DMA: 1*4kB (U) 14*8kB (U) 35*16kB (UE) 25*32kB (U) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10372kB [ 244.671971] Node 0 DMA32: 78*4kB (ME) 73*8kB (ME) 41*16kB (ME) 329*32kB (UME) 12*64kB (UME) 22*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 17968kB [ 244.672018] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 244.672045] Node 1 Normal: 19*4kB (UME) 13*8kB (UME) 14*16kB (UME) 10*32kB (UME) 4*64kB (M) 3*128kB (M) 3*256kB (UM) 12*512kB (UM) [ 244.686522] Node 0 active_anon:21132kB inactive_anon:772kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 244.690072] 2*1024kB [ 244.693911] Node 1 active_anon:244kB inactive_anon:12kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 244.695629] (UM) [ 244.699932] Node 0 [ 244.711331] 2*2048kB [ 244.720404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.729658] (U) [ 244.738357] DMA free:10372kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.739295] 3*4096kB [ 244.742876] lowmem_reserve[]: [ 244.761512] (UM) [ 244.773097] 0 [ 244.784508] = 26708kB [ 244.817272] 2570 [ 244.823682] syz-executor.3: [ 244.828617] 2570 [ 244.830010] page allocation failure: order:0 [ 244.842814] 2570 [ 244.850826] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 244.857268] 2570 [ 244.872239] (null) [ 244.884267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.894319] syz-executor.3 cpuset= [ 244.916468] syz3 [ 244.918269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 244.930200] mems_allowed=0-1 [ 244.938456] Node 0 [ 244.948712] CPU: 0 PID: 7747 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 244.957194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.959940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.959944] Call Trace: [ 244.964810] DMA32 free:18104kB min:36384kB low:45480kB high:54576kB active_anon:21132kB inactive_anon:772kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6880kB pagetables:1544kB bounce:0kB free_pcp:620kB local_pcp:500kB free_cma:0kB [ 244.969974] dump_stack+0xf7/0x13b [ 244.981276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 244.983586] warn_alloc.cold.110+0xa2/0x1be [ 244.987458] 282 total pagecache pages [ 244.992112] ? zone_watermark_ok_safe+0x260/0x260 [ 244.992125] ? usleep_range+0x120/0x120 [ 244.992132] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 244.992139] ? call_timer_fn+0x570/0x570 [ 244.992145] ? unreserve_highatomic_pageblock+0x315/0x450 [ 244.992154] __alloc_pages_slowpath+0x2052/0x2650 [ 244.992167] ? warn_alloc+0x100/0x100 [ 244.992173] ? get_page_from_freelist+0x1046/0x23b0 [ 244.992188] ? __might_sleep+0x93/0xb0 [ 244.992195] __alloc_pages_nodemask+0x60d/0x770 [ 244.992202] ? trace_hardirqs_off+0x10/0x10 [ 244.992206] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 244.992212] ? __alloc_pages_slowpath+0x2650/0x2650 [ 244.992218] ? wait_for_completion+0x440/0x440 [ 244.992228] alloc_pages_current+0xd6/0x1b0 [ 244.992240] ion_page_pool_alloc+0x102/0x180 [ 245.002058] lowmem_reserve[]: [ 245.006561] ion_system_heap_allocate+0x14e/0x930 [ 245.014636] 0 pages in swap cache [ 245.015602] ? do_raw_spin_unlock+0x16a/0x250 [ 245.023458] Swap cache stats: add 0, delete 0, find 0/0 [ 245.025090] ? ion_system_heap_free+0x270/0x270 [ 245.028624] Free swap = 0kB [ 245.033014] ion_alloc+0x27f/0x770 [ 245.033023] ? ion_dma_buf_release+0x40/0x40 [ 245.033035] ? kasan_check_write+0x14/0x20 [ 245.033040] ion_ioctl+0xe2/0x1b6 [ 245.033045] ? ion_alloc.cold.15+0x32/0x32 [ 245.033057] do_vfs_ioctl+0x180/0xfb0 [ 245.033064] ? __fget+0x1ad/0x2f0 [ 245.033070] ? ioctl_preallocate+0x1a0/0x1a0 [ 245.033078] ? __fget+0x1ca/0x2f0 [ 245.033091] ? security_file_ioctl+0x6a/0xa0 [ 245.033097] ? SyS_clock_settime+0x1a0/0x1a0 [ 245.033101] ? security_file_ioctl+0x6a/0xa0 [ 245.033107] SyS_ioctl+0x74/0x80 [ 245.033112] ? do_vfs_ioctl+0xfb0/0xfb0 [ 245.033123] do_syscall_64+0x1c7/0x5b0 [ 245.033129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.043626] 0 [ 245.045070] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.048841] 0 0 [ 245.052279] RIP: 0033:0x45af49 [ 245.052282] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.052287] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 245.052290] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 245.052292] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 245.052294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 2020/03/09 03:19:15 executed programs: 72 [ 245.052297] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 245.099554] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 245.104669] Total swap = 0kB [ 245.123589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.130088] 1965979 pages RAM [ 245.138646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.140359] 0 pages HighMem/MovableOnly [ 245.164306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.210082] 0 [ 245.216501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.280090] 0 [ 245.293557] 335868 pages reserved [ 245.332315] 0 pages cma reserved [ 245.357772] Node 0 [ 245.365283] Out of memory: Kill process 7217 (syz-execprog) score 1 or sacrifice child [ 245.373520] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 245.399409] Killed process 7758 (syz-executor.5) total-vm:37644kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 245.410706] lowmem_reserve[]: [ 245.412861] device veth0_vlan entered promiscuous mode [ 245.414283] 0 [ 245.421906] device veth1_vlan entered promiscuous mode [ 245.426910] 0 [ 245.433320] syz-executor.0: [ 245.437235] 0 [ 245.451425] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 245.452920] 0 [ 245.464689] IPVS: ftp: loaded support on port[0] = 21 [ 245.469850] 0 [ 245.482336] page allocation failure: order:0 [ 245.499183] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 245.534803] Node 1 [ 245.535364] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 245.539660] Normal free:122084kB min:53504kB low:66880kB high:80256kB active_anon:244kB inactive_anon:12kB active_file:1088kB inactive_file:2968kB unevictable:0kB writepending:148kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:124kB bounce:0kB free_pcp:480kB local_pcp:276kB free_cma:0kB [ 245.543372] (null) [ 245.548649] lowmem_reserve[]: [ 245.552397] syz-executor.0 cpuset= [ 245.562996] 0 [ 245.567748] syz0 [ 245.575370] 0 [ 245.580129] mems_allowed=0-1 [ 245.583599] 0 [ 245.587867] CPU: 0 PID: 7765 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 245.592322] 0 [ 245.593885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.593889] Call Trace: [ 245.599371] 0 [ 245.604398] dump_stack+0xf7/0x13b [ 245.604410] warn_alloc.cold.110+0xa2/0x1be [ 245.604416] ? zone_watermark_ok_safe+0x260/0x260 [ 245.604424] ? wake_up_q+0x9c/0xe0 [ 245.604432] ? __mutex_unlock_slowpath+0x29b/0x7e0 [ 245.604444] __alloc_pages_slowpath+0x2052/0x2650 [ 245.604457] ? warn_alloc+0x100/0x100 [ 245.604463] ? get_page_from_freelist+0x1046/0x23b0 [ 245.604476] ? __might_sleep+0x93/0xb0 [ 245.604482] __alloc_pages_nodemask+0x60d/0x770 [ 245.604487] ? __alloc_pages_slowpath+0x2650/0x2650 [ 245.604494] ? wait_for_completion+0x440/0x440 [ 245.604499] ? __list_del_entry_valid+0xb6/0xf3 [ 245.604508] alloc_pages_current+0xd6/0x1b0 [ 245.604518] ion_page_pool_alloc+0x102/0x180 [ 245.604524] ion_system_heap_allocate+0x14e/0x930 [ 245.604532] ? ion_system_heap_free+0x270/0x270 [ 245.604543] ion_alloc+0x216/0x770 [ 245.604552] ? ion_dma_buf_release+0x40/0x40 [ 245.604561] ? kasan_check_write+0x14/0x20 [ 245.604568] ion_ioctl+0xe2/0x1b6 [ 245.604572] ? ion_alloc.cold.15+0x32/0x32 [ 245.604584] do_vfs_ioctl+0x180/0xfb0 [ 245.604591] ? __fget+0x1ad/0x2f0 [ 245.604597] ? ioctl_preallocate+0x1a0/0x1a0 [ 245.604605] ? __fget+0x1ca/0x2f0 [ 245.604617] ? security_file_ioctl+0x6a/0xa0 [ 245.604622] ? SyS_clock_settime+0x1a0/0x1a0 [ 245.604625] ? security_file_ioctl+0x6a/0xa0 [ 245.604630] SyS_ioctl+0x74/0x80 [ 245.604636] ? do_vfs_ioctl+0xfb0/0xfb0 [ 245.604642] do_syscall_64+0x1c7/0x5b0 [ 245.604647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.604657] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.604662] RIP: 0033:0x45af49 [ 245.604664] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.604670] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 245.604673] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 245.604676] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 245.604678] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 245.604682] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 245.605462] warn_alloc_show_mem: 2 callbacks suppressed [ 245.605464] Mem-Info: [ 245.635245] active_anon:5344 inactive_anon:196 isolated_anon:0 [ 245.635245] active_file:299 inactive_file:1045 isolated_file:0 [ 245.635245] unevictable:0 dirty:25 writeback:0 unstable:0 [ 245.635245] slab_reclaimable:13988 slab_unreclaimable:97245 [ 245.635245] mapped:937 shmem:250 pagetables:417 bounce:0 [ 245.635245] free:39807 free_pcp:423 free_cma:0 [ 245.641291] Node 0 [ 245.645647] Node 0 active_anon:21132kB inactive_anon:772kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 245.648464] DMA: [ 245.655571] Node 1 active_anon:244kB inactive_anon:12kB active_file:1188kB inactive_file:4668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3940kB dirty:100kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 245.656954] 1*4kB [ 245.660564] Node 0 DMA free:10468kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 245.660577] lowmem_reserve[]: [ 245.664524] (U) [ 245.668239] 0 2570 2570 2570 2570 [ 245.668251] Node 0 DMA32 free:28248kB min:36384kB low:45480kB high:54576kB active_anon:21132kB inactive_anon:772kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6848kB pagetables:1544kB bounce:0kB free_pcp:1272kB local_pcp:704kB free_cma:0kB [ 245.668262] lowmem_reserve[]: 0 0 0 0 [ 245.672515] 14*8kB [ 245.678640] 0 [ 245.680633] (U) [ 245.688367] 35*16kB (UE) 24*32kB [ 245.695740] Node 0 [ 245.698229] (U) [ 245.705352] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 245.706272] 5*64kB [ 245.709623] lowmem_reserve[]: [ 245.719630] (UE) [ 245.721531] 0 [ 245.727723] 2*128kB [ 245.735070] 0 [ 245.746979] (UE) [ 245.749636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.770411] 1*256kB [ 245.773856] 0 [ 245.779493] (E) [ 245.782145] 0 [ 245.792345] 2*512kB [ 245.800977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.809457] (UE) [ 245.814100] 0 [ 245.818459] 1*1024kB [ 245.825399] (E) [ 245.833085] Node 1 [ 245.839221] 3*2048kB [ 245.867844] Normal free:115996kB min:53504kB low:66880kB high:80256kB active_anon:244kB inactive_anon:12kB active_file:1788kB inactive_file:7368kB unevictable:0kB writepending:148kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:256kB pagetables:124kB bounce:0kB free_pcp:352kB local_pcp:212kB free_cma:0kB [ 245.879012] (UME) [ 245.885911] lowmem_reserve[]: [ 245.898286] 0*4096kB [ 245.906058] 0 [ 245.913026] = 10468kB [ 245.916746] 0 [ 245.923754] Node 0 [ 245.930688] 0 [ 245.933100] DMA32: [ 245.966661] 0 [ 245.970346] 76*4kB [ 245.978345] 0 [ 245.980486] (ME) [ 245.989874] 190*8kB [ 245.991378] Node 0 [ 246.001304] (UME) [ 246.007330] DMA: [ 246.009556] 54*16kB [ 246.013717] 1*4kB [ 246.030769] (UMEH) [ 246.036240] (U) [ 246.036442] 330*32kB [ 246.041548] 14*8kB (U) 35*16kB (UE) 24*32kB (U) 5*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10468kB [ 246.041596] Node 0 DMA32: [ 246.047705] (UMEH) [ 246.053744] 76*4kB [ 246.060436] 157*64kB [ 246.064885] (ME) [ 246.070357] (UME) [ 246.077186] 190*8kB [ 246.083091] 30*128kB [ 246.086999] (UME) [ 246.108044] (UME) [ 246.114706] 54*16kB [ 246.121579] 7*256kB [ 246.123246] (UMEH) [ 246.137220] (UME) [ 246.143311] 330*32kB [ 246.150720] 1*512kB [ 246.157230] (UMEH) [ 246.203743] (E) [ 246.211713] 157*64kB [ 246.248743] 0*1024kB [ 246.287276] (UME) [ 246.308058] 0*2048kB [ 246.337311] 30*128kB [ 246.346084] syz-executor.3: [ 246.385869] (UME) [ 246.387411] 0*4096kB [ 246.389506] 7*256kB [ 246.415278] = 29440kB [ 246.435921] (UME) [ 246.437550] page allocation failure: order:4 [ 246.440195] 1*512kB [ 246.441194] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 246.444319] (E) [ 246.447596] (null) [ 246.474201] 0*1024kB [ 246.496129] Node 0 [ 246.548296] 0*2048kB [ 246.558001] syz-executor.3 cpuset= [ 246.602133] 0*4096kB [ 246.604199] Normal: [ 246.609134] = 29440kB [ 246.611768] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 246.611793] Node 1 Normal: 53*4kB (ME) [ 246.615602] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 246.622720] Node 0 Normal: [ 246.631145] (null), order=0, oom_score_adj=0 [ 246.631155] rsyslogd cpuset=/ mems_allowed=0-1 [ 246.631179] CPU: 1 PID: 6994 Comm: rsyslogd Not tainted 4.14.172-syzkaller #0 [ 246.631182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.631185] Call Trace: [ 246.631198] dump_stack+0xf7/0x13b [ 246.631210] dump_header+0x160/0x63f [ 246.631218] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 246.631227] ? ___ratelimit+0x243/0x519 [ 246.631235] ? do_raw_spin_unlock+0x16a/0x250 [ 246.631242] oom_kill_process.cold.24+0xb/0xa1a [ 246.631247] ? out_of_memory+0x7f9/0x1030 [ 246.631254] ? lock_downgrade+0x7f0/0x7f0 [ 246.631264] out_of_memory+0x2b0/0x1030 [ 246.639612] 0*4kB [ 246.640715] ? oom_killer_disable+0x1a0/0x1a0 [ 246.640726] ? __alloc_pages_slowpath+0xb69/0x2650 [ 246.640733] __alloc_pages_slowpath+0x1ef3/0x2650 [ 246.640747] ? warn_alloc+0x100/0x100 [ 246.643842] 0*8kB [ 246.644868] ? get_page_from_freelist+0x1046/0x23b0 [ 246.651665] 0*16kB [ 246.651991] ? __might_sleep+0x93/0xb0 [ 246.659323] 0*32kB [ 246.660270] __alloc_pages_nodemask+0x60d/0x770 [ 246.660307] ? __alloc_pages_slowpath+0x2650/0x2650 [ 246.660331] ? lock_downgrade+0x7f0/0x7f0 [ 246.660362] alloc_pages_current+0xd6/0x1b0 [ 246.663463] 0*64kB [ 246.672305] __page_cache_alloc+0x1da/0x330 [ 246.672314] filemap_fault+0xbc8/0x1ae0 [ 246.672326] ? __lock_page_or_retry+0x820/0x820 [ 246.672337] ? lock_acquire+0x173/0x400 [ 246.672345] ? ext4_filemap_fault+0x75/0xb0 [ 246.672356] ext4_filemap_fault+0x7d/0xb0 [ 246.672361] __do_fault+0xf3/0x340 [ 246.672369] __handle_mm_fault+0x21eb/0x3870 [ 246.676392] 0*128kB [ 246.685865] ? copy_page_range+0x1d10/0x1d10 [ 246.685873] ? find_held_lock+0x36/0x1d0 [ 246.685888] handle_mm_fault+0x234/0x6e0 [ 246.685893] ? find_vma+0x1a/0x150 [ 246.685900] __do_page_fault+0x44d/0xb00 [ 246.685905] ? SyS_read+0x1c5/0x250 [ 246.685914] ? firmware_map_remove+0x177/0x177 [ 246.688863] 0*256kB [ 246.693311] ? vmalloc_fault+0xc90/0xc90 [ 246.693320] ? retint_user+0x18/0x18 [ 246.693325] ? page_fault+0x2f/0x50 [ 246.693331] do_page_fault+0x64/0x3fb [ 246.693335] ? page_fault+0x2f/0x50 [ 246.693340] page_fault+0x45/0x50 [ 246.693347] RIP: 0033:0x7f79054cddb4 [ 246.697940] 0*512kB [ 246.705171] RSP: 002b:00007f7903e9ce40 EFLAGS: 00010203 [ 246.705177] RAX: 000000000000005f RBX: 00000000020db650 RCX: 00007f79068fd1fd [ 246.705179] RDX: 000000000000005f RSI: 00007f79056d15a0 RDI: 0000000000000000 [ 246.705182] RBP: 0000000000000000 R08: 00000000020c6260 R09: 0000000000000000 [ 246.705184] R10: 342e36343220205b R11: 0000000000000000 R12: 000000000065e420 [ 246.705187] R13: 00007f7903e9d9c0 R14: 00007f7906f42040 R15: 0000000000000003 [ 246.705985] 24*8kB [ 246.722970] 0*1024kB [ 246.727821] syz3 [ 246.730775] 0*2048kB [ 246.734265] (ME) [ 246.738686] 0*4096kB = 0kB [ 246.738693] Node 1 Normal: 2*4kB (ME) 21*8kB (UME) 25*16kB (ME) 11*32kB (ME) 17*64kB (ME) [ 246.747006] mems_allowed=0-1 [ 246.747688] 16*128kB [ 246.751961] CPU: 1 PID: 7812 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 246.755996] (ME) [ 246.757996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.762516] 12*256kB [ 246.767390] Call Trace: [ 246.772249] (UME) [ 246.776001] dump_stack+0xf7/0x13b [ 246.778136] 9*512kB [ 246.783144] warn_alloc.cold.110+0xa2/0x1be [ 246.783149] ? zone_watermark_ok_safe+0x260/0x260 [ 246.783163] ? __alloc_pages_direct_compact+0xc2/0x330 [ 246.783170] __alloc_pages_slowpath+0x2052/0x2650 [ 246.785389] (UME) [ 246.789350] ? trace_hardirqs_off+0x10/0x10 [ 246.791631] Mem-Info: [ 246.796246] ? warn_alloc+0x100/0x100 [ 246.801410] 3*1024kB [ 246.805503] ? get_page_from_freelist+0x1046/0x23b0 [ 246.809809] (ME) [ 246.812038] ? __might_sleep+0x93/0xb0 [ 246.812045] __alloc_pages_nodemask+0x60d/0x770 [ 246.812052] ? trace_hardirqs_off+0x10/0x10 [ 246.812059] ? __alloc_pages_slowpath+0x2650/0x2650 [ 246.812071] ? wait_for_completion+0x440/0x440 [ 246.816399] active_anon:5357 inactive_anon:196 isolated_anon:0 [ 246.816399] active_file:22 inactive_file:40 isolated_file:0 [ 246.816399] unevictable:0 dirty:23 writeback:0 unstable:0 [ 246.816399] slab_reclaimable:14042 slab_unreclaimable:97386 [ 246.816399] mapped:19 shmem:250 pagetables:412 bounce:0 [ 246.816399] free:23677 free_pcp:89 free_cma:0 [ 246.820349] alloc_pages_current+0xd6/0x1b0 [ 246.820361] ion_page_pool_alloc+0x102/0x180 [ 246.820367] ion_system_heap_allocate+0x14e/0x930 [ 246.820375] ? ion_system_heap_free+0x270/0x270 [ 246.825034] Node 0 active_anon:21104kB inactive_anon:764kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 246.829108] ion_alloc+0x216/0x770 [ 246.833452] 19*2048kB [ 246.837548] ? ion_dma_buf_release+0x40/0x40 [ 246.841103] Node 1 active_anon:324kB inactive_anon:20kB active_file:76kB inactive_file:152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:92kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 246.845459] ? kasan_check_write+0x14/0x20 [ 246.847772] Node 0 [ 246.852164] ion_ioctl+0xe2/0x1b6 [ 246.852170] ? ion_alloc.cold.15+0x32/0x32 [ 246.852182] do_vfs_ioctl+0x180/0xfb0 [ 246.852189] ? __fget+0x1ad/0x2f0 [ 246.852195] ? ioctl_preallocate+0x1a0/0x1a0 [ 246.856303] (UE) [ 246.860338] ? __fget+0x1ca/0x2f0 [ 246.860350] ? security_file_ioctl+0x6a/0xa0 [ 246.860356] ? SyS_clock_settime+0x1a0/0x1a0 [ 246.860361] ? security_file_ioctl+0x6a/0xa0 [ 246.863889] 0*4096kB [ 246.867939] SyS_ioctl+0x74/0x80 [ 246.871588] DMA free:10468kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.876111] ? do_vfs_ioctl+0xfb0/0xfb0 [ 246.878408] lowmem_reserve[]: [ 246.882456] do_syscall_64+0x1c7/0x5b0 [ 246.882462] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.882473] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 246.882479] RIP: 0033:0x45af49 [ 246.882481] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.882489] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 246.886202] = 53728kB [ 246.889805] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 246.889808] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 246.896933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.900518] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 246.900528] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 246.916894] 11*16kB [ 246.926000] 0 [ 246.943578] (ME) [ 246.980345] 2570 [ 246.991479] 5*32kB [ 247.000660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 247.003343] (ME) [ 247.013009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.031893] 15*64kB [ 247.053451] 2570 [ 247.203714] (UME) [ 247.268923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 247.423136] 273 total pagecache pages [ 247.427013] 0 pages in swap cache [ 247.430520] Swap cache stats: add 0, delete 0, find 0/0 [ 247.436320] Free swap = 0kB [ 247.439350] Total swap = 0kB [ 247.470131] 2570 2570 [ 247.472682] Node 0 DMA32 free:30972kB min:36384kB low:45480kB high:54576kB active_anon:21104kB inactive_anon:764kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6848kB pagetables:1508kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 247.526937] 1965979 pages RAM [ 247.556719] 0 pages HighMem/MovableOnly [ 247.569972] 335868 pages reserved [ 247.580941] Mem-Info: [ 247.583405] active_anon:5344 inactive_anon:196 isolated_anon:0 [ 247.583405] active_file:7 inactive_file:16 isolated_file:0 [ 247.583405] unevictable:0 dirty:0 writeback:0 unstable:0 [ 247.583405] slab_reclaimable:14058 slab_unreclaimable:97329 [ 247.583405] mapped:3 shmem:250 pagetables:407 bounce:0 [ 247.583405] free:23726 free_pcp:73 free_cma:0 [ 247.587900] 0 pages cma reserved [ 247.683784] lowmem_reserve[]: 0 0 0 0 0 [ 247.686644] 18*128kB [ 247.687838] Node 0 [ 247.687840] (ME) 11*256kB (ME) 7*512kB (ME) 4*1024kB (UME) 19*2048kB (UE) 0*4096kB = 53412kB [ 247.710555] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.754906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.791706] Node 0 active_anon:21104kB inactive_anon:764kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 247.860123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 247.868798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.890264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 247.898885] 273 total pagecache pages [ 247.900100] lowmem_reserve[]: 0 0 0 0 0 [ 247.902762] Node 1 active_anon:272kB inactive_anon:20kB active_file:20kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 247.906700] Node 1 [ 247.933452] 0 pages in swap cache [ 247.933457] Swap cache stats: add 0, delete 0, find 0/0 [ 247.933459] Free swap = 0kB [ 247.933462] Total swap = 0kB [ 247.933469] 1965979 pages RAM [ 247.933495] 0 pages HighMem/MovableOnly [ 247.982531] 335868 pages reserved [ 247.990116] Normal free:591540kB min:53504kB low:66880kB high:80256kB active_anon:272kB inactive_anon:20kB active_file:20kB inactive_file:52kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:256kB pagetables:120kB bounce:0kB free_pcp:184kB local_pcp:680kB free_cma:0kB [ 248.020089] 0 pages cma reserved [ 248.050109] Node 0 DMA free:10468kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 248.181000] lowmem_reserve[]: 0 0 0 0 0 [ 248.185157] Node 0 DMA: 1*4kB (U) 14*8kB (U) 35*16kB (UE) 24*32kB (U) 6*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10532kB [ 248.230114] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 248.235226] Node 0 DMA32 free:55052kB min:36384kB low:45480kB high:54576kB active_anon:21104kB inactive_anon:764kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6848kB pagetables:1508kB bounce:0kB free_pcp:304kB local_pcp:120kB free_cma:0kB [ 248.290242] lowmem_reserve[]: 0 0 0 0 0 [ 248.293837] Node 0 DMA32: [ 248.294282] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 248.297124] 7606*4kB [ 248.322486] lowmem_reserve[]: 0 0 0 0 0 [ 248.322506] Node 1 [ 248.340480] device bridge_slave_1 left promiscuous mode [ 248.343805] (UMH) 796*8kB (UMEH) 134*16kB (UME) 412*32kB (UME) 333*64kB (UME) 133*128kB (UMEH) 9*256kB (UME) 1*512kB (E) 7*1024kB (U) 0*2048kB 0*4096kB = 100440kB [ 248.370281] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.374073] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 248.376807] Normal free:1398848kB min:53504kB low:66880kB high:80256kB active_anon:272kB inactive_anon:20kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:120kB bounce:0kB free_pcp:1396kB local_pcp:688kB free_cma:0kB [ 248.388667] Node 1 [ 248.416910] lowmem_reserve[]: 0 0 0 0 0 [ 248.423218] Node 0 DMA: 1*4kB (U) 19*8kB (U) 35*16kB (UE) 24*32kB (U) 6*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10572kB [ 248.438724] Node 0 DMA32: 11215*4kB (UMH) 1202*8kB (UMEH) 184*16kB (UME) 523*32kB (UMEH) 374*64kB (UME) 137*128kB (UMEH) 9*256kB (UME) 1*512kB (E) 7*1024kB (U) 0*2048kB 0*4096kB = 125612kB [ 248.456628] device bridge_slave_0 left promiscuous mode [ 248.462241] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.463565] Normal: 5789*4kB (UME) 1522*8kB (UME) 796*16kB (UME) 1054*32kB (UME) 3419*64kB (UME) 738*128kB (UME) 927*256kB (UME) 503*512kB (UME) 406*1024kB (UME) 53*2048kB (UE) 1*4096kB (U) = 1418308kB [ 248.468725] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 248.497629] Node 1 Normal: 5792*4kB (UME) 1529*8kB (UME) 809*16kB (UME) 1086*32kB (UME) 3420*64kB (UME) 738*128kB (UME) 927*256kB (UME) 503*512kB (UME) 406*1024kB (UME) 53*2048kB (UE) 1*4096kB (U) = 1419672kB [ 248.516576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.530128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 248.534101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.555898] team0 (unregistering): Port device team_slave_1 removed [ 248.562483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.650108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 248.650772] team0 (unregistering): Port device team_slave_0 removed [ 248.658726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.665276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 248.665282] 272 total pagecache pages [ 248.703838] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 248.753861] 0 pages in swap cache [ 248.757361] Swap cache stats: add 0, delete 0, find 0/0 [ 248.800806] Free swap = 0kB [ 248.803895] Total swap = 0kB [ 248.806908] 1965979 pages RAM [ 248.809997] 0 pages HighMem/MovableOnly [ 248.810098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 248.814107] 335868 pages reserved [ 248.826177] 0 pages cma reserved [ 248.840503] 272 total pagecache pages [ 248.844346] 0 pages in swap cache [ 248.847789] Swap cache stats: add 0, delete 0, find 0/0 [ 248.870103] Free swap = 0kB [ 248.873157] Total swap = 0kB [ 248.876166] 1965979 pages RAM [ 248.879261] 0 pages HighMem/MovableOnly [ 248.890436] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 248.950091] 335868 pages reserved [ 248.953638] 0 pages cma reserved [ 248.957000] Out of memory: Kill process 7811 (syz-executor.3) score 999 or sacrifice child [ 249.013933] Killed process 7811 (syz-executor.3) total-vm:37772kB, anon-rss:108kB, file-rss:0kB, shmem-rss:0kB [ 249.074356] oom_reaper: reaped process 7811 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 249.078763] bond0 (unregistering): Released all slaves 2020/03/09 03:19:19 result: hanged=false err=executor 5: EOF [ 250.109387] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 250.122985] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 250.126089] syz-executor.1: [ 250.136630] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 250.148560] page allocation failure: order:4 [ 250.161880] syz-executor.0 cpuset= [ 250.167572] syz-executor.4 cpuset= [ 250.172072] syz0 [ 250.175615] syz4 [ 250.177888] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 250.182131] mems_allowed=0-1 [ 250.184155] mems_allowed=0-1 [ 250.189321] (null) [ 250.192475] syz-executor.2 cpuset= [ 250.200147] syz-executor.1 cpuset= [ 250.204318] syz2 [ 250.207064] CPU: 0 PID: 7765 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 250.211314] mems_allowed=0-1 [ 250.217881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.217886] Call Trace: [ 250.217906] dump_stack+0xf7/0x13b [ 250.217916] warn_alloc.cold.110+0xa2/0x1be [ 250.217923] ? zone_watermark_ok_safe+0x260/0x260 [ 250.217938] ? __alloc_pages_direct_compact+0xc2/0x330 [ 250.252574] __alloc_pages_slowpath+0x2052/0x2650 [ 250.257425] ? trace_hardirqs_off+0x10/0x10 [ 250.261753] ? warn_alloc+0x100/0x100 [ 250.265547] ? get_page_from_freelist+0x1046/0x23b0 [ 250.270565] ? __might_sleep+0x93/0xb0 [ 250.274554] __alloc_pages_nodemask+0x60d/0x770 [ 250.279243] ? __alloc_pages_slowpath+0x2650/0x2650 [ 250.284269] ? wait_for_completion+0x440/0x440 [ 250.288851] alloc_pages_current+0xd6/0x1b0 [ 250.293165] ion_page_pool_alloc+0x102/0x180 [ 250.297566] ion_system_heap_allocate+0x14e/0x930 [ 250.302412] ? do_raw_spin_unlock+0x16a/0x250 [ 250.306908] ? ion_system_heap_free+0x270/0x270 [ 250.311584] ion_alloc+0x27f/0x770 [ 250.315111] ? ion_dma_buf_release+0x40/0x40 [ 250.321543] ? kasan_check_write+0x14/0x20 [ 250.327192] ion_ioctl+0xe2/0x1b6 [ 250.330649] ? ion_alloc.cold.15+0x32/0x32 [ 250.334896] do_vfs_ioctl+0x180/0xfb0 [ 250.339220] ? __fget+0x1ad/0x2f0 [ 250.342669] ? ioctl_preallocate+0x1a0/0x1a0 [ 250.347087] ? __fget+0x1ca/0x2f0 [ 250.350533] ? security_file_ioctl+0x6a/0xa0 [ 250.354949] ? SyS_clock_settime+0x1a0/0x1a0 [ 250.359348] ? security_file_ioctl+0x6a/0xa0 [ 250.363750] SyS_ioctl+0x74/0x80 [ 250.367101] ? do_vfs_ioctl+0xfb0/0xfb0 [ 250.371065] do_syscall_64+0x1c7/0x5b0 [ 250.374958] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.379800] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.384978] RIP: 0033:0x45af49 [ 250.388152] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.395935] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 250.403277] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 250.410549] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.417838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 250.425205] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 250.432502] CPU: 1 PID: 7819 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 250.434739] syz1 [ 250.440319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.445896] mems_allowed=0-1 [ 250.451631] Call Trace: [ 250.451650] dump_stack+0xf7/0x13b [ 250.451661] warn_alloc.cold.110+0xa2/0x1be [ 250.451666] ? zone_watermark_ok_safe+0x260/0x260 [ 250.451676] ? __lock_is_held+0xb5/0x140 [ 250.451688] ? __alloc_pages_direct_compact+0x28d/0x330 [ 250.479561] __alloc_pages_slowpath+0x2052/0x2650 [ 250.484412] ? trace_hardirqs_off+0x10/0x10 [ 250.488727] ? warn_alloc+0x100/0x100 [ 250.492518] ? get_page_from_freelist+0x1046/0x23b0 [ 250.497536] ? __might_sleep+0x93/0xb0 [ 250.501430] __alloc_pages_nodemask+0x60d/0x770 [ 250.506096] ? trace_hardirqs_off+0x10/0x10 [ 250.510417] ? __alloc_pages_slowpath+0x2650/0x2650 [ 250.515437] ? wait_for_completion+0x440/0x440 [ 250.520026] alloc_pages_current+0xd6/0x1b0 [ 250.524499] ion_page_pool_alloc+0x102/0x180 [ 250.528922] ion_system_heap_allocate+0x14e/0x930 [ 250.534740] ? ion_system_heap_free+0x270/0x270 [ 250.539425] ion_alloc+0x216/0x770 [ 250.542989] ? ion_dma_buf_release+0x40/0x40 [ 250.547413] ? kasan_check_write+0x14/0x20 [ 250.551643] ion_ioctl+0xe2/0x1b6 [ 250.555092] ? ion_alloc.cold.15+0x32/0x32 [ 250.559363] do_vfs_ioctl+0x180/0xfb0 [ 250.563367] ? __fget+0x1ad/0x2f0 [ 250.566838] ? ioctl_preallocate+0x1a0/0x1a0 [ 250.571279] ? __fget+0x1ca/0x2f0 [ 250.574733] ? security_file_ioctl+0x6a/0xa0 [ 250.579152] ? SyS_clock_settime+0x1a0/0x1a0 [ 250.583585] ? security_file_ioctl+0x6a/0xa0 [ 250.589579] SyS_ioctl+0x74/0x80 [ 250.592945] ? do_vfs_ioctl+0xfb0/0xfb0 [ 250.597044] do_syscall_64+0x1c7/0x5b0 [ 250.600955] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.605837] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.611041] RIP: 0033:0x45af49 [ 250.614224] RSP: 002b:00007f4373931c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.621959] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 250.630538] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 250.637820] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.645083] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43739326d4 [ 250.652390] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 250.659670] CPU: 0 PID: 7822 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 250.667477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.676156] syz-executor.2 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask= [ 250.676843] Call Trace: [ 250.676859] dump_stack+0xf7/0x13b [ 250.676870] warn_alloc.cold.110+0xa2/0x1be [ 250.676876] ? zone_watermark_ok_safe+0x260/0x260 [ 250.676887] ? __lock_is_held+0xb5/0x140 [ 250.706709] ? __alloc_pages_direct_compact+0x28d/0x330 [ 250.713133] __alloc_pages_slowpath+0x2052/0x2650 [ 250.717980] ? trace_hardirqs_off+0x10/0x10 [ 250.719142] (null) [ 250.722317] ? warn_alloc+0x100/0x100 [ 250.722325] ? get_page_from_freelist+0x1046/0x23b0 [ 250.722338] ? __might_sleep+0x93/0xb0 [ 250.722344] __alloc_pages_nodemask+0x60d/0x770 [ 250.722352] ? __alloc_pages_slowpath+0x2650/0x2650 [ 250.722363] ? wait_for_completion+0x440/0x440 [ 250.722373] alloc_pages_current+0xd6/0x1b0 [ 250.722383] ion_page_pool_alloc+0x102/0x180 [ 250.722389] ion_system_heap_allocate+0x14e/0x930 [ 250.722396] ? ion_system_heap_free+0x270/0x270 [ 250.722404] ion_alloc+0x216/0x770 [ 250.722412] ? ion_dma_buf_release+0x40/0x40 [ 250.722422] ? kasan_check_write+0x14/0x20 [ 250.722429] ion_ioctl+0xe2/0x1b6 [ 250.722434] ? ion_alloc.cold.15+0x32/0x32 [ 250.722447] do_vfs_ioctl+0x180/0xfb0 [ 250.722453] ? __fget+0x1ad/0x2f0 [ 250.722460] ? ioctl_preallocate+0x1a0/0x1a0 [ 250.722467] ? __fget+0x1ca/0x2f0 [ 250.722479] ? security_file_ioctl+0x6a/0xa0 [ 250.722484] ? SyS_clock_settime+0x1a0/0x1a0 [ 250.722487] ? security_file_ioctl+0x6a/0xa0 [ 250.722493] SyS_ioctl+0x74/0x80 [ 250.722498] ? do_vfs_ioctl+0xfb0/0xfb0 [ 250.722505] do_syscall_64+0x1c7/0x5b0 [ 250.722509] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.722519] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.722524] RIP: 0033:0x45af49 [ 250.722526] RSP: 002b:00007f31808ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.722532] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 250.722535] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 250.722537] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.722540] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31808cd6d4 [ 250.722543] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 250.793969] Mem-Info: [ 250.807905] CPU: 1 PID: 7762 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 250.831287] active_anon:5392 inactive_anon:196 isolated_anon:0 [ 250.831287] active_file:666 inactive_file:647 isolated_file:32 [ 250.831287] unevictable:0 dirty:23 writeback:0 unstable:0 [ 250.831287] slab_reclaimable:14123 slab_unreclaimable:96996 [ 250.831287] mapped:1236 shmem:250 pagetables:437 bounce:0 [ 250.831287] free:13773 free_pcp:256 free_cma:0 [ 250.831848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.842412] Node 0 active_anon:21420kB inactive_anon:772kB active_file:2312kB inactive_file:2436kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:4744kB dirty:56kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 250.845306] Call Trace: [ 250.845364] dump_stack+0xf7/0x13b [ 250.864076] Node 1 active_anon:148kB inactive_anon:12kB active_file:56kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:36kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 250.867613] warn_alloc.cold.110+0xa2/0x1be [ 250.867621] ? zone_watermark_ok_safe+0x260/0x260 [ 250.887089] Node 0 [ 250.889528] ? __alloc_pages_direct_compact+0xc2/0x330 [ 250.889536] __alloc_pages_slowpath+0x2052/0x2650 [ 250.897440] DMA free:10388kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.899819] ? find_held_lock+0x36/0x1d0 [ 250.899833] ? mark_held_locks+0xc7/0x130 [ 250.940572] lowmem_reserve[]: [ 250.942987] ? warn_alloc+0x100/0x100 [ 250.942996] ? get_page_from_freelist+0x1046/0x23b0 [ 250.971698] 0 [ 250.974167] __alloc_pages_nodemask+0x60d/0x770 [ 250.974177] ? __alloc_pages_slowpath+0x2650/0x2650 [ 250.977738] 2570 [ 251.004002] ? wait_for_completion+0x440/0x440 [ 251.004015] alloc_pages_current+0xd6/0x1b0 [ 251.004026] ion_page_pool_alloc+0x102/0x180 [ 251.004031] ion_system_heap_allocate+0x14e/0x930 [ 251.004038] ? do_raw_spin_unlock+0x16a/0x250 [ 251.004046] ? ion_system_heap_free+0x270/0x270 [ 251.004055] ion_alloc+0x27f/0x770 [ 251.004064] ? ion_dma_buf_release+0x40/0x40 [ 251.004079] ? kasan_check_write+0x14/0x20 [ 251.008618] 2570 [ 251.013214] ion_ioctl+0xe2/0x1b6 [ 251.013220] ? ion_alloc.cold.15+0x32/0x32 [ 251.013233] do_vfs_ioctl+0x180/0xfb0 [ 251.013240] ? __fget+0x1ad/0x2f0 [ 251.013246] ? ioctl_preallocate+0x1a0/0x1a0 [ 251.013255] ? __fget+0x1ca/0x2f0 [ 251.015513] 2570 [ 251.020744] ? security_file_ioctl+0x6a/0xa0 [ 251.020751] ? SyS_clock_settime+0x1a0/0x1a0 [ 251.020754] ? security_file_ioctl+0x6a/0xa0 [ 251.020761] SyS_ioctl+0x74/0x80 [ 251.020768] ? do_vfs_ioctl+0xfb0/0xfb0 [ 251.020775] do_syscall_64+0x1c7/0x5b0 [ 251.020781] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.020794] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 251.025801] 2570 [ 251.051212] RIP: 0033:0x45af49 [ 251.051216] RSP: 002b:00007fb6b5215c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.051222] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 251.051225] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 251.051227] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 251.051229] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b52166d4 [ 251.051231] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 251.240196] , order=0, oom_score_adj=1000 [ 251.244614] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 251.250694] CPU: 0 PID: 7817 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 251.258502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.267953] Call Trace: [ 251.270539] dump_stack+0xf7/0x13b [ 251.274069] dump_header+0x160/0x63f [ 251.277768] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 251.282944] ? ___ratelimit+0x243/0x519 [ 251.286910] oom_kill_process.cold.24+0xb/0xa1a [ 251.291572] ? out_of_memory+0x7f9/0x1030 [ 251.295848] ? lock_downgrade+0x7f0/0x7f0 [ 251.300057] out_of_memory+0x2b0/0x1030 [ 251.304036] ? oom_killer_disable+0x1a0/0x1a0 [ 251.308545] ? __alloc_pages_slowpath+0xb69/0x2650 [ 251.313551] __alloc_pages_slowpath+0x1ef3/0x2650 [ 251.318386] ? warn_alloc+0x100/0x100 [ 251.322178] ? get_page_from_freelist+0x1046/0x23b0 [ 251.327386] ? __might_sleep+0x93/0xb0 [ 251.331271] __alloc_pages_nodemask+0x60d/0x770 [ 251.335931] ? __alloc_pages_slowpath+0x2650/0x2650 [ 251.340940] alloc_pages_vma+0xad/0x420 [ 251.344927] __handle_mm_fault+0x1780/0x3870 [ 251.349462] ? copy_page_range+0x1d10/0x1d10 [ 251.353874] ? find_held_lock+0x36/0x1d0 [ 251.357987] handle_mm_fault+0x234/0x6e0 [ 251.362059] ? find_vma+0xe2/0x150 [ 251.365600] __do_page_fault+0x44d/0xb00 [ 251.370553] ? vmalloc_fault+0xc90/0xc90 [ 251.374603] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 251.379952] ? page_fault+0x2f/0x50 [ 251.383668] do_page_fault+0x64/0x3fb [ 251.387511] ? page_fault+0x2f/0x50 [ 251.391123] page_fault+0x45/0x50 [ 251.394566] RIP: 0033:0x41273f [ 251.397904] RSP: 002b:00007ffcba649320 EFLAGS: 00010206 [ 251.403378] RAX: 00007f43738f1000 RBX: 0000000000020000 RCX: 000000000045af9a [ 251.410668] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 251.417928] RBP: 00007ffcba649400 R08: ffffffffffffffff R09: 0000000000000000 [ 251.425288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcba6494f0 [ 251.432553] R13: 00007f4373911700 R14: 0000000000000001 R15: 000000000075bfd4 [ 251.449226] Node 0 DMA32 free:18000kB min:36384kB low:45480kB high:54576kB active_anon:21420kB inactive_anon:772kB active_file:240kB inactive_file:384kB unevictable:0kB writepending:28kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7008kB pagetables:1628kB bounce:0kB free_pcp:520kB local_pcp:308kB free_cma:0kB [ 251.486038] lowmem_reserve[]: 0 0 0 0 0 [ 251.491076] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 251.522368] lowmem_reserve[]: 0 0 0 0 0 [ 251.526451] Node 1 Normal free:25936kB min:53504kB low:66880kB high:80256kB active_anon:148kB inactive_anon:12kB active_file:12kB inactive_file:24kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 251.550138] Mem-Info: [ 251.556715] lowmem_reserve[]: 0 0 0 0 0 [ 251.562849] Node 0 DMA: 21*4kB (U) 22*8kB (U) 33*16kB (UE) 22*32kB (U) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10388kB [ 251.579333] active_anon:5392 inactive_anon:196 isolated_anon:0 [ 251.579333] active_file:0 inactive_file:14 isolated_file:0 [ 251.579333] unevictable:0 dirty:9 writeback:0 unstable:0 [ 251.579333] slab_reclaimable:14123 slab_unreclaimable:97017 [ 251.579333] mapped:24 shmem:250 pagetables:437 bounce:0 [ 251.579333] free:13581 free_pcp:1 free_cma:0 [ 251.595064] Node 0 DMA32: 153*4kB (UM) 113*8kB (UM) 81*16kB (UM) 358*32kB (UM) 22*64kB (UM) 8*128kB (UM) 2*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18236kB [ 251.645309] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 251.657574] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 251.657718] Node 0 active_anon:21420kB inactive_anon:772kB active_file:64kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:28kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 251.677178] syz-executor.0 cpuset= [ 251.700096] syz-executor.4: [ 251.703551] Node 1 [ 251.703693] page allocation failure: order:0 [ 251.706704] Normal: [ 251.708958] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 251.729082] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 251.735190] 0*4kB 0*8kB 1*16kB (U) 810*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25936kB [ 251.749554] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 251.752176] CPU: 1 PID: 7762 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 251.763064] syz0 [ 251.769193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.769200] Call Trace: [ 251.771236] syz-executor.3 cpuset= [ 251.780543] dump_stack+0xf7/0x13b [ 251.780554] warn_alloc.cold.110+0xa2/0x1be [ 251.780560] ? zone_watermark_ok_safe+0x260/0x260 [ 251.783154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.786673] ? usleep_range+0x120/0x120 [ 251.786680] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 251.790251] mems_allowed=0-1 [ 251.794515] ? call_timer_fn+0x570/0x570 [ 251.800056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 251.808373] ? unreserve_highatomic_pageblock+0x315/0x450 [ 251.812507] syz3 [ 251.817571] __alloc_pages_slowpath+0x2052/0x2650 [ 251.840114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.840472] ? warn_alloc+0x100/0x100 [ 251.842432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 251.847282] ? get_page_from_freelist+0x1046/0x23b0 [ 251.856178] mems_allowed=0-1 [ 251.859934] ? __might_sleep+0x93/0xb0 [ 251.880515] __alloc_pages_nodemask+0x60d/0x770 [ 251.885200] ? __alloc_pages_slowpath+0x2650/0x2650 [ 251.890060] 302 total pagecache pages [ 251.890207] ? wait_for_completion+0x440/0x440 [ 251.893992] 0 pages in swap cache [ 251.898578] alloc_pages_current+0xd6/0x1b0 [ 251.906335] ion_page_pool_alloc+0x102/0x180 [ 251.910746] ion_system_heap_allocate+0x14e/0x930 [ 251.915838] ? do_raw_spin_unlock+0x16a/0x250 [ 251.920063] Swap cache stats: add 0, delete 0, find 0/0 [ 251.920357] ? ion_system_heap_free+0x270/0x270 [ 251.925719] Free swap = 0kB [ 251.925723] Total swap = 0kB [ 251.930391] ion_alloc+0x27f/0x770 [ 251.930401] ? ion_dma_buf_release+0x40/0x40 [ 251.930412] ? kasan_check_write+0x14/0x20 [ 251.930419] ion_ioctl+0xe2/0x1b6 [ 251.952095] ? ion_alloc.cold.15+0x32/0x32 [ 251.956351] do_vfs_ioctl+0x180/0xfb0 [ 251.960061] 1965979 pages RAM [ 251.960137] ? __fget+0x1ad/0x2f0 [ 251.963266] 0 pages HighMem/MovableOnly [ 251.966743] ? ioctl_preallocate+0x1a0/0x1a0 [ 251.975104] ? __fget+0x1ca/0x2f0 [ 251.978655] ? security_file_ioctl+0x6a/0xa0 [ 251.983061] ? SyS_clock_settime+0x1a0/0x1a0 [ 251.987450] ? security_file_ioctl+0x6a/0xa0 [ 251.990051] 335868 pages reserved [ 251.991846] SyS_ioctl+0x74/0x80 [ 251.995480] 0 pages cma reserved [ 251.998872] ? do_vfs_ioctl+0xfb0/0xfb0 [ 252.006201] do_syscall_64+0x1c7/0x5b0 [ 252.010078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.014931] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.020104] RIP: 0033:0x45af49 [ 252.023280] RSP: 002b:00007fb6b5215c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.031145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 252.038593] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 252.045879] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 252.053153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b52166d4 [ 252.060434] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 252.067847] CPU: 0 PID: 7812 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 252.075337] Node 1 active_anon:148kB inactive_anon:12kB active_file:12kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 252.075645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.109882] Node 0 [ 252.111198] Call Trace: [ 252.111216] dump_stack+0xf7/0x13b [ 252.111227] warn_alloc.cold.110+0xa2/0x1be [ 252.111233] ? zone_watermark_ok_safe+0x260/0x260 [ 252.111239] ? usleep_range+0x120/0x120 [ 252.111246] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 252.111253] ? call_timer_fn+0x570/0x570 [ 252.111258] ? unreserve_highatomic_pageblock+0x315/0x450 [ 252.111267] __alloc_pages_slowpath+0x2052/0x2650 [ 252.111281] ? warn_alloc+0x100/0x100 [ 252.111287] ? get_page_from_freelist+0x1046/0x23b0 [ 252.113577] DMA free:10388kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.116120] ? __might_sleep+0x93/0xb0 [ 252.119646] lowmem_reserve[]: [ 252.123971] __alloc_pages_nodemask+0x60d/0x770 [ 252.123978] ? __alloc_pages_slowpath+0x2650/0x2650 [ 252.123987] ? wait_for_completion+0x440/0x440 [ 252.123998] alloc_pages_current+0xd6/0x1b0 [ 252.124008] ion_page_pool_alloc+0x102/0x180 [ 252.124014] ion_system_heap_allocate+0x14e/0x930 [ 252.124021] ? ion_system_heap_free+0x270/0x270 [ 252.124032] ion_alloc+0x216/0x770 [ 252.124042] ? ion_dma_buf_release+0x40/0x40 [ 252.124053] ? kasan_check_write+0x14/0x20 [ 252.124060] ion_ioctl+0xe2/0x1b6 [ 252.124065] ? ion_alloc.cold.15+0x32/0x32 [ 252.124078] do_vfs_ioctl+0x180/0xfb0 [ 252.124085] ? __fget+0x1ad/0x2f0 [ 252.124097] ? ioctl_preallocate+0x1a0/0x1a0 [ 252.124105] ? __fget+0x1ca/0x2f0 [ 252.135898] 0 [ 252.138029] ? security_file_ioctl+0x6a/0xa0 [ 252.142511] 2570 [ 252.147615] ? SyS_clock_settime+0x1a0/0x1a0 [ 252.147624] ? security_file_ioctl+0x6a/0xa0 [ 252.158207] 2570 [ 252.161254] SyS_ioctl+0x74/0x80 [ 252.161262] ? do_vfs_ioctl+0xfb0/0xfb0 [ 252.161270] do_syscall_64+0x1c7/0x5b0 [ 252.161275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.161287] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.161293] RIP: 0033:0x45af49 [ 252.161296] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.161302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 252.161304] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 252.161306] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 252.161309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 252.161312] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 252.174983] CPU: 0 PID: 7765 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 252.206718] 2570 [ 252.209707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.216924] 2570 [ 252.218418] Call Trace: [ 252.227960] dump_stack+0xf7/0x13b [ 252.234469] Node 0 [ 252.235906] warn_alloc.cold.110+0xa2/0x1be [ 252.243435] DMA32 free:18336kB min:36384kB low:45480kB high:54576kB active_anon:21420kB inactive_anon:772kB active_file:36kB inactive_file:44kB unevictable:0kB writepending:16kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7008kB pagetables:1628kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 252.243642] ? zone_watermark_ok_safe+0x260/0x260 [ 252.247872] lowmem_reserve[]: [ 252.251659] ? usleep_range+0x120/0x120 [ 252.251667] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 252.251674] ? call_timer_fn+0x570/0x570 [ 252.251680] ? unreserve_highatomic_pageblock+0x315/0x450 [ 252.251689] __alloc_pages_slowpath+0x2052/0x2650 [ 252.251702] ? warn_alloc+0x100/0x100 [ 252.251707] ? get_page_from_freelist+0x1046/0x23b0 [ 252.251721] ? __might_sleep+0x93/0xb0 [ 252.251727] __alloc_pages_nodemask+0x60d/0x770 [ 252.251734] ? __alloc_pages_slowpath+0x2650/0x2650 [ 252.251742] ? wait_for_completion+0x440/0x440 [ 252.251753] alloc_pages_current+0xd6/0x1b0 [ 252.251764] ion_page_pool_alloc+0x102/0x180 [ 252.258129] 0 [ 252.259599] ion_system_heap_allocate+0x14e/0x930 [ 252.265961] 0 [ 252.269218] ? do_raw_spin_unlock+0x16a/0x250 [ 252.274124] 0 [ 252.275669] ? ion_system_heap_free+0x270/0x270 [ 252.283038] 0 [ 252.285519] ion_alloc+0x27f/0x770 [ 252.289471] 0 [ 252.293352] ? ion_dma_buf_release+0x40/0x40 [ 252.293364] ? kasan_check_write+0x14/0x20 [ 252.293370] ion_ioctl+0xe2/0x1b6 [ 252.293374] ? ion_alloc.cold.15+0x32/0x32 [ 252.293386] do_vfs_ioctl+0x180/0xfb0 [ 252.293393] ? __fget+0x1ad/0x2f0 [ 252.293398] ? ioctl_preallocate+0x1a0/0x1a0 [ 252.293406] ? __fget+0x1ca/0x2f0 [ 252.293418] ? security_file_ioctl+0x6a/0xa0 [ 252.293425] ? SyS_clock_settime+0x1a0/0x1a0 [ 252.293428] ? security_file_ioctl+0x6a/0xa0 [ 252.293434] SyS_ioctl+0x74/0x80 [ 252.293439] ? do_vfs_ioctl+0xfb0/0xfb0 [ 252.293446] do_syscall_64+0x1c7/0x5b0 [ 252.293451] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.293463] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.306663] RIP: 0033:0x45af49 [ 252.314961] Node 0 [ 252.321794] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.321801] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 252.321804] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 252.321806] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 252.321809] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 252.321811] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 252.322693] warn_alloc_show_mem: 3 callbacks suppressed [ 252.322696] Mem-Info: [ 252.341449] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.360074] active_anon:5392 inactive_anon:196 isolated_anon:0 [ 252.360074] active_file:13 inactive_file:16 isolated_file:0 [ 252.360074] unevictable:0 dirty:6 writeback:0 unstable:0 [ 252.360074] slab_reclaimable:14123 slab_unreclaimable:96993 [ 252.360074] mapped:2 shmem:250 pagetables:437 bounce:0 [ 252.360074] free:13665 free_pcp:0 free_cma:0 [ 252.377969] lowmem_reserve[]: [ 252.390060] Node 0 active_anon:21420kB inactive_anon:772kB active_file:36kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:16kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 252.426941] 0 [ 252.560107] Node 1 active_anon:148kB inactive_anon:12kB active_file:16kB inactive_file:1820kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1000kB dirty:8kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 252.809653] 0 0 0 0 [ 252.826983] Node 1 Normal free:139288kB min:53504kB low:66880kB high:80256kB active_anon:148kB inactive_anon:12kB active_file:16kB inactive_file:2420kB unevictable:0kB writepending:156kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:120kB bounce:0kB free_pcp:388kB local_pcp:308kB free_cma:0kB [ 252.937734] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.952966] lowmem_reserve[]: [ 252.991838] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 253.022511] 0 0 0 0 0 [ 253.025072] Node 0 DMA: 21*4kB (U) 22*8kB (U) 33*16kB (UE) 22*32kB (U) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10388kB [ 253.054984] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 253.064580] CPU: 1 PID: 7824 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 253.072421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.081805] Call Trace: [ 253.084404] dump_stack+0xf7/0x13b [ 253.087951] warn_alloc.cold.110+0xa2/0x1be [ 253.091856] lowmem_reserve[]: 0 [ 253.092297] ? zone_watermark_ok_safe+0x260/0x260 [ 253.092312] ? __alloc_pages_direct_compact+0xc2/0x330 [ 253.095599] 2570 [ 253.100522] __alloc_pages_slowpath+0x2052/0x2650 [ 253.100539] ? trace_hardirqs_off+0x10/0x10 [ 253.100545] ? warn_alloc+0x100/0x100 [ 253.100551] ? get_page_from_freelist+0x1046/0x23b0 [ 253.100565] ? __might_sleep+0x93/0xb0 [ 253.100571] __alloc_pages_nodemask+0x60d/0x770 [ 253.131590] 2570 2570 2570 [ 253.134402] ? __alloc_pages_slowpath+0x2650/0x2650 [ 253.137349] ? wait_for_completion+0x440/0x440 [ 253.142409] Node 0 [ 253.146948] ? __list_del_entry_valid+0xb6/0xf3 [ 253.146960] alloc_pages_current+0xd6/0x1b0 [ 253.149179] DMA32 free:36264kB min:36384kB low:45480kB high:54576kB active_anon:21420kB inactive_anon:772kB active_file:88kB inactive_file:16kB unevictable:0kB writepending:32kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1628kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 253.153848] ion_page_pool_alloc+0x102/0x180 [ 253.153854] ion_system_heap_allocate+0x14e/0x930 [ 253.153861] ? ion_system_heap_free+0x270/0x270 [ 253.153872] ion_alloc+0x216/0x770 [ 253.158185] lowmem_reserve[]: 0 [ 253.186224] ? ion_dma_buf_release+0x40/0x40 [ 253.186236] ? kasan_check_write+0x14/0x20 [ 253.186242] ion_ioctl+0xe2/0x1b6 [ 253.186247] ? ion_alloc.cold.15+0x32/0x32 [ 253.186259] do_vfs_ioctl+0x180/0xfb0 [ 253.190677] 0 [ 253.195494] ? __fget+0x1ad/0x2f0 [ 253.200186] 0 [ 253.203695] ? ioctl_preallocate+0x1a0/0x1a0 [ 253.206968] 0 0 [ 253.211373] ? __fget+0x1ca/0x2f0 [ 253.211385] ? security_file_ioctl+0x6a/0xa0 [ 253.211394] ? SyS_clock_settime+0x1a0/0x1a0 [ 253.211400] ? security_file_ioctl+0x6a/0xa0 [ 253.219068] SyS_ioctl+0x74/0x80 [ 253.223490] Node 0 [ 253.227249] ? do_vfs_ioctl+0xfb0/0xfb0 [ 253.229044] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 253.232481] do_syscall_64+0x1c7/0x5b0 [ 253.232488] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.232500] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 253.232506] RIP: 0033:0x45af49 [ 253.232510] RSP: 002b:00007f318088ac78 EFLAGS: 00000246 [ 253.234297] lowmem_reserve[]: [ 253.238699] ORIG_RAX: 0000000000000010 [ 253.238704] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 253.240710] 0 [ 253.244109] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 253.244113] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 253.248509] 0 0 [ 253.252930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f318088b6d4 [ 253.252934] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 253.260166] Node 0 [ 253.349904] 0 [ 253.358126] warn_alloc_show_mem: 2 callbacks suppressed [ 253.358129] Mem-Info: [ 253.409379] 0 [ 253.411274] Node 1 Normal free:53084kB min:53504kB low:66880kB high:80256kB active_anon:168kB inactive_anon:12kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:120kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 253.418642] active_anon:5397 inactive_anon:196 isolated_anon:0 [ 253.418642] active_file:11 inactive_file:12 isolated_file:0 [ 253.418642] unevictable:0 dirty:0 writeback:0 unstable:0 [ 253.418642] slab_reclaimable:14120 slab_unreclaimable:97058 [ 253.418642] mapped:2 shmem:250 pagetables:437 bounce:0 [ 253.418642] free:24957 free_pcp:60 free_cma:0 [ 253.480930] lowmem_reserve[]: 0 0 0 0 0 [ 253.484935] Node 0 DMA: 21*4kB (U) 22*8kB (U) 33*16kB (UE) 22*32kB (U) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10388kB [ 253.537785] Node 0 active_anon:21420kB inactive_anon:772kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 253.579035] Node 0 DMA32: 129*4kB (UME) 92*8kB (UME) 64*16kB (ME) 33*32kB (ME) 456*64kB (UME) 10*128kB (UME) 4*256kB (ME) 3*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 36356kB [ 253.622027] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 253.636080] DMA32: 129*4kB (UME) 92*8kB (UME) 64*16kB (ME) 33*32kB (ME) 456*64kB (UME) 10*128kB (UME) 4*256kB (ME) 3*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 36356kB [ 253.663431] Node 1 active_anon:168kB inactive_anon:12kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 253.664969] Node 1 [ 253.712009] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 253.741361] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 253.747997] Normal: [ 253.779128] Node 1 Normal: 7*4kB (UME) 4*8kB (UME) 6*16kB (UME) 6*32kB (UME) 4*64kB (M) 4*128kB (UM) 1*256kB (M) 3*512kB (UM) 49*1024kB (UME) 0*2048kB 0*4096kB = 53084kB [ 253.808788] 7*4kB (UME) 4*8kB (UME) 6*16kB (UME) 6*32kB (UME) 4*64kB (M) 4*128kB (UM) 1*256kB (M) 3*512kB (UM) 49*1024kB (UME) 0*2048kB 0*4096kB = 53084kB [ 253.821030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.855025] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 253.869093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.874307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 253.892796] Node 0 DMA32 free:36356kB min:36384kB low:45480kB high:54576kB active_anon:21420kB inactive_anon:772kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1628kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 253.898903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 253.974986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.978079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 254.012498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 254.048221] 273 total pagecache pages [ 254.055836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 254.057186] lowmem_reserve[]: [ 254.067863] 273 total pagecache pages [ 254.090226] 0 pages in swap cache [ 254.093727] Swap cache stats: add 0, delete 0, find 0/0 [ 254.097623] 0 pages in swap cache [ 254.099082] Free swap = 0kB [ 254.116153] 0 0 0 0 0 [ 254.117813] Swap cache stats: add 0, delete 0, find 0/0 [ 254.118712] Node 0 [ 254.149022] Free swap = 0kB [ 254.156821] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 254.163698] Total swap = 0kB [ 254.184722] Total swap = 0kB [ 254.187963] 1965979 pages RAM [ 254.197853] 0 pages HighMem/MovableOnly [ 254.222866] 335868 pages reserved [ 254.226355] 0 pages cma reserved [ 254.229747] Out of memory: Kill process 7817 (syz-executor.2) score 999 or sacrifice child [ 254.235615] 1965979 pages RAM [ 254.287857] 0 pages HighMem/MovableOnly [ 254.288713] lowmem_reserve[]: [ 254.305316] 335868 pages reserved [ 254.305453] 0 [ 254.308459] 0 pages cma reserved [ 254.312299] Killed process 7817 (syz-executor.2) total-vm:37908kB, anon-rss:80kB, file-rss:0kB, shmem-rss:0kB [ 254.330407] 0 0 0 0 [ 254.332768] Node 1 Normal free:53084kB min:53504kB low:66880kB high:80256kB active_anon:168kB inactive_anon:12kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:120kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 254.375788] oom_reaper: reaped process 7817 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2020/03/09 03:19:24 executed programs: 74 [ 254.441645] lowmem_reserve[]: 0 0 0 0 0 [ 254.454423] Node 0 DMA: 21*4kB (U) 22*8kB (U) 33*16kB (UE) 22*32kB (U) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10388kB [ 254.471073] Node 0 DMA32: 93*4kB (ME) 223*8kB (UM) 76*16kB (UME) 36*32kB (UM) 302*64kB (UM) 9*128kB (UM) 4*256kB (ME) 3*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 27564kB [ 254.487456] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 254.508707] Node 1 Normal: 1*4kB (E) 2*8kB (UM) 1*16kB (M) 1*32kB (U) 1*64kB (E) 1*128kB (U) 2*256kB (ME) 3*512kB (UME) 180*1024kB (U) 3*2048kB (U) 0*4096kB = 192772kB [ 254.548171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 254.573279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 254.590976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 254.591687] IPVS: ftp: loaded support on port[0] = 21 [ 254.609860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 254.629043] 2678 total pagecache pages [ 254.637717] 0 pages in swap cache [ 254.645887] Swap cache stats: add 0, delete 0, find 0/0 [ 254.656926] Free swap = 0kB [ 254.663466] Total swap = 0kB [ 254.669876] 1965979 pages RAM [ 254.676540] 0 pages HighMem/MovableOnly [ 254.685014] 335868 pages reserved [ 254.692949] 0 pages cma reserved [ 254.997092] oom_reaper: reaped process 7824 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 255.004030] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 255.077703] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 255.104015] CPU: 1 PID: 7828 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 255.112619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.122099] Call Trace: [ 255.124765] dump_stack+0xf7/0x13b [ 255.128402] warn_alloc.cold.110+0xa2/0x1be [ 255.132893] ? zone_watermark_ok_safe+0x260/0x260 [ 255.137876] ? rcu_read_lock_sched_held+0x108/0x120 [ 255.142905] ? compaction_deferred+0x1fe/0x2d0 [ 255.147505] ? __alloc_pages_direct_compact+0xc2/0x330 [ 255.152787] __alloc_pages_slowpath+0x2052/0x2650 [ 255.157628] ? trace_hardirqs_off+0x10/0x10 [ 255.161964] ? mark_held_locks+0xc7/0x130 [ 255.166108] ? warn_alloc+0x100/0x100 [ 255.169905] ? get_page_from_freelist+0x1046/0x23b0 [ 255.174930] ? __might_sleep+0x93/0xb0 [ 255.179236] __alloc_pages_nodemask+0x60d/0x770 [ 255.183895] ? __alloc_pages_slowpath+0x2650/0x2650 [ 255.188916] ? wait_for_completion+0x440/0x440 [ 255.193487] alloc_pages_current+0xd6/0x1b0 [ 255.197818] ion_page_pool_alloc+0x102/0x180 [ 255.202225] ion_system_heap_allocate+0x14e/0x930 [ 255.207057] ? ion_system_heap_free+0x270/0x270 [ 255.211715] ion_alloc+0x216/0x770 [ 255.215852] ? ion_dma_buf_release+0x40/0x40 [ 255.220246] ? kasan_check_write+0x14/0x20 [ 255.224492] ion_ioctl+0xe2/0x1b6 [ 255.227943] ? ion_alloc.cold.15+0x32/0x32 [ 255.232361] do_vfs_ioctl+0x180/0xfb0 [ 255.236165] ? __fget+0x1ad/0x2f0 [ 255.239886] ? ioctl_preallocate+0x1a0/0x1a0 [ 255.244282] ? __fget+0x1ca/0x2f0 [ 255.247721] ? security_file_ioctl+0x6a/0xa0 [ 255.252130] ? SyS_clock_settime+0x1a0/0x1a0 [ 255.256546] ? security_file_ioctl+0x6a/0xa0 [ 255.260967] SyS_ioctl+0x74/0x80 [ 255.264324] ? do_vfs_ioctl+0xfb0/0xfb0 [ 255.268482] do_syscall_64+0x1c7/0x5b0 [ 255.272363] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.277313] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 255.282506] RIP: 0033:0x45af49 [ 255.285682] RSP: 002b:00007fb6b5215c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.294432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 255.301708] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 255.308963] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 255.316216] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b52166d4 [ 255.325318] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 255.909975] Mem-Info: [ 255.919260] active_anon:5379 inactive_anon:196 isolated_anon:0 [ 255.919260] active_file:116 inactive_file:590 isolated_file:15 [ 255.919260] unevictable:0 dirty:3 writeback:0 unstable:0 [ 255.919260] slab_reclaimable:14162 slab_unreclaimable:97152 [ 255.919260] mapped:507 shmem:250 pagetables:427 bounce:0 [ 255.919260] free:52383 free_pcp:176 free_cma:0 [ 255.926769] chnl_net:caif_netlink_parms(): no params data found [ 256.060282] Node 0 active_anon:21232kB inactive_anon:764kB active_file:204kB inactive_file:500kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:508kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 256.147950] Node 1 active_anon:304kB inactive_anon:20kB active_file:276kB inactive_file:288kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:376kB dirty:36kB writeback:8kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 256.206362] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 256.244142] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 256.249606] CPU: 1 PID: 7830 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 256.257408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.266792] Call Trace: [ 256.269397] dump_stack+0xf7/0x13b [ 256.272923] warn_alloc.cold.110+0xa2/0x1be [ 256.277249] ? zone_watermark_ok_safe+0x260/0x260 [ 256.282104] ? __alloc_pages_direct_compact+0xc2/0x330 [ 256.287367] __alloc_pages_slowpath+0x2052/0x2650 [ 256.292223] ? trace_hardirqs_off+0x10/0x10 [ 256.296903] ? warn_alloc+0x100/0x100 [ 256.300702] ? get_page_from_freelist+0x1046/0x23b0 [ 256.305809] ? __might_sleep+0x93/0xb0 [ 256.309693] __alloc_pages_nodemask+0x60d/0x770 [ 256.314351] ? retint_kernel+0x2d/0x2d [ 256.318252] ? __alloc_pages_slowpath+0x2650/0x2650 [ 256.323298] ? wait_for_completion+0x440/0x440 [ 256.327964] alloc_pages_current+0xd6/0x1b0 [ 256.332277] ion_page_pool_alloc+0x102/0x180 [ 256.336669] ion_system_heap_allocate+0x14e/0x930 [ 256.341677] ? ion_system_heap_free+0x270/0x270 [ 256.346446] ion_alloc+0x216/0x770 [ 256.350009] ? ion_dma_buf_release+0x40/0x40 [ 256.354440] ? kasan_check_write+0x14/0x20 [ 256.358684] ion_ioctl+0xe2/0x1b6 [ 256.362135] ? ion_alloc.cold.15+0x32/0x32 [ 256.366549] do_vfs_ioctl+0x180/0xfb0 [ 256.370355] ? __fget+0x1ad/0x2f0 [ 256.373807] ? ioctl_preallocate+0x1a0/0x1a0 [ 256.378206] ? __fget+0x1ca/0x2f0 [ 256.381736] ? security_file_ioctl+0x6a/0xa0 [ 256.386138] ? SyS_clock_settime+0x1a0/0x1a0 [ 256.390561] ? security_file_ioctl+0x6a/0xa0 [ 256.394973] SyS_ioctl+0x74/0x80 [ 256.398407] ? do_vfs_ioctl+0xfb0/0xfb0 [ 256.402542] do_syscall_64+0x1c7/0x5b0 [ 256.406431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.411294] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 256.416507] RIP: 0033:0x45af49 [ 256.419702] RSP: 002b:00007fb6b51d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.427917] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 256.435521] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 256.444878] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 256.452171] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b51d46d4 [ 256.459517] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 256.469689] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 256.504889] rsyslogd cpuset=/ mems_allowed=0-1 [ 256.514301] Node 0 [ 256.514304] syz-executor.3: page allocation failure: order:4 [ 256.516566] DMA free:10388kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.516570] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 256.533777] CPU: 1 PID: 6994 Comm: rsyslogd Not tainted 4.14.172-syzkaller #0 [ 256.566469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.576741] Call Trace: [ 256.579423] dump_stack+0xf7/0x13b [ 256.582990] dump_header+0x160/0x63f [ 256.587088] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 256.592479] ? ___ratelimit+0x243/0x519 [ 256.596474] ? do_raw_spin_unlock+0x16a/0x250 [ 256.601025] oom_kill_process.cold.24+0xb/0xa1a [ 256.605987] ? out_of_memory+0x7f9/0x1030 [ 256.610157] ? lock_downgrade+0x7f0/0x7f0 [ 256.610359] syz-executor.3 cpuset=syz3 [ 256.614304] out_of_memory+0x2b0/0x1030 [ 256.614313] ? oom_killer_disable+0x1a0/0x1a0 [ 256.618203] mems_allowed=0-1 [ 256.622164] ? __alloc_pages_slowpath+0xb69/0x2650 [ 256.622171] __alloc_pages_slowpath+0x1ef3/0x2650 [ 256.622184] ? warn_alloc+0x100/0x100 [ 256.622189] ? get_page_from_freelist+0x1046/0x23b0 [ 256.622203] ? __might_sleep+0x93/0xb0 [ 256.622210] __alloc_pages_nodemask+0x60d/0x770 [ 256.657269] ? __alloc_pages_slowpath+0x2650/0x2650 [ 256.662289] ? lock_downgrade+0x7f0/0x7f0 [ 256.666446] alloc_pages_current+0xd6/0x1b0 [ 256.670768] __page_cache_alloc+0x1da/0x330 [ 256.675219] filemap_fault+0xbc8/0x1ae0 [ 256.679214] ? __lock_page_or_retry+0x820/0x820 [ 256.684913] ? lock_acquire+0x173/0x400 [ 256.689245] ? ext4_filemap_fault+0x75/0xb0 [ 256.693912] ext4_filemap_fault+0x7d/0xb0 [ 256.698076] __do_fault+0xf3/0x340 [ 256.701805] __handle_mm_fault+0x21eb/0x3870 [ 256.706383] ? copy_page_range+0x1d10/0x1d10 [ 256.710779] ? find_held_lock+0x36/0x1d0 [ 256.714960] handle_mm_fault+0x234/0x6e0 [ 256.719010] ? find_vma+0x1a/0x150 [ 256.722568] __do_page_fault+0x44d/0xb00 [ 256.726631] ? SyS_read+0x1c5/0x250 [ 256.730244] ? firmware_map_remove+0x177/0x177 [ 256.734826] ? vmalloc_fault+0xc90/0xc90 [ 256.738911] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 256.744263] ? page_fault+0x2f/0x50 [ 256.747879] do_page_fault+0x64/0x3fb [ 256.751705] ? page_fault+0x2f/0x50 [ 256.755322] page_fault+0x45/0x50 [ 256.758765] RIP: 0033:0x7f79054cddb4 [ 256.762459] RSP: 002b:00007f7903e9ce40 EFLAGS: 00010207 [ 256.767830] RAX: 0000000000000134 RBX: 00000000020db650 RCX: 00007f79068fd1fd [ 256.775895] RDX: 0000000000000134 RSI: 00007f79056d15a0 RDI: 0000000000000000 [ 256.783183] RBP: 0000000000000000 R08: 00000000020c6260 R09: 0000000004000001 [ 256.790448] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000065e420 [ 256.797714] R13: 00007f7903e9d9c0 R14: 00007f7906f42040 R15: 0000000000000003 [ 256.805013] CPU: 0 PID: 7812 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 256.812835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.822201] Call Trace: [ 256.824824] dump_stack+0xf7/0x13b [ 256.824924] lowmem_reserve[]: 0 [ 256.828380] warn_alloc.cold.110+0xa2/0x1be [ 256.828386] ? zone_watermark_ok_safe+0x260/0x260 [ 256.841157] ? __alloc_pages_direct_compact+0xc2/0x330 [ 256.842267] 2570 2570 [ 256.846441] __alloc_pages_slowpath+0x2052/0x2650 [ 256.846456] ? trace_hardirqs_off+0x10/0x10 [ 256.848942] 2570 2570 [ 256.853790] ? warn_alloc+0x100/0x100 [ 256.853796] ? get_page_from_freelist+0x1046/0x23b0 [ 256.853809] ? __might_sleep+0x93/0xb0 [ 256.853814] __alloc_pages_nodemask+0x60d/0x770 [ 256.853819] ? trace_hardirqs_off+0x10/0x10 [ 256.853826] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 256.853832] ? __alloc_pages_slowpath+0x2650/0x2650 [ 256.853839] ? wait_for_completion+0x440/0x440 [ 256.853849] alloc_pages_current+0xd6/0x1b0 [ 256.853859] ion_page_pool_alloc+0x102/0x180 [ 256.853866] ion_system_heap_allocate+0x14e/0x930 [ 256.853873] ? do_raw_spin_unlock+0x16a/0x250 [ 256.853879] ? ion_system_heap_free+0x270/0x270 [ 256.853889] ion_alloc+0x27f/0x770 [ 256.873967] ? ion_dma_buf_release+0x40/0x40 [ 256.878616] Node 0 [ 256.882925] ? kasan_check_write+0x14/0x20 [ 256.882933] ion_ioctl+0xe2/0x1b6 [ 256.882938] ? ion_alloc.cold.15+0x32/0x32 [ 256.882950] do_vfs_ioctl+0x180/0xfb0 [ 256.882957] ? __fget+0x1ad/0x2f0 [ 256.882964] ? ioctl_preallocate+0x1a0/0x1a0 [ 256.882971] ? __fget+0x1ca/0x2f0 [ 256.882983] ? security_file_ioctl+0x6a/0xa0 [ 256.882989] ? SyS_clock_settime+0x1a0/0x1a0 [ 256.882993] ? security_file_ioctl+0x6a/0xa0 [ 256.883000] SyS_ioctl+0x74/0x80 [ 256.900166] DMA32 free:55340kB min:36384kB low:45480kB high:54576kB active_anon:21232kB inactive_anon:764kB active_file:80kB inactive_file:160kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1588kB bounce:0kB free_pcp:828kB local_pcp:664kB free_cma:0kB [ 256.901752] ? do_vfs_ioctl+0xfb0/0xfb0 [ 256.906138] lowmem_reserve[]: [ 256.910976] do_syscall_64+0x1c7/0x5b0 [ 256.910983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.910995] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 256.911000] RIP: 0033:0x45af49 [ 256.911003] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.911009] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 256.911012] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 256.911015] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 256.911017] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 256.911019] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 256.918569] syz-executor.2: [ 256.939772] 0 [ 256.943164] syz-executor.1: [ 256.953350] 0 [ 256.959571] page allocation failure: order:0 [ 256.976356] 0 [ 257.004712] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 257.030156] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 257.030169] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 257.030187] CPU: 1 PID: 7819 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 257.030190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.030194] Call Trace: [ 257.030209] dump_stack+0xf7/0x13b [ 257.030219] warn_alloc.cold.110+0xa2/0x1be [ 257.030224] ? zone_watermark_ok_safe+0x260/0x260 [ 257.030230] ? usleep_range+0x120/0x120 [ 257.030237] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 257.030244] ? call_timer_fn+0x570/0x570 [ 257.030250] ? unreserve_highatomic_pageblock+0x315/0x450 [ 257.030261] __alloc_pages_slowpath+0x2052/0x2650 [ 257.030275] ? warn_alloc+0x100/0x100 [ 257.041822] Mem-Info: [ 257.045272] ? get_page_from_freelist+0x1046/0x23b0 [ 257.045287] ? __might_sleep+0x93/0xb0 [ 257.045295] __alloc_pages_nodemask+0x60d/0x770 [ 257.052650] active_anon:5384 inactive_anon:196 isolated_anon:0 [ 257.052650] active_file:157 inactive_file:229 isolated_file:1 [ 257.052650] unevictable:0 dirty:11 writeback:2 unstable:0 [ 257.052650] slab_reclaimable:14166 slab_unreclaimable:97488 [ 257.052650] mapped:254 shmem:250 pagetables:428 bounce:0 [ 257.052650] free:34094 free_pcp:341 free_cma:0 [ 257.059832] ? __alloc_pages_slowpath+0x2650/0x2650 [ 257.059844] ? wait_for_completion+0x440/0x440 [ 257.059850] ? __list_del_entry_valid+0xb6/0xf3 [ 257.059861] alloc_pages_current+0xd6/0x1b0 [ 257.067240] (null) [ 257.074434] ion_page_pool_alloc+0x102/0x180 [ 257.074440] ion_system_heap_allocate+0x14e/0x930 [ 257.074448] ? ion_system_heap_free+0x270/0x270 [ 257.074458] ion_alloc+0x216/0x770 [ 257.074468] ? ion_dma_buf_release+0x40/0x40 [ 257.077564] syz-executor.1 cpuset= [ 257.079300] ? kasan_check_write+0x14/0x20 [ 257.079311] ion_ioctl+0xe2/0x1b6 [ 257.079318] ? ion_alloc.cold.15+0x32/0x32 [ 257.082449] Node 0 active_anon:21232kB inactive_anon:764kB active_file:580kB inactive_file:852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:940kB dirty:8kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 257.084157] do_vfs_ioctl+0x180/0xfb0 [ 257.084166] ? __fget+0x1ad/0x2f0 [ 257.084173] ? ioctl_preallocate+0x1a0/0x1a0 [ 257.088639] Node 1 active_anon:304kB inactive_anon:20kB active_file:48kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:76kB dirty:36kB writeback:8kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 257.090420] ? __fget+0x1ca/0x2f0 [ 257.090433] ? security_file_ioctl+0x6a/0xa0 [ 257.090438] ? SyS_clock_settime+0x1a0/0x1a0 [ 257.090441] ? security_file_ioctl+0x6a/0xa0 [ 257.090448] SyS_ioctl+0x74/0x80 [ 257.090455] ? do_vfs_ioctl+0xfb0/0xfb0 [ 257.090462] do_syscall_64+0x1c7/0x5b0 [ 257.090468] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.097614] Node 0 [ 257.108017] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 257.108025] RIP: 0033:0x45af49 [ 257.108028] RSP: 002b:00007f4373931c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.108034] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 257.108036] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 257.108038] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 257.108041] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43739326d4 [ 257.108044] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 257.130120] 0 [ 257.140487] syz1 [ 257.150095] 0 [ 257.154205] mems_allowed=0-1 [ 257.165356] CPU: 0 PID: 7824 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 257.165361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.165364] Call Trace: [ 257.165379] dump_stack+0xf7/0x13b [ 257.165390] warn_alloc.cold.110+0xa2/0x1be [ 257.200127] Node 0 [ 257.223388] ? zone_watermark_ok_safe+0x260/0x260 [ 257.223398] ? usleep_range+0x120/0x120 [ 257.223404] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 257.223411] ? call_timer_fn+0x570/0x570 [ 257.223417] ? unreserve_highatomic_pageblock+0x315/0x450 [ 257.223425] __alloc_pages_slowpath+0x2052/0x2650 [ 257.223439] ? warn_alloc+0x100/0x100 [ 257.223444] ? get_page_from_freelist+0x1046/0x23b0 [ 257.223457] ? __might_sleep+0x93/0xb0 [ 257.223463] __alloc_pages_nodemask+0x60d/0x770 [ 257.223469] ? __alloc_pages_slowpath+0x2650/0x2650 [ 257.223476] ? wait_for_completion+0x440/0x440 [ 257.223486] alloc_pages_current+0xd6/0x1b0 [ 257.223497] ion_page_pool_alloc+0x102/0x180 [ 257.250096] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.253602] ion_system_heap_allocate+0x14e/0x930 [ 257.258267] lowmem_reserve[]: [ 257.261855] ? ion_system_heap_free+0x270/0x270 [ 257.261864] ion_alloc+0x216/0x770 [ 257.261872] ? ion_dma_buf_release+0x40/0x40 [ 257.261883] ? kasan_check_write+0x14/0x20 [ 257.261890] ion_ioctl+0xe2/0x1b6 [ 257.261895] ? ion_alloc.cold.15+0x32/0x32 [ 257.261906] do_vfs_ioctl+0x180/0xfb0 [ 257.261913] ? __fget+0x1ad/0x2f0 [ 257.261919] ? ioctl_preallocate+0x1a0/0x1a0 [ 257.261927] ? __fget+0x1ca/0x2f0 [ 257.261940] ? security_file_ioctl+0x6a/0xa0 [ 257.280186] 0 [ 257.281843] ? SyS_clock_settime+0x1a0/0x1a0 [ 257.370151] 0 [ 257.372384] ? security_file_ioctl+0x6a/0xa0 [ 257.376248] 0 0 [ 257.381107] SyS_ioctl+0x74/0x80 [ 257.381115] ? do_vfs_ioctl+0xfb0/0xfb0 [ 257.381122] do_syscall_64+0x1c7/0x5b0 [ 257.381128] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.381140] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 257.381145] RIP: 0033:0x45af49 [ 257.381147] RSP: 002b:00007f318088ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.381153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 257.381157] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 257.381159] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 257.381168] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f318088b6d4 [ 257.410165] 0 [ 257.414120] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 257.419253] DMA free:10372kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.445435] lowmem_reserve[]: [ 257.460129] Node 1 [ 257.484840] 0 [ 257.515741] Normal free:127816kB min:53504kB low:66880kB high:80256kB active_anon:308kB inactive_anon:20kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:288kB pagetables:124kB bounce:0kB free_pcp:236kB local_pcp:184kB free_cma:0kB [ 257.560094] 2570 [ 257.727523] lowmem_reserve[]: [ 257.780838] Mem-Info: [ 257.796519] active_anon:5395 inactive_anon:196 isolated_anon:0 [ 257.796519] active_file:31 inactive_file:425 isolated_file:0 [ 257.796519] unevictable:0 dirty:0 writeback:0 unstable:0 [ 257.796519] slab_reclaimable:14195 slab_unreclaimable:97396 [ 257.796519] mapped:329 shmem:250 pagetables:434 bounce:0 [ 257.796519] free:34526 free_pcp:252 free_cma:0 [ 257.827107] 0 0 0 0 0 [ 257.864352] Node 0 active_anon:21272kB inactive_anon:764kB active_file:180kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 257.869770] Node 0 DMA: 1*4kB (U) 14*8kB (U) 33*16kB (UE) 22*32kB (U) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10372kB [ 257.910481] Node 0 DMA32: 1463*4kB (UMEH) 125*8kB (UME) 341*16kB (UME) 820*32kB (UMEH) 41*64kB (UME) 12*128kB (ME) 8*256kB (UM) 11*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 50388kB [ 257.913788] Node 1 active_anon:308kB inactive_anon:20kB active_file:816kB inactive_file:848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1700kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 257.967764] 2570 2570 [ 257.970195] Node 0 [ 257.991025] 2570 [ 257.998207] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 258.036759] Node 0 DMA32 free:45988kB min:36384kB low:45480kB high:54576kB active_anon:21272kB inactive_anon:764kB active_file:176kB inactive_file:372kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1612kB bounce:0kB free_pcp:324kB local_pcp:168kB free_cma:0kB [ 258.053331] Node 1 [ 258.070532] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.106789] Normal: 3*4kB (UME) 28*8kB (UME) 23*16kB (ME) 49*32kB (UME) 15*64kB (UME) 17*128kB (UME) 106*256kB (UME) 27*512kB (UME) 14*1024kB (UME) 3*2048kB (UM) 0*4096kB = 66748kB [ 258.160497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.180112] lowmem_reserve[]: 0 0 0 0 0 [ 258.180138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 258.180144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.193522] warn_alloc_show_mem: 2 callbacks suppressed [ 258.193525] Mem-Info: [ 258.205340] lowmem_reserve[]: [ 258.207831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 258.209667] 0 [ 258.213063] 380 total pagecache pages [ 258.227715] active_anon:5385 inactive_anon:196 isolated_anon:0 [ 258.227715] active_file:39 inactive_file:40 isolated_file:0 [ 258.227715] unevictable:0 dirty:0 writeback:0 unstable:0 [ 258.227715] slab_reclaimable:14210 slab_unreclaimable:97190 [ 258.227715] mapped:28 shmem:250 pagetables:428 bounce:0 [ 258.227715] free:31913 free_pcp:412 free_cma:0 [ 258.284753] 0 pages in swap cache [ 258.300086] 2570 2570 2570 2570 [ 258.300513] Swap cache stats: add 0, delete 0, find 0/0 [ 258.303506] Node 0 [ 258.308856] Free swap = 0kB [ 258.308859] Total swap = 0kB [ 258.320083] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.362487] 1965979 pages RAM [ 258.366183] DMA32 free:36340kB min:36384kB low:45480kB high:54576kB active_anon:21236kB inactive_anon:764kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1588kB bounce:0kB free_pcp:844kB local_pcp:208kB free_cma:0kB [ 258.370094] 0 pages HighMem/MovableOnly [ 258.411199] Node 0 active_anon:21236kB inactive_anon:764kB active_file:132kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 258.450157] lowmem_reserve[]: 0 0 0 0 0 [ 258.454206] Node 1 Normal free:26532kB min:53504kB low:66880kB high:80256kB active_anon:304kB inactive_anon:20kB active_file:128kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:288kB pagetables:124kB bounce:0kB free_pcp:88kB local_pcp:0kB free_cma:0kB [ 258.475199] 335868 pages reserved [ 258.488832] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 258.492508] Node 1 active_anon:304kB inactive_anon:20kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 258.520071] lowmem_reserve[]: 0 0 0 0 0 [ 258.527376] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 258.545815] 0 pages cma reserved [ 258.551791] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 258.555132] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.557185] CPU: 1 PID: 7819 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 258.557190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.590049] lowmem_reserve[]: [ 258.590259] Call Trace: [ 258.599600] 0 0 [ 258.602724] dump_stack+0xf7/0x13b [ 258.602735] warn_alloc.cold.110+0xa2/0x1be [ 258.602740] ? zone_watermark_ok_safe+0x260/0x260 [ 258.602755] ? __alloc_pages_direct_compact+0xc2/0x330 [ 258.620054] lowmem_reserve[]: 0 [ 258.625281] __alloc_pages_slowpath+0x2052/0x2650 [ 258.625297] ? trace_hardirqs_off+0x10/0x10 [ 258.628550] 0 0 [ 258.633388] ? warn_alloc+0x100/0x100 [ 258.633395] ? get_page_from_freelist+0x1046/0x23b0 [ 258.633408] ? __might_sleep+0x93/0xb0 [ 258.633414] __alloc_pages_nodemask+0x60d/0x770 [ 258.633420] ? trace_hardirqs_off+0x10/0x10 [ 258.633428] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 258.633434] ? __alloc_pages_slowpath+0x2650/0x2650 [ 258.637763] 0 [ 258.639725] ? wait_for_completion+0x440/0x440 [ 258.650045] 0 [ 258.652614] alloc_pages_current+0xd6/0x1b0 [ 258.657284] 0 [ 258.661604] ion_page_pool_alloc+0x102/0x180 [ 258.661610] ion_system_heap_allocate+0x14e/0x930 [ 258.661618] ? do_raw_spin_unlock+0x16a/0x250 [ 258.661625] ? ion_system_heap_free+0x270/0x270 [ 258.661634] ion_alloc+0x27f/0x770 [ 258.680059] 0 [ 258.683972] ? ion_dma_buf_release+0x40/0x40 [ 258.685755] 0 [ 258.692508] ? kasan_check_write+0x14/0x20 [ 258.692517] ion_ioctl+0xe2/0x1b6 [ 258.692523] ? ion_alloc.cold.15+0x32/0x32 [ 258.692534] do_vfs_ioctl+0x180/0xfb0 [ 258.692541] ? __fget+0x1ad/0x2f0 [ 258.692547] ? ioctl_preallocate+0x1a0/0x1a0 [ 258.702056] ? __fget+0x1ca/0x2f0 [ 258.702069] ? security_file_ioctl+0x6a/0xa0 [ 258.702075] ? SyS_clock_settime+0x1a0/0x1a0 [ 258.702078] ? security_file_ioctl+0x6a/0xa0 [ 258.702087] SyS_ioctl+0x74/0x80 [ 258.720065] Node 0 [ 258.722575] ? do_vfs_ioctl+0xfb0/0xfb0 [ 258.726003] DMA: [ 258.730232] do_syscall_64+0x1c7/0x5b0 [ 258.730238] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.730249] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 258.730255] RIP: 0033:0x45af49 [ 258.730257] RSP: 002b:00007f4373931c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.730263] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 258.730267] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 258.737520] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 258.737524] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43739326d4 [ 258.750102] Node 1 [ 258.754361] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 258.757142] syz-executor.1 cpuset= [ 258.780091] 1*4kB [ 258.787416] Node 0 [ 258.787620] (U) [ 258.795409] DMA free:10372kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.795412] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 258.795427] Node 0 DMA32 free:18128kB min:36384kB low:45480kB high:54576kB active_anon:21236kB inactive_anon:764kB active_file:152kB inactive_file:112kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1588kB bounce:0kB free_pcp:132kB local_pcp:132kB free_cma:0kB [ 258.795438] lowmem_reserve[]: 0 0 0 0 0 [ 258.795451] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.795460] lowmem_reserve[]: 0 [ 258.807115] Normal free:26532kB min:53504kB low:66880kB high:80256kB active_anon:304kB inactive_anon:20kB active_file:4kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:288kB pagetables:124kB bounce:0kB free_pcp:88kB local_pcp:0kB free_cma:0kB [ 258.813811] syz1 [ 258.830060] lowmem_reserve[]: [ 258.838337] 0 [ 258.838876] 0 [ 258.841044] 0 0 0 [ 258.841054] Node 1 Normal free:26532kB min:53504kB low:66880kB high:80256kB active_anon:304kB inactive_anon:20kB active_file:4kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:288kB pagetables:124kB bounce:0kB free_pcp:88kB local_pcp:88kB free_cma:0kB [ 258.841067] lowmem_reserve[]: 0 0 0 0 0 [ 258.841080] Node 0 DMA: 1*4kB (U) 14*8kB (U) 33*16kB (UE) 22*32kB (U) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10372kB [ 258.841135] Node 0 DMA32: 38*4kB (UM) 13*8kB (UM) 1*16kB (M) 558*32kB (UM) 0*64kB 0*128kB [ 258.860075] 14*8kB [ 258.873857] mems_allowed=0-1 [ 258.882161] 0 [ 258.914971] 0*256kB [ 258.940064] (U) [ 258.973503] CPU: 1 PID: 7822 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 259.010067] 33*16kB [ 259.023601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.023605] Call Trace: [ 259.023624] dump_stack+0xf7/0x13b [ 259.023636] warn_alloc.cold.110+0xa2/0x1be [ 259.023642] ? zone_watermark_ok_safe+0x260/0x260 [ 259.040061] 0 [ 259.041506] ? usleep_range+0x120/0x120 [ 259.043464] 0 [ 259.051517] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 259.051525] ? call_timer_fn+0x570/0x570 [ 259.051533] ? unreserve_highatomic_pageblock+0x315/0x450 [ 259.051543] __alloc_pages_slowpath+0x2052/0x2650 [ 259.051558] ? warn_alloc+0x100/0x100 [ 259.070068] (UE) [ 259.073649] ? get_page_from_freelist+0x1046/0x23b0 [ 259.078469] 22*32kB [ 259.080266] ? __might_sleep+0x93/0xb0 [ 259.080273] __alloc_pages_nodemask+0x60d/0x770 [ 259.080283] ? retint_kernel+0x2d/0x2d [ 259.080289] ? __alloc_pages_slowpath+0x2650/0x2650 [ 259.080298] ? wait_for_completion+0x440/0x440 [ 259.084295] 0 [ 259.086086] alloc_pages_current+0xd6/0x1b0 [ 259.100824] ion_page_pool_alloc+0x102/0x180 [ 259.105637] Node 0 [ 259.109422] ion_system_heap_allocate+0x14e/0x930 [ 259.111513] (U) [ 259.116469] ? ion_system_heap_free+0x270/0x270 [ 259.118785] 1*64kB [ 259.122689] ion_alloc+0x216/0x770 [ 259.122698] ? ion_dma_buf_release+0x40/0x40 [ 259.122709] ? kasan_check_write+0x14/0x20 [ 259.122715] ion_ioctl+0xe2/0x1b6 [ 259.122721] ? ion_alloc.cold.15+0x32/0x32 [ 259.140101] DMA: [ 259.140866] do_vfs_ioctl+0x180/0xfb0 [ 259.142662] 1*4kB [ 259.146973] ? __fget+0x1ad/0x2f0 [ 259.160056] (E) [ 259.160396] ? ioctl_preallocate+0x1a0/0x1a0 [ 259.165058] 2*128kB [ 259.167290] ? __fget+0x1ca/0x2f0 [ 259.170852] (U) [ 259.175205] ? security_file_ioctl+0x6a/0xa0 [ 259.179428] 14*8kB [ 259.182871] ? SyS_clock_settime+0x1a0/0x1a0 [ 259.182876] ? security_file_ioctl+0x6a/0xa0 [ 259.182886] SyS_ioctl+0x74/0x80 [ 259.182892] ? do_vfs_ioctl+0xfb0/0xfb0 [ 259.182899] do_syscall_64+0x1c7/0x5b0 [ 259.182905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.200064] (UE) [ 259.200494] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 259.204878] 2*256kB [ 259.207197] RIP: 0033:0x45af49 [ 259.220119] (U) [ 259.223677] RSP: 002b:00007f31808ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.228080] 33*16kB [ 259.231441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 259.231445] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 259.231447] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 259.231450] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31808cd6d4 [ 259.231452] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 259.239664] 0*512kB [ 259.247073] (UE) [ 259.263417] 0*1024kB [ 259.284167] 2*512kB [ 259.300789] 0*2048kB [ 259.321758] (UE) [ 259.323791] 0*4096kB [ 259.324186] 22*32kB [ 259.326234] = 18128kB [ 259.326238] Node 0 [ 259.328635] (U) 1*64kB [ 259.334092] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 259.340076] (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10372kB [ 259.356806] Mem-Info: [ 259.361201] Node 1 Normal: 18*4kB (UM) 21*8kB (UM) 14*16kB (UM) 11*32kB (UM) 8*64kB (UM) 6*128kB (M) 36*256kB (UM) 29*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26160kB [ 259.370062] (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10372kB [ 259.385678] active_anon:5398 inactive_anon:196 isolated_anon:0 [ 259.385678] active_file:42 inactive_file:0 isolated_file:0 [ 259.385678] unevictable:0 dirty:0 writeback:0 unstable:0 [ 259.385678] slab_reclaimable:14220 slab_unreclaimable:97222 [ 259.385678] mapped:2 shmem:250 pagetables:435 bounce:0 [ 259.385678] free:13665 free_pcp:55 free_cma:0 [ 259.390061] Node 0 [ 259.431058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.431733] Node 0 [ 259.433342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 259.450066] DMA32: 38*4kB (UM) 13*8kB (UM) 1*16kB (M) 558*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18128kB [ 259.462948] Node 0 active_anon:21240kB inactive_anon:764kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 259.480065] Node 0 [ 259.494478] DMA32: 38*4kB (UM) 13*8kB (UM) 1*16kB (M) 558*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18128kB [ 259.502159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.522223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 259.529564] Normal: 0*4kB [ 259.530899] 284 total pagecache pages [ 259.530907] 0 pages in swap cache [ 259.533742] 0*8kB 0*16kB [ 259.537527] Swap cache stats: add 0, delete 0, find 0/0 [ 259.537531] Free swap = 0kB [ 259.555785] Node 1 active_anon:352kB inactive_anon:20kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 259.560076] Node 0 [ 259.585615] Total swap = 0kB [ 259.590635] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 259.590943] 1965979 pages RAM [ 259.598796] Node 1 [ 259.605319] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.630064] Normal: 18*4kB (UM) 21*8kB (UM) 14*16kB (UM) 11*32kB (UM) 8*64kB (UM) 6*128kB (M) 36*256kB (UM) 29*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26160kB [ 259.636820] 0 pages HighMem/MovableOnly [ 259.656754] 335868 pages reserved [ 259.657915] Normal: [ 259.660376] 0 pages cma reserved [ 259.680620] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 259.686028] Node 0 DMA32 free:18128kB min:36384kB low:45480kB high:54576kB active_anon:21240kB inactive_anon:764kB active_file:140kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1588kB bounce:0kB free_pcp:132kB local_pcp:132kB free_cma:0kB [ 259.690344] 0*4kB [ 259.760358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.770115] lowmem_reserve[]: 0 0 0 0 0 [ 259.799473] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.810099] 0*8kB [ 259.830646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 259.860127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.869016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 259.880287] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 259.888699] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 1*32kB (U) 1*64kB (M) 6*128kB (UM) 5*256kB (UM) 17*512kB (UM) 270*1024kB (U) 54*2048kB (U) 1*4096kB (U) = 402060kB [ 259.920153] lowmem_reserve[]: 0 0 0 0 0 [ 259.924279] Node 1 Normal free:424460kB min:53504kB low:66880kB high:80256kB active_anon:352kB inactive_anon:20kB active_file:8kB inactive_file:908kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:288kB pagetables:152kB bounce:0kB free_pcp:276kB local_pcp:160kB free_cma:0kB [ 259.940084] 543 total pagecache pages [ 259.970111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.978999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 260.010130] 0 pages in swap cache [ 260.013704] Swap cache stats: add 0, delete 0, find 0/0 [ 260.019058] Free swap = 0kB [ 260.040107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.049080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 260.058072] Total swap = 0kB [ 260.070093] 1965979 pages RAM [ 260.073217] 0 pages HighMem/MovableOnly [ 260.077184] 335868 pages reserved [ 260.110136] 0 pages cma reserved [ 260.113536] Out of memory: Kill process 7827 (syz-executor.4) score 999 or sacrifice child [ 260.122037] 555 total pagecache pages [ 260.123548] lowmem_reserve[]: 0 0 [ 260.125855] 0 pages in swap cache [ 260.125859] Swap cache stats: add 0, delete 0, find 0/0 [ 260.129313] 0 [ 260.160123] Killed process 7828 (syz-executor.4) total-vm:38036kB, anon-rss:128kB, file-rss:0kB, shmem-rss:0kB [ 260.180065] Free swap = 0kB [ 260.183100] Total swap = 0kB [ 260.186123] 1965979 pages RAM [ 260.189602] 0 pages HighMem/MovableOnly [ 260.203680] 0 0 [ 260.205711] Node 0 DMA: 1*4kB (U) 14*8kB (U) 33*16kB (UE) 22*32kB (U) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10692kB [ 260.230988] oom_reaper: reaped process 7828 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 260.241212] 335868 pages reserved [ 260.244987] 0 pages cma reserved [ 260.304304] Node 0 DMA32: 0*4kB 4*8kB (UME) 1*16kB (E) 541*32kB (UE) 589*64kB (U) 312*128kB (U) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 96016kB [ 260.350104] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 260.404110] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 1*32kB (U) 5511*64kB (UM) 906*128kB (UM) 427*256kB (UM) 44*512kB (UM) 62*1024kB (U) 54*2048kB (U) 1*4096kB (U) = 778764kB [ 260.470672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.510720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 260.519369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.592762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 260.602567] 814 total pagecache pages [ 260.606495] 0 pages in swap cache [ 260.609961] Swap cache stats: add 0, delete 0, find 0/0 [ 260.618001] Free swap = 0kB [ 260.660118] Total swap = 0kB [ 260.663207] 1965979 pages RAM [ 260.666313] 0 pages HighMem/MovableOnly [ 260.697134] 335868 pages reserved [ 260.701304] 0 pages cma reserved [ 260.823717] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.873728] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.883147] device bridge_slave_0 entered promiscuous mode [ 260.894576] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.973393] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.994464] device bridge_slave_1 entered promiscuous mode [ 261.057049] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 261.067261] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 261.144385] syz-executor.5: page allocation failure: order:1, mode:0x14044c0(GFP_KERNEL|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=(null) [ 261.165679] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 261.179947] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 261.184394] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 261.191641] CPU: 1 PID: 7816 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 261.199450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.208936] Call Trace: [ 261.211574] dump_stack+0xf7/0x13b [ 261.215118] warn_alloc.cold.110+0xa2/0x1be [ 261.219437] ? zone_watermark_ok_safe+0x260/0x260 [ 261.224292] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 261.229209] ? __alloc_pages_slowpath+0xb69/0x2650 [ 261.234252] __alloc_pages_slowpath+0x2052/0x2650 [ 261.239111] ? warn_alloc+0x100/0x100 [ 261.242920] ? get_page_from_freelist+0x1046/0x23b0 [ 261.247931] ? __might_sleep+0x93/0xb0 [ 261.251825] __alloc_pages_nodemask+0x60d/0x770 [ 261.256480] ? __alloc_pages_slowpath+0x2650/0x2650 [ 261.261484] ? cache_grow_begin+0x331/0x3f0 [ 261.265793] cache_grow_begin+0x80/0x3f0 [ 261.269866] fallback_alloc+0x203/0x2c0 [ 261.273838] ____cache_alloc_node+0x1c7/0x1e0 [ 261.278465] kmem_cache_alloc_node_trace+0xe7/0x780 [ 261.283576] ? selinux_ipv4_output+0x30/0x30 [ 261.287995] ? __lock_acquire+0x6a4/0x4500 [ 261.292254] ? veth_close+0x90/0x90 [ 261.295879] __kmalloc_node+0x3c/0x70 [ 261.299819] kvmalloc_node+0x70/0x80 [ 261.303528] alloc_netdev_mqs+0x60/0xb40 [ 261.308114] ? security_capable+0x6f/0xa0 [ 261.312267] rtnl_create_link+0x1a8/0x950 [ 261.316609] ? ns_capable+0xe/0x10 [ 261.320167] ? __netlink_ns_capable+0xc3/0xf0 [ 261.325078] rtnl_newlink+0xb08/0x1390 [ 261.329107] ? rtnl_link_unregister+0x270/0x270 [ 261.333813] ? avc_has_perm_noaudit+0x236/0x400 [ 261.338593] ? lock_downgrade+0x7f0/0x7f0 [ 261.342933] rtnetlink_rcv_msg+0x34c/0x9e0 [ 261.347158] ? rtnl_bridge_getlink+0x760/0x760 [ 261.351857] ? find_held_lock+0x36/0x1d0 [ 261.355924] netlink_rcv_skb+0x133/0x370 [ 261.359977] ? rtnl_bridge_getlink+0x760/0x760 [ 261.364894] ? netlink_ack+0xa00/0xa00 [ 261.369235] ? netlink_deliver_tap+0x8e/0x920 [ 261.374290] rtnetlink_rcv+0x10/0x20 [ 261.378421] netlink_unicast+0x40b/0x600 [ 261.382772] ? netlink_attachskb+0x6d0/0x6d0 [ 261.387529] netlink_sendmsg+0x730/0xbd0 [ 261.391667] ? netlink_unicast+0x600/0x600 [ 261.395893] ? selinux_socket_sendmsg+0x31/0x40 [ 261.400918] ? security_socket_sendmsg+0x6a/0xa0 [ 261.405893] ? netlink_unicast+0x600/0x600 [ 261.410223] sock_sendmsg+0xb5/0xf0 [ 261.413873] SYSC_sendto+0x1e3/0x2c0 [ 261.417811] ? SYSC_connect+0x2a0/0x2a0 [ 261.422150] ? trace_hardirqs_off+0x10/0x10 [ 261.426466] ? mntput_no_expire+0xb1/0x760 [ 261.431205] ? lock_downgrade+0x7f0/0x7f0 [ 261.435350] ? find_held_lock+0x36/0x1d0 [ 261.439491] ? _raw_spin_unlock_irq+0x27/0x80 [ 261.444208] ? _raw_spin_unlock_irq+0x60/0x80 [ 261.448809] ? task_work_run+0xbf/0x170 [ 261.452807] ? do_syscall_64+0x4c/0x5b0 [ 261.456781] ? SyS_getpeername+0x10/0x10 [ 261.460830] SyS_sendto+0x9/0x10 [ 261.464568] do_syscall_64+0x1c7/0x5b0 [ 261.468476] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.473522] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.479257] RIP: 0033:0x414c43 [ 261.482430] RSP: 002b:00007ffe26a8e638 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 261.490279] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414c43 [ 261.498071] RDX: 0000000000000068 RSI: 0000000000a72250 RDI: 0000000000000003 [ 261.505659] RBP: 0000000000000000 R08: 00007ffe26a8e640 R09: 000000000000000c [ 261.513435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.521110] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003 [ 261.528741] CPU: 0 PID: 7824 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 261.536907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.537672] kworker/u4:5 invoked oom-killer: gfp_mask=0x14040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask= [ 261.546876] Call Trace: [ 261.546897] dump_stack+0xf7/0x13b [ 261.546908] warn_alloc.cold.110+0xa2/0x1be [ 261.546913] ? zone_watermark_ok_safe+0x260/0x260 [ 261.546926] ? __alloc_pages_direct_compact+0xc2/0x330 [ 261.546933] __alloc_pages_slowpath+0x2052/0x2650 [ 261.546948] ? trace_hardirqs_off+0x10/0x10 [ 261.546955] ? warn_alloc+0x100/0x100 [ 261.546961] ? get_page_from_freelist+0x1046/0x23b0 [ 261.546975] ? __might_sleep+0x93/0xb0 [ 261.546981] __alloc_pages_nodemask+0x60d/0x770 [ 261.546984] ? trace_hardirqs_off+0x10/0x10 [ 261.546991] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 261.546996] ? __alloc_pages_slowpath+0x2650/0x2650 [ 261.547003] ? wait_for_completion+0x440/0x440 [ 261.547014] alloc_pages_current+0xd6/0x1b0 [ 261.547025] ion_page_pool_alloc+0x102/0x180 [ 261.568561] (null) [ 261.568780] ion_system_heap_allocate+0x14e/0x930 [ 261.573760] , order=0, oom_score_adj=0 [ 261.579350] ? do_raw_spin_unlock+0x16a/0x250 [ 261.584276] kworker/u4:5 cpuset= [ 261.588666] ? ion_system_heap_free+0x270/0x270 [ 261.588677] ion_alloc+0x27f/0x770 [ 261.588689] ? ion_dma_buf_release+0x40/0x40 [ 261.592846] / [ 261.597650] ? kasan_check_write+0x14/0x20 [ 261.597659] ion_ioctl+0xe2/0x1b6 [ 261.597666] ? ion_alloc.cold.15+0x32/0x32 [ 261.597680] do_vfs_ioctl+0x180/0xfb0 [ 261.597687] ? __fget+0x1ad/0x2f0 [ 261.597695] ? ioctl_preallocate+0x1a0/0x1a0 [ 261.597705] ? __fget+0x1ca/0x2f0 [ 261.597717] ? security_file_ioctl+0x6a/0xa0 [ 261.601764] mems_allowed=0-1 [ 261.606365] ? SyS_clock_settime+0x1a0/0x1a0 [ 261.606373] ? security_file_ioctl+0x6a/0xa0 [ 261.712358] SyS_ioctl+0x74/0x80 [ 261.715871] ? do_vfs_ioctl+0xfb0/0xfb0 [ 261.719864] do_syscall_64+0x1c7/0x5b0 [ 261.724752] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.729773] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.735122] RIP: 0033:0x45af49 [ 261.738666] RSP: 002b:00007f318088ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.746400] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 261.753789] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 261.761222] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 261.768493] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f318088b6d4 [ 261.776190] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 261.783651] CPU: 1 PID: 7317 Comm: kworker/u4:5 Not tainted 4.14.172-syzkaller #0 [ 261.791371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.801966] Workqueue: writeback wb_workfn (flush-8:0) [ 261.807694] Call Trace: [ 261.810401] dump_stack+0xf7/0x13b [ 261.811274] warn_alloc_show_mem: 1 callbacks suppressed [ 261.811277] Mem-Info: [ 261.814067] dump_header+0x160/0x63f [ 261.819893] active_anon:5362 inactive_anon:196 isolated_anon:0 [ 261.819893] active_file:69 inactive_file:29 isolated_file:0 [ 261.819893] unevictable:0 dirty:46 writeback:0 unstable:0 [ 261.819893] slab_reclaimable:14234 slab_unreclaimable:97440 [ 261.819893] mapped:36 shmem:250 pagetables:428 bounce:0 [ 261.819893] free:13818 free_pcp:30 free_cma:0 [ 261.822483] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 261.822493] ? ___ratelimit+0x243/0x519 [ 261.822501] ? do_raw_spin_unlock+0x16a/0x250 [ 261.822511] oom_kill_process.cold.24+0xb/0xa1a [ 261.822515] ? out_of_memory+0x7f9/0x1030 [ 261.822523] ? lock_downgrade+0x7f0/0x7f0 [ 261.822533] out_of_memory+0x2b0/0x1030 [ 261.826237] Node 0 active_anon:21232kB inactive_anon:764kB active_file:188kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:184kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 261.858969] ? oom_killer_disable+0x1a0/0x1a0 [ 261.858980] ? __alloc_pages_slowpath+0xb69/0x2650 [ 261.858986] __alloc_pages_slowpath+0x1ef3/0x2650 [ 261.859000] ? warn_alloc+0x100/0x100 [ 261.859010] ? get_page_from_freelist+0x1046/0x23b0 [ 261.864151] Node 1 active_anon:216kB inactive_anon:20kB active_file:88kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 261.868205] ? __might_sleep+0x93/0xb0 [ 261.872795] Node 0 [ 261.877442] __alloc_pages_nodemask+0x60d/0x770 [ 261.881618] DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.885998] ? __alloc_pages_slowpath+0x2650/0x2650 [ 261.889973] lowmem_reserve[]: [ 261.917398] ? cache_grow_begin+0x331/0x3f0 [ 261.917409] cache_grow_begin+0x80/0x3f0 [ 261.917418] fallback_alloc+0x203/0x2c0 [ 261.917434] ____cache_alloc_node+0x1c7/0x1e0 [ 261.922009] 0 [ 261.926893] kmem_cache_alloc+0x1f8/0x790 [ 261.931736] 2570 [ 261.935519] ext4_init_io_end+0x1e/0x100 [ 261.940536] 2570 [ 261.967893] ext4_writepages+0xf6b/0x2d50 [ 261.967910] ? ext4_mark_inode_dirty+0x7b0/0x7b0 [ 261.967919] ? trace_hardirqs_on+0x10/0x10 [ 261.967924] ? __lock_acquire+0x6a4/0x4500 [ 261.967935] ? trace_hardirqs_off+0x10/0x10 [ 261.971830] 2570 [ 261.974033] ? trace_hardirqs_on+0x10/0x10 [ 261.978674] 2570 [ 262.004202] ? __ext4_get_inode_loc+0x32b/0xe30 [ 262.004216] do_writepages+0xba/0x220 [ 262.004225] ? find_held_lock+0x36/0x1d0 [ 262.004228] ? do_writepages+0xba/0x220 [ 262.004235] ? page_writeback_cpu_online+0x10/0x10 [ 262.004239] ? __lock_is_held+0xb5/0x140 [ 262.004253] __writeback_single_inode+0xc6/0xea0 [ 262.009251] Node 0 [ 262.012346] ? _raw_spin_unlock+0x2c/0x50 [ 262.012352] ? wbc_attach_and_unlock_inode+0x45d/0x820 [ 262.012358] writeback_sb_inodes+0x42e/0xec0 [ 262.012369] ? wbc_detach_inode+0x7c0/0x7c0 [ 262.016687] DMA32 free:18144kB min:36384kB low:45480kB high:54576kB active_anon:21232kB inactive_anon:764kB active_file:648kB inactive_file:428kB unevictable:0kB writepending:184kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1588kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 262.020731] ? trylock_super+0x16/0xc0 [ 262.020743] ? down_read_trylock+0x5d/0xd0 [ 262.020746] ? trylock_super+0x16/0xc0 [ 262.020754] __writeback_inodes_wb+0xe3/0x1b0 [ 262.020763] wb_writeback+0x61b/0xa30 [ 262.024734] lowmem_reserve[]: [ 262.029223] ? writeback_inodes_wb.constprop.49+0x150/0x150 [ 262.031044] 0 [ 262.035159] wb_workfn+0x2c7/0xe10 [ 262.037205] 0 [ 262.041256] ? trace_hardirqs_off+0x10/0x10 [ 262.041267] ? inode_wait_for_writeback+0x30/0x30 [ 262.041270] ? __lock_is_held+0xb5/0x140 [ 262.041285] process_one_work+0x79e/0x16c0 [ 262.043330] 0 [ 262.047468] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 262.052368] 0 [ 262.056570] worker_thread+0xcc/0xee0 [ 262.061049] 0 [ 262.065351] kthread+0x338/0x400 [ 262.067391] Node 0 [ 262.071639] ? process_one_work+0x16c0/0x16c0 [ 262.071647] ? kthread_create_on_node+0xa0/0xa0 [ 262.071657] ret_from_fork+0x24/0x30 [ 262.081629] Mem-Info: [ 262.089398] syz-executor.1: [ 262.090662] active_anon:5362 inactive_anon:196 isolated_anon:0 [ 262.090662] active_file:39 inactive_file:27 isolated_file:0 [ 262.090662] unevictable:0 dirty:32 writeback:18 unstable:0 [ 262.090662] slab_reclaimable:14234 slab_unreclaimable:97441 [ 262.090662] mapped:14 shmem:250 pagetables:428 bounce:0 [ 262.090662] free:13724 free_pcp:25 free_cma:0 [ 262.123616] page allocation failure: order:4 [ 262.130781] Node 0 active_anon:21232kB inactive_anon:764kB active_file:104kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:112kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 262.157337] syz-executor.4: [ 262.159520] Node 1 active_anon:216kB inactive_anon:20kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 262.162093] syz-executor.2: [ 262.165965] Node 0 [ 262.175483] page allocation failure: order:0 [ 262.185369] DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 262.188647] page allocation failure: order:0 [ 262.192576] lowmem_reserve[]: [ 262.215222] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 262.216672] syz-executor.4: [ 262.220489] lowmem_reserve[]: [ 262.222322] syz-executor.3: [ 262.225679] 0 [ 262.227931] page allocation failure: order:0 [ 262.250272] 0 [ 262.284661] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 262.316951] page allocation failure: order:0 [ 262.346804] 0 [ 262.357878] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 262.382073] 2570 [ 262.389519] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 262.416325] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 262.421568] (null) [ 262.425487] (null) [ 262.426685] syz-executor.2 cpuset= [ 262.438649] (null) [ 262.440405] (null) [ 262.447815] syz-executor.4 cpuset= [ 262.449303] syz-executor.1 cpuset= [ 262.456497] syz-executor.3 cpuset= [ 262.465385] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 262.469180] 2570 [ 262.472103] (null) [ 262.472108] syz-executor.4 cpuset=syz4 [ 262.474249] 2570 [ 262.476382] mems_allowed=0-1 [ 262.476390] CPU: 0 PID: 7830 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 262.479903] 2570 [ 262.483565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.483569] Call Trace: [ 262.483589] dump_stack+0xf7/0x13b [ 262.483600] warn_alloc.cold.110+0xa2/0x1be [ 262.483605] ? zone_watermark_ok_safe+0x260/0x260 [ 262.483612] ? usleep_range+0x120/0x120 [ 262.483621] ? rcu_read_lock_sched_held+0x108/0x120 [ 262.483629] ? call_timer_fn+0x570/0x570 [ 262.483640] __alloc_pages_slowpath+0x2052/0x2650 [ 262.483654] ? warn_alloc+0x100/0x100 [ 262.483660] ? get_page_from_freelist+0x1046/0x23b0 [ 262.483676] ? __might_sleep+0x93/0xb0 [ 262.483686] __alloc_pages_nodemask+0x60d/0x770 [ 262.483694] ? __alloc_pages_slowpath+0x2650/0x2650 [ 262.483701] ? wait_for_completion+0x440/0x440 [ 262.483712] alloc_pages_current+0xd6/0x1b0 [ 262.483723] ion_page_pool_alloc+0x102/0x180 [ 262.490085] syz2 [ 262.494383] ion_system_heap_allocate+0x14e/0x930 [ 262.496444] mems_allowed=0-1 [ 262.498576] ? ion_system_heap_free+0x270/0x270 [ 262.502625] syz4 [ 262.504511] ion_alloc+0x216/0x770 [ 262.507616] mems_allowed=0-1 [ 262.515477] ? ion_dma_buf_release+0x40/0x40 [ 262.515489] ? kasan_check_write+0x14/0x20 [ 262.515495] ion_ioctl+0xe2/0x1b6 [ 262.515500] ? ion_alloc.cold.15+0x32/0x32 [ 262.515511] do_vfs_ioctl+0x180/0xfb0 [ 262.515519] ? __fget+0x1ad/0x2f0 [ 262.515525] ? ioctl_preallocate+0x1a0/0x1a0 [ 262.517595] syz3 [ 262.526922] ? __fget+0x1ca/0x2f0 [ 262.533016] ? security_file_ioctl+0x6a/0xa0 [ 262.537336] Node 0 [ 262.542180] ? SyS_clock_settime+0x1a0/0x1a0 [ 262.542185] ? security_file_ioctl+0x6a/0xa0 [ 262.542195] SyS_ioctl+0x74/0x80 [ 262.542202] ? do_vfs_ioctl+0xfb0/0xfb0 [ 262.542209] do_syscall_64+0x1c7/0x5b0 [ 262.542213] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.542225] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.542231] RIP: 0033:0x45af49 [ 262.542234] RSP: 002b:00007fb6b51d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.542239] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 262.542242] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 262.542245] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 262.542247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b51d46d4 [ 262.542250] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 262.546994] syz1 [ 262.552781] CPU: 1 PID: 7819 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 262.558477] mems_allowed=0-1 [ 262.560187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.560192] Call Trace: [ 262.560210] dump_stack+0xf7/0x13b [ 262.560221] warn_alloc.cold.110+0xa2/0x1be [ 262.560227] ? zone_watermark_ok_safe+0x260/0x260 [ 262.570054] 0 [ 262.572988] ? usleep_range+0x120/0x120 [ 262.572999] ? rcu_read_lock_sched_held+0x108/0x120 [ 262.577657] 0 [ 262.582714] ? call_timer_fn+0x570/0x570 [ 262.582729] __alloc_pages_slowpath+0x2052/0x2650 [ 262.582744] ? warn_alloc+0x100/0x100 [ 262.582750] ? get_page_from_freelist+0x1046/0x23b0 [ 262.582763] ? __might_sleep+0x93/0xb0 [ 262.582769] __alloc_pages_nodemask+0x60d/0x770 [ 262.582776] ? __alloc_pages_slowpath+0x2650/0x2650 [ 262.582788] ? wait_for_completion+0x440/0x440 [ 262.600057] 0 [ 262.603663] alloc_pages_current+0xd6/0x1b0 [ 262.611522] ion_page_pool_alloc+0x102/0x180 [ 262.611529] ion_system_heap_allocate+0x14e/0x930 [ 262.611537] ? do_raw_spin_unlock+0x16a/0x250 [ 262.611544] ? ion_system_heap_free+0x270/0x270 [ 262.611554] ion_alloc+0x27f/0x770 [ 262.630051] Node 1 [ 262.632254] ? ion_dma_buf_release+0x40/0x40 [ 262.636467] Normal free:26664kB min:53504kB low:66880kB high:80256kB active_anon:216kB inactive_anon:20kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:256kB pagetables:124kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 262.640254] ? kasan_check_write+0x14/0x20 [ 262.640261] ion_ioctl+0xe2/0x1b6 [ 262.640267] ? ion_alloc.cold.15+0x32/0x32 [ 262.640279] do_vfs_ioctl+0x180/0xfb0 [ 262.660051] lowmem_reserve[]: [ 262.660114] ? __fget+0x1ad/0x2f0 [ 262.664511] 0 [ 262.668922] ? ioctl_preallocate+0x1a0/0x1a0 [ 262.690056] 0 [ 262.690420] ? __fget+0x1ca/0x2f0 [ 262.693588] 0 0 [ 262.701296] ? security_file_ioctl+0x6a/0xa0 [ 262.701303] ? SyS_clock_settime+0x1a0/0x1a0 [ 262.701306] ? security_file_ioctl+0x6a/0xa0 [ 262.701315] SyS_ioctl+0x74/0x80 [ 262.701322] ? do_vfs_ioctl+0xfb0/0xfb0 [ 262.750100] 0 [ 262.751729] do_syscall_64+0x1c7/0x5b0 [ 262.793140] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.793222] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.798002] Node 0 [ 262.801804] RIP: 0033:0x45af49 [ 262.801806] RSP: 002b:00007f4373931c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.801812] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 262.801815] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 262.801817] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 262.801820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43739326d4 [ 262.801822] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 262.810489] mems_allowed=0-1 [ 262.819855] CPU: 0 PID: 7822 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 262.850070] DMA32 free:17728kB min:36384kB low:45480kB high:54576kB active_anon:21232kB inactive_anon:764kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:112kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1588kB bounce:0kB free_pcp:140kB local_pcp:96kB free_cma:0kB [ 262.853403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.855629] lowmem_reserve[]: [ 262.860026] Call Trace: [ 262.860044] dump_stack+0xf7/0x13b [ 262.860056] warn_alloc.cold.110+0xa2/0x1be [ 262.860061] ? zone_watermark_ok_safe+0x260/0x260 [ 262.860075] ? __alloc_pages_direct_compact+0xc2/0x330 [ 262.860082] __alloc_pages_slowpath+0x2052/0x2650 [ 262.860102] ? trace_hardirqs_off+0x10/0x10 [ 262.990077] 0 [ 262.994732] ? warn_alloc+0x100/0x100 [ 263.030125] 0 [ 263.048630] ? get_page_from_freelist+0x1046/0x23b0 [ 263.048646] ? __might_sleep+0x93/0xb0 [ 263.048652] __alloc_pages_nodemask+0x60d/0x770 [ 263.048661] ? trace_hardirqs_off+0x10/0x10 [ 263.048668] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 263.048674] ? __alloc_pages_slowpath+0x2650/0x2650 [ 263.048681] ? wait_for_completion+0x440/0x440 [ 263.048690] alloc_pages_current+0xd6/0x1b0 [ 263.048699] ion_page_pool_alloc+0x102/0x180 [ 263.048705] ion_system_heap_allocate+0x14e/0x930 [ 263.048712] ? do_raw_spin_unlock+0x16a/0x250 [ 263.048720] ? ion_system_heap_free+0x270/0x270 [ 263.048729] ion_alloc+0x27f/0x770 [ 263.048737] ? ion_dma_buf_release+0x40/0x40 [ 263.048747] ? kasan_check_write+0x14/0x20 [ 263.048753] ion_ioctl+0xe2/0x1b6 [ 263.048758] ? ion_alloc.cold.15+0x32/0x32 [ 263.048771] do_vfs_ioctl+0x180/0xfb0 [ 263.150063] 0 [ 263.153404] ? __fget+0x1ad/0x2f0 [ 263.157447] 0 [ 263.161866] ? ioctl_preallocate+0x1a0/0x1a0 [ 263.161876] ? __fget+0x1ca/0x2f0 [ 263.161888] ? security_file_ioctl+0x6a/0xa0 [ 263.161894] ? SyS_clock_settime+0x1a0/0x1a0 [ 263.161898] ? security_file_ioctl+0x6a/0xa0 [ 263.161904] SyS_ioctl+0x74/0x80 [ 263.161910] ? do_vfs_ioctl+0xfb0/0xfb0 [ 263.161917] do_syscall_64+0x1c7/0x5b0 [ 263.161923] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.200135] 0 [ 263.201423] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 263.209308] RIP: 0033:0x45af49 [ 263.232235] RSP: 002b:00007f31808ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.239931] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 263.247208] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 263.254473] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 263.260143] Node 0 [ 263.261750] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31808cd6d4 [ 263.261762] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.263980] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 263.290095] DMA: [ 263.297933] CPU: 1 PID: 7828 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 263.314300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.323660] Call Trace: [ 263.326257] dump_stack+0xf7/0x13b [ 263.329801] warn_alloc.cold.110+0xa2/0x1be [ 263.334134] ? zone_watermark_ok_safe+0x260/0x260 [ 263.334641] 1*4kB [ 263.338978] ? usleep_range+0x120/0x120 [ 263.338990] ? rcu_read_lock_sched_held+0x108/0x120 [ 263.338997] ? call_timer_fn+0x570/0x570 [ 263.339014] __alloc_pages_slowpath+0x2052/0x2650 [ 263.339030] ? warn_alloc+0x100/0x100 [ 263.339037] ? get_page_from_freelist+0x1046/0x23b0 [ 263.339053] ? __might_sleep+0x93/0xb0 [ 263.339059] __alloc_pages_nodemask+0x60d/0x770 [ 263.339067] ? __alloc_pages_slowpath+0x2650/0x2650 [ 263.339075] ? wait_for_completion+0x440/0x440 [ 263.339083] ? ion_page_pool_alloc+0x8f/0x180 [ 263.339095] alloc_pages_current+0xd6/0x1b0 [ 263.339103] ion_page_pool_alloc+0x102/0x180 [ 263.339109] ion_system_heap_allocate+0x14e/0x930 [ 263.339118] ? ion_system_heap_free+0x270/0x270 [ 263.339129] ion_alloc+0x216/0x770 [ 263.339139] ? ion_dma_buf_release+0x40/0x40 [ 263.339150] ? kasan_check_write+0x14/0x20 [ 263.339156] ion_ioctl+0xe2/0x1b6 [ 263.339161] ? ion_alloc.cold.15+0x32/0x32 [ 263.339175] do_vfs_ioctl+0x180/0xfb0 [ 263.339183] ? __fget+0x1ad/0x2f0 [ 263.361485] (U) [ 263.363143] ? ioctl_preallocate+0x1a0/0x1a0 [ 263.363156] ? __fget+0x1ca/0x2f0 [ 263.363168] ? security_file_ioctl+0x6a/0xa0 [ 263.363174] ? SyS_clock_settime+0x1a0/0x1a0 [ 263.363179] ? security_file_ioctl+0x6a/0xa0 [ 263.363186] SyS_ioctl+0x74/0x80 [ 263.363193] ? do_vfs_ioctl+0xfb0/0xfb0 [ 263.363201] do_syscall_64+0x1c7/0x5b0 [ 263.363207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.363220] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 263.363226] RIP: 0033:0x45af49 [ 263.363229] RSP: 002b:00007fb6b5215c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.380117] 1*8kB [ 263.381789] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 263.386535] (U) [ 263.391045] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 263.391056] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 263.391059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b52166d4 [ 263.391061] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 263.395372] CPU: 1 PID: 7812 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 263.416079] 32*16kB [ 263.417311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.417315] Call Trace: [ 263.417330] dump_stack+0xf7/0x13b [ 263.417341] warn_alloc.cold.110+0xa2/0x1be [ 263.417347] ? zone_watermark_ok_safe+0x260/0x260 [ 263.417353] ? usleep_range+0x120/0x120 [ 263.417364] ? rcu_read_lock_sched_held+0x108/0x120 [ 263.450148] (UE) [ 263.453096] ? call_timer_fn+0x570/0x570 [ 263.457485] 22*32kB [ 263.461891] __alloc_pages_slowpath+0x2052/0x2650 [ 263.461906] ? warn_alloc+0x100/0x100 [ 263.461912] ? get_page_from_freelist+0x1046/0x23b0 [ 263.461927] ? __might_sleep+0x93/0xb0 [ 263.500112] (U) [ 263.504120] __alloc_pages_nodemask+0x60d/0x770 [ 263.506072] 3*64kB [ 263.513332] ? __alloc_pages_slowpath+0x2650/0x2650 [ 263.513343] ? wait_for_completion+0x440/0x440 [ 263.513353] alloc_pages_current+0xd6/0x1b0 [ 263.513364] ion_page_pool_alloc+0x102/0x180 [ 263.513370] ion_system_heap_allocate+0x14e/0x930 [ 263.560162] (UE) [ 263.561126] ? do_raw_spin_unlock+0x16a/0x250 [ 263.565440] 2*128kB [ 263.570282] ? ion_system_heap_free+0x270/0x270 [ 263.570291] ion_alloc+0x27f/0x770 [ 263.570300] ? ion_dma_buf_release+0x40/0x40 [ 263.570311] ? kasan_check_write+0x14/0x20 [ 263.570316] ion_ioctl+0xe2/0x1b6 [ 263.570321] ? ion_alloc.cold.15+0x32/0x32 [ 263.570335] do_vfs_ioctl+0x180/0xfb0 [ 263.600105] (UE) [ 263.601442] ? __fget+0x1ad/0x2f0 [ 263.605336] 2*256kB [ 263.607302] ? ioctl_preallocate+0x1a0/0x1a0 [ 263.640075] (UE) [ 263.644249] ? __fget+0x1ca/0x2f0 [ 263.646549] 2*512kB [ 263.651225] ? security_file_ioctl+0x6a/0xa0 [ 263.651231] ? SyS_clock_settime+0x1a0/0x1a0 [ 263.651234] ? security_file_ioctl+0x6a/0xa0 [ 263.651243] SyS_ioctl+0x74/0x80 [ 263.651250] ? do_vfs_ioctl+0xfb0/0xfb0 [ 263.651257] do_syscall_64+0x1c7/0x5b0 [ 263.651261] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.651273] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 263.651281] RIP: 0033:0x45af49 [ 263.680085] (UE) [ 263.680492] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 [ 263.682817] 1*1024kB [ 263.687919] ORIG_RAX: 0000000000000010 [ 263.687924] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 263.689989] (E) [ 263.693429] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 263.693433] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 263.693436] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 263.693438] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 263.694823] lowmem_reserve[]: [ 263.716126] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 263.717922] 0 [ 263.732364] team0: Port device team_slave_1 added [ 263.735191] 0 [ 263.756585] 3*2048kB [ 263.758866] 0 [ 263.774121] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 263.781658] warn_alloc_show_mem: 2 callbacks suppressed [ 263.781661] Mem-Info: [ 263.814296] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 263.818782] 0 [ 263.823777] (UME) [ 263.826080] 0 [ 263.837465] active_anon:5362 inactive_anon:196 isolated_anon:0 [ 263.837465] active_file:506 inactive_file:660 isolated_file:0 [ 263.837465] unevictable:0 dirty:53 writeback:0 unstable:0 [ 263.837465] slab_reclaimable:14227 slab_unreclaimable:97382 [ 263.837465] mapped:443 shmem:250 pagetables:428 bounce:0 [ 263.837465] free:49499 free_pcp:705 free_cma:0 [ 263.852585] 0*4096kB [ 263.872507] Node 1 Normal free:41488kB min:53504kB low:66880kB high:80256kB active_anon:216kB inactive_anon:20kB active_file:28kB inactive_file:428kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:256kB pagetables:124kB bounce:0kB free_pcp:1388kB local_pcp:740kB free_cma:0kB [ 263.872520] lowmem_reserve[]: 0 0 0 0 0 [ 263.872536] Node 0 DMA: 2*4kB (U) 8*8kB (U) 32*16kB (UE) 22*32kB (U) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10440kB [ 263.872616] Node 0 DMA32: 11372*4kB (UME) 4763*8kB (UM) 3587*16kB (UME) 239*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 148632kB [ 263.872667] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 263.872705] Node 1 Normal: 127*4kB (UM) 1547*8kB (U) 245*16kB (UM) 18*32kB (UM) 9*64kB (M) 6*128kB (UM) 9*256kB (UM) 40*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 41508kB [ 263.872768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 263.872772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 263.872775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 263.872779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 263.872783] 1406 total pagecache pages [ 263.872793] 0 pages in swap cache [ 263.872796] Swap cache stats: add 0, delete 0, find 0/0 [ 263.872798] Free swap = 0kB [ 263.872801] Total swap = 0kB [ 263.872878] 1965979 pages RAM [ 263.953506] = 10380kB [ 263.963518] Node 0 active_anon:21232kB inactive_anon:764kB active_file:1996kB inactive_file:2212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1508kB dirty:212kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 263.983079] device hsr_slave_0 entered promiscuous mode [ 263.994043] Node 1 active_anon:216kB inactive_anon:20kB active_file:28kB inactive_file:428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:264kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 264.020117] Node 0 [ 264.030120] Node 0 [ 264.085827] 0 pages HighMem/MovableOnly [ 264.094403] DMA32: 14522*4kB (UME) 4841*8kB (UME) 6201*16kB (UME) 712*32kB (UME) 91*64kB (U) 15*128kB (UM) 15*256kB (UE) 11*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 236032kB [ 264.100142] 335868 pages reserved [ 264.120464] device hsr_slave_1 entered promiscuous mode [ 264.134124] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 264.150107] 0 pages cma reserved [ 264.150411] DMA free:10440kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.153569] Out of memory: Kill process 7217 (syz-execprog) score 1 or sacrifice child [ 264.193031] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 264.210448] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 264.211014] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 264.215552] Node 0 [ 264.230088] Node 1 [ 264.230137] DMA32 free:342600kB min:36384kB low:45480kB high:54576kB active_anon:21232kB inactive_anon:764kB active_file:2032kB inactive_file:2212kB unevictable:0kB writepending:272kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1588kB bounce:0kB free_pcp:1284kB local_pcp:620kB free_cma:0kB [ 264.232406] Normal: [ 264.234584] lowmem_reserve[]: [ 264.280957] Killed process 7688 (syz-executor.1) total-vm:37644kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 264.294519] 1565*4kB (UM) 1449*8kB (U) 851*16kB (UM) 279*32kB (UM) 408*64kB (UM) 59*128kB (UM) 74*256kB (UM) 12*512kB (UM) 14*1024kB (U) 3*2048kB (U) 0*4096kB = 119628kB [ 264.340110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.349046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 264.359030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.369740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 264.379604] 1479 total pagecache pages [ 264.383958] 0 pages in swap cache [ 264.392408] 0 0 0 0 0 [ 264.393571] Swap cache stats: add 0, delete 0, find 0/0 [ 264.394946] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.394958] lowmem_reserve[]: 0 0 0 0 0 [ 264.394978] Node 1 Normal free:188072kB min:53504kB low:66880kB high:80256kB active_anon:216kB inactive_anon:20kB active_file:40kB inactive_file:440kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:256kB pagetables:124kB bounce:0kB free_pcp:1364kB local_pcp:740kB free_cma:0kB [ 264.394989] lowmem_reserve[]: 0 0 0 0 0 [ 264.395006] Node 0 DMA: 2*4kB (U) 8*8kB (U) 32*16kB (UE) 22*32kB (U) 4*64kB (UE) 2*128kB (UE) 2*256kB [ 264.409263] Free swap = 0kB [ 264.486493] Total swap = 0kB 2020/03/09 03:19:34 executed programs: 76 [ 264.498648] 1965979 pages RAM [ 264.505129] 0 pages HighMem/MovableOnly [ 264.509919] 335868 pages reserved [ 264.516535] 0 pages cma reserved [ 264.517311] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 264.552483] (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10504kB [ 264.594577] Node 0 DMA32: 19598*4kB (UM) 6499*8kB (UM) 6597*16kB (U) 999*32kB (UE) 367*64kB (UM) 358*128kB (U) 23*256kB (UM) 9*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 347712kB [ 264.643558] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 264.666211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.686339] Node 1 Normal: 6591*4kB (UM) 1588*8kB (UM) 970*16kB (UM) 388*32kB (UM) 880*64kB (UM) 93*128kB (UM) 75*256kB (UM) 12*512kB (UM) 56*1024kB (U) 6*2048kB (U) 0*4096kB = 230204kB [ 264.708671] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 264.728777] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 264.735396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.746261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.756386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.770136] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 264.776393] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.787489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 264.798529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.816154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 264.841203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 264.849848] 2453 total pagecache pages [ 264.856814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.866514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.890098] 0 pages in swap cache [ 264.892950] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.893579] Swap cache stats: add 0, delete 0, find 0/0 [ 264.900134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.915393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 264.934592] Free swap = 0kB [ 264.934804] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 264.940357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.956437] Total swap = 0kB [ 264.959547] 1965979 pages RAM [ 264.980120] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 264.984601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.985535] CPU: 0 PID: 7830 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 265.000669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.001549] 0 pages HighMem/MovableOnly [ 265.010016] Call Trace: [ 265.010034] dump_stack+0xf7/0x13b [ 265.010044] warn_alloc.cold.110+0xa2/0x1be [ 265.010049] ? zone_watermark_ok_safe+0x260/0x260 [ 265.010062] ? __alloc_pages_direct_compact+0xc2/0x330 [ 265.010068] __alloc_pages_slowpath+0x2052/0x2650 [ 265.010082] ? trace_hardirqs_off+0x10/0x10 [ 265.010090] ? warn_alloc+0x100/0x100 [ 265.010097] ? get_page_from_freelist+0x1046/0x23b0 [ 265.010112] ? __might_sleep+0x93/0xb0 [ 265.010117] __alloc_pages_nodemask+0x60d/0x770 [ 265.010123] ? __alloc_pages_slowpath+0x2650/0x2650 [ 265.010132] ? wait_for_completion+0x440/0x440 [ 265.010144] alloc_pages_current+0xd6/0x1b0 [ 265.010155] ion_page_pool_alloc+0x102/0x180 [ 265.010161] ion_system_heap_allocate+0x14e/0x930 [ 265.010167] ? do_raw_spin_unlock+0x16a/0x250 [ 265.010173] ? ion_system_heap_free+0x270/0x270 [ 265.010184] ion_alloc+0x27f/0x770 [ 265.010191] ? ion_dma_buf_release+0x40/0x40 [ 265.010201] ? kasan_check_write+0x14/0x20 [ 265.010208] ion_ioctl+0xe2/0x1b6 [ 265.010212] ? ion_alloc.cold.15+0x32/0x32 [ 265.010223] do_vfs_ioctl+0x180/0xfb0 [ 265.010229] ? __fget+0x1ad/0x2f0 [ 265.010235] ? ioctl_preallocate+0x1a0/0x1a0 [ 265.010244] ? __fget+0x1ca/0x2f0 [ 265.010255] ? security_file_ioctl+0x6a/0xa0 [ 265.010260] ? SyS_clock_settime+0x1a0/0x1a0 [ 265.010264] ? security_file_ioctl+0x6a/0xa0 [ 265.010269] SyS_ioctl+0x74/0x80 [ 265.010274] ? do_vfs_ioctl+0xfb0/0xfb0 [ 265.010280] do_syscall_64+0x1c7/0x5b0 [ 265.010285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.010296] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.010301] RIP: 0033:0x45af49 [ 265.010305] RSP: 002b:00007fb6b51d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.010311] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 265.010314] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 265.010316] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 265.010319] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b51d46d4 [ 265.010322] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 265.040105] warn_alloc_show_mem: 3 callbacks suppressed [ 265.040108] Mem-Info: [ 265.064047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.090137] active_anon:5362 inactive_anon:196 isolated_anon:0 [ 265.090137] active_file:682 inactive_file:1516 isolated_file:0 [ 265.090137] unevictable:0 dirty:18 writeback:0 unstable:0 [ 265.090137] slab_reclaimable:14253 slab_unreclaimable:97741 [ 265.090137] mapped:1302 shmem:250 pagetables:428 bounce:0 [ 265.090137] free:38081 free_pcp:73 free_cma:0 [ 265.090149] Node 0 active_anon:21232kB inactive_anon:764kB active_file:2632kB inactive_file:5976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5136kB dirty:72kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 265.133862] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.160096] 335868 pages reserved [ 265.161298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.166416] 0 pages cma reserved [ 265.190167] Node 1 active_anon:188kB inactive_anon:12kB active_file:92kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:4kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 265.196094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 265.200111] Node 0 [ 265.207881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.240075] DMA free:10440kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.341438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 265.346395] lowmem_reserve[]: [ 265.362329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.381074] 0 2570 2570 2570 2570 [ 265.401846] Node 0 DMA32 free:18168kB min:36384kB low:45480kB high:54576kB active_anon:21156kB inactive_anon:772kB active_file:2664kB inactive_file:5996kB unevictable:0kB writepending:32kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6880kB pagetables:1508kB bounce:0kB free_pcp:276kB local_pcp:120kB free_cma:0kB [ 265.470727] lowmem_reserve[]: 0 0 0 0 0 [ 265.480296] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.563034] lowmem_reserve[]: 0 0 0 0 0 [ 265.567187] Node 1 Normal free:262868kB min:53504kB low:66880kB high:80256kB active_anon:164kB inactive_anon:12kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:88kB bounce:0kB free_pcp:160kB local_pcp:140kB free_cma:0kB [ 265.670111] lowmem_reserve[]: 0 0 0 0 0 [ 265.674159] Node 0 DMA: 1*4kB (U) 1*8kB (U) 32*16kB (UE) 22*32kB (U) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10380kB [ 265.690145] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 560*32kB (UE) 936*64kB (UM) 78*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 88832kB [ 265.730748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 265.770133] Node 1 Normal: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 0*512kB 236*1024kB (U) 8*2048kB (U) 0*4096kB = 258468kB [ 265.790374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.820140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 265.828895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.850397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 265.859073] 2429 total pagecache pages [ 265.876323] 0 pages in swap cache [ 265.879845] Swap cache stats: add 0, delete 0, find 0/0 [ 265.900413] Free swap = 0kB [ 265.903478] Total swap = 0kB [ 265.906538] 1965979 pages RAM [ 265.909698] 0 pages HighMem/MovableOnly [ 265.940125] 335868 pages reserved [ 265.943622] 0 pages cma reserved [ 265.948211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 265.970585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.990852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.026766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 266.034101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.051388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.087611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.107507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 266.124418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.156480] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 266.199460] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 266.222725] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 266.229617] CPU: 1 PID: 7828 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 266.237719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.247393] Call Trace: [ 266.249993] dump_stack+0xf7/0x13b [ 266.253803] warn_alloc.cold.110+0xa2/0x1be [ 266.258322] ? zone_watermark_ok_safe+0x260/0x260 [ 266.263979] ? __alloc_pages_direct_compact+0xc2/0x330 [ 266.269851] __alloc_pages_slowpath+0x2052/0x2650 [ 266.274730] ? trace_hardirqs_off+0x10/0x10 [ 266.279150] ? warn_alloc+0x100/0x100 [ 266.282955] ? get_page_from_freelist+0x1046/0x23b0 [ 266.287980] ? __might_sleep+0x93/0xb0 [ 266.291971] __alloc_pages_nodemask+0x60d/0x770 [ 266.296641] ? trace_hardirqs_off+0x10/0x10 [ 266.300963] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 266.305975] ? __alloc_pages_slowpath+0x2650/0x2650 [ 266.311061] ? wait_for_completion+0x440/0x440 [ 266.315632] alloc_pages_current+0xd6/0x1b0 [ 266.319981] ion_page_pool_alloc+0x102/0x180 [ 266.324399] ion_system_heap_allocate+0x14e/0x930 [ 266.329239] ? do_raw_spin_unlock+0x16a/0x250 [ 266.333725] ? ion_system_heap_free+0x270/0x270 [ 266.338484] ion_alloc+0x27f/0x770 [ 266.342031] ? ion_dma_buf_release+0x40/0x40 [ 266.346436] ? kasan_check_write+0x14/0x20 [ 266.351022] ion_ioctl+0xe2/0x1b6 [ 266.354480] ? ion_alloc.cold.15+0x32/0x32 [ 266.358711] do_vfs_ioctl+0x180/0xfb0 [ 266.363293] ? __fget+0x1ad/0x2f0 [ 266.366734] ? ioctl_preallocate+0x1a0/0x1a0 [ 266.371128] ? __fget+0x1ca/0x2f0 [ 266.374569] ? security_file_ioctl+0x6a/0xa0 [ 266.379862] ? SyS_clock_settime+0x1a0/0x1a0 [ 266.384391] ? security_file_ioctl+0x6a/0xa0 [ 266.388852] SyS_ioctl+0x74/0x80 [ 266.392228] ? do_vfs_ioctl+0xfb0/0xfb0 [ 266.396700] do_syscall_64+0x1c7/0x5b0 [ 266.400689] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.405539] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 266.410731] RIP: 0033:0x45af49 [ 266.413924] RSP: 002b:00007fb6b5215c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.421633] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 266.428921] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 266.436281] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 266.443918] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b52166d4 [ 266.451297] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 266.467705] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 266.479781] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 266.486024] Mem-Info: [ 266.496466] active_anon:5330 inactive_anon:196 isolated_anon:0 [ 266.496466] active_file:14 inactive_file:2 isolated_file:0 [ 266.496466] unevictable:0 dirty:12 writeback:0 unstable:0 [ 266.496466] slab_reclaimable:14280 slab_unreclaimable:97719 [ 266.496466] mapped:16 shmem:250 pagetables:399 bounce:0 [ 266.496466] free:13808 free_pcp:3 free_cma:0 [ 266.520092] rs:main Q:Reg cpuset= [ 266.536222] syz-executor.1: [ 266.541995] syz-executor.4 cpuset= [ 266.542247] page allocation failure: order:0 [ 266.546669] syz4 [ 266.554639] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 266.557167] syz-executor.1 cpuset= [ 266.557236] (null) [ 266.566102] / [ 266.569644] syz-executor.1 cpuset= [ 266.572139] syz1 [ 266.575803] syz1 [ 266.575824] mems_allowed=0-1 [ 266.577773] mems_allowed=0-1 [ 266.577783] CPU: 1 PID: 7824 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 266.580061] mems_allowed=0-1 [ 266.583018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.583021] Call Trace: [ 266.600105] mems_allowed=0-1 [ 266.606835] dump_stack+0xf7/0x13b [ 266.616512] warn_alloc.cold.110+0xa2/0x1be [ 266.620870] ? zone_watermark_ok_safe+0x260/0x260 [ 266.626009] ? usleep_range+0x120/0x120 [ 266.630085] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 266.635414] ? call_timer_fn+0x570/0x570 [ 266.639674] ? unreserve_highatomic_pageblock+0x315/0x450 [ 266.645687] __alloc_pages_slowpath+0x2052/0x2650 [ 266.650643] ? warn_alloc+0x100/0x100 [ 266.655432] ? get_page_from_freelist+0x1046/0x23b0 [ 266.660459] ? __might_sleep+0x93/0xb0 [ 266.664367] __alloc_pages_nodemask+0x60d/0x770 [ 266.669052] ? __alloc_pages_slowpath+0x2650/0x2650 [ 266.674073] ? wait_for_completion+0x440/0x440 [ 266.678848] alloc_pages_current+0xd6/0x1b0 [ 266.683183] ion_page_pool_alloc+0x102/0x180 [ 266.687577] ion_system_heap_allocate+0x14e/0x930 [ 266.692736] ? do_raw_spin_unlock+0x16a/0x250 [ 266.697257] ? ion_system_heap_free+0x270/0x270 [ 266.702212] ion_alloc+0x27f/0x770 [ 266.705758] ? ion_dma_buf_release+0x40/0x40 [ 266.710156] ? kasan_check_write+0x14/0x20 [ 266.714672] ion_ioctl+0xe2/0x1b6 [ 266.718530] ? ion_alloc.cold.15+0x32/0x32 [ 266.723510] do_vfs_ioctl+0x180/0xfb0 [ 266.727752] ? __fget+0x1ad/0x2f0 [ 266.731205] ? ioctl_preallocate+0x1a0/0x1a0 [ 266.735625] ? __fget+0x1ca/0x2f0 [ 266.739103] ? security_file_ioctl+0x6a/0xa0 [ 266.743505] ? SyS_clock_settime+0x1a0/0x1a0 [ 266.747924] ? security_file_ioctl+0x6a/0xa0 [ 266.752483] SyS_ioctl+0x74/0x80 [ 266.755875] ? do_vfs_ioctl+0xfb0/0xfb0 [ 266.759967] do_syscall_64+0x1c7/0x5b0 [ 266.763868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.768737] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 266.773922] RIP: 0033:0x45af49 [ 266.777239] RSP: 002b:00007f318088ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.785085] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 266.792401] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 266.799759] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 266.807125] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f318088b6d4 [ 266.814380] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 266.821663] CPU: 0 PID: 6992 Comm: rs:main Q:Reg Not tainted 4.14.172-syzkaller #0 [ 266.823814] Node 0 active_anon:21156kB inactive_anon:772kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:36kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 266.829401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.858727] Node 1 active_anon:164kB inactive_anon:12kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 266.866443] Call Trace: [ 266.866465] dump_stack+0xf7/0x13b [ 266.866477] dump_header+0x160/0x63f [ 266.866486] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 266.866495] ? ___ratelimit+0x243/0x519 [ 266.866501] ? do_raw_spin_unlock+0x16a/0x250 [ 266.866508] oom_kill_process.cold.24+0xb/0xa1a [ 266.866512] ? out_of_memory+0x7f9/0x1030 [ 266.866520] ? lock_downgrade+0x7f0/0x7f0 [ 266.866529] out_of_memory+0x2b0/0x1030 [ 266.866538] ? oom_killer_disable+0x1a0/0x1a0 [ 266.895811] Node 0 [ 266.896527] ? __alloc_pages_slowpath+0xb69/0x2650 [ 266.900367] DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.904084] __alloc_pages_slowpath+0x1ef3/0x2650 [ 266.909254] lowmem_reserve[]: [ 266.913326] ? warn_alloc+0x100/0x100 [ 266.913333] ? get_page_from_freelist+0x1046/0x23b0 [ 266.913346] ? __might_sleep+0x93/0xb0 [ 266.913352] __alloc_pages_nodemask+0x60d/0x770 [ 266.913358] ? __alloc_pages_slowpath+0x2650/0x2650 [ 266.913366] ? find_get_entry+0xd7/0x5a0 [ 266.913375] ? lock_downgrade+0x7f0/0x7f0 [ 266.913384] ? radix_tree_lookup_slot+0x55/0x90 [ 266.913392] alloc_pages_current+0xd6/0x1b0 [ 266.913398] __page_cache_alloc+0x1da/0x330 [ 266.913402] ? trace_hardirqs_off+0x10/0x10 [ 266.913409] pagecache_get_page+0x129/0x7c0 [ 266.913417] grab_cache_page_write_begin+0x55/0x90 [ 266.913425] ? rcu_read_lock_sched_held+0x108/0x120 [ 266.913434] ext4_da_write_begin+0x243/0xd30 [ 266.913445] ? ext4_write_begin+0x10e0/0x10e0 [ 266.919648] 0 [ 266.922592] ? balance_dirty_pages_ratelimited+0x751/0x14e0 [ 266.922601] generic_perform_write+0x271/0x450 [ 266.922609] ? __mark_inode_dirty+0x58c/0xe80 [ 266.922617] ? page_endio+0x410/0x410 [ 266.922623] ? file_update_time+0x22d/0x360 [ 266.922630] ? __lock_acquire+0x6a4/0x4500 [ 266.922636] ? current_time+0xa0/0xa0 [ 266.926780] 2570 [ 266.931039] ? lock_acquire+0x173/0x400 [ 266.931048] ? ext4_file_write_iter+0x1db/0xe40 [ 266.931058] __generic_file_write_iter+0x201/0x580 [ 266.931067] ext4_file_write_iter+0x27a/0xe40 [ 266.931071] ? trace_hardirqs_off+0x10/0x10 [ 266.931078] ? ext4_file_mmap+0x260/0x260 [ 266.931085] ? trace_hardirqs_on+0x10/0x10 [ 266.931091] ? trace_hardirqs_off+0x10/0x10 [ 266.931098] __vfs_write+0x413/0x840 [ 266.931103] ? trace_hardirqs_off+0x10/0x10 [ 266.931108] ? kernel_read+0x130/0x130 [ 266.931111] ? __lock_is_held+0xb5/0x140 [ 266.931129] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 266.931136] ? __sb_start_write+0x1f3/0x2a0 [ 266.931142] vfs_write+0x150/0x4f0 [ 266.931150] SyS_write+0x100/0x250 [ 266.937064] 2570 [ 266.940042] ? firmware_map_remove+0x177/0x177 [ 266.940053] ? SyS_read+0x250/0x250 [ 266.940061] ? do_syscall_64+0x4c/0x5b0 [ 266.940067] ? SyS_read+0x250/0x250 [ 266.940071] do_syscall_64+0x1c7/0x5b0 [ 266.940076] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.940094] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 266.940100] RIP: 0033:0x7f79068fd19d [ 266.940103] RSP: 002b:00007f7904e9e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 266.940109] RAX: ffffffffffffffda RBX: 0000000000000071 RCX: 00007f79068fd19d [ 266.940114] RDX: 0000000000000071 RSI: 00000000020bc340 RDI: 0000000000000001 [ 266.942439] 2570 2570 [ 266.947925] RBP: 00000000020bc340 R08: 00000000020bc3a1 R09: 302039202072614d [ 266.947932] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 266.979472] R13: 00007f7904e9e480 R14: 0000000000000001 R15: 00000000020bc140 [ 266.991916] Node 0 [ 267.008705] CPU: 0 PID: 7822 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 267.020114] DMA32 free:18104kB min:36384kB low:45480kB high:54576kB active_anon:21156kB inactive_anon:772kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:36kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6880kB pagetables:1508kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.022400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.026704] lowmem_reserve[]: [ 267.031005] Call Trace: [ 267.031023] dump_stack+0xf7/0x13b [ 267.031034] warn_alloc.cold.110+0xa2/0x1be [ 267.031042] ? zone_watermark_ok_safe+0x260/0x260 [ 267.031048] ? usleep_range+0x120/0x120 [ 267.031054] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 267.031061] ? call_timer_fn+0x570/0x570 [ 267.031067] ? unreserve_highatomic_pageblock+0x315/0x450 [ 267.031077] __alloc_pages_slowpath+0x2052/0x2650 [ 267.051865] 0 [ 267.055106] ? warn_alloc+0x100/0x100 [ 267.056876] 0 [ 267.062787] ? get_page_from_freelist+0x1046/0x23b0 [ 267.062801] ? __might_sleep+0x93/0xb0 [ 267.062807] __alloc_pages_nodemask+0x60d/0x770 [ 267.062814] ? __alloc_pages_slowpath+0x2650/0x2650 [ 267.062824] ? wait_for_completion+0x440/0x440 [ 267.062830] ? __list_del_entry_valid+0xb6/0xf3 [ 267.062840] alloc_pages_current+0xd6/0x1b0 [ 267.062850] ion_page_pool_alloc+0x102/0x180 [ 267.062856] ion_system_heap_allocate+0x14e/0x930 [ 267.062862] ? do_raw_spin_unlock+0x16a/0x250 [ 267.062869] ? ion_system_heap_free+0x270/0x270 [ 267.062878] ion_alloc+0x27f/0x770 [ 267.062887] ? ion_dma_buf_release+0x40/0x40 [ 267.062898] ? kasan_check_write+0x14/0x20 [ 267.080200] 0 [ 267.080629] ion_ioctl+0xe2/0x1b6 [ 267.084846] 0 [ 267.088665] ? ion_alloc.cold.15+0x32/0x32 [ 267.100117] 0 [ 267.104260] do_vfs_ioctl+0x180/0xfb0 [ 267.113033] ? __fget+0x1ad/0x2f0 [ 267.113041] ? ioctl_preallocate+0x1a0/0x1a0 [ 267.113048] ? __fget+0x1ca/0x2f0 [ 267.113060] ? security_file_ioctl+0x6a/0xa0 [ 267.113066] ? SyS_clock_settime+0x1a0/0x1a0 [ 267.113069] ? security_file_ioctl+0x6a/0xa0 [ 267.113075] SyS_ioctl+0x74/0x80 [ 267.113081] ? do_vfs_ioctl+0xfb0/0xfb0 [ 267.113088] do_syscall_64+0x1c7/0x5b0 [ 267.113092] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.113105] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 267.113111] RIP: 0033:0x45af49 [ 267.140120] Node 0 [ 267.141681] RSP: 002b:00007f31808ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.146438] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.150995] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 267.150998] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 267.151000] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 267.151003] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31808cd6d4 [ 267.151005] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 267.159724] CPU: 0 PID: 7830 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 267.161811] lowmem_reserve[]: [ 267.164788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.168396] 0 [ 267.172361] Call Trace: [ 267.172380] dump_stack+0xf7/0x13b [ 267.172390] warn_alloc.cold.110+0xa2/0x1be [ 267.172395] ? zone_watermark_ok_safe+0x260/0x260 [ 267.172401] ? usleep_range+0x120/0x120 [ 267.172407] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 267.172414] ? call_timer_fn+0x570/0x570 [ 267.172420] ? unreserve_highatomic_pageblock+0x315/0x450 [ 267.172429] __alloc_pages_slowpath+0x2052/0x2650 [ 267.172442] ? warn_alloc+0x100/0x100 [ 267.172448] ? get_page_from_freelist+0x1046/0x23b0 [ 267.172461] ? __might_sleep+0x93/0xb0 [ 267.172470] __alloc_pages_nodemask+0x60d/0x770 [ 267.190116] 0 [ 267.190188] ? __alloc_pages_slowpath+0x2650/0x2650 [ 267.193875] 0 [ 267.201572] ? wait_for_completion+0x440/0x440 [ 267.201583] alloc_pages_current+0xd6/0x1b0 [ 267.201594] ion_page_pool_alloc+0x102/0x180 [ 267.201600] ion_system_heap_allocate+0x14e/0x930 [ 267.201607] ? do_raw_spin_unlock+0x16a/0x250 [ 267.201614] ? ion_system_heap_free+0x270/0x270 [ 267.201622] ion_alloc+0x27f/0x770 [ 267.201631] ? ion_dma_buf_release+0x40/0x40 [ 267.201642] ? kasan_check_write+0x14/0x20 [ 267.230286] 0 [ 267.234238] ion_ioctl+0xe2/0x1b6 [ 267.280102] 0 [ 267.290842] ? ion_alloc.cold.15+0x32/0x32 [ 267.290858] do_vfs_ioctl+0x180/0xfb0 [ 267.290865] ? __fget+0x1ad/0x2f0 [ 267.290870] ? ioctl_preallocate+0x1a0/0x1a0 [ 267.290878] ? __fget+0x1ca/0x2f0 [ 267.290890] ? security_file_ioctl+0x6a/0xa0 [ 267.290896] ? SyS_clock_settime+0x1a0/0x1a0 [ 267.290899] ? security_file_ioctl+0x6a/0xa0 [ 267.290905] SyS_ioctl+0x74/0x80 [ 267.290910] ? do_vfs_ioctl+0xfb0/0xfb0 [ 267.290917] do_syscall_64+0x1c7/0x5b0 [ 267.290922] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.290939] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 267.333091] RIP: 0033:0x45af49 [ 267.334875] Node 1 [ 267.338664] RSP: 002b:00007fb6b51d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.370358] Normal free:232620kB min:53504kB low:66880kB high:80256kB active_anon:164kB inactive_anon:12kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.372772] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 267.377180] lowmem_reserve[]: [ 267.382004] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 267.382007] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 267.382010] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b51d46d4 [ 267.382012] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 267.389903] Mem-Info: [ 267.410173] 0 [ 267.450160] active_anon:5330 inactive_anon:196 isolated_anon:0 [ 267.450160] active_file:14 inactive_file:416 isolated_file:0 [ 267.450160] unevictable:0 dirty:3 writeback:0 unstable:0 [ 267.450160] slab_reclaimable:14280 slab_unreclaimable:97715 [ 267.450160] mapped:277 shmem:250 pagetables:399 bounce:0 [ 267.450160] free:83225 free_pcp:90 free_cma:0 [ 267.570153] 0 [ 267.571258] Node 0 active_anon:21156kB inactive_anon:772kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:8kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 267.574164] 0 0 [ 267.578476] Node 1 active_anon:164kB inactive_anon:12kB active_file:4kB inactive_file:1608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1100kB dirty:4kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 267.605114] 0 [ 267.630104] Node 0 [ 267.696846] warn_alloc_show_mem: 2 callbacks suppressed [ 267.696848] Mem-Info: [ 267.720109] Node 0 [ 267.760104] active_anon:5330 inactive_anon:196 isolated_anon:0 [ 267.760104] active_file:14 inactive_file:416 isolated_file:0 [ 267.760104] unevictable:0 dirty:3 writeback:0 unstable:0 [ 267.760104] slab_reclaimable:14280 slab_unreclaimable:97715 [ 267.760104] mapped:277 shmem:250 pagetables:399 bounce:0 [ 267.760104] free:154506 free_pcp:120 free_cma:0 [ 267.880123] DMA: [ 267.885487] DMA free:10572kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.886823] 1*4kB (U) 1*8kB (U) 32*16kB (UE) 22*32kB (U) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB [ 267.914929] lowmem_reserve[]: [ 268.005216] Node 0 active_anon:21156kB inactive_anon:772kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:8kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 268.013733] = 10572kB [ 268.039804] 0 2570 2570 2570 2570 [ 268.043548] Node 0 DMA32 free:69272kB min:36384kB low:45480kB high:54576kB active_anon:21156kB inactive_anon:772kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6880kB pagetables:1508kB bounce:0kB free_pcp:468kB local_pcp:224kB free_cma:0kB [ 268.070224] Node 0 DMA32: 28*4kB (UM) 33*8kB (UM) 26*16kB (UM) 16*32kB (ME) 642*64kB (UME) 146*128kB (UME) 4*256kB (UME) 0*512kB 7*1024kB (UM) 0*2048kB 0*4096kB = 69272kB [ 268.077282] Node 1 active_anon:164kB inactive_anon:12kB active_file:4kB inactive_file:1608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1100kB dirty:4kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 268.110190] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 268.125343] lowmem_reserve[]: 0 0 0 0 0 [ 268.137459] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.150164] Node 1 [ 268.167817] lowmem_reserve[]: [ 268.170096] Normal: 1358*4kB (UE) 783*8kB (UM) 54*16kB (U) 37*32kB (UM) 4352*64kB (U) 964*128kB (UME) 420*256kB (UME) 115*512kB (UE) 283*1024kB (UE) 62*2048kB (UM) 0*4096kB = 998832kB [ 268.173366] Node 0 [ 268.193882] 0 0 0 0 0 [ 268.198740] Node 1 Normal free:1008468kB min:53504kB low:66880kB high:80256kB active_anon:164kB inactive_anon:12kB active_file:4kB inactive_file:1696kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:88kB bounce:0kB free_pcp:900kB local_pcp:256kB free_cma:0kB [ 268.210362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.232390] DMA free:10636kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.269059] lowmem_reserve[]: 0 0 0 0 0 [ 268.270160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 268.274541] Node 0 [ 268.287192] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 268.290166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.295249] DMA: [ 268.307598] Node 0 DMA32 free:95272kB min:36384kB low:45480kB high:54576kB active_anon:21156kB inactive_anon:772kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6880kB pagetables:1508kB bounce:0kB free_pcp:956kB local_pcp:240kB free_cma:0kB [ 268.320462] 1*4kB [ 268.338559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 268.342241] lowmem_reserve[]: 0 0 0 0 0 [ 268.349443] 708 total pagecache pages [ 268.355384] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.370184] 0 pages in swap cache [ 268.386398] (U) 1*8kB (U) 32*16kB (UE) 22*32kB (U) 7*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10636kB [ 268.386741] lowmem_reserve[]: 0 0 0 0 0 [ 268.407882] Node 1 Normal free:1080668kB min:53504kB low:66880kB high:80256kB active_anon:164kB inactive_anon:12kB active_file:4kB inactive_file:1696kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:88kB bounce:0kB free_pcp:984kB local_pcp:256kB free_cma:0kB [ 268.410127] Node 0 [ 268.441148] Swap cache stats: add 0, delete 0, find 0/0 [ 268.448762] Free swap = 0kB [ 268.455174] Total swap = 0kB [ 268.458212] 1965979 pages RAM [ 268.462121] 0 pages HighMem/MovableOnly [ 268.466091] 335868 pages reserved [ 268.469531] 0 pages cma reserved [ 268.470113] DMA32: 4972*4kB (UM) 245*8kB (UM) 148*16kB (UM) 387*32kB (UME) 778*64kB (UME) 238*128kB (UME) 5*256kB (UME) 0*512kB 7*1024kB (UM) 0*2048kB 0*4096kB = 125304kB [ 268.476234] lowmem_reserve[]: [ 268.500721] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 268.510102] 0 0 0 0 0 [ 268.518296] Node 0 DMA: 1*4kB (U) 1*8kB (U) 32*16kB (UE) 22*32kB (U) 7*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10636kB [ 268.530161] Node 1 Normal: 10721*4kB (UE) 2974*8kB (UM) 493*16kB (U) 329*32kB (UM) 5019*64kB (U) 982*128kB (UME) 445*256kB (UME) 118*512kB (UE) 286*1024kB (UE) 62*2048kB (UM) 0*4096kB = 1126180kB [ 268.565275] Node 0 DMA32: 7920*4kB (UME) 723*8kB (UM) 159*16kB (UM) 387*32kB (UME) 779*64kB (UME) 238*128kB (UME) 5*256kB (UME) 0*512kB 7*1024kB (UM) 0*2048kB 0*4096kB = 141160kB [ 268.580166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.604161] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 268.610146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 268.615517] Node 1 [ 268.640303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.644682] Normal: 12487*4kB (UE) 3752*8kB (UM) 661*16kB (U) 363*32kB (UM) 5041*64kB (U) 983*128kB (UME) 445*256kB (UME) 118*512kB [ 268.651559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 268.651560] (UE) 286*1024kB [ 268.663701] 708 total pagecache pages [ 268.663712] 0 pages in swap cache [ 268.663716] Swap cache stats: add 0, delete 0, find 0/0 [ 268.663719] Free swap = 0kB [ 268.663722] Total swap = 0kB [ 268.663729] 1965979 pages RAM [ 268.700264] 0 pages HighMem/MovableOnly [ 268.703876] (UE) [ 268.704304] 335868 pages reserved [ 268.704309] 62*2048kB [ 268.706437] 0 pages cma reserved [ 268.709878] (UM) 0*4096kB [ 268.712483] Out of memory: Kill process 7217 (syz-execprog) score 1 or sacrifice child [ 268.733906] = 1144780kB [ 268.736540] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.750613] Killed process 7694 (syz-executor.2) total-vm:37644kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 268.760090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 268.769391] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.783011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 268.792604] 782 total pagecache pages [ 268.796470] 0 pages in swap cache [ 268.799982] Swap cache stats: add 0, delete 0, find 0/0 [ 268.808771] Free swap = 0kB [ 268.812547] Total swap = 0kB [ 268.815569] 1965979 pages RAM [ 268.818664] 0 pages HighMem/MovableOnly [ 268.826156] 335868 pages reserved [ 268.829638] 0 pages cma reserved [ 270.869976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.893801] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 270.902026] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 270.908624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.917928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.931761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.018499] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 271.029620] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 271.037488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.046301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 2020/03/09 03:19:41 executed programs: 79 [ 271.082039] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 271.089806] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 271.098362] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 271.114958] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 271.122327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.129808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.137625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.144614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.156992] device veth0_vlan entered promiscuous mode [ 271.168153] device veth1_vlan entered promiscuous mode [ 271.174306] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 271.184713] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready 2020/03/09 03:19:41 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe 2020/03/09 03:19:41 result: hanged=false err=executor 1: failed to write control pipe: write |1: broken pipe [ 271.514900] device bridge_slave_1 left promiscuous mode [ 271.526671] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.593849] device bridge_slave_0 left promiscuous mode [ 271.600765] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.655662] device veth1_vlan left promiscuous mode [ 271.664249] device veth0_vlan left promiscuous mode [ 272.042647] device hsr_slave_1 left promiscuous mode [ 272.085924] device hsr_slave_0 left promiscuous mode [ 272.137836] team0 (unregistering): Port device team_slave_1 removed [ 272.194914] team0 (unregistering): Port device team_slave_0 removed [ 272.254241] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 272.324992] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 272.542227] bond0 (unregistering): Released all slaves [ 272.662127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.680621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.504222] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 273.505380] syz-executor.3: [ 273.517348] syz-executor.4: [ 273.521105] syz-executor.4: [ 273.525311] syz-executor.3: [ 273.529092] syz-executor.0: [ 273.534594] syz-executor.5: [ 273.536262] page allocation failure: order:4 [ 273.540769] syz-executor.0: [ 273.540907] page allocation failure: order:4 [ 273.548738] page allocation failure: order:4 [ 273.554038] page allocation failure: order:4 [ 273.558699] page allocation failure: order:4 [ 273.559709] page allocation failure: order:4 [ 273.563640] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 273.572963] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 273.580089] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 273.580099] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 273.580119] CPU: 1 PID: 7868 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 273.580122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.580125] Call Trace: [ 273.580141] dump_stack+0xf7/0x13b [ 273.580152] warn_alloc.cold.110+0xa2/0x1be [ 273.580158] ? zone_watermark_ok_safe+0x260/0x260 [ 273.587406] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 273.594873] ? __alloc_pages_direct_compact+0xc2/0x330 [ 273.594882] __alloc_pages_slowpath+0x2052/0x2650 [ 273.594899] ? trace_hardirqs_off+0x10/0x10 [ 273.594906] ? warn_alloc+0x100/0x100 [ 273.594913] ? get_page_from_freelist+0x1046/0x23b0 [ 273.594927] ? __might_sleep+0x93/0xb0 [ 273.600421] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 273.608064] __alloc_pages_nodemask+0x60d/0x770 [ 273.608072] ? __alloc_pages_slowpath+0x2650/0x2650 [ 273.608083] ? wait_for_completion+0x440/0x440 [ 273.608095] alloc_pages_current+0xd6/0x1b0 [ 273.608105] ion_page_pool_alloc+0x102/0x180 [ 273.608111] ion_system_heap_allocate+0x14e/0x930 [ 273.617838] syz-executor.5 cpuset= [ 273.620245] ? ion_system_heap_free+0x270/0x270 [ 273.620257] ion_alloc+0x216/0x770 [ 273.620266] ? ion_dma_buf_release+0x40/0x40 [ 273.620278] ? kasan_check_write+0x14/0x20 [ 273.620284] ion_ioctl+0xe2/0x1b6 [ 273.623938] (null) [ 273.628120] ? ion_alloc.cold.15+0x32/0x32 [ 273.628133] do_vfs_ioctl+0x180/0xfb0 [ 273.628141] ? __fget+0x1ad/0x2f0 [ 273.628148] ? ioctl_preallocate+0x1a0/0x1a0 [ 273.628156] ? __fget+0x1ca/0x2f0 [ 273.633135] syz5 [ 273.640176] ? security_file_ioctl+0x6a/0xa0 [ 273.645633] (null) [ 273.650264] ? SyS_clock_settime+0x1a0/0x1a0 [ 273.650270] ? security_file_ioctl+0x6a/0xa0 [ 273.650281] SyS_ioctl+0x74/0x80 [ 273.650289] ? do_vfs_ioctl+0xfb0/0xfb0 [ 273.650296] do_syscall_64+0x1c7/0x5b0 [ 273.650301] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.650315] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 273.654910] (null) [ 273.658573] RIP: 0033:0x45af49 [ 273.658576] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.658582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 273.658585] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 273.658588] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 273.658591] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 273.658595] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 273.662482] page allocation failure: order:4 [ 273.665202] syz-executor.4 cpuset= [ 273.667498] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 273.667504] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 273.667524] CPU: 1 PID: 7869 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 273.667530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.674770] syz-executor.4 cpuset= [ 273.679280] Call Trace: [ 273.679297] dump_stack+0xf7/0x13b [ 273.679308] warn_alloc.cold.110+0xa2/0x1be [ 273.679314] ? zone_watermark_ok_safe+0x260/0x260 [ 273.679329] ? __alloc_pages_direct_compact+0xc2/0x330 [ 273.684469] (null) [ 273.688924] __alloc_pages_slowpath+0x2052/0x2650 [ 273.688939] ? trace_hardirqs_off+0x10/0x10 [ 273.688946] ? mark_held_locks+0xc7/0x130 [ 273.688952] ? warn_alloc+0x100/0x100 [ 273.688960] ? get_page_from_freelist+0x1046/0x23b0 [ 273.693380] mems_allowed=0-1 [ 273.697677] ? __might_sleep+0x93/0xb0 [ 273.697686] __alloc_pages_nodemask+0x60d/0x770 [ 273.697695] ? __alloc_pages_slowpath+0x2650/0x2650 [ 273.697706] ? wait_for_completion+0x440/0x440 [ 273.697717] alloc_pages_current+0xd6/0x1b0 [ 273.702666] syz-executor.3 cpuset= [ 273.706080] ion_page_pool_alloc+0x102/0x180 [ 273.706086] ion_system_heap_allocate+0x14e/0x930 [ 273.706096] ? ion_system_heap_free+0x270/0x270 [ 273.706107] ion_alloc+0x216/0x770 [ 273.706116] ? ion_dma_buf_release+0x40/0x40 [ 273.711940] syz4 [ 273.715373] ? kasan_check_write+0x14/0x20 [ 273.719875] syz4 [ 273.723982] ion_ioctl+0xe2/0x1b6 [ 273.728170] syz-executor.5 cpuset= [ 273.730165] ? ion_alloc.cold.15+0x32/0x32 [ 273.730181] do_vfs_ioctl+0x180/0xfb0 [ 273.730189] ? __fget+0x1ad/0x2f0 [ 273.730195] ? ioctl_preallocate+0x1a0/0x1a0 [ 273.730204] ? __fget+0x1ca/0x2f0 [ 273.735607] syz5 [ 273.738235] ? security_file_ioctl+0x6a/0xa0 [ 273.742897] mems_allowed=0-1 [ 273.746434] ? SyS_clock_settime+0x1a0/0x1a0 [ 273.746440] ? security_file_ioctl+0x6a/0xa0 [ 273.746452] SyS_ioctl+0x74/0x80 [ 273.746458] ? do_vfs_ioctl+0xfb0/0xfb0 [ 273.746466] do_syscall_64+0x1c7/0x5b0 [ 273.746472] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.749993] syz3 [ 273.751883] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 273.759709] mems_allowed=0-1 [ 273.764462] RIP: 0033:0x45af49 [ 273.764466] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.764472] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 273.764475] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 273.764477] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 273.764480] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 273.764482] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 273.773947] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 273.779445] CPU: 0 PID: 7880 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 273.794201] (null) [ 273.796269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.796282] Call Trace: [ 273.796301] dump_stack+0xf7/0x13b [ 273.796313] warn_alloc.cold.110+0xa2/0x1be [ 273.829485] syz-executor.0 cpuset= [ 273.833247] ? zone_watermark_ok_safe+0x260/0x260 [ 273.833261] ? __alloc_pages_direct_compact+0xc2/0x330 [ 273.833268] __alloc_pages_slowpath+0x2052/0x2650 [ 273.833285] ? trace_hardirqs_off+0x10/0x10 [ 273.833292] ? warn_alloc+0x100/0x100 [ 273.855821] syz0 [ 273.856508] ? get_page_from_freelist+0x1046/0x23b0 [ 273.870270] mems_allowed=0-1 [ 273.879507] ? __might_sleep+0x93/0xb0 [ 273.879518] __alloc_pages_nodemask+0x60d/0x770 [ 273.879526] ? __alloc_pages_slowpath+0x2650/0x2650 [ 274.010087] Mem-Info: [ 274.013498] ? wait_for_completion+0x440/0x440 [ 274.013511] alloc_pages_current+0xd6/0x1b0 [ 274.028391] active_anon:6970 inactive_anon:196 isolated_anon:0 [ 274.028391] active_file:716 inactive_file:5318 isolated_file:0 [ 274.028391] unevictable:0 dirty:15 writeback:0 unstable:0 [ 274.028391] slab_reclaimable:14353 slab_unreclaimable:96791 [ 274.028391] mapped:4679 shmem:250 pagetables:425 bounce:0 [ 274.028391] free:112432 free_pcp:275 free_cma:0 [ 274.031768] ion_page_pool_alloc+0x102/0x180 [ 274.031774] ion_system_heap_allocate+0x14e/0x930 [ 274.031782] ? ion_system_heap_free+0x270/0x270 [ 274.031792] ion_alloc+0x216/0x770 [ 274.031802] ? ion_dma_buf_release+0x40/0x40 [ 274.049452] Node 0 active_anon:27724kB inactive_anon:780kB active_file:2700kB inactive_file:21236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18628kB dirty:56kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 274.049791] ? kasan_check_write+0x14/0x20 [ 274.074950] Node 1 active_anon:156kB inactive_anon:4kB active_file:164kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:4kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 274.076310] ion_ioctl+0xe2/0x1b6 [ 274.076318] ? ion_alloc.cold.15+0x32/0x32 [ 274.076332] do_vfs_ioctl+0x180/0xfb0 [ 274.076342] ? __fget+0x1ad/0x2f0 [ 274.117056] Node 0 [ 274.120280] ? ioctl_preallocate+0x1a0/0x1a0 [ 274.120293] ? __fget+0x1ca/0x2f0 [ 274.120306] ? security_file_ioctl+0x6a/0xa0 [ 274.120311] ? SyS_clock_settime+0x1a0/0x1a0 [ 274.120315] ? security_file_ioctl+0x6a/0xa0 [ 274.120322] SyS_ioctl+0x74/0x80 [ 274.120329] ? do_vfs_ioctl+0xfb0/0xfb0 [ 274.120337] do_syscall_64+0x1c7/0x5b0 [ 274.120343] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.120355] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 274.120363] RIP: 0033:0x45af49 [ 274.136365] DMA free:10532kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.138052] RSP: 002b:00007fb6b51d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.138060] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 274.138063] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 274.138066] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 274.172806] lowmem_reserve[]: [ 274.175967] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b51d46d4 [ 274.175971] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 274.182884] mems_allowed=0-1 [ 274.183256] CPU: 1 PID: 7884 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 274.197707] mems_allowed=0-1 [ 274.199966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.199971] Call Trace: [ 274.199989] dump_stack+0xf7/0x13b [ 274.200000] warn_alloc.cold.110+0xa2/0x1be [ 274.200011] ? zone_watermark_ok_safe+0x260/0x260 [ 274.501869] ? __alloc_pages_direct_compact+0xc2/0x330 [ 274.507353] __alloc_pages_slowpath+0x2052/0x2650 [ 274.512200] ? trace_hardirqs_off+0x10/0x10 [ 274.516511] ? warn_alloc+0x100/0x100 [ 274.520654] ? get_page_from_freelist+0x1046/0x23b0 [ 274.525713] ? __might_sleep+0x93/0xb0 [ 274.529600] __alloc_pages_nodemask+0x60d/0x770 [ 274.534263] ? __alloc_pages_slowpath+0x2650/0x2650 [ 274.539274] ? wait_for_completion+0x440/0x440 [ 274.543956] alloc_pages_current+0xd6/0x1b0 [ 274.548283] ion_page_pool_alloc+0x102/0x180 [ 274.552692] ion_system_heap_allocate+0x14e/0x930 [ 274.557526] ? ion_system_heap_free+0x270/0x270 [ 274.562198] ion_alloc+0x216/0x770 [ 274.565732] ? ion_dma_buf_release+0x40/0x40 [ 274.570230] ? kasan_check_write+0x14/0x20 [ 274.574489] ion_ioctl+0xe2/0x1b6 [ 274.577928] ? ion_alloc.cold.15+0x32/0x32 [ 274.582173] do_vfs_ioctl+0x180/0xfb0 [ 274.585960] ? __fget+0x1ad/0x2f0 [ 274.589412] ? ioctl_preallocate+0x1a0/0x1a0 [ 274.593831] ? __fget+0x1ca/0x2f0 [ 274.597291] ? security_file_ioctl+0x6a/0xa0 [ 274.601704] ? SyS_clock_settime+0x1a0/0x1a0 [ 274.606114] ? security_file_ioctl+0x6a/0xa0 [ 274.610514] SyS_ioctl+0x74/0x80 [ 274.613870] ? do_vfs_ioctl+0xfb0/0xfb0 [ 274.617849] do_syscall_64+0x1c7/0x5b0 [ 274.621762] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.626624] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 274.631839] RIP: 0033:0x45af49 [ 274.635031] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.642751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 274.650018] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 274.657304] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 274.664570] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 274.671847] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 274.679124] CPU: 0 PID: 7866 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 274.686933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.696294] Call Trace: [ 274.698906] dump_stack+0xf7/0x13b [ 274.702461] warn_alloc.cold.110+0xa2/0x1be [ 274.706792] ? zone_watermark_ok_safe+0x260/0x260 [ 274.711919] ? __alloc_pages_direct_compact+0xc2/0x330 [ 274.716264] 0 2570 2570 [ 274.717219] __alloc_pages_slowpath+0x2052/0x2650 [ 274.717236] ? trace_hardirqs_off+0x10/0x10 [ 274.729097] ? warn_alloc+0x100/0x100 [ 274.731971] 2570 2570 [ 274.732904] ? get_page_from_freelist+0x1046/0x23b0 [ 274.732909] Node 0 [ 274.735409] ? __might_sleep+0x93/0xb0 [ 274.735417] __alloc_pages_nodemask+0x60d/0x770 [ 274.735425] ? __alloc_pages_slowpath+0x2650/0x2650 [ 274.756529] ? wait_for_completion+0x440/0x440 [ 274.761146] alloc_pages_current+0xd6/0x1b0 [ 274.765487] ion_page_pool_alloc+0x102/0x180 [ 274.766866] DMA32 free:358076kB min:36384kB low:45480kB high:54576kB active_anon:27804kB inactive_anon:780kB active_file:2800kB inactive_file:22640kB unevictable:0kB writepending:32kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7104kB pagetables:1652kB bounce:0kB free_pcp:440kB local_pcp:204kB free_cma:0kB [ 274.771976] ion_system_heap_allocate+0x14e/0x930 [ 274.771985] ? ion_system_heap_free+0x270/0x270 [ 274.771994] ion_alloc+0x216/0x770 [ 274.772002] ? ion_dma_buf_release+0x40/0x40 [ 274.772014] ? kasan_check_write+0x14/0x20 [ 274.772020] ion_ioctl+0xe2/0x1b6 [ 274.772025] ? ion_alloc.cold.15+0x32/0x32 [ 274.772038] do_vfs_ioctl+0x180/0xfb0 [ 274.772044] ? __fget+0x1ad/0x2f0 [ 274.772051] ? ioctl_preallocate+0x1a0/0x1a0 [ 274.772063] ? __fget+0x1ca/0x2f0 [ 274.845661] ? security_file_ioctl+0x6a/0xa0 [ 274.850136] ? SyS_clock_settime+0x1a0/0x1a0 [ 274.854612] ? security_file_ioctl+0x6a/0xa0 [ 274.859028] SyS_ioctl+0x74/0x80 [ 274.862840] ? do_vfs_ioctl+0xfb0/0xfb0 [ 274.868241] do_syscall_64+0x1c7/0x5b0 [ 274.872162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.877343] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 274.882561] RIP: 0033:0x45af49 [ 274.885749] RSP: 002b:00007fb6b5215c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.893443] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 274.900722] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 274.907980] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 274.915359] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b52166d4 [ 274.920142] lowmem_reserve[]: [ 274.922646] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 274.926472] CPU: 0 PID: 7882 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 274.940842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.950226] Call Trace: [ 274.952835] dump_stack+0xf7/0x13b [ 274.956380] warn_alloc.cold.110+0xa2/0x1be [ 274.960700] ? zone_watermark_ok_safe+0x260/0x260 [ 274.965568] ? __alloc_pages_direct_compact+0xc2/0x330 [ 274.970946] __alloc_pages_slowpath+0x2052/0x2650 [ 274.972946] 0 0 0 [ 274.975790] ? trace_hardirqs_off+0x10/0x10 [ 274.975794] 0 [ 274.977932] ? warn_alloc+0x100/0x100 [ 274.987883] ? get_page_from_freelist+0x1046/0x23b0 [ 274.992926] ? __might_sleep+0x93/0xb0 [ 274.996837] __alloc_pages_nodemask+0x60d/0x770 [ 275.001520] ? __alloc_pages_slowpath+0x2650/0x2650 [ 275.006556] ? wait_for_completion+0x440/0x440 [ 275.011248] alloc_pages_current+0xd6/0x1b0 [ 275.015594] ion_page_pool_alloc+0x102/0x180 [ 275.020000] ion_system_heap_allocate+0x14e/0x930 [ 275.024870] ? ion_system_heap_free+0x270/0x270 [ 275.029552] ion_alloc+0x216/0x770 [ 275.033101] ? ion_dma_buf_release+0x40/0x40 [ 275.033308] 0 [ 275.037516] ? kasan_check_write+0x14/0x20 [ 275.039328] Node 0 [ 275.043574] ion_ioctl+0xe2/0x1b6 [ 275.043581] ? ion_alloc.cold.15+0x32/0x32 [ 275.043594] do_vfs_ioctl+0x180/0xfb0 [ 275.043601] ? __fget+0x1ad/0x2f0 [ 275.043607] ? ioctl_preallocate+0x1a0/0x1a0 [ 275.043614] ? __fget+0x1ca/0x2f0 [ 275.043626] ? security_file_ioctl+0x6a/0xa0 [ 275.043632] ? SyS_clock_settime+0x1a0/0x1a0 [ 275.043635] ? security_file_ioctl+0x6a/0xa0 [ 275.043641] SyS_ioctl+0x74/0x80 [ 275.043646] ? do_vfs_ioctl+0xfb0/0xfb0 [ 275.043653] do_syscall_64+0x1c7/0x5b0 [ 275.043659] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.043671] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.043676] RIP: 0033:0x45af49 [ 275.043679] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.043684] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 275.043686] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 275.043688] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 275.043691] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 275.043693] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 275.045001] CPU: 0 PID: 7878 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 275.080145] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.084337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.084342] Call Trace: [ 275.087713] lowmem_reserve[]: [ 275.091687] dump_stack+0xf7/0x13b [ 275.091698] warn_alloc.cold.110+0xa2/0x1be [ 275.091704] ? zone_watermark_ok_safe+0x260/0x260 [ 275.091717] ? __alloc_pages_direct_compact+0xc2/0x330 [ 275.091723] __alloc_pages_slowpath+0x2052/0x2650 [ 275.091731] ? trace_hardirqs_on_caller+0x40c/0x580 [ 275.091744] ? retint_kernel+0x2d/0x2d [ 275.091752] ? warn_alloc+0x100/0x100 [ 275.091759] ? get_page_from_freelist+0x1046/0x23b0 [ 275.091773] ? __might_sleep+0x93/0xb0 [ 275.091779] __alloc_pages_nodemask+0x60d/0x770 [ 275.091786] ? __alloc_pages_slowpath+0x2650/0x2650 [ 275.091796] ? wait_for_completion+0x440/0x440 [ 275.133019] 0 [ 275.138805] alloc_pages_current+0xd6/0x1b0 [ 275.200445] 0 [ 275.201195] ion_page_pool_alloc+0x102/0x180 [ 275.204801] 0 [ 275.209555] ion_system_heap_allocate+0x14e/0x930 [ 275.272958] 0 [ 275.273184] ? ion_system_heap_free+0x270/0x270 [ 275.274959] 0 [ 275.279802] ion_alloc+0x216/0x770 [ 275.291553] ? ion_dma_buf_release+0x40/0x40 [ 275.295982] ? kasan_check_write+0x14/0x20 [ 275.300202] ion_ioctl+0xe2/0x1b6 [ 275.300204] Node 1 Normal free:53940kB min:53504kB low:66880kB high:80256kB active_anon:156kB inactive_anon:4kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:48kB bounce:0kB free_pcp:696kB local_pcp:696kB free_cma:0kB [ 275.303648] ? ion_alloc.cold.15+0x32/0x32 [ 275.336049] do_vfs_ioctl+0x180/0xfb0 [ 275.339897] ? __fget+0x1ad/0x2f0 [ 275.343374] ? ioctl_preallocate+0x1a0/0x1a0 [ 275.347802] ? __fget+0x1ca/0x2f0 [ 275.351405] ? security_file_ioctl+0x6a/0xa0 [ 275.355823] ? SyS_clock_settime+0x1a0/0x1a0 [ 275.360226] ? security_file_ioctl+0x6a/0xa0 [ 275.364658] SyS_ioctl+0x74/0x80 [ 275.368383] ? do_vfs_ioctl+0xfb0/0xfb0 [ 275.372381] do_syscall_64+0x1c7/0x5b0 [ 275.376263] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.381118] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.386294] RIP: 0033:0x45af49 [ 275.389483] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.397182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 275.404451] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 275.411716] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 275.418981] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 275.426248] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 275.435823] warn_alloc_show_mem: 1 callbacks suppressed [ 275.435826] Mem-Info: [ 275.440146] CPU: 1 PID: 7887 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 275.441330] active_anon:6992 inactive_anon:196 isolated_anon:0 [ 275.441330] active_file:702 inactive_file:5680 isolated_file:0 [ 275.441330] unevictable:0 dirty:25 writeback:0 unstable:0 [ 275.441330] slab_reclaimable:14353 slab_unreclaimable:96786 [ 275.441330] mapped:4930 shmem:250 pagetables:425 bounce:0 [ 275.441330] free:73994 free_pcp:320 free_cma:0 [ 275.443624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.443628] Call Trace: [ 275.443642] dump_stack+0xf7/0x13b [ 275.443654] warn_alloc.cold.110+0xa2/0x1be [ 275.452210] Node 0 active_anon:27812kB inactive_anon:780kB active_file:2804kB inactive_file:22716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19716kB dirty:100kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 275.485324] ? zone_watermark_ok_safe+0x260/0x260 [ 275.485340] ? __alloc_pages_direct_compact+0xc2/0x330 [ 275.485347] __alloc_pages_slowpath+0x2052/0x2650 [ 275.485361] ? trace_hardirqs_off+0x10/0x10 [ 275.485368] ? warn_alloc+0x100/0x100 [ 275.485374] ? get_page_from_freelist+0x1046/0x23b0 [ 275.485387] ? __might_sleep+0x93/0xb0 [ 275.485395] __alloc_pages_nodemask+0x60d/0x770 [ 275.494931] Node 1 active_anon:156kB inactive_anon:4kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 275.497406] ? __alloc_pages_slowpath+0x2650/0x2650 [ 275.497417] ? wait_for_completion+0x440/0x440 [ 275.497428] alloc_pages_current+0xd6/0x1b0 [ 275.501499] Node 0 [ 275.505283] ion_page_pool_alloc+0x102/0x180 [ 275.505289] ion_system_heap_allocate+0x14e/0x930 [ 275.505300] ? ion_system_heap_free+0x270/0x270 [ 275.533252] DMA free:10532kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.538004] ion_alloc+0x216/0x770 [ 275.538016] ? ion_dma_buf_release+0x40/0x40 [ 275.538028] ? kasan_check_write+0x14/0x20 [ 275.538036] ion_ioctl+0xe2/0x1b6 [ 275.543839] lowmem_reserve[]: [ 275.548144] ? ion_alloc.cold.15+0x32/0x32 [ 275.548158] do_vfs_ioctl+0x180/0xfb0 [ 275.548168] ? __fget+0x1ad/0x2f0 [ 275.552562] 0 [ 275.556280] ? ioctl_preallocate+0x1a0/0x1a0 [ 275.556290] ? __fget+0x1ca/0x2f0 [ 275.556303] ? security_file_ioctl+0x6a/0xa0 [ 275.561639] 2570 [ 275.565180] ? SyS_clock_settime+0x1a0/0x1a0 [ 275.565188] ? security_file_ioctl+0x6a/0xa0 [ 275.565197] SyS_ioctl+0x74/0x80 [ 275.569908] 2570 [ 275.595801] ? do_vfs_ioctl+0xfb0/0xfb0 [ 275.595810] do_syscall_64+0x1c7/0x5b0 [ 275.595816] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.595828] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.595833] RIP: 0033:0x45af49 [ 275.595836] RSP: 002b:00007f361e738c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.595842] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 275.595845] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 275.595847] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 275.595850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e7396d4 [ 275.595853] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 275.599076] lowmem_reserve[]: [ 275.633572] 2570 [ 275.820102] 0 0 0 0 0 [ 275.824715] Node 0 DMA: 21*4kB (U) 24*8kB (U) 33*16kB (UE) 22*32kB (U) 21*64kB (UE) 4*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10532kB [ 275.890088] Node 0 DMA32: 1*4kB (U) 1*8kB (U) 1*16kB (E) 1425*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45628kB [ 275.931072] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 275.977595] Node 1 Normal: 4*4kB (UME) 862*8kB (UME) 867*16kB (UME) 657*32kB (UME) 8*64kB (UME) 4*128kB (UM) 2*256kB (UM) 18*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53584kB [ 276.040421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.049301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 276.070333] 2570 [ 276.080634] Node 0 DMA32 free:36280kB min:36384kB low:45480kB high:54576kB active_anon:27812kB inactive_anon:780kB active_file:1072kB inactive_file:968kB unevictable:0kB writepending:100kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7104kB pagetables:1652kB bounce:0kB free_pcp:596kB local_pcp:284kB free_cma:0kB [ 276.082759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.112135] lowmem_reserve[]: 0 0 0 0 0 [ 276.120176] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 276.124691] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.132643] 754 total pagecache pages [ 276.160975] lowmem_reserve[]: 0 0 0 0 0 [ 276.162134] 0 pages in swap cache [ 276.166027] Node 1 [ 276.169460] Swap cache stats: add 0, delete 0, find 0/0 [ 276.169471] Normal free:53440kB min:53504kB low:66880kB high:80256kB active_anon:156kB inactive_anon:4kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:48kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 276.171918] Free swap = 0kB [ 276.182066] lowmem_reserve[]: [ 276.206035] Total swap = 0kB [ 276.211119] 0 [ 276.212524] 1965979 pages RAM [ 276.214699] 0 [ 276.216173] 0 pages HighMem/MovableOnly [ 276.219273] 0 0 [ 276.221179] 335868 pages reserved [ 276.228099] 0 [ 276.230763] 0 pages cma reserved [ 276.235930] Node 0 DMA: 11*4kB (U) 24*8kB (U) 33*16kB (UE) 22*32kB (U) 21*64kB (UE) 4*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10492kB [ 276.255588] Node 0 DMA32: 209*4kB (UME) 134*8kB (UME) 74*16kB (ME) 517*32kB (UME) 52*64kB (M) 33*128kB (M) 13*256kB (M) 12*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36660kB [ 276.271560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 276.282919] Node 1 Normal: 3*4kB (UME) 861*8kB (UME) 867*16kB (UME) 657*32kB (UME) 8*64kB (UME) 4*128kB (UM) 2*256kB (UM) 18*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53572kB [ 276.299011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.308273] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 276.317599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.326801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 276.335913] 612 total pagecache pages [ 276.339721] 0 pages in swap cache [ 276.343215] Swap cache stats: add 0, delete 0, find 0/0 [ 276.348567] Free swap = 0kB [ 276.353573] Total swap = 0kB [ 276.356612] 1965979 pages RAM [ 276.359706] 0 pages HighMem/MovableOnly [ 276.363751] 335868 pages reserved [ 276.367192] 0 pages cma reserved [ 276.491080] oom_reaper: reaped process 7880 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 276.503343] oom_reaper: reaped process 7887 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 276.518268] oom_reaper: reaped process 7869 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 276.580995] oom_reaper: reaped process 7868 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 276.596805] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 276.610234] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 276.619913] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 276.622398] syz-executor.0: page allocation failure: order:0 [ 276.627750] CPU: 0 PID: 7887 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 276.627754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.650722] Call Trace: [ 276.653336] dump_stack+0xf7/0x13b [ 276.656883] dump_header+0x160/0x63f [ 276.660120] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 276.660591] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 276.660601] ? ___ratelimit+0x243/0x519 [ 276.668242] syz-executor.0 cpuset= [ 276.673342] ? do_raw_spin_unlock+0x16a/0x250 [ 276.673354] oom_kill_process.cold.24+0xb/0xa1a [ 276.673359] ? out_of_memory+0x7f9/0x1030 [ 276.673367] ? lock_downgrade+0x7f0/0x7f0 [ 276.673377] out_of_memory+0x2b0/0x1030 [ 276.673385] ? oom_killer_disable+0x1a0/0x1a0 [ 276.673392] ? __alloc_pages_slowpath+0xb69/0x2650 [ 276.673397] __alloc_pages_slowpath+0x1ef3/0x2650 [ 276.673412] ? warn_alloc+0x100/0x100 [ 276.673420] ? get_page_from_freelist+0x1046/0x23b0 [ 276.677430] syz-executor.3 cpuset= [ 276.680939] ? __might_sleep+0x93/0xb0 [ 276.680946] __alloc_pages_nodemask+0x60d/0x770 [ 276.680954] ? __alloc_pages_slowpath+0x2650/0x2650 [ 276.680965] ? wait_for_completion+0x440/0x440 [ 276.680976] alloc_pages_current+0xd6/0x1b0 [ 276.730152] syz3 [ 276.733083] ion_page_pool_alloc+0x102/0x180 [ 276.737732] mems_allowed=0-1 [ 276.742749] ion_system_heap_allocate+0x14e/0x930 [ 276.742758] ? ion_system_heap_free+0x270/0x270 [ 276.742767] ion_alloc+0x216/0x770 [ 276.742774] ? ion_dma_buf_release+0x40/0x40 [ 276.742786] ? kasan_check_write+0x14/0x20 [ 276.742792] ion_ioctl+0xe2/0x1b6 [ 276.742797] ? ion_alloc.cold.15+0x32/0x32 [ 276.742809] do_vfs_ioctl+0x180/0xfb0 [ 276.742816] ? __fget+0x1ad/0x2f0 [ 276.742821] ? ioctl_preallocate+0x1a0/0x1a0 [ 276.742828] ? __fget+0x1ca/0x2f0 [ 276.742840] ? security_file_ioctl+0x6a/0xa0 [ 276.747426] syz0 [ 276.751712] ? SyS_clock_settime+0x1a0/0x1a0 [ 276.780108] mems_allowed=0-1 [ 276.783189] ? security_file_ioctl+0x6a/0xa0 [ 276.824185] SyS_ioctl+0x74/0x80 [ 276.827577] ? do_vfs_ioctl+0xfb0/0xfb0 [ 276.831549] do_syscall_64+0x1c7/0x5b0 [ 276.835423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 276.840263] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 276.845449] RIP: 0033:0x45af49 [ 276.848633] RSP: 002b:00007f361e738c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.856422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 276.864064] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 276.871353] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 276.878614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e7396d4 [ 276.885881] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 276.900090] CPU: 1 PID: 7868 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 276.907920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.917301] Call Trace: [ 276.919996] dump_stack+0xf7/0x13b [ 276.923541] warn_alloc.cold.110+0xa2/0x1be [ 276.927873] ? zone_watermark_ok_safe+0x260/0x260 [ 276.932716] ? usleep_range+0x120/0x120 [ 276.936693] ? rcu_read_lock_sched_held+0x108/0x120 [ 276.941708] ? call_timer_fn+0x570/0x570 [ 276.945790] __alloc_pages_slowpath+0x2052/0x2650 [ 276.951226] ? warn_alloc+0x100/0x100 [ 276.955035] ? get_page_from_freelist+0x1046/0x23b0 [ 276.960292] ? __might_sleep+0x93/0xb0 [ 276.964207] __alloc_pages_nodemask+0x60d/0x770 [ 276.968891] ? __alloc_pages_slowpath+0x2650/0x2650 [ 276.973928] ? wait_for_completion+0x440/0x440 [ 276.978513] alloc_pages_current+0xd6/0x1b0 [ 276.982858] ion_page_pool_alloc+0x102/0x180 [ 276.987365] ion_system_heap_allocate+0x14e/0x930 [ 276.992235] ? ion_system_heap_free+0x270/0x270 [ 276.996976] ion_alloc+0x216/0x770 [ 277.000668] ? ion_dma_buf_release+0x40/0x40 [ 277.005317] ? kasan_check_write+0x14/0x20 [ 277.009612] ion_ioctl+0xe2/0x1b6 [ 277.013112] ? ion_alloc.cold.15+0x32/0x32 [ 277.017356] do_vfs_ioctl+0x180/0xfb0 [ 277.021182] ? __fget+0x1ad/0x2f0 [ 277.024674] ? ioctl_preallocate+0x1a0/0x1a0 [ 277.029111] ? __fget+0x1ca/0x2f0 [ 277.032604] ? security_file_ioctl+0x6a/0xa0 [ 277.037042] ? SyS_clock_settime+0x1a0/0x1a0 [ 277.041471] ? security_file_ioctl+0x6a/0xa0 [ 277.045893] SyS_ioctl+0x74/0x80 [ 277.049277] ? do_vfs_ioctl+0xfb0/0xfb0 [ 277.053273] do_syscall_64+0x1c7/0x5b0 [ 277.057168] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.062029] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 277.067220] RIP: 0033:0x45af49 [ 277.070442] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.078192] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 277.085739] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 277.093021] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 277.100295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 277.107571] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 277.115874] CPU: 1 PID: 7884 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 277.123716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.133080] Call Trace: [ 277.135693] dump_stack+0xf7/0x13b [ 277.139239] warn_alloc.cold.110+0xa2/0x1be [ 277.143573] ? zone_watermark_ok_safe+0x260/0x260 [ 277.148424] ? usleep_range+0x120/0x120 [ 277.152423] ? rcu_read_lock_sched_held+0x108/0x120 [ 277.157468] ? call_timer_fn+0x570/0x570 [ 277.161812] __alloc_pages_slowpath+0x2052/0x2650 [ 277.166670] ? warn_alloc+0x100/0x100 [ 277.170478] ? get_page_from_freelist+0x1046/0x23b0 [ 277.175587] ? __might_sleep+0x93/0xb0 [ 277.179558] __alloc_pages_nodemask+0x60d/0x770 [ 277.184355] ? __alloc_pages_slowpath+0x2650/0x2650 [ 277.189405] ? wait_for_completion+0x440/0x440 [ 277.194028] alloc_pages_current+0xd6/0x1b0 [ 277.198483] ion_page_pool_alloc+0x102/0x180 [ 277.202956] ion_system_heap_allocate+0x14e/0x930 [ 277.207860] ? ion_system_heap_free+0x270/0x270 [ 277.212573] ion_alloc+0x216/0x770 [ 277.216132] ? ion_dma_buf_release+0x40/0x40 [ 277.220736] ? kasan_check_write+0x14/0x20 [ 277.224989] ion_ioctl+0xe2/0x1b6 [ 277.228583] ? ion_alloc.cold.15+0x32/0x32 [ 277.233455] do_vfs_ioctl+0x180/0xfb0 [ 277.237354] ? __fget+0x1ad/0x2f0 [ 277.240824] ? ioctl_preallocate+0x1a0/0x1a0 [ 277.245609] ? __fget+0x1ca/0x2f0 [ 277.249084] ? security_file_ioctl+0x6a/0xa0 [ 277.253515] ? SyS_clock_settime+0x1a0/0x1a0 [ 277.257925] ? security_file_ioctl+0x6a/0xa0 [ 277.262339] SyS_ioctl+0x74/0x80 [ 277.265735] ? do_vfs_ioctl+0xfb0/0xfb0 [ 277.269730] do_syscall_64+0x1c7/0x5b0 [ 277.273636] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.278520] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 277.283834] RIP: 0033:0x45af49 [ 277.284699] Mem-Info: [ 277.287180] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.289609] active_anon:5369 inactive_anon:196 isolated_anon:0 [ 277.289609] active_file:29 inactive_file:5 isolated_file:0 [ 277.289609] unevictable:0 dirty:1 writeback:6 unstable:0 [ 277.289609] slab_reclaimable:14343 slab_unreclaimable:96611 [ 277.289609] mapped:24 shmem:250 pagetables:422 bounce:0 [ 277.289609] free:13815 free_pcp:174 free_cma:0 [ 277.297351] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 277.297355] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 277.297358] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 277.297360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 277.297362] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 277.323395] warn_alloc_show_mem: 5 callbacks suppressed [ 277.323399] Mem-Info: [ 277.480203] active_anon:5369 inactive_anon:196 isolated_anon:0 [ 277.480203] active_file:12 inactive_file:13 isolated_file:0 [ 277.480203] unevictable:0 dirty:0 writeback:0 unstable:0 [ 277.480203] slab_reclaimable:14344 slab_unreclaimable:96611 [ 277.480203] mapped:2 shmem:250 pagetables:422 bounce:0 [ 277.480203] free:100986 free_pcp:210 free_cma:0 [ 277.520954] Node 0 active_anon:21348kB inactive_anon:780kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 277.620171] Node 0 active_anon:21348kB inactive_anon:780kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 277.640123] Node 1 active_anon:128kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 277.711773] Node 1 active_anon:128kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 277.740114] Node 0 DMA free:10556kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.840140] Node 0 DMA free:10556kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.860091] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 277.902569] Node 0 DMA32 free:285180kB min:36384kB low:45480kB high:54576kB active_anon:21348kB inactive_anon:780kB active_file:48kB inactive_file:552kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7104kB pagetables:1640kB bounce:0kB free_pcp:1288kB local_pcp:668kB free_cma:0kB [ 277.930176] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 277.939206] Node 0 DMA32 free:285180kB min:36384kB low:45480kB high:54576kB active_anon:21348kB inactive_anon:780kB active_file:48kB inactive_file:552kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7104kB pagetables:1640kB bounce:0kB free_pcp:1288kB local_pcp:620kB free_cma:0kB [ 277.992701] lowmem_reserve[]: 0 0 0 0 0 [ 277.996846] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.070133] lowmem_reserve[]: 0 0 0 0 0 [ 278.074234] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.100756] lowmem_reserve[]: 0 0 0 0 0 [ 278.104214] lowmem_reserve[]: 0 0 0 0 0 [ 278.105966] Node 1 [ 278.108932] Node 1 [ 278.108941] Normal free:26768kB min:53504kB low:66880kB high:80256kB active_anon:128kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.108945] lowmem_reserve[]: [ 278.111278] Normal free:26768kB min:53504kB low:66880kB high:80256kB active_anon:128kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.111283] lowmem_reserve[]: [ 278.113514] 0 [ 278.144666] 0 0 0 0 0 [ 278.205885] Node 0 DMA: 25*4kB (U) 13*8kB (U) 33*16kB (UE) 22*32kB (U) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10460kB [ 278.242983] 0 0 0 0 [ 278.245371] Node 0 DMA: 25*4kB (U) 13*8kB (U) 33*16kB (UE) 22*32kB (U) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10460kB [ 278.250072] Node 0 [ 278.280143] Node 0 DMA32: 2*4kB (ME) 6815*8kB (UME) 7769*16kB (UME) 3974*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 306000kB [ 278.303065] DMA32: 3*4kB (UME) 5094*8kB (UME) 7769*16kB (UME) 3974*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 292236kB [ 278.310120] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 278.335307] IPVS: ftp: loaded support on port[0] = 21 [ 278.355180] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 278.367709] Node 1 Normal: 261*4kB (UE) 429*8kB (UE) 14*16kB (UE) 648*32kB (UE) 2*64kB (UE) 0*128kB 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 26844kB [ 278.393416] Node 1 Normal: 261*4kB (UE) 429*8kB (UE) 14*16kB (UE) 648*32kB (UE) 2*64kB (UE) 0*128kB 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 26844kB [ 278.400125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.440112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 278.443232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.448732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.480348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 278.488982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.490126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 278.520199] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 278.528832] 644 total pagecache pages [ 278.530106] 644 total pagecache pages [ 278.537157] 0 pages in swap cache [ 278.540673] Swap cache stats: add 0, delete 0, find 0/0 [ 278.546137] Free swap = 0kB [ 278.549188] Total swap = 0kB [ 278.550129] 0 pages in swap cache [ 278.555762] Swap cache stats: add 0, delete 0, find 0/0 [ 278.570138] 1965979 pages RAM [ 278.570141] Free swap = 0kB [ 278.570146] Total swap = 0kB [ 278.573339] 0 pages HighMem/MovableOnly [ 278.573344] 335868 pages reserved [ 278.576372] 1965979 pages RAM [ 278.579401] 0 pages cma reserved [ 278.620113] warn_alloc: 12 callbacks suppressed [ 278.620117] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 278.630085] 0 pages HighMem/MovableOnly [ 278.650092] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 278.650141] 335868 pages reserved [ 278.655502] CPU: 1 PID: 7884 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 278.658943] 0 pages cma reserved [ 278.658949] Out of memory: Kill process 7217 (syz-execprog) score 1 or sacrifice child [ 278.666731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.666734] Call Trace: [ 278.666750] dump_stack+0xf7/0x13b [ 278.666760] warn_alloc.cold.110+0xa2/0x1be [ 278.666765] ? zone_watermark_ok_safe+0x260/0x260 [ 278.666778] ? __alloc_pages_direct_compact+0xc2/0x330 [ 278.666785] __alloc_pages_slowpath+0x2052/0x2650 [ 278.666799] ? trace_hardirqs_off+0x10/0x10 [ 278.666806] ? warn_alloc+0x100/0x100 [ 278.670275] Killed process 7871 (syz-executor.2) total-vm:37644kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 278.678206] ? get_page_from_freelist+0x1046/0x23b0 [ 278.688392] syz-executor.5: [ 278.690762] ? __might_sleep+0x93/0xb0 [ 278.690773] __alloc_pages_nodemask+0x60d/0x770 [ 278.694383] page allocation failure: order:0 [ 278.698692] ? trace_hardirqs_off+0x10/0x10 [ 278.703734] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 278.708969] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 278.713841] (null) [ 278.718150] ? __alloc_pages_slowpath+0x2650/0x2650 [ 278.721963] syz-executor.5 cpuset= [ 278.732062] ? wait_for_completion+0x440/0x440 [ 278.732074] alloc_pages_current+0xd6/0x1b0 [ 278.732089] ion_page_pool_alloc+0x102/0x180 [ 278.737099] syz5 [ 278.740118] ion_system_heap_allocate+0x14e/0x930 [ 278.744070] mems_allowed=0-1 [ 278.748717] ? do_raw_spin_unlock+0x16a/0x250 [ 278.807913] ? ion_system_heap_free+0x270/0x270 [ 278.812595] ion_alloc+0x27f/0x770 [ 278.816134] ? ion_dma_buf_release+0x40/0x40 [ 278.820546] ? kasan_check_write+0x14/0x20 [ 278.824765] ion_ioctl+0xe2/0x1b6 [ 278.828222] ? ion_alloc.cold.15+0x32/0x32 [ 278.832458] do_vfs_ioctl+0x180/0xfb0 [ 278.836266] ? __fget+0x1ad/0x2f0 [ 278.839717] ? ioctl_preallocate+0x1a0/0x1a0 [ 278.844114] ? __fget+0x1ca/0x2f0 [ 278.847558] ? security_file_ioctl+0x6a/0xa0 [ 278.851951] ? SyS_clock_settime+0x1a0/0x1a0 [ 278.856343] ? security_file_ioctl+0x6a/0xa0 [ 278.860750] SyS_ioctl+0x74/0x80 [ 278.864101] ? do_vfs_ioctl+0xfb0/0xfb0 [ 278.868080] do_syscall_64+0x1c7/0x5b0 [ 278.871953] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 278.876787] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 278.881962] RIP: 0033:0x45af49 [ 278.885134] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.892831] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 278.900100] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 278.907373] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 278.914755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 278.922126] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 278.929444] CPU: 0 PID: 7887 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 278.930103] oom_reaper: reaped process 7871 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 278.937382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.937389] Call Trace: [ 278.959219] dump_stack+0xf7/0x13b [ 278.962781] warn_alloc.cold.110+0xa2/0x1be [ 278.967137] ? zone_watermark_ok_safe+0x260/0x260 [ 278.971990] ? wake_up_q+0x9c/0xe0 [ 278.975534] ? __mutex_unlock_slowpath+0x29b/0x7e0 [ 278.980471] __alloc_pages_slowpath+0x2052/0x2650 [ 278.985334] ? warn_alloc+0x100/0x100 [ 278.989136] ? get_page_from_freelist+0x1046/0x23b0 [ 278.994169] ? __might_sleep+0x93/0xb0 [ 278.998065] __alloc_pages_nodemask+0x60d/0x770 [ 279.002741] ? __alloc_pages_slowpath+0x2650/0x2650 [ 279.007770] ? wait_for_completion+0x440/0x440 [ 279.012391] alloc_pages_current+0xd6/0x1b0 [ 279.016745] ion_page_pool_alloc+0x102/0x180 [ 279.021161] ion_system_heap_allocate+0x14e/0x930 [ 279.026069] ? ion_system_heap_free+0x270/0x270 [ 279.030759] ion_alloc+0x216/0x770 [ 279.034324] ? ion_dma_buf_release+0x40/0x40 [ 279.038735] ? kasan_check_write+0x14/0x20 [ 279.042979] ion_ioctl+0xe2/0x1b6 [ 279.046461] ? ion_alloc.cold.15+0x32/0x32 [ 279.050701] do_vfs_ioctl+0x180/0xfb0 [ 279.058697] ? __fget+0x1ad/0x2f0 [ 279.062195] ? ioctl_preallocate+0x1a0/0x1a0 [ 279.066616] ? __fget+0x1ca/0x2f0 [ 279.070078] ? security_file_ioctl+0x6a/0xa0 [ 279.074506] ? SyS_clock_settime+0x1a0/0x1a0 [ 279.079361] ? security_file_ioctl+0x6a/0xa0 [ 279.083894] SyS_ioctl+0x74/0x80 [ 279.087273] ? do_vfs_ioctl+0xfb0/0xfb0 [ 279.091341] do_syscall_64+0x1c7/0x5b0 [ 279.095230] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 279.100079] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 279.105277] RIP: 0033:0x45af49 [ 279.108641] RSP: 002b:00007f361e738c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.116354] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 279.123628] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 279.130938] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 279.138302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e7396d4 [ 279.145575] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff 2020/03/09 03:19:49 executed programs: 82 [ 279.250089] warn_alloc_show_mem: 1 callbacks suppressed [ 279.250116] Mem-Info: [ 279.257960] active_anon:5360 inactive_anon:196 isolated_anon:0 [ 279.257960] active_file:115 inactive_file:2081 isolated_file:0 [ 279.257960] unevictable:0 dirty:26 writeback:0 unstable:0 [ 279.257960] slab_reclaimable:14347 slab_unreclaimable:96496 [ 279.257960] mapped:1352 shmem:250 pagetables:411 bounce:0 [ 279.257960] free:240283 free_pcp:367 free_cma:0 [ 279.349650] Node 0 active_anon:21312kB inactive_anon:780kB active_file:256kB inactive_file:1924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1808kB dirty:104kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 279.413839] Node 1 active_anon:228kB inactive_anon:4kB active_file:1104kB inactive_file:6300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4100kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 279.474864] Node 0 DMA free:10400kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 279.553041] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 279.569156] Node 0 DMA32 free:18724kB min:36384kB low:45480kB high:54576kB active_anon:21312kB inactive_anon:780kB active_file:256kB inactive_file:1924kB unevictable:0kB writepending:104kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1596kB bounce:0kB free_pcp:984kB local_pcp:624kB free_cma:0kB [ 279.672734] lowmem_reserve[]: 0 0 0 0 0 [ 279.688326] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 279.773764] lowmem_reserve[]: 0 0 0 0 0 [ 279.787179] Node 1 Normal free:950096kB min:53504kB low:66880kB high:80256kB active_anon:228kB inactive_anon:4kB active_file:1104kB inactive_file:6300kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:48kB bounce:0kB free_pcp:404kB local_pcp:208kB free_cma:0kB [ 279.878109] lowmem_reserve[]: 0 0 0 0 0 [ 279.892335] Node 0 DMA: 10*4kB (U) 12*8kB (U) 33*16kB (UE) 22*32kB (U) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10392kB [ 279.939552] Node 0 DMA32: 2*4kB (UM) 2*8kB (UE) 1*16kB (M) 300*32kB (UE) 1233*64kB (UH) 86*128kB (U) 55*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 114152kB [ 280.019476] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 280.036301] chnl_net:caif_netlink_parms(): no params data found 2020/03/09 03:19:50 result: hanged=false err=executor 2: EOF [ 280.060086] Node 1 Normal: 3*4kB (UME) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 434*64kB (UM) 65*128kB (UE) 39*256kB (UME) 10*512kB (UE) 1*1024kB (E) 221*2048kB (UE) 53*4096kB (U) = 722020kB [ 280.161719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.223201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 280.267613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.304531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 280.335485] 2986 total pagecache pages [ 280.340665] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.349531] 0 pages in swap cache [ 280.353907] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.360496] Swap cache stats: add 0, delete 0, find 0/0 [ 280.377070] Free swap = 0kB [ 280.381045] device bridge_slave_0 entered promiscuous mode [ 280.394651] Total swap = 0kB [ 280.404624] 1965979 pages RAM [ 280.414514] 0 pages HighMem/MovableOnly [ 280.421113] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.427366] 335868 pages reserved [ 280.427563] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.449897] 0 pages cma reserved [ 280.451590] device bridge_slave_1 entered promiscuous mode [ 280.527703] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 280.567810] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 280.573646] CPU: 1 PID: 7895 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 280.581477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.591185] Call Trace: [ 280.593779] dump_stack+0xf7/0x13b [ 280.597524] warn_alloc.cold.110+0xa2/0x1be [ 280.601845] ? zone_watermark_ok_safe+0x260/0x260 [ 280.606721] ? __alloc_pages_direct_compact+0xc2/0x330 [ 280.612011] __alloc_pages_slowpath+0x2052/0x2650 [ 280.616907] ? trace_hardirqs_off+0x10/0x10 [ 280.622117] ? warn_alloc+0x100/0x100 [ 280.625921] ? get_page_from_freelist+0x1046/0x23b0 [ 280.630961] ? __might_sleep+0x93/0xb0 [ 280.634954] __alloc_pages_nodemask+0x60d/0x770 [ 280.640336] ? trace_hardirqs_off+0x10/0x10 [ 280.644660] ? __alloc_pages_slowpath+0x2650/0x2650 [ 280.649702] ? wait_for_completion+0x440/0x440 [ 280.654288] alloc_pages_current+0xd6/0x1b0 [ 280.658622] ion_page_pool_alloc+0x102/0x180 [ 280.663144] ion_system_heap_allocate+0x14e/0x930 [ 280.667997] ? ion_system_heap_free+0x270/0x270 [ 280.672685] ion_alloc+0x216/0x770 [ 280.676266] ? ion_dma_buf_release+0x40/0x40 [ 280.680810] ? kasan_check_write+0x14/0x20 [ 280.685051] ion_ioctl+0xe2/0x1b6 [ 280.688506] ? ion_alloc.cold.15+0x32/0x32 [ 280.692871] do_vfs_ioctl+0x180/0xfb0 [ 280.696753] ? __fget+0x1ad/0x2f0 [ 280.700193] ? ioctl_preallocate+0x1a0/0x1a0 [ 280.704842] ? __fget+0x1ca/0x2f0 [ 280.708439] ? security_file_ioctl+0x6a/0xa0 [ 280.712844] ? SyS_clock_settime+0x1a0/0x1a0 [ 280.717373] ? security_file_ioctl+0x6a/0xa0 [ 280.721802] SyS_ioctl+0x74/0x80 [ 280.725195] ? do_vfs_ioctl+0xfb0/0xfb0 [ 280.729195] do_syscall_64+0x1c7/0x5b0 [ 280.733068] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 280.737928] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 280.743310] RIP: 0033:0x45af49 [ 280.748243] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.756537] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 280.763901] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 280.771201] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 280.778484] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 280.785874] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 280.795281] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 280.813896] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 280.819114] CPU: 1 PID: 7877 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 280.826908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.836262] Call Trace: [ 280.838845] dump_stack+0xf7/0x13b [ 280.842407] dump_header+0x160/0x63f [ 280.846122] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 280.851263] ? ___ratelimit+0x243/0x519 [ 280.855598] ? do_raw_spin_unlock+0x16a/0x250 [ 280.860109] oom_kill_process.cold.24+0xb/0xa1a [ 280.865053] ? out_of_memory+0x7f9/0x1030 [ 280.869196] ? lock_downgrade+0x7f0/0x7f0 [ 280.873332] out_of_memory+0x2b0/0x1030 [ 280.877293] ? oom_killer_disable+0x1a0/0x1a0 [ 280.881797] ? __alloc_pages_slowpath+0xb69/0x2650 [ 280.886819] __alloc_pages_slowpath+0x1ef3/0x2650 [ 280.891659] ? warn_alloc+0x100/0x100 [ 280.895473] ? get_page_from_freelist+0x1046/0x23b0 [ 280.900508] ? __might_sleep+0x93/0xb0 [ 280.904528] __alloc_pages_nodemask+0x60d/0x770 [ 280.909337] ? __alloc_pages_slowpath+0x2650/0x2650 [ 280.914541] ? cache_grow_begin+0x331/0x3f0 [ 280.918854] cache_grow_begin+0x80/0x3f0 [ 280.923370] fallback_alloc+0x203/0x2c0 [ 280.927352] ____cache_alloc_node+0x1c7/0x1e0 [ 280.932302] kmem_cache_alloc+0x1f8/0x790 [ 280.936455] __kernfs_new_node+0x63/0x470 [ 280.940584] ? kernfs_activate+0x115/0x190 [ 280.944805] kernfs_new_node+0x5e/0xe0 [ 280.948675] __kernfs_create_file+0x38/0x2c5 [ 280.953067] sysfs_add_file_mode_ns+0x201/0x440 [ 280.957725] internal_create_group+0x1d1/0x730 [ 280.962316] sysfs_create_groups+0x81/0x110 [ 280.966645] device_add+0xf9b/0x14b0 [ 280.970365] ? __lockdep_init_map+0x105/0x550 [ 280.974854] ? device_private_init+0x180/0x180 [ 280.980378] ? __init_waitqueue_head+0x36/0x90 [ 280.984948] ? pm_runtime_init+0x353/0x400 [ 280.989171] netdev_register_kobject+0x16a/0x360 [ 280.993922] ? raw_notifier_call_chain+0x11/0x20 [ 280.998752] register_netdevice+0x7b6/0xe50 [ 281.003061] ? netdev_change_features+0x80/0x80 [ 281.007720] ? nla_strlcpy+0xa7/0xf0 [ 281.011438] veth_newlink+0x488/0x960 [ 281.015224] ? veth_poll_controller+0x10/0x10 [ 281.019741] ? rtnl_create_link+0x1a8/0x950 [ 281.024051] ? ns_capable+0xe/0x10 [ 281.027591] ? __netlink_ns_capable+0xc3/0xf0 [ 281.032076] rtnl_newlink+0xbdd/0x1390 [ 281.036053] ? rtnl_link_unregister+0x270/0x270 [ 281.040706] ? avc_has_perm_noaudit+0x236/0x400 [ 281.045365] ? lock_downgrade+0x7f0/0x7f0 [ 281.049523] rtnetlink_rcv_msg+0x34c/0x9e0 [ 281.054721] ? rtnl_bridge_getlink+0x760/0x760 [ 281.059288] ? find_held_lock+0x36/0x1d0 [ 281.063352] netlink_rcv_skb+0x133/0x370 [ 281.067409] ? rtnl_bridge_getlink+0x760/0x760 [ 281.071984] ? netlink_ack+0xa00/0xa00 [ 281.075940] ? netlink_deliver_tap+0x8e/0x920 [ 281.080423] rtnetlink_rcv+0x10/0x20 [ 281.084119] netlink_unicast+0x40b/0x600 [ 281.088299] ? netlink_attachskb+0x6d0/0x6d0 [ 281.092735] netlink_sendmsg+0x730/0xbd0 [ 281.096789] ? netlink_unicast+0x600/0x600 [ 281.101015] ? selinux_socket_sendmsg+0x31/0x40 [ 281.105681] ? security_socket_sendmsg+0x6a/0xa0 [ 281.110431] ? netlink_unicast+0x600/0x600 [ 281.114650] sock_sendmsg+0xb5/0xf0 [ 281.118259] SYSC_sendto+0x1e3/0x2c0 [ 281.121961] ? SYSC_connect+0x2a0/0x2a0 [ 281.125917] ? trace_hardirqs_off+0x10/0x10 [ 281.130318] ? mntput_no_expire+0xb1/0x760 [ 281.134637] ? lock_downgrade+0x7f0/0x7f0 [ 281.139132] ? find_held_lock+0x36/0x1d0 [ 281.143190] ? _raw_spin_unlock_irq+0x27/0x80 [ 281.147683] ? _raw_spin_unlock_irq+0x60/0x80 [ 281.152421] ? task_work_run+0xbf/0x170 [ 281.156399] ? do_syscall_64+0x4c/0x5b0 [ 281.160540] ? SyS_getpeername+0x10/0x10 [ 281.164694] SyS_sendto+0x9/0x10 [ 281.168144] do_syscall_64+0x1c7/0x5b0 [ 281.172020] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.176872] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 281.182047] RIP: 0033:0x414c43 [ 281.185233] RSP: 002b:00007ffd5023f228 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 281.193186] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414c43 [ 281.200894] RDX: 0000000000000068 RSI: 0000000000a72250 RDI: 0000000000000003 [ 281.208323] RBP: 0000000000000000 R08: 00007ffd5023f230 R09: 000000000000000c [ 281.215654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.223018] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003 [ 281.233649] warn_alloc_show_mem: 1 callbacks suppressed [ 281.233652] Mem-Info: [ 281.241894] active_anon:5398 inactive_anon:196 isolated_anon:0 [ 281.241894] active_file:511 inactive_file:439 isolated_file:21 [ 281.241894] unevictable:0 dirty:50 writeback:0 unstable:0 [ 281.241894] slab_reclaimable:14406 slab_unreclaimable:96893 [ 281.241894] mapped:774 shmem:250 pagetables:417 bounce:0 [ 281.241894] free:13835 free_pcp:30 free_cma:0 [ 281.275151] Node 0 active_anon:21336kB inactive_anon:772kB active_file:1212kB inactive_file:1188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1968kB dirty:116kB writeback:4kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 281.307333] Node 1 active_anon:224kB inactive_anon:12kB active_file:432kB inactive_file:456kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:848kB dirty:28kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 281.334905] Node 0 DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.367814] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 281.386886] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 281.388854] syz-executor.5: [ 281.393394] CPU: 1 PID: 7890 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 281.404834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.416385] Call Trace: [ 281.419255] dump_stack+0xf7/0x13b [ 281.423104] warn_alloc.cold.110+0xa2/0x1be [ 281.427694] ? zone_watermark_ok_safe+0x260/0x260 [ 281.434290] ? __alloc_pages_direct_compact+0xc2/0x330 [ 281.441229] __alloc_pages_slowpath+0x2052/0x2650 [ 281.446514] ? trace_hardirqs_off+0x10/0x10 [ 281.450847] ? warn_alloc+0x100/0x100 [ 281.454645] ? get_page_from_freelist+0x1046/0x23b0 [ 281.460435] ? __might_sleep+0x93/0xb0 [ 281.464619] __alloc_pages_nodemask+0x60d/0x770 [ 281.469537] ? __alloc_pages_slowpath+0x2650/0x2650 [ 281.474558] ? wait_for_completion+0x440/0x440 [ 281.481061] alloc_pages_current+0xd6/0x1b0 [ 281.486030] ion_page_pool_alloc+0x102/0x180 [ 281.490433] ion_system_heap_allocate+0x14e/0x930 [ 281.495525] ? ion_system_heap_free+0x270/0x270 [ 281.500179] ion_alloc+0x216/0x770 [ 281.504240] ? ion_dma_buf_release+0x40/0x40 [ 281.512811] ? kasan_check_write+0x14/0x20 [ 281.517048] ion_ioctl+0xe2/0x1b6 [ 281.520707] ? ion_alloc.cold.15+0x32/0x32 [ 281.525465] do_vfs_ioctl+0x180/0xfb0 [ 281.532823] ? __fget+0x1ad/0x2f0 [ 281.536706] ? ioctl_preallocate+0x1a0/0x1a0 [ 281.542445] ? __fget+0x1ca/0x2f0 [ 281.545905] ? security_file_ioctl+0x6a/0xa0 [ 281.550446] ? SyS_clock_settime+0x1a0/0x1a0 [ 281.554864] ? security_file_ioctl+0x6a/0xa0 [ 281.559388] SyS_ioctl+0x74/0x80 [ 281.562749] ? do_vfs_ioctl+0xfb0/0xfb0 [ 281.566716] do_syscall_64+0x1c7/0x5b0 [ 281.570617] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.575452] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 281.580637] RIP: 0033:0x45af49 [ 281.583848] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.591633] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 281.598890] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 281.606322] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 281.613849] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 281.621106] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 281.628432] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 281.638121] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 281.649851] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 281.656075] CPU: 0 PID: 7887 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 281.658527] Node 0 [ 281.663892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.663895] Call Trace: [ 281.663914] dump_stack+0xf7/0x13b [ 281.663924] warn_alloc.cold.110+0xa2/0x1be [ 281.663929] ? zone_watermark_ok_safe+0x260/0x260 [ 281.663942] ? __alloc_pages_direct_compact+0xc2/0x330 [ 281.663949] __alloc_pages_slowpath+0x2052/0x2650 [ 281.663962] ? trace_hardirqs_off+0x10/0x10 [ 281.663970] ? warn_alloc+0x100/0x100 [ 281.663976] ? get_page_from_freelist+0x1046/0x23b0 [ 281.663989] ? __might_sleep+0x93/0xb0 [ 281.663996] __alloc_pages_nodemask+0x60d/0x770 [ 281.674222] DMA32 free:18116kB min:36384kB low:45480kB high:54576kB active_anon:21336kB inactive_anon:772kB active_file:208kB inactive_file:64kB unevictable:0kB writepending:120kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7040kB pagetables:1620kB bounce:0kB free_pcp:140kB local_pcp:348kB free_cma:0kB [ 281.675612] ? trace_hardirqs_off+0x10/0x10 [ 281.678195] lowmem_reserve[]: [ 281.681725] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 281.681736] ? __alloc_pages_slowpath+0x2650/0x2650 [ 281.681742] ? wait_for_completion+0x440/0x440 [ 281.681751] alloc_pages_current+0xd6/0x1b0 [ 281.681761] ion_page_pool_alloc+0x102/0x180 [ 281.681766] ion_system_heap_allocate+0x14e/0x930 [ 281.681773] ? do_raw_spin_unlock+0x16a/0x250 [ 281.681779] ? ion_system_heap_free+0x270/0x270 [ 281.681788] ion_alloc+0x27f/0x770 [ 281.681797] ? ion_dma_buf_release+0x40/0x40 [ 281.681807] ? kasan_check_write+0x14/0x20 [ 281.681813] ion_ioctl+0xe2/0x1b6 [ 281.681819] ? ion_alloc.cold.15+0x32/0x32 [ 281.686737] 0 [ 281.691262] do_vfs_ioctl+0x180/0xfb0 [ 281.691269] ? __fget+0x1ad/0x2f0 [ 281.691275] ? ioctl_preallocate+0x1a0/0x1a0 [ 281.691283] ? __fget+0x1ca/0x2f0 [ 281.691296] ? security_file_ioctl+0x6a/0xa0 [ 281.691302] ? SyS_clock_settime+0x1a0/0x1a0 [ 281.691306] ? security_file_ioctl+0x6a/0xa0 [ 281.691312] SyS_ioctl+0x74/0x80 [ 281.691318] ? do_vfs_ioctl+0xfb0/0xfb0 [ 281.691327] do_syscall_64+0x1c7/0x5b0 [ 281.691331] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.691341] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 281.691348] RIP: 0033:0x45af49 [ 281.699684] 0 [ 281.701612] RSP: 002b:00007f361e738c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.701618] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 281.701621] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 281.701623] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 281.701626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e7396d4 [ 281.701628] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 281.789917] Mem-Info: [ 281.790815] 0 [ 281.802918] active_anon:5390 inactive_anon:196 isolated_anon:0 [ 281.802918] active_file:77 inactive_file:24 isolated_file:31 [ 281.802918] unevictable:0 dirty:36 writeback:1 unstable:0 [ 281.802918] slab_reclaimable:14420 slab_unreclaimable:96897 [ 281.802918] mapped:54 shmem:250 pagetables:426 bounce:0 [ 281.802918] free:13758 free_pcp:0 free_cma:0 [ 281.803960] 0 [ 281.808126] Node 0 active_anon:21336kB inactive_anon:772kB active_file:208kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:68kB dirty:116kB writeback:4kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 281.812485] 0 [ 281.812494] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.812504] lowmem_reserve[]: 0 0 0 0 0 [ 281.812518] Node 1 Normal free:26536kB min:53504kB low:66880kB high:80256kB active_anon:224kB inactive_anon:12kB active_file:432kB inactive_file:456kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.812529] lowmem_reserve[]: 0 0 0 0 0 [ 281.812545] Node 0 [ 281.825743] Node 1 active_anon:224kB inactive_anon:12kB active_file:100kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:148kB dirty:28kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 281.825952] DMA: 1*4kB [ 281.829401] Node 0 [ 281.833865] (U) 1*8kB (U) 32*16kB (UE) 22*32kB (U) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10380kB [ 281.833910] Node 0 DMA32: 62*4kB (UME) 31*8kB (UME) 14*16kB (UME) 8*32kB (UME) 3*64kB (UMH) 1*128kB (U) 1*256kB (U) 33*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18448kB [ 281.833958] Node 0 Normal: [ 281.842152] DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.846362] 0*4kB [ 281.855605] lowmem_reserve[]: [ 281.862486] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 281.866675] 0 [ 281.871952] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 281.871969] Node 1 Normal: 10*4kB (ME) 10*8kB (UME) 12*16kB (UME) 10*32kB (UME) 12*64kB (UME) 7*128kB (ME) 7*256kB (ME) 7*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 3*4096kB (U) = 27128kB [ 281.872028] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.872031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 281.872035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.872039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 281.872042] 382 total pagecache pages [ 281.872050] 0 pages in swap cache [ 281.880057] 2570 [ 281.880734] Swap cache stats: add 0, delete 0, find 0/0 [ 281.882669] 2570 2570 [ 281.894814] Free swap = 0kB [ 281.898401] 2570 [ 281.905700] Total swap = 0kB [ 281.905708] 1965979 pages RAM [ 281.905710] 0 pages HighMem/MovableOnly [ 281.905713] 335868 pages reserved [ 281.905715] 0 pages cma reserved [ 282.266958] Node 0 DMA32 free:17960kB min:36384kB low:45480kB high:54576kB active_anon:21336kB inactive_anon:772kB active_file:136kB inactive_file:124kB unevictable:0kB writepending:120kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7040kB pagetables:1620kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.341648] lowmem_reserve[]: 0 0 0 0 0 [ 282.348959] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.376505] lowmem_reserve[]: 0 0 0 0 0 [ 282.384956] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 282.397627] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 282.398550] Node 1 Normal free:26620kB min:53504kB low:66880kB high:80256kB active_anon:224kB inactive_anon:12kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.410890] CPU: 0 PID: 7866 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 282.444495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.453866] Call Trace: [ 282.456472] dump_stack+0xf7/0x13b [ 282.460017] warn_alloc.cold.110+0xa2/0x1be [ 282.463875] lowmem_reserve[]: 0 [ 282.464330] ? zone_watermark_ok_safe+0x260/0x260 [ 282.464339] ? usleep_range+0x120/0x120 [ 282.467612] 0 [ 282.472464] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 282.472472] ? call_timer_fn+0x570/0x570 [ 282.472479] ? unreserve_highatomic_pageblock+0x315/0x450 [ 282.472487] __alloc_pages_slowpath+0x2052/0x2650 [ 282.472500] ? warn_alloc+0x100/0x100 [ 282.472506] ? get_page_from_freelist+0x1046/0x23b0 [ 282.472521] ? __might_sleep+0x93/0xb0 [ 282.472527] __alloc_pages_nodemask+0x60d/0x770 [ 282.472531] ? retint_kernel+0x2d/0x2d [ 282.472538] ? __alloc_pages_slowpath+0x2650/0x2650 [ 282.472547] ? wait_for_completion+0x440/0x440 [ 282.472558] alloc_pages_current+0xd6/0x1b0 [ 282.472569] ion_page_pool_alloc+0x102/0x180 [ 282.472576] ion_system_heap_allocate+0x14e/0x930 [ 282.497207] 0 [ 282.497845] ? do_raw_spin_unlock+0x16a/0x250 [ 282.512621] 0 [ 282.515213] ? ion_system_heap_free+0x270/0x270 [ 282.519093] 0 [ 282.524144] ion_alloc+0x27f/0x770 [ 282.524158] ? ion_dma_buf_release+0x40/0x40 [ 282.524171] ? kasan_check_write+0x14/0x20 [ 282.524177] ion_ioctl+0xe2/0x1b6 [ 282.524182] ? ion_alloc.cold.15+0x32/0x32 [ 282.524208] do_vfs_ioctl+0x180/0xfb0 [ 282.524215] ? __fget+0x1ad/0x2f0 [ 282.524221] ? ioctl_preallocate+0x1a0/0x1a0 [ 282.524229] ? __fget+0x1ca/0x2f0 [ 282.524242] ? security_file_ioctl+0x6a/0xa0 [ 282.524247] ? SyS_clock_settime+0x1a0/0x1a0 [ 282.524251] ? security_file_ioctl+0x6a/0xa0 [ 282.524257] SyS_ioctl+0x74/0x80 [ 282.524262] ? do_vfs_ioctl+0xfb0/0xfb0 [ 282.524271] do_syscall_64+0x1c7/0x5b0 [ 282.524277] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.524290] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 282.524296] RIP: 0033:0x45af49 [ 282.524302] RSP: 002b:00007fb6b5215c78 EFLAGS: 00000246 [ 282.533133] syz-executor.0: [ 282.533223] ORIG_RAX: 0000000000000010 [ 282.537630] page allocation failure: order:0 [ 282.542989] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 282.542992] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 282.542995] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 282.542998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b52166d4 [ 282.543000] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 282.578846] warn_alloc_show_mem: 2 callbacks suppressed [ 282.578850] Mem-Info: [ 282.597187] syz-executor.5: [ 282.598264] Node 0 [ 282.605954] page allocation failure: order:0 [ 282.610345] DMA: [ 282.617258] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 282.618412] 1*4kB [ 282.626333] active_anon:5390 inactive_anon:196 isolated_anon:0 [ 282.626333] active_file:60 inactive_file:18 isolated_file:0 [ 282.626333] unevictable:0 dirty:29 writeback:0 unstable:0 [ 282.626333] slab_reclaimable:14419 slab_unreclaimable:96899 [ 282.626333] mapped:2 shmem:250 pagetables:426 bounce:0 [ 282.626333] free:13767 free_pcp:0 free_cma:0 [ 282.629430] (U) [ 282.638378] (null) [ 282.659621] 1*8kB [ 282.683399] Node 0 active_anon:21336kB inactive_anon:772kB active_file:100kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:96kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 282.692720] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 282.703217] Node 1 active_anon:224kB inactive_anon:12kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 282.714453] (null) [ 282.758820] syz-executor.5 cpuset= [ 282.787428] syz-executor.5: [ 282.799943] Node 0 [ 282.821951] (U) 32*16kB (UE) 22*32kB (U) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10380kB [ 282.832116] syz5 [ 282.845928] Node 0 DMA32: 62*4kB (UME) 24*8kB (ME) 6*16kB (ME) 4*32kB (ME) 2*64kB (UM) 0*128kB 1*256kB (U) 33*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17944kB [ 282.851357] mems_allowed=0-1 [ 282.867026] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 282.873548] CPU: 0 PID: 7887 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 282.877632] syz-executor.5 cpuset= [ 282.886401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.886406] Call Trace: [ 282.886425] dump_stack+0xf7/0x13b [ 282.886436] warn_alloc.cold.110+0xa2/0x1be [ 282.886441] ? zone_watermark_ok_safe+0x260/0x260 [ 282.886447] ? usleep_range+0x120/0x120 [ 282.886454] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 282.886462] ? call_timer_fn+0x570/0x570 [ 282.886469] ? unreserve_highatomic_pageblock+0x315/0x450 [ 282.886479] __alloc_pages_slowpath+0x2052/0x2650 [ 282.886493] ? warn_alloc+0x100/0x100 [ 282.886498] ? get_page_from_freelist+0x1046/0x23b0 [ 282.886512] ? __might_sleep+0x93/0xb0 [ 282.886517] __alloc_pages_nodemask+0x60d/0x770 [ 282.886524] ? trace_hardirqs_off+0x10/0x10 [ 282.886528] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 282.886535] ? __alloc_pages_slowpath+0x2650/0x2650 [ 282.886544] ? wait_for_completion+0x440/0x440 [ 282.886555] alloc_pages_current+0xd6/0x1b0 [ 282.886566] ion_page_pool_alloc+0x102/0x180 [ 282.886573] ion_system_heap_allocate+0x14e/0x930 [ 282.886580] ? do_raw_spin_unlock+0x16a/0x250 [ 282.886589] ? ion_system_heap_free+0x270/0x270 [ 282.894730] Node 0 [ 282.899487] ion_alloc+0x27f/0x770 [ 282.902109] Normal: [ 282.905589] ? ion_dma_buf_release+0x40/0x40 [ 282.909888] 0*4kB [ 282.914724] ? kasan_check_write+0x14/0x20 [ 282.914732] ion_ioctl+0xe2/0x1b6 [ 282.914738] ? ion_alloc.cold.15+0x32/0x32 [ 282.914750] do_vfs_ioctl+0x180/0xfb0 [ 282.914756] ? __fget+0x1ad/0x2f0 [ 282.914763] ? ioctl_preallocate+0x1a0/0x1a0 [ 282.914771] ? __fget+0x1ca/0x2f0 [ 282.914783] ? security_file_ioctl+0x6a/0xa0 [ 282.914789] ? SyS_clock_settime+0x1a0/0x1a0 [ 282.914793] ? security_file_ioctl+0x6a/0xa0 [ 282.914800] SyS_ioctl+0x74/0x80 [ 282.914806] ? do_vfs_ioctl+0xfb0/0xfb0 [ 282.914813] do_syscall_64+0x1c7/0x5b0 [ 282.914819] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.923370] syz5 [ 282.924058] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 282.928095] mems_allowed=0-1 [ 282.933640] RIP: 0033:0x45af49 [ 282.933643] RSP: 002b:00007f361e738c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.933649] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 282.933651] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 282.933653] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 282.933656] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e7396d4 [ 282.933658] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 282.941904] DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.946866] 0*8kB [ 282.947376] lowmem_reserve[]: [ 282.951315] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 282.951335] CPU: 1 PID: 7884 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 282.951338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.951341] Call Trace: [ 282.951357] dump_stack+0xf7/0x13b [ 282.951367] warn_alloc.cold.110+0xa2/0x1be [ 282.951372] ? zone_watermark_ok_safe+0x260/0x260 [ 282.951379] ? usleep_range+0x120/0x120 [ 282.951387] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 282.963946] 0 [ 282.965182] ? call_timer_fn+0x570/0x570 [ 282.970230] 2570 [ 282.974749] ? unreserve_highatomic_pageblock+0x315/0x450 [ 282.979045] 2570 2570 [ 282.983446] __alloc_pages_slowpath+0x2052/0x2650 [ 282.983461] ? warn_alloc+0x100/0x100 [ 282.983467] ? get_page_from_freelist+0x1046/0x23b0 [ 282.983482] ? __might_sleep+0x93/0xb0 [ 282.988308] 2570 [ 282.992786] __alloc_pages_nodemask+0x60d/0x770 [ 282.992793] ? __alloc_pages_slowpath+0x2650/0x2650 [ 282.992804] ? wait_for_completion+0x440/0x440 [ 282.992815] alloc_pages_current+0xd6/0x1b0 [ 282.999800] ion_page_pool_alloc+0x102/0x180 [ 283.003366] Node 0 [ 283.005643] ion_system_heap_allocate+0x14e/0x930 [ 283.010072] DMA32 free:17944kB min:36384kB low:45480kB high:54576kB active_anon:21336kB inactive_anon:772kB active_file:172kB inactive_file:56kB unevictable:0kB writepending:96kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7040kB pagetables:1620kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 283.012191] ? do_raw_spin_unlock+0x16a/0x250 [ 283.016932] lowmem_reserve[]: [ 283.020386] ? ion_system_heap_free+0x270/0x270 [ 283.020395] ion_alloc+0x27f/0x770 [ 283.020405] ? ion_dma_buf_release+0x40/0x40 [ 283.020417] ? kasan_check_write+0x14/0x20 [ 283.040095] 0 [ 283.044150] ion_ioctl+0xe2/0x1b6 [ 283.048539] 0 [ 283.052933] ? ion_alloc.cold.15+0x32/0x32 [ 283.052946] do_vfs_ioctl+0x180/0xfb0 [ 283.052953] ? __fget+0x1ad/0x2f0 [ 283.052959] ? ioctl_preallocate+0x1a0/0x1a0 [ 283.052967] ? __fget+0x1ca/0x2f0 [ 283.052980] ? security_file_ioctl+0x6a/0xa0 [ 283.070108] 0 [ 283.071177] ? SyS_clock_settime+0x1a0/0x1a0 [ 283.076374] 0 [ 283.079473] ? security_file_ioctl+0x6a/0xa0 [ 283.100102] 0 [ 283.104923] SyS_ioctl+0x74/0x80 [ 283.126768] ? do_vfs_ioctl+0xfb0/0xfb0 [ 283.190113] Node 0 [ 283.190449] do_syscall_64+0x1c7/0x5b0 [ 283.195328] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.199300] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.220102] lowmem_reserve[]: [ 283.220367] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 283.225804] 0 [ 283.229657] RIP: 0033:0x45af49 [ 283.250110] 0 [ 283.250322] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 [ 283.254919] 0 [ 283.259239] ORIG_RAX: 0000000000000010 [ 283.270081] 0 [ 283.270681] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 283.303135] 0 [ 283.303499] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 283.311298] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 283.311302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 283.311305] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 283.350141] CPU: 1 PID: 7878 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 283.357833] 0*16kB [ 283.361459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.361463] Call Trace: [ 283.361478] dump_stack+0xf7/0x13b [ 283.361488] warn_alloc.cold.110+0xa2/0x1be [ 283.361493] ? zone_watermark_ok_safe+0x260/0x260 [ 283.361499] ? usleep_range+0x120/0x120 [ 283.361505] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 283.361512] ? call_timer_fn+0x570/0x570 [ 283.361517] ? unreserve_highatomic_pageblock+0x315/0x450 [ 283.361526] __alloc_pages_slowpath+0x2052/0x2650 [ 283.361541] ? warn_alloc+0x100/0x100 [ 283.361547] ? get_page_from_freelist+0x1046/0x23b0 [ 283.361560] ? __might_sleep+0x93/0xb0 [ 283.361566] __alloc_pages_nodemask+0x60d/0x770 [ 283.361574] ? __alloc_pages_slowpath+0x2650/0x2650 [ 283.361582] ? wait_for_completion+0x440/0x440 [ 283.361594] alloc_pages_current+0xd6/0x1b0 [ 283.361605] ion_page_pool_alloc+0x102/0x180 [ 283.361611] ion_system_heap_allocate+0x14e/0x930 [ 283.361619] ? do_raw_spin_unlock+0x16a/0x250 [ 283.361627] ? ion_system_heap_free+0x270/0x270 [ 283.361637] ion_alloc+0x27f/0x770 [ 283.361647] ? ion_dma_buf_release+0x40/0x40 [ 283.361658] ? kasan_check_write+0x14/0x20 [ 283.361666] ion_ioctl+0xe2/0x1b6 [ 283.364346] 0*32kB [ 283.367893] ? ion_alloc.cold.15+0x32/0x32 [ 283.367906] do_vfs_ioctl+0x180/0xfb0 [ 283.367913] ? __fget+0x1ad/0x2f0 [ 283.367920] ? ioctl_preallocate+0x1a0/0x1a0 [ 283.367928] ? __fget+0x1ca/0x2f0 [ 283.367942] ? security_file_ioctl+0x6a/0xa0 [ 283.367947] ? SyS_clock_settime+0x1a0/0x1a0 [ 283.367951] ? security_file_ioctl+0x6a/0xa0 [ 283.367958] SyS_ioctl+0x74/0x80 [ 283.367964] ? do_vfs_ioctl+0xfb0/0xfb0 [ 283.367972] do_syscall_64+0x1c7/0x5b0 [ 283.367977] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.367989] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 283.367997] RIP: 0033:0x45af49 [ 283.370416] 0*64kB [ 283.373239] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.373250] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 283.373253] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 283.373256] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 283.373258] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 283.373262] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 283.726594] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.733299] Node 1 Normal: 1*4kB (E) 2*8kB (UM) 1*16kB (M) 0*32kB 1*64kB (M) 3*128kB (UME) 4*256kB (UME) 4*512kB (ME) 111*1024kB (UME) 84*2048kB (UE) 17*4096kB (U) = 358884kB [ 283.749708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.758693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 283.767678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.776607] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 283.785587] 946 total pagecache pages [ 283.789514] 0 pages in swap cache [ 283.793402] Swap cache stats: add 0, delete 0, find 0/0 [ 283.798910] Free swap = 0kB [ 283.798984] Node 1 [ 283.802267] Total swap = 0kB [ 283.807523] 1965979 pages RAM [ 283.810957] 0 pages HighMem/MovableOnly [ 283.812349] Normal free:309408kB min:53504kB low:66880kB high:80256kB active_anon:224kB inactive_anon:12kB active_file:12kB inactive_file:2716kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:84kB bounce:0kB free_pcp:484kB local_pcp:264kB free_cma:0kB [ 283.814925] 335868 pages reserved [ 283.863849] 0 pages cma reserved [ 283.867271] Out of memory: Kill process 7889 (syz-executor.3) score 1000 or sacrifice child [ 283.870092] lowmem_reserve[]: 0 0 0 0 0 [ 283.879784] Node 0 DMA: 1*4kB (U) 1*8kB (U) 32*16kB (UE) 22*32kB (U) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10380kB [ 283.890098] Killed process 7890 (syz-executor.3) total-vm:38036kB, anon-rss:128kB, file-rss:0kB, shmem-rss:0kB [ 283.924213] Node 0 DMA32: 14*4kB (M) 25*8kB (UME) 5*16kB (ME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UE) 3*256kB (UE) 32*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18128kB [ 283.940933] oom_reaper: reaped process 7890 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 283.963727] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 283.971470] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.982473] Node 1 Normal: 2*4kB (UM) 2*8kB (UE) 1*16kB (U) 0*32kB 1*64kB (M) 1*128kB (M) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 67*2048kB (UE) 17*4096kB (U) = 211944kB [ 283.999260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.009470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 284.018670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.028243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 284.034805] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 284.036992] 2019 total pagecache pages [ 284.051470] 0 pages in swap cache [ 284.055140] Swap cache stats: add 0, delete 0, find 0/0 [ 284.062612] Free swap = 0kB [ 284.065785] Total swap = 0kB [ 284.068812] 1965979 pages RAM [ 284.072074] 0 pages HighMem/MovableOnly [ 284.076055] 335868 pages reserved [ 284.079921] 0 pages cma reserved [ 284.084605] device bridge_slave_1 left promiscuous mode [ 284.096399] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.108798] warn_alloc_show_mem: 2 callbacks suppressed [ 284.108802] Mem-Info: [ 284.118747] active_anon:5390 inactive_anon:196 isolated_anon:0 [ 284.118747] active_file:156 inactive_file:1932 isolated_file:0 [ 284.118747] unevictable:0 dirty:54 writeback:0 unstable:0 [ 284.118747] slab_reclaimable:14419 slab_unreclaimable:96772 [ 284.118747] mapped:1352 shmem:250 pagetables:426 bounce:0 [ 284.118747] free:49835 free_pcp:291 free_cma:0 [ 284.156983] Node 0 active_anon:21336kB inactive_anon:772kB active_file:112kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:96kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 284.190306] Node 1 active_anon:224kB inactive_anon:12kB active_file:1212kB inactive_file:7016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5400kB dirty:120kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 284.220129] Node 0 DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.246621] device bridge_slave_0 left promiscuous mode [ 284.258771] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.268930] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 284.279130] Node 0 DMA32 free:19168kB min:36384kB low:45480kB high:54576kB active_anon:21336kB inactive_anon:772kB active_file:112kB inactive_file:112kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1620kB bounce:0kB free_pcp:780kB local_pcp:392kB free_cma:0kB [ 284.308293] lowmem_reserve[]: 0 0 0 0 0 [ 284.316496] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.349201] lowmem_reserve[]: 0 0 0 0 0 [ 284.353394] Node 1 Normal free:64356kB min:53504kB low:66880kB high:80256kB active_anon:220kB inactive_anon:16kB active_file:1284kB inactive_file:7020kB unevictable:0kB writepending:152kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:96kB bounce:0kB free_pcp:952kB local_pcp:180kB free_cma:0kB [ 284.392585] device veth1_vlan left promiscuous mode [ 284.397678] device veth0_vlan left promiscuous mode [ 284.410924] lowmem_reserve[]: 0 0 0 0 0 [ 284.415262] Node 0 DMA: 1*4kB (U) 1*8kB (U) 32*16kB (UE) 22*32kB (U) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10380kB [ 284.442401] Node 0 DMA32: 94*4kB (UME) 186*8kB (UME) 40*16kB (UME) 247*32kB (UM) 80*64kB (UME) 6*128kB (UE) 3*256kB (UE) 32*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 33448kB 2020/03/09 03:19:54 executed programs: 85 [ 284.548476] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 284.581552] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 284.597978] Node 1 Normal: 121*4kB (UME) 108*8kB (UME) 106*16kB (ME) 57*32kB (ME) 29*64kB (UM) 3*128kB (M) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (ME) 9*4096kB (U) = 51396kB [ 284.627684] blkid invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000 [ 284.628569] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 284.657273] blkid cpuset= [ 284.665112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.670522] CPU: 0 PID: 7900 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 284.684638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.694241] Call Trace: [ 284.696849] dump_stack+0xf7/0x13b [ 284.700421] warn_alloc.cold.110+0xa2/0x1be [ 284.704907] ? zone_watermark_ok_safe+0x260/0x260 [ 284.709781] ? __alloc_pages_direct_compact+0xc2/0x330 [ 284.715056] __alloc_pages_slowpath+0x2052/0x2650 [ 284.719890] ? trace_hardirqs_off+0x10/0x10 [ 284.724215] ? warn_alloc+0x100/0x100 [ 284.728014] ? get_page_from_freelist+0x1046/0x23b0 [ 284.733041] ? __might_sleep+0x93/0xb0 [ 284.737039] __alloc_pages_nodemask+0x60d/0x770 [ 284.741714] ? retint_kernel+0x2d/0x2d [ 284.745952] ? __alloc_pages_slowpath+0x2650/0x2650 [ 284.750957] ? wait_for_completion+0x440/0x440 [ 284.755544] alloc_pages_current+0xd6/0x1b0 [ 284.759948] ion_page_pool_alloc+0x102/0x180 [ 284.764374] ion_system_heap_allocate+0x14e/0x930 [ 284.769212] ? ion_system_heap_free+0x270/0x270 [ 284.773900] ion_alloc+0x216/0x770 [ 284.777433] ? ion_dma_buf_release+0x40/0x40 [ 284.781833] ion_ioctl+0xe2/0x1b6 [ 284.785283] ? ion_alloc.cold.15+0x32/0x32 [ 284.789512] do_vfs_ioctl+0x180/0xfb0 [ 284.793302] ? __fget+0x1ad/0x2f0 [ 284.796737] ? ioctl_preallocate+0x1a0/0x1a0 [ 284.801150] ? __fget+0x1ca/0x2f0 [ 284.804596] ? security_file_ioctl+0x6a/0xa0 [ 284.808990] ? SyS_clock_settime+0x1a0/0x1a0 [ 284.813387] ? security_file_ioctl+0x6a/0xa0 [ 284.817796] SyS_ioctl+0x74/0x80 [ 284.821155] ? do_vfs_ioctl+0xfb0/0xfb0 [ 284.825138] do_syscall_64+0x1c7/0x5b0 [ 284.829012] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.833877] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 284.839082] RIP: 0033:0x45af49 [ 284.842276] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.849986] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 284.857251] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 284.864722] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 284.872077] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 284.879547] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 284.894540] / mems_allowed=0-1 [ 284.898381] CPU: 0 PID: 7901 Comm: blkid Not tainted 4.14.172-syzkaller #0 [ 284.903660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 284.905404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.916638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.923548] Call Trace: [ 284.923569] dump_stack+0xf7/0x13b [ 284.923581] dump_header+0x160/0x63f [ 284.923590] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 284.923598] ? ___ratelimit+0x243/0x519 [ 284.923613] ? do_raw_spin_unlock+0x16a/0x250 [ 284.923620] oom_kill_process.cold.24+0xb/0xa1a [ 284.923624] ? out_of_memory+0x7f9/0x1030 [ 284.923632] ? lock_downgrade+0x7f0/0x7f0 [ 284.923641] out_of_memory+0x2b0/0x1030 [ 284.923649] ? oom_killer_disable+0x1a0/0x1a0 [ 284.923657] ? __alloc_pages_slowpath+0xb69/0x2650 [ 284.923662] __alloc_pages_slowpath+0x1ef3/0x2650 [ 284.923679] ? warn_alloc+0x100/0x100 [ 284.932634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 284.935134] ? get_page_from_freelist+0x1046/0x23b0 [ 284.938667] 321 total pagecache pages [ 284.942415] ? __might_sleep+0x93/0xb0 [ 284.942425] __alloc_pages_nodemask+0x60d/0x770 [ 284.942434] ? __alloc_pages_slowpath+0x2650/0x2650 [ 284.942443] ? trace_hardirqs_on+0xd/0x10 [ 284.942449] ? add_mm_counter_fast+0xc0/0xc0 [ 284.942458] alloc_pages_vma+0xad/0x420 [ 284.942465] __handle_mm_fault+0xc95/0x3870 [ 284.942471] ? copy_page_range+0x1d10/0x1d10 [ 284.942477] ? find_held_lock+0x36/0x1d0 [ 284.942492] handle_mm_fault+0x234/0x6e0 [ 284.942497] ? find_vma+0x1a/0x150 [ 284.942505] __do_page_fault+0x44d/0xb00 [ 284.947617] 0 pages in swap cache [ 284.951612] ? prepare_bprm_creds+0x100/0x100 [ 284.951624] ? vmalloc_fault+0xc90/0xc90 [ 284.951633] ? retint_user+0x18/0x18 [ 284.951638] ? page_fault+0x2f/0x50 [ 284.951643] do_page_fault+0x64/0x3fb [ 284.951647] ? page_fault+0x2f/0x50 [ 284.951651] page_fault+0x45/0x50 [ 284.951657] RIP: 0033:0x7f26fb30715e [ 284.951659] RSP: 002b:00007ffd58c3b500 EFLAGS: 00010206 [ 284.951665] RAX: 00000000b12e4de3 RBX: 00007ffd58c3b560 RCX: 00007f26fb306000 [ 284.951667] RDX: 00007f26fb525e30 RSI: 0000000000000000 RDI: 00007ffd58c3b560 [ 284.951670] RBP: 00007ffd58c3b550 R08: 0000000000000000 R09: 0000000000000000 [ 284.951673] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 284.951675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.957093] Mem-Info: [ 284.960903] Swap cache stats: add 0, delete 0, find 0/0 [ 284.960909] Free swap = 0kB [ 284.965121] active_anon:5364 inactive_anon:196 isolated_anon:0 [ 284.965121] active_file:38 inactive_file:26 isolated_file:25 [ 284.965121] unevictable:0 dirty:24 writeback:0 unstable:0 [ 284.965121] slab_reclaimable:14450 slab_unreclaimable:96608 [ 284.965121] mapped:37 shmem:250 pagetables:392 bounce:0 [ 284.965121] free:13685 free_pcp:30 free_cma:0 [ 284.969201] Total swap = 0kB [ 284.977055] Node 0 active_anon:21236kB inactive_anon:768kB active_file:76kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 284.977883] 1965979 pages RAM [ 284.983562] Node 1 active_anon:220kB inactive_anon:16kB active_file:76kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:140kB dirty:96kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 284.988437] 0 pages HighMem/MovableOnly [ 284.996021] Node 0 [ 285.001330] 335868 pages reserved [ 285.006362] DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.009809] 0 pages cma reserved [ 285.017438] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 285.289561] Node 0 DMA32 free:146976kB min:36384kB low:45480kB high:54576kB active_anon:21252kB inactive_anon:764kB active_file:112kB inactive_file:264kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1528kB bounce:0kB free_pcp:200kB local_pcp:144kB free_cma:0kB [ 285.319817] lowmem_reserve[]: 0 0 0 0 0 [ 285.328134] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.357797] lowmem_reserve[]: 0 0 0 0 0 [ 285.362870] Node 1 Normal free:317352kB min:53504kB low:66880kB high:80256kB active_anon:232kB inactive_anon:12kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:132kB bounce:0kB free_pcp:672kB local_pcp:0kB free_cma:0kB [ 285.391930] lowmem_reserve[]: 0 0 0 0 0 [ 285.396429] Node 0 DMA: 1*4kB (U) 8*8kB (U) 32*16kB (UE) 22*32kB (U) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10436kB [ 285.415463] Node 0 DMA32: 1*4kB (U) 2*8kB (UM) 0*16kB 2*32kB (UM) 1*64kB (M) 0*128kB 89*256kB (U) 54*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 50580kB [ 285.429241] Mem-Info: [ 285.431922] active_anon:5371 inactive_anon:194 isolated_anon:0 [ 285.431922] active_file:110 inactive_file:237 isolated_file:17 [ 285.431922] unevictable:0 dirty:0 writeback:0 unstable:0 [ 285.431922] slab_reclaimable:14473 slab_unreclaimable:96610 [ 285.431922] mapped:256 shmem:250 pagetables:415 bounce:0 [ 285.431922] free:91325 free_pcp:241 free_cma:0 [ 285.452337] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 285.509306] Node 0 active_anon:21252kB inactive_anon:764kB active_file:412kB inactive_file:716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1008kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 285.531094] Node 1 Normal: 2*4kB (UE) 5*8kB (UME) 2*16kB (UE) 2*32kB (E) 161*64kB (UM) 71*128kB (UM) 31*256kB (UME) 9*512kB (UME) 30*1024kB (UME) 30*2048kB (UME) 5*4096kB (U) = 144720kB [ 285.580754] Node 1 active_anon:232kB inactive_anon:12kB active_file:28kB inactive_file:1332kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:1016kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 285.618752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.639421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 285.651147] device hsr_slave_1 left promiscuous mode [ 285.669403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.691945] Node 0 DMA free:10496kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.695552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 285.727327] device hsr_slave_0 left promiscuous mode [ 285.732663] 773 total pagecache pages [ 285.746090] 0 pages in swap cache [ 285.752954] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 285.759195] Swap cache stats: add 0, delete 0, find 0/0 [ 285.767928] Node 0 DMA32 free:18112kB min:36384kB low:45480kB high:54576kB active_anon:21252kB inactive_anon:764kB active_file:812kB inactive_file:648kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1528kB bounce:0kB free_pcp:460kB local_pcp:200kB free_cma:0kB [ 285.767950] Free swap = 0kB [ 285.801796] Total swap = 0kB [ 285.804824] 1965979 pages RAM [ 285.807920] 0 pages HighMem/MovableOnly [ 285.813220] 335868 pages reserved [ 285.816708] 0 pages cma reserved [ 285.819406] team0 (unregistering): Port device team_slave_1 removed [ 285.822407] Out of memory: Kill process 7899 (syz-executor.5) score 999 or sacrifice child [ 285.835595] team0 (unregistering): Port device team_slave_0 removed [ 285.836552] Killed process 7900 (syz-executor.5) total-vm:38036kB, anon-rss:124kB, file-rss:52kB, shmem-rss:0kB [ 285.853702] lowmem_reserve[]: 0 0 0 0 0 [ 285.857747] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.883545] oom_reaper: reaped process 7900 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 285.893615] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 285.911787] lowmem_reserve[]: 0 0 0 0 0 [ 285.915822] Node 1 Normal free:29412kB min:53504kB low:66880kB high:80256kB active_anon:232kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:24kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:132kB bounce:0kB free_pcp:316kB local_pcp:168kB free_cma:0kB [ 285.979267] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 286.069867] lowmem_reserve[]: 0 0 0 0 0 [ 286.084064] Node 0 DMA: 0*4kB 4*8kB (U) 30*16kB (UE) 25*32kB (U) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10464kB [ 286.157148] Node 0 DMA32: 1*4kB (E) 1*8kB (E) 2*16kB (UM) 1*32kB (E) 100*64kB (UM) 161*128kB (UE) 34*256kB (UE) 31*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 51660kB [ 286.187206] bond0 (unregistering): Released all slaves [ 286.224716] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 286.260634] Node 1 Normal: 31*4kB (UME) 29*8kB (UME) 28*16kB (ME) 18*32kB (ME) 18*64kB (M) 14*128kB (UM) 8*256kB (ME) 7*512kB (ME) 3*1024kB (UME) 4*2048kB (UME) 2*4096kB (U) = 29412kB [ 286.292468] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 286.333503] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 286.338590] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 286.343113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.359268] CPU: 0 PID: 7906 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 286.364947] team0: Port device team_slave_0 added [ 286.367126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.367131] Call Trace: [ 286.367146] dump_stack+0xf7/0x13b [ 286.367160] warn_alloc.cold.110+0xa2/0x1be [ 286.391801] ? zone_watermark_ok_safe+0x260/0x260 [ 286.396673] ? __alloc_pages_direct_compact+0xc2/0x330 [ 286.397878] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 286.401979] __alloc_pages_slowpath+0x2052/0x2650 [ 286.401995] ? trace_hardirqs_off+0x10/0x10 [ 286.402002] ? warn_alloc+0x100/0x100 [ 286.402008] ? get_page_from_freelist+0x1046/0x23b0 [ 286.402026] ? __might_sleep+0x93/0xb0 [ 286.402032] __alloc_pages_nodemask+0x60d/0x770 [ 286.402037] ? trace_hardirqs_off+0x10/0x10 [ 286.402043] ? __alloc_pages_slowpath+0x2650/0x2650 [ 286.402055] ? wait_for_completion+0x440/0x440 [ 286.402066] alloc_pages_current+0xd6/0x1b0 [ 286.402077] ion_page_pool_alloc+0x102/0x180 [ 286.402083] ion_system_heap_allocate+0x14e/0x930 [ 286.402090] ? ion_system_heap_free+0x270/0x270 [ 286.402101] ion_alloc+0x216/0x770 [ 286.439422] team0: Port device team_slave_1 added [ 286.439841] ? ion_dma_buf_release+0x40/0x40 [ 286.463447] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 286.467853] ? kasan_check_write+0x14/0x20 [ 286.467864] ion_ioctl+0xe2/0x1b6 [ 286.495803] ? ion_alloc.cold.15+0x32/0x32 [ 286.499021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 286.500044] do_vfs_ioctl+0x180/0xfb0 [ 286.500053] ? __fget+0x1ad/0x2f0 [ 286.500060] ? ioctl_preallocate+0x1a0/0x1a0 [ 286.500069] ? __fget+0x1ca/0x2f0 [ 286.500081] ? security_file_ioctl+0x6a/0xa0 [ 286.500087] ? SyS_clock_settime+0x1a0/0x1a0 [ 286.500091] ? security_file_ioctl+0x6a/0xa0 [ 286.500097] SyS_ioctl+0x74/0x80 [ 286.500102] ? do_vfs_ioctl+0xfb0/0xfb0 [ 286.500110] do_syscall_64+0x1c7/0x5b0 [ 286.500115] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 286.500128] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 286.500133] RIP: 0033:0x45af49 [ 286.500137] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.568545] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 286.575925] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 286.583210] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 286.590499] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 286.597779] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 286.616225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 2020/03/09 03:19:56 result: hanged=false err=executor 4: exit status 67 pthread_create failed (errno 12) clone failed (errno 12) loop exited with status 67 pthread_create failed (errno 12) clone failed (errno 12) loop exited with status 67 [ 286.633887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.637054] device hsr_slave_0 entered promiscuous mode [ 286.656977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 286.678528] 2614 total pagecache pages [ 286.687000] 0 pages in swap cache [ 286.694825] Swap cache stats: add 0, delete 0, find 0/0 [ 286.707132] Free swap = 0kB [ 286.713666] Total swap = 0kB [ 286.720434] device hsr_slave_1 entered promiscuous mode [ 286.724383] 1965979 pages RAM [ 286.733468] 0 pages HighMem/MovableOnly [ 286.742009] 335868 pages reserved [ 286.748995] 0 pages cma reserved [ 286.761040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 286.768411] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 287.099745] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 287.157750] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 287.223839] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 287.233500] CPU: 0 PID: 7911 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 287.241362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.243653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.250714] Call Trace: [ 287.250733] dump_stack+0xf7/0x13b [ 287.250743] warn_alloc.cold.110+0xa2/0x1be [ 287.250748] ? zone_watermark_ok_safe+0x260/0x260 [ 287.250761] ? __alloc_pages_direct_compact+0xc2/0x330 [ 287.250767] __alloc_pages_slowpath+0x2052/0x2650 [ 287.250782] ? trace_hardirqs_off+0x10/0x10 [ 287.250789] ? warn_alloc+0x100/0x100 [ 287.250795] ? get_page_from_freelist+0x1046/0x23b0 [ 287.250809] ? __might_sleep+0x93/0xb0 [ 287.250815] __alloc_pages_nodemask+0x60d/0x770 [ 287.250821] ? __alloc_pages_slowpath+0x2650/0x2650 [ 287.250829] ? wait_for_completion+0x440/0x440 [ 287.250840] alloc_pages_current+0xd6/0x1b0 [ 287.250851] ion_page_pool_alloc+0x102/0x180 [ 287.250858] ion_system_heap_allocate+0x14e/0x930 [ 287.250867] ? ion_system_heap_free+0x270/0x270 [ 287.250876] ion_alloc+0x216/0x770 [ 287.250884] ? ion_dma_buf_release+0x40/0x40 [ 287.250895] ? kasan_check_write+0x14/0x20 [ 287.250900] ion_ioctl+0xe2/0x1b6 [ 287.250905] ? ion_alloc.cold.15+0x32/0x32 [ 287.250917] do_vfs_ioctl+0x180/0xfb0 [ 287.250924] ? __fget+0x1ad/0x2f0 [ 287.250930] ? ioctl_preallocate+0x1a0/0x1a0 [ 287.250937] ? __fget+0x1ca/0x2f0 [ 287.250948] ? security_file_ioctl+0x6a/0xa0 [ 287.250953] ? SyS_clock_settime+0x1a0/0x1a0 [ 287.250958] ? security_file_ioctl+0x6a/0xa0 [ 287.250963] SyS_ioctl+0x74/0x80 [ 287.250968] ? do_vfs_ioctl+0xfb0/0xfb0 [ 287.250976] do_syscall_64+0x1c7/0x5b0 [ 287.250980] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 287.250989] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 287.250994] RIP: 0033:0x45af49 [ 287.250997] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.251004] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 287.251007] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 287.251010] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 287.251014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 287.251016] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 287.302542] Mem-Info: [ 287.441138] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 287.514057] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 287.545852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.561594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.597458] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 287.613705] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.650841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 287.683454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 287.695922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.734168] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.740643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.771949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 287.787156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.790121] active_anon:5371 inactive_anon:196 isolated_anon:0 [ 287.790121] active_file:179 inactive_file:181 isolated_file:0 [ 287.790121] unevictable:0 dirty:0 writeback:0 unstable:0 [ 287.790121] slab_reclaimable:14547 slab_unreclaimable:96173 [ 287.790121] mapped:302 shmem:250 pagetables:415 bounce:0 [ 287.790121] free:30233 free_pcp:50 free_cma:0 [ 287.803172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.913462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.933877] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.940125] Node 0 active_anon:21320kB inactive_anon:776kB active_file:572kB inactive_file:304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:808kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 287.940345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.981935] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 288.015565] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 288.024168] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 288.039487] CPU: 1 PID: 6992 Comm: rs:main Q:Reg Not tainted 4.14.172-syzkaller #0 [ 288.047249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.056606] Call Trace: [ 288.059197] dump_stack+0xf7/0x13b [ 288.062748] dump_header+0x160/0x63f [ 288.066464] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 288.071567] ? ___ratelimit+0x243/0x519 [ 288.075536] ? do_raw_spin_unlock+0x16a/0x250 [ 288.080034] oom_kill_process.cold.24+0xb/0xa1a [ 288.084793] ? out_of_memory+0x7f9/0x1030 [ 288.088946] ? lock_downgrade+0x7f0/0x7f0 [ 288.093100] out_of_memory+0x2b0/0x1030 [ 288.097091] ? oom_killer_disable+0x1a0/0x1a0 [ 288.101670] ? __alloc_pages_slowpath+0xb69/0x2650 [ 288.106598] __alloc_pages_slowpath+0x1ef3/0x2650 [ 288.111456] ? warn_alloc+0x100/0x100 [ 288.115276] ? get_page_from_freelist+0x1046/0x23b0 [ 288.120311] ? __might_sleep+0x93/0xb0 [ 288.124203] __alloc_pages_nodemask+0x60d/0x770 [ 288.128870] ? __alloc_pages_slowpath+0x2650/0x2650 [ 288.133913] ? find_get_entry+0xd7/0x5a0 [ 288.137969] ? lock_downgrade+0x7f0/0x7f0 [ 288.142115] ? radix_tree_lookup_slot+0x55/0x90 [ 288.146802] alloc_pages_current+0xd6/0x1b0 [ 288.151127] __page_cache_alloc+0x1da/0x330 [ 288.155451] ? trace_hardirqs_off+0x10/0x10 [ 288.159776] pagecache_get_page+0x129/0x7c0 [ 288.164097] grab_cache_page_write_begin+0x55/0x90 [ 288.169022] ? rcu_read_lock_sched_held+0x108/0x120 [ 288.174083] ext4_da_write_begin+0x243/0xd30 [ 288.178514] ? ext4_write_begin+0x10e0/0x10e0 [ 288.183280] ? balance_dirty_pages_ratelimited+0x751/0x14e0 [ 288.188990] generic_perform_write+0x271/0x450 [ 288.193596] ? __mark_inode_dirty+0x58c/0xe80 [ 288.198095] ? page_endio+0x410/0x410 [ 288.201891] ? file_update_time+0x22d/0x360 [ 288.206222] ? __lock_acquire+0x6a4/0x4500 [ 288.210492] ? current_time+0xa0/0xa0 [ 288.214301] ? lock_acquire+0x173/0x400 [ 288.218420] ? ext4_file_write_iter+0x1db/0xe40 [ 288.223107] __generic_file_write_iter+0x201/0x580 [ 288.228043] ext4_file_write_iter+0x27a/0xe40 [ 288.232537] ? trace_hardirqs_off+0x10/0x10 [ 288.236863] ? find_held_lock+0x36/0x1d0 [ 288.240921] ? ext4_file_mmap+0x260/0x260 [ 288.245072] ? trace_hardirqs_on+0x10/0x10 [ 288.249327] ? trace_hardirqs_off+0x10/0x10 [ 288.253740] __vfs_write+0x413/0x840 [ 288.257453] ? trace_hardirqs_off+0x10/0x10 [ 288.261784] ? kernel_read+0x130/0x130 [ 288.265669] ? __lock_is_held+0xb5/0x140 [ 288.269736] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 288.274493] ? __sb_start_write+0x1f3/0x2a0 [ 288.278839] vfs_write+0x150/0x4f0 [ 288.282387] SyS_write+0x100/0x250 [ 288.285972] ? firmware_map_remove+0x177/0x177 [ 288.290707] ? SyS_read+0x250/0x250 [ 288.294359] ? do_syscall_64+0x4c/0x5b0 [ 288.298337] ? SyS_read+0x250/0x250 [ 288.302054] do_syscall_64+0x1c7/0x5b0 [ 288.305954] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.310807] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 288.316011] RIP: 0033:0x7f79068fd19d [ 288.319731] RSP: 002b:00007f7904e9e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 288.327435] RAX: ffffffffffffffda RBX: 0000000000000229 RCX: 00007f79068fd19d [ 288.334705] RDX: 0000000000000229 RSI: 00000000020bc340 RDI: 0000000000000001 [ 288.342325] RBP: 00000000020bc340 R08: 00000000020bc559 R09: 302039202072614d [ 288.349619] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 288.356900] R13: 00007f7904e9e480 R14: 0000000000000003 R15: 00000000020bc140 [ 288.374033] Node 1 active_anon:164kB inactive_anon:8kB active_file:4kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:8kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 288.380161] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 288.419472] CPU: 1 PID: 7903 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 288.427280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.436648] Call Trace: [ 288.439239] dump_stack+0xf7/0x13b [ 288.440069] Node 0 DMA free:10384kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.442779] warn_alloc.cold.110+0xa2/0x1be [ 288.442786] ? zone_watermark_ok_safe+0x260/0x260 [ 288.478187] ? __alloc_pages_direct_compact+0xc2/0x330 [ 288.483458] __alloc_pages_slowpath+0x2052/0x2650 [ 288.484676] lowmem_reserve[]: 0 [ 288.489326] ? trace_hardirqs_off+0x10/0x10 [ 288.489344] ? warn_alloc+0x100/0x100 [ 288.492710] 2570 [ 288.496964] ? get_page_from_freelist+0x1046/0x23b0 [ 288.500786] 2570 [ 288.502814] ? __might_sleep+0x93/0xb0 [ 288.507802] 2570 [ 288.509859] __alloc_pages_nodemask+0x60d/0x770 [ 288.513764] 2570 [ 288.515800] ? __alloc_pages_slowpath+0x2650/0x2650 [ 288.522505] ? wait_for_completion+0x440/0x440 [ 288.527509] Node 0 [ 288.532085] alloc_pages_current+0xd6/0x1b0 [ 288.532096] ion_page_pool_alloc+0x102/0x180 [ 288.532101] ion_system_heap_allocate+0x14e/0x930 [ 288.532109] ? ion_system_heap_free+0x270/0x270 [ 288.532119] ion_alloc+0x216/0x770 [ 288.534361] DMA32 free:19060kB min:36384kB low:45480kB high:54576kB active_anon:21320kB inactive_anon:776kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1544kB bounce:0kB free_pcp:232kB local_pcp:232kB free_cma:0kB [ 288.538674] ? ion_dma_buf_release+0x40/0x40 [ 288.543110] lowmem_reserve[]: [ 288.547909] ? kasan_check_write+0x14/0x20 [ 288.552603] 0 [ 288.556101] ion_ioctl+0xe2/0x1b6 [ 288.586431] 0 [ 288.590796] ? ion_alloc.cold.15+0x32/0x32 [ 288.590817] do_vfs_ioctl+0x180/0xfb0 [ 288.595490] 0 [ 288.599819] ? __fget+0x1ad/0x2f0 [ 288.601653] 0 [ 288.605198] ? ioctl_preallocate+0x1a0/0x1a0 [ 288.606971] 0 [ 288.611212] ? __fget+0x1ca/0x2f0 [ 288.611225] ? security_file_ioctl+0x6a/0xa0 [ 288.611231] ? SyS_clock_settime+0x1a0/0x1a0 [ 288.611234] ? security_file_ioctl+0x6a/0xa0 [ 288.611242] SyS_ioctl+0x74/0x80 [ 288.611249] ? do_vfs_ioctl+0xfb0/0xfb0 [ 288.611258] do_syscall_64+0x1c7/0x5b0 [ 288.616870] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.620348] Node 0 [ 288.622089] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 288.626469] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.628252] RIP: 0033:0x45af49 [ 288.631716] lowmem_reserve[]: [ 288.636088] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.640526] 0 [ 288.644888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 288.644893] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 288.648238] 0 [ 288.652192] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 288.652195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 288.652198] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 288.661510] warn_alloc_show_mem: 1 callbacks suppressed [ 288.661513] Mem-Info: [ 288.672124] 0 [ 288.699820] active_anon:5371 inactive_anon:196 isolated_anon:0 [ 288.699820] active_file:14 inactive_file:14 isolated_file:0 [ 288.699820] unevictable:0 dirty:0 writeback:0 unstable:0 [ 288.699820] slab_reclaimable:14365 slab_unreclaimable:95996 [ 288.699820] mapped:2 shmem:250 pagetables:415 bounce:0 [ 288.699820] free:13854 free_pcp:0 free_cma:0 [ 288.699874] syz-executor.5: [ 288.707702] Node 0 active_anon:21320kB inactive_anon:776kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 288.715796] 0 [ 288.736135] Node 1 active_anon:164kB inactive_anon:8kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 288.740725] syz-executor.3: [ 288.753851] page allocation failure: order:0 [ 288.760215] page allocation failure: order:0 [ 288.793594] Node 0 [ 288.826802] 0 [ 288.855458] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 288.861274] Node 1 Normal free:26656kB min:53504kB low:66880kB high:80256kB active_anon:164kB inactive_anon:8kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:116kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 288.861287] lowmem_reserve[]: 0 0 0 0 [ 288.863592] (null) [ 288.865350] 0 [ 288.879030] syz-executor.5 cpuset= [ 288.907142] Mem-Info: [ 288.912689] DMA free:10384kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.913101] active_anon:5371 inactive_anon:196 isolated_anon:0 [ 288.913101] active_file:14 inactive_file:14 isolated_file:0 [ 288.913101] unevictable:0 dirty:0 writeback:0 unstable:0 [ 288.913101] slab_reclaimable:14365 slab_unreclaimable:95996 [ 288.913101] mapped:2 shmem:250 pagetables:415 bounce:0 [ 288.913101] free:13777 free_pcp:66 free_cma:0 [ 288.915416] lowmem_reserve[]: 0 [ 288.974444] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 288.984708] syz5 mems_allowed=0-1 [ 288.986985] Node 0 active_anon:21320kB inactive_anon:776kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 288.988196] CPU: 1 PID: 7900 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 289.015453] Node 0 [ 289.023103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.023108] Call Trace: [ 289.023126] dump_stack+0xf7/0x13b [ 289.023137] warn_alloc.cold.110+0xa2/0x1be [ 289.023142] ? zone_watermark_ok_safe+0x260/0x260 [ 289.023151] ? usleep_range+0x120/0x120 [ 289.025375] DMA: [ 289.034749] ? rcu_read_lock_sched_held+0x108/0x120 [ 289.034758] ? call_timer_fn+0x570/0x570 [ 289.034772] __alloc_pages_slowpath+0x2052/0x2650 [ 289.034789] ? warn_alloc+0x100/0x100 [ 289.037503] Node 1 active_anon:164kB inactive_anon:8kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 289.041040] ? get_page_from_freelist+0x1046/0x23b0 [ 289.041055] ? __might_sleep+0x93/0xb0 [ 289.041061] __alloc_pages_nodemask+0x60d/0x770 [ 289.041070] ? __alloc_pages_slowpath+0x2650/0x2650 [ 289.041084] ? wait_for_completion+0x440/0x440 [ 289.045513] Node 0 [ 289.050385] alloc_pages_current+0xd6/0x1b0 [ 289.050399] ion_page_pool_alloc+0x102/0x180 [ 289.050404] ion_system_heap_allocate+0x14e/0x930 [ 289.050411] ? ion_system_heap_free+0x270/0x270 [ 289.050420] ion_alloc+0x216/0x770 [ 289.050430] ? ion_dma_buf_release+0x40/0x40 [ 289.054444] 0*4kB [ 289.056492] ion_ioctl+0xe2/0x1b6 [ 289.061556] 0*8kB [ 289.065539] ? ion_alloc.cold.15+0x32/0x32 [ 289.070407] DMA free:10384kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.074166] do_vfs_ioctl+0x180/0xfb0 [ 289.100412] 1*16kB [ 289.105371] ? __fget+0x1ad/0x2f0 [ 289.109225] (E) [ 289.113881] ? ioctl_preallocate+0x1a0/0x1a0 [ 289.113889] ? __fget+0x1ca/0x2f0 [ 289.113901] ? security_file_ioctl+0x6a/0xa0 [ 289.113906] ? SyS_clock_settime+0x1a0/0x1a0 [ 289.113910] ? security_file_ioctl+0x6a/0xa0 [ 289.113917] SyS_ioctl+0x74/0x80 [ 289.118927] 6*32kB [ 289.123500] ? do_vfs_ioctl+0xfb0/0xfb0 [ 289.123507] do_syscall_64+0x1c7/0x5b0 [ 289.123512] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.123525] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 289.123531] RIP: 0033:0x45af49 [ 289.125766] lowmem_reserve[]: [ 289.130120] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.130127] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 289.130129] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 289.130132] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 289.130135] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 289.130137] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 289.132040] syz-executor.3 cpuset= [ 289.134558] 0 [ 289.139404] syz3 [ 289.155045] (U) [ 289.159255] mems_allowed=0-1 [ 289.159849] 7*64kB [ 289.164132] CPU: 1 PID: 7895 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 289.164135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.164138] Call Trace: [ 289.164156] dump_stack+0xf7/0x13b [ 289.164166] warn_alloc.cold.110+0xa2/0x1be [ 289.164172] ? zone_watermark_ok_safe+0x260/0x260 [ 289.164178] ? usleep_range+0x120/0x120 [ 289.164188] ? rcu_read_lock_sched_held+0x108/0x120 [ 289.164199] ? call_timer_fn+0x570/0x570 [ 289.199883] 2570 [ 289.201127] __alloc_pages_slowpath+0x2052/0x2650 [ 289.201143] ? warn_alloc+0x100/0x100 [ 289.201149] ? get_page_from_freelist+0x1046/0x23b0 [ 289.201168] ? __might_sleep+0x93/0xb0 [ 289.205555] 2570 [ 289.208991] __alloc_pages_nodemask+0x60d/0x770 [ 289.213446] 2570 [ 289.217815] ? __alloc_pages_slowpath+0x2650/0x2650 [ 289.222267] (UE) [ 289.225574] ? wait_for_completion+0x440/0x440 [ 289.227785] 4*128kB [ 289.231748] alloc_pages_current+0xd6/0x1b0 [ 289.231760] ion_page_pool_alloc+0x102/0x180 [ 289.231765] ion_system_heap_allocate+0x14e/0x930 [ 289.231773] ? ion_system_heap_free+0x270/0x270 [ 289.231783] ion_alloc+0x216/0x770 [ 289.235804] 2570 [ 289.240641] ? ion_dma_buf_release+0x40/0x40 [ 289.240654] ? kasan_check_write+0x14/0x20 [ 289.240660] ion_ioctl+0xe2/0x1b6 [ 289.240666] ? ion_alloc.cold.15+0x32/0x32 [ 289.240678] do_vfs_ioctl+0x180/0xfb0 [ 289.240686] ? __fget+0x1ad/0x2f0 [ 289.245970] (UE) [ 289.249132] ? ioctl_preallocate+0x1a0/0x1a0 [ 289.259909] ? __fget+0x1ca/0x2f0 [ 289.267214] 2*256kB [ 289.274439] ? security_file_ioctl+0x6a/0xa0 [ 289.274446] ? SyS_clock_settime+0x1a0/0x1a0 [ 289.274450] ? security_file_ioctl+0x6a/0xa0 [ 289.274459] SyS_ioctl+0x74/0x80 [ 289.281750] Node 0 [ 289.288975] ? do_vfs_ioctl+0xfb0/0xfb0 [ 289.296323] (UE) [ 289.299794] do_syscall_64+0x1c7/0x5b0 [ 289.301631] 1*512kB [ 289.303561] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.305520] (E) [ 289.308620] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 289.310924] DMA32 free:18068kB min:36384kB low:45480kB high:54576kB active_anon:21320kB inactive_anon:776kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1544kB bounce:0kB free_pcp:144kB local_pcp:144kB free_cma:0kB [ 289.318641] RIP: 0033:0x45af49 [ 289.328138] 4*1024kB [ 289.330652] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.330659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 289.330662] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 289.330664] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 289.330667] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 289.330670] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 289.332837] 2570 [ 289.334239] (UE) [ 289.338518] 2570 2570 [ 289.355376] 2*2048kB [ 289.358126] 2570 [ 289.358614] (ME) [ 289.363575] Node 0 DMA32 free:18068kB min:36384kB low:45480kB high:54576kB active_anon:21320kB inactive_anon:776kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1544kB bounce:0kB free_pcp:144kB local_pcp:0kB free_cma:0kB [ 289.363586] lowmem_reserve[]: 0 0 0 0 0 [ 289.363600] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.363610] lowmem_reserve[]: 0 0 0 0 0 [ 289.363630] Node 1 [ 289.377291] lowmem_reserve[]: [ 289.378969] Normal free:26656kB min:53504kB low:66880kB high:80256kB active_anon:164kB inactive_anon:8kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:116kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 289.379541] 0 [ 289.384243] lowmem_reserve[]: 0 0 0 0 0 [ 289.384259] Node 0 DMA: 0*4kB 0*8kB 1*16kB (E) 6*32kB (U) 7*64kB (UE) 4*128kB (UE) 2*256kB (UE) 1*512kB (E) 4*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10384kB [ 289.384308] Node 0 DMA32: 88*4kB (ME) 1101*8kB (UME) 540*16kB (UME) 7*32kB [ 289.390811] 0*4096kB [ 289.392892] (U) [ 289.393497] = 10384kB [ 289.398030] 1*64kB [ 289.410391] 0 [ 289.415524] (U) [ 289.418712] 0 [ 289.422233] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18088kB [ 289.422252] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 289.422287] Node 1 Normal: 14*4kB (ME) 15*8kB (ME) 11*16kB (ME) 12*32kB (UME) 5*64kB (M) 6*128kB (M) 7*256kB (UME) 5*512kB (ME) 8*1024kB (UME) 4*2048kB (UME) 1*4096kB (U) = 26656kB [ 289.422343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.422346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 289.422349] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.422352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 289.422355] 278 total pagecache pages [ 289.422363] 0 pages in swap cache [ 289.422366] Swap cache stats: add 0, delete 0, find 0/0 [ 289.422368] Free swap = 0kB [ 289.422371] Total swap = 0kB [ 289.422376] 1965979 pages RAM [ 289.422378] 0 pages HighMem/MovableOnly [ 289.422379] 335868 pages reserved [ 289.422381] 0 pages cma reserved [ 289.442283] syz-executor.5: [ 289.449758] Node 0 [ 289.460760] page allocation failure: order:0 [ 289.478650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 289.500108] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 289.518668] DMA32: [ 289.603270] (null) [ 289.638594] 0 [ 289.692849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 289.841789] 0 [ 289.860135] warn_alloc_show_mem: 1 callbacks suppressed [ 289.860139] Mem-Info: [ 289.898979] active_anon:5371 inactive_anon:196 isolated_anon:0 [ 289.898979] active_file:239 inactive_file:154 isolated_file:0 [ 289.898979] unevictable:0 dirty:0 writeback:0 unstable:0 [ 289.898979] slab_reclaimable:14365 slab_unreclaimable:95996 [ 289.898979] mapped:302 shmem:250 pagetables:415 bounce:0 [ 289.898979] free:56462 free_pcp:261 free_cma:0 [ 289.932760] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 289.938529] CPU: 1 PID: 7903 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 289.946434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.955805] Call Trace: [ 289.958426] dump_stack+0xf7/0x13b [ 289.960074] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.962015] warn_alloc.cold.110+0xa2/0x1be [ 289.962022] ? zone_watermark_ok_safe+0x260/0x260 [ 289.996521] ? usleep_range+0x120/0x120 [ 290.000518] ? rcu_read_lock_sched_held+0x108/0x120 [ 290.005557] ? call_timer_fn+0x570/0x570 [ 290.009655] __alloc_pages_slowpath+0x2052/0x2650 [ 290.010067] 0*4kB 18*8kB (UE) 9*16kB [ 290.014526] ? warn_alloc+0x100/0x100 [ 290.014529] (ME) [ 290.018327] ? get_page_from_freelist+0x1046/0x23b0 [ 290.029198] ? __might_sleep+0x93/0xb0 [ 290.033109] __alloc_pages_nodemask+0x60d/0x770 [ 290.037811] ? __alloc_pages_slowpath+0x2650/0x2650 [ 290.040071] 1*32kB (U) [ 290.042867] ? wait_for_completion+0x440/0x440 [ 290.042878] alloc_pages_current+0xd6/0x1b0 [ 290.045456] 0*64kB [ 290.050089] ion_page_pool_alloc+0x102/0x180 [ 290.050095] ion_system_heap_allocate+0x14e/0x930 [ 290.050103] ? ion_system_heap_free+0x270/0x270 [ 290.050112] ion_alloc+0x216/0x770 [ 290.050121] ? ion_dma_buf_release+0x40/0x40 [ 290.056547] lowmem_reserve[]: [ 290.056662] ? kasan_check_write+0x14/0x20 [ 290.070985] 0 [ 290.074136] ion_ioctl+0xe2/0x1b6 [ 290.078523] 0 [ 290.081646] ? ion_alloc.cold.15+0x32/0x32 [ 290.081660] do_vfs_ioctl+0x180/0xfb0 [ 290.081668] ? __fget+0x1ad/0x2f0 [ 290.081673] ? ioctl_preallocate+0x1a0/0x1a0 [ 290.081681] ? __fget+0x1ca/0x2f0 [ 290.081695] ? security_file_ioctl+0x6a/0xa0 [ 290.090089] 0*128kB [ 290.091323] ? SyS_clock_settime+0x1a0/0x1a0 [ 290.093110] 18*256kB [ 290.097349] ? security_file_ioctl+0x6a/0xa0 [ 290.097363] SyS_ioctl+0x74/0x80 [ 290.122186] 0 [ 290.123687] ? do_vfs_ioctl+0xfb0/0xfb0 [ 290.126078] 0 0 [ 290.130506] do_syscall_64+0x1c7/0x5b0 [ 290.130515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 290.130527] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 290.130533] RIP: 0033:0x45af49 [ 290.130536] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.130542] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 290.130548] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 290.138350] (UM) [ 290.139668] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 290.139674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 290.141690] 7*512kB [ 290.145518] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 290.153452] syz-executor.5: [ 290.163082] Node 0 active_anon:21348kB inactive_anon:776kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:4kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 290.184231] Node 1 active_anon:164kB inactive_anon:8kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 290.197022] (U) [ 290.197952] Node 0 [ 290.200746] 20*1024kB [ 290.210379] DMA free:10412kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.215119] Node 1 [ 290.239793] lowmem_reserve[]: [ 290.268687] page allocation failure: order:4 [ 290.277233] 0 [ 290.296987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.307788] 2570 [ 290.311097] (U) [ 290.315890] 2570 [ 290.317899] 4*2048kB [ 290.319858] 2570 [ 290.323565] (U) 0*4096kB = 37184kB [ 290.330506] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 290.333313] 2570 [ 290.343064] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 290.352843] Node 1 Normal: 4*4kB (ME) 13*8kB (UME) 3*16kB (ME) 12*32kB (UME) 5*64kB (M) 7*128kB (UM) 7*256kB (UME) 5*512kB (ME) 8*1024kB (UME) 4*2048kB (UME) 1*4096kB (U) = 26600kB [ 290.357657] Node 0 [ 290.371756] Normal free:26600kB min:53504kB low:66880kB high:80256kB active_anon:164kB inactive_anon:8kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:116kB bounce:0kB free_pcp:200kB local_pcp:156kB free_cma:0kB [ 290.378709] syz-executor.5 cpuset= [ 290.404206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.412153] DMA32 free:18764kB min:36384kB low:45480kB high:54576kB active_anon:21356kB inactive_anon:776kB active_file:20kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1548kB bounce:0kB free_pcp:632kB local_pcp:0kB free_cma:0kB [ 290.416651] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 290.444949] syz5 mems_allowed=0-1 [ 290.456994] CPU: 1 PID: 7900 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 290.463954] lowmem_reserve[]: [ 290.464784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.464790] 0 [ 290.467875] Call Trace: [ 290.477287] 0 [ 290.479038] dump_stack+0xf7/0x13b [ 290.481626] 0 [ 290.483402] warn_alloc.cold.110+0xa2/0x1be [ 290.486915] 0 [ 290.488725] ? zone_watermark_ok_safe+0x260/0x260 [ 290.493072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.494821] ? __alloc_pages_direct_compact+0xc2/0x330 [ 290.499651] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 290.508513] __alloc_pages_slowpath+0x2052/0x2650 [ 290.508531] ? trace_hardirqs_off+0x10/0x10 [ 290.508538] ? warn_alloc+0x100/0x100 [ 290.508543] ? get_page_from_freelist+0x1046/0x23b0 [ 290.508557] ? __might_sleep+0x93/0xb0 [ 290.508564] __alloc_pages_nodemask+0x60d/0x770 [ 290.513923] 0 [ 290.522570] ? trace_hardirqs_off+0x10/0x10 [ 290.522579] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 290.522590] ? __alloc_pages_slowpath+0x2650/0x2650 [ 290.522597] ? wait_for_completion+0x440/0x440 [ 290.522607] alloc_pages_current+0xd6/0x1b0 [ 290.522617] ion_page_pool_alloc+0x102/0x180 [ 290.522624] ion_system_heap_allocate+0x14e/0x930 [ 290.527514] 289 total pagecache pages [ 290.531810] ? do_raw_spin_unlock+0x16a/0x250 [ 290.531822] ? ion_system_heap_free+0x270/0x270 [ 290.531831] ion_alloc+0x27f/0x770 [ 290.531839] ? ion_dma_buf_release+0x40/0x40 [ 290.531850] ion_ioctl+0xe2/0x1b6 [ 290.535636] 0 pages in swap cache [ 290.540638] ? ion_alloc.cold.15+0x32/0x32 [ 290.540651] do_vfs_ioctl+0x180/0xfb0 [ 290.540658] ? __fget+0x1ad/0x2f0 [ 290.540666] ? ioctl_preallocate+0x1a0/0x1a0 [ 290.549216] ? __fget+0x1ca/0x2f0 [ 290.551065] Node 0 [ 290.555345] ? security_file_ioctl+0x6a/0xa0 [ 290.560236] Swap cache stats: add 0, delete 0, find 0/0 [ 290.565209] ? SyS_clock_settime+0x1a0/0x1a0 [ 290.565221] ? security_file_ioctl+0x6a/0xa0 [ 290.569795] Free swap = 0kB [ 290.574114] SyS_ioctl+0x74/0x80 [ 290.574123] ? do_vfs_ioctl+0xfb0/0xfb0 [ 290.574129] do_syscall_64+0x1c7/0x5b0 [ 290.574134] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 290.574145] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 290.574151] RIP: 0033:0x45af49 [ 290.574154] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.574160] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 290.574163] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 290.574167] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 290.578587] DMA: [ 290.583411] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 290.583415] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 290.583604] lowmem_reserve[]: [ 290.587235] 1*4kB [ 290.600106] 0 [ 290.630407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.660104] 0 [ 290.667198] Total swap = 0kB [ 290.680114] 0 [ 290.683666] (U) [ 290.688514] 0 [ 290.695851] 1965979 pages RAM [ 290.703203] 0 [ 290.710738] 1*8kB [ 290.790090] 0 pages HighMem/MovableOnly [ 290.794101] 335868 pages reserved [ 290.803301] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.810083] (M) [ 290.840097] 0 pages cma reserved [ 290.902684] 2*16kB (ME) 2*32kB (UM) 11*64kB (UME) 5*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10412kB [ 290.917806] lowmem_reserve[]: 0 0 0 0 0 [ 290.930455] Node 0 DMA32: 22*4kB (E) 22*8kB (UME) 10*16kB (UME) 1*32kB (U) 2*64kB (UM) 48*128kB (U) 79*256kB (UM) 16*512kB (U) 2*1024kB (U) 4*2048kB (U) 0*4096kB = 45384kB [ 290.930587] Node 1 Normal free:53488kB min:53504kB low:66880kB high:80256kB active_anon:164kB inactive_anon:8kB active_file:132kB inactive_file:312kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:116kB bounce:0kB free_pcp:256kB local_pcp:88kB free_cma:0kB [ 290.992250] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 291.049881] Node 1 Normal: 14*4kB (ME) 16*8kB (UME) 10*16kB (ME) 12*32kB (UME) 8*64kB (UM) 5*128kB (M) 6*256kB (ME) 5*512kB (ME) 8*1024kB (UME) 4*2048kB (UME) 1*4096kB (U) = 26456kB [ 291.053188] lowmem_reserve[]: 0 0 0 0 0 [ 291.066611] warn_alloc_show_mem: 1 callbacks suppressed [ 291.066614] Mem-Info: [ 291.073414] Node 0 [ 291.075902] active_anon:5381 inactive_anon:196 isolated_anon:0 [ 291.075902] active_file:39 inactive_file:18 isolated_file:8 [ 291.075902] unevictable:0 dirty:0 writeback:0 unstable:0 [ 291.075902] slab_reclaimable:14368 slab_unreclaimable:96026 [ 291.075902] mapped:75 shmem:250 pagetables:416 bounce:0 [ 291.075902] free:13732 free_pcp:60 free_cma:0 [ 291.078301] DMA: 1*4kB [ 291.080660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.115997] (U) 1*8kB (M) 2*16kB (ME) 2*32kB (UM) 11*64kB (UME) 5*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10412kB [ 291.125292] Node 0 active_anon:21360kB inactive_anon:776kB active_file:112kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:208kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 291.141586] Node 0 [ 291.167621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 291.169613] DMA32: [ 291.169911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.178933] Node 1 active_anon:164kB inactive_anon:8kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 291.182366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 291.190155] 97*4kB [ 291.216385] 328 total pagecache pages [ 291.224851] Node 0 [ 291.227071] 0 pages in swap cache [ 291.233807] DMA free:10412kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.236680] Swap cache stats: add 0, delete 0, find 0/0 [ 291.265417] (UME) [ 291.267774] Free swap = 0kB [ 291.267780] Total swap = 0kB [ 291.269915] 50*8kB (UME) [ 291.275653] 1965979 pages RAM [ 291.275999] lowmem_reserve[]: [ 291.278730] 0 pages HighMem/MovableOnly [ 291.278733] 335868 pages reserved [ 291.285232] 0 [ 291.289218] 0 pages cma reserved [ 291.292535] 21*16kB (UME) 12*32kB (UM) 7*64kB (M) 5*128kB (UM) 2*256kB (UM) 10*512kB (U) 2*1024kB (U) 4*2048kB (U) 0*4096kB = 18468kB [ 291.292580] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 291.292610] Node 1 Normal: 12*4kB (ME) 14*8kB (UME) 9*16kB (ME) 12*32kB (UME) 7*64kB (UM) 6*128kB (M) 6*256kB (ME) 5*512kB (ME) 8*1024kB (UME) 4*2048kB (UME) 1*4096kB (U) = 26480kB [ 291.292662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.292666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 291.292669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.292671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 291.292674] 328 total pagecache pages [ 291.292682] 0 pages in swap cache [ 291.292686] Swap cache stats: add 0, delete 0, find 0/0 [ 291.292688] Free swap = 0kB [ 291.292690] Total swap = 0kB [ 291.292695] 1965979 pages RAM [ 291.292697] 0 pages HighMem/MovableOnly [ 291.292699] 335868 pages reserved [ 291.292702] 0 pages cma reserved [ 291.302974] 2570 [ 291.374399] Out of memory: Kill process 7905 (syz-executor.0) score 999 or sacrifice child [ 291.480166] Killed process 7906 (syz-executor.0) total-vm:38036kB, anon-rss:128kB, file-rss:0kB, shmem-rss:0kB [ 291.530318] oom_reaper: reaped process 7906 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 291.600701] 2570 2570 2570 [ 291.620151] Node 0 DMA32 free:162604kB min:36384kB low:45480kB high:54576kB active_anon:21356kB inactive_anon:776kB active_file:208kB inactive_file:1108kB unevictable:0kB writepending:148kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1548kB bounce:0kB free_pcp:1416kB local_pcp:700kB free_cma:0kB [ 291.720133] lowmem_reserve[]: 0 0 0 0 0 [ 291.724225] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.749731] lowmem_reserve[]: 0 0 0 0 0 [ 291.800127] Node 1 Normal free:491180kB min:53504kB low:66880kB high:80256kB active_anon:164kB inactive_anon:8kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:116kB bounce:0kB free_pcp:1344kB local_pcp:672kB free_cma:0kB [ 291.870113] lowmem_reserve[]: 0 0 0 0 0 [ 291.874185] Node 0 DMA: 16*4kB (U) 1*8kB (M) 2*16kB (ME) 2*32kB (UM) 11*64kB (UME) 5*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10472kB [ 291.940144] Node 0 DMA32: 4576*4kB (UME) 4232*8kB (UME) 3873*16kB (UME) 3381*32kB (UM) 517*64kB (UM) 29*128kB (UM) 30*256kB (UM) 11*512kB (UM) 3*1024kB (UM) 3*2048kB (U) 0*4096kB = 281648kB [ 292.000249] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 292.040141] Node 1 Normal: 564*4kB (UME) 465*8kB (UME) 468*16kB (UME) 437*32kB (UME) 1240*64kB (UM) 231*128kB (UM) 145*256kB (UME) 76*512kB (UME) 107*1024kB (UME) 90*2048kB (UME) 11*4096kB (U) = 551352kB [ 292.077419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 292.080214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.104468] IPVS: ftp: loaded support on port[0] = 21 [ 292.120244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.124914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.128079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.150149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.159093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.191292] 1126 total pagecache pages [ 292.195360] 0 pages in swap cache [ 292.198818] Swap cache stats: add 0, delete 0, find 0/0 [ 292.205231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 292.215749] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.223313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.250936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.251532] Free swap = 0kB [ 292.261608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 292.282109] Total swap = 0kB [ 292.285340] 1965979 pages RAM [ 292.288449] 0 pages HighMem/MovableOnly [ 292.291890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 292.320364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.322307] 335868 pages reserved [ 292.327982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.351363] 0 pages cma reserved [ 292.360997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.368780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.395119] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 292.420263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.498922] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 292.540891] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 292.547252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.555067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.638142] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 292.650687] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 292.655342] syz-executor.5: page allocation failure: order:4 [ 292.656082] CPU: 0 PID: 7895 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 292.656086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.663876] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 292.669911] Call Trace: [ 292.682732] (null) [ 292.686717] dump_stack+0xf7/0x13b [ 292.689294] syz-executor.5 cpuset= [ 292.691574] warn_alloc.cold.110+0xa2/0x1be [ 292.691581] ? zone_watermark_ok_safe+0x260/0x260 [ 292.691592] ? __alloc_pages_direct_compact+0xc2/0x330 [ 292.691599] __alloc_pages_slowpath+0x2052/0x2650 [ 292.691613] ? trace_hardirqs_off+0x10/0x10 [ 292.691620] ? warn_alloc+0x100/0x100 [ 292.691626] ? get_page_from_freelist+0x1046/0x23b0 [ 292.691640] ? __might_sleep+0x93/0xb0 [ 292.695175] syz5 [ 292.699254] __alloc_pages_nodemask+0x60d/0x770 [ 292.706865] mems_allowed=0-1 [ 292.708529] ? trace_hardirqs_off+0x10/0x10 [ 292.749917] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 292.754766] ? __alloc_pages_slowpath+0x2650/0x2650 [ 292.759813] ? wait_for_completion+0x440/0x440 [ 292.764403] alloc_pages_current+0xd6/0x1b0 [ 292.768753] ion_page_pool_alloc+0x102/0x180 [ 292.773161] ion_system_heap_allocate+0x14e/0x930 [ 292.778018] ? do_raw_spin_unlock+0x16a/0x250 [ 292.782522] ? ion_system_heap_free+0x270/0x270 [ 292.787191] ion_alloc+0x27f/0x770 [ 292.791309] ? ion_dma_buf_release+0x40/0x40 [ 292.795733] ? kasan_check_write+0x14/0x20 [ 292.800017] ion_ioctl+0xe2/0x1b6 [ 292.803481] ? ion_alloc.cold.15+0x32/0x32 [ 292.807720] do_vfs_ioctl+0x180/0xfb0 [ 292.811515] ? __fget+0x1ad/0x2f0 [ 292.814967] ? ioctl_preallocate+0x1a0/0x1a0 [ 292.819372] ? __fget+0x1ca/0x2f0 [ 292.822829] ? security_file_ioctl+0x6a/0xa0 [ 292.827234] ? SyS_clock_settime+0x1a0/0x1a0 [ 292.831664] ? security_file_ioctl+0x6a/0xa0 [ 292.836062] SyS_ioctl+0x74/0x80 [ 292.839417] ? do_vfs_ioctl+0xfb0/0xfb0 [ 292.843520] do_syscall_64+0x1c7/0x5b0 [ 292.847419] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 292.852278] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 292.857498] RIP: 0033:0x45af49 [ 292.858885] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 292.860683] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.860689] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 292.860691] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 292.860694] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 292.860696] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 292.860699] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 292.868555] Mem-Info: [ 292.874835] CPU: 1 PID: 7903 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 292.880779] active_anon:5358 inactive_anon:196 isolated_anon:0 [ 292.880779] active_file:25 inactive_file:0 isolated_file:0 [ 292.880779] unevictable:0 dirty:15 writeback:11 unstable:0 [ 292.880779] slab_reclaimable:14255 slab_unreclaimable:96565 [ 292.880779] mapped:8 shmem:250 pagetables:416 bounce:0 [ 292.880779] free:13784 free_pcp:0 free_cma:0 [ 292.886747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.886755] Call Trace: [ 292.894636] Node 0 active_anon:21276kB inactive_anon:776kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:52kB writeback:36kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 292.901362] dump_stack+0xf7/0x13b [ 292.901380] warn_alloc.cold.110+0xa2/0x1be [ 292.901386] ? zone_watermark_ok_safe+0x260/0x260 [ 292.901400] ? __alloc_pages_direct_compact+0xc2/0x330 [ 292.901407] __alloc_pages_slowpath+0x2052/0x2650 [ 292.909307] Node 1 active_anon:156kB inactive_anon:8kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:8kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 292.916573] ? trace_hardirqs_off+0x10/0x10 [ 292.916582] ? warn_alloc+0x100/0x100 [ 292.916588] ? get_page_from_freelist+0x1046/0x23b0 [ 292.916601] ? __might_sleep+0x93/0xb0 [ 292.916608] __alloc_pages_nodemask+0x60d/0x770 [ 292.919000] Node 0 [ 292.926787] ? __alloc_pages_slowpath+0x2650/0x2650 [ 292.926798] ? wait_for_completion+0x440/0x440 [ 292.926803] ? __list_del_entry_valid+0xb6/0xf3 [ 292.926818] alloc_pages_current+0xd6/0x1b0 [ 292.959158] DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.968473] ion_page_pool_alloc+0x102/0x180 [ 292.968480] ion_system_heap_allocate+0x14e/0x930 [ 292.968488] ? do_raw_spin_unlock+0x16a/0x250 [ 292.968495] ? ion_system_heap_free+0x270/0x270 [ 292.971082] lowmem_reserve[]: [ 292.997978] ion_alloc+0x27f/0x770 [ 292.997988] ? ion_dma_buf_release+0x40/0x40 [ 292.998000] ? kasan_check_write+0x14/0x20 [ 292.998007] ion_ioctl+0xe2/0x1b6 [ 293.001576] 0 [ 293.005885] ? ion_alloc.cold.15+0x32/0x32 [ 293.010738] 2570 [ 293.016006] do_vfs_ioctl+0x180/0xfb0 [ 293.020906] 2570 [ 293.046886] ? __fget+0x1ad/0x2f0 [ 293.046897] ? ioctl_preallocate+0x1a0/0x1a0 [ 293.046904] ? __fget+0x1ca/0x2f0 [ 293.046916] ? security_file_ioctl+0x6a/0xa0 [ 293.046921] ? SyS_clock_settime+0x1a0/0x1a0 [ 293.046925] ? security_file_ioctl+0x6a/0xa0 [ 293.046932] SyS_ioctl+0x74/0x80 [ 293.051366] 2570 [ 293.055313] ? do_vfs_ioctl+0xfb0/0xfb0 [ 293.060340] 2570 [ 293.064196] do_syscall_64+0x1c7/0x5b0 [ 293.068868] Node 0 [ 293.071228] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 293.071243] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 293.071249] RIP: 0033:0x45af49 [ 293.071251] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.071257] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 293.071259] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 293.071261] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 293.071264] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 293.071266] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 293.071588] syz-executor.0: [ 293.076329] DMA32 free:18412kB min:36384kB low:45480kB high:54576kB active_anon:21272kB inactive_anon:776kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:40kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.115478] page allocation failure: order:0 [ 293.116858] syz-executor.5: [ 293.124382] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 293.133341] (null) [ 293.135494] syz-executor.5: [ 293.138587] , order=0, oom_score_adj=1000 [ 293.138593] syz-executor.0 cpuset= [ 293.147985] (null) [ 293.153999] page allocation failure: order:0 [ 293.154471] syz-executor.0 cpuset= [ 293.156262] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 293.166807] page allocation failure: order:0 [ 293.166987] syz-executor.5 cpuset= [ 293.169043] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 293.175720] syz0 [ 293.176992] syz-executor.5 cpuset= [ 293.180489] syz5 mems_allowed=0-1 [ 293.180507] CPU: 0 PID: 7900 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 293.180510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.180513] Call Trace: [ 293.180532] dump_stack+0xf7/0x13b [ 293.180543] warn_alloc.cold.110+0xa2/0x1be [ 293.180548] ? zone_watermark_ok_safe+0x260/0x260 [ 293.180555] ? usleep_range+0x120/0x120 [ 293.180562] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 293.180571] ? call_timer_fn+0x570/0x570 [ 293.190722] syz0 [ 293.193783] ? unreserve_highatomic_pageblock+0x315/0x450 [ 293.197130] mems_allowed=0-1 [ 293.199186] __alloc_pages_slowpath+0x2052/0x2650 [ 293.208256] syz5 [ 293.209084] ? warn_alloc+0x100/0x100 [ 293.212912] mems_allowed=0-1 [ 293.216145] ? get_page_from_freelist+0x1046/0x23b0 [ 293.225903] mems_allowed=0-1 [ 293.232250] ? __might_sleep+0x93/0xb0 [ 293.232261] __alloc_pages_nodemask+0x60d/0x770 [ 293.232270] ? __alloc_pages_slowpath+0x2650/0x2650 [ 293.232282] ? wait_for_completion+0x440/0x440 [ 293.232293] alloc_pages_current+0xd6/0x1b0 [ 293.232304] ion_page_pool_alloc+0x102/0x180 [ 293.232310] ion_system_heap_allocate+0x14e/0x930 [ 293.232318] ? do_raw_spin_unlock+0x16a/0x250 [ 293.232326] ? ion_system_heap_free+0x270/0x270 [ 293.490082] ion_alloc+0x27f/0x770 [ 293.493615] ? ion_dma_buf_release+0x40/0x40 [ 293.498028] ion_ioctl+0xe2/0x1b6 [ 293.501995] ? ion_alloc.cold.15+0x32/0x32 [ 293.506240] do_vfs_ioctl+0x180/0xfb0 [ 293.510056] ? __fget+0x1ad/0x2f0 [ 293.513519] ? ioctl_preallocate+0x1a0/0x1a0 [ 293.517928] ? __fget+0x1ca/0x2f0 [ 293.522254] ? security_file_ioctl+0x6a/0xa0 [ 293.526699] ? SyS_clock_settime+0x1a0/0x1a0 [ 293.531098] ? security_file_ioctl+0x6a/0xa0 [ 293.535517] SyS_ioctl+0x74/0x80 [ 293.538879] ? do_vfs_ioctl+0xfb0/0xfb0 [ 293.542849] do_syscall_64+0x1c7/0x5b0 [ 293.546761] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 293.551601] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 293.558345] RIP: 0033:0x45af49 [ 293.561543] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.569326] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 293.576769] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 293.584126] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 293.591463] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 293.598738] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 293.606542] CPU: 1 PID: 7903 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 293.610595] lowmem_reserve[]: [ 293.614618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.614625] 0 [ 293.617730] Call Trace: [ 293.627132] 0 [ 293.628902] dump_stack+0xf7/0x13b [ 293.631667] 0 [ 293.633434] warn_alloc.cold.110+0xa2/0x1be [ 293.636950] 0 [ 293.638767] ? zone_watermark_ok_safe+0x260/0x260 [ 293.643127] 0 [ 293.644878] ? usleep_range+0x120/0x120 [ 293.651678] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 293.651687] ? call_timer_fn+0x570/0x570 [ 293.651693] ? unreserve_highatomic_pageblock+0x315/0x450 [ 293.651704] __alloc_pages_slowpath+0x2052/0x2650 [ 293.651720] ? warn_alloc+0x100/0x100 [ 293.655689] Node 0 [ 293.661570] ? get_page_from_freelist+0x1046/0x23b0 [ 293.661585] ? __might_sleep+0x93/0xb0 [ 293.661592] __alloc_pages_nodemask+0x60d/0x770 [ 293.661601] ? __alloc_pages_slowpath+0x2650/0x2650 [ 293.661612] ? wait_for_completion+0x440/0x440 [ 293.665682] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.671209] ? __list_del_entry_valid+0xb6/0xf3 [ 293.671223] alloc_pages_current+0xd6/0x1b0 [ 293.671235] ion_page_pool_alloc+0x102/0x180 [ 293.671240] ion_system_heap_allocate+0x14e/0x930 [ 293.671247] ? do_raw_spin_unlock+0x16a/0x250 [ 293.671258] ? ion_system_heap_free+0x270/0x270 [ 293.676124] lowmem_reserve[]: [ 293.680029] ion_alloc+0x27f/0x770 [ 293.682309] 0 [ 293.687354] ? ion_dma_buf_release+0x40/0x40 [ 293.691273] 0 [ 293.695906] ? kasan_check_write+0x14/0x20 [ 293.700929] 0 [ 293.705473] ion_ioctl+0xe2/0x1b6 [ 293.730167] 0 [ 293.734912] ? ion_alloc.cold.15+0x32/0x32 [ 293.739854] 0 [ 293.744306] do_vfs_ioctl+0x180/0xfb0 [ 293.744316] ? __fget+0x1ad/0x2f0 [ 293.744322] ? ioctl_preallocate+0x1a0/0x1a0 [ 293.744330] ? __fget+0x1ca/0x2f0 [ 293.744341] ? security_file_ioctl+0x6a/0xa0 [ 293.744347] ? SyS_clock_settime+0x1a0/0x1a0 [ 293.744350] ? security_file_ioctl+0x6a/0xa0 [ 293.744357] SyS_ioctl+0x74/0x80 [ 293.753864] ? do_vfs_ioctl+0xfb0/0xfb0 [ 293.753874] do_syscall_64+0x1c7/0x5b0 [ 293.753878] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 293.753891] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 293.753896] RIP: 0033:0x45af49 [ 293.753899] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.753908] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 293.758596] Node 1 [ 293.761670] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 293.761673] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 293.761675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 293.761678] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 293.768680] CPU: 1 PID: 7911 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 293.775745] Normal free:26352kB min:53504kB low:66880kB high:80256kB active_anon:156kB inactive_anon:8kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:116kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.777506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.779298] lowmem_reserve[]: [ 293.782736] Call Trace: [ 293.782754] dump_stack+0xf7/0x13b [ 293.782766] dump_header+0x160/0x63f [ 293.782774] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 293.782782] ? ___ratelimit+0x243/0x519 [ 293.782789] ? do_raw_spin_unlock+0x16a/0x250 [ 293.782798] oom_kill_process.cold.24+0xb/0xa1a [ 293.784607] 0 [ 293.788823] ? out_of_memory+0x7f9/0x1030 [ 293.788833] ? lock_downgrade+0x7f0/0x7f0 [ 293.790642] 0 [ 293.794402] out_of_memory+0x2b0/0x1030 [ 293.797830] 0 0 [ 293.802244] ? oom_killer_disable+0x1a0/0x1a0 [ 293.802253] ? __alloc_pages_slowpath+0xb69/0x2650 [ 293.802259] __alloc_pages_slowpath+0x1ef3/0x2650 [ 293.802274] ? warn_alloc+0x100/0x100 [ 293.805715] 0 [ 293.810125] ? get_page_from_freelist+0x1046/0x23b0 [ 293.810140] ? __might_sleep+0x93/0xb0 [ 293.810147] __alloc_pages_nodemask+0x60d/0x770 [ 293.818957] ? __alloc_pages_slowpath+0x2650/0x2650 [ 293.822349] Node 0 [ 293.826279] ? wait_for_completion+0x440/0x440 [ 293.830211] DMA: [ 293.835021] alloc_pages_current+0xd6/0x1b0 [ 293.840243] 21*4kB [ 293.843372] ion_page_pool_alloc+0x102/0x180 [ 293.851086] (U) [ 293.858326] ion_system_heap_allocate+0x14e/0x930 [ 293.860598] 10*8kB [ 293.867838] ? ion_system_heap_free+0x270/0x270 [ 293.875142] (UM) [ 293.882379] ion_alloc+0x216/0x770 [ 293.882390] ? ion_dma_buf_release+0x40/0x40 [ 293.882402] ? kasan_check_write+0x14/0x20 [ 293.889664] 6*16kB [ 293.897468] ion_ioctl+0xe2/0x1b6 [ 293.897475] ? ion_alloc.cold.15+0x32/0x32 [ 293.897487] do_vfs_ioctl+0x180/0xfb0 [ 293.897494] ? __fget+0x1ad/0x2f0 [ 293.897503] ? ioctl_preallocate+0x1a0/0x1a0 [ 293.930063] (UME) [ 293.934223] ? __fget+0x1ca/0x2f0 [ 293.937306] 2*32kB [ 293.939898] ? security_file_ioctl+0x6a/0xa0 [ 293.960090] (UM) [ 293.960676] ? SyS_clock_settime+0x1a0/0x1a0 [ 293.965338] 7*64kB [ 293.967274] ? security_file_ioctl+0x6a/0xa0 [ 293.980101] (UME) [ 293.981483] SyS_ioctl+0x74/0x80 [ 293.983440] 5*128kB [ 293.987925] ? do_vfs_ioctl+0xfb0/0xfb0 [ 294.010088] (UME) [ 294.012220] do_syscall_64+0x1c7/0x5b0 [ 294.017002] 3*256kB (UME) [ 294.022071] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 294.022087] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 294.022093] RIP: 0033:0x45af49 [ 294.022096] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.022101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 294.022104] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 294.022106] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 294.022109] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 294.022112] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 294.030707] CPU: 1 PID: 7906 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 294.046457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.048878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.070078] 2*512kB [ 294.072270] Call Trace: [ 294.075726] (ME) [ 294.079958] dump_stack+0xf7/0x13b [ 294.100086] 3*1024kB [ 294.104059] warn_alloc.cold.110+0xa2/0x1be [ 294.106126] (UME) [ 294.110537] ? zone_watermark_ok_safe+0x260/0x260 [ 294.110546] ? usleep_range+0x120/0x120 [ 294.110552] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 294.110561] ? call_timer_fn+0x570/0x570 [ 294.110567] ? unreserve_highatomic_pageblock+0x315/0x450 [ 294.110578] __alloc_pages_slowpath+0x2052/0x2650 [ 294.130095] 2*2048kB [ 294.131104] ? warn_alloc+0x100/0x100 [ 294.134963] (UE) [ 294.137794] ? get_page_from_freelist+0x1046/0x23b0 [ 294.150119] 0*4096kB [ 294.151006] ? __might_sleep+0x93/0xb0 [ 294.158700] = 10372kB [ 294.165976] __alloc_pages_nodemask+0x60d/0x770 [ 294.165984] ? __alloc_pages_slowpath+0x2650/0x2650 [ 294.165995] ? wait_for_completion+0x440/0x440 [ 294.166005] alloc_pages_current+0xd6/0x1b0 [ 294.166015] ion_page_pool_alloc+0x102/0x180 [ 294.166022] ion_system_heap_allocate+0x14e/0x930 [ 294.180551] warn_alloc_show_mem: 2 callbacks suppressed [ 294.180554] Mem-Info: [ 294.187812] ? ion_system_heap_free+0x270/0x270 [ 294.210094] active_anon:5358 inactive_anon:196 isolated_anon:0 [ 294.210094] active_file:17 inactive_file:716 isolated_file:0 [ 294.210094] unevictable:0 dirty:0 writeback:0 unstable:0 [ 294.210094] slab_reclaimable:14165 slab_unreclaimable:96595 [ 294.210094] mapped:477 shmem:250 pagetables:416 bounce:0 [ 294.210094] free:104106 free_pcp:299 free_cma:0 [ 294.218363] ion_alloc+0x216/0x770 [ 294.220768] Node 0 [ 294.223274] ? ion_dma_buf_release+0x40/0x40 [ 294.225313] DMA32: [ 294.228866] ? kasan_check_write+0x14/0x20 [ 294.250110] Node 0 active_anon:21276kB inactive_anon:776kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 294.251714] ion_ioctl+0xe2/0x1b6 [ 294.255762] Node 1 active_anon:156kB inactive_anon:8kB active_file:12kB inactive_file:2808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1900kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 294.261303] ? ion_alloc.cold.15+0x32/0x32 [ 294.261316] do_vfs_ioctl+0x180/0xfb0 [ 294.261323] ? __fget+0x1ad/0x2f0 [ 294.261328] ? ioctl_preallocate+0x1a0/0x1a0 [ 294.261336] ? __fget+0x1ca/0x2f0 [ 294.261348] ? security_file_ioctl+0x6a/0xa0 [ 294.261354] ? SyS_clock_settime+0x1a0/0x1a0 [ 294.261357] ? security_file_ioctl+0x6a/0xa0 [ 294.261364] SyS_ioctl+0x74/0x80 [ 294.267520] 64*4kB [ 294.268610] ? do_vfs_ioctl+0xfb0/0xfb0 [ 294.272451] (ME) [ 294.274468] do_syscall_64+0x1c7/0x5b0 [ 294.279458] 58*8kB [ 294.281859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 294.281872] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 294.281879] RIP: 0033:0x45af49 [ 294.281883] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 [ 294.290469] Node 0 [ 294.292826] ORIG_RAX: 0000000000000010 [ 294.297843] DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.302416] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 294.302419] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 294.302421] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 294.302424] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 294.302426] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 294.459986] (UME) [ 294.475060] lowmem_reserve[]: [ 294.513578] 29*16kB [ 294.515479] 0 2570 2570 2570 2570 [ 294.589196] IPVS: ftp: loaded support on port[0] = 21 [ 294.591535] Node 0 DMA32 free:416464kB min:36384kB low:45480kB high:54576kB active_anon:21372kB inactive_anon:776kB active_file:660kB inactive_file:948kB unevictable:0kB writepending:24kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1548kB bounce:0kB free_pcp:700kB local_pcp:524kB free_cma:0kB [ 294.626296] (UME) 521*32kB (UME) 2992*64kB (U) 142*128kB (U) 58*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 243904kB [ 294.630308] lowmem_reserve[]: 0 0 0 0 0 [ 294.657251] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.685833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 294.712566] chnl_net:caif_netlink_parms(): no params data found [ 294.720427] lowmem_reserve[]: 0 0 0 0 0 [ 294.724487] Node 1 Normal free:156652kB min:53504kB low:66880kB high:80256kB active_anon:156kB inactive_anon:8kB active_file:8kB inactive_file:2868kB unevictable:0kB writepending:96kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:116kB bounce:0kB free_pcp:396kB local_pcp:208kB free_cma:0kB [ 294.743189] Node 1 Normal: 1*4kB (E) 3*8kB (E) 3*16kB (UME) 3*32kB (ME) 937*64kB (U) 104*128kB (UM) 29*256kB (UME) 14*512kB (UME) 5*1024kB (UME) 5*2048kB (UME) 2*4096kB (U) = 111596kB [ 294.789905] Mem-Info: [ 294.802808] lowmem_reserve[]: 0 0 0 0 0 [ 294.806835] Node 0 DMA: 21*4kB (U) 10*8kB (UM) 6*16kB (UME) 2*32kB (UM) 7*64kB (UME) 5*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10372kB [ 294.830959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.848380] active_anon:5358 inactive_anon:196 isolated_anon:0 [ 294.848380] active_file:542 inactive_file:630 isolated_file:0 [ 294.848380] unevictable:0 dirty:30 writeback:0 unstable:0 [ 294.848380] slab_reclaimable:13698 slab_unreclaimable:98019 [ 294.848380] mapped:494 shmem:250 pagetables:416 bounce:0 [ 294.848380] free:176144 free_pcp:425 free_cma:0 [ 294.870124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 294.906026] Node 0 DMA32: 323*4kB (UME) 83*8kB (UE) 58*16kB (UE) 427*32kB (UME) 4733*64kB (UME) 1363*128kB (UM) 365*256kB (UM) 36*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 605796kB [ 294.943986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.955197] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.961745] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 294.972624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 294.979121] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.988896] device bridge_slave_0 entered promiscuous mode [ 294.994918] Node 0 active_anon:21376kB inactive_anon:776kB active_file:1460kB inactive_file:352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108kB dirty:24kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 295.003567] 1413 total pagecache pages [ 295.028328] Node 1 Normal: 141*4kB (UM) 149*8kB (UME) 152*16kB (UME) 146*32kB (UME) 1078*64kB (U) 134*128kB (U) 42*256kB (U) 20*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 118044kB [ 295.049745] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.058977] Node 1 active_anon:156kB inactive_anon:8kB active_file:708kB inactive_file:2168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2068kB dirty:96kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 295.100314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 295.108965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.110301] 0 pages in swap cache [ 295.137514] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.144455] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.152172] Swap cache stats: add 0, delete 0, find 0/0 [ 295.157572] Free swap = 0kB [ 295.161103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 295.169719] 1413 total pagecache pages [ 295.171108] device bridge_slave_1 entered promiscuous mode [ 295.177631] Node 0 DMA free:10412kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.206354] Total swap = 0kB [ 295.209381] 1965979 pages RAM [ 295.214845] 0 pages HighMem/MovableOnly [ 295.218855] 335868 pages reserved [ 295.222811] 0 pages in swap cache [ 295.226273] Swap cache stats: add 0, delete 0, find 0/0 [ 295.232167] 0 pages cma reserved [ 295.235571] Free swap = 0kB [ 295.260174] Total swap = 0kB [ 295.263254] 1965979 pages RAM [ 295.266369] 0 pages HighMem/MovableOnly [ 295.280606] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 295.285689] Node 0 DMA32 free:417652kB min:36384kB low:45480kB high:54576kB active_anon:21372kB inactive_anon:776kB active_file:1460kB inactive_file:348kB unevictable:0kB writepending:24kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7008kB pagetables:1548kB bounce:0kB free_pcp:1284kB local_pcp:564kB free_cma:0kB [ 295.299700] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 295.322805] 335868 pages reserved [ 295.326304] 0 pages cma reserved [ 295.390510] lowmem_reserve[]: 0 0 0 0 0 [ 295.394614] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.433655] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 295.480113] lowmem_reserve[]: 0 0 0 0 0 [ 295.486829] chnl_net:caif_netlink_parms(): no params data found [ 295.496434] Node 1 Normal free:381296kB min:53504kB low:66880kB high:80256kB active_anon:156kB inactive_anon:8kB active_file:708kB inactive_file:2168kB unevictable:0kB writepending:96kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:116kB bounce:0kB free_pcp:836kB local_pcp:208kB free_cma:0kB [ 295.549798] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 295.560806] team0: Port device team_slave_0 added [ 295.571314] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 295.594036] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 295.610782] team0: Port device team_slave_1 added [ 295.614788] lowmem_reserve[]: 0 0 0 0 0 [ 295.619699] Node 0 DMA: 31*4kB (U) 10*8kB (UM) 6*16kB (UME) 2*32kB (UM) 7*64kB (UME) 5*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10412kB [ 295.620982] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 295.662425] Node 0 DMA32: 294*4kB (UME) 91*8kB (UE) 25*16kB (UE) 8*32kB (UE) 4*64kB (UME) 127*128kB (UM) 384*256kB (UM) 44*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 139904kB [ 295.704198] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 295.720556] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 295.735506] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 295.756538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.764128] Node 1 Normal: 3*4kB (UM) 137*8kB (UME) 212*16kB (UME) 199*32kB (UME) 1225*64kB (U) 230*128kB (U) 90*256kB (U) 30*512kB (UM) 381*1024kB (U) 92*2048kB (U) 2*4096kB (U) = 743860kB [ 295.788469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.836934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.851816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 295.870766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.873902] device hsr_slave_0 entered promiscuous mode [ 295.879673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 295.926110] 1413 total pagecache pages [ 295.940449] 0 pages in swap cache [ 295.943947] Swap cache stats: add 0, delete 0, find 0/0 [ 295.949326] Free swap = 0kB [ 295.951057] device hsr_slave_1 entered promiscuous mode [ 295.960120] Total swap = 0kB [ 295.963206] 1965979 pages RAM [ 295.966311] 0 pages HighMem/MovableOnly [ 295.980107] 335868 pages reserved [ 295.983621] 0 pages cma reserved [ 295.987014] Out of memory: Kill process 7217 (syz-execprog) score 1 or sacrifice child [ 295.990949] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 296.031188] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 296.040455] Killed process 7874 (syz-executor.1) total-vm:37644kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 296.087730] oom_reaper: reaped process 7874 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 296.098274] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 296.126194] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.140439] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 296.145872] CPU: 0 PID: 7911 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 296.153692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.159967] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.163061] Call Trace: [ 296.163077] dump_stack+0xf7/0x13b [ 296.163086] warn_alloc.cold.110+0xa2/0x1be [ 296.163091] ? zone_watermark_ok_safe+0x260/0x260 [ 296.163100] ? wake_up_q+0x9c/0xe0 [ 296.163109] ? __mutex_unlock_slowpath+0x29b/0x7e0 [ 296.163120] __alloc_pages_slowpath+0x2052/0x2650 [ 296.163132] ? warn_alloc+0x100/0x100 [ 296.163137] ? get_page_from_freelist+0x1046/0x23b0 [ 296.163150] ? __might_sleep+0x93/0xb0 [ 296.163157] __alloc_pages_nodemask+0x60d/0x770 [ 296.163165] ? __alloc_pages_slowpath+0x2650/0x2650 [ 296.163172] ? wait_for_completion+0x440/0x440 [ 296.163182] alloc_pages_current+0xd6/0x1b0 [ 296.163193] ion_page_pool_alloc+0x102/0x180 [ 296.163198] ion_system_heap_allocate+0x14e/0x930 [ 296.163206] ? ion_system_heap_free+0x270/0x270 [ 296.163216] ion_alloc+0x216/0x770 [ 296.163223] ? ion_dma_buf_release+0x40/0x40 [ 296.163232] ? kasan_check_write+0x14/0x20 [ 296.163237] ion_ioctl+0xe2/0x1b6 [ 296.163242] ? ion_alloc.cold.15+0x32/0x32 [ 296.163254] do_vfs_ioctl+0x180/0xfb0 [ 296.163260] ? __fget+0x1ad/0x2f0 [ 296.163267] ? ioctl_preallocate+0x1a0/0x1a0 [ 296.163275] ? __fget+0x1ca/0x2f0 [ 296.163286] ? security_file_ioctl+0x6a/0xa0 [ 296.163291] ? SyS_clock_settime+0x1a0/0x1a0 [ 296.163295] ? security_file_ioctl+0x6a/0xa0 [ 296.163301] SyS_ioctl+0x74/0x80 [ 296.163307] ? do_vfs_ioctl+0xfb0/0xfb0 [ 296.163314] do_syscall_64+0x1c7/0x5b0 [ 296.163321] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 296.174773] device bridge_slave_0 entered promiscuous mode [ 296.175743] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 296.196365] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.198205] RIP: 0033:0x45af49 [ 296.214549] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.216576] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 [ 296.234647] device bridge_slave_1 entered promiscuous mode [ 296.235662] ORIG_RAX: 0000000000000010 [ 296.294774] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 296.296878] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 296.317764] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 296.320817] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 296.320821] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 296.320823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 296.320826] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 296.405496] warn_alloc_show_mem: 1 callbacks suppressed [ 296.405500] Mem-Info: [ 296.413689] active_anon:5362 inactive_anon:196 isolated_anon:0 [ 296.413689] active_file:602 inactive_file:624 isolated_file:0 [ 296.413689] unevictable:0 dirty:39 writeback:0 unstable:0 [ 296.413689] slab_reclaimable:13574 slab_unreclaimable:99866 [ 296.413689] mapped:562 shmem:250 pagetables:424 bounce:0 [ 296.413689] free:282247 free_pcp:336 free_cma:0 [ 296.446877] Node 0 active_anon:21276kB inactive_anon:776kB active_file:1644kB inactive_file:224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:56kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 296.478729] Node 1 active_anon:172kB inactive_anon:8kB active_file:964kB inactive_file:2056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2104kB dirty:100kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 296.506875] Node 0 DMA free:11460kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.550591] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 296.564556] Node 0 DMA32 free:70740kB min:36384kB low:45480kB high:54576kB active_anon:21272kB inactive_anon:776kB active_file:1360kB inactive_file:1920kB unevictable:0kB writepending:56kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1548kB bounce:0kB free_pcp:708kB local_pcp:488kB free_cma:0kB [ 296.598021] lowmem_reserve[]: 0 0 0 0 0 [ 296.603472] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.613098] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 296.640519] lowmem_reserve[]: 0 0 0 0 0 2020/03/09 03:20:06 executed programs: 88 [ 296.645848] Node 1 Normal free:1022604kB min:53504kB low:66880kB high:80256kB active_anon:172kB inactive_anon:8kB active_file:1064kB inactive_file:1824kB unevictable:0kB writepending:100kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:148kB bounce:0kB free_pcp:512kB local_pcp:80kB free_cma:0kB [ 296.673715] team0: Port device team_slave_0 added [ 296.682918] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 296.688389] lowmem_reserve[]: 0 0 0 0 0 [ 296.696694] team0: Port device team_slave_1 added [ 296.702763] Node 0 DMA: 1*4kB (M) 1*8kB (M) 2*16kB (ME) 2*32kB (UM) 3*64kB (UME) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 4*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10540kB [ 296.718443] Node 0 DMA32: 296*4kB (UME) 94*8kB (UME) 26*16kB (UME) 8*32kB (UE) 1*64kB (E) 1*128kB (M) 1*256kB (M) 0*512kB 39*1024kB (U) 1*2048kB (U) 0*4096kB = 45040kB [ 296.736100] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 296.747496] Node 1 Normal: 1*4kB (U) 2*8kB (UE) 3*16kB (UME) 2*32kB (UE) 2*64kB (UM) 2*128kB (UM) 1*256kB (U) 1*512kB (U) 544*1024kB (U) 168*2048kB (UM) 19*4096kB (U) = 980228kB [ 296.767422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.767657] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 296.776537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 296.792772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.803208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 296.810225] syz-executor.1 (7877) used greatest stack depth: 22008 bytes left [ 296.815172] 2721 total pagecache pages [ 296.830264] 0 pages in swap cache [ 296.833848] Swap cache stats: add 0, delete 0, find 0/0 [ 296.840619] Free swap = 0kB [ 296.843826] Total swap = 0kB [ 296.846944] 1965979 pages RAM 2020/03/09 03:20:06 result: hanged=false err=executor 1: EOF [ 296.847668] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 296.850329] 0 pages HighMem/MovableOnly [ 296.862887] 335868 pages reserved [ 296.863239] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 296.867489] 0 pages cma reserved [ 296.963685] device hsr_slave_0 entered promiscuous mode [ 297.000443] device hsr_slave_1 entered promiscuous mode [ 297.041792] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 297.049426] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 297.123595] device bridge_slave_1 left promiscuous mode [ 297.129302] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.190839] device bridge_slave_0 left promiscuous mode [ 297.196513] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.252651] device veth1_vlan left promiscuous mode [ 297.260296] device veth0_vlan left promiscuous mode [ 297.361739] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 297.400775] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 297.406230] CPU: 1 PID: 7937 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 297.414018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.423368] Call Trace: [ 297.425950] dump_stack+0xf7/0x13b [ 297.429491] warn_alloc.cold.110+0xa2/0x1be [ 297.433798] ? zone_watermark_ok_safe+0x260/0x260 [ 297.438642] ? __alloc_pages_direct_compact+0xc2/0x330 [ 297.443914] __alloc_pages_slowpath+0x2052/0x2650 [ 297.448772] ? trace_hardirqs_off+0x10/0x10 [ 297.453107] ? warn_alloc+0x100/0x100 [ 297.456915] ? get_page_from_freelist+0x1046/0x23b0 [ 297.461939] ? __might_sleep+0x93/0xb0 [ 297.465813] __alloc_pages_nodemask+0x60d/0x770 [ 297.470591] ? trace_hardirqs_off+0x10/0x10 [ 297.474908] ? __alloc_pages_slowpath+0x2650/0x2650 [ 297.479943] ? wait_for_completion+0x440/0x440 [ 297.484522] alloc_pages_current+0xd6/0x1b0 [ 297.488844] ion_page_pool_alloc+0x102/0x180 [ 297.493235] ion_system_heap_allocate+0x14e/0x930 [ 297.498063] ? ion_system_heap_free+0x270/0x270 [ 297.502737] ion_alloc+0x216/0x770 [ 297.506284] ? ion_dma_buf_release+0x40/0x40 [ 297.510682] ? kasan_check_write+0x14/0x20 [ 297.514904] ion_ioctl+0xe2/0x1b6 [ 297.518346] ? ion_alloc.cold.15+0x32/0x32 [ 297.522572] do_vfs_ioctl+0x180/0xfb0 [ 297.526361] ? __fget+0x1ad/0x2f0 [ 297.529805] ? ioctl_preallocate+0x1a0/0x1a0 [ 297.534219] ? __fget+0x1ca/0x2f0 [ 297.537661] ? security_file_ioctl+0x6a/0xa0 [ 297.542068] ? SyS_clock_settime+0x1a0/0x1a0 [ 297.546460] ? security_file_ioctl+0x6a/0xa0 [ 297.550871] SyS_ioctl+0x74/0x80 [ 297.554222] ? do_vfs_ioctl+0xfb0/0xfb0 [ 297.558183] do_syscall_64+0x1c7/0x5b0 [ 297.562056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 297.566902] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 297.572081] RIP: 0033:0x45af49 [ 297.575253] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.582976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 297.590233] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 297.597504] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 297.604882] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 297.612153] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 297.637183] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 297.675579] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 297.678068] Mem-Info: [ 297.683149] active_anon:5882 inactive_anon:196 isolated_anon:0 [ 297.683149] active_file:48 inactive_file:56 isolated_file:0 [ 297.683149] unevictable:0 dirty:19 writeback:0 unstable:0 [ 297.683149] slab_reclaimable:13490 slab_unreclaimable:99863 [ 297.683149] mapped:27 shmem:250 pagetables:416 bounce:0 [ 297.683149] free:14159 free_pcp:171 free_cma:0 [ 297.685425] CPU: 1 PID: 6992 Comm: rs:main Q:Reg Not tainted 4.14.172-syzkaller #0 [ 297.715791] Node 0 active_anon:23224kB inactive_anon:772kB active_file:124kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:36kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 6144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 297.723399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.723404] Call Trace: [ 297.723423] dump_stack+0xf7/0x13b [ 297.723435] dump_header+0x160/0x63f [ 297.750477] Node 1 active_anon:304kB inactive_anon:12kB active_file:68kB inactive_file:152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:40kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 297.759811] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 297.762435] Node 0 [ 297.765933] ? ___ratelimit+0x243/0x519 [ 297.769635] DMA free:10380kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.796377] ? do_raw_spin_unlock+0x16a/0x250 [ 297.796393] oom_kill_process.cold.24+0xb/0xa1a [ 297.796399] ? out_of_memory+0x7f9/0x1030 [ 297.796406] ? lock_downgrade+0x7f0/0x7f0 [ 297.796415] out_of_memory+0x2b0/0x1030 [ 297.796424] ? oom_killer_disable+0x1a0/0x1a0 [ 297.796431] ? __alloc_pages_slowpath+0xb69/0x2650 [ 297.796438] __alloc_pages_slowpath+0x1ef3/0x2650 [ 297.796452] ? warn_alloc+0x100/0x100 [ 297.796461] ? get_page_from_freelist+0x1046/0x23b0 [ 297.803427] lowmem_reserve[]: [ 297.803800] ? __might_sleep+0x93/0xb0 [ 297.807767] 0 [ 297.833290] __alloc_pages_nodemask+0x60d/0x770 [ 297.833300] ? __alloc_pages_slowpath+0x2650/0x2650 [ 297.833308] ? find_get_entry+0xd7/0x5a0 [ 297.833317] ? lock_downgrade+0x7f0/0x7f0 [ 297.833326] alloc_pages_current+0xd6/0x1b0 [ 297.833334] __page_cache_alloc+0x1da/0x330 [ 297.837821] 2570 [ 297.842507] pagecache_get_page+0x129/0x7c0 [ 297.842516] grab_cache_page_write_begin+0x55/0x90 [ 297.842525] ? rcu_read_lock_sched_held+0x108/0x120 [ 297.842535] ext4_da_write_begin+0x243/0xd30 [ 297.842548] ? ext4_write_begin+0x10e0/0x10e0 [ 297.846687] 2570 [ 297.850839] generic_perform_write+0x271/0x450 [ 297.850846] ? __mark_inode_dirty+0xbf5/0xe80 [ 297.850855] ? page_endio+0x410/0x410 [ 297.850861] ? file_update_time+0x22d/0x360 [ 297.850866] ? current_time+0xa0/0xa0 [ 297.854841] 2570 [ 297.859480] ? lock_acquire+0x173/0x400 [ 297.864550] 2570 [ 297.869440] ? ext4_file_write_iter+0x1db/0xe40 [ 297.878320] __generic_file_write_iter+0x201/0x580 [ 297.881482] Node 0 [ 297.885319] ext4_file_write_iter+0x27a/0xe40 [ 297.887092] DMA32 free:19500kB min:36384kB low:45480kB high:54576kB active_anon:23220kB inactive_anon:772kB active_file:592kB inactive_file:288kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6880kB pagetables:1508kB bounce:0kB free_pcp:660kB local_pcp:0kB free_cma:0kB [ 297.891746] ? trace_hardirqs_off+0x10/0x10 [ 297.891755] ? ext4_file_mmap+0x260/0x260 [ 297.891762] ? trace_hardirqs_on+0x10/0x10 [ 297.891768] ? trace_hardirqs_off+0x10/0x10 [ 297.891776] __vfs_write+0x413/0x840 [ 297.891781] ? trace_hardirqs_off+0x10/0x10 [ 297.896801] lowmem_reserve[]: [ 297.900876] ? kernel_read+0x130/0x130 [ 297.900881] ? __lock_is_held+0xb5/0x140 [ 297.900899] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 297.900908] ? __sb_start_write+0x1f3/0x2a0 [ 297.905046] 0 0 [ 297.909377] vfs_write+0x150/0x4f0 [ 297.913726] 0 [ 297.915747] SyS_write+0x100/0x250 [ 297.920072] 0 [ 297.924973] ? _raw_spin_unlock_irq+0x60/0x80 [ 297.930082] 0 [ 297.935070] ? SyS_read+0x250/0x250 [ 297.941608] ? do_syscall_64+0x4c/0x5b0 [ 297.941614] ? SyS_read+0x250/0x250 [ 297.941619] do_syscall_64+0x1c7/0x5b0 [ 297.941625] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 297.941637] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 297.946258] Node 0 [ 297.950769] RIP: 0033:0x7f79068fd19d [ 297.950774] RSP: 002b:00007f7904e9df90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 297.950780] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 00007f79068fd19d [ 297.950783] RDX: 0000000000000400 RSI: 00000000020baa90 RDI: 0000000000000005 [ 297.950786] RBP: 00000000020baa90 R08: 0000000002115c80 R09: 302039202072614d [ 297.950788] R10: 2037303a30323a33 R11: 0000000000000293 R12: 0000000000000000 [ 297.950790] R13: 00007f7904e9e410 R14: 0000000002115c80 R15: 00000000020ba890 [ 297.959660] syz-executor.0: [ 298.004269] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.016202] page allocation failure: order:4 [ 298.020179] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 298.020196] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 298.020215] CPU: 0 PID: 7895 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 298.020219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.020222] Call Trace: [ 298.020235] dump_stack+0xf7/0x13b [ 298.020247] warn_alloc.cold.110+0xa2/0x1be [ 298.024393] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 298.028620] ? zone_watermark_ok_safe+0x260/0x260 [ 298.033045] (null) [ 298.036650] ? usleep_range+0x120/0x120 [ 298.040983] syz-executor.0 cpuset= [ 298.044045] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 298.047907] syz0 [ 298.051975] ? call_timer_fn+0x570/0x570 [ 298.057605] mems_allowed=0-1 [ 298.061821] ? unreserve_highatomic_pageblock+0x315/0x450 [ 298.061833] __alloc_pages_slowpath+0x2052/0x2650 [ 298.061848] ? warn_alloc+0x100/0x100 [ 298.061854] ? get_page_from_freelist+0x1046/0x23b0 [ 298.061870] ? __might_sleep+0x93/0xb0 [ 298.292467] __alloc_pages_nodemask+0x60d/0x770 [ 298.297232] ? __alloc_pages_slowpath+0x2650/0x2650 [ 298.302248] ? wait_for_completion+0x440/0x440 [ 298.306833] alloc_pages_current+0xd6/0x1b0 [ 298.311156] ion_page_pool_alloc+0x102/0x180 [ 298.315572] ion_system_heap_allocate+0x14e/0x930 [ 298.320428] ? do_raw_spin_unlock+0x16a/0x250 [ 298.324939] ? ion_system_heap_free+0x270/0x270 [ 298.329610] ion_alloc+0x27f/0x770 [ 298.333146] ? ion_dma_buf_release+0x40/0x40 [ 298.337546] ? kasan_check_write+0x14/0x20 [ 298.341772] ion_ioctl+0xe2/0x1b6 [ 298.345219] ? ion_alloc.cold.15+0x32/0x32 [ 298.348452] Mem-Info: [ 298.349462] do_vfs_ioctl+0x180/0xfb0 [ 298.355649] ? __fget+0x1ad/0x2f0 [ 298.359177] ? ioctl_preallocate+0x1a0/0x1a0 [ 298.363586] ? __fget+0x1ca/0x2f0 [ 298.367039] ? security_file_ioctl+0x6a/0xa0 [ 298.368388] active_anon:5884 inactive_anon:196 isolated_anon:0 [ 298.368388] active_file:23 inactive_file:12 isolated_file:0 [ 298.368388] unevictable:0 dirty:0 writeback:24 unstable:0 [ 298.368388] slab_reclaimable:13491 slab_unreclaimable:99874 [ 298.368388] mapped:13 shmem:250 pagetables:416 bounce:0 [ 298.368388] free:13698 free_pcp:30 free_cma:0 [ 298.371433] ? SyS_clock_settime+0x1a0/0x1a0 [ 298.371438] ? security_file_ioctl+0x6a/0xa0 [ 298.371447] SyS_ioctl+0x74/0x80 [ 298.371453] ? do_vfs_ioctl+0xfb0/0xfb0 [ 298.371460] do_syscall_64+0x1c7/0x5b0 [ 298.371464] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.371476] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 298.371482] RIP: 0033:0x45af49 [ 298.371485] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.371491] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 298.371494] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 298.371497] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 298.371500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 298.371503] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 298.372983] lowmem_reserve[]: [ 298.411593] CPU: 1 PID: 7911 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 298.417323] 0 [ 298.420316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.420320] Call Trace: [ 298.420337] dump_stack+0xf7/0x13b [ 298.420348] warn_alloc.cold.110+0xa2/0x1be [ 298.420353] ? zone_watermark_ok_safe+0x260/0x260 [ 298.420366] ? __alloc_pages_direct_compact+0xc2/0x330 [ 298.424245] 0 [ 298.429683] __alloc_pages_slowpath+0x2052/0x2650 [ 298.434888] 0 [ 298.438217] ? trace_hardirqs_off+0x10/0x10 [ 298.446027] 0 [ 298.453273] ? warn_alloc+0x100/0x100 [ 298.453280] ? get_page_from_freelist+0x1046/0x23b0 [ 298.453295] ? __might_sleep+0x93/0xb0 [ 298.460580] 0 [ 298.473639] __alloc_pages_nodemask+0x60d/0x770 [ 298.473649] ? retint_kernel+0x2d/0x2d [ 298.473655] ? __alloc_pages_slowpath+0x2650/0x2650 [ 298.473663] ? wait_for_completion+0x440/0x440 [ 298.488199] alloc_pages_current+0xd6/0x1b0 [ 298.491313] Node 1 [ 298.499081] ion_page_pool_alloc+0x102/0x180 [ 298.500915] Normal free:26524kB min:53504kB low:66880kB high:80256kB active_anon:324kB inactive_anon:12kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:288kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.510234] ion_system_heap_allocate+0x14e/0x930 [ 298.510243] ? do_raw_spin_unlock+0x16a/0x250 [ 298.510250] ? ion_system_heap_free+0x270/0x270 [ 298.510260] ion_alloc+0x27f/0x770 [ 298.512835] lowmem_reserve[]: [ 298.516366] ? ion_dma_buf_release+0x40/0x40 [ 298.520705] 0 [ 298.525503] ? kasan_check_write+0x14/0x20 [ 298.530814] 0 [ 298.532713] ion_ioctl+0xe2/0x1b6 [ 298.537548] 0 [ 298.539352] ? ion_alloc.cold.15+0x32/0x32 [ 298.543711] 0 [ 298.545457] do_vfs_ioctl+0x180/0xfb0 [ 298.549940] 0 [ 298.554987] ? __fget+0x1ad/0x2f0 [ 298.554999] ? ioctl_preallocate+0x1a0/0x1a0 [ 298.555007] ? __fget+0x1ca/0x2f0 [ 298.555019] ? security_file_ioctl+0x6a/0xa0 [ 298.555024] ? SyS_clock_settime+0x1a0/0x1a0 [ 298.555028] ? security_file_ioctl+0x6a/0xa0 [ 298.555034] SyS_ioctl+0x74/0x80 [ 298.555042] ? do_vfs_ioctl+0xfb0/0xfb0 [ 298.558928] Node 0 [ 298.560708] do_syscall_64+0x1c7/0x5b0 [ 298.560713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.560727] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 298.560733] RIP: 0033:0x45af49 [ 298.565409] DMA: [ 298.569669] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.574768] 1*4kB [ 298.579265] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 298.583592] (M) [ 298.585787] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 298.590206] 1*8kB [ 298.617701] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 298.617705] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 298.617707] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 298.625254] Node 0 active_anon:23224kB inactive_anon:772kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 6144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 298.632165] (M) [ 298.637232] Node 1 active_anon:324kB inactive_anon:12kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 298.638672] 2*16kB [ 298.648937] Node 0 [ 298.654004] (ME) [ 298.656088] DMA free:10380kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.656301] 1*32kB [ 298.666332] lowmem_reserve[]: [ 298.668686] (M) [ 298.673077] 0 [ 298.676027] 3*64kB [ 298.679465] 2570 [ 298.688051] (UME) [ 298.696225] 2570 [ 298.698392] 3*128kB [ 298.702522] 2570 2570 [ 298.709345] (UME) [ 298.721909] Node 0 [ 298.729180] 2*256kB [ 298.737893] DMA32 free:18336kB min:36384kB low:45480kB high:54576kB active_anon:23220kB inactive_anon:772kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6880kB pagetables:1508kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 298.742488] (ME) [ 298.753650] lowmem_reserve[]: [ 298.756830] 2*512kB [ 298.762889] 0 [ 298.771567] (ME) [ 298.781915] 0 [ 298.809601] Mem-Info: [ 298.833413] 0 [ 298.844130] active_anon:5887 inactive_anon:196 isolated_anon:0 [ 298.844130] active_file:13 inactive_file:14 isolated_file:0 [ 298.844130] unevictable:0 dirty:0 writeback:0 unstable:0 [ 298.844130] slab_reclaimable:13482 slab_unreclaimable:99889 [ 298.844130] mapped:2 shmem:250 pagetables:416 bounce:0 [ 298.844130] free:13810 free_pcp:30 free_cma:0 [ 298.865586] 0 [ 298.876392] 4*1024kB [ 298.876709] 0 [ 298.878769] (UME) 2*2048kB [ 298.889229] (UE) [ 298.890389] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.890402] lowmem_reserve[]: 0 0 0 0 0 [ 298.890420] Node 1 Normal free:26524kB min:53504kB low:66880kB high:80256kB active_anon:324kB inactive_anon:12kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:288kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.890432] lowmem_reserve[]: 0 0 0 0 0 [ 298.890448] Node 0 DMA: 1*4kB (M) 1*8kB (M) [ 298.899723] 0*4096kB [ 298.924036] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 298.924055] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 298.924074] CPU: 1 PID: 7911 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 298.936248] Node 0 active_anon:23224kB inactive_anon:772kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 6144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 298.937342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.937346] Call Trace: [ 298.939747] Node 1 active_anon:324kB inactive_anon:12kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 298.941539] dump_stack+0xf7/0x13b [ 298.941550] warn_alloc.cold.110+0xa2/0x1be [ 298.941556] ? zone_watermark_ok_safe+0x260/0x260 [ 298.941562] ? usleep_range+0x120/0x120 [ 298.941576] ? rcu_read_lock_sched_held+0x108/0x120 [ 298.974074] = 10380kB [ 298.975815] ? call_timer_fn+0x570/0x570 [ 298.978204] Node 0 [ 298.979999] __alloc_pages_slowpath+0x2052/0x2650 [ 298.982932] DMA32: [ 298.984960] ? warn_alloc+0x100/0x100 [ 299.010373] Node 0 [ 299.014282] ? get_page_from_freelist+0x1046/0x23b0 [ 299.043212] 460*4kB [ 299.047323] ? __might_sleep+0x93/0xb0 [ 299.051734] (UME) [ 299.054106] __alloc_pages_nodemask+0x60d/0x770 [ 299.065930] 131*8kB [ 299.071254] ? retint_kernel+0x2d/0x2d [ 299.071264] ? __alloc_pages_slowpath+0x2650/0x2650 [ 299.071277] ? wait_for_completion+0x440/0x440 [ 299.079777] DMA free:10380kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.107059] alloc_pages_current+0xd6/0x1b0 [ 299.107074] ion_page_pool_alloc+0x102/0x180 [ 299.107080] ion_system_heap_allocate+0x14e/0x930 [ 299.107087] ? do_raw_spin_unlock+0x16a/0x250 [ 299.107094] ? ion_system_heap_free+0x270/0x270 [ 299.107106] ion_alloc+0x27f/0x770 [ 299.116555] (UME) [ 299.119071] ? ion_dma_buf_release+0x40/0x40 [ 299.145610] lowmem_reserve[]: [ 299.149435] ? kasan_check_write+0x14/0x20 [ 299.153759] 40*16kB [ 299.158550] ion_ioctl+0xe2/0x1b6 [ 299.162529] 0 [ 299.167501] ? ion_alloc.cold.15+0x32/0x32 [ 299.169887] 2570 [ 299.173938] do_vfs_ioctl+0x180/0xfb0 [ 299.173946] ? __fget+0x1ad/0x2f0 [ 299.173952] ? ioctl_preallocate+0x1a0/0x1a0 [ 299.173961] ? __fget+0x1ca/0x2f0 [ 299.176279] (UME) [ 299.181105] ? security_file_ioctl+0x6a/0xa0 [ 299.181111] ? SyS_clock_settime+0x1a0/0x1a0 [ 299.181115] ? security_file_ioctl+0x6a/0xa0 [ 299.181122] SyS_ioctl+0x74/0x80 [ 299.183338] 19*32kB [ 299.187123] ? do_vfs_ioctl+0xfb0/0xfb0 [ 299.189331] (UME) [ 299.194341] do_syscall_64+0x1c7/0x5b0 [ 299.194346] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.194359] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 299.194364] RIP: 0033:0x45af49 [ 299.194368] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 [ 299.196692] 2570 [ 299.200545] ORIG_RAX: 0000000000000010 [ 299.200549] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 299.200551] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 299.200553] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 299.200556] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 299.200558] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 299.202926] 2*16kB [ 299.207372] 2570 [ 299.209685] (ME) [ 299.226297] 116*64kB [ 299.250785] 1*32kB [ 299.263784] 2570 [ 299.267493] (M) [ 299.283777] 3*64kB [ 299.285399] Node 0 [ 299.289699] (UME) 3*128kB [ 299.302291] DMA32 free:18088kB min:36384kB low:45480kB high:54576kB active_anon:23220kB inactive_anon:772kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6880kB pagetables:1508kB bounce:0kB free_pcp:232kB local_pcp:88kB free_cma:0kB [ 299.305147] (UME) [ 299.307443] lowmem_reserve[]: [ 299.310951] 2*256kB (ME) 2*512kB (ME) 4*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10380kB [ 299.310980] Node 0 DMA32: 460*4kB (UME) 140*8kB (UME) 40*16kB (UME) 19*32kB (UME) 116*64kB (UME) [ 299.323941] (UME) [ 299.326999] 21*128kB [ 299.329903] 21*128kB [ 299.334362] (UM) 5*256kB (UM) 1*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 18160kB [ 299.334391] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 299.334425] Node 1 Normal: 15*4kB (M) 20*8kB (UME) 18*16kB (UME) 21*32kB (UME) 10*64kB (M) 9*128kB (M) 4*256kB (M) [ 299.343915] 0 [ 299.345625] 2*512kB [ 299.346291] 0 [ 299.350227] (M) 1*1024kB (M) 0*2048kB 5*4096kB (U) = 26524kB [ 299.350256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.350260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 299.350263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.350266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 299.350269] 277 total pagecache pages [ 299.350278] 0 pages in swap cache [ 299.350282] Swap cache stats: add 0, delete 0, find 0/0 [ 299.350285] Free swap = 0kB [ 299.350287] Total swap = 0kB [ 299.350293] 1965979 pages RAM [ 299.350295] 0 pages HighMem/MovableOnly [ 299.350297] 335868 pages reserved [ 299.350300] 0 pages cma reserved [ 299.360611] (UM) 5*256kB (UM) 1*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 18088kB [ 299.360637] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 299.360671] Node 1 Normal: 15*4kB (M) 20*8kB (UME) 18*16kB (UME) 21*32kB (UME) 10*64kB (M) 9*128kB (M) 4*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 5*4096kB (U) = 26524kB [ 299.360727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.360731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 299.360740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.360744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 299.360747] 277 total pagecache pages [ 299.360756] 0 pages in swap cache [ 299.360759] Swap cache stats: add 0, delete 0, find 0/0 [ 299.360761] Free swap = 0kB [ 299.360763] Total swap = 0kB [ 299.360767] 1965979 pages RAM [ 299.360769] 0 pages HighMem/MovableOnly [ 299.360772] 335868 pages reserved [ 299.360774] 0 pages cma reserved [ 299.362256] 0 [ 299.365896] Out of memory: Kill process 7936 (syz-executor.5) score 1000 or sacrifice child [ 299.369649] 0 0 [ 299.371794] Killed process 7936 (syz-executor.5) total-vm:37772kB, anon-rss:2132kB, file-rss:0kB, shmem-rss:0kB [ 299.391029] oom_reaper: reaped process 7936 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 299.745212] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.771832] lowmem_reserve[]: 0 0 0 0 0 [ 299.776793] Node 1 Normal free:501376kB min:53504kB low:66880kB high:80256kB active_anon:324kB inactive_anon:12kB active_file:24kB inactive_file:2604kB unevictable:0kB writepending:148kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:156kB bounce:0kB free_pcp:360kB local_pcp:144kB free_cma:0kB [ 299.807339] lowmem_reserve[]: 0 0 0 0 0 [ 299.812251] Node 0 DMA: 1*4kB (M) 1*8kB (M) 2*16kB (ME) 1*32kB (M) 6*64kB (UME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 4*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10572kB [ 299.828622] Node 0 DMA32: 420*4kB (E) 121*8kB (UE) 30*16kB (UME) 7*32kB (UE) 3*64kB (UE) 3*128kB (U) 11*256kB (U) 51*512kB (U) 36*1024kB (UM) 1*2048kB (M) 0*4096kB = 71768kB [ 299.846820] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 299.858504] Node 1 Normal: 0*4kB 2*8kB (ME) 1*16kB (E) 1*32kB (E) 418*64kB (U) 178*128kB (U) 135*256kB (UM) 51*512kB (UM) 343*1024kB (UM) 37*2048kB (U) 11*4096kB (U) = 582336kB [ 299.880905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.890899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 299.900608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.910608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 299.924354] 2053 total pagecache pages [ 299.928870] 0 pages in swap cache [ 299.932921] Swap cache stats: add 0, delete 0, find 0/0 [ 299.938976] Free swap = 0kB [ 299.946179] Total swap = 0kB [ 299.959890] 1965979 pages RAM [ 299.980645] 0 pages HighMem/MovableOnly [ 299.984989] 335868 pages reserved [ 300.001831] 0 pages cma reserved [ 301.674265] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 301.740747] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 301.746494] CPU: 0 PID: 7954 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 301.754430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.763793] Call Trace: [ 301.766395] dump_stack+0xf7/0x13b [ 301.769939] warn_alloc.cold.110+0xa2/0x1be [ 301.774261] ? zone_watermark_ok_safe+0x260/0x260 [ 301.779119] ? __alloc_pages_direct_compact+0xc2/0x330 [ 301.784416] __alloc_pages_slowpath+0x2052/0x2650 [ 301.789290] ? trace_hardirqs_off+0x10/0x10 [ 301.793620] ? warn_alloc+0x100/0x100 [ 301.797444] ? get_page_from_freelist+0x1046/0x23b0 [ 301.802469] ? __might_sleep+0x93/0xb0 [ 301.806466] __alloc_pages_nodemask+0x60d/0x770 [ 301.811152] ? trace_hardirqs_off+0x10/0x10 [ 301.815510] ? __alloc_pages_slowpath+0x2650/0x2650 [ 301.820549] ? wait_for_completion+0x440/0x440 [ 301.828809] alloc_pages_current+0xd6/0x1b0 [ 301.833170] ion_page_pool_alloc+0x102/0x180 [ 301.837626] ion_system_heap_allocate+0x14e/0x930 [ 301.842480] ? ion_system_heap_free+0x270/0x270 [ 301.847162] ion_alloc+0x216/0x770 [ 301.850698] ? ion_dma_buf_release+0x40/0x40 [ 301.855114] ? kasan_check_write+0x14/0x20 [ 301.859375] ion_ioctl+0xe2/0x1b6 [ 301.862858] ? ion_alloc.cold.15+0x32/0x32 [ 301.867199] do_vfs_ioctl+0x180/0xfb0 [ 301.871095] ? __fget+0x1ad/0x2f0 [ 301.874564] ? ioctl_preallocate+0x1a0/0x1a0 [ 301.878994] ? __fget+0x1ca/0x2f0 [ 301.882483] ? security_file_ioctl+0x6a/0xa0 [ 301.886998] ? SyS_clock_settime+0x1a0/0x1a0 [ 301.891418] ? security_file_ioctl+0x6a/0xa0 [ 301.895851] SyS_ioctl+0x74/0x80 [ 301.899247] ? do_vfs_ioctl+0xfb0/0xfb0 [ 301.903247] do_syscall_64+0x1c7/0x5b0 [ 301.907147] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 301.911996] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 301.917266] RIP: 0033:0x45af49 [ 301.920442] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.928153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 301.935446] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 301.942705] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 301.949964] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 301.957226] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 302.001429] warn_alloc_show_mem: 2 callbacks suppressed [ 302.001432] Mem-Info: [ 302.009286] active_anon:5407 inactive_anon:196 isolated_anon:0 [ 302.009286] active_file:216 inactive_file:172 isolated_file:26 [ 302.009286] unevictable:0 dirty:7 writeback:0 unstable:0 [ 302.009286] slab_reclaimable:13475 slab_unreclaimable:100048 [ 302.009286] mapped:322 shmem:250 pagetables:416 bounce:0 [ 302.009286] free:26413 free_pcp:422 free_cma:0 [ 302.042453] Node 0 active_anon:21372kB inactive_anon:784kB active_file:748kB inactive_file:632kB unevictable:0kB isolated(anon):0kB isolated(file):104kB mapped:1212kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 302.070167] Node 1 active_anon:256kB inactive_anon:0kB active_file:116kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:40kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 302.097018] Node 0 DMA free:10592kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 302.114156] syz-executor.5: [ 302.124467] syz-executor.0: [ 302.124492] syz-executor.3: [ 302.127492] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 302.127505] syz-executor.0 cpuset=syz0 [ 302.137182] page allocation failure: order:4 [ 302.148936] mems_allowed=0-1 [ 302.150386] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 302.160846] lowmem_reserve[]: [ 302.169364] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 302.176360] page allocation failure: order:4 [ 302.189535] CPU: 0 PID: 7950 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 302.197180] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 302.201766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.201770] Call Trace: [ 302.201787] dump_stack+0xf7/0x13b [ 302.201798] warn_alloc.cold.110+0xa2/0x1be [ 302.201803] ? zone_watermark_ok_safe+0x260/0x260 [ 302.201816] ? __alloc_pages_direct_compact+0xc2/0x330 [ 302.201823] __alloc_pages_slowpath+0x2052/0x2650 [ 302.201838] ? trace_hardirqs_off+0x10/0x10 [ 302.201848] ? warn_alloc+0x100/0x100 [ 302.216930] syz-executor.3 cpuset= [ 302.218317] ? get_page_from_freelist+0x1046/0x23b0 [ 302.218332] ? __might_sleep+0x93/0xb0 [ 302.221023] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 302.224448] __alloc_pages_nodemask+0x60d/0x770 [ 302.224457] ? __alloc_pages_slowpath+0x2650/0x2650 [ 302.224470] ? wait_for_completion+0x440/0x440 [ 302.224477] ? policy_node+0xb3/0x100 [ 302.224485] alloc_pages_current+0xd6/0x1b0 [ 302.235932] (null) [ 302.238926] ion_page_pool_alloc+0x102/0x180 [ 302.238934] ion_system_heap_allocate+0x14e/0x930 [ 302.238943] ? ion_system_heap_free+0x270/0x270 [ 302.245025] syz3 [ 302.248117] ion_alloc+0x216/0x770 [ 302.252544] (null) [ 302.255449] ? ion_dma_buf_release+0x40/0x40 [ 302.255464] ? kasan_check_write+0x14/0x20 [ 302.255472] ion_ioctl+0xe2/0x1b6 [ 302.271763] syz-executor.3 cpuset= [ 302.276224] ? ion_alloc.cold.15+0x32/0x32 [ 302.276239] do_vfs_ioctl+0x180/0xfb0 [ 302.276247] ? __fget+0x1ad/0x2f0 [ 302.285818] mems_allowed=0-1 [ 302.285852] ? ioctl_preallocate+0x1a0/0x1a0 [ 302.292472] syz-executor.5 cpuset= [ 302.293975] ? __fget+0x1ca/0x2f0 [ 302.293990] ? security_file_ioctl+0x6a/0xa0 [ 302.297285] syz5 [ 302.300520] ? SyS_clock_settime+0x1a0/0x1a0 [ 302.324394] syz3 [ 302.326369] ? security_file_ioctl+0x6a/0xa0 [ 302.337671] mems_allowed=0-1 [ 302.341461] SyS_ioctl+0x74/0x80 [ 302.341471] ? do_vfs_ioctl+0xfb0/0xfb0 [ 302.341479] do_syscall_64+0x1c7/0x5b0 [ 302.341484] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.341496] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.341501] RIP: 0033:0x45af49 [ 302.341504] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.341510] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 302.341513] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 302.341516] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 302.341519] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 302.341521] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 302.347365] 0 [ 302.348500] CPU: 1 PID: 7952 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 302.352751] syz-executor.0 cpuset= [ 302.356152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.356156] Call Trace: [ 302.356180] dump_stack+0xf7/0x13b [ 302.356193] warn_alloc.cold.110+0xa2/0x1be [ 302.359772] syz0 [ 302.364117] ? zone_watermark_ok_safe+0x260/0x260 [ 302.366346] 2570 [ 302.370475] ? __alloc_pages_direct_compact+0xc2/0x330 [ 302.370483] __alloc_pages_slowpath+0x2052/0x2650 [ 302.370499] ? trace_hardirqs_off+0x10/0x10 [ 302.370506] ? warn_alloc+0x100/0x100 [ 302.372523] 2570 [ 302.376863] ? get_page_from_freelist+0x1046/0x23b0 [ 302.376878] ? __might_sleep+0x93/0xb0 [ 302.376884] __alloc_pages_nodemask+0x60d/0x770 [ 302.376891] ? __alloc_pages_slowpath+0x2650/0x2650 [ 302.380155] mems_allowed=0-1 [ 302.383333] ? wait_for_completion+0x440/0x440 [ 302.383346] alloc_pages_current+0xd6/0x1b0 [ 302.383356] ion_page_pool_alloc+0x102/0x180 [ 302.387361] 2570 [ 302.391193] ion_system_heap_allocate+0x14e/0x930 [ 302.391202] ? ion_system_heap_free+0x270/0x270 [ 302.391213] ion_alloc+0x216/0x770 [ 302.391221] ? ion_dma_buf_release+0x40/0x40 [ 302.391232] ? kasan_check_write+0x14/0x20 [ 302.391239] ion_ioctl+0xe2/0x1b6 [ 302.391245] ? ion_alloc.cold.15+0x32/0x32 [ 302.400434] 2570 [ 302.401256] do_vfs_ioctl+0x180/0xfb0 [ 302.401264] ? __fget+0x1ad/0x2f0 [ 302.412151] ? ioctl_preallocate+0x1a0/0x1a0 [ 302.412163] ? __fget+0x1ca/0x2f0 [ 302.412175] ? security_file_ioctl+0x6a/0xa0 [ 302.412181] ? SyS_clock_settime+0x1a0/0x1a0 [ 302.412185] ? security_file_ioctl+0x6a/0xa0 [ 302.412191] SyS_ioctl+0x74/0x80 [ 302.412197] ? do_vfs_ioctl+0xfb0/0xfb0 [ 302.412206] do_syscall_64+0x1c7/0x5b0 [ 302.422792] Node 0 [ 302.426744] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.426759] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.426765] RIP: 0033:0x45af49 [ 302.426769] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 [ 302.446121] DMA32 free:97396kB min:36384kB low:45480kB high:54576kB active_anon:21428kB inactive_anon:784kB active_file:748kB inactive_file:956kB unevictable:0kB writepending:24kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7008kB pagetables:1580kB bounce:0kB free_pcp:736kB local_pcp:0kB free_cma:0kB [ 302.448534] ORIG_RAX: 0000000000000010 [ 302.448538] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 302.448541] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 302.448544] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 302.448546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 302.448549] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 302.460170] mems_allowed=0-1 [ 302.466774] CPU: 0 PID: 7942 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 302.726847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.736245] Call Trace: [ 302.738863] dump_stack+0xf7/0x13b [ 302.742413] warn_alloc.cold.110+0xa2/0x1be [ 302.746770] ? zone_watermark_ok_safe+0x260/0x260 [ 302.751625] ? __alloc_pages_direct_compact+0xc2/0x330 [ 302.756919] __alloc_pages_slowpath+0x2052/0x2650 [ 302.761801] ? trace_hardirqs_off+0x10/0x10 [ 302.766152] ? warn_alloc+0x100/0x100 [ 302.769962] ? get_page_from_freelist+0x1046/0x23b0 [ 302.775043] ? __might_sleep+0x93/0xb0 [ 302.779065] __alloc_pages_nodemask+0x60d/0x770 [ 302.783750] ? __alloc_pages_slowpath+0x2650/0x2650 [ 302.788773] ? wait_for_completion+0x440/0x440 [ 302.793364] alloc_pages_current+0xd6/0x1b0 [ 302.797699] ion_page_pool_alloc+0x102/0x180 [ 302.802200] ion_system_heap_allocate+0x14e/0x930 [ 302.807201] ? ion_system_heap_free+0x270/0x270 [ 302.811888] ion_alloc+0x216/0x770 [ 302.815435] ? ion_dma_buf_release+0x40/0x40 [ 302.819855] ? kasan_check_write+0x14/0x20 [ 302.824105] ion_ioctl+0xe2/0x1b6 [ 302.827590] ? ion_alloc.cold.15+0x32/0x32 [ 302.831864] do_vfs_ioctl+0x180/0xfb0 [ 302.835688] ? __fget+0x1ad/0x2f0 [ 302.839151] ? ioctl_preallocate+0x1a0/0x1a0 [ 302.843578] ? __fget+0x1ca/0x2f0 [ 302.847038] ? security_file_ioctl+0x6a/0xa0 [ 302.851553] ? SyS_clock_settime+0x1a0/0x1a0 [ 302.855988] ? security_file_ioctl+0x6a/0xa0 [ 302.860425] SyS_ioctl+0x74/0x80 [ 302.863796] ? do_vfs_ioctl+0xfb0/0xfb0 [ 302.867764] do_syscall_64+0x1c7/0x5b0 [ 302.871664] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.876511] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.881690] RIP: 0033:0x45af49 [ 302.884874] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.892580] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 302.899882] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 302.907150] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.914421] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 302.921696] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 302.928985] CPU: 1 PID: 7945 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 302.930521] lowmem_reserve[]: [ 302.936804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.936809] Call Trace: [ 302.936828] dump_stack+0xf7/0x13b [ 302.936839] warn_alloc.cold.110+0xa2/0x1be [ 302.936845] ? zone_watermark_ok_safe+0x260/0x260 [ 302.936859] ? __alloc_pages_direct_compact+0xc2/0x330 [ 302.936866] __alloc_pages_slowpath+0x2052/0x2650 [ 302.940249] 0 [ 302.949328] ? trace_hardirqs_off+0x10/0x10 [ 302.949339] ? warn_alloc+0x100/0x100 [ 302.949345] ? get_page_from_freelist+0x1046/0x23b0 [ 302.949360] ? __might_sleep+0x93/0xb0 [ 302.952027] 0 [ 302.955478] __alloc_pages_nodemask+0x60d/0x770 [ 302.955486] ? __alloc_pages_slowpath+0x2650/0x2650 [ 302.955498] ? wait_for_completion+0x440/0x440 [ 302.955509] alloc_pages_current+0xd6/0x1b0 [ 302.959864] 0 [ 302.964647] ion_page_pool_alloc+0x102/0x180 [ 302.964654] ion_system_heap_allocate+0x14e/0x930 [ 302.964662] ? ion_system_heap_free+0x270/0x270 [ 302.964672] ion_alloc+0x216/0x770 [ 302.964682] ? ion_dma_buf_release+0x40/0x40 [ 302.964694] ? kasan_check_write+0x14/0x20 [ 302.964701] ion_ioctl+0xe2/0x1b6 [ 302.970211] 0 [ 302.974816] ? ion_alloc.cold.15+0x32/0x32 [ 302.974829] do_vfs_ioctl+0x180/0xfb0 [ 302.974836] ? __fget+0x1ad/0x2f0 [ 302.974843] ? ioctl_preallocate+0x1a0/0x1a0 [ 302.977091] 0 [ 302.980962] ? __fget+0x1ca/0x2f0 [ 302.980975] ? security_file_ioctl+0x6a/0xa0 [ 302.980981] ? SyS_clock_settime+0x1a0/0x1a0 [ 302.980985] ? security_file_ioctl+0x6a/0xa0 [ 302.980992] SyS_ioctl+0x74/0x80 [ 302.980998] ? do_vfs_ioctl+0xfb0/0xfb0 [ 302.981005] do_syscall_64+0x1c7/0x5b0 [ 302.981010] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.981021] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.981026] RIP: 0033:0x45af49 [ 302.981029] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.981035] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 302.981038] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 302.981040] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.981043] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 302.981046] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 302.992424] CPU: 1 PID: 7949 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 302.995706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.995709] Call Trace: [ 302.995724] dump_stack+0xf7/0x13b [ 302.995736] warn_alloc.cold.110+0xa2/0x1be [ 302.995743] ? zone_watermark_ok_safe+0x260/0x260 [ 303.000703] Node 0 [ 303.005592] ? __alloc_pages_direct_compact+0xc2/0x330 [ 303.005601] __alloc_pages_slowpath+0x2052/0x2650 [ 303.005619] ? trace_hardirqs_off+0x10/0x10 [ 303.010435] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.014500] ? warn_alloc+0x100/0x100 [ 303.014508] ? get_page_from_freelist+0x1046/0x23b0 [ 303.014525] ? __might_sleep+0x93/0xb0 [ 303.014531] __alloc_pages_nodemask+0x60d/0x770 [ 303.014538] ? __alloc_pages_slowpath+0x2650/0x2650 [ 303.016399] lowmem_reserve[]: [ 303.020757] ? wait_for_completion+0x440/0x440 [ 303.020769] alloc_pages_current+0xd6/0x1b0 [ 303.020780] ion_page_pool_alloc+0x102/0x180 [ 303.020786] ion_system_heap_allocate+0x14e/0x930 [ 303.020795] ? ion_system_heap_free+0x270/0x270 [ 303.020804] ion_alloc+0x216/0x770 [ 303.020813] ? ion_dma_buf_release+0x40/0x40 [ 303.025819] 0 [ 303.030312] ? kasan_check_write+0x14/0x20 [ 303.030322] ion_ioctl+0xe2/0x1b6 [ 303.030328] ? ion_alloc.cold.15+0x32/0x32 [ 303.030340] do_vfs_ioctl+0x180/0xfb0 [ 303.030346] ? __fget+0x1ad/0x2f0 [ 303.030355] ? ioctl_preallocate+0x1a0/0x1a0 [ 303.034213] 0 [ 303.038581] ? __fget+0x1ca/0x2f0 [ 303.038603] ? security_file_ioctl+0x6a/0xa0 [ 303.038609] ? SyS_clock_settime+0x1a0/0x1a0 [ 303.038613] ? security_file_ioctl+0x6a/0xa0 [ 303.038622] SyS_ioctl+0x74/0x80 [ 303.038629] ? do_vfs_ioctl+0xfb0/0xfb0 [ 303.038636] do_syscall_64+0x1c7/0x5b0 [ 303.038640] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.038652] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 303.038658] RIP: 0033:0x45af49 [ 303.038661] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.038667] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 303.038671] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 303.038673] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 303.038679] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 303.050988] 0 [ 303.052686] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 303.195764] warn_alloc_show_mem: 2 callbacks suppressed [ 303.195768] Mem-Info: [ 303.490159] 0 0 [ 303.494664] Node 1 Normal free:134264kB min:53504kB low:66880kB high:80256kB active_anon:268kB inactive_anon:0kB active_file:12kB inactive_file:212kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:84kB bounce:0kB free_pcp:100kB local_pcp:8kB free_cma:0kB [ 303.590068] lowmem_reserve[]: 0 0 0 0 0 [ 303.594113] Node 0 DMA: 1*4kB (M) 1*8kB (U) 2*16kB (UE) 12*32kB (UM) 12*64kB (UME) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10540kB [ 303.640080] Node 0 DMA32: 313*4kB (UME) 56*8kB (UME) 2*16kB (UE) 4*32kB (UM) 4*64kB (U) 116*128kB (U) 55*256kB (UM) 5*512kB (U) 19*1024kB (U) 0*2048kB 0*4096kB = 53060kB [ 303.686562] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 303.708449] Node 1 Normal: 2*4kB (UM) 2*8kB (UE) 1*16kB (E) 12*32kB (ME) 8*64kB (UM) 5*128kB (M) 7*256kB (UM) 1*512kB (M) 14*1024kB (U) 21*2048kB (U) 1*4096kB (U) = 65320kB [ 303.749798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.783421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 303.808614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.828847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 303.846336] 665 total pagecache pages [ 303.853427] 0 pages in swap cache [ 303.862681] Swap cache stats: add 0, delete 0, find 0/0 [ 303.872161] Free swap = 0kB [ 303.880474] Total swap = 0kB [ 303.887013] 1965979 pages RAM [ 303.892568] 0 pages HighMem/MovableOnly [ 303.902569] 335868 pages reserved [ 303.920475] 0 pages cma reserved [ 303.986941] active_anon:5425 inactive_anon:196 isolated_anon:0 [ 303.986941] active_file:33 inactive_file:14 isolated_file:0 [ 303.986941] unevictable:0 dirty:19 writeback:0 unstable:0 [ 303.986941] slab_reclaimable:13459 slab_unreclaimable:100002 [ 303.986941] mapped:34 shmem:250 pagetables:416 bounce:0 [ 303.986941] free:24924 free_pcp:30 free_cma:0 [ 304.057784] oom_reaper: reaped process 7942 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 304.090211] oom_reaper: reaped process 7949 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 304.130179] Node 0 active_anon:21348kB inactive_anon:784kB active_file:12kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 304.167570] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 304.190091] Node 1 active_anon:272kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 304.210085] rsyslogd cpuset=/ mems_allowed=0-1 [ 304.216211] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.283487] CPU: 0 PID: 6994 Comm: rsyslogd Not tainted 4.14.172-syzkaller #0 [ 304.290818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.293107] lowmem_reserve[]: [ 304.300170] Call Trace: [ 304.300189] dump_stack+0xf7/0x13b [ 304.300201] dump_header+0x160/0x63f [ 304.300210] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 304.300219] ? ___ratelimit+0x243/0x519 [ 304.300225] ? do_raw_spin_unlock+0x16a/0x250 [ 304.300232] oom_kill_process.cold.24+0xb/0xa1a [ 304.300237] ? out_of_memory+0x7f9/0x1030 [ 304.332834] 0 2570 [ 304.335581] ? lock_downgrade+0x7f0/0x7f0 [ 304.335596] out_of_memory+0x2b0/0x1030 [ 304.337821] 2570 [ 304.341955] ? oom_killer_disable+0x1a0/0x1a0 [ 304.341962] ? __alloc_pages_slowpath+0xb69/0x2650 [ 304.341969] __alloc_pages_slowpath+0x1ef3/0x2650 [ 304.341982] ? warn_alloc+0x100/0x100 [ 304.341988] ? get_page_from_freelist+0x1046/0x23b0 [ 304.342002] ? __might_sleep+0x93/0xb0 [ 304.342008] __alloc_pages_nodemask+0x60d/0x770 [ 304.370427] 2570 [ 304.371079] ? __alloc_pages_slowpath+0x2650/0x2650 [ 304.374949] 2570 [ 304.379614] ? lock_downgrade+0x7f0/0x7f0 [ 304.381783] syz-executor.5: [ 304.386699] alloc_pages_current+0xd6/0x1b0 [ 304.388733] page allocation failure: order:0 [ 304.392865] __page_cache_alloc+0x1da/0x330 [ 304.392873] filemap_fault+0xbc8/0x1ae0 [ 304.392884] ? __lock_page_or_retry+0x820/0x820 [ 304.392893] ? lock_acquire+0x173/0x400 [ 304.392902] ? ext4_filemap_fault+0x75/0xb0 [ 304.392913] ext4_filemap_fault+0x7d/0xb0 [ 304.395927] syz-executor.0: [ 304.400216] __do_fault+0xf3/0x340 [ 304.400223] __handle_mm_fault+0x21eb/0x3870 [ 304.400230] ? copy_page_range+0x1d10/0x1d10 [ 304.400237] ? find_held_lock+0x36/0x1d0 [ 304.400252] handle_mm_fault+0x234/0x6e0 [ 304.400256] ? find_vma+0x1a/0x150 [ 304.400264] __do_page_fault+0x44d/0xb00 [ 304.405130] page allocation failure: order:0 [ 304.408995] ? SyS_read+0x1c5/0x250 [ 304.413010] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 304.417612] ? firmware_map_remove+0x177/0x177 [ 304.421650] syz-executor.5: [ 304.425888] ? vmalloc_fault+0xc90/0xc90 [ 304.430124] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 304.433037] ? retint_user+0x18/0x18 [ 304.436556] (null) [ 304.440952] ? page_fault+0x2f/0x50 [ 304.440959] do_page_fault+0x64/0x3fb [ 304.440964] ? page_fault+0x2f/0x50 [ 304.440968] page_fault+0x45/0x50 [ 304.440973] RIP: 0033:0x42be70 [ 304.440976] RSP: 002b:00007f7903e9cd08 EFLAGS: 00010246 [ 304.440981] RAX: 0000000000000000 RBX: 00000000020c6120 RCX: 0000000000000000 [ 304.440984] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00000000020b58b0 [ 304.440987] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 304.440990] R10: 39313a6e6f6e615f R11: 00007f79062ada50 R12: 000000000065e200 [ 304.440992] R13: 0000000000000000 R14: 000000000000013d R15: 00007f79056d15e5 [ 304.451100] page allocation failure: order:0 [ 304.453649] Node 0 [ 304.457120] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 304.461219] (null) [ 304.461224] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 304.461242] CPU: 1 PID: 7949 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 304.461245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.461248] Call Trace: [ 304.461262] dump_stack+0xf7/0x13b [ 304.461273] warn_alloc.cold.110+0xa2/0x1be [ 304.461279] ? zone_watermark_ok_safe+0x260/0x260 [ 304.490080] syz-executor.5 cpuset= [ 304.495105] ? usleep_range+0x120/0x120 [ 304.498800] syz5 [ 304.500954] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 304.540069] mems_allowed=0-1 [ 304.545744] ? call_timer_fn+0x570/0x570 [ 304.636099] ? unreserve_highatomic_pageblock+0x315/0x450 [ 304.641640] __alloc_pages_slowpath+0x2052/0x2650 [ 304.646477] ? warn_alloc+0x100/0x100 [ 304.650266] ? get_page_from_freelist+0x1046/0x23b0 [ 304.655297] ? __might_sleep+0x93/0xb0 [ 304.659187] __alloc_pages_nodemask+0x60d/0x770 [ 304.663860] ? __alloc_pages_slowpath+0x2650/0x2650 [ 304.668880] ? wait_for_completion+0x440/0x440 [ 304.673473] ? policy_node+0xb3/0x100 [ 304.677273] alloc_pages_current+0xd6/0x1b0 [ 304.681618] ion_page_pool_alloc+0x102/0x180 [ 304.686221] ion_system_heap_allocate+0x14e/0x930 [ 304.691076] ? ion_system_heap_free+0x270/0x270 [ 304.695755] ion_alloc+0x216/0x770 [ 304.699299] ? ion_dma_buf_release+0x40/0x40 [ 304.703714] ? kasan_check_write+0x14/0x20 [ 304.708098] ion_ioctl+0xe2/0x1b6 [ 304.711548] ? ion_alloc.cold.15+0x32/0x32 [ 304.715808] do_vfs_ioctl+0x180/0xfb0 [ 304.719612] ? __fget+0x1ad/0x2f0 [ 304.723070] ? ioctl_preallocate+0x1a0/0x1a0 [ 304.727485] ? __fget+0x1ca/0x2f0 [ 304.730934] ? security_file_ioctl+0x6a/0xa0 [ 304.735342] ? SyS_clock_settime+0x1a0/0x1a0 [ 304.739734] ? security_file_ioctl+0x6a/0xa0 [ 304.744141] SyS_ioctl+0x74/0x80 [ 304.747512] ? do_vfs_ioctl+0xfb0/0xfb0 [ 304.751492] do_syscall_64+0x1c7/0x5b0 [ 304.755382] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.760260] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 304.765628] RIP: 0033:0x45af49 [ 304.768814] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.776523] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 304.783789] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 304.791059] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 304.798331] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 304.805642] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 304.812925] CPU: 0 PID: 7954 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 304.816283] DMA32 free:21908kB min:36384kB low:45480kB high:54576kB active_anon:21344kB inactive_anon:784kB active_file:12kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7008kB pagetables:1580kB bounce:0kB free_pcp:848kB local_pcp:120kB free_cma:0kB [ 304.820736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.820739] Call Trace: [ 304.820755] dump_stack+0xf7/0x13b [ 304.820769] warn_alloc.cold.110+0xa2/0x1be [ 304.820774] ? zone_watermark_ok_safe+0x260/0x260 [ 304.820780] ? usleep_range+0x120/0x120 [ 304.820787] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 304.820794] ? call_timer_fn+0x570/0x570 [ 304.820799] ? unreserve_highatomic_pageblock+0x315/0x450 [ 304.820809] __alloc_pages_slowpath+0x2052/0x2650 [ 304.820823] ? warn_alloc+0x100/0x100 [ 304.850694] syz-executor.0 cpuset= [ 304.858352] ? get_page_from_freelist+0x1046/0x23b0 [ 304.861031] syz0 [ 304.864453] ? __might_sleep+0x93/0xb0 [ 304.868876] mems_allowed=0-1 [ 304.873726] __alloc_pages_nodemask+0x60d/0x770 [ 304.873735] ? __alloc_pages_slowpath+0x2650/0x2650 [ 304.873745] ? wait_for_completion+0x440/0x440 [ 304.873755] alloc_pages_current+0xd6/0x1b0 [ 304.873765] ion_page_pool_alloc+0x102/0x180 [ 304.873770] ion_system_heap_allocate+0x14e/0x930 [ 304.873782] ? ion_system_heap_free+0x270/0x270 [ 304.873791] ion_alloc+0x216/0x770 [ 304.873800] ? ion_dma_buf_release+0x40/0x40 [ 304.873809] ? kasan_check_write+0x14/0x20 [ 304.873817] ion_ioctl+0xe2/0x1b6 [ 304.879561] lowmem_reserve[]: [ 304.883095] ? ion_alloc.cold.15+0x32/0x32 [ 304.883109] do_vfs_ioctl+0x180/0xfb0 [ 304.883116] ? __fget+0x1ad/0x2f0 [ 304.883122] ? ioctl_preallocate+0x1a0/0x1a0 [ 304.883129] ? __fget+0x1ca/0x2f0 [ 304.883141] ? security_file_ioctl+0x6a/0xa0 [ 304.883147] ? SyS_clock_settime+0x1a0/0x1a0 [ 304.883150] ? security_file_ioctl+0x6a/0xa0 [ 304.883156] SyS_ioctl+0x74/0x80 [ 304.883161] ? do_vfs_ioctl+0xfb0/0xfb0 [ 304.883169] do_syscall_64+0x1c7/0x5b0 [ 304.883174] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.883187] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 304.883193] RIP: 0033:0x45af49 [ 304.883198] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 [ 304.887728] 0 [ 304.893207] ORIG_RAX: 0000000000000010 [ 304.893211] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 304.893214] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 304.893217] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 304.893220] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 304.893222] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 304.942758] Mem-Info: [ 304.943359] CPU: 1 PID: 7942 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 304.952023] active_anon:5405 inactive_anon:196 isolated_anon:0 [ 304.952023] active_file:3 inactive_file:19 isolated_file:0 [ 304.952023] unevictable:0 dirty:0 writeback:0 unstable:0 [ 304.952023] slab_reclaimable:13454 slab_unreclaimable:100000 [ 304.952023] mapped:2 shmem:250 pagetables:416 bounce:0 [ 304.952023] free:16941 free_pcp:87 free_cma:0 [ 304.952694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.956251] Node 0 active_anon:21348kB inactive_anon:784kB active_file:12kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 304.960733] Call Trace: [ 304.960751] dump_stack+0xf7/0x13b [ 304.960761] warn_alloc.cold.110+0xa2/0x1be [ 304.960766] ? zone_watermark_ok_safe+0x260/0x260 [ 304.960773] ? usleep_range+0x120/0x120 [ 304.960779] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 304.960786] ? call_timer_fn+0x570/0x570 [ 304.960791] ? unreserve_highatomic_pageblock+0x315/0x450 [ 304.960801] __alloc_pages_slowpath+0x2052/0x2650 [ 304.960809] ? trace_hardirqs_on_caller+0x40c/0x580 [ 304.960823] ? warn_alloc+0x100/0x100 [ 304.960830] ? get_page_from_freelist+0x1046/0x23b0 [ 304.960846] ? __might_sleep+0x93/0xb0 [ 304.960853] __alloc_pages_nodemask+0x60d/0x770 [ 304.960860] ? __alloc_pages_slowpath+0x2650/0x2650 [ 304.960868] ? wait_for_completion+0x440/0x440 [ 304.990081] Node 1 active_anon:272kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 304.991102] alloc_pages_current+0xd6/0x1b0 [ 304.995493] Node 0 [ 304.999897] ion_page_pool_alloc+0x102/0x180 [ 305.011701] DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.015564] ion_system_heap_allocate+0x14e/0x930 [ 305.030100] lowmem_reserve[]: [ 305.034137] ? ion_system_heap_free+0x270/0x270 [ 305.035917] 0 [ 305.039883] ion_alloc+0x216/0x770 [ 305.054735] warn_alloc_show_mem: 2 callbacks suppressed [ 305.054739] Mem-Info: [ 305.061706] ? ion_dma_buf_release+0x40/0x40 [ 305.061720] ? kasan_check_write+0x14/0x20 [ 305.061726] ion_ioctl+0xe2/0x1b6 [ 305.061731] ? ion_alloc.cold.15+0x32/0x32 [ 305.061743] do_vfs_ioctl+0x180/0xfb0 [ 305.061753] ? __fget+0x1ad/0x2f0 [ 305.069041] 2570 [ 305.076296] ? ioctl_preallocate+0x1a0/0x1a0 [ 305.076305] ? __fget+0x1ca/0x2f0 [ 305.076317] ? security_file_ioctl+0x6a/0xa0 [ 305.076322] ? SyS_clock_settime+0x1a0/0x1a0 [ 305.076327] ? security_file_ioctl+0x6a/0xa0 [ 305.078739] 2570 [ 305.086523] SyS_ioctl+0x74/0x80 [ 305.086530] ? do_vfs_ioctl+0xfb0/0xfb0 [ 305.086537] do_syscall_64+0x1c7/0x5b0 [ 305.086542] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.086559] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 305.118901] active_anon:5405 inactive_anon:196 isolated_anon:0 [ 305.118901] active_file:3 inactive_file:19 isolated_file:0 [ 305.118901] unevictable:0 dirty:0 writeback:0 unstable:0 [ 305.118901] slab_reclaimable:13454 slab_unreclaimable:100000 [ 305.118901] mapped:2 shmem:250 pagetables:416 bounce:0 [ 305.118901] free:13810 free_pcp:111 free_cma:0 [ 305.128187] RIP: 0033:0x45af49 [ 305.128191] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.128197] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 305.128200] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 305.128202] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 305.128205] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 305.128207] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 305.135117] 0 [ 305.161574] syz-executor.0: [ 305.165794] 0 [ 305.189255] page allocation failure: order:0 [ 305.189441] 0 [ 305.198295] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 305.201162] 0 [ 305.204991] (null) [ 305.208334] Node 0 [ 305.215504] syz-executor.0 cpuset= [ 305.221278] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.223839] syz0 [ 305.226756] lowmem_reserve[]: [ 305.258553] 2570 [ 305.262716] 0 [ 305.264215] Node 0 active_anon:21268kB inactive_anon:784kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 305.292733] 0 [ 305.301928] 2570 [ 305.327768] 0 [ 305.352462] mems_allowed=0-1 [ 305.424594] 0 [ 305.440098] Node 1 active_anon:260kB inactive_anon:0kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 305.490098] 0 [ 305.495056] Node 1 [ 305.498592] Node 0 [ 305.601208] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.624140] Normal free:27712kB min:53504kB low:66880kB high:80256kB active_anon:260kB inactive_anon:0kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:84kB bounce:0kB free_pcp:204kB local_pcp:84kB free_cma:0kB [ 305.629702] CPU: 0 PID: 7950 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 305.665199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.674572] Call Trace: [ 305.677165] dump_stack+0xf7/0x13b [ 305.680706] warn_alloc.cold.110+0xa2/0x1be [ 305.685034] ? zone_watermark_ok_safe+0x260/0x260 [ 305.689915] ? usleep_range+0x120/0x120 [ 305.693911] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 305.699013] ? call_timer_fn+0x570/0x570 [ 305.703221] ? unreserve_highatomic_pageblock+0x315/0x450 [ 305.708800] __alloc_pages_slowpath+0x2052/0x2650 [ 305.713695] ? warn_alloc+0x100/0x100 [ 305.717506] ? get_page_from_freelist+0x1046/0x23b0 [ 305.722633] ? __might_sleep+0x93/0xb0 [ 305.726552] __alloc_pages_nodemask+0x60d/0x770 [ 305.731525] ? retint_kernel+0x2d/0x2d [ 305.735421] ? __alloc_pages_slowpath+0x2650/0x2650 [ 305.740453] ? wait_for_completion+0x440/0x440 [ 305.741906] lowmem_reserve[]: 0 [ 305.745138] alloc_pages_current+0xd6/0x1b0 [ 305.745151] ion_page_pool_alloc+0x102/0x180 [ 305.748412] 0 [ 305.752728] ion_system_heap_allocate+0x14e/0x930 [ 305.752736] ? ion_system_heap_free+0x270/0x270 [ 305.752744] ion_alloc+0x216/0x770 [ 305.752752] ? ion_dma_buf_release+0x40/0x40 [ 305.752762] ? kasan_check_write+0x14/0x20 [ 305.752768] ion_ioctl+0xe2/0x1b6 [ 305.752773] ? ion_alloc.cold.15+0x32/0x32 [ 305.752784] do_vfs_ioctl+0x180/0xfb0 [ 305.752791] ? __fget+0x1ad/0x2f0 [ 305.752797] ? ioctl_preallocate+0x1a0/0x1a0 [ 305.752806] ? __fget+0x1ca/0x2f0 [ 305.752818] ? security_file_ioctl+0x6a/0xa0 [ 305.752824] ? SyS_clock_settime+0x1a0/0x1a0 [ 305.752828] ? security_file_ioctl+0x6a/0xa0 [ 305.752834] SyS_ioctl+0x74/0x80 [ 305.752840] ? do_vfs_ioctl+0xfb0/0xfb0 [ 305.781798] 0 [ 305.784328] do_syscall_64+0x1c7/0x5b0 [ 305.788565] 0 [ 305.792370] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.792385] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 305.792391] RIP: 0033:0x45af49 [ 305.792393] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.792399] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 305.792402] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 305.792404] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 305.792406] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 305.792408] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 305.793316] lowmem_reserve[]: [ 305.864102] 0 [ 305.870071] DMA32 free:225532kB min:36384kB low:45480kB high:54576kB active_anon:21264kB inactive_anon:784kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1580kB bounce:0kB free_pcp:568kB local_pcp:124kB free_cma:0kB [ 305.883254] device hsr_slave_1 left promiscuous mode [ 305.924401] 0 2570 2570 2570 2570 [ 305.932625] Node 0 DMA32 free:262112kB min:36384kB low:45480kB high:54576kB active_anon:21264kB inactive_anon:784kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1580kB bounce:0kB free_pcp:464kB local_pcp:124kB free_cma:0kB [ 305.961641] device hsr_slave_0 left promiscuous mode [ 305.966775] lowmem_reserve[]: 0 0 0 0 0 [ 305.970808] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.993641] Node 0 DMA: 16*4kB (UM) 2*8kB (UM) 3*16kB (UME) 2*32kB (UM) 12*64kB (UME) 5*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10560kB [ 305.996264] lowmem_reserve[]: [ 306.012185] lowmem_reserve[]: 0 0 0 0 0 [ 306.019309] Node 1 Normal free:76508kB min:53504kB low:66880kB high:80256kB active_anon:260kB inactive_anon:0kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:84kB bounce:0kB free_pcp:800kB local_pcp:120kB free_cma:0kB [ 306.019946] team0 (unregistering): Port device team_slave_1 removed [ 306.047570] 0 0 0 0 0 [ 306.047587] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.047598] lowmem_reserve[]: 0 0 0 0 0 [ 306.047612] Node 1 [ 306.100099] lowmem_reserve[]: 0 0 0 0 0 [ 306.102968] Node 0 [ 306.106353] Node 0 DMA: [ 306.108629] DMA32: [ 306.108635] 123*4kB (UM) 2*8kB (UM) [ 306.130100] 928*4kB [ 306.130102] 3*16kB (UME) [ 306.133860] (UME) 986*8kB [ 306.136182] 2*32kB [ 306.138919] (UME) [ 306.141834] Normal free:84532kB min:53504kB low:66880kB high:80256kB active_anon:260kB inactive_anon:0kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:84kB bounce:0kB free_pcp:800kB local_pcp:664kB free_cma:0kB [ 306.141837] lowmem_reserve[]: 0 0 0 0 0 [ 306.141857] Node 0 DMA: 123*4kB [ 306.169180] 1259*16kB [ 306.173822] warn_alloc_show_mem: 2 callbacks suppressed [ 306.173825] Mem-Info: [ 306.178433] team0 (unregistering): Port device team_slave_0 removed [ 306.190097] active_anon:5382 inactive_anon:196 isolated_anon:0 [ 306.190097] active_file:10 inactive_file:12 isolated_file:0 [ 306.190097] unevictable:0 dirty:0 writeback:0 unstable:0 [ 306.190097] slab_reclaimable:13398 slab_unreclaimable:99709 [ 306.190097] mapped:2 shmem:250 pagetables:416 bounce:0 [ 306.190097] free:97411 free_pcp:658 free_cma:0 [ 306.220113] (UME) [ 306.231447] (UM) 12*64kB (UME) 5*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10988kB [ 306.260130] Node 0 DMA32: 1015*4kB (UME) 1194*8kB (UME) 1353*16kB (UME) 1070*32kB (UM) 1150*64kB (UME) 548*128kB (U) 89*256kB (U) 34*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 253436kB [ 306.267538] 979*32kB [ 306.276958] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 306.280105] (UM) 2*8kB (UM) 3*16kB (UME) 2*32kB (UM) 12*64kB (UME) 5*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10988kB [ 306.320156] (UM) [ 306.320169] Node 0 Normal: [ 306.322251] 2181*64kB [ 306.322257] 0*4kB [ 306.325159] (UME) [ 306.327649] 0*8kB [ 306.329800] 536*128kB (U) [ 306.332047] Node 0 active_anon:21268kB inactive_anon:784kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 306.332055] Node 1 active_anon:260kB inactive_anon:0kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 306.332058] Node 0 DMA free:11028kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.332070] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 306.332084] Node 0 DMA32 free:263792kB min:36384kB low:45480kB high:54576kB active_anon:21264kB inactive_anon:784kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1580kB bounce:0kB free_pcp:1344kB local_pcp:644kB free_cma:0kB [ 306.360173] 84*256kB [ 306.364631] 0*16kB [ 306.390172] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 306.421342] Node 0 [ 306.495054] lowmem_reserve[]: 0 0 0 0 0 [ 306.500497] (U) 34*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 310176kB [ 306.507728] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 306.510072] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.543842] DMA32: 367*4kB (UME) 1132*8kB (UME) 2036*16kB (UME) 1418*32kB (UM) 4*64kB (UME) 295*128kB (U) 89*256kB (U) 35*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 167196kB [ 306.564418] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 306.573058] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 306.584395] Node 1 Normal: 592*4kB (UM) 653*8kB (UME) 799*16kB (UME) 561*32kB (UME) 959*64kB (UM) 95*128kB (UM) 37*256kB (UM) 12*512kB (UM) 15*1024kB (U) 5*2048kB (U) 0*4096kB = 153080kB [ 306.587800] Node 1 [ 306.605508] lowmem_reserve[]: 0 0 0 0 0 [ 306.615594] Node 1 Normal: 592*4kB (UM) 653*8kB (UME) 799*16kB (UME) 561*32kB (UME) 959*64kB (UM) 95*128kB (UM) 37*256kB (UM) 12*512kB (UM) 15*1024kB (U) 5*2048kB (U) 0*4096kB = 153080kB [ 306.640114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.640157] Normal: [ 306.648986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.648992] 592*4kB [ 306.664068] Node 1 Normal free:153032kB min:53504kB low:66880kB high:80256kB active_anon:260kB inactive_anon:0kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:84kB bounce:0kB free_pcp:1332kB local_pcp:704kB free_cma:0kB [ 306.670105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.708252] bond0 (unregistering): Released all slaves [ 306.713874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.729920] (UM) 653*8kB (UME) 799*16kB (UME) 561*32kB (UME) 959*64kB (UM) 95*128kB (UM) 37*256kB (UM) 12*512kB (UM) 15*1024kB (U) 5*2048kB (U) 0*4096kB = 153080kB [ 306.744955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.754623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.764212] lowmem_reserve[]: 0 0 0 0 0 [ 306.768221] Node 0 DMA: 123*4kB (UM) 2*8kB (UM) 3*16kB (UME) 2*32kB (UM) 5*64kB (UME) 5*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10540kB [ 306.788074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.794100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.797550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.823336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.832345] Node 0 DMA32: 16*4kB (UE) 59*8kB (UE) 1*16kB (E) 1172*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38056kB [ 306.838077] 753 total pagecache pages [ 306.848713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.858871] 653 total pagecache pages [ 306.871372] 0 pages in swap cache [ 306.874953] Swap cache stats: add 0, delete 0, find 0/0 [ 306.880500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.889801] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 306.905381] Free swap = 0kB [ 306.908431] Total swap = 0kB [ 306.915111] 440 total pagecache pages [ 306.915182] 0 pages in swap cache [ 306.919082] 0 pages in swap cache [ 306.929802] Node 1 Normal: 21*4kB (UM) 20*8kB (UME) 301*16kB (UME) 565*32kB (UME) 6*64kB (M) 4*128kB (M) 6*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 26596kB [ 306.938104] Swap cache stats: add 0, delete 0, find 0/0 [ 306.948672] 1965979 pages RAM [ 306.951375] Free swap = 0kB [ 306.957902] Total swap = 0kB [ 306.960149] Swap cache stats: add 0, delete 0, find 0/0 [ 306.961578] 1965979 pages RAM [ 306.966402] Free swap = 0kB [ 306.969827] 0 pages HighMem/MovableOnly [ 306.972623] 0 pages HighMem/MovableOnly [ 306.980517] 335868 pages reserved [ 306.984276] 0 pages cma reserved [ 306.986949] 335868 pages reserved [ 306.993738] Total swap = 0kB [ 306.997225] 0 pages cma reserved [ 307.003387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.015224] 1965979 pages RAM [ 307.018355] 0 pages HighMem/MovableOnly [ 307.044577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 307.053450] 335868 pages reserved [ 307.056910] 0 pages cma reserved [ 307.061041] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 307.072954] Out of memory: Kill process 7943 (syz-executor.3) score 999 or sacrifice child [ 307.082045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.085477] syz-executor.5: [ 307.091128] Killed process 7945 (syz-executor.3) total-vm:38036kB, anon-rss:128kB, file-rss:0kB, shmem-rss:0kB [ 307.104361] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 307.109757] CPU: 0 PID: 7954 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 307.117639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.127030] Call Trace: [ 307.129634] dump_stack+0xf7/0x13b [ 307.133316] warn_alloc.cold.110+0xa2/0x1be [ 307.136229] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 307.137639] ? zone_watermark_ok_safe+0x260/0x260 [ 307.137654] ? __alloc_pages_direct_compact+0xc2/0x330 [ 307.157744] __alloc_pages_slowpath+0x2052/0x2650 [ 307.162622] ? trace_hardirqs_off+0x10/0x10 [ 307.166941] ? warn_alloc+0x100/0x100 [ 307.170735] ? get_page_from_freelist+0x1046/0x23b0 [ 307.175763] ? __might_sleep+0x93/0xb0 [ 307.179654] __alloc_pages_nodemask+0x60d/0x770 [ 307.184327] ? trace_hardirqs_off+0x10/0x10 [ 307.188651] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 307.191339] (null) [ 307.193511] ? __alloc_pages_slowpath+0x2650/0x2650 [ 307.195674] syz-executor.5 cpuset= [ 307.200696] ? wait_for_completion+0x440/0x440 [ 307.200707] alloc_pages_current+0xd6/0x1b0 [ 307.200717] ion_page_pool_alloc+0x102/0x180 [ 307.200722] ion_system_heap_allocate+0x14e/0x930 [ 307.200729] ? do_raw_spin_unlock+0x16a/0x250 [ 307.200737] ? ion_system_heap_free+0x270/0x270 [ 307.200745] ion_alloc+0x27f/0x770 [ 307.200753] ? ion_dma_buf_release+0x40/0x40 [ 307.200762] ? kasan_check_write+0x14/0x20 [ 307.200768] ion_ioctl+0xe2/0x1b6 [ 307.200773] ? ion_alloc.cold.15+0x32/0x32 [ 307.200786] do_vfs_ioctl+0x180/0xfb0 [ 307.200793] ? __fget+0x1ad/0x2f0 [ 307.200799] ? ioctl_preallocate+0x1a0/0x1a0 [ 307.200808] ? __fget+0x1ca/0x2f0 [ 307.200821] ? security_file_ioctl+0x6a/0xa0 [ 307.200826] ? SyS_clock_settime+0x1a0/0x1a0 [ 307.200829] ? security_file_ioctl+0x6a/0xa0 [ 307.200835] SyS_ioctl+0x74/0x80 [ 307.243838] syz5 [ 307.244399] ? do_vfs_ioctl+0xfb0/0xfb0 [ 307.247839] mems_allowed=0-1 [ 307.252066] do_syscall_64+0x1c7/0x5b0 [ 307.252072] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.252084] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.252090] RIP: 0033:0x45af49 [ 307.252092] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.252098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 307.252101] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 307.252103] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 307.252105] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 307.252108] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 307.261129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 307.320195] syz-executor.3: [ 307.330846] 284 total pagecache pages [ 307.334060] syz-executor.3: [ 307.339798] 0 pages in swap cache [ 307.352636] CPU: 1 PID: 7949 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 307.384243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.393600] Call Trace: [ 307.396195] dump_stack+0xf7/0x13b [ 307.396895] Swap cache stats: add 0, delete 0, find 0/0 [ 307.399734] warn_alloc.cold.110+0xa2/0x1be [ 307.409404] ? zone_watermark_ok_safe+0x260/0x260 [ 307.414269] ? __alloc_pages_direct_compact+0xc2/0x330 [ 307.419577] __alloc_pages_slowpath+0x2052/0x2650 [ 307.424434] ? trace_hardirqs_off+0x10/0x10 [ 307.428758] ? warn_alloc+0x100/0x100 [ 307.429862] Free swap = 0kB [ 307.432553] ? get_page_from_freelist+0x1046/0x23b0 [ 307.432568] ? __might_sleep+0x93/0xb0 [ 307.432574] __alloc_pages_nodemask+0x60d/0x770 [ 307.432581] ? trace_hardirqs_off+0x10/0x10 [ 307.432589] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 307.432595] ? __alloc_pages_slowpath+0x2650/0x2650 [ 307.456015] Total swap = 0kB [ 307.458528] ? wait_for_completion+0x440/0x440 [ 307.471309] alloc_pages_current+0xd6/0x1b0 [ 307.475655] ion_page_pool_alloc+0x102/0x180 [ 307.480209] ion_system_heap_allocate+0x14e/0x930 [ 307.484746] 1965979 pages RAM [ 307.485187] ? do_raw_spin_unlock+0x16a/0x250 [ 307.488282] 0 pages HighMem/MovableOnly [ 307.492780] ? ion_system_heap_free+0x270/0x270 [ 307.492790] ion_alloc+0x27f/0x770 [ 307.492798] ? ion_dma_buf_release+0x40/0x40 [ 307.492809] ? kasan_check_write+0x14/0x20 [ 307.492815] ion_ioctl+0xe2/0x1b6 [ 307.492820] ? ion_alloc.cold.15+0x32/0x32 [ 307.492833] do_vfs_ioctl+0x180/0xfb0 [ 307.525431] ? __fget+0x1ad/0x2f0 [ 307.528891] ? ioctl_preallocate+0x1a0/0x1a0 [ 307.533320] ? __fget+0x1ca/0x2f0 [ 307.536364] 335868 pages reserved [ 307.536775] ? security_file_ioctl+0x6a/0xa0 [ 307.544685] ? SyS_clock_settime+0x1a0/0x1a0 [ 307.549120] ? security_file_ioctl+0x6a/0xa0 [ 307.551534] 0 pages cma reserved [ 307.553572] SyS_ioctl+0x74/0x80 [ 307.560305] ? do_vfs_ioctl+0xfb0/0xfb0 [ 307.564298] do_syscall_64+0x1c7/0x5b0 [ 307.568203] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.573068] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.578354] RIP: 0033:0x45af49 [ 307.581656] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.589467] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 307.596789] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 307.604208] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.611492] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 307.618898] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 307.626765] oom_reaper: reaped process 7945 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 307.644007] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 307.661301] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 307.670131] Mem-Info: [ 307.674182] active_anon:5382 inactive_anon:196 isolated_anon:0 [ 307.674182] active_file:16 inactive_file:68 isolated_file:0 [ 307.674182] unevictable:0 dirty:0 writeback:0 unstable:0 [ 307.674182] slab_reclaimable:13383 slab_unreclaimable:99258 [ 307.674182] mapped:27 shmem:250 pagetables:416 bounce:0 [ 307.674182] free:83762 free_pcp:109 free_cma:0 [ 307.692548] syz-executor.3 cpuset= [ 307.708061] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 307.719781] CPU: 1 PID: 7945 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 307.727580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.736957] Call Trace: [ 307.739568] dump_stack+0xf7/0x13b [ 307.743119] warn_alloc.cold.110+0xa2/0x1be [ 307.747442] ? zone_watermark_ok_safe+0x260/0x260 [ 307.752288] ? usleep_range+0x120/0x120 [ 307.756272] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 307.761383] ? call_timer_fn+0x570/0x570 [ 307.765443] ? unreserve_highatomic_pageblock+0x315/0x450 [ 307.771002] __alloc_pages_slowpath+0x2052/0x2650 [ 307.775869] ? warn_alloc+0x100/0x100 [ 307.779675] ? get_page_from_freelist+0x1046/0x23b0 [ 307.784705] ? __might_sleep+0x93/0xb0 [ 307.788592] __alloc_pages_nodemask+0x60d/0x770 [ 307.793274] ? __alloc_pages_slowpath+0x2650/0x2650 [ 307.798297] ? wait_for_completion+0x440/0x440 [ 307.802887] alloc_pages_current+0xd6/0x1b0 [ 307.807216] ion_page_pool_alloc+0x102/0x180 [ 307.810129] Node 0 active_anon:21268kB inactive_anon:784kB active_file:60kB inactive_file:264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 307.811641] ion_system_heap_allocate+0x14e/0x930 [ 307.844270] ? ion_system_heap_free+0x270/0x270 [ 307.848950] ion_alloc+0x216/0x770 [ 307.852515] ? ion_dma_buf_release+0x40/0x40 [ 307.856932] ? kasan_check_write+0x14/0x20 [ 307.861177] ion_ioctl+0xe2/0x1b6 [ 307.864636] ? ion_alloc.cold.15+0x32/0x32 [ 307.868876] do_vfs_ioctl+0x180/0xfb0 [ 307.872679] ? __fget+0x1ad/0x2f0 [ 307.876141] ? ioctl_preallocate+0x1a0/0x1a0 [ 307.880637] ? __fget+0x1ca/0x2f0 [ 307.884095] ? security_file_ioctl+0x6a/0xa0 [ 307.888524] ? SyS_clock_settime+0x1a0/0x1a0 [ 307.892934] ? security_file_ioctl+0x6a/0xa0 [ 307.897370] SyS_ioctl+0x74/0x80 [ 307.900749] ? do_vfs_ioctl+0xfb0/0xfb0 [ 307.904733] do_syscall_64+0x1c7/0x5b0 [ 307.908648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.913527] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.918717] RIP: 0033:0x45af49 [ 307.921911] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.929628] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 307.936900] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 307.944193] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.951479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 307.958752] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 307.968511] Node 1 active_anon:260kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 307.990742] syz3 mems_allowed=0-1 [ 308.010750] CPU: 1 PID: 7952 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 308.018582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.027943] Call Trace: [ 308.030568] dump_stack+0xf7/0x13b [ 308.034109] warn_alloc.cold.110+0xa2/0x1be [ 308.038428] ? zone_watermark_ok_safe+0x260/0x260 [ 308.043287] ? usleep_range+0x120/0x120 [ 308.047287] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 308.052436] ? call_timer_fn+0x570/0x570 [ 308.056517] ? unreserve_highatomic_pageblock+0x315/0x450 [ 308.062059] __alloc_pages_slowpath+0x2052/0x2650 [ 308.066915] ? warn_alloc+0x100/0x100 [ 308.070716] ? get_page_from_freelist+0x1046/0x23b0 [ 308.075755] ? __might_sleep+0x93/0xb0 [ 308.079643] __alloc_pages_nodemask+0x60d/0x770 [ 308.084323] ? __alloc_pages_slowpath+0x2650/0x2650 [ 308.089388] ? wait_for_completion+0x440/0x440 [ 308.094012] alloc_pages_current+0xd6/0x1b0 [ 308.098377] ion_page_pool_alloc+0x102/0x180 [ 308.102967] ion_system_heap_allocate+0x14e/0x930 [ 308.107821] ? ion_system_heap_free+0x270/0x270 [ 308.112514] ion_alloc+0x216/0x770 [ 308.116056] ? ion_dma_buf_release+0x40/0x40 [ 308.120087] Node 0 DMA free:11376kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.120468] ? kasan_check_write+0x14/0x20 [ 308.120476] ion_ioctl+0xe2/0x1b6 [ 308.154320] ? ion_alloc.cold.15+0x32/0x32 [ 308.158594] do_vfs_ioctl+0x180/0xfb0 [ 308.162413] ? __fget+0x1ad/0x2f0 [ 308.165869] ? ioctl_preallocate+0x1a0/0x1a0 [ 308.170282] ? __fget+0x1ca/0x2f0 [ 308.173737] ? security_file_ioctl+0x6a/0xa0 [ 308.178159] ? SyS_clock_settime+0x1a0/0x1a0 [ 308.182586] ? security_file_ioctl+0x6a/0xa0 [ 308.187114] SyS_ioctl+0x74/0x80 [ 308.190512] ? do_vfs_ioctl+0xfb0/0xfb0 [ 308.194775] do_syscall_64+0x1c7/0x5b0 [ 308.198661] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.203522] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.208718] RIP: 0033:0x45af49 [ 308.211907] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.219635] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 308.226908] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 308.234182] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 308.240094] lowmem_reserve[]: [ 308.241469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 308.241474] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 308.244572] 0 2570 2570 2570 2570 [ 308.325480] Node 0 DMA32 free:174228kB min:36384kB low:45480kB high:54576kB active_anon:21208kB inactive_anon:784kB active_file:276kB inactive_file:1152kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1580kB bounce:0kB free_pcp:1388kB local_pcp:684kB free_cma:0kB [ 308.406199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.423704] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 308.448280] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 308.454612] lowmem_reserve[]: 0 0 0 0 0 [ 308.458611] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.489573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.497273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.529757] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 308.545003] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 308.564398] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.590080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 308.597667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.606374] lowmem_reserve[]: 0 0 0 0 0 [ 308.610917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.618776] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.625291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.632905] Node 1 Normal free:329460kB min:53504kB low:66880kB high:80256kB active_anon:224kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:84kB bounce:0kB free_pcp:1352kB local_pcp:732kB free_cma:0kB [ 308.705416] warn_alloc_show_mem: 2 callbacks suppressed [ 308.705420] Mem-Info: [ 308.714835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.729074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 308.736168] lowmem_reserve[]: 0 0 0 0 0 [ 308.751376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.759187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.760178] active_anon:5359 inactive_anon:196 isolated_anon:0 [ 308.760178] active_file:71 inactive_file:589 isolated_file:0 [ 308.760178] unevictable:0 dirty:50 writeback:0 unstable:0 [ 308.760178] slab_reclaimable:13379 slab_unreclaimable:99330 [ 308.760178] mapped:486 shmem:250 pagetables:416 bounce:0 [ 308.760178] free:102366 free_pcp:482 free_cma:0 [ 308.800378] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.804918] Node 0 DMA: 125*4kB (UM) 19*8kB (UM) 9*16kB (UME) 12*32kB (UM) [ 308.806762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.828074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 308.844660] 3*64kB (UME) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10588kB [ 308.870159] Node 0 DMA32: 226*4kB (E) 5142*8kB (UE) 2726*16kB (UE) 1541*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 134968kB [ 308.872976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 308.900909] Node 0 active_anon:21212kB inactive_anon:784kB active_file:376kB inactive_file:2452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2044kB dirty:200kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 308.940861] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 308.952198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.959885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 308.975917] Node 1 Normal: 608*4kB (U) 617*8kB (UE) 763*16kB (UE) 1100*32kB (UE) 1*64kB (U) 1*128kB (U) 1*256kB (U) 19*512kB (U) 16*1024kB (U) 2*2048kB (U) 0*4096kB = 85432kB [ 309.004419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 309.013365] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 309.025593] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 309.038381] Node 1 active_anon:224kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 309.038402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.064556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.064562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 309.064566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.064569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 309.064572] 1031 total pagecache pages [ 309.064581] 0 pages in swap cache [ 309.064584] Swap cache stats: add 0, delete 0, find 0/0 [ 309.064586] Free swap = 0kB [ 309.064589] Total swap = 0kB [ 309.064595] 1965979 pages RAM [ 309.064598] 0 pages HighMem/MovableOnly [ 309.064600] 335868 pages reserved [ 309.064603] 0 pages cma reserved [ 309.070064] syz-executor.0 cpuset= [ 309.120087] syz-executor.3 cpuset= [ 309.150094] Node 0 DMA free:10396kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.171039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.200091] syz3 mems_allowed=0-1 [ 309.203604] CPU: 0 PID: 7952 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 309.211426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.220863] Call Trace: [ 309.223456] dump_stack+0xf7/0x13b [ 309.226997] warn_alloc.cold.110+0xa2/0x1be [ 309.231318] ? zone_watermark_ok_safe+0x260/0x260 [ 309.236185] ? __alloc_pages_direct_compact+0xc2/0x330 [ 309.241508] __alloc_pages_slowpath+0x2052/0x2650 [ 309.246358] ? trace_hardirqs_off+0x10/0x10 [ 309.250676] ? warn_alloc+0x100/0x100 [ 309.254504] ? get_page_from_freelist+0x1046/0x23b0 [ 309.259530] ? __might_sleep+0x93/0xb0 [ 309.263429] __alloc_pages_nodemask+0x60d/0x770 [ 309.268094] ? trace_hardirqs_off+0x10/0x10 [ 309.272420] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 309.277487] ? __alloc_pages_slowpath+0x2650/0x2650 [ 309.282547] ? wait_for_completion+0x440/0x440 [ 309.287160] alloc_pages_current+0xd6/0x1b0 [ 309.291503] ion_page_pool_alloc+0x102/0x180 [ 309.296007] ion_system_heap_allocate+0x14e/0x930 [ 309.300864] ? do_raw_spin_unlock+0x16a/0x250 [ 309.307358] ? ion_system_heap_free+0x270/0x270 [ 309.312033] ion_alloc+0x27f/0x770 [ 309.315576] ? ion_dma_buf_release+0x40/0x40 [ 309.319989] ? kasan_check_write+0x14/0x20 [ 309.324237] ion_ioctl+0xe2/0x1b6 [ 309.327691] ? ion_alloc.cold.15+0x32/0x32 [ 309.331932] do_vfs_ioctl+0x180/0xfb0 [ 309.335725] ? __fget+0x1ad/0x2f0 [ 309.339173] ? ioctl_preallocate+0x1a0/0x1a0 [ 309.343581] ? __fget+0x1ca/0x2f0 [ 309.347041] ? security_file_ioctl+0x6a/0xa0 [ 309.351478] ? SyS_clock_settime+0x1a0/0x1a0 [ 309.355882] ? security_file_ioctl+0x6a/0xa0 [ 309.360286] SyS_ioctl+0x74/0x80 [ 309.363643] ? do_vfs_ioctl+0xfb0/0xfb0 [ 309.367618] do_syscall_64+0x1c7/0x5b0 [ 309.371506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.376363] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.381549] RIP: 0033:0x45af49 [ 309.384730] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.390125] lowmem_reserve[]: [ 309.392450] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 309.392451] 0 2570 [ 309.395571] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 309.395575] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 309.412611] 2570 [ 309.414329] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 309.425584] 2570 [ 309.431101] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 309.432288] syz0 [ 309.434307] kworker/1:3 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask= [ 309.441224] mems_allowed=0-1 [ 309.446555] 2570 [ 309.454700] CPU: 0 PID: 7950 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 309.454703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.454706] Call Trace: [ 309.454722] dump_stack+0xf7/0x13b [ 309.454734] warn_alloc.cold.110+0xa2/0x1be [ 309.457860] (null) [ 309.459865] ? zone_watermark_ok_safe+0x260/0x260 [ 309.477021] ? __alloc_pages_direct_compact+0xc2/0x330 [ 309.479576] Node 0 [ 309.483096] __alloc_pages_slowpath+0x2052/0x2650 [ 309.483111] ? trace_hardirqs_off+0x10/0x10 [ 309.483118] ? warn_alloc+0x100/0x100 [ 309.483124] ? get_page_from_freelist+0x1046/0x23b0 [ 309.483137] ? __might_sleep+0x93/0xb0 [ 309.483142] __alloc_pages_nodemask+0x60d/0x770 [ 309.483146] ? trace_hardirqs_off+0x10/0x10 [ 309.483154] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 309.483159] ? __alloc_pages_slowpath+0x2650/0x2650 [ 309.483166] ? wait_for_completion+0x440/0x440 [ 309.483177] alloc_pages_current+0xd6/0x1b0 [ 309.483187] ion_page_pool_alloc+0x102/0x180 [ 309.483192] ion_system_heap_allocate+0x14e/0x930 [ 309.483199] ? do_raw_spin_unlock+0x16a/0x250 [ 309.483207] ? ion_system_heap_free+0x270/0x270 [ 309.489216] , order=1, oom_score_adj=0 [ 309.489648] ion_alloc+0x27f/0x770 [ 309.496554] kworker/1:3 cpuset= [ 309.499786] ? ion_dma_buf_release+0x40/0x40 [ 309.499799] ? kasan_check_write+0x14/0x20 [ 309.499805] ion_ioctl+0xe2/0x1b6 [ 309.499810] ? ion_alloc.cold.15+0x32/0x32 [ 309.499821] do_vfs_ioctl+0x180/0xfb0 [ 309.499827] ? __fget+0x1ad/0x2f0 [ 309.499835] ? ioctl_preallocate+0x1a0/0x1a0 [ 309.499844] ? __fget+0x1ca/0x2f0 [ 309.499858] ? security_file_ioctl+0x6a/0xa0 [ 309.504626] DMA32 free:18488kB min:36384kB low:45480kB high:54576kB active_anon:21208kB inactive_anon:784kB active_file:156kB inactive_file:188kB unevictable:0kB writepending:84kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1580kB bounce:0kB free_pcp:728kB local_pcp:728kB free_cma:0kB [ 309.507129] ? SyS_clock_settime+0x1a0/0x1a0 [ 309.507139] ? security_file_ioctl+0x6a/0xa0 [ 309.513541] / [ 309.515269] SyS_ioctl+0x74/0x80 [ 309.515281] ? do_vfs_ioctl+0xfb0/0xfb0 [ 309.515290] do_syscall_64+0x1c7/0x5b0 [ 309.515296] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.515310] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.522287] lowmem_reserve[]: [ 309.524316] RIP: 0033:0x45af49 [ 309.528962] 0 [ 309.533273] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.533279] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 309.533282] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 309.533284] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 309.533287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 309.533289] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 309.731505] mems_allowed=0-1 [ 309.733056] 0 0 0 0 [ 309.735225] CPU: 1 PID: 7258 Comm: kworker/1:3 Not tainted 4.14.172-syzkaller #0 [ 309.736987] Node 0 [ 309.745145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.745161] Workqueue: events linkwatch_event [ 309.745166] Call Trace: [ 309.745179] dump_stack+0xf7/0x13b [ 309.745190] dump_header+0x160/0x63f [ 309.745198] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 309.745207] ? ___ratelimit+0x243/0x519 [ 309.745214] ? do_raw_spin_unlock+0x16a/0x250 [ 309.745221] oom_kill_process.cold.24+0xb/0xa1a [ 309.745224] ? out_of_memory+0x7f9/0x1030 [ 309.745233] ? lock_downgrade+0x7f0/0x7f0 [ 309.745242] out_of_memory+0x2b0/0x1030 [ 309.745249] ? oom_killer_disable+0x1a0/0x1a0 [ 309.745257] ? __alloc_pages_slowpath+0xb69/0x2650 [ 309.745263] __alloc_pages_slowpath+0x1ef3/0x2650 [ 309.745279] ? warn_alloc+0x100/0x100 [ 309.745286] ? get_page_from_freelist+0x1046/0x23b0 [ 309.745301] ? __might_sleep+0x93/0xb0 [ 309.745309] __alloc_pages_nodemask+0x60d/0x770 [ 309.748176] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.756916] ? __alloc_pages_slowpath+0x2650/0x2650 [ 309.756926] ? cache_grow_begin+0x331/0x3f0 [ 309.756933] cache_grow_begin+0x80/0x3f0 [ 309.756939] fallback_alloc+0x203/0x2c0 [ 309.756947] ____cache_alloc_node+0x1c7/0x1e0 [ 309.761532] lowmem_reserve[]: [ 309.764087] kmem_cache_alloc_node_trace+0xe7/0x780 [ 309.767599] 0 [ 309.771303] __kmalloc_node_track_caller+0x3c/0x70 [ 309.771313] __kmalloc_reserve.isra.38+0x2c/0xc0 [ 309.771320] __alloc_skb+0xc1/0x500 [ 309.771325] ? skb_trim+0x160/0x160 [ 309.776421] 0 0 [ 309.780421] ? if_nlmsg_size+0x2d9/0x6f0 [ 309.780429] rtmsg_ifinfo_build_skb+0x68/0x120 [ 309.780437] rtmsg_ifinfo_event.part.27+0x16/0xb0 [ 309.780442] rtmsg_ifinfo+0x4a/0x70 [ 309.780451] netdev_state_change+0xc9/0xe0 [ 309.780457] ? dev_valid_name+0x1c0/0x1c0 [ 309.785391] 0 [ 309.790293] ? __local_bh_enable_ip+0x9c/0x180 [ 309.790306] ? _raw_write_unlock_bh+0x30/0x40 [ 309.790315] linkwatch_do_dev+0x72/0xc0 [ 309.790321] __linkwatch_run_queue+0x23f/0x450 [ 309.790327] ? linkwatch_schedule_work+0xf0/0xf0 [ 309.790337] linkwatch_event+0x3e/0x50 [ 309.794475] 0 [ 309.798617] process_one_work+0x79e/0x16c0 [ 309.798628] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 309.798637] worker_thread+0xcc/0xee0 [ 309.798656] kthread+0x338/0x400 [ 309.807243] ? process_one_work+0x16c0/0x16c0 [ 309.812203] Node 1 [ 309.816992] ? kthread_create_on_node+0xa0/0xa0 [ 309.820797] Normal free:26688kB min:53504kB low:66880kB high:80256kB active_anon:224kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:84kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 309.825777] ret_from_fork+0x24/0x30 [ 309.829664] lowmem_reserve[]: [ 309.834429] Mem-Info: [ 309.864390] 0 0 0 0 0 [ 309.864412] Node 0 DMA: 120*4kB (UM) 19*8kB (UM) 9*16kB (UME) 12*32kB (UM) 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10376kB [ 309.864467] Node 0 DMA32: 360*4kB (UME) 81*8kB (UME) 5*16kB (ME) [ 309.880567] active_anon:5359 inactive_anon:196 isolated_anon:0 [ 309.880567] active_file:20 inactive_file:1 isolated_file:9 [ 309.880567] unevictable:0 dirty:8 writeback:0 unstable:0 [ 309.880567] slab_reclaimable:13349 slab_unreclaimable:99096 [ 309.880567] mapped:22 shmem:250 pagetables:416 bounce:0 [ 309.880567] free:13804 free_pcp:351 free_cma:0 [ 309.885126] 499*32kB [ 309.889618] Node 0 active_anon:21212kB inactive_anon:784kB active_file:68kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:88kB dirty:32kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 309.891455] (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 309.897699] Node 1 active_anon:224kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 309.904585] 0*4096kB [ 309.904802] Node 0 [ 309.908410] = 18200kB [ 309.908413] Node 0 [ 309.910425] DMA free:10376kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.910428] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 309.910444] Node 0 DMA32 free:18152kB min:36384kB low:45480kB high:54576kB active_anon:21208kB inactive_anon:784kB active_file:68kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1580kB bounce:0kB free_pcp:1164kB local_pcp:728kB free_cma:0kB [ 309.910455] lowmem_reserve[]: 0 0 0 0 0 [ 309.910469] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.910479] lowmem_reserve[]: [ 309.914523] Normal: 0*4kB [ 309.919092] 0 0 [ 309.929949] 0*8kB [ 309.932179] 0 [ 309.936313] 0*16kB [ 309.938072] 0 [ 309.946079] 0*32kB [ 309.947168] 0 [ 309.951215] 0*64kB [ 309.963923] 0*128kB [ 309.964477] Node 1 [ 309.966270] 0*256kB 0*512kB [ 309.970567] Normal free:26688kB min:53504kB low:66880kB high:80256kB active_anon:224kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:84kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 309.970571] lowmem_reserve[]: [ 309.975261] 0*1024kB [ 309.979015] 0 [ 309.985795] 0*2048kB [ 309.988017] 0 [ 309.989141] 0*4096kB = 0kB [ 309.995803] 0 [ 310.025406] Node 1 [ 310.030576] 0 [ 310.030810] Normal: [ 310.033274] 0 [ 310.053485] 0*4kB [ 310.092526] 2*8kB [ 310.121378] Node 0 [ 310.128524] (UE) [ 310.161420] DMA: [ 310.166141] 1*16kB [ 310.194975] 120*4kB [ 310.198550] (E) [ 310.224310] (UM) 19*8kB (UM) 9*16kB (UME) 12*32kB (UM) 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) [ 310.231893] 833*32kB [ 310.259740] 2*2048kB [ 310.264198] (UE) [ 310.264778] (UE) [ 310.266930] 0*64kB [ 310.268709] 0*4096kB [ 310.272688] 0*128kB [ 310.280402] = 10376kB [ 310.283169] 0*256kB [ 310.283605] Node 0 [ 310.286616] 0*512kB 0*1024kB [ 310.319503] DMA32: [ 310.325734] 0*2048kB [ 310.327256] 360*4kB [ 310.329153] 0*4096kB = 26688kB [ 310.331017] (UME) [ 310.333248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.335047] 81*8kB [ 310.338144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 310.339928] (UME) [ 310.345604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.346511] 5*16kB [ 310.348709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 310.348715] 296 total pagecache pages [ 310.350865] (ME) [ 310.353089] 0 pages in swap cache [ 310.355463] 499*32kB [ 310.357450] Swap cache stats: add 0, delete 0, find 0/0 [ 310.368733] (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18200kB [ 310.368770] Node 0 Normal: 0*4kB [ 310.374623] Free swap = 0kB [ 310.378739] 0*8kB [ 310.379973] Total swap = 0kB [ 310.382420] 0*16kB [ 310.384729] 1965979 pages RAM [ 310.387128] 0*32kB 0*64kB [ 310.389445] 0 pages HighMem/MovableOnly [ 310.391714] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 310.391737] Node 1 Normal: 0*4kB 2*8kB (UE) 1*16kB (E) 833*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 310.398265] 335868 pages reserved [ 310.399478] 0*4096kB [ 310.405353] 0 pages cma reserved [ 310.407205] = 26688kB [ 310.529215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.538112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 310.547908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.557145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 310.566469] 296 total pagecache pages [ 310.570484] 0 pages in swap cache [ 310.574313] Swap cache stats: add 0, delete 0, find 0/0 [ 310.579767] Free swap = 0kB [ 310.582844] Total swap = 0kB [ 310.587050] 1965979 pages RAM [ 310.590258] 0 pages HighMem/MovableOnly [ 310.594266] 335868 pages reserved [ 310.597727] 0 pages cma reserved [ 310.601221] Out of memory: Kill process 7217 (syz-execprog) score 1 or sacrifice child [ 310.609962] Killed process 7938 (syz-executor.1) total-vm:37644kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 310.640173] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 310.652165] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 310.663738] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 310.664074] syz-executor.3 cpuset= [ 310.675993] syz-executor.5 cpuset= [ 310.676038] syz-executor.0: [ 310.679556] syz5 mems_allowed=0-1 [ 310.688756] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 310.689894] oom_reaper: reaped process 7938 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 310.705450] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 310.716070] CPU: 1 PID: 7954 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 310.724180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.730565] syz3 [ 310.733731] Call Trace: [ 310.733751] dump_stack+0xf7/0x13b [ 310.735726] mems_allowed=0-1 [ 310.738320] warn_alloc.cold.110+0xa2/0x1be [ 310.749257] ? zone_watermark_ok_safe+0x260/0x260 [ 310.754117] ? usleep_range+0x120/0x120 [ 310.758108] ? rcu_read_lock_sched_held+0x108/0x120 [ 310.763142] ? call_timer_fn+0x570/0x570 [ 310.767328] __alloc_pages_slowpath+0x2052/0x2650 [ 310.772170] ? warn_alloc+0x100/0x100 [ 310.775976] ? get_page_from_freelist+0x1046/0x23b0 [ 310.781007] ? __might_sleep+0x93/0xb0 [ 310.784899] __alloc_pages_nodemask+0x60d/0x770 [ 310.789570] ? trace_hardirqs_off+0x10/0x10 [ 310.793900] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 310.798748] ? __alloc_pages_slowpath+0x2650/0x2650 [ 310.803921] ? wait_for_completion+0x440/0x440 [ 310.808504] alloc_pages_current+0xd6/0x1b0 [ 310.812833] ion_page_pool_alloc+0x102/0x180 [ 310.817365] ion_system_heap_allocate+0x14e/0x930 [ 310.822224] ? do_raw_spin_unlock+0x16a/0x250 [ 310.826707] ? ion_system_heap_free+0x270/0x270 [ 310.831452] ion_alloc+0x27f/0x770 [ 310.834981] ? ion_dma_buf_release+0x40/0x40 [ 310.839498] ? kasan_check_write+0x14/0x20 [ 310.843754] ion_ioctl+0xe2/0x1b6 [ 310.847231] ? ion_alloc.cold.15+0x32/0x32 [ 310.851499] do_vfs_ioctl+0x180/0xfb0 [ 310.855319] ? __fget+0x1ad/0x2f0 [ 310.858764] ? ioctl_preallocate+0x1a0/0x1a0 [ 310.863170] ? __fget+0x1ca/0x2f0 [ 310.866615] ? security_file_ioctl+0x6a/0xa0 [ 310.871152] ? SyS_clock_settime+0x1a0/0x1a0 [ 310.875581] ? security_file_ioctl+0x6a/0xa0 [ 310.880011] SyS_ioctl+0x74/0x80 [ 310.883371] ? do_vfs_ioctl+0xfb0/0xfb0 [ 310.887343] do_syscall_64+0x1c7/0x5b0 [ 310.891219] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.896323] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.901510] RIP: 0033:0x45af49 [ 310.904689] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.910148] syz-executor.0 cpuset= [ 310.912392] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 310.912393] syz0 mems_allowed=0-1 [ 310.915922] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 310.915926] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 310.941273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 310.948613] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 310.956752] CPU: 0 PID: 7952 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 310.957189] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.964548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.964552] Call Trace: [ 310.964568] dump_stack+0xf7/0x13b [ 310.964578] warn_alloc.cold.110+0xa2/0x1be [ 310.964584] ? zone_watermark_ok_safe+0x260/0x260 [ 310.964590] ? usleep_range+0x120/0x120 [ 310.964599] ? rcu_read_lock_sched_held+0x108/0x120 [ 310.964606] ? call_timer_fn+0x570/0x570 [ 310.964618] __alloc_pages_slowpath+0x2052/0x2650 [ 311.013849] ? warn_alloc+0x100/0x100 [ 311.017635] ? get_page_from_freelist+0x1046/0x23b0 [ 311.022640] ? __might_sleep+0x93/0xb0 [ 311.026514] __alloc_pages_nodemask+0x60d/0x770 [ 311.031172] ? trace_hardirqs_off+0x10/0x10 [ 311.035477] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 311.040304] ? __alloc_pages_slowpath+0x2650/0x2650 [ 311.045306] ? wait_for_completion+0x440/0x440 [ 311.049890] alloc_pages_current+0xd6/0x1b0 [ 311.054211] ion_page_pool_alloc+0x102/0x180 [ 311.058608] ion_system_heap_allocate+0x14e/0x930 [ 311.063448] ? do_raw_spin_unlock+0x16a/0x250 [ 311.067931] ? ion_system_heap_free+0x270/0x270 [ 311.072586] ion_alloc+0x27f/0x770 [ 311.076144] ? ion_dma_buf_release+0x40/0x40 [ 311.080569] ? kasan_check_write+0x14/0x20 [ 311.084811] ion_ioctl+0xe2/0x1b6 [ 311.088247] ? ion_alloc.cold.15+0x32/0x32 [ 311.092470] do_vfs_ioctl+0x180/0xfb0 [ 311.096254] ? __fget+0x1ad/0x2f0 [ 311.099705] ? ioctl_preallocate+0x1a0/0x1a0 [ 311.104120] ? __fget+0x1ca/0x2f0 [ 311.107955] ? security_file_ioctl+0x6a/0xa0 [ 311.114010] ? SyS_clock_settime+0x1a0/0x1a0 [ 311.118404] ? security_file_ioctl+0x6a/0xa0 [ 311.122798] SyS_ioctl+0x74/0x80 [ 311.126239] ? do_vfs_ioctl+0xfb0/0xfb0 [ 311.130208] do_syscall_64+0x1c7/0x5b0 [ 311.134106] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.139644] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.144924] RIP: 0033:0x45af49 [ 311.148162] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.157075] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 311.164332] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 311.171605] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 311.178859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 311.186113] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 311.193387] CPU: 1 PID: 7950 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 311.201223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.209932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.210576] Call Trace: [ 311.210593] dump_stack+0xf7/0x13b [ 311.210604] warn_alloc.cold.110+0xa2/0x1be [ 311.210609] ? zone_watermark_ok_safe+0x260/0x260 [ 311.210615] ? usleep_range+0x120/0x120 [ 311.210621] ? get_page_from_freelist+0x26e/0x23b0 [ 311.210627] ? call_timer_fn+0x570/0x570 [ 311.210639] __alloc_pages_slowpath+0x2052/0x2650 [ 311.210653] ? warn_alloc+0x100/0x100 [ 311.210658] ? get_page_from_freelist+0x1046/0x23b0 [ 311.210672] ? __might_sleep+0x93/0xb0 [ 311.210679] __alloc_pages_nodemask+0x60d/0x770 [ 311.219593] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 311.222821] ? trace_hardirqs_off+0x10/0x10 [ 311.222831] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 311.222840] ? __alloc_pages_slowpath+0x2650/0x2650 [ 311.222846] ? wait_for_completion+0x440/0x440 [ 311.222856] alloc_pages_current+0xd6/0x1b0 [ 311.222866] ion_page_pool_alloc+0x102/0x180 [ 311.222872] ion_system_heap_allocate+0x14e/0x930 [ 311.222878] ? do_raw_spin_unlock+0x16a/0x250 [ 311.222886] ? ion_system_heap_free+0x270/0x270 [ 311.262555] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 311.267150] ion_alloc+0x27f/0x770 [ 311.313165] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 311.314581] ? ion_dma_buf_release+0x40/0x40 [ 311.334883] ? kasan_check_write+0x14/0x20 [ 311.339122] ion_ioctl+0xe2/0x1b6 [ 311.340113] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.342560] ? ion_alloc.cold.15+0x32/0x32 [ 311.352691] do_vfs_ioctl+0x180/0xfb0 [ 311.356520] ? __fget+0x1ad/0x2f0 [ 311.360002] ? ioctl_preallocate+0x1a0/0x1a0 [ 311.364412] ? __fget+0x1ca/0x2f0 [ 311.367949] ? security_file_ioctl+0x6a/0xa0 [ 311.372614] ? SyS_clock_settime+0x1a0/0x1a0 [ 311.372620] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 311.377024] ? security_file_ioctl+0x6a/0xa0 [ 311.377037] SyS_ioctl+0x74/0x80 [ 311.391727] ? do_vfs_ioctl+0xfb0/0xfb0 [ 311.395703] do_syscall_64+0x1c7/0x5b0 [ 311.399573] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.400147] warn_alloc_show_mem: 2 callbacks suppressed [ 311.400150] Mem-Info: [ 311.404418] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.409769] active_anon:5334 inactive_anon:196 isolated_anon:0 [ 311.409769] active_file:26 inactive_file:239 isolated_file:0 [ 311.409769] unevictable:0 dirty:0 writeback:0 unstable:0 [ 311.409769] slab_reclaimable:13327 slab_unreclaimable:99168 [ 311.409769] mapped:224 shmem:250 pagetables:406 bounce:0 [ 311.409769] free:130250 free_pcp:233 free_cma:0 [ 311.412209] RIP: 0033:0x45af49 [ 311.412212] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.412218] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 311.412220] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 311.412223] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 311.412225] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 311.412228] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 311.425300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 311.480067] CPU: 0 PID: 7949 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 311.491691] Node 0 active_anon:21212kB inactive_anon:784kB active_file:100kB inactive_file:948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:896kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 311.498334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.498339] Call Trace: [ 311.505778] Node 1 active_anon:124kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 311.513059] dump_stack+0xf7/0x13b [ 311.513070] warn_alloc.cold.110+0xa2/0x1be [ 311.513075] ? zone_watermark_ok_safe+0x260/0x260 [ 311.513085] ? usleep_range+0x120/0x120 [ 311.540552] Node 0 [ 311.549874] ? rcu_read_lock_sched_held+0x108/0x120 [ 311.552468] DMA free:10376kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.578423] ? call_timer_fn+0x570/0x570 [ 311.578440] __alloc_pages_slowpath+0x2052/0x2650 [ 311.578455] ? warn_alloc+0x100/0x100 [ 311.578462] ? get_page_from_freelist+0x1046/0x23b0 [ 311.578476] ? __might_sleep+0x93/0xb0 [ 311.582070] lowmem_reserve[]: [ 311.586352] __alloc_pages_nodemask+0x60d/0x770 [ 311.591202] 0 [ 311.595146] ? retint_kernel+0x2d/0x2d [ 311.597361] 2570 [ 311.602364] ? __alloc_pages_slowpath+0x2650/0x2650 [ 311.602374] ? wait_for_completion+0x440/0x440 [ 311.602379] ? __list_del_entry_valid+0xb6/0xf3 [ 311.602393] alloc_pages_current+0xd6/0x1b0 [ 311.628726] 2570 [ 311.632748] ion_page_pool_alloc+0x102/0x180 [ 311.632754] ion_system_heap_allocate+0x14e/0x930 [ 311.632762] ? do_raw_spin_unlock+0x16a/0x250 [ 311.632769] ? ion_system_heap_free+0x270/0x270 [ 311.637602] 2570 [ 311.641407] ion_alloc+0x27f/0x770 [ 311.641416] ? ion_dma_buf_release+0x40/0x40 [ 311.641427] ? kasan_check_write+0x14/0x20 [ 311.641434] ion_ioctl+0xe2/0x1b6 [ 311.653314] 2570 [ 311.653568] ? ion_alloc.cold.15+0x32/0x32 [ 311.660044] do_vfs_ioctl+0x180/0xfb0 [ 311.660053] ? __fget+0x1ad/0x2f0 [ 311.660059] ? ioctl_preallocate+0x1a0/0x1a0 [ 311.660068] ? __fget+0x1ca/0x2f0 [ 311.660079] ? security_file_ioctl+0x6a/0xa0 [ 311.660085] ? SyS_clock_settime+0x1a0/0x1a0 [ 311.660089] ? security_file_ioctl+0x6a/0xa0 [ 311.660095] SyS_ioctl+0x74/0x80 [ 311.660099] ? do_vfs_ioctl+0xfb0/0xfb0 [ 311.660107] do_syscall_64+0x1c7/0x5b0 [ 311.660112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.660124] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.660131] RIP: 0033:0x45af49 [ 311.664124] Node 0 [ 311.666068] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 [ 311.671170] DMA32 free:262976kB min:36384kB low:45480kB high:54576kB active_anon:21208kB inactive_anon:784kB active_file:100kB inactive_file:988kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1580kB bounce:0kB free_pcp:680kB local_pcp:208kB free_cma:0kB [ 311.675683] ORIG_RAX: 0000000000000010 [ 311.680369] lowmem_reserve[]: [ 311.684641] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 311.684645] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 311.687297] 0 [ 311.691770] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 311.691773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 311.691775] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 311.700440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.740100] 0 [ 311.743367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.745494] 0 0 0 [ 311.745506] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.745517] lowmem_reserve[]: 0 0 [ 311.751764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.770281] 0 [ 311.777748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.791758] 0 [ 311.821387] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.869490] 0 [ 311.873255] bridge0: port 1(bridge_slave_0) entered forwarding state 2020/03/09 03:20:22 executed programs: 93 [ 311.884915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 311.946375] Node 1 Normal free:692408kB min:53504kB low:66880kB high:80256kB active_anon:124kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:44kB bounce:0kB free_pcp:272kB local_pcp:12kB free_cma:0kB [ 311.990601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.033423] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.039950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.040079] lowmem_reserve[]: 0 0 0 0 0 [ 312.078531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 312.085556] Node 0 DMA: 120*4kB (UM) 19*8kB (UM) 9*16kB (UME) 12*32kB (UM) 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10376kB [ 312.104848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 312.113489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.120066] Node 0 DMA32: 295*4kB (ME) 70*8kB (E) 1*16kB [ 312.122002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.141322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.161842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.163739] (E) 437*32kB (UE) 2271*64kB (UM) 517*128kB (U) 87*256kB (UM) 23*512kB (UM) 34*1024kB (U) 0*2048kB 0*4096kB = 296124kB [ 312.189308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 312.212562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 312.220829] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 312.240317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.248100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.280638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.291250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 312.299966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.309749] Node 1 Normal: 0*4kB 1*8kB (E) 1*16kB (E) 832*32kB (UE) 2089*64kB (U) 273*128kB (U) 142*256kB (U) 48*512kB (U) 252*1024kB (U) 128*2048kB (U) 13*4096kB (U) = 829656kB [ 312.340874] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 312.347062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 312.353619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.362563] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 312.377039] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 312.387988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.396107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.406845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.417098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.427847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 312.437223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.447855] 2497 total pagecache pages [ 312.458487] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 312.468278] 0 pages in swap cache [ 312.471876] Swap cache stats: add 0, delete 0, find 0/0 [ 312.477257] Free swap = 0kB [ 312.487051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 312.495680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.506968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.514329] Total swap = 0kB [ 312.517463] 1965979 pages RAM [ 312.524992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.532447] 0 pages HighMem/MovableOnly [ 312.536434] 335868 pages reserved [ 312.539910] 0 pages cma reserved [ 312.549172] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 312.559708] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 312.580349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.587157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.619677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.648690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.684539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 312.703262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.714453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.723113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.744615] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 312.760855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 312.825895] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 312.869498] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 312.906739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.920776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.954275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.225917] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 313.254119] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 313.287370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.300254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.401227] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 313.426577] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 313.453374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.468045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.546890] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 313.567380] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 313.591863] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 313.615994] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 313.638802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.650288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.677613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.704350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.736098] device veth0_vlan entered promiscuous mode [ 313.751858] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 313.759392] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 313.785247] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 313.807861] device veth1_vlan entered promiscuous mode [ 313.821706] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 313.844015] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 313.861367] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 313.886576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 313.897697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 313.923629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.947995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.967546] warn_alloc: 2 callbacks suppressed [ 313.967552] syz-executor.5: [ 313.974321] syz-executor.0: [ 313.981811] device veth0_vlan entered promiscuous mode [ 313.991988] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 313.992589] syz-executor.5: [ 314.007754] page allocation failure: order:4 [ 314.010092] page allocation failure: order:4 [ 314.012411] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 314.016387] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 314.020252] syz-executor.0 cpuset= [ 314.035049] (null) [ 314.035057] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 314.035080] CPU: 1 PID: 7961 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 314.035083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.035085] Call Trace: [ 314.035099] dump_stack+0xf7/0x13b [ 314.035110] warn_alloc.cold.110+0xa2/0x1be [ 314.039002] (null) [ 314.041074] ? zone_watermark_ok_safe+0x260/0x260 [ 314.041089] ? __alloc_pages_direct_compact+0xc2/0x330 [ 314.041095] __alloc_pages_slowpath+0x2052/0x2650 [ 314.041109] ? trace_hardirqs_off+0x10/0x10 [ 314.041116] ? warn_alloc+0x100/0x100 [ 314.041121] ? get_page_from_freelist+0x1046/0x23b0 [ 314.041137] ? __might_sleep+0x93/0xb0 [ 314.046851] syz-executor.5 cpuset= [ 314.054748] __alloc_pages_nodemask+0x60d/0x770 [ 314.054757] ? __alloc_pages_slowpath+0x2650/0x2650 [ 314.054768] ? wait_for_completion+0x440/0x440 [ 314.054779] alloc_pages_current+0xd6/0x1b0 [ 314.054789] ion_page_pool_alloc+0x102/0x180 [ 314.054794] ion_system_heap_allocate+0x14e/0x930 [ 314.054802] ? ion_system_heap_free+0x270/0x270 [ 314.054812] ion_alloc+0x216/0x770 [ 314.054820] ? ion_dma_buf_release+0x40/0x40 [ 314.054830] ? kasan_check_write+0x14/0x20 [ 314.064333] syz0 [ 314.066970] ion_ioctl+0xe2/0x1b6 [ 314.070654] syz5 [ 314.074888] ? ion_alloc.cold.15+0x32/0x32 [ 314.077103] mems_allowed=0-1 [ 314.081881] do_vfs_ioctl+0x180/0xfb0 [ 314.081890] ? __fget+0x1ad/0x2f0 [ 314.081896] ? ioctl_preallocate+0x1a0/0x1a0 [ 314.081903] ? __fget+0x1ca/0x2f0 [ 314.081915] ? security_file_ioctl+0x6a/0xa0 [ 314.081921] ? SyS_clock_settime+0x1a0/0x1a0 [ 314.081924] ? security_file_ioctl+0x6a/0xa0 [ 314.081930] SyS_ioctl+0x74/0x80 [ 314.081935] ? do_vfs_ioctl+0xfb0/0xfb0 [ 314.081941] do_syscall_64+0x1c7/0x5b0 [ 314.081946] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.081959] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.081964] RIP: 0033:0x45af49 [ 314.081968] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.081975] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 314.081978] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 314.081980] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 314.081983] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 314.081986] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 314.101120] mems_allowed=0-1 [ 314.107513] CPU: 0 PID: 7967 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 314.177622] warn_alloc_show_mem: 3 callbacks suppressed [ 314.177626] Mem-Info: [ 314.180730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.180734] Call Trace: [ 314.180752] dump_stack+0xf7/0x13b [ 314.180764] warn_alloc.cold.110+0xa2/0x1be [ 314.180769] ? zone_watermark_ok_safe+0x260/0x260 [ 314.180782] ? __alloc_pages_direct_compact+0xc2/0x330 [ 314.191053] active_anon:5378 inactive_anon:196 isolated_anon:0 [ 314.191053] active_file:795 inactive_file:1625 isolated_file:0 [ 314.191053] unevictable:0 dirty:19 writeback:0 unstable:0 [ 314.191053] slab_reclaimable:13198 slab_unreclaimable:99614 [ 314.191053] mapped:1461 shmem:250 pagetables:406 bounce:0 [ 314.191053] free:92775 free_pcp:382 free_cma:0 [ 314.192590] __alloc_pages_slowpath+0x2052/0x2650 [ 314.192607] ? trace_hardirqs_off+0x10/0x10 [ 314.199246] Node 0 active_anon:21416kB inactive_anon:784kB active_file:3176kB inactive_file:6492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5844kB dirty:68kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 314.201625] ? warn_alloc+0x100/0x100 [ 314.201633] ? get_page_from_freelist+0x1046/0x23b0 [ 314.201647] ? __might_sleep+0x93/0xb0 [ 314.201653] __alloc_pages_nodemask+0x60d/0x770 [ 314.201661] ? __alloc_pages_slowpath+0x2650/0x2650 [ 314.201672] ? wait_for_completion+0x440/0x440 [ 314.201683] alloc_pages_current+0xd6/0x1b0 [ 314.201694] ion_page_pool_alloc+0x102/0x180 [ 314.220103] Node 1 active_anon:96kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 314.222917] ion_system_heap_allocate+0x14e/0x930 [ 314.228221] Node 0 [ 314.231776] ? ion_system_heap_free+0x270/0x270 [ 314.231786] ion_alloc+0x216/0x770 [ 314.231795] ? ion_dma_buf_release+0x40/0x40 [ 314.231806] ? kasan_check_write+0x14/0x20 [ 314.231812] ion_ioctl+0xe2/0x1b6 [ 314.231819] ? ion_alloc.cold.15+0x32/0x32 [ 314.273082] DMA free:10536kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.278032] do_vfs_ioctl+0x180/0xfb0 [ 314.278043] ? __fget+0x1ad/0x2f0 [ 314.298823] lowmem_reserve[]: [ 314.306688] ? ioctl_preallocate+0x1a0/0x1a0 [ 314.306700] ? __fget+0x1ca/0x2f0 [ 314.306712] ? security_file_ioctl+0x6a/0xa0 [ 314.306718] ? SyS_clock_settime+0x1a0/0x1a0 [ 314.306722] ? security_file_ioctl+0x6a/0xa0 [ 314.306729] SyS_ioctl+0x74/0x80 [ 314.325775] 0 [ 314.327762] ? do_vfs_ioctl+0xfb0/0xfb0 [ 314.327775] do_syscall_64+0x1c7/0x5b0 [ 314.418917] 2570 [ 314.421286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.421304] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.421312] RIP: 0033:0x45af49 [ 314.428253] 2570 [ 314.430457] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.430465] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 314.430468] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 314.430471] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 314.430474] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 314.430476] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 314.566274] CPU: 0 PID: 7993 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 314.637858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.647719] Call Trace: [ 314.650390] dump_stack+0xf7/0x13b [ 314.654636] warn_alloc.cold.110+0xa2/0x1be [ 314.659011] ? zone_watermark_ok_safe+0x260/0x260 [ 314.664084] ? __alloc_pages_direct_compact+0xc2/0x330 [ 314.669497] __alloc_pages_slowpath+0x2052/0x2650 [ 314.674568] ? trace_hardirqs_off+0x10/0x10 [ 314.678959] ? warn_alloc+0x100/0x100 [ 314.682989] ? get_page_from_freelist+0x1046/0x23b0 [ 314.688098] ? __might_sleep+0x93/0xb0 [ 314.692001] __alloc_pages_nodemask+0x60d/0x770 [ 314.696676] ? __alloc_pages_slowpath+0x2650/0x2650 [ 314.701917] ? wait_for_completion+0x440/0x440 [ 314.706711] alloc_pages_current+0xd6/0x1b0 [ 314.711041] ion_page_pool_alloc+0x102/0x180 [ 314.715954] ion_system_heap_allocate+0x14e/0x930 [ 314.721060] ? ion_system_heap_free+0x270/0x270 [ 314.725816] ion_alloc+0x216/0x770 [ 314.729351] ? ion_dma_buf_release+0x40/0x40 [ 314.733881] ? kasan_check_write+0x14/0x20 [ 314.738682] ion_ioctl+0xe2/0x1b6 [ 314.742178] ? ion_alloc.cold.15+0x32/0x32 [ 314.746468] do_vfs_ioctl+0x180/0xfb0 [ 314.750266] ? __fget+0x1ad/0x2f0 [ 314.753742] ? ioctl_preallocate+0x1a0/0x1a0 [ 314.758275] ? __fget+0x1ca/0x2f0 [ 314.761750] ? security_file_ioctl+0x6a/0xa0 [ 314.766178] ? SyS_clock_settime+0x1a0/0x1a0 [ 314.771258] ? security_file_ioctl+0x6a/0xa0 [ 314.775722] SyS_ioctl+0x74/0x80 [ 314.779090] ? do_vfs_ioctl+0xfb0/0xfb0 [ 314.783065] do_syscall_64+0x1c7/0x5b0 [ 314.786950] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.791793] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.797001] RIP: 0033:0x45af49 [ 314.800210] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.808043] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 314.815494] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 314.822765] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 314.830031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 314.837663] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 314.850271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.862998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.869903] 2570 2570 [ 314.874554] Node 0 DMA32 free:267536kB min:36384kB low:45480kB high:54576kB active_anon:21512kB inactive_anon:784kB active_file:4440kB inactive_file:5260kB unevictable:0kB writepending:352kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1580kB bounce:0kB free_pcp:856kB local_pcp:660kB free_cma:0kB [ 314.889068] device veth1_vlan entered promiscuous mode [ 314.911231] lowmem_reserve[]: 0 0 0 0 0 [ 314.917438] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.969727] lowmem_reserve[]: 0 0 0 0 0 [ 314.974682] Node 1 Normal free:80872kB min:53504kB low:66880kB high:80256kB active_anon:96kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:44kB bounce:0kB free_pcp:652kB local_pcp:652kB free_cma:0kB [ 315.007980] lowmem_reserve[]: 0 0 0 0 0 [ 315.012767] Node 0 DMA: 27*4kB (UM) 11*8kB (UM) 32*16kB (UME) 27*32kB (UM) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10596kB [ 315.032852] Node 0 DMA32: 368*4kB (ME) 119*8kB (E) 2019*16kB (UME) 3704*32kB (UE) 469*64kB (U) 21*128kB (U) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 186472kB [ 315.049926] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 315.067355] Node 1 Normal: 549*4kB (U) 576*8kB (UE) 571*16kB (UE) 552*32kB (UE) 577*64kB (U) 15*128kB (U) 1*256kB (U) 16*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 80900kB [ 315.088998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.102281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 315.114749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.125089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 315.137722] 2688 total pagecache pages [ 315.142235] 0 pages in swap cache [ 315.145891] Swap cache stats: add 0, delete 0, find 0/0 [ 315.155124] Free swap = 0kB [ 315.158177] Total swap = 0kB [ 315.161332] 1965979 pages RAM [ 315.164982] 0 pages HighMem/MovableOnly [ 315.168956] 335868 pages reserved [ 315.176174] 0 pages cma reserved [ 315.181476] device bridge_slave_1 left promiscuous mode [ 315.187256] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.225153] warn_alloc_show_mem: 1 callbacks suppressed [ 315.225157] Mem-Info: [ 315.265703] device bridge_slave_0 left promiscuous mode [ 315.273395] active_anon:5408 inactive_anon:196 isolated_anon:0 [ 315.273395] active_file:1117 inactive_file:1345 isolated_file:0 [ 315.273395] unevictable:0 dirty:80 writeback:0 unstable:0 [ 315.273395] slab_reclaimable:13169 slab_unreclaimable:99602 [ 315.273395] mapped:1577 shmem:250 pagetables:397 bounce:0 [ 315.273395] free:25320 free_pcp:248 free_cma:0 [ 315.316258] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.327492] Node 0 active_anon:21536kB inactive_anon:784kB active_file:2200kB inactive_file:2308kB unevictable:0kB isolated(anon):0kB isolated(file):156kB mapped:4308kB dirty:312kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 315.369042] Node 1 active_anon:196kB inactive_anon:0kB active_file:4kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 315.420135] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 315.432944] Node 0 DMA free:10496kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.432964] lowmem_reserve[]: [ 315.461568] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 315.473463] CPU: 0 PID: 8011 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 315.481507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.490880] Call Trace: [ 315.491200] 0 [ 315.493658] dump_stack+0xf7/0x13b [ 315.493670] warn_alloc.cold.110+0xa2/0x1be [ 315.493676] ? zone_watermark_ok_safe+0x260/0x260 [ 315.493690] ? __alloc_pages_direct_compact+0xc2/0x330 [ 315.495587] 2570 [ 315.500421] __alloc_pages_slowpath+0x2052/0x2650 [ 315.500438] ? trace_hardirqs_off+0x10/0x10 [ 315.500447] ? warn_alloc+0x100/0x100 [ 315.500454] ? get_page_from_freelist+0x1046/0x23b0 [ 315.500467] ? __might_sleep+0x93/0xb0 [ 315.500474] __alloc_pages_nodemask+0x60d/0x770 [ 315.500478] ? trace_hardirqs_off+0x10/0x10 [ 315.500484] ? __alloc_pages_slowpath+0x2650/0x2650 [ 315.500494] ? wait_for_completion+0x440/0x440 [ 315.500506] alloc_pages_current+0xd6/0x1b0 [ 315.505447] 2570 [ 315.510184] ion_page_pool_alloc+0x102/0x180 [ 315.510190] ion_system_heap_allocate+0x14e/0x930 [ 315.510199] ? ion_system_heap_free+0x270/0x270 [ 315.510210] ion_alloc+0x216/0x770 [ 315.510219] ? ion_dma_buf_release+0x40/0x40 [ 315.510230] ? kasan_check_write+0x14/0x20 [ 315.510236] ion_ioctl+0xe2/0x1b6 [ 315.510241] ? ion_alloc.cold.15+0x32/0x32 [ 315.510253] do_vfs_ioctl+0x180/0xfb0 [ 315.515895] 2570 [ 315.518050] ? __fget+0x1ad/0x2f0 [ 315.518059] ? ioctl_preallocate+0x1a0/0x1a0 [ 315.518069] ? __fget+0x1ca/0x2f0 [ 315.518081] ? security_file_ioctl+0x6a/0xa0 [ 315.518088] ? SyS_clock_settime+0x1a0/0x1a0 [ 315.523200] 2570 [ 315.527357] ? security_file_ioctl+0x6a/0xa0 [ 315.527366] SyS_ioctl+0x74/0x80 [ 315.527373] ? do_vfs_ioctl+0xfb0/0xfb0 [ 315.527381] do_syscall_64+0x1c7/0x5b0 [ 315.527387] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.527399] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.537685] RIP: 0033:0x45af49 [ 315.537689] RSP: 002b:00007f47fc926c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.537695] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 315.537698] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 315.537700] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 315.537703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47fc9276d4 [ 315.537706] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 315.569980] syz-executor.4: [ 315.596978] Node 0 [ 315.611062] page allocation failure: order:4 [ 315.684694] DMA32 free:36328kB min:36384kB low:45480kB high:54576kB active_anon:21532kB inactive_anon:784kB active_file:236kB inactive_file:192kB unevictable:0kB writepending:16kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7072kB pagetables:1544kB bounce:0kB free_pcp:564kB local_pcp:292kB free_cma:0kB [ 315.718723] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 315.759102] lowmem_reserve[]: [ 315.769274] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 315.774810] 0 [ 315.780927] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 315.793017] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 315.794047] 0 0 0 0 [ 315.799157] CPU: 0 PID: 8011 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 315.801452] Node 0 [ 315.808945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.808950] Call Trace: [ 315.811250] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.820569] dump_stack+0xf7/0x13b [ 315.820582] dump_header+0x160/0x63f [ 315.820590] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 315.820599] ? ___ratelimit+0x243/0x519 [ 315.823260] lowmem_reserve[]: [ 315.848837] ? do_raw_spin_unlock+0x16a/0x250 [ 315.848854] oom_kill_process.cold.24+0xb/0xa1a [ 315.848860] ? out_of_memory+0x7f9/0x1030 [ 315.848869] ? lock_downgrade+0x7f0/0x7f0 [ 315.848877] out_of_memory+0x2b0/0x1030 [ 315.848886] ? oom_killer_disable+0x1a0/0x1a0 [ 315.849052] ? __alloc_pages_slowpath+0xb69/0x2650 [ 315.852860] 0 [ 315.856535] __alloc_pages_slowpath+0x1ef3/0x2650 [ 315.861699] 0 [ 315.865693] ? warn_alloc+0x100/0x100 [ 315.868895] 0 0 [ 315.873401] ? get_page_from_freelist+0x1046/0x23b0 [ 315.873414] ? __might_sleep+0x93/0xb0 [ 315.873420] __alloc_pages_nodemask+0x60d/0x770 [ 315.873428] ? trace_hardirqs_off+0x10/0x10 [ 315.873434] ? __alloc_pages_slowpath+0x2650/0x2650 [ 315.873444] ? wait_for_completion+0x440/0x440 [ 315.878109] 0 [ 315.882385] alloc_pages_current+0xd6/0x1b0 [ 315.882397] ion_page_pool_alloc+0x102/0x180 [ 315.882403] ion_system_heap_allocate+0x14e/0x930 [ 315.882411] ? ion_system_heap_free+0x270/0x270 [ 315.890854] ion_alloc+0x216/0x770 [ 315.890864] ? ion_dma_buf_release+0x40/0x40 [ 315.890875] ? kasan_check_write+0x14/0x20 [ 315.890881] ion_ioctl+0xe2/0x1b6 [ 315.895446] Node 1 [ 315.900522] ? ion_alloc.cold.15+0x32/0x32 [ 315.900536] do_vfs_ioctl+0x180/0xfb0 [ 315.900544] ? __fget+0x1ad/0x2f0 [ 315.900551] ? ioctl_preallocate+0x1a0/0x1a0 [ 315.900560] ? __fget+0x1ca/0x2f0 [ 315.902496] Normal free:53492kB min:53504kB low:66880kB high:80256kB active_anon:196kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.907331] ? security_file_ioctl+0x6a/0xa0 [ 315.909120] lowmem_reserve[]: [ 315.912980] ? SyS_clock_settime+0x1a0/0x1a0 [ 315.912985] ? security_file_ioctl+0x6a/0xa0 [ 315.912993] SyS_ioctl+0x74/0x80 [ 315.912999] ? do_vfs_ioctl+0xfb0/0xfb0 [ 315.913005] do_syscall_64+0x1c7/0x5b0 [ 315.913010] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.913023] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.914996] 0 [ 315.920055] RIP: 0033:0x45af49 [ 315.920059] RSP: 002b:00007f47fc926c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.920065] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 315.920067] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 315.920069] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 315.920072] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47fc9276d4 [ 315.920075] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 315.931229] CPU: 0 PID: 8010 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 316.125975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.135560] Call Trace: [ 316.138159] dump_stack+0xf7/0x13b [ 316.142031] warn_alloc.cold.110+0xa2/0x1be [ 316.146416] ? zone_watermark_ok_safe+0x260/0x260 [ 316.151303] ? __alloc_pages_direct_compact+0xc2/0x330 [ 316.156745] __alloc_pages_slowpath+0x2052/0x2650 [ 316.161745] ? trace_hardirqs_off+0x10/0x10 [ 316.166168] ? warn_alloc+0x100/0x100 [ 316.170020] ? get_page_from_freelist+0x1046/0x23b0 [ 316.175414] ? __might_sleep+0x93/0xb0 [ 316.179381] __alloc_pages_nodemask+0x60d/0x770 [ 316.184869] ? trace_hardirqs_off+0x10/0x10 [ 316.189227] ? __alloc_pages_slowpath+0x2650/0x2650 [ 316.194644] ? wait_for_completion+0x440/0x440 [ 316.199353] alloc_pages_current+0xd6/0x1b0 [ 316.203688] ion_page_pool_alloc+0x102/0x180 [ 316.208103] ion_system_heap_allocate+0x14e/0x930 [ 316.213014] ? ion_system_heap_free+0x270/0x270 [ 316.218024] ion_alloc+0x216/0x770 [ 316.221815] ? ion_dma_buf_release+0x40/0x40 [ 316.226384] ? kasan_check_write+0x14/0x20 [ 316.230617] ion_ioctl+0xe2/0x1b6 [ 316.234113] ? ion_alloc.cold.15+0x32/0x32 [ 316.238448] do_vfs_ioctl+0x180/0xfb0 [ 316.242331] ? __fget+0x1ad/0x2f0 [ 316.245784] ? ioctl_preallocate+0x1a0/0x1a0 [ 316.250436] ? __fget+0x1ca/0x2f0 [ 316.253904] ? security_file_ioctl+0x6a/0xa0 [ 316.258311] ? SyS_clock_settime+0x1a0/0x1a0 [ 316.262787] ? security_file_ioctl+0x6a/0xa0 [ 316.267207] SyS_ioctl+0x74/0x80 [ 316.270572] ? do_vfs_ioctl+0xfb0/0xfb0 [ 316.274548] do_syscall_64+0x1c7/0x5b0 [ 316.278467] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.283310] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 316.288496] RIP: 0033:0x45af49 [ 316.291677] RSP: 002b:00007ffa6e582c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.299635] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 316.307101] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 316.314615] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 316.322384] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5836d4 [ 316.329851] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 316.337580] 0 0 0 0 [ 316.343118] Mem-Info: [ 316.345655] active_anon:5432 inactive_anon:196 isolated_anon:0 [ 316.345655] active_file:36 inactive_file:103 isolated_file:30 [ 316.345655] unevictable:0 dirty:16 writeback:0 unstable:0 [ 316.345655] slab_reclaimable:13165 slab_unreclaimable:99435 [ 316.345655] mapped:59 shmem:250 pagetables:419 bounce:0 [ 316.345655] free:25061 free_pcp:51 free_cma:0 [ 316.354146] Node 0 [ 316.379928] Node 0 active_anon:21612kB inactive_anon:772kB active_file:112kB inactive_file:372kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:252kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 316.392822] DMA: [ 316.413231] Node 1 active_anon:108kB inactive_anon:4kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 316.413237] Node 0 [ 316.420478] 2*4kB [ 316.442076] DMA free:10488kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.447642] (UM) [ 316.473977] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 316.479672] 10*8kB [ 316.481379] device hsr_slave_1 left promiscuous mode [ 316.482379] Node 0 [ 316.483670] (UM) [ 316.488917] DMA32 free:36300kB min:36384kB low:45480kB high:54576kB active_anon:21608kB inactive_anon:772kB active_file:112kB inactive_file:372kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7072kB pagetables:1620kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 316.496824] 32*16kB [ 316.522501] lowmem_reserve[]: 0 0 0 0 0 [ 316.526497] (UME) [ 316.528988] Node 0 [ 316.528991] 27*32kB (UM) [ 316.531221] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.531223] lowmem_reserve[]: 0 0 0 0 0 [ 316.533615] 3*64kB [ 316.536494] Node 1 [ 316.566466] (UME) [ 316.566582] Normal free:53420kB min:53504kB low:66880kB high:80256kB active_anon:108kB inactive_anon:4kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:52kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 316.568912] 3*128kB (UME) [ 316.571299] lowmem_reserve[]: 0 0 0 0 0 [ 316.571316] Node 0 DMA: 2*4kB (UM) 10*8kB (UM) 32*16kB (UME) 27*32kB (UM) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10488kB [ 316.571374] Node 0 DMA32: 453*4kB (UME) 127*8kB (ME) 56*16kB (UME) 43*32kB (UME) 378*64kB (UM) 32*128kB (UM) 5*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36204kB [ 316.571427] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 316.571459] Node 1 Normal: 2*4kB (UM) 3*8kB (ME) 4*16kB (UME) 205*32kB (UE) 579*64kB (UM) 16*128kB (UM) 2*256kB (UM) 14*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53440kB [ 316.571512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.571516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 316.571519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.571523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 316.571526] 430 total pagecache pages [ 316.577054] 3*256kB [ 316.602622] 0 pages in swap cache [ 316.604291] device hsr_slave_0 left promiscuous mode [ 316.608327] Swap cache stats: add 0, delete 0, find 0/0 [ 316.608332] Free swap = 0kB [ 316.629435] (UME) [ 316.641237] Total swap = 0kB [ 316.666490] 3*512kB [ 316.667131] warn_alloc_show_mem: 1 callbacks suppressed [ 316.667134] Mem-Info: [ 316.680046] (UME) [ 316.684917] active_anon:5430 inactive_anon:194 isolated_anon:0 [ 316.684917] active_file:30 inactive_file:94 isolated_file:30 [ 316.684917] unevictable:0 dirty:0 writeback:0 unstable:0 [ 316.684917] slab_reclaimable:13156 slab_unreclaimable:99463 [ 316.684917] mapped:63 shmem:250 pagetables:418 bounce:0 [ 316.684917] free:25047 free_pcp:10 free_cma:0 [ 316.697317] 2*1024kB [ 316.702997] 1965979 pages RAM [ 316.706753] (ME) [ 316.709349] 0 pages HighMem/MovableOnly [ 316.709353] 335868 pages reserved [ 316.709355] 0 pages cma reserved [ 316.709360] Out of memory: Kill process 7957 (syz-executor.0) score 999 or sacrifice child [ 316.709386] Killed process 7967 (syz-executor.0) total-vm:38036kB, anon-rss:128kB, file-rss:0kB, shmem-rss:0kB [ 316.709547] Node 0 active_anon:21612kB inactive_anon:772kB active_file:112kB inactive_file:372kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:252kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 316.719435] 2*2048kB [ 316.724906] oom_reaper: reaped process 7967 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 316.727752] (UE) [ 316.728838] Node 1 active_anon:108kB inactive_anon:4kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 316.735955] 0*4096kB [ 316.740646] Node 0 [ 316.742776] = 10488kB [ 316.744957] DMA free:10488kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.782867] Node 0 [ 316.784036] lowmem_reserve[]: [ 316.790146] DMA32: [ 316.790348] 0 [ 316.793874] 451*4kB [ 316.797236] 2570 2570 [ 316.830093] (ME) [ 316.845693] 2570 [ 316.900634] kworker/u4:0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 316.922689] 2570 [ 316.940135] 129*8kB [ 316.955091] Node 0 DMA32 free:18100kB min:36384kB low:45480kB high:54576kB active_anon:21608kB inactive_anon:772kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7072kB pagetables:1620kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 316.970076] (ME) [ 316.986486] (null), order=0, oom_score_adj=0 [ 316.993279] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 316.998957] CPU: 0 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.172-syzkaller #0 [ 317.000111] 30*16kB [ 317.006635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.006641] (ME) [ 317.008964] Workqueue: netns cleanup_net [ 317.025416] Call Trace: [ 317.026296] 22*32kB (UME) 358*64kB [ 317.028012] dump_stack+0xf7/0x13b [ 317.028025] dump_header+0x160/0x63f [ 317.031921] (UM) [ 317.035433] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 317.039170] 32*128kB [ 317.041281] ? ___ratelimit+0x243/0x519 [ 317.041297] ? do_raw_spin_unlock+0x16a/0x250 [ 317.041308] oom_kill_process.cold.24+0xb/0xa1a [ 317.041312] ? out_of_memory+0x7f9/0x1030 [ 317.041320] ? lock_downgrade+0x7f0/0x7f0 [ 317.041330] out_of_memory+0x2b0/0x1030 [ 317.046827] (UM) [ 317.049428] ? oom_killer_disable+0x1a0/0x1a0 [ 317.053787] 5*256kB [ 317.058236] ? __alloc_pages_slowpath+0xb69/0x2650 [ 317.062925] (M) [ 317.067249] __alloc_pages_slowpath+0x1ef3/0x2650 [ 317.071599] 3*512kB [ 317.075552] ? warn_alloc+0x100/0x100 [ 317.077594] (M) [ 317.082264] ? get_page_from_freelist+0x1046/0x23b0 [ 317.082278] ? __might_sleep+0x93/0xb0 [ 317.082284] __alloc_pages_nodemask+0x60d/0x770 [ 317.082292] ? __alloc_pages_slowpath+0x2650/0x2650 [ 317.082302] ? cache_grow_begin+0x331/0x3f0 [ 317.084623] 0*1024kB [ 317.089770] cache_grow_begin+0x80/0x3f0 [ 317.091880] 0*2048kB [ 317.096813] fallback_alloc+0x203/0x2c0 [ 317.100401] 0*4096kB [ 317.104175] ____cache_alloc_node+0x1c7/0x1e0 [ 317.106132] = 33844kB [ 317.111303] kmem_cache_alloc_node+0xe3/0x790 [ 317.111315] __alloc_skb+0x92/0x500 [ 317.111320] ? skb_trim+0x160/0x160 [ 317.111329] ? mark_held_locks+0xc7/0x130 [ 317.111340] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 317.115365] Node 0 [ 317.120037] __send_and_alloc_skb+0x44/0xa0 [ 317.120047] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 317.120053] team_nl_send_options_get+0x133/0xd90 [ 317.120060] ? team_mcast_rejoin_work+0x1d0/0x1d0 [ 317.120070] ? team_port_change_check+0x100/0x100 [ 317.125414] Normal: [ 317.129923] ? trace_hardirqs_off+0x10/0x10 [ 317.132469] 0*4kB [ 317.136490] ? trace_hardirqs_on+0xd/0x10 [ 317.138890] 0*8kB [ 317.143044] ? trace_hardirqs_off+0x10/0x10 [ 317.143052] ? net_to_rxe+0xc8/0xf0 [ 317.143059] ? find_held_lock+0x36/0x1d0 [ 317.143068] ? mark_held_locks+0xc7/0x130 [ 317.143076] ? dev_mc_unsync+0x165/0x1a5 [ 317.143085] __team_options_change_check+0x182/0x280 [ 317.243480] ? team_nl_send_options_get+0xd90/0xd90 [ 317.248498] ? _raw_spin_unlock_bh+0x30/0x40 [ 317.252908] ? dev_mc_unsync+0x165/0x1a5 [ 317.257001] team_port_del+0x3fc/0x770 [ 317.260918] team_del_slave+0x34/0x70 [ 317.264713] team_device_event+0x226/0x370 [ 317.269001] notifier_call_chain+0xd6/0x150 [ 317.273342] raw_notifier_call_chain+0x11/0x20 [ 317.277920] call_netdevice_notifiers_info+0x4b/0x60 [ 317.283019] rollback_registered_many+0x652/0xb20 [ 317.289569] ? kmem_cache_free+0x25f/0x2d0 [ 317.293846] ? netdev_info+0xe0/0xe0 [ 317.297564] ? unregister_netdevice_queue+0xf3/0x200 [ 317.302675] unregister_netdevice_many+0x3e/0x1f0 [ 317.307516] default_device_exit_batch+0x2dc/0x3b0 [ 317.312547] ? unregister_netdevice_many+0x1f0/0x1f0 [ 317.317958] ? rtnl_unlock+0x9/0x10 [ 317.321582] ? default_device_exit+0x1bd/0x250 [ 317.326294] ? do_wait_intr_irq+0x300/0x300 [ 317.331006] ? rtnl_unlock+0x9/0x10 [ 317.334804] ops_exit_list.isra.7+0xd3/0x120 [ 317.339448] cleanup_net+0x39d/0x7f0 [ 317.343255] ? net_drop_ns+0x60/0x60 [ 317.346973] ? __lock_is_held+0xb5/0x140 [ 317.351218] process_one_work+0x79e/0x16c0 [ 317.355510] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 317.360181] worker_thread+0xcc/0xee0 [ 317.364001] kthread+0x338/0x400 [ 317.367482] ? process_one_work+0x16c0/0x16c0 [ 317.373296] ? kthread_create_on_node+0xa0/0xa0 [ 317.377977] ret_from_fork+0x24/0x30 [ 317.382131] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 317.391606] lowmem_reserve[]: 0 0 0 0 0 [ 317.391626] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.391639] lowmem_reserve[]: 0 0 0 0 0 [ 317.391657] Node 1 [ 317.413601] Node 1 [ 317.422900] Normal free:26840kB min:53504kB low:66880kB high:80256kB active_anon:108kB inactive_anon:4kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:52kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 317.436916] Normal: [ 317.480194] lowmem_reserve[]: [ 317.482641] 3*4kB [ 317.482665] 0 [ 317.485965] (UM) [ 317.488165] 0 [ 317.489961] 4*8kB [ 317.492147] 0 0 0 [ 317.494559] (UME) [ 317.498420] 4*16kB (UME) [ 317.500710] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 30*16kB (UME) 27*32kB (UM) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10388kB [ 317.506758] 4*32kB (UME) 264*64kB (UM) 16*128kB (UM) 2*256kB (UM) 14*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26860kB [ 317.527541] Node 0 DMA32: [ 317.531774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.531778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 317.534802] 480*4kB [ 317.553965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.557506] (UME) 152*8kB (ME) 40*16kB (ME) 21*32kB (ME) 106*64kB (UM) 31*128kB (UM) 4*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18272kB [ 317.568038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 317.585842] Node 0 [ 317.593676] 305 total pagecache pages [ 317.593685] 0 pages in swap cache [ 317.593688] Swap cache stats: add 0, delete 0, find 0/0 [ 317.593690] Free swap = 0kB [ 317.593693] Total swap = 0kB [ 317.593699] 1965979 pages RAM [ 317.593701] 0 pages HighMem/MovableOnly [ 317.593703] 335868 pages reserved [ 317.593705] 0 pages cma reserved [ 317.594769] Mem-Info: [ 317.596037] Normal: [ 317.599979] active_anon:5430 inactive_anon:194 isolated_anon:0 [ 317.599979] active_file:26 inactive_file:1 isolated_file:11 [ 317.599979] unevictable:0 dirty:0 writeback:0 unstable:0 [ 317.599979] slab_reclaimable:13156 slab_unreclaimable:99438 [ 317.599979] mapped:13 shmem:250 pagetables:418 bounce:0 [ 317.599979] free:13826 free_pcp:0 free_cma:0 [ 317.607792] 0*4kB [ 317.612403] Node 0 active_anon:21612kB inactive_anon:772kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:52kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 317.614673] 0*8kB 0*16kB [ 317.618813] Node 1 active_anon:108kB inactive_anon:4kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 317.626030] 0*32kB [ 317.626658] Node 0 [ 317.630592] 0*64kB 0*128kB 0*256kB 0*512kB [ 317.634090] DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.636775] 0*1024kB 0*2048kB [ 317.639867] lowmem_reserve[]: [ 317.684471] 0*4096kB [ 317.721003] 0 [ 317.746515] = 0kB [ 317.749129] 2570 [ 317.752504] Node 1 [ 317.779751] 2570 [ 317.785442] Normal: [ 317.787727] 2570 [ 317.789709] 3*4kB [ 317.791882] 2570 [ 317.793898] (UM) 3*8kB [ 317.796154] Node 0 [ 317.798207] (ME) 4*16kB [ 317.800703] DMA32 free:18100kB min:36384kB low:45480kB high:54576kB active_anon:21608kB inactive_anon:772kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7072kB pagetables:1620kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.800706] lowmem_reserve[]: 0 0 0 0 0 [ 317.800724] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.800735] lowmem_reserve[]: 0 0 0 0 0 [ 317.800754] Node 1 Normal free:26812kB min:53504kB low:66880kB high:80256kB active_anon:108kB inactive_anon:4kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.800765] lowmem_reserve[]: 0 0 0 0 0 [ 317.800782] Node 0 DMA: 1*4kB [ 317.807851] (UME) [ 317.809745] (M) 2*8kB [ 317.812751] 4*32kB [ 317.814871] (UM) [ 317.847548] (UME) [ 317.890689] 30*16kB [ 317.915591] 264*64kB [ 317.916041] (UME) [ 317.918345] (UM) 16*128kB [ 317.920703] 27*32kB (UM) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10388kB [ 317.920745] Node 0 DMA32: 481*4kB (UME) 152*8kB (ME) 40*16kB (ME) 21*32kB (ME) 106*64kB (UM) 31*128kB (UM) 4*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18276kB [ 317.920799] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 317.920830] Node 1 Normal: 2*4kB (M) 3*8kB (ME) 4*16kB (UME) 4*32kB (UME) 264*64kB (UM) 16*128kB (UM) 2*256kB (UM) 14*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 317.920885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.920889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 317.920893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.920896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 317.920899] 305 total pagecache pages [ 317.920910] 0 pages in swap cache [ 317.920915] Swap cache stats: add 0, delete 0, find 0/0 [ 317.920918] Free swap = 0kB [ 317.920921] Total swap = 0kB [ 317.921019] 1965979 pages RAM [ 317.921022] 0 pages HighMem/MovableOnly [ 317.921024] 335868 pages reserved [ 317.921026] 0 pages cma reserved [ 317.921031] Out of memory: Kill process 7959 (syz-executor.5) score 999 or sacrifice child [ 317.921387] Killed process 7961 (syz-executor.5) total-vm:38036kB, anon-rss:124kB, file-rss:0kB, shmem-rss:0kB [ 317.924657] (UM) [ 318.085492] oom_reaper: reaped process 7961 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 318.100308] 2*256kB (UM) 14*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26852kB [ 318.101855] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 318.107599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.107601] (null), order=0, oom_score_adj=1000 [ 318.129265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 318.136706] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 318.145254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.149329] CPU: 0 PID: 7967 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 318.156810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 318.164560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.164565] Call Trace: [ 318.164586] dump_stack+0xf7/0x13b [ 318.164598] dump_header+0x160/0x63f [ 318.164613] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 318.173854] 282 total pagecache pages [ 318.183360] ? ___ratelimit+0x243/0x519 [ 318.183368] ? do_raw_spin_unlock+0x16a/0x250 [ 318.183378] oom_kill_process.cold.24+0xb/0xa1a [ 318.183385] ? out_of_memory+0x7f9/0x1030 [ 318.185978] 0 pages in swap cache [ 318.189552] ? lock_downgrade+0x7f0/0x7f0 [ 318.193678] Swap cache stats: add 0, delete 0, find 0/0 [ 318.198900] out_of_memory+0x2b0/0x1030 [ 318.202862] Free swap = 0kB [ 318.206941] ? oom_killer_disable+0x1a0/0x1a0 [ 318.211586] Total swap = 0kB [ 318.216297] ? __alloc_pages_slowpath+0xb69/0x2650 [ 318.220601] 1965979 pages RAM [ 318.224042] __alloc_pages_slowpath+0x1ef3/0x2650 [ 318.228183] 0 pages HighMem/MovableOnly [ 318.233824] ? warn_alloc+0x100/0x100 [ 318.233833] ? get_page_from_freelist+0x1046/0x23b0 [ 318.233847] ? __might_sleep+0x93/0xb0 [ 318.233854] __alloc_pages_nodemask+0x60d/0x770 [ 318.233861] ? __alloc_pages_slowpath+0x2650/0x2650 [ 318.238099] 335868 pages reserved [ 318.241287] ? wait_for_completion+0x440/0x440 [ 318.241299] alloc_pages_current+0xd6/0x1b0 [ 318.241310] ion_page_pool_alloc+0x102/0x180 [ 318.241319] ion_system_heap_allocate+0x14e/0x930 [ 318.246248] 0 pages cma reserved [ 318.249426] ? ion_system_heap_free+0x270/0x270 [ 318.320272] ion_alloc+0x216/0x770 [ 318.323904] ? ion_dma_buf_release+0x40/0x40 [ 318.328323] ? kasan_check_write+0x14/0x20 [ 318.332905] ion_ioctl+0xe2/0x1b6 [ 318.336580] ? ion_alloc.cold.15+0x32/0x32 [ 318.341533] do_vfs_ioctl+0x180/0xfb0 [ 318.345578] ? __fget+0x1ad/0x2f0 [ 318.352320] ? ioctl_preallocate+0x1a0/0x1a0 [ 318.356735] ? __fget+0x1ca/0x2f0 [ 318.360189] ? security_file_ioctl+0x6a/0xa0 [ 318.364594] ? SyS_clock_settime+0x1a0/0x1a0 [ 318.368997] ? security_file_ioctl+0x6a/0xa0 [ 318.373472] SyS_ioctl+0x74/0x80 [ 318.376884] ? do_vfs_ioctl+0xfb0/0xfb0 [ 318.380856] do_syscall_64+0x1c7/0x5b0 [ 318.384764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.389616] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 318.394903] RIP: 0033:0x45af49 [ 318.398345] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.406359] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 318.413741] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 318.421031] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 318.428836] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 318.436226] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 318.455476] Mem-Info: [ 318.458081] active_anon:5385 inactive_anon:194 isolated_anon:0 [ 318.458081] active_file:14 inactive_file:12 isolated_file:0 [ 318.458081] unevictable:0 dirty:0 writeback:0 unstable:0 [ 318.458081] slab_reclaimable:13151 slab_unreclaimable:99432 [ 318.458081] mapped:2 shmem:250 pagetables:418 bounce:0 [ 318.458081] free:13708 free_pcp:30 free_cma:0 [ 318.500182] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 318.506056] Node 0 active_anon:21436kB inactive_anon:772kB active_file:52kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 318.513997] syz-executor.5 cpuset= [ 318.540099] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 318.546338] Node 1 active_anon:104kB inactive_anon:4kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 318.574188] syz5 [ 318.590996] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.601217] mems_allowed=0-1 [ 318.626269] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 318.631586] Node 0 DMA32 free:17744kB min:36384kB low:45480kB high:54576kB active_anon:21432kB inactive_anon:772kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7072kB pagetables:1620kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.640571] syz-executor.5 cpuset= [ 318.670679] lowmem_reserve[]: 0 0 0 0 0 [ 318.678471] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.690142] CPU: 1 PID: 7961 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 318.712051] syz5 [ 318.712975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.712981] Call Trace: [ 318.714968] mems_allowed=0-1 [ 318.724408] dump_stack+0xf7/0x13b [ 318.724418] warn_alloc.cold.110+0xa2/0x1be [ 318.724423] ? zone_watermark_ok_safe+0x260/0x260 [ 318.724429] ? usleep_range+0x120/0x120 [ 318.724435] ? get_page_from_freelist+0x26e/0x23b0 [ 318.724441] ? call_timer_fn+0x570/0x570 [ 318.724452] __alloc_pages_slowpath+0x2052/0x2650 [ 318.724465] ? warn_alloc+0x100/0x100 [ 318.724471] ? get_page_from_freelist+0x1046/0x23b0 [ 318.724486] ? __might_sleep+0x93/0xb0 [ 318.724493] __alloc_pages_nodemask+0x60d/0x770 [ 318.724501] ? __alloc_pages_slowpath+0x2650/0x2650 [ 318.724507] ? wait_for_completion+0x440/0x440 [ 318.724523] alloc_pages_current+0xd6/0x1b0 [ 318.724533] ion_page_pool_alloc+0x102/0x180 [ 318.724538] ion_system_heap_allocate+0x14e/0x930 [ 318.724548] ? ion_system_heap_free+0x270/0x270 [ 318.724557] ion_alloc+0x216/0x770 [ 318.724566] ? ion_dma_buf_release+0x40/0x40 [ 318.724576] ? kasan_check_write+0x14/0x20 [ 318.724582] ion_ioctl+0xe2/0x1b6 [ 318.724587] ? ion_alloc.cold.15+0x32/0x32 [ 318.724599] do_vfs_ioctl+0x180/0xfb0 [ 318.724606] ? __fget+0x1ad/0x2f0 [ 318.724613] ? ioctl_preallocate+0x1a0/0x1a0 [ 318.724623] ? __fget+0x1ca/0x2f0 [ 318.724635] ? security_file_ioctl+0x6a/0xa0 [ 318.724641] ? SyS_clock_settime+0x1a0/0x1a0 [ 318.724644] ? security_file_ioctl+0x6a/0xa0 [ 318.724650] SyS_ioctl+0x74/0x80 [ 318.724655] ? do_vfs_ioctl+0xfb0/0xfb0 [ 318.724662] do_syscall_64+0x1c7/0x5b0 [ 318.724667] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.724676] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 318.724681] RIP: 0033:0x45af49 [ 318.724684] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.724690] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 318.724692] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 318.724695] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 318.724697] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 318.724700] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 318.741595] Mem-Info: [ 318.749722] lowmem_reserve[]: [ 318.769292] active_anon:5385 inactive_anon:194 isolated_anon:0 [ 318.769292] active_file:39 inactive_file:7 isolated_file:0 [ 318.769292] unevictable:0 dirty:0 writeback:0 unstable:0 [ 318.769292] slab_reclaimable:13151 slab_unreclaimable:99432 [ 318.769292] mapped:2 shmem:250 pagetables:418 bounce:0 [ 318.769292] free:13707 free_pcp:60 free_cma:0 [ 318.776599] 0 [ 318.786701] Node 0 active_anon:21436kB inactive_anon:772kB active_file:152kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 318.788958] CPU: 0 PID: 7993 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 318.802323] Node 1 active_anon:104kB inactive_anon:4kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 318.802764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.807615] Node 0 [ 318.811278] Call Trace: [ 318.811297] dump_stack+0xf7/0x13b [ 318.811308] warn_alloc.cold.110+0xa2/0x1be [ 318.811313] ? zone_watermark_ok_safe+0x260/0x260 [ 318.811319] ? usleep_range+0x120/0x120 [ 318.811329] ? rcu_read_lock_sched_held+0x108/0x120 [ 318.815738] DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.820264] ? call_timer_fn+0x570/0x570 [ 318.820277] __alloc_pages_slowpath+0x2052/0x2650 [ 318.820291] ? warn_alloc+0x100/0x100 [ 318.820297] ? get_page_from_freelist+0x1046/0x23b0 [ 318.820312] ? __might_sleep+0x93/0xb0 [ 318.823925] lowmem_reserve[]: [ 318.828161] __alloc_pages_nodemask+0x60d/0x770 [ 318.832124] 0 [ 318.835666] ? __alloc_pages_slowpath+0x2650/0x2650 [ 318.840101] 2570 [ 318.843530] ? wait_for_completion+0x440/0x440 [ 318.847975] 2570 [ 318.853556] alloc_pages_current+0xd6/0x1b0 [ 318.853568] ion_page_pool_alloc+0x102/0x180 [ 318.853573] ion_system_heap_allocate+0x14e/0x930 [ 318.853581] ? ion_system_heap_free+0x270/0x270 [ 318.853590] ion_alloc+0x216/0x770 [ 318.857998] 2570 [ 318.861633] ? ion_dma_buf_release+0x40/0x40 [ 318.861644] ? kasan_check_write+0x14/0x20 [ 318.861651] ion_ioctl+0xe2/0x1b6 [ 318.861656] ? ion_alloc.cold.15+0x32/0x32 [ 318.861669] do_vfs_ioctl+0x180/0xfb0 [ 318.865715] 2570 [ 318.869804] ? __fget+0x1ad/0x2f0 [ 318.879937] ? ioctl_preallocate+0x1a0/0x1a0 [ 318.883244] Node 0 [ 318.891063] ? __fget+0x1ca/0x2f0 [ 318.891076] ? security_file_ioctl+0x6a/0xa0 [ 318.891081] ? SyS_clock_settime+0x1a0/0x1a0 [ 318.891090] ? security_file_ioctl+0x6a/0xa0 [ 318.898377] DMA32 free:17744kB min:36384kB low:45480kB high:54576kB active_anon:21432kB inactive_anon:772kB active_file:128kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7072kB pagetables:1620kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 318.905912] SyS_ioctl+0x74/0x80 [ 318.905919] ? do_vfs_ioctl+0xfb0/0xfb0 [ 318.905927] do_syscall_64+0x1c7/0x5b0 [ 318.905931] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.905944] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 318.905951] RIP: 0033:0x45af49 [ 318.913514] lowmem_reserve[]: [ 318.920846] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.920852] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 318.920855] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 318.920858] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 318.920861] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 318.920863] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 318.928105] 0 [ 318.928140] 0 [ 318.930628] 0 0 0 [ 318.930640] Node 1 Normal free:26696kB min:53504kB low:66880kB high:80256kB active_anon:104kB inactive_anon:4kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:52kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 318.930651] lowmem_reserve[]: 0 0 0 0 0 [ 318.930664] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 30*16kB (UME) 27*32kB (UM) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10388kB [ 318.930717] Node 0 DMA32: 481*4kB (ME) 153*8kB (UME) 40*16kB (ME) 24*32kB (UME) 96*64kB (UM) 31*128kB (UM) 4*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 17740kB [ 318.930763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 318.930791] Node 1 Normal: 1*4kB (M) 3*8kB (UME) 2*16kB (ME) 3*32kB (UME) 261*64kB (U) 15*128kB (U) 1*256kB (U) 15*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26716kB [ 318.930839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.930843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 318.930847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.930850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 318.930853] 282 total pagecache pages [ 318.930862] 0 pages in swap cache [ 318.930866] Swap cache stats: add 0, delete 0, find 0/0 [ 318.930868] Free swap = 0kB [ 318.930871] Total swap = 0kB [ 318.930876] 1965979 pages RAM [ 318.930879] 0 pages HighMem/MovableOnly [ 318.930881] 335868 pages reserved [ 318.930883] 0 pages cma reserved [ 318.930889] Out of memory: Kill process 8007 (syz-executor.2) score 999 or sacrifice child [ 318.930915] Killed process 8007 (syz-executor.2) total-vm:37776kB, anon-rss:80kB, file-rss:0kB, shmem-rss:0kB [ 318.931186] oom_reaper: reaped process 8007 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 318.931202] syz-executor.0: [ 318.936961] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 318.975298] page allocation failure: order:0 [ 319.011717] 0 [ 319.037829] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 319.044112] syz-executor.2: [ 319.049925] (null) [ 319.054036] page allocation failure: order:0 [ 319.066633] syz-executor.0 cpuset= [ 319.072035] 0 [ 319.114432] syz0 [ 319.122512] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 319.143621] mems_allowed=0-1 [ 319.152579] (null) [ 319.172434] CPU: 0 PID: 7967 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 319.181698] (null) [ 319.184055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.184061] Call Trace: [ 319.187911] , order=0, oom_score_adj=1000 [ 319.189989] dump_stack+0xf7/0x13b [ 319.193528] syz-executor.2 cpuset= [ 319.197882] warn_alloc.cold.110+0xa2/0x1be [ 319.200195] syz-executor.2 cpuset= [ 319.203730] ? zone_watermark_ok_safe+0x260/0x260 [ 319.208197] syz2 [ 319.212655] ? wake_up_q+0x9c/0xe0 [ 319.217138] 0 [ 319.245678] ? __mutex_unlock_slowpath+0x29b/0x7e0 [ 319.245694] __alloc_pages_slowpath+0x2052/0x2650 [ 319.245711] ? warn_alloc+0x100/0x100 [ 319.249345] syz2 [ 319.253314] ? get_page_from_freelist+0x1046/0x23b0 [ 319.257339] mems_allowed=0-1 [ 319.262130] ? __might_sleep+0x93/0xb0 [ 319.262139] __alloc_pages_nodemask+0x60d/0x770 [ 319.267399] mems_allowed=0-1 [ 319.270735] ? __alloc_pages_slowpath+0x2650/0x2650 [ 319.270748] ? wait_for_completion+0x440/0x440 [ 319.270758] alloc_pages_current+0xd6/0x1b0 [ 319.270784] ion_page_pool_alloc+0x102/0x180 [ 319.310085] 0 [ 319.311196] ion_system_heap_allocate+0x14e/0x930 [ 319.320443] ? ion_system_heap_free+0x270/0x270 [ 319.320452] ion_alloc+0x216/0x770 [ 319.320460] ? ion_dma_buf_release+0x40/0x40 [ 319.320472] ? kasan_check_write+0x14/0x20 [ 319.320479] ion_ioctl+0xe2/0x1b6 [ 319.350062] Node 0 [ 319.352958] ? ion_alloc.cold.15+0x32/0x32 [ 319.357028] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.373585] do_vfs_ioctl+0x180/0xfb0 [ 319.373600] ? __fget+0x1ad/0x2f0 [ 319.373612] ? ioctl_preallocate+0x1a0/0x1a0 [ 319.373620] ? __fget+0x1ca/0x2f0 [ 319.373632] ? security_file_ioctl+0x6a/0xa0 [ 319.470065] lowmem_reserve[]: [ 319.470417] ? SyS_clock_settime+0x1a0/0x1a0 [ 319.474068] 0 0 [ 319.478632] ? security_file_ioctl+0x6a/0xa0 [ 319.500291] 0 [ 319.504431] SyS_ioctl+0x74/0x80 [ 319.540060] 0 [ 319.541159] ? do_vfs_ioctl+0xfb0/0xfb0 [ 319.544179] 0 [ 319.546612] do_syscall_64+0x1c7/0x5b0 [ 319.580399] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.582738] Node 1 [ 319.592137] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 319.592145] RIP: 0033:0x45af49 [ 319.592148] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.592154] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 319.592184] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 319.592187] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 319.592189] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 319.592191] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 319.624938] syz-executor.5: [ 319.633171] CPU: 1 PID: 8011 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 319.639629] page allocation failure: order:4 [ 319.641681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.641685] Call Trace: [ 319.641703] dump_stack+0xf7/0x13b [ 319.641714] warn_alloc.cold.110+0xa2/0x1be [ 319.641719] ? zone_watermark_ok_safe+0x260/0x260 [ 319.641725] ? usleep_range+0x120/0x120 [ 319.641734] ? rcu_read_lock_sched_held+0x108/0x120 [ 319.641741] ? call_timer_fn+0x570/0x570 [ 319.641753] __alloc_pages_slowpath+0x2052/0x2650 [ 319.641769] ? warn_alloc+0x100/0x100 [ 319.641776] ? get_page_from_freelist+0x1046/0x23b0 [ 319.641791] ? __might_sleep+0x93/0xb0 [ 319.641797] __alloc_pages_nodemask+0x60d/0x770 [ 319.641804] ? trace_hardirqs_off+0x10/0x10 [ 319.641811] ? __alloc_pages_slowpath+0x2650/0x2650 [ 319.647186] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 319.648872] ? wait_for_completion+0x440/0x440 [ 319.653861] (null) [ 319.656031] alloc_pages_current+0xd6/0x1b0 [ 319.664137] syz-executor.5 cpuset= [ 319.668949] ion_page_pool_alloc+0x102/0x180 [ 319.675260] syz5 [ 319.677979] ion_system_heap_allocate+0x14e/0x930 [ 319.685912] mems_allowed=0-1 [ 319.689178] ? ion_system_heap_free+0x270/0x270 [ 319.986283] ion_alloc+0x216/0x770 [ 319.989850] ? ion_dma_buf_release+0x40/0x40 [ 319.994272] ? kasan_check_write+0x14/0x20 [ 319.998525] ion_ioctl+0xe2/0x1b6 [ 320.001989] ? ion_alloc.cold.15+0x32/0x32 [ 320.006329] do_vfs_ioctl+0x180/0xfb0 [ 320.010459] ? __fget+0x1ad/0x2f0 [ 320.013934] ? ioctl_preallocate+0x1a0/0x1a0 [ 320.018478] ? __fget+0x1ca/0x2f0 [ 320.022026] ? security_file_ioctl+0x6a/0xa0 [ 320.026557] ? SyS_clock_settime+0x1a0/0x1a0 [ 320.031128] ? security_file_ioctl+0x6a/0xa0 [ 320.035984] SyS_ioctl+0x74/0x80 [ 320.039381] ? do_vfs_ioctl+0xfb0/0xfb0 [ 320.043560] do_syscall_64+0x1c7/0x5b0 [ 320.047538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.052418] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 320.057621] RIP: 0033:0x45af49 [ 320.060967] RSP: 002b:00007f47fc926c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.069126] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 320.076407] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 320.083823] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 320.091479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47fc9276d4 [ 320.098835] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 320.106345] CPU: 0 PID: 8007 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 320.114232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.119064] Normal free:26708kB min:53504kB low:66880kB high:80256kB active_anon:104kB inactive_anon:4kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.123720] Call Trace: [ 320.123740] dump_stack+0xf7/0x13b [ 320.123751] dump_header+0x160/0x63f [ 320.123760] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 320.123768] ? ___ratelimit+0x243/0x519 [ 320.123778] ? do_raw_spin_unlock+0x16a/0x250 [ 320.151236] lowmem_reserve[]: [ 320.153788] oom_kill_process.cold.24+0xb/0xa1a [ 320.157548] 0 [ 320.161272] ? out_of_memory+0x7f9/0x1030 [ 320.161284] ? lock_downgrade+0x7f0/0x7f0 [ 320.161293] out_of_memory+0x2b0/0x1030 [ 320.161301] ? oom_killer_disable+0x1a0/0x1a0 [ 320.161309] ? __alloc_pages_slowpath+0xb69/0x2650 [ 320.161315] __alloc_pages_slowpath+0x1ef3/0x2650 [ 320.161330] ? warn_alloc+0x100/0x100 [ 320.166516] 0 [ 320.170477] ? get_page_from_freelist+0x1046/0x23b0 [ 320.170491] ? __might_sleep+0x93/0xb0 [ 320.170497] __alloc_pages_nodemask+0x60d/0x770 [ 320.170504] ? __alloc_pages_slowpath+0x2650/0x2650 [ 320.175007] 0 [ 320.178175] ? lock_downgrade+0x7f0/0x7f0 [ 320.178192] alloc_pages_current+0xd6/0x1b0 [ 320.182892] 0 [ 320.184662] __page_cache_alloc+0x1da/0x330 [ 320.188793] 0 [ 320.192947] filemap_fault+0xbc8/0x1ae0 [ 320.192959] ? __lock_page_or_retry+0x820/0x820 [ 320.192969] ? lock_acquire+0x173/0x400 [ 320.192979] ? ext4_filemap_fault+0x75/0xb0 [ 320.201456] ext4_filemap_fault+0x7d/0xb0 [ 320.201465] __do_fault+0xf3/0x340 [ 320.201472] __handle_mm_fault+0x21eb/0x3870 [ 320.201479] ? trace_hardirqs_on_caller+0x40c/0x580 [ 320.201487] ? copy_page_range+0x1d10/0x1d10 [ 320.201492] ? find_held_lock+0x36/0x1d0 [ 320.201508] handle_mm_fault+0x234/0x6e0 [ 320.207346] Node 0 [ 320.212200] ? find_vma+0x1a/0x150 [ 320.212211] __do_page_fault+0x44d/0xb00 [ 320.212222] ? vmalloc_fault+0xc90/0xc90 [ 320.212232] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 320.212237] ? page_fault+0x2f/0x50 [ 320.212243] do_page_fault+0x64/0x3fb [ 320.216174] DMA: [ 320.217967] ? page_fault+0x2f/0x50 [ 320.223482] 1*4kB [ 320.227449] page_fault+0x45/0x50 [ 320.232267] (M) [ 320.237745] RIP: 0033:0x459411 [ 320.239545] 2*8kB [ 320.243738] RSP: 002b:00007fff34b304b0 EFLAGS: 00010293 [ 320.243744] RAX: 0000000000000000 RBX: 000000000004d2aa RCX: 0000000000459411 [ 320.243746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fff34b304c0 [ 320.243749] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 320.243751] R10: 00007fff34b305b0 R11: 0000000000000293 R12: 000000000075bf20 [ 320.243754] R13: 000000000075c9a0 R14: 0000000000760320 R15: 000000000075bf2c [ 320.258698] Mem-Info: [ 320.267858] CPU: 1 PID: 7993 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 320.284776] active_anon:5368 inactive_anon:194 isolated_anon:0 [ 320.284776] active_file:15 inactive_file:17 isolated_file:0 [ 320.284776] unevictable:0 dirty:0 writeback:0 unstable:0 [ 320.284776] slab_reclaimable:13110 slab_unreclaimable:99369 [ 320.284776] mapped:2 shmem:250 pagetables:418 bounce:0 [ 320.284776] free:13783 free_pcp:37 free_cma:0 [ 320.286836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.305986] Node 0 active_anon:21368kB inactive_anon:772kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 320.307262] Call Trace: [ 320.318267] Node 1 active_anon:104kB inactive_anon:4kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 320.319077] dump_stack+0xf7/0x13b [ 320.338289] Node 0 [ 320.338437] warn_alloc.cold.110+0xa2/0x1be [ 320.346260] DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.349488] ? zone_watermark_ok_safe+0x260/0x260 [ 320.365581] lowmem_reserve[]: [ 320.372034] ? __alloc_pages_direct_compact+0xc2/0x330 [ 320.372042] __alloc_pages_slowpath+0x2052/0x2650 [ 320.372058] ? trace_hardirqs_off+0x10/0x10 [ 320.372065] ? warn_alloc+0x100/0x100 [ 320.372072] ? get_page_from_freelist+0x1046/0x23b0 [ 320.372153] ? __might_sleep+0x93/0xb0 [ 320.372161] __alloc_pages_nodemask+0x60d/0x770 [ 320.372166] ? trace_hardirqs_off+0x10/0x10 [ 320.372174] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 320.372181] ? __alloc_pages_slowpath+0x2650/0x2650 [ 320.372189] ? wait_for_completion+0x440/0x440 [ 320.372199] alloc_pages_current+0xd6/0x1b0 [ 320.372208] ion_page_pool_alloc+0x102/0x180 [ 320.372214] ion_system_heap_allocate+0x14e/0x930 [ 320.392909] 0 [ 320.394078] ? do_raw_spin_unlock+0x16a/0x250 [ 320.396634] 2570 2570 [ 320.404826] ? ion_system_heap_free+0x270/0x270 [ 320.404836] ion_alloc+0x27f/0x770 [ 320.404846] ? ion_dma_buf_release+0x40/0x40 [ 320.404857] ? kasan_check_write+0x14/0x20 [ 320.404863] ion_ioctl+0xe2/0x1b6 [ 320.404868] ? ion_alloc.cold.15+0x32/0x32 [ 320.404880] do_vfs_ioctl+0x180/0xfb0 [ 320.404887] ? __fget+0x1ad/0x2f0 [ 320.404893] ? ioctl_preallocate+0x1a0/0x1a0 [ 320.404901] ? __fget+0x1ca/0x2f0 [ 320.404921] ? security_file_ioctl+0x6a/0xa0 [ 320.404927] ? SyS_clock_settime+0x1a0/0x1a0 [ 320.404931] ? security_file_ioctl+0x6a/0xa0 [ 320.404938] SyS_ioctl+0x74/0x80 [ 320.404944] ? do_vfs_ioctl+0xfb0/0xfb0 [ 320.404952] do_syscall_64+0x1c7/0x5b0 [ 320.404957] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.404970] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 320.404976] RIP: 0033:0x45af49 [ 320.404979] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.404985] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 320.404988] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 320.404990] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 320.404999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 320.453323] warn_alloc_show_mem: 1 callbacks suppressed [ 320.453327] Mem-Info: [ 320.475603] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 320.489345] (UM) [ 320.514526] 2570 [ 320.528402] 30*16kB [ 320.551772] 2570 [ 320.567578] (UME) [ 320.582877] 27*32kB [ 320.583399] Node 0 [ 320.587873] (UM) [ 320.601308] active_anon:5368 inactive_anon:194 isolated_anon:0 [ 320.601308] active_file:15 inactive_file:17 isolated_file:0 [ 320.601308] unevictable:0 dirty:0 writeback:0 unstable:0 [ 320.601308] slab_reclaimable:13110 slab_unreclaimable:99369 [ 320.601308] mapped:2 shmem:250 pagetables:418 bounce:0 [ 320.601308] free:13783 free_pcp:37 free_cma:0 [ 320.614277] 3*64kB [ 320.625050] DMA32 free:18036kB min:36384kB low:45480kB high:54576kB active_anon:21364kB inactive_anon:772kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7072kB pagetables:1620kB bounce:0kB free_pcp:144kB local_pcp:24kB free_cma:0kB [ 320.631204] (UME) [ 320.638610] Node 0 active_anon:21368kB inactive_anon:772kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 320.653760] 3*128kB [ 320.666780] lowmem_reserve[]: [ 320.675814] (UME) [ 320.679464] 0 [ 320.687678] 3*256kB [ 320.699369] 0 [ 320.708100] (UME) [ 320.733853] Node 1 active_anon:104kB inactive_anon:4kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 320.741956] 3*512kB [ 320.765847] Node 0 [ 320.771647] (UME) [ 320.787978] 0 [ 320.816955] 2*1024kB [ 320.866313] DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.873060] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 320.873079] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 320.873099] CPU: 1 PID: 7993 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 320.873103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.873106] Call Trace: [ 320.873123] dump_stack+0xf7/0x13b [ 320.873135] warn_alloc.cold.110+0xa2/0x1be [ 320.873141] ? zone_watermark_ok_safe+0x260/0x260 [ 320.895242] lowmem_reserve[]: [ 320.915389] ? usleep_range+0x120/0x120 [ 320.915403] ? rcu_read_lock_sched_held+0x108/0x120 [ 320.915409] ? call_timer_fn+0x570/0x570 [ 320.915424] __alloc_pages_slowpath+0x2052/0x2650 [ 320.915438] ? warn_alloc+0x100/0x100 [ 320.915444] ? get_page_from_freelist+0x1046/0x23b0 [ 320.915458] ? __might_sleep+0x93/0xb0 [ 320.915463] __alloc_pages_nodemask+0x60d/0x770 [ 320.915472] ? trace_hardirqs_off+0x10/0x10 [ 320.915476] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 320.915482] ? __alloc_pages_slowpath+0x2650/0x2650 [ 320.915490] ? wait_for_completion+0x440/0x440 [ 320.915501] alloc_pages_current+0xd6/0x1b0 [ 320.915513] ion_page_pool_alloc+0x102/0x180 [ 320.915519] ion_system_heap_allocate+0x14e/0x930 [ 320.915526] ? do_raw_spin_unlock+0x16a/0x250 [ 320.915534] ? ion_system_heap_free+0x270/0x270 [ 320.915542] ion_alloc+0x27f/0x770 [ 320.915552] ? ion_dma_buf_release+0x40/0x40 [ 320.915563] ? kasan_check_write+0x14/0x20 [ 320.915570] ion_ioctl+0xe2/0x1b6 [ 320.915576] ? ion_alloc.cold.15+0x32/0x32 [ 320.915589] do_vfs_ioctl+0x180/0xfb0 [ 320.915596] ? __fget+0x1ad/0x2f0 [ 320.915602] ? ioctl_preallocate+0x1a0/0x1a0 [ 320.915609] ? __fget+0x1ca/0x2f0 [ 320.915621] ? security_file_ioctl+0x6a/0xa0 [ 320.915626] ? SyS_clock_settime+0x1a0/0x1a0 [ 320.915629] ? security_file_ioctl+0x6a/0xa0 [ 320.915636] SyS_ioctl+0x74/0x80 [ 320.934262] 0 [ 320.952486] ? do_vfs_ioctl+0xfb0/0xfb0 [ 320.952495] do_syscall_64+0x1c7/0x5b0 [ 320.952500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.952512] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 320.952518] RIP: 0033:0x45af49 [ 320.952521] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.952527] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 320.952529] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 320.952531] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 320.952534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 320.952536] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 320.956780] (ME) [ 320.985584] 0 [ 320.991570] 2*2048kB [ 321.014677] 0 [ 321.021244] syz-executor.2: [ 321.047733] 2570 [ 321.060108] (UE) [ 321.182519] page allocation failure: order:4 [ 321.200097] 2570 [ 321.248533] team0 (unregistering): Port device team_slave_1 removed [ 321.257028] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 321.270881] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 321.277263] CPU: 1 PID: 8011 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 321.285085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.289096] 2570 [ 321.295347] Call Trace: [ 321.295369] dump_stack+0xf7/0x13b [ 321.295379] warn_alloc.cold.110+0xa2/0x1be [ 321.295384] ? zone_watermark_ok_safe+0x260/0x260 [ 321.295400] ? __alloc_pages_direct_compact+0xc2/0x330 [ 321.295407] __alloc_pages_slowpath+0x2052/0x2650 [ 321.295421] ? trace_hardirqs_off+0x10/0x10 [ 321.295427] ? warn_alloc+0x100/0x100 [ 321.295436] ? get_page_from_freelist+0x1046/0x23b0 [ 321.295449] ? __might_sleep+0x93/0xb0 [ 321.295455] __alloc_pages_nodemask+0x60d/0x770 [ 321.295459] ? trace_hardirqs_off+0x10/0x10 [ 321.295465] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 321.295471] ? __alloc_pages_slowpath+0x2650/0x2650 [ 321.295478] ? wait_for_completion+0x440/0x440 [ 321.295488] alloc_pages_current+0xd6/0x1b0 [ 321.295499] ion_page_pool_alloc+0x102/0x180 [ 321.295508] ion_system_heap_allocate+0x14e/0x930 [ 321.295514] ? do_raw_spin_unlock+0x16a/0x250 [ 321.295521] ? ion_system_heap_free+0x270/0x270 [ 321.295532] ion_alloc+0x27f/0x770 [ 321.295544] ? ion_dma_buf_release+0x40/0x40 2020/03/09 03:20:31 result: hanged=false err=executor 1: EOF 2020/03/09 03:20:31 executed programs: 96 [ 321.295554] ? kasan_check_write+0x14/0x20 [ 321.295560] ion_ioctl+0xe2/0x1b6 [ 321.295565] ? ion_alloc.cold.15+0x32/0x32 [ 321.295584] do_vfs_ioctl+0x180/0xfb0 [ 321.307353] 2570 [ 321.309228] ? __fget+0x1ad/0x2f0 [ 321.329185] ? ioctl_preallocate+0x1a0/0x1a0 [ 321.329199] ? __fget+0x1ca/0x2f0 [ 321.329211] ? security_file_ioctl+0x6a/0xa0 [ 321.329219] ? SyS_clock_settime+0x1a0/0x1a0 [ 321.335946] Node 0 [ 321.338439] ? security_file_ioctl+0x6a/0xa0 [ 321.338452] SyS_ioctl+0x74/0x80 [ 321.338459] ? do_vfs_ioctl+0xfb0/0xfb0 [ 321.338467] do_syscall_64+0x1c7/0x5b0 [ 321.338472] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.338485] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.338491] RIP: 0033:0x45af49 [ 321.338495] RSP: 002b:00007f47fc926c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.338502] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 321.338505] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 321.338508] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 321.338511] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47fc9276d4 [ 321.338514] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 321.344344] 0*4096kB [ 321.349790] team0 (unregistering): Port device team_slave_0 removed [ 321.353491] = 10388kB [ 321.375666] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 321.378903] Node 0 [ 321.383295] Node 0 [ 321.386870] DMA32: [ 321.392206] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.398876] 487*4kB [ 321.403337] lowmem_reserve[]: [ 321.407270] (ME) [ 321.417390] DMA32 free:32996kB min:36384kB low:45480kB high:54576kB active_anon:21364kB inactive_anon:772kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1616kB bounce:0kB free_pcp:476kB local_pcp:112kB free_cma:0kB [ 321.423046] 221*8kB [ 321.423477] 0 [ 321.428578] (UME) [ 321.450099] lowmem_reserve[]: [ 321.483598] 56*16kB [ 321.490946] 0 [ 321.509420] (UME) [ 321.520078] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 321.540097] 31*32kB [ 321.583844] 0 [ 321.640274] (UME) 271*64kB (UME) 47*128kB (UM) 6*256kB (UM) 3*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 33060kB [ 321.644060] 0 [ 321.660380] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 321.690162] 0 0 0 0 [ 321.692817] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.700263] Node 1 [ 321.749370] bond0 (unregistering): Released all slaves [ 321.757451] lowmem_reserve[]: 0 0 0 0 0 [ 321.767121] Normal: 106*4kB (UM) 61*8kB (UME) 38*16kB (ME) 27*32kB (UME) 10*64kB (UM) 5*128kB (UM) 1*256kB (M) 2*512kB (UM) 48*1024kB (U) 0*2048kB 0*4096kB = 54096kB [ 321.776324] Node 1 [ 321.786096] 0 0 [ 321.793331] Normal free:53852kB min:53504kB low:66880kB high:80256kB active_anon:100kB inactive_anon:4kB active_file:1956kB inactive_file:2312kB unevictable:0kB writepending:296kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:72kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 321.815510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.829660] Node 1 Normal free:53244kB min:53504kB low:66880kB high:80256kB active_anon:100kB inactive_anon:4kB active_file:884kB inactive_file:752kB unevictable:0kB writepending:296kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:72kB bounce:0kB free_pcp:696kB local_pcp:648kB free_cma:0kB [ 321.850076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 321.900114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.908787] lowmem_reserve[]: [ 321.909287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 321.909293] 0 [ 321.924068] 335 total pagecache pages [ 321.932914] 0 pages in swap cache [ 321.936403] Swap cache stats: add 0, delete 0, find 0/0 [ 321.944732] lowmem_reserve[]: 0 0 0 0 0 [ 321.948762] Node 0 DMA: 4*4kB (UM) 2*8kB (UM) 30*16kB (UME) 27*32kB (UM) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10400kB [ 321.952929] Free swap = 0kB [ 321.986400] Total swap = 0kB [ 321.989617] 0 0 [ 321.989649] 1965979 pages RAM [ 321.989654] 0 [ 321.991765] 0 pages HighMem/MovableOnly [ 321.991775] 335868 pages reserved [ 321.991778] 0 pages cma reserved [ 321.994889] 0 [ 322.026753] Node 0 DMA32: 490*4kB (UME) 194*8kB (UME) 37*16kB (UME) 25*32kB (UME) 53*64kB (UME) 45*128kB (UM) 6*256kB (UM) 2*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 18664kB [ 322.049268] Node 0 DMA: 4*4kB (UM) 2*8kB (UM) 30*16kB (UME) 27*32kB (UM) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10400kB [ 322.069521] Node 0 DMA32: 490*4kB (UME) 194*8kB (UME) 37*16kB (UME) 26*32kB (UME) 53*64kB (UME) 45*128kB (UM) 6*256kB (UM) 2*512kB (M) 4*1024kB (UM) 0*2048kB 0*4096kB = 20744kB [ 322.092720] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 322.107282] Node 1 Normal: 1*4kB (U) 2*8kB (UE) 3*16kB (UME) 3*32kB (UME) 51*64kB (UM) 6*128kB (UM) 7*256kB (UM) 6*512kB (UM) 89*1024kB (UM) 26*2048kB (U) 0*4096kB = 153444kB [ 322.129240] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 322.190124] Node 1 Normal: 1*4kB (U) 2*8kB (UE) 3*16kB (UME) 3*32kB (UME) 1176*64kB (UM) 59*128kB (UM) 33*256kB (UM) 7*512kB (UM) 33*1024kB (UM) 26*2048kB (U) 0*4096kB = 182052kB [ 322.210479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 322.230511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 322.239326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 322.261588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 322.281830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 322.302394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 322.313072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 322.341266] 752 total pagecache pages [ 322.345251] 0 pages in swap cache [ 322.348719] Swap cache stats: add 0, delete 0, find 0/0 [ 322.361059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 322.369954] 752 total pagecache pages [ 322.392095] Free swap = 0kB [ 322.395286] Total swap = 0kB [ 322.398319] 1965979 pages RAM [ 322.432230] 0 pages in swap cache [ 322.435783] Swap cache stats: add 0, delete 0, find 0/0 [ 322.442801] 0 pages HighMem/MovableOnly [ 322.446804] 335868 pages reserved [ 322.460138] Free swap = 0kB [ 322.463556] Total swap = 0kB [ 322.466939] 1965979 pages RAM [ 322.470473] 0 pages cma reserved [ 322.474043] Out of memory: Kill process 8009 (syz-executor.4) score 999 or sacrifice child [ 322.490309] 0 pages HighMem/MovableOnly [ 322.494345] 335868 pages reserved [ 322.497945] 0 pages cma reserved [ 322.510106] Killed process 8010 (syz-executor.4) total-vm:37776kB, anon-rss:100kB, file-rss:0kB, shmem-rss:0kB [ 322.540343] oom_reaper: reaped process 8010 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 322.550758] syz-executor.2: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 322.590142] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 322.596279] CPU: 0 PID: 8007 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 322.604532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.614546] Call Trace: [ 322.617265] dump_stack+0xf7/0x13b [ 322.621299] warn_alloc.cold.110+0xa2/0x1be [ 322.625746] ? zone_watermark_ok_safe+0x260/0x260 [ 322.631094] ? wake_up_q+0x9c/0xe0 [ 322.634830] ? __mutex_unlock_slowpath+0x29b/0x7e0 [ 322.639792] __alloc_pages_slowpath+0x2052/0x2650 [ 322.645001] ? warn_alloc+0x100/0x100 [ 322.648815] ? get_page_from_freelist+0x1046/0x23b0 [ 322.653864] ? __might_sleep+0x93/0xb0 [ 322.657881] __alloc_pages_nodemask+0x60d/0x770 [ 322.662580] ? __alloc_pages_slowpath+0x2650/0x2650 [ 322.667782] ? lock_downgrade+0x7f0/0x7f0 [ 322.671979] alloc_pages_current+0xd6/0x1b0 [ 322.676319] __page_cache_alloc+0x1da/0x330 [ 322.680666] filemap_fault+0xbc8/0x1ae0 [ 322.684683] ? __lock_page_or_retry+0x820/0x820 [ 322.689901] ? lock_acquire+0x173/0x400 [ 322.693946] ? ext4_filemap_fault+0x75/0xb0 [ 322.698297] ext4_filemap_fault+0x7d/0xb0 [ 322.702477] __do_fault+0xf3/0x340 [ 322.706038] __handle_mm_fault+0x21eb/0x3870 [ 322.710730] ? trace_hardirqs_on_caller+0x40c/0x580 [ 322.715928] ? copy_page_range+0x1d10/0x1d10 [ 322.720512] ? find_held_lock+0x36/0x1d0 [ 322.724761] handle_mm_fault+0x234/0x6e0 [ 322.728987] ? find_vma+0x1a/0x150 [ 322.732558] __do_page_fault+0x44d/0xb00 [ 322.736645] ? vmalloc_fault+0xc90/0xc90 [ 322.740862] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 322.746269] ? page_fault+0x2f/0x50 [ 322.749950] do_page_fault+0x64/0x3fb [ 322.753778] ? page_fault+0x2f/0x50 [ 322.757421] page_fault+0x45/0x50 [ 322.760980] RIP: 0033:0x459411 [ 322.764181] RSP: 002b:00007fff34b304b0 EFLAGS: 00010293 [ 322.769877] RAX: 0000000000000000 RBX: 000000000004d2aa RCX: 0000000000459411 [ 322.777178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fff34b304c0 [ 322.784796] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 322.792308] R10: 00007fff34b305b0 R11: 0000000000000293 R12: 000000000075bf20 [ 322.799620] R13: 000000000075c9a0 R14: 0000000000760320 R15: 000000000075bf2c [ 322.947809] warn_alloc_show_mem: 4 callbacks suppressed [ 322.980126] Mem-Info: [ 322.982755] active_anon:5369 inactive_anon:196 isolated_anon:0 [ 322.982755] active_file:20 inactive_file:18 isolated_file:0 [ 322.982755] unevictable:0 dirty:0 writeback:0 unstable:0 [ 322.982755] slab_reclaimable:13101 slab_unreclaimable:98723 [ 322.982755] mapped:6 shmem:250 pagetables:417 bounce:0 [ 322.982755] free:16255 free_pcp:493 free_cma:0 [ 323.015667] Node 0 active_anon:21360kB inactive_anon:772kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 323.062849] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 323.090202] Node 1 active_anon:116kB inactive_anon:12kB active_file:124kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 323.117105] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 323.130143] CPU: 1 PID: 7961 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 323.138081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.147686] Call Trace: [ 323.150303] dump_stack+0xf7/0x13b [ 323.153860] warn_alloc.cold.110+0xa2/0x1be [ 323.158354] ? zone_watermark_ok_safe+0x260/0x260 [ 323.163217] ? __alloc_pages_direct_compact+0xc2/0x330 [ 323.168663] __alloc_pages_slowpath+0x2052/0x2650 [ 323.173623] ? trace_hardirqs_off+0x10/0x10 [ 323.177972] ? warn_alloc+0x100/0x100 [ 323.181795] ? get_page_from_freelist+0x1046/0x23b0 [ 323.186966] ? __might_sleep+0x93/0xb0 [ 323.190902] __alloc_pages_nodemask+0x60d/0x770 [ 323.195727] ? trace_hardirqs_off+0x10/0x10 [ 323.200424] ? __mutex_unlock_slowpath+0x29b/0x7e0 [ 323.205364] ? __alloc_pages_slowpath+0x2650/0x2650 [ 323.210412] ? wait_for_completion+0x440/0x440 [ 323.215335] alloc_pages_current+0xd6/0x1b0 [ 323.219891] ion_page_pool_alloc+0x102/0x180 [ 323.224354] ion_system_heap_allocate+0x14e/0x930 [ 323.229661] ? do_raw_spin_unlock+0x16a/0x250 [ 323.234186] ? ion_system_heap_free+0x270/0x270 [ 323.238889] ion_alloc+0x27f/0x770 [ 323.240246] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 323.242443] ? ion_dma_buf_release+0x40/0x40 [ 323.242457] ? kasan_check_write+0x14/0x20 [ 323.265624] ion_ioctl+0xe2/0x1b6 [ 323.269372] ? ion_alloc.cold.15+0x32/0x32 [ 323.273981] do_vfs_ioctl+0x180/0xfb0 [ 323.277800] ? __fget+0x1ad/0x2f0 [ 323.281357] ? ioctl_preallocate+0x1a0/0x1a0 [ 323.285774] ? __fget+0x1ca/0x2f0 [ 323.289412] ? security_file_ioctl+0x6a/0xa0 [ 323.294145] ? SyS_clock_settime+0x1a0/0x1a0 [ 323.298564] ? security_file_ioctl+0x6a/0xa0 [ 323.303806] SyS_ioctl+0x74/0x80 [ 323.307272] ? do_vfs_ioctl+0xfb0/0xfb0 [ 323.311251] do_syscall_64+0x1c7/0x5b0 [ 323.315169] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.320213] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 323.323411] syz-executor.4 cpuset= [ 323.325423] RIP: 0033:0x45af49 [ 323.325424] syz4 mems_allowed=0-1 [ 323.328962] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.343755] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 323.351332] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 323.358959] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 323.366379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 323.370164] syz-executor.2: [ 323.373694] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 323.374196] Node 0 [ 323.376911] syz-executor.0: [ 323.384977] DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.384981] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 323.384995] Node 0 DMA32 free:18120kB min:36384kB low:45480kB high:54576kB active_anon:21288kB inactive_anon:772kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:16kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1616kB bounce:0kB free_pcp:620kB local_pcp:0kB free_cma:0kB [ 323.385005] lowmem_reserve[]: 0 0 0 [ 323.392320] page allocation failure: order:0 [ 323.416298] 0 [ 323.444609] page allocation failure: order:4 [ 323.450677] 0 [ 323.454856] CPU: 0 PID: 8010 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 323.460518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.460521] Call Trace: [ 323.460542] dump_stack+0xf7/0x13b [ 323.460554] dump_header+0x160/0x63f [ 323.460563] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 323.460572] ? ___ratelimit+0x243/0x519 [ 323.465023] Node 0 [ 323.466860] ? do_raw_spin_unlock+0x16a/0x250 [ 323.466872] oom_kill_process.cold.24+0xb/0xa1a [ 323.474904] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.484300] ? out_of_memory+0x7f9/0x1030 [ 323.484312] ? lock_downgrade+0x7f0/0x7f0 [ 323.484323] out_of_memory+0x2b0/0x1030 [ 323.486932] lowmem_reserve[]: [ 323.492924] ? oom_killer_disable+0x1a0/0x1a0 [ 323.492935] ? __alloc_pages_slowpath+0xb69/0x2650 [ 323.492940] __alloc_pages_slowpath+0x1ef3/0x2650 [ 323.492953] ? warn_alloc+0x100/0x100 [ 323.492959] ? get_page_from_freelist+0x1046/0x23b0 [ 323.492977] ? __might_sleep+0x93/0xb0 [ 323.496780] 0 [ 323.501919] __alloc_pages_nodemask+0x60d/0x770 [ 323.501930] ? __alloc_pages_slowpath+0x2650/0x2650 [ 323.501940] ? wait_for_completion+0x440/0x440 [ 323.501945] ? __list_del_entry_valid+0xb6/0xf3 [ 323.501955] alloc_pages_current+0xd6/0x1b0 [ 323.501965] ion_page_pool_alloc+0x102/0x180 [ 323.501972] ion_system_heap_allocate+0x14e/0x930 [ 323.505972] 0 [ 323.508189] ? ion_system_heap_free+0x270/0x270 [ 323.512711] 0 [ 323.517331] ion_alloc+0x216/0x770 [ 323.542024] 0 [ 323.546124] ? ion_dma_buf_release+0x40/0x40 [ 323.550340] 0 [ 323.554285] ? kasan_check_write+0x14/0x20 [ 323.561864] ion_ioctl+0xe2/0x1b6 [ 323.561871] ? ion_alloc.cold.15+0x32/0x32 [ 323.561883] do_vfs_ioctl+0x180/0xfb0 [ 323.561890] ? __fget+0x1ad/0x2f0 [ 323.561896] ? ioctl_preallocate+0x1a0/0x1a0 [ 323.561904] ? __fget+0x1ca/0x2f0 [ 323.561916] ? security_file_ioctl+0x6a/0xa0 [ 323.566830] Node 1 [ 323.571669] ? SyS_clock_settime+0x1a0/0x1a0 [ 323.571678] ? security_file_ioctl+0x6a/0xa0 [ 323.571691] SyS_ioctl+0x74/0x80 [ 323.571698] ? do_vfs_ioctl+0xfb0/0xfb0 [ 323.571705] do_syscall_64+0x1c7/0x5b0 [ 323.571717] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.575526] Normal free:26612kB min:53504kB low:66880kB high:80256kB active_anon:116kB inactive_anon:12kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:52kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 323.580540] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 323.580550] RIP: 0033:0x45af49 [ 323.580552] RSP: 002b:00007ffa6e582c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.580558] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 323.580561] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 323.580563] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 323.580566] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5836d4 [ 323.580569] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 323.586743] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 323.591143] lowmem_reserve[]: [ 323.610105] (null) [ 323.614291] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 323.619020] syz-executor.0 cpuset= [ 323.624593] (null) [ 323.644418] syz0 [ 323.656225] 0 [ 323.684901] mems_allowed=0-1 [ 323.695538] syz-executor.2 cpuset= [ 323.724442] CPU: 0 PID: 7967 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 323.726568] 0 [ 323.730851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.730856] Call Trace: [ 323.730877] dump_stack+0xf7/0x13b [ 323.730887] warn_alloc.cold.110+0xa2/0x1be [ 323.730892] ? zone_watermark_ok_safe+0x260/0x260 [ 323.730905] ? __alloc_pages_direct_compact+0xc2/0x330 [ 323.730921] __alloc_pages_slowpath+0x2052/0x2650 [ 323.734104] 0 0 0 [ 323.741822] ? trace_hardirqs_off+0x10/0x10 [ 323.741834] ? warn_alloc+0x100/0x100 [ 323.741841] ? get_page_from_freelist+0x1046/0x23b0 [ 323.741854] ? __might_sleep+0x93/0xb0 [ 323.750985] syz2 [ 323.758225] __alloc_pages_nodemask+0x60d/0x770 [ 323.772751] ? trace_hardirqs_off+0x10/0x10 [ 323.772760] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 323.772771] ? __alloc_pages_slowpath+0x2650/0x2650 [ 323.780132] mems_allowed=0-1 [ 323.787176] ? wait_for_completion+0x440/0x440 [ 323.790314] Node 0 [ 323.792401] alloc_pages_current+0xd6/0x1b0 [ 323.820109] DMA: [ 323.823442] ion_page_pool_alloc+0x102/0x180 [ 323.825230] 1*4kB [ 323.834671] ion_system_heap_allocate+0x14e/0x930 [ 323.834679] ? do_raw_spin_unlock+0x16a/0x250 [ 323.834686] ? ion_system_heap_free+0x270/0x270 [ 323.834695] ion_alloc+0x27f/0x770 [ 323.834706] ? ion_dma_buf_release+0x40/0x40 [ 323.850045] (M) [ 323.855176] ? kasan_check_write+0x14/0x20 [ 323.870048] 2*8kB [ 323.870255] ion_ioctl+0xe2/0x1b6 [ 323.875244] (UM) [ 323.879127] ? ion_alloc.cold.15+0x32/0x32 [ 323.890116] 22*16kB [ 323.890197] do_vfs_ioctl+0x180/0xfb0 [ 323.895021] (UME) [ 323.900059] ? __fget+0x1ad/0x2f0 [ 323.900070] ? ioctl_preallocate+0x1a0/0x1a0 [ 323.900077] ? __fget+0x1ca/0x2f0 [ 323.900088] ? security_file_ioctl+0x6a/0xa0 [ 323.900094] ? SyS_clock_settime+0x1a0/0x1a0 [ 323.900097] ? security_file_ioctl+0x6a/0xa0 [ 323.900107] SyS_ioctl+0x74/0x80 [ 323.920052] 27*32kB [ 323.920764] ? do_vfs_ioctl+0xfb0/0xfb0 [ 323.922904] (UM) [ 323.927756] do_syscall_64+0x1c7/0x5b0 [ 323.940046] 3*64kB [ 323.940517] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.944910] (UME) [ 323.946883] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 323.970059] 2*128kB [ 323.971156] RIP: 0033:0x45af49 [ 323.974595] (ME) [ 323.979004] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 [ 323.990049] 4*256kB [ 323.991215] ORIG_RAX: 0000000000000010 [ 323.995620] (UME) [ 323.998984] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 324.010054] 3*512kB [ 324.011150] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 324.013385] (UME) [ 324.018214] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 324.030062] 2*1024kB [ 324.030998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 324.033050] (ME) [ 324.038397] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 324.094998] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 324.109185] CPU: 1 PID: 8011 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 324.116987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.126339] Call Trace: [ 324.128939] dump_stack+0xf7/0x13b [ 324.131227] Mem-Info: [ 324.132474] warn_alloc.cold.110+0xa2/0x1be [ 324.134884] active_anon:5352 inactive_anon:196 isolated_anon:0 [ 324.134884] active_file:17 inactive_file:16 isolated_file:0 [ 324.134884] unevictable:0 dirty:0 writeback:0 unstable:0 [ 324.134884] slab_reclaimable:13099 slab_unreclaimable:98528 [ 324.134884] mapped:2 shmem:250 pagetables:417 bounce:0 [ 324.134884] free:14012 free_pcp:187 free_cma:0 [ 324.139190] ? zone_watermark_ok_safe+0x260/0x260 [ 324.177362] ? usleep_range+0x120/0x120 [ 324.181791] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 324.186911] ? call_timer_fn+0x570/0x570 [ 324.190975] ? unreserve_highatomic_pageblock+0x315/0x450 [ 324.196534] __alloc_pages_slowpath+0x2052/0x2650 [ 324.201382] ? warn_alloc+0x100/0x100 [ 324.205176] ? get_page_from_freelist+0x1046/0x23b0 [ 324.210195] ? __might_sleep+0x93/0xb0 [ 324.214083] __alloc_pages_nodemask+0x60d/0x770 [ 324.218744] ? retint_kernel+0x2d/0x2d [ 324.220086] Node 0 active_anon:21292kB inactive_anon:772kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 324.222625] ? __alloc_pages_slowpath+0x2650/0x2650 [ 324.254483] ? wait_for_completion+0x440/0x440 [ 324.259088] alloc_pages_current+0xd6/0x1b0 [ 324.263413] ion_page_pool_alloc+0x102/0x180 [ 324.267830] ion_system_heap_allocate+0x14e/0x930 [ 324.272670] ? do_raw_spin_unlock+0x16a/0x250 [ 324.272936] syz-executor.5 cpuset= [ 324.277159] ? ion_system_heap_free+0x270/0x270 [ 324.277160] syz5 mems_allowed=0-1 [ 324.280688] ion_alloc+0x27f/0x770 [ 324.280697] ? ion_dma_buf_release+0x40/0x40 [ 324.280708] ? kasan_check_write+0x14/0x20 [ 324.280714] ion_ioctl+0xe2/0x1b6 [ 324.280719] ? ion_alloc.cold.15+0x32/0x32 [ 324.280732] do_vfs_ioctl+0x180/0xfb0 [ 324.280738] ? __fget+0x1ad/0x2f0 [ 324.280744] ? ioctl_preallocate+0x1a0/0x1a0 [ 324.280752] ? __fget+0x1ca/0x2f0 [ 324.280764] ? security_file_ioctl+0x6a/0xa0 [ 324.320444] Node 1 active_anon:116kB inactive_anon:12kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 324.324266] ? SyS_clock_settime+0x1a0/0x1a0 [ 324.324276] ? security_file_ioctl+0x6a/0xa0 [ 324.327719] Node 0 [ 324.332137] SyS_ioctl+0x74/0x80 [ 324.332145] ? do_vfs_ioctl+0xfb0/0xfb0 [ 324.332152] do_syscall_64+0x1c7/0x5b0 [ 324.332157] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.332169] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 324.332174] RIP: 0033:0x45af49 [ 324.332176] RSP: 002b:00007f47fc926c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.332183] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 324.332186] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 324.332188] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 324.332191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47fc9276d4 [ 324.332193] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 324.339609] CPU: 1 PID: 7961 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 324.400105] DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 324.401707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.408972] lowmem_reserve[]: [ 324.416243] Call Trace: [ 324.416263] dump_stack+0xf7/0x13b [ 324.416273] warn_alloc.cold.110+0xa2/0x1be [ 324.416278] ? zone_watermark_ok_safe+0x260/0x260 [ 324.416284] ? usleep_range+0x120/0x120 [ 324.416290] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 324.416298] ? call_timer_fn+0x570/0x570 [ 324.416303] ? unreserve_highatomic_pageblock+0x315/0x450 [ 324.416312] __alloc_pages_slowpath+0x2052/0x2650 [ 324.416327] ? warn_alloc+0x100/0x100 [ 324.442491] 0 [ 324.445921] ? get_page_from_freelist+0x1046/0x23b0 [ 324.471594] 2570 [ 324.480805] ? __might_sleep+0x93/0xb0 [ 324.480816] __alloc_pages_nodemask+0x60d/0x770 [ 324.480825] ? trace_hardirqs_off+0x10/0x10 [ 324.480835] ? __mutex_unlock_slowpath+0x29b/0x7e0 [ 324.483925] 2570 [ 324.486504] ? __alloc_pages_slowpath+0x2650/0x2650 [ 324.490079] 2570 [ 324.494427] ? wait_for_completion+0x440/0x440 [ 324.499247] 2570 [ 324.503212] alloc_pages_current+0xd6/0x1b0 [ 324.503223] ion_page_pool_alloc+0x102/0x180 [ 324.503229] ion_system_heap_allocate+0x14e/0x930 [ 324.503236] ? do_raw_spin_unlock+0x16a/0x250 [ 324.503243] ? ion_system_heap_free+0x270/0x270 [ 324.503251] ion_alloc+0x27f/0x770 [ 324.503259] ? ion_dma_buf_release+0x40/0x40 [ 324.503270] ? kasan_check_write+0x14/0x20 [ 324.512414] ion_ioctl+0xe2/0x1b6 [ 324.512420] ? ion_alloc.cold.15+0x32/0x32 [ 324.512432] do_vfs_ioctl+0x180/0xfb0 [ 324.512438] ? __fget+0x1ad/0x2f0 [ 324.512444] ? ioctl_preallocate+0x1a0/0x1a0 [ 324.512452] ? __fget+0x1ca/0x2f0 [ 324.512463] ? security_file_ioctl+0x6a/0xa0 [ 324.512469] ? SyS_clock_settime+0x1a0/0x1a0 [ 324.512473] ? security_file_ioctl+0x6a/0xa0 [ 324.518010] Node 0 [ 324.522839] SyS_ioctl+0x74/0x80 [ 324.522845] ? do_vfs_ioctl+0xfb0/0xfb0 [ 324.522852] do_syscall_64+0x1c7/0x5b0 [ 324.522857] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.522869] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 324.522875] RIP: 0033:0x45af49 [ 324.526670] DMA32 free:19048kB min:36384kB low:45480kB high:54576kB active_anon:21288kB inactive_anon:772kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1616kB bounce:0kB free_pcp:628kB local_pcp:628kB free_cma:0kB [ 324.528445] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 [ 324.533536] lowmem_reserve[]: [ 324.535510] ORIG_RAX: 0000000000000010 [ 324.539515] 0 [ 324.544200] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 324.544204] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 324.544207] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 324.544209] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 324.544212] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 324.550802] 2*2048kB [ 324.553895] 0 [ 324.555568] (UE) [ 324.563993] 0 [ 324.570468] 0*4096kB [ 324.573962] 0 [ 324.578241] = 10388kB [ 324.578245] Node 0 [ 324.585959] 0 [ 324.590698] DMA32: [ 324.595839] 340*4kB [ 324.603145] Node 0 [ 324.607497] (UME) [ 324.608017] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 324.612295] 139*8kB (UE) 26*16kB (UE) 495*32kB (UE) 2*64kB (U) 2*128kB (U) 0*256kB [ 324.616109] lowmem_reserve[]: [ 324.619554] 0*512kB [ 324.626853] 0 [ 324.630429] 0*1024kB [ 324.632092] 0 [ 324.636277] 0*2048kB [ 324.643792] warn_alloc_show_mem: 1 callbacks suppressed [ 324.643796] Mem-Info: [ 324.649103] 0*4096kB [ 324.650467] 0 [ 324.654313] = 19112kB [ 324.654317] Node 0 [ 324.659150] 0 [ 324.666567] Normal: [ 324.682831] active_anon:5352 inactive_anon:196 isolated_anon:0 [ 324.682831] active_file:17 inactive_file:16 isolated_file:0 [ 324.682831] unevictable:0 dirty:0 writeback:0 unstable:0 [ 324.682831] slab_reclaimable:13099 slab_unreclaimable:98503 [ 324.682831] mapped:2 shmem:250 pagetables:417 bounce:0 [ 324.682831] free:14012 free_pcp:202 free_cma:0 [ 324.710079] 0*4kB [ 324.713683] 0 [ 324.717608] 0*8kB [ 324.740055] 0*16kB [ 324.749724] Node 0 active_anon:21292kB inactive_anon:772kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 324.764723] 0*32kB [ 324.768605] Node 1 active_anon:116kB inactive_anon:12kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 324.773463] 0*64kB [ 324.774556] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 324.774571] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 324.774588] Node 0 [ 324.802285] 0*128kB [ 324.810189] Node 1 [ 324.822945] 0*256kB [ 324.828788] Normal free:26612kB min:53504kB low:66880kB high:80256kB active_anon:116kB inactive_anon:12kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:52kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 324.828900] 0*512kB [ 324.831400] lowmem_reserve[]: [ 324.890390] 0*1024kB [ 324.932996] DMA32 free:26344kB min:36384kB low:45480kB high:54576kB active_anon:21288kB inactive_anon:772kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1616kB bounce:0kB free_pcp:688kB local_pcp:688kB free_cma:0kB [ 325.053813] 0*2048kB 0*4096kB = 0kB [ 325.057495] Node 1 Normal: 260*4kB (U) 21*8kB (UME) 194*16kB (UME) 15*32kB (UME) 1884*64kB (UM) 117*128kB (UM) 4*256kB (UM) 5*512kB (UM) 148*1024kB (U) 55*2048kB (U) 0*4096kB = 408120kB [ 325.100111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.109019] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 325.110111] 0 0 0 0 0 [ 325.142706] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 22*16kB (UME) 27*32kB (UM) 3*64kB (UME) 3*128kB (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10516kB [ 325.170759] Node 0 DMA32: 339*4kB (UME) 127*8kB (UE) 26*16kB (UE) 496*32kB (UE) 2665*64kB (UM) 334*128kB (U) 44*256kB (U) 0*512kB 5*1024kB (U) 0*2048kB 0*4096kB = 248356kB [ 325.193345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.200118] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 325.223312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 325.230107] Node 1 Normal: 260*4kB (U) 21*8kB (UME) 194*16kB (UME) 15*32kB (UME) 2818*64kB (UM) 333*128kB (UM) 80*256kB (UM) 43*512kB (UM) 148*1024kB (U) 55*2048kB (U) 0*4096kB = 534456kB [ 325.240045] 283 total pagecache pages [ 325.270115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.278987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 325.281239] 0 pages in swap cache [ 325.300654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.310132] Swap cache stats: add 0, delete 0, find 0/0 [ 325.315874] Free swap = 0kB [ 325.318891] Total swap = 0kB [ 325.320116] lowmem_reserve[]: 0 0 0 0 0 [ 325.326034] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 325.340159] 1965979 pages RAM [ 325.352447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 325.373062] 0 pages HighMem/MovableOnly [ 325.377073] 335868 pages reserved [ 325.380112] 283 total pagecache pages [ 325.384325] 0 pages in swap cache [ 325.387774] Swap cache stats: add 0, delete 0, find 0/0 [ 325.390114] 0 pages cma reserved [ 325.403273] lowmem_reserve[]: 0 0 0 0 0 [ 325.407313] Node 1 Normal free:840248kB min:53504kB low:66880kB high:80256kB active_anon:116kB inactive_anon:12kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:52kB bounce:0kB free_pcp:820kB local_pcp:700kB free_cma:0kB [ 325.410141] Free swap = 0kB [ 325.460092] Total swap = 0kB [ 325.463147] 1965979 pages RAM [ 325.466257] 0 pages HighMem/MovableOnly [ 325.480090] 335868 pages reserved [ 325.490095] 0 pages cma reserved [ 325.493497] Out of memory: Kill process 7217 (syz-execprog) score 1 or sacrifice child [ 325.510175] Killed process 7894 (syz-executor.2) total-vm:37644kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 325.530744] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 325.534448] lowmem_reserve[]: 0 0 0 0 0 [ 325.560678] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 22*16kB (UME) 27*32kB (UM) 16*64kB (UME) 4*128kB (UME) 4*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11988kB [ 325.560850] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 325.604876] CPU: 0 PID: 8010 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 325.612709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.620104] Node 0 [ 325.622058] Call Trace: [ 325.622059] DMA32: 2380*4kB [ 325.624292] dump_stack+0xf7/0x13b [ 325.626853] (UME) [ 325.630085] warn_alloc.cold.110+0xa2/0x1be [ 325.630092] ? zone_watermark_ok_safe+0x260/0x260 [ 325.630101] ? wake_up_q+0x9c/0xe0 [ 325.630110] ? __mutex_unlock_slowpath+0x29b/0x7e0 [ 325.630123] __alloc_pages_slowpath+0x2052/0x2650 [ 325.658433] ? warn_alloc+0x100/0x100 [ 325.662235] ? get_page_from_freelist+0x1046/0x23b0 [ 325.667256] ? __might_sleep+0x93/0xb0 [ 325.670075] 445*8kB (UE) [ 325.671135] __alloc_pages_nodemask+0x60d/0x770 [ 325.671143] ? __alloc_pages_slowpath+0x2650/0x2650 [ 325.673982] 151*16kB [ 325.678655] ? wait_for_completion+0x440/0x440 [ 325.690723] ? __list_del_entry_valid+0xb6/0xf3 [ 325.695479] alloc_pages_current+0xd6/0x1b0 [ 325.699823] ion_page_pool_alloc+0x102/0x180 [ 325.704236] ion_system_heap_allocate+0x14e/0x930 [ 325.709101] ? ion_system_heap_free+0x270/0x270 [ 325.710085] (UE) 597*32kB [ 325.713804] ion_alloc+0x216/0x770 [ 325.713815] ? ion_dma_buf_release+0x40/0x40 [ 325.716653] (UME) [ 325.720318] ? kasan_check_write+0x14/0x20 [ 325.720329] ion_ioctl+0xe2/0x1b6 [ 325.720335] ? ion_alloc.cold.15+0x32/0x32 [ 325.720347] do_vfs_ioctl+0x180/0xfb0 [ 325.720353] ? __fget+0x1ad/0x2f0 [ 325.720359] ? ioctl_preallocate+0x1a0/0x1a0 [ 325.720367] ? __fget+0x1ca/0x2f0 [ 325.750079] 3251*64kB [ 325.750485] ? security_file_ioctl+0x6a/0xa0 [ 325.753907] (UME) [ 325.756389] ? SyS_clock_settime+0x1a0/0x1a0 [ 325.767312] ? security_file_ioctl+0x6a/0xa0 [ 325.771723] SyS_ioctl+0x74/0x80 [ 325.775090] ? do_vfs_ioctl+0xfb0/0xfb0 [ 325.779146] do_syscall_64+0x1c7/0x5b0 [ 325.780096] 1505*128kB [ 325.783027] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.783032] (UM) [ 325.785607] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 325.798025] RIP: 0033:0x45af49 [ 325.801294] RSP: 002b:00007ffa6e582c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.809001] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 325.816356] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 325.820072] 476*256kB [ 325.823617] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 325.823622] (U) [ 325.826095] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5836d4 [ 325.826099] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 325.856371] 110*512kB (U) 9*1024kB (UM) 0*2048kB 0*4096kB = 622696kB [ 325.870106] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 325.881237] Node 1 Normal: 389*4kB (UM) 288*8kB (UME) 365*16kB (UME) 215*32kB (UME) 3949*64kB (UM) 1130*128kB (UM) 450*256kB (UM) 216*512kB (UM) 224*1024kB (UM) 64*2048kB (U) 2*4096kB (U) = 1008388kB [ 325.910345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.919769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 325.930510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.937604] warn_alloc_show_mem: 2 callbacks suppressed [ 325.937608] Mem-Info: [ 325.947986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 325.948022] active_anon:5327 inactive_anon:196 isolated_anon:0 [ 325.948022] active_file:266 inactive_file:759 isolated_file:0 [ 325.948022] unevictable:0 dirty:0 writeback:0 unstable:0 [ 325.948022] slab_reclaimable:13080 slab_unreclaimable:98504 [ 325.948022] mapped:677 shmem:250 pagetables:417 bounce:0 [ 325.948022] free:454600 free_pcp:667 free_cma:0 [ 325.958244] 1343 total pagecache pages [ 325.994578] Node 0 active_anon:21192kB inactive_anon:772kB active_file:1108kB inactive_file:3200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3008kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 325.994798] 0 pages in swap cache [ 326.022885] Swap cache stats: add 0, delete 0, find 0/0 [ 326.029627] Node 1 active_anon:116kB inactive_anon:12kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 326.032249] Free swap = 0kB [ 326.063675] Total swap = 0kB [ 326.065390] Node 0 DMA free:11988kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 326.068518] 1965979 pages RAM [ 326.097001] 0 pages HighMem/MovableOnly [ 326.103356] 335868 pages reserved [ 326.106838] 0 pages cma reserved [ 326.109520] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 326.117380] Node 0 DMA32 free:792096kB min:36384kB low:45480kB high:54576kB active_anon:21164kB inactive_anon:772kB active_file:1148kB inactive_file:4240kB unevictable:0kB writepending:176kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6848kB pagetables:1508kB bounce:0kB free_pcp:700kB local_pcp:528kB free_cma:0kB [ 326.152950] lowmem_reserve[]: 0 0 0 0 0 [ 326.158643] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 326.193872] lowmem_reserve[]: 0 0 0 0 0 [ 326.203608] Node 1 Normal free:1008388kB min:53504kB low:66880kB high:80256kB active_anon:108kB inactive_anon:12kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:1340kB local_pcp:636kB free_cma:0kB [ 326.243107] lowmem_reserve[]: 0 0 0 0 0 [ 326.249609] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 22*16kB (UME) 27*32kB (UM) 16*64kB (UME) 4*128kB (UME) 4*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11988kB [ 326.273438] Node 0 DMA32: 478*4kB (ME) 148*8kB (ME) 1741*16kB (UE) 2176*32kB (UE) 3269*64kB (UME) 1522*128kB (UM) 568*256kB (U) 109*512kB (U) 6*1024kB (UM) 0*2048kB 0*4096kB = 711976kB [ 326.295806] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 326.307455] Node 1 Normal: 389*4kB (UM) 288*8kB (UME) 365*16kB (UME) 215*32kB (UME) 3949*64kB (UM) 1130*128kB (UM) 450*256kB (UM) 216*512kB (UM) 224*1024kB (UM) 64*2048kB (U) 2*4096kB (U) = 1008388kB [ 326.335487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.349685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 326.367423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.384599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 326.395332] 2684 total pagecache pages [ 326.406387] 0 pages in swap cache [ 326.410489] Swap cache stats: add 0, delete 0, find 0/0 2020/03/09 03:20:36 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe 2020/03/09 03:20:36 executed programs: 99 [ 326.429520] Free swap = 0kB [ 326.453266] Total swap = 0kB [ 326.459784] 1965979 pages RAM [ 326.469958] 0 pages HighMem/MovableOnly [ 326.479654] 335868 pages reserved [ 326.489780] 0 pages cma reserved [ 326.904327] device bridge_slave_1 left promiscuous mode [ 326.909936] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.983629] device bridge_slave_0 left promiscuous mode [ 326.989278] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.062481] device veth1_vlan left promiscuous mode [ 327.067611] device veth0_vlan left promiscuous mode [ 327.273418] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 327.294317] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 327.326654] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 327.345496] CPU: 0 PID: 8023 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 327.353487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.362834] Call Trace: [ 327.365457] dump_stack+0xf7/0x13b [ 327.368991] warn_alloc.cold.110+0xa2/0x1be [ 327.373390] ? zone_watermark_ok_safe+0x260/0x260 [ 327.378400] ? __alloc_pages_direct_compact+0xc2/0x330 [ 327.383693] __alloc_pages_slowpath+0x2052/0x2650 [ 327.388561] ? trace_hardirqs_off+0x10/0x10 [ 327.393218] ? warn_alloc+0x100/0x100 [ 327.397061] ? get_page_from_freelist+0x1046/0x23b0 [ 327.402099] ? __might_sleep+0x93/0xb0 [ 327.406101] __alloc_pages_nodemask+0x60d/0x770 [ 327.410860] ? trace_hardirqs_off+0x10/0x10 [ 327.415169] ? __alloc_pages_slowpath+0x2650/0x2650 [ 327.420172] ? wait_for_completion+0x440/0x440 [ 327.424995] alloc_pages_current+0xd6/0x1b0 [ 327.429317] ion_page_pool_alloc+0x102/0x180 [ 327.434204] ion_system_heap_allocate+0x14e/0x930 [ 327.443680] ? ion_system_heap_free+0x270/0x270 [ 327.448527] ion_alloc+0x216/0x770 [ 327.452151] ? ion_dma_buf_release+0x40/0x40 [ 327.456808] ? kasan_check_write+0x14/0x20 [ 327.461293] ion_ioctl+0xe2/0x1b6 [ 327.464757] ? ion_alloc.cold.15+0x32/0x32 [ 327.469110] do_vfs_ioctl+0x180/0xfb0 [ 327.473008] ? __fget+0x1ad/0x2f0 [ 327.476459] ? ioctl_preallocate+0x1a0/0x1a0 [ 327.481051] ? __fget+0x1ca/0x2f0 [ 327.484525] ? security_file_ioctl+0x6a/0xa0 [ 327.489038] ? SyS_clock_settime+0x1a0/0x1a0 [ 327.493446] ? security_file_ioctl+0x6a/0xa0 [ 327.497843] SyS_ioctl+0x74/0x80 [ 327.501363] ? do_vfs_ioctl+0xfb0/0xfb0 [ 327.505692] do_syscall_64+0x1c7/0x5b0 [ 327.509571] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.514426] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 327.519606] RIP: 0033:0x45af49 [ 327.522781] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.530475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 327.538086] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 327.545364] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 327.552728] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 327.560467] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 327.575447] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 327.590235] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 327.595676] CPU: 0 PID: 8016 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 327.603707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.613061] Call Trace: [ 327.615660] dump_stack+0xf7/0x13b [ 327.619200] warn_alloc.cold.110+0xa2/0x1be [ 327.623511] ? zone_watermark_ok_safe+0x260/0x260 [ 327.628903] ? __alloc_pages_direct_compact+0xc2/0x330 [ 327.634198] __alloc_pages_slowpath+0x2052/0x2650 [ 327.639080] ? trace_hardirqs_off+0x10/0x10 [ 327.643427] ? warn_alloc+0x100/0x100 [ 327.647240] ? get_page_from_freelist+0x1046/0x23b0 [ 327.652276] ? __might_sleep+0x93/0xb0 [ 327.656171] __alloc_pages_nodemask+0x60d/0x770 [ 327.660850] ? __alloc_pages_slowpath+0x2650/0x2650 [ 327.665873] ? wait_for_completion+0x440/0x440 [ 327.670470] ? ion_page_pool_alloc+0x8f/0x180 [ 327.675070] alloc_pages_current+0xd6/0x1b0 [ 327.679401] ion_page_pool_alloc+0x102/0x180 [ 327.683830] ion_system_heap_allocate+0x14e/0x930 [ 327.688825] ? ion_system_heap_free+0x270/0x270 [ 327.693498] ion_alloc+0x216/0x770 [ 327.697117] ? ion_dma_buf_release+0x40/0x40 [ 327.701543] ? kasan_check_write+0x14/0x20 [ 327.705793] ion_ioctl+0xe2/0x1b6 [ 327.709238] ? ion_alloc.cold.15+0x32/0x32 [ 327.713478] do_vfs_ioctl+0x180/0xfb0 [ 327.717292] ? __fget+0x1ad/0x2f0 [ 327.720822] ? ioctl_preallocate+0x1a0/0x1a0 [ 327.725248] ? __fget+0x1ca/0x2f0 [ 327.728713] ? security_file_ioctl+0x6a/0xa0 [ 327.733114] ? SyS_clock_settime+0x1a0/0x1a0 [ 327.737528] ? security_file_ioctl+0x6a/0xa0 [ 327.741934] SyS_ioctl+0x74/0x80 [ 327.745448] ? do_vfs_ioctl+0xfb0/0xfb0 [ 327.749444] do_syscall_64+0x1c7/0x5b0 [ 327.753334] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.758171] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 327.763374] RIP: 0033:0x45af49 [ 327.766558] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.774262] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 327.781519] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 327.788796] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 327.796069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 327.803398] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 327.825733] Mem-Info: [ 327.828225] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 327.828330] rs:main Q:Reg cpuset= [ 327.841648] active_anon:5370 inactive_anon:196 isolated_anon:0 [ 327.841648] active_file:56 inactive_file:45 isolated_file:5 [ 327.841648] unevictable:0 dirty:22 writeback:0 unstable:0 [ 327.841648] slab_reclaimable:13079 slab_unreclaimable:97863 [ 327.841648] mapped:37 shmem:250 pagetables:416 bounce:0 [ 327.841648] free:13940 free_pcp:28 free_cma:0 [ 327.880105] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 327.883079] / mems_allowed=0-1 [ 327.885503] CPU: 0 PID: 8018 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 327.885508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.905814] Call Trace: [ 327.908398] dump_stack+0xf7/0x13b [ 327.911934] warn_alloc.cold.110+0xa2/0x1be [ 327.916241] ? zone_watermark_ok_safe+0x260/0x260 [ 327.921106] ? __alloc_pages_direct_compact+0xc2/0x330 [ 327.926384] __alloc_pages_slowpath+0x2052/0x2650 [ 327.931266] ? trace_hardirqs_off+0x10/0x10 [ 327.935573] ? warn_alloc+0x100/0x100 [ 327.939386] ? get_page_from_freelist+0x1046/0x23b0 [ 327.944391] ? __might_sleep+0x93/0xb0 [ 327.948276] __alloc_pages_nodemask+0x60d/0x770 [ 327.952931] ? __alloc_pages_slowpath+0x2650/0x2650 [ 327.957949] ? wait_for_completion+0x440/0x440 [ 327.963844] alloc_pages_current+0xd6/0x1b0 [ 327.968167] ion_page_pool_alloc+0x102/0x180 [ 327.972563] ion_system_heap_allocate+0x14e/0x930 [ 327.977391] ? ion_system_heap_free+0x270/0x270 [ 327.982050] ion_alloc+0x216/0x770 [ 327.985580] ? ion_dma_buf_release+0x40/0x40 [ 327.989976] ? kasan_check_write+0x14/0x20 [ 327.994198] ion_ioctl+0xe2/0x1b6 [ 327.997635] ? ion_alloc.cold.15+0x32/0x32 [ 328.001880] do_vfs_ioctl+0x180/0xfb0 [ 328.005676] ? __fget+0x1ad/0x2f0 [ 328.009243] ? ioctl_preallocate+0x1a0/0x1a0 [ 328.013698] ? __fget+0x1ca/0x2f0 [ 328.017860] ? security_file_ioctl+0x6a/0xa0 [ 328.022265] ? SyS_clock_settime+0x1a0/0x1a0 [ 328.026664] ? security_file_ioctl+0x6a/0xa0 [ 328.031084] SyS_ioctl+0x74/0x80 [ 328.034434] ? do_vfs_ioctl+0xfb0/0xfb0 [ 328.038479] do_syscall_64+0x1c7/0x5b0 [ 328.042370] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.047201] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 328.052398] RIP: 0033:0x45af49 [ 328.055582] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.063290] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 328.070538] syz-executor.5: [ 328.070550] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 328.070557] page allocation failure: order:4 [ 328.073553] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 328.090055] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 328.092475] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 328.092479] (null) [ 328.099577] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 328.123877] CPU: 1 PID: 6992 Comm: rs:main Q:Reg Not tainted 4.14.172-syzkaller #0 [ 328.131612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.132404] Node 0 active_anon:21404kB inactive_anon:776kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):116kB mapped:8kB dirty:0kB writeback:4kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 328.140966] Call Trace: [ 328.140985] dump_stack+0xf7/0x13b [ 328.140997] dump_header+0x160/0x63f [ 328.141006] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 328.141014] ? ___ratelimit+0x243/0x519 [ 328.141020] ? do_raw_spin_unlock+0x16a/0x250 [ 328.141027] oom_kill_process.cold.24+0xb/0xa1a [ 328.141031] ? out_of_memory+0x7f9/0x1030 [ 328.141039] ? lock_downgrade+0x7f0/0x7f0 [ 328.141049] out_of_memory+0x2b0/0x1030 [ 328.169008] Node 1 active_anon:144kB inactive_anon:8kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 328.170642] ? oom_killer_disable+0x1a0/0x1a0 [ 328.170651] ? __alloc_pages_slowpath+0xb69/0x2650 [ 328.170658] __alloc_pages_slowpath+0x1ef3/0x2650 [ 328.174358] Node 0 [ 328.178087] ? warn_alloc+0x100/0x100 [ 328.183332] DMA free:10376kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.187167] ? get_page_from_freelist+0x1046/0x23b0 [ 328.191816] lowmem_reserve[]: [ 328.196423] ? __might_sleep+0x93/0xb0 [ 328.200712] 0 [ 328.204704] __alloc_pages_nodemask+0x60d/0x770 [ 328.208702] 2570 [ 328.234736] ? __alloc_pages_slowpath+0x2650/0x2650 [ 328.234746] ? find_get_entry+0xd7/0x5a0 [ 328.234755] ? lock_downgrade+0x7f0/0x7f0 [ 328.234763] ? radix_tree_lookup_slot+0x55/0x90 [ 328.234772] alloc_pages_current+0xd6/0x1b0 [ 328.234778] __page_cache_alloc+0x1da/0x330 [ 328.234782] ? trace_hardirqs_off+0x10/0x10 [ 328.234789] pagecache_get_page+0x129/0x7c0 [ 328.234796] grab_cache_page_write_begin+0x55/0x90 [ 328.234804] ? rcu_read_lock_sched_held+0x108/0x120 [ 328.234813] ext4_da_write_begin+0x243/0xd30 [ 328.234822] ? ext4_write_begin+0x10e0/0x10e0 [ 328.234830] ? balance_dirty_pages_ratelimited+0x751/0x14e0 [ 328.234837] generic_perform_write+0x271/0x450 [ 328.234844] ? __mark_inode_dirty+0x58c/0xe80 [ 328.234853] ? page_endio+0x410/0x410 [ 328.234859] ? file_update_time+0x22d/0x360 [ 328.234862] ? __lock_acquire+0x6a4/0x4500 [ 328.234869] ? current_time+0xa0/0xa0 [ 328.239450] 2570 [ 328.244327] ? lock_acquire+0x173/0x400 [ 328.244336] ? ext4_file_write_iter+0x1db/0xe40 [ 328.244350] __generic_file_write_iter+0x201/0x580 [ 328.244359] ext4_file_write_iter+0x27a/0xe40 [ 328.244364] ? trace_hardirqs_off+0x10/0x10 [ 328.244370] ? ext4_file_mmap+0x260/0x260 [ 328.244377] ? trace_hardirqs_on+0x10/0x10 [ 328.244383] ? trace_hardirqs_off+0x10/0x10 [ 328.244390] __vfs_write+0x413/0x840 [ 328.244394] ? trace_hardirqs_off+0x10/0x10 [ 328.244399] ? kernel_read+0x130/0x130 [ 328.244404] ? __lock_is_held+0xb5/0x140 [ 328.244422] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 328.244429] ? __sb_start_write+0x1f3/0x2a0 [ 328.244436] vfs_write+0x150/0x4f0 [ 328.244442] SyS_write+0x100/0x250 [ 328.244448] ? SyS_read+0x250/0x250 [ 328.244457] ? do_syscall_64+0x4c/0x5b0 [ 328.244463] ? SyS_read+0x250/0x250 [ 328.244468] do_syscall_64+0x1c7/0x5b0 [ 328.244473] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.244486] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 328.249743] 2570 [ 328.251537] RIP: 0033:0x7f79068fd19d [ 328.251540] RSP: 002b:00007f7904e9df90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 328.251546] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 00007f79068fd19d [ 328.251549] RDX: 0000000000000400 RSI: 00000000020bc340 RDI: 0000000000000001 [ 328.251551] RBP: 00000000020bc340 R08: 0000000002115c80 R09: 302039202072614d [ 328.251554] R10: 2037333a30323a33 R11: 0000000000000293 R12: 0000000000000000 [ 328.251556] R13: 00007f7904e9e410 R14: 0000000002115c80 R15: 00000000020bc140 [ 328.259544] syz-executor.5 cpuset= [ 328.285353] 2570 [ 328.287087] syz5 [ 328.293428] mems_allowed=0-1 [ 328.295112] Node 0 [ 328.299763] CPU: 1 PID: 8021 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 328.302836] DMA32 free:18240kB min:36384kB low:45480kB high:54576kB active_anon:21400kB inactive_anon:776kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:4kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1620kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 328.306818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.306822] Call Trace: [ 328.310942] lowmem_reserve[]: [ 328.315038] dump_stack+0xf7/0x13b [ 328.319762] 0 [ 328.324076] warn_alloc.cold.110+0xa2/0x1be [ 328.324083] ? zone_watermark_ok_safe+0x260/0x260 [ 328.324095] ? __alloc_pages_direct_compact+0xc2/0x330 [ 328.324102] __alloc_pages_slowpath+0x2052/0x2650 [ 328.324120] ? trace_hardirqs_off+0x10/0x10 [ 328.324135] ? warn_alloc+0x100/0x100 [ 328.324141] ? get_page_from_freelist+0x1046/0x23b0 [ 328.324154] ? __might_sleep+0x93/0xb0 [ 328.324161] __alloc_pages_nodemask+0x60d/0x770 [ 328.328547] 0 [ 328.332781] ? trace_hardirqs_off+0x10/0x10 [ 328.332788] ? __alloc_pages_slowpath+0x2650/0x2650 [ 328.332803] ? wait_for_completion+0x440/0x440 [ 328.332814] alloc_pages_current+0xd6/0x1b0 [ 328.332824] ion_page_pool_alloc+0x102/0x180 [ 328.337294] 0 [ 328.342435] ion_system_heap_allocate+0x14e/0x930 [ 328.342444] ? ion_system_heap_free+0x270/0x270 [ 328.342453] ion_alloc+0x216/0x770 [ 328.342461] ? ion_dma_buf_release+0x40/0x40 [ 328.342472] ? kasan_check_write+0x14/0x20 [ 328.342478] ion_ioctl+0xe2/0x1b6 [ 328.342483] ? ion_alloc.cold.15+0x32/0x32 [ 328.342494] do_vfs_ioctl+0x180/0xfb0 [ 328.342500] ? __fget+0x1ad/0x2f0 [ 328.342507] ? ioctl_preallocate+0x1a0/0x1a0 [ 328.342514] ? __fget+0x1ca/0x2f0 [ 328.342526] ? security_file_ioctl+0x6a/0xa0 [ 328.342534] ? SyS_clock_settime+0x1a0/0x1a0 [ 328.347585] 0 [ 328.351963] ? security_file_ioctl+0x6a/0xa0 [ 328.351975] SyS_ioctl+0x74/0x80 [ 328.351981] ? do_vfs_ioctl+0xfb0/0xfb0 [ 328.351988] do_syscall_64+0x1c7/0x5b0 [ 328.351992] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.352004] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 328.352009] RIP: 0033:0x45af49 [ 328.352012] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.352018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 328.352024] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 328.356512] 0 [ 328.362217] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 328.362221] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 328.362223] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 328.400126] Mem-Info: [ 328.409003] active_anon:5387 inactive_anon:196 isolated_anon:0 [ 328.409003] active_file:7 inactive_file:8 isolated_file:29 [ 328.409003] unevictable:0 dirty:0 writeback:1 unstable:0 [ 328.409003] slab_reclaimable:13079 slab_unreclaimable:97713 [ 328.409003] mapped:2 shmem:250 pagetables:416 bounce:0 [ 328.409003] free:13780 free_pcp:69 free_cma:0 [ 328.413879] Node 0 [ 328.420278] Node 0 active_anon:21404kB inactive_anon:776kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):116kB mapped:8kB dirty:0kB writeback:4kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 328.422061] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.426579] Node 1 active_anon:144kB inactive_anon:8kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 328.429842] lowmem_reserve[]: [ 328.436919] Node 0 [ 328.438048] 0 0 [ 328.442740] DMA free:10376kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.447764] 0 [ 328.456551] lowmem_reserve[]: [ 328.457776] 0 [ 328.461930] 0 [ 328.465912] 0 [ 328.469875] 2570 [ 328.473517] Node 1 Normal free:26772kB min:53504kB low:66880kB high:80256kB active_anon:144kB inactive_anon:8kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.473529] lowmem_reserve[]: 0 0 0 0 0 [ 328.473544] Node 0 DMA: 2*4kB (UM) [ 328.479789] 2570 [ 328.482303] 2*8kB (UM) 3*16kB (UME) 24*32kB (UM) 13*64kB (UME) 4*128kB (UME) 4*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10376kB [ 328.482344] Node 0 DMA32: 584*4kB (UME) 195*8kB (ME) 55*16kB (UME) 21*32kB (UME) 20*64kB (ME) 12*128kB (M) 9*256kB (UM) 7*512kB (UM) 4*1024kB (M) 0*2048kB 0*4096kB = 18248kB [ 328.482390] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 328.482421] Node 1 Normal: 2*4kB (M) 8*8kB (ME) 10*16kB (ME) 10*32kB (UME) 10*64kB (M) 4*128kB (UM) 2*256kB (M) 48*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 328.482470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.482474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 328.482477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.482480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 328.482483] 277 total pagecache pages [ 328.482492] 0 pages in swap cache [ 328.482496] Swap cache stats: add 0, delete 0, find 0/0 [ 328.482499] Free swap = 0kB [ 328.488755] 2570 [ 328.490316] Total swap = 0kB [ 328.490323] 1965979 pages RAM [ 328.490325] 0 pages HighMem/MovableOnly [ 328.490328] 335868 pages reserved [ 328.490330] 0 pages cma reserved [ 329.138081] 2570 [ 329.140882] Node 0 DMA32 free:18256kB min:36384kB low:45480kB high:54576kB active_anon:21400kB inactive_anon:776kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1620kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 329.170331] lowmem_reserve[]: 0 0 0 0 0 [ 329.175289] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.294575] lowmem_reserve[]: 0 0 0 0 0 [ 329.307731] Node 1 Normal free:884168kB min:53504kB low:66880kB high:80256kB active_anon:144kB inactive_anon:8kB active_file:412kB inactive_file:668kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:44kB bounce:0kB free_pcp:1312kB local_pcp:668kB free_cma:0kB [ 329.337057] lowmem_reserve[]: 0 0 0 0 0 [ 329.341324] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 3*16kB (UME) 24*32kB (UM) 13*64kB (UME) 4*128kB (UME) 4*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10376kB [ 329.357457] Node 0 DMA32: 584*4kB (UME) 254*8kB (UME) 57*16kB (UME) 22*32kB (UME) 20*64kB (ME) 40*128kB (UM) 9*256kB (UM) 7*512kB (UM) 4*1024kB (M) 0*2048kB 0*4096kB = 22368kB [ 329.399493] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 329.441482] Node 1 Normal: 1*4kB (U) 3*8kB (UME) 4*16kB (ME) 4*32kB (UME) 0*64kB 1*128kB (M) 2*256kB (UM) 4*512kB (UM) 487*1024kB (U) 129*2048kB (U) 13*4096kB (U) = 819036kB [ 329.457525] device hsr_slave_1 left promiscuous mode [ 329.462874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.472121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 329.480853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.489872] device hsr_slave_0 left promiscuous mode [ 329.495318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 329.504181] 547 total pagecache pages [ 329.508114] 0 pages in swap cache [ 329.511809] Swap cache stats: add 0, delete 0, find 0/0 [ 329.517305] Free swap = 0kB [ 329.520532] Total swap = 0kB [ 329.523692] 1965979 pages RAM [ 329.524057] team0 (unregistering): Port device team_slave_1 removed [ 329.526934] 0 pages HighMem/MovableOnly [ 329.537778] 335868 pages reserved [ 329.541625] 0 pages cma reserved [ 329.545359] Out of memory: Kill process 8015 (syz-executor.3) score 999 or sacrifice child [ 329.554076] Killed process 8018 (syz-executor.3) total-vm:38036kB, anon-rss:128kB, file-rss:0kB, shmem-rss:0kB [ 329.564958] team0 (unregistering): Port device team_slave_0 removed [ 329.587993] oom_reaper: reaped process 8018 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 329.663430] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 329.735521] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 329.888406] bond0 (unregistering): Released all slaves [ 330.051048] oom_reaper: reaped process 8021 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 330.081170] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 330.104937] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 330.130111] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 330.135548] CPU: 0 PID: 7967 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 330.143342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.152704] Call Trace: [ 330.155300] dump_stack+0xf7/0x13b [ 330.158851] warn_alloc.cold.110+0xa2/0x1be [ 330.163180] ? zone_watermark_ok_safe+0x260/0x260 [ 330.168015] ? usleep_range+0x120/0x120 [ 330.171992] ? rcu_read_lock_sched_held+0x108/0x120 [ 330.177871] ? call_timer_fn+0x570/0x570 [ 330.181936] __alloc_pages_slowpath+0x2052/0x2650 [ 330.186781] ? warn_alloc+0x100/0x100 [ 330.190577] ? get_page_from_freelist+0x1046/0x23b0 [ 330.195614] ? __might_sleep+0x93/0xb0 [ 330.199504] __alloc_pages_nodemask+0x60d/0x770 [ 330.200545] syz-executor.3 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 330.204341] ? __alloc_pages_slowpath+0x2650/0x2650 [ 330.204354] ? wait_for_completion+0x440/0x440 [ 330.217772] , order=0, oom_score_adj=1000 [ 330.220222] ? __list_del_entry_valid+0xb6/0xf3 [ 330.220234] alloc_pages_current+0xd6/0x1b0 [ 330.220247] ion_page_pool_alloc+0x102/0x180 [ 330.224899] syz-executor.3 cpuset= [ 330.229350] ion_system_heap_allocate+0x14e/0x930 [ 330.234529] syz3 [ 330.238803] ? do_raw_spin_unlock+0x16a/0x250 [ 330.243234] mems_allowed=0-1 [ 330.246756] ? ion_system_heap_free+0x270/0x270 [ 330.267908] ion_alloc+0x27f/0x770 [ 330.271439] ? ion_dma_buf_release+0x40/0x40 [ 330.275840] ? kasan_check_write+0x14/0x20 [ 330.280058] ion_ioctl+0xe2/0x1b6 [ 330.283504] ? ion_alloc.cold.15+0x32/0x32 [ 330.287728] do_vfs_ioctl+0x180/0xfb0 [ 330.291514] ? __fget+0x1ad/0x2f0 [ 330.294962] ? ioctl_preallocate+0x1a0/0x1a0 [ 330.299728] ? __fget+0x1ca/0x2f0 [ 330.303168] ? security_file_ioctl+0x6a/0xa0 [ 330.307562] ? SyS_clock_settime+0x1a0/0x1a0 [ 330.312049] ? security_file_ioctl+0x6a/0xa0 [ 330.316466] SyS_ioctl+0x74/0x80 [ 330.319821] ? do_vfs_ioctl+0xfb0/0xfb0 [ 330.323931] do_syscall_64+0x1c7/0x5b0 [ 330.327815] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.333106] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.338301] RIP: 0033:0x45af49 [ 330.341659] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.349395] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 330.356789] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 330.364048] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 330.371317] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 330.378576] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 330.385961] CPU: 1 PID: 8018 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 330.393769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.396468] syz-executor.4 cpuset= [ 330.403125] Call Trace: [ 330.403146] dump_stack+0xf7/0x13b [ 330.403157] dump_header+0x160/0x63f [ 330.403165] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 330.403173] ? ___ratelimit+0x243/0x519 [ 330.403180] ? do_raw_spin_unlock+0x16a/0x250 [ 330.403186] oom_kill_process.cold.24+0xb/0xa1a [ 330.403190] ? out_of_memory+0x7f9/0x1030 [ 330.403195] ? lock_downgrade+0x7f0/0x7f0 [ 330.403206] out_of_memory+0x2b0/0x1030 [ 330.403215] ? oom_killer_disable+0x1a0/0x1a0 [ 330.403222] ? __alloc_pages_slowpath+0xb69/0x2650 [ 330.403227] __alloc_pages_slowpath+0x1ef3/0x2650 [ 330.403241] ? warn_alloc+0x100/0x100 [ 330.403247] ? get_page_from_freelist+0x1046/0x23b0 [ 330.403262] ? __might_sleep+0x93/0xb0 [ 330.417647] syz4 [ 330.421821] __alloc_pages_nodemask+0x60d/0x770 [ 330.437811] mems_allowed=0-1 [ 330.439171] ? __alloc_pages_slowpath+0x2650/0x2650 [ 330.460141] syz-executor.5: [ 330.461567] ? wait_for_completion+0x440/0x440 [ 330.465356] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 330.470383] alloc_pages_current+0xd6/0x1b0 [ 330.470396] ion_page_pool_alloc+0x102/0x180 [ 330.470401] ion_system_heap_allocate+0x14e/0x930 [ 330.470409] ? ion_system_heap_free+0x270/0x270 [ 330.470418] ion_alloc+0x216/0x770 [ 330.470427] ? ion_dma_buf_release+0x40/0x40 [ 330.470439] ? kasan_check_write+0x14/0x20 [ 330.493804] (null) [ 330.496579] ion_ioctl+0xe2/0x1b6 [ 330.520119] syz-executor.5 cpuset= [ 330.520395] ? ion_alloc.cold.15+0x32/0x32 [ 330.525040] syz5 [ 330.528578] do_vfs_ioctl+0x180/0xfb0 [ 330.553818] mems_allowed=0-1 [ 330.558157] ? __fget+0x1ad/0x2f0 [ 330.564706] ? ioctl_preallocate+0x1a0/0x1a0 [ 330.569189] ? __fget+0x1ca/0x2f0 [ 330.572648] ? security_file_ioctl+0x6a/0xa0 [ 330.577047] ? SyS_clock_settime+0x1a0/0x1a0 [ 330.581440] ? security_file_ioctl+0x6a/0xa0 [ 330.585847] SyS_ioctl+0x74/0x80 [ 330.589199] ? do_vfs_ioctl+0xfb0/0xfb0 [ 330.593165] do_syscall_64+0x1c7/0x5b0 [ 330.597056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.602099] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.607474] RIP: 0033:0x45af49 [ 330.610656] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.618468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 330.625841] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 330.633116] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.640405] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 330.647809] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 330.655839] CPU: 0 PID: 8010 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 330.656485] syz-executor.3: [ 330.663640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.663643] Call Trace: [ 330.663660] dump_stack+0xf7/0x13b [ 330.663670] warn_alloc.cold.110+0xa2/0x1be [ 330.663675] ? zone_watermark_ok_safe+0x260/0x260 [ 330.663689] ? __alloc_pages_direct_compact+0xc2/0x330 [ 330.666723] syz-executor.5: [ 330.676057] __alloc_pages_slowpath+0x2052/0x2650 [ 330.676072] ? trace_hardirqs_off+0x10/0x10 [ 330.676082] ? warn_alloc+0x100/0x100 [ 330.679508] page allocation failure: order:0 [ 330.682181] ? get_page_from_freelist+0x1046/0x23b0 [ 330.682195] ? __might_sleep+0x93/0xb0 [ 330.682201] __alloc_pages_nodemask+0x60d/0x770 [ 330.682208] ? __alloc_pages_slowpath+0x2650/0x2650 [ 330.682219] ? wait_for_completion+0x440/0x440 [ 330.686529] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 330.691361] alloc_pages_current+0xd6/0x1b0 [ 330.691373] ion_page_pool_alloc+0x102/0x180 [ 330.691379] ion_system_heap_allocate+0x14e/0x930 [ 330.691387] ? do_raw_spin_unlock+0x16a/0x250 [ 330.691394] ? ion_system_heap_free+0x270/0x270 [ 330.700051] page allocation failure: order:0 [ 330.704509] ion_alloc+0x27f/0x770 [ 330.708914] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 330.712721] ? ion_dma_buf_release+0x40/0x40 [ 330.712733] ? kasan_check_write+0x14/0x20 [ 330.712740] ion_ioctl+0xe2/0x1b6 [ 330.712745] ? ion_alloc.cold.15+0x32/0x32 [ 330.712760] do_vfs_ioctl+0x180/0xfb0 [ 330.740056] (null) [ 330.740322] ? __fget+0x1ad/0x2f0 [ 330.747395] syz-executor.3 cpuset= [ 330.751747] ? ioctl_preallocate+0x1a0/0x1a0 [ 330.751759] ? __fget+0x1ca/0x2f0 [ 330.751770] ? security_file_ioctl+0x6a/0xa0 [ 330.751776] ? SyS_clock_settime+0x1a0/0x1a0 [ 330.751780] ? security_file_ioctl+0x6a/0xa0 [ 330.751789] SyS_ioctl+0x74/0x80 [ 330.756318] (null) [ 330.761144] ? do_vfs_ioctl+0xfb0/0xfb0 [ 330.761153] do_syscall_64+0x1c7/0x5b0 [ 330.761158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.761176] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.761182] RIP: 0033:0x45af49 [ 330.761188] RSP: 002b:00007ffa6e582c78 EFLAGS: 00000246 [ 330.770049] syz-executor.5 cpuset= [ 330.770329] ORIG_RAX: 0000000000000010 [ 330.770334] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 330.774729] syz5 [ 330.778250] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 330.778254] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.790051] syz3 [ 330.794037] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5836d4 [ 330.810070] mems_allowed=0-1 [ 330.811048] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 330.818096] warn_alloc_show_mem: 3 callbacks suppressed [ 330.818100] Mem-Info: [ 330.819080] CPU: 1 PID: 8023 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 330.822539] active_anon:5343 inactive_anon:196 isolated_anon:0 [ 330.822539] active_file:13 inactive_file:12 isolated_file:0 [ 330.822539] unevictable:0 dirty:0 writeback:0 unstable:0 [ 330.822539] slab_reclaimable:13069 slab_unreclaimable:97114 [ 330.822539] mapped:2 shmem:250 pagetables:416 bounce:0 [ 330.822539] free:13705 free_pcp:106 free_cma:0 [ 330.826831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.826835] Call Trace: [ 330.838630] Node 0 active_anon:21268kB inactive_anon:776kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 330.839324] dump_stack+0xf7/0x13b [ 330.841509] Node 1 active_anon:104kB inactive_anon:8kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 330.845427] warn_alloc.cold.110+0xa2/0x1be [ 330.849289] Node 0 [ 330.854120] ? zone_watermark_ok_safe+0x260/0x260 [ 330.854128] ? usleep_range+0x120/0x120 [ 330.854134] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 330.854141] ? call_timer_fn+0x570/0x570 [ 330.854146] ? unreserve_highatomic_pageblock+0x315/0x450 [ 330.854155] __alloc_pages_slowpath+0x2052/0x2650 [ 330.854168] ? warn_alloc+0x100/0x100 [ 330.854174] ? get_page_from_freelist+0x1046/0x23b0 [ 330.854187] ? __might_sleep+0x93/0xb0 [ 330.854192] __alloc_pages_nodemask+0x60d/0x770 [ 330.854200] ? __alloc_pages_slowpath+0x2650/0x2650 [ 330.854208] ? wait_for_completion+0x440/0x440 [ 330.854219] alloc_pages_current+0xd6/0x1b0 [ 330.854229] ion_page_pool_alloc+0x102/0x180 [ 330.854234] ion_system_heap_allocate+0x14e/0x930 [ 330.854243] ? ion_system_heap_free+0x270/0x270 [ 330.854252] ion_alloc+0x216/0x770 [ 330.879492] DMA free:10376kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 330.882736] ? ion_dma_buf_release+0x40/0x40 [ 330.882748] ? kasan_check_write+0x14/0x20 [ 330.882754] ion_ioctl+0xe2/0x1b6 [ 330.882759] ? ion_alloc.cold.15+0x32/0x32 [ 330.882771] do_vfs_ioctl+0x180/0xfb0 [ 330.882778] ? __fget+0x1ad/0x2f0 [ 330.882785] ? ioctl_preallocate+0x1a0/0x1a0 [ 330.882793] ? __fget+0x1ca/0x2f0 [ 330.882805] ? security_file_ioctl+0x6a/0xa0 [ 330.882810] ? SyS_clock_settime+0x1a0/0x1a0 [ 330.882814] ? security_file_ioctl+0x6a/0xa0 [ 330.882820] SyS_ioctl+0x74/0x80 [ 330.882826] ? do_vfs_ioctl+0xfb0/0xfb0 [ 330.892407] lowmem_reserve[]: [ 330.899531] do_syscall_64+0x1c7/0x5b0 [ 330.905391] 0 [ 330.908769] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.911950] syz-executor.4: [ 330.919175] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.928467] 2570 [ 330.935060] RIP: 0033:0x45af49 [ 330.935063] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.935069] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 330.935071] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 330.935073] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 330.935076] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 330.935079] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 330.937550] mems_allowed=0-1 [ 330.976283] page allocation failure: order:0 [ 330.977412] CPU: 1 PID: 8021 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 330.979858] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 331.006673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.006677] Call Trace: [ 331.006694] dump_stack+0xf7/0x13b [ 331.006704] warn_alloc.cold.110+0xa2/0x1be [ 331.006709] ? zone_watermark_ok_safe+0x260/0x260 [ 331.006715] ? usleep_range+0x120/0x120 [ 331.006721] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 331.006729] ? call_timer_fn+0x570/0x570 [ 331.006734] ? unreserve_highatomic_pageblock+0x315/0x450 [ 331.006742] __alloc_pages_slowpath+0x2052/0x2650 [ 331.006756] ? warn_alloc+0x100/0x100 [ 331.006761] ? get_page_from_freelist+0x1046/0x23b0 [ 331.006776] ? __might_sleep+0x93/0xb0 [ 331.006782] __alloc_pages_nodemask+0x60d/0x770 [ 331.006790] ? __alloc_pages_slowpath+0x2650/0x2650 [ 331.006797] ? wait_for_completion+0x440/0x440 [ 331.006809] alloc_pages_current+0xd6/0x1b0 [ 331.006820] ion_page_pool_alloc+0x102/0x180 [ 331.006827] ion_system_heap_allocate+0x14e/0x930 [ 331.006835] ? ion_system_heap_free+0x270/0x270 [ 331.006844] ion_alloc+0x216/0x770 [ 331.006853] ? ion_dma_buf_release+0x40/0x40 [ 331.006862] ? kasan_check_write+0x14/0x20 [ 331.006869] ion_ioctl+0xe2/0x1b6 [ 331.015779] 2570 [ 331.036662] ? ion_alloc.cold.15+0x32/0x32 [ 331.036678] do_vfs_ioctl+0x180/0xfb0 [ 331.036685] ? __fget+0x1ad/0x2f0 [ 331.036691] ? ioctl_preallocate+0x1a0/0x1a0 [ 331.036698] ? __fget+0x1ca/0x2f0 [ 331.036710] ? security_file_ioctl+0x6a/0xa0 [ 331.036716] ? SyS_clock_settime+0x1a0/0x1a0 [ 331.036719] ? security_file_ioctl+0x6a/0xa0 [ 331.036725] SyS_ioctl+0x74/0x80 [ 331.036731] ? do_vfs_ioctl+0xfb0/0xfb0 [ 331.036738] do_syscall_64+0x1c7/0x5b0 [ 331.036743] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.036754] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 331.036760] RIP: 0033:0x45af49 [ 331.036763] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.036770] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 331.036772] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 331.036775] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 331.036777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 331.036780] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 331.085718] CPU: 1 PID: 8016 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 331.092631] syz-executor.4 cpuset= [ 331.094959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.094964] Call Trace: [ 331.099532] syz4 [ 331.103860] dump_stack+0xf7/0x13b [ 331.112356] mems_allowed=0-1 [ 331.113101] warn_alloc.cold.110+0xa2/0x1be [ 331.292383] 2570 [ 331.293288] ? zone_watermark_ok_safe+0x260/0x260 [ 331.340067] 2570 [ 331.341540] ? usleep_range+0x120/0x120 [ 331.350317] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 331.350325] ? call_timer_fn+0x570/0x570 [ 331.350333] ? unreserve_highatomic_pageblock+0x315/0x450 [ 331.350343] __alloc_pages_slowpath+0x2052/0x2650 [ 331.350353] ? trace_hardirqs_on_caller+0x40c/0x580 [ 331.350367] ? warn_alloc+0x100/0x100 [ 331.350373] ? get_page_from_freelist+0x1046/0x23b0 [ 331.350388] ? __might_sleep+0x93/0xb0 [ 331.350395] __alloc_pages_nodemask+0x60d/0x770 [ 331.350401] ? __alloc_pages_slowpath+0x2650/0x2650 [ 331.350410] ? wait_for_completion+0x440/0x440 [ 331.372645] Node 0 [ 331.372878] ? ion_page_pool_alloc+0x8f/0x180 [ 331.377270] DMA32 free:18152kB min:36384kB low:45480kB high:54576kB active_anon:21264kB inactive_anon:776kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6880kB pagetables:1620kB bounce:0kB free_pcp:780kB local_pcp:652kB free_cma:0kB [ 331.382104] alloc_pages_current+0xd6/0x1b0 [ 331.382114] ion_page_pool_alloc+0x102/0x180 [ 331.382119] ion_system_heap_allocate+0x14e/0x930 [ 331.382127] ? ion_system_heap_free+0x270/0x270 [ 331.382136] ion_alloc+0x216/0x770 [ 331.382144] ? ion_dma_buf_release+0x40/0x40 [ 331.382154] ? kasan_check_write+0x14/0x20 [ 331.382161] ion_ioctl+0xe2/0x1b6 [ 331.387192] syz-executor.5: [ 331.390349] ? ion_alloc.cold.15+0x32/0x32 [ 331.390363] do_vfs_ioctl+0x180/0xfb0 [ 331.390371] ? __fget+0x1ad/0x2f0 [ 331.390377] ? ioctl_preallocate+0x1a0/0x1a0 [ 331.390385] ? __fget+0x1ca/0x2f0 [ 331.390396] ? security_file_ioctl+0x6a/0xa0 [ 331.390402] ? SyS_clock_settime+0x1a0/0x1a0 [ 331.390406] ? security_file_ioctl+0x6a/0xa0 [ 331.390412] SyS_ioctl+0x74/0x80 [ 331.390418] ? do_vfs_ioctl+0xfb0/0xfb0 [ 331.390426] do_syscall_64+0x1c7/0x5b0 [ 331.390430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.390444] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 331.397071] page allocation failure: order:4 [ 331.399050] RIP: 0033:0x45af49 [ 331.412471] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 331.412522] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 [ 331.415971] (null) [ 331.415976] syz-executor.5 cpuset= [ 331.420387] ORIG_RAX: 0000000000000010 [ 331.420391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 331.420394] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 331.420396] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 331.420399] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 331.420401] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 331.601207] Mem-Info: [ 331.606520] CPU: 0 PID: 8010 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 331.618736] syz-executor.3: [ 331.645147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.645151] Call Trace: [ 331.645170] dump_stack+0xf7/0x13b [ 331.645180] warn_alloc.cold.110+0xa2/0x1be [ 331.645185] ? zone_watermark_ok_safe+0x260/0x260 [ 331.645191] ? usleep_range+0x120/0x120 [ 331.645201] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 331.649549] active_anon:5343 inactive_anon:196 isolated_anon:0 [ 331.649549] active_file:51 inactive_file:38 isolated_file:0 [ 331.649549] unevictable:0 dirty:0 writeback:0 unstable:0 [ 331.649549] slab_reclaimable:13067 slab_unreclaimable:97107 [ 331.649549] mapped:27 shmem:250 pagetables:416 bounce:0 [ 331.649549] free:22034 free_pcp:316 free_cma:0 [ 331.653930] ? call_timer_fn+0x570/0x570 [ 331.653937] ? unreserve_highatomic_pageblock+0x315/0x450 [ 331.653946] __alloc_pages_slowpath+0x2052/0x2650 [ 331.653961] ? warn_alloc+0x100/0x100 [ 331.658789] Node 0 active_anon:21268kB inactive_anon:776kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 331.663434] ? get_page_from_freelist+0x1046/0x23b0 [ 331.663448] ? __might_sleep+0x93/0xb0 [ 331.663454] __alloc_pages_nodemask+0x60d/0x770 [ 331.663462] ? __alloc_pages_slowpath+0x2650/0x2650 [ 331.666993] Node 1 active_anon:104kB inactive_anon:8kB active_file:164kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 331.671383] ? wait_for_completion+0x440/0x440 [ 331.671394] alloc_pages_current+0xd6/0x1b0 [ 331.671405] ion_page_pool_alloc+0x102/0x180 [ 331.675638] Node 0 [ 331.679069] ion_system_heap_allocate+0x14e/0x930 [ 331.682105] page allocation failure: order:4 [ 331.686284] ? do_raw_spin_unlock+0x16a/0x250 [ 331.690200] DMA free:10376kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.693740] ? ion_system_heap_free+0x270/0x270 [ 331.698206] lowmem_reserve[]: 0 [ 331.701668] ion_alloc+0x27f/0x770 [ 331.701678] ? ion_dma_buf_release+0x40/0x40 [ 331.701690] ? kasan_check_write+0x14/0x20 [ 331.701698] ion_ioctl+0xe2/0x1b6 [ 331.706101] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 331.710494] ? ion_alloc.cold.15+0x32/0x32 [ 331.710507] do_vfs_ioctl+0x180/0xfb0 [ 331.710513] ? __fget+0x1ad/0x2f0 [ 331.710520] ? ioctl_preallocate+0x1a0/0x1a0 [ 331.714914] (null) [ 331.718265] ? __fget+0x1ca/0x2f0 [ 331.722263] 2570 [ 331.726112] ? security_file_ioctl+0x6a/0xa0 [ 331.730969] syz-executor.3 cpuset= [ 331.736198] ? SyS_clock_settime+0x1a0/0x1a0 [ 331.740624] 2570 [ 331.743768] ? security_file_ioctl+0x6a/0xa0 [ 331.750904] syz3 [ 331.756219] SyS_ioctl+0x74/0x80 [ 331.758350] mems_allowed=0-1 [ 331.761900] ? do_vfs_ioctl+0xfb0/0xfb0 [ 331.761908] do_syscall_64+0x1c7/0x5b0 [ 331.761912] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.761925] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 331.761931] RIP: 0033:0x45af49 [ 331.765913] 2570 [ 331.773161] RSP: 002b:00007ffa6e582c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.773168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 331.773171] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 331.773174] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 331.773176] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5836d4 [ 331.773179] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 331.773981] lowmem_reserve[]: [ 331.783410] CPU: 1 PID: 8023 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 331.787856] 0 [ 331.795036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.795039] Call Trace: [ 331.795054] dump_stack+0xf7/0x13b [ 331.795064] warn_alloc.cold.110+0xa2/0x1be [ 331.795069] ? zone_watermark_ok_safe+0x260/0x260 [ 331.795081] ? __alloc_pages_direct_compact+0xc2/0x330 [ 331.795088] __alloc_pages_slowpath+0x2052/0x2650 [ 331.795102] ? trace_hardirqs_off+0x10/0x10 [ 331.795109] ? warn_alloc+0x100/0x100 [ 331.802916] 0 [ 331.804770] ? get_page_from_freelist+0x1046/0x23b0 [ 331.804783] ? __might_sleep+0x93/0xb0 [ 331.804789] __alloc_pages_nodemask+0x60d/0x770 [ 331.804797] ? __alloc_pages_slowpath+0x2650/0x2650 [ 331.804808] ? wait_for_completion+0x440/0x440 [ 331.804819] alloc_pages_current+0xd6/0x1b0 [ 331.804834] ion_page_pool_alloc+0x102/0x180 [ 331.804840] ion_system_heap_allocate+0x14e/0x930 [ 331.813163] 0 [ 331.815737] ? do_raw_spin_unlock+0x16a/0x250 [ 331.815747] ? ion_system_heap_free+0x270/0x270 [ 331.815756] ion_alloc+0x27f/0x770 [ 331.815765] ? ion_dma_buf_release+0x40/0x40 [ 331.815775] ? kasan_check_write+0x14/0x20 [ 331.815782] ion_ioctl+0xe2/0x1b6 [ 331.815787] ? ion_alloc.cold.15+0x32/0x32 [ 331.815800] do_vfs_ioctl+0x180/0xfb0 [ 331.815806] ? __fget+0x1ad/0x2f0 [ 331.815813] ? ioctl_preallocate+0x1a0/0x1a0 [ 331.825681] 0 [ 331.827821] ? __fget+0x1ca/0x2f0 [ 331.827838] ? security_file_ioctl+0x6a/0xa0 [ 331.827843] ? SyS_clock_settime+0x1a0/0x1a0 [ 331.827847] ? security_file_ioctl+0x6a/0xa0 [ 331.827855] SyS_ioctl+0x74/0x80 [ 331.827861] ? do_vfs_ioctl+0xfb0/0xfb0 [ 331.827868] do_syscall_64+0x1c7/0x5b0 [ 331.827873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.827887] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 331.832201] 0 [ 331.835718] RIP: 0033:0x45af49 [ 331.835721] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.835727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 331.835730] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 331.835732] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 331.835735] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 331.835737] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 331.838464] 2570 [ 331.850308] Node 0 [ 331.885142] Node 0 [ 331.886954] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.892513] DMA32 free:19556kB min:36384kB low:45480kB high:54576kB active_anon:21264kB inactive_anon:776kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6880kB pagetables:1620kB bounce:0kB free_pcp:684kB local_pcp:684kB free_cma:0kB [ 331.897005] lowmem_reserve[]: [ 331.901271] lowmem_reserve[]: [ 331.928399] 0 [ 331.937481] warn_alloc_show_mem: 3 callbacks suppressed [ 331.937484] Mem-Info: [ 331.941659] 0 [ 331.947114] active_anon:5343 inactive_anon:196 isolated_anon:0 [ 331.947114] active_file:51 inactive_file:413 isolated_file:0 [ 331.947114] unevictable:0 dirty:0 writeback:0 unstable:0 [ 331.947114] slab_reclaimable:13067 slab_unreclaimable:97107 [ 331.947114] mapped:252 shmem:250 pagetables:416 bounce:0 [ 331.947114] free:21690 free_pcp:288 free_cma:0 [ 331.984033] 0 [ 331.989113] 0 [ 331.994119] syz5 [ 331.998022] 0 [ 332.003056] 0 [ 332.040065] Node 0 active_anon:21268kB inactive_anon:776kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 332.044190] mems_allowed=0-1 [ 332.044606] Node 1 active_anon:104kB inactive_anon:8kB active_file:164kB inactive_file:1916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1200kB dirty:100kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 332.048878] CPU: 0 PID: 8021 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 332.060065] 0 [ 332.063563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.063567] Call Trace: [ 332.067369] 0 [ 332.070815] dump_stack+0xf7/0x13b [ 332.070826] warn_alloc.cold.110+0xa2/0x1be [ 332.070831] ? zone_watermark_ok_safe+0x260/0x260 [ 332.070845] ? __alloc_pages_direct_compact+0xc2/0x330 [ 332.080076] Node 0 [ 332.080892] __alloc_pages_slowpath+0x2052/0x2650 [ 332.082947] DMA free:10376kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.087350] ? trace_hardirqs_off+0x10/0x10 [ 332.100060] 0 [ 332.101813] ? warn_alloc+0x100/0x100 [ 332.107139] ? get_page_from_freelist+0x1046/0x23b0 [ 332.110365] lowmem_reserve[]: [ 332.114293] ? __might_sleep+0x93/0xb0 [ 332.118148] 0 [ 332.122979] __alloc_pages_nodemask+0x60d/0x770 [ 332.122988] ? trace_hardirqs_on_caller+0x40c/0x580 [ 332.122994] ? __alloc_pages_slowpath+0x2650/0x2650 [ 332.123005] ? wait_for_completion+0x440/0x440 [ 332.123015] alloc_pages_current+0xd6/0x1b0 [ 332.140077] Node 0 [ 332.141243] ion_page_pool_alloc+0x102/0x180 [ 332.148519] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.155790] ion_system_heap_allocate+0x14e/0x930 [ 332.155799] ? do_raw_spin_unlock+0x16a/0x250 [ 332.155805] ? ion_system_heap_free+0x270/0x270 [ 332.155814] ion_alloc+0x27f/0x770 [ 332.155822] ? ion_dma_buf_release+0x40/0x40 [ 332.155834] ? kasan_check_write+0x14/0x20 [ 332.170068] 2570 [ 332.170397] ion_ioctl+0xe2/0x1b6 [ 332.178777] 2570 [ 332.181873] ? ion_alloc.cold.15+0x32/0x32 [ 332.181887] do_vfs_ioctl+0x180/0xfb0 [ 332.181893] ? __fget+0x1ad/0x2f0 [ 332.181899] ? ioctl_preallocate+0x1a0/0x1a0 [ 332.181908] ? __fget+0x1ca/0x2f0 [ 332.210100] lowmem_reserve[]: [ 332.211266] ? security_file_ioctl+0x6a/0xa0 [ 332.216088] 0 [ 332.221357] ? SyS_clock_settime+0x1a0/0x1a0 [ 332.221364] ? security_file_ioctl+0x6a/0xa0 [ 332.221374] SyS_ioctl+0x74/0x80 [ 332.221381] ? do_vfs_ioctl+0xfb0/0xfb0 [ 332.221388] do_syscall_64+0x1c7/0x5b0 [ 332.221393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.221405] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 332.226245] 2570 [ 332.230546] RIP: 0033:0x45af49 [ 332.230550] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.230556] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 332.230559] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 332.230561] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 332.230564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 332.230567] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 332.270124] 0 [ 332.290114] 0 [ 332.352396] 0 [ 332.390089] Node 1 [ 332.400068] 2570 [ 332.420148] Normal free:97484kB min:53504kB low:66880kB high:80256kB active_anon:104kB inactive_anon:8kB active_file:24kB inactive_file:1976kB unevictable:0kB writepending:136kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:44kB bounce:0kB free_pcp:748kB local_pcp:32kB free_cma:0kB [ 332.481421] syz-executor.5: [ 332.550125] lowmem_reserve[]: [ 332.560062] 0 [ 332.633867] 0 [ 332.743837] 0 [ 332.746686] page allocation failure: order:4 [ 332.763972] 0 [ 332.765575] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 332.769531] 0 0 [ 332.771641] Node 0 [ 332.812823] (null) [ 332.816701] Node 0 [ 332.820620] 0 [ 332.820627] Node 1 Normal free:26560kB min:53504kB low:66880kB high:80256kB active_anon:104kB inactive_anon:8kB active_file:172kB inactive_file:500kB unevictable:0kB writepending:136kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:44kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 332.820638] lowmem_reserve[]: 0 0 0 0 0 [ 332.820653] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 3*16kB (UME) 24*32kB (UM) 13*64kB (UME) 4*128kB [ 332.847739] DMA: [ 332.851311] syz-executor.5 cpuset= [ 332.873585] 2*4kB [ 332.880565] (UME) 4*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10376kB [ 332.880594] Node 0 DMA32: 452*4kB (E) 1751*8kB (UE) 101*16kB (UE) 24*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18200kB [ 332.880636] Node 0 Normal: 0*4kB [ 332.890114] syz-executor.5: [ 332.890372] DMA32 free:18124kB min:36384kB low:45480kB high:54576kB active_anon:21264kB inactive_anon:776kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:4kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6880kB pagetables:1620kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 332.931247] (UM) [ 332.934357] syz5 [ 332.936091] 2*8kB [ 332.943233] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 332.943262] Node 1 Normal: 38*4kB [ 332.964044] (UM) [ 332.982140] mems_allowed=0-1 [ 332.982153] CPU: 1 PID: 8016 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 333.002353] page allocation failure: order:0 [ 333.002561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.033178] 3*16kB [ 333.058701] Call Trace: [ 333.058724] dump_stack+0xf7/0x13b [ 333.058734] warn_alloc.cold.110+0xa2/0x1be [ 333.058739] ? zone_watermark_ok_safe+0x260/0x260 [ 333.058752] ? __alloc_pages_direct_compact+0xc2/0x330 [ 333.058758] __alloc_pages_slowpath+0x2052/0x2650 [ 333.058772] ? trace_hardirqs_off+0x10/0x10 [ 333.058778] ? warn_alloc+0x100/0x100 [ 333.058784] ? get_page_from_freelist+0x1046/0x23b0 [ 333.058798] ? __might_sleep+0x93/0xb0 [ 333.058804] __alloc_pages_nodemask+0x60d/0x770 [ 333.058810] ? __alloc_pages_slowpath+0x2650/0x2650 [ 333.058820] ? wait_for_completion+0x440/0x440 [ 333.058832] alloc_pages_current+0xd6/0x1b0 [ 333.058849] ion_page_pool_alloc+0x102/0x180 [ 333.058859] ion_system_heap_allocate+0x14e/0x930 [ 333.058866] ? do_raw_spin_unlock+0x16a/0x250 [ 333.058873] ? ion_system_heap_free+0x270/0x270 [ 333.058883] ion_alloc+0x27f/0x770 [ 333.066377] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 333.073910] ? ion_dma_buf_release+0x40/0x40 [ 333.073922] ? kasan_check_write+0x14/0x20 [ 333.073928] ion_ioctl+0xe2/0x1b6 [ 333.073933] ? ion_alloc.cold.15+0x32/0x32 [ 333.073945] do_vfs_ioctl+0x180/0xfb0 [ 333.073952] ? __fget+0x1ad/0x2f0 [ 333.073958] ? ioctl_preallocate+0x1a0/0x1a0 [ 333.073966] ? __fget+0x1ca/0x2f0 [ 333.073978] ? security_file_ioctl+0x6a/0xa0 [ 333.090124] (null) [ 333.090453] ? SyS_clock_settime+0x1a0/0x1a0 [ 333.094842] syz-executor.5 cpuset= [ 333.104189] ? security_file_ioctl+0x6a/0xa0 [ 333.104201] SyS_ioctl+0x74/0x80 [ 333.104208] ? do_vfs_ioctl+0xfb0/0xfb0 [ 333.104215] do_syscall_64+0x1c7/0x5b0 [ 333.104219] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.104232] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 333.104237] RIP: 0033:0x45af49 [ 333.104240] RSP: 002b:00007f361e79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.104245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 333.104249] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 333.104251] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.104255] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e79c6d4 [ 333.104258] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 333.113002] lowmem_reserve[]: [ 333.140606] (UME) [ 333.145938] (M) [ 333.149677] 24*32kB [ 333.154479] 1*8kB (E) 344*16kB (UE) 632*32kB (UE) 3*64kB (U) 2*128kB (U) 1*256kB (U) [ 333.159558] syz5 [ 333.164158] 0*512kB [ 333.180090] (UM) [ 333.187425] 0 [ 333.190630] mems_allowed=0-1 [ 333.197694] 0 0 [ 333.214083] 13*64kB (UME) 4*128kB (UME) 4*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10376kB [ 333.214114] Node 0 DMA32: 452*4kB (E) 1753*8kB (UE) 102*16kB (UE) 24*32kB (UE) 0*64kB [ 333.219426] 0*1024kB [ 333.221467] CPU: 0 PID: 8021 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 333.225797] 0*2048kB [ 333.229368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.229375] Call Trace: [ 333.233908] 0*4096kB [ 333.235981] dump_stack+0xf7/0x13b [ 333.240464] 0 [ 333.243942] warn_alloc.cold.110+0xa2/0x1be [ 333.248329] 0 [ 333.251709] ? zone_watermark_ok_safe+0x260/0x260 [ 333.251719] ? usleep_range+0x120/0x120 [ 333.251725] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 333.251732] ? call_timer_fn+0x570/0x570 [ 333.251738] ? unreserve_highatomic_pageblock+0x315/0x450 [ 333.251747] __alloc_pages_slowpath+0x2052/0x2650 [ 333.251761] ? warn_alloc+0x100/0x100 [ 333.255756] = 26592kB [ 333.259732] ? get_page_from_freelist+0x1046/0x23b0 [ 333.264747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.269876] ? __might_sleep+0x93/0xb0 [ 333.280758] __alloc_pages_nodemask+0x60d/0x770 [ 333.280767] ? __alloc_pages_slowpath+0x2650/0x2650 [ 333.280779] ? wait_for_completion+0x440/0x440 [ 333.288051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 333.295313] alloc_pages_current+0xd6/0x1b0 [ 333.295326] ion_page_pool_alloc+0x102/0x180 [ 333.295331] ion_system_heap_allocate+0x14e/0x930 [ 333.295339] ? do_raw_spin_unlock+0x16a/0x250 [ 333.295346] ? ion_system_heap_free+0x270/0x270 [ 333.302653] Node 0 [ 333.309896] ion_alloc+0x27f/0x770 [ 333.317214] warn_alloc_show_mem: 3 callbacks suppressed [ 333.317217] Mem-Info: [ 333.320278] ? ion_dma_buf_release+0x40/0x40 [ 333.320293] ? kasan_check_write+0x14/0x20 [ 333.320301] ion_ioctl+0xe2/0x1b6 [ 333.322439] active_anon:5343 inactive_anon:196 isolated_anon:0 [ 333.322439] active_file:7 inactive_file:4 isolated_file:0 [ 333.322439] unevictable:0 dirty:14 writeback:0 unstable:0 [ 333.322439] slab_reclaimable:13025 slab_unreclaimable:96937 [ 333.322439] mapped:2 shmem:250 pagetables:416 bounce:0 [ 333.322439] free:13790 free_pcp:69 free_cma:0 [ 333.324411] ? ion_alloc.cold.15+0x32/0x32 [ 333.326725] Node 0 active_anon:21268kB inactive_anon:776kB active_file:44kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 333.334685] do_vfs_ioctl+0x180/0xfb0 [ 333.334693] ? __fget+0x1ad/0x2f0 [ 333.334700] ? ioctl_preallocate+0x1a0/0x1a0 [ 333.334709] ? __fget+0x1ca/0x2f0 [ 333.336697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.338993] ? security_file_ioctl+0x6a/0xa0 [ 333.341071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 333.342826] ? SyS_clock_settime+0x1a0/0x1a0 [ 333.345918] 293 total pagecache pages [ 333.347909] ? security_file_ioctl+0x6a/0xa0 [ 333.347922] SyS_ioctl+0x74/0x80 [ 333.358411] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 333.366390] ? do_vfs_ioctl+0xfb0/0xfb0 [ 333.366399] do_syscall_64+0x1c7/0x5b0 [ 333.366406] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.368824] Node 1 active_anon:104kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:56kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 333.376590] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 333.376596] RIP: 0033:0x45af49 [ 333.376599] RSP: 002b:00007f361e759c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.376606] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 333.376611] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 333.379034] lowmem_reserve[]: [ 333.388370] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 333.388374] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361e75a6d4 [ 333.388376] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 333.401259] 0*128kB [ 333.405090] 0 pages in swap cache [ 333.405229] 0*256kB [ 333.410099] Swap cache stats: add 0, delete 0, find 0/0 [ 333.410102] Free swap = 0kB [ 333.410105] Total swap = 0kB [ 333.410112] 1965979 pages RAM [ 333.410115] 0 pages HighMem/MovableOnly [ 333.410118] 335868 pages reserved [ 333.410120] 0 pages cma reserved [ 333.410128] Out of memory: Kill process 7217 (syz-execprog) score 1 or sacrifice child [ 333.423339] 0*512kB [ 333.429822] Node 0 [ 333.452646] 0*1024kB 2020/03/09 03:20:43 executed programs: 100 [ 333.454830] Killed process 7815 (syz-executor.5) total-vm:37644kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 333.457944] 0*2048kB [ 333.462694] 0 [ 333.481326] 0*4096kB [ 333.500092] DMA free:10376kB min:216kB low:268kB high:320kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 333.570118] = 18232kB [ 333.598671] 0 [ 333.670127] Node 0 [ 333.762363] 0 [ 333.891299] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 333.910150] Node 0 DMA32 free:99356kB min:36384kB low:45480kB high:54576kB active_anon:21164kB inactive_anon:776kB active_file:44kB inactive_file:7132kB unevictable:0kB writepending:144kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1620kB bounce:0kB free_pcp:428kB local_pcp:160kB free_cma:0kB [ 333.980840] lowmem_reserve[]: 0 0 0 0 0 [ 333.988232] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.063129] lowmem_reserve[]: 0 0 0 0 0 [ 334.084541] Node 1 Normal free:42876kB min:53504kB low:66880kB high:80256kB active_anon:164kB inactive_anon:4kB active_file:92kB inactive_file:96kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:76kB bounce:0kB free_pcp:636kB local_pcp:12kB free_cma:0kB [ 334.107902] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 334.133082] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 334.180105] 0 0 [ 334.181795] syz-executor.4 cpuset= [ 334.182161] Node 1 [ 334.182162] syz4 mems_allowed=0-1 [ 334.185688] Normal free:42060kB min:53504kB low:66880kB high:80256kB active_anon:164kB inactive_anon:4kB active_file:92kB inactive_file:96kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:224kB pagetables:76kB bounce:0kB free_pcp:652kB local_pcp:4kB free_cma:0kB [ 334.187912] CPU: 0 PID: 8024 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 334.191442] lowmem_reserve[]: [ 334.218750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.218755] Call Trace: [ 334.218774] dump_stack+0xf7/0x13b [ 334.218785] dump_header+0x160/0x63f [ 334.218793] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 334.218804] ? ___ratelimit+0x243/0x519 [ 334.240062] lowmem_reserve[]: [ 334.241789] ? do_raw_spin_unlock+0x16a/0x250 [ 334.245405] 0 [ 334.249121] oom_kill_process.cold.24+0xb/0xa1a [ 334.260056] 0 [ 334.261259] ? out_of_memory+0x7f9/0x1030 [ 334.265729] 0 0 [ 334.267526] ? lock_downgrade+0x7f0/0x7f0 [ 334.274303] 0 [ 334.278108] out_of_memory+0x2b0/0x1030 [ 334.284208] ? oom_killer_disable+0x1a0/0x1a0 [ 334.285986] Node 0 [ 334.290045] ? __alloc_pages_slowpath+0xb69/0x2650 [ 334.290052] __alloc_pages_slowpath+0x1ef3/0x2650 [ 334.290066] ? warn_alloc+0x100/0x100 [ 334.290073] ? get_page_from_freelist+0x1046/0x23b0 [ 334.294566] 0 [ 334.296791] ? __might_sleep+0x93/0xb0 [ 334.301756] 0 [ 334.306685] __alloc_pages_nodemask+0x60d/0x770 [ 334.310659] 0 [ 334.315622] ? __alloc_pages_slowpath+0x2650/0x2650 [ 334.317396] 0 [ 334.321269] ? lock_downgrade+0x7f0/0x7f0 [ 334.321284] alloc_pages_current+0xd6/0x1b0 [ 334.321293] __page_cache_alloc+0x1da/0x330 [ 334.321302] filemap_fault+0xbc8/0x1ae0 [ 334.323107] DMA: [ 334.327747] ? __lock_page_or_retry+0x820/0x820 [ 334.329532] 4*4kB [ 334.334562] ? lock_acquire+0x173/0x400 [ 334.334572] ? ext4_filemap_fault+0x75/0xb0 [ 334.334583] ext4_filemap_fault+0x7d/0xb0 [ 334.334590] __do_fault+0xf3/0x340 [ 334.336386] 0 [ 334.340514] __handle_mm_fault+0x21eb/0x3870 [ 334.340521] ? trace_hardirqs_on_caller+0x40c/0x580 [ 334.340527] ? copy_page_range+0x1d10/0x1d10 [ 334.340533] ? find_held_lock+0x36/0x1d0 [ 334.340549] handle_mm_fault+0x234/0x6e0 [ 334.349159] ? find_vma+0x1a/0x150 [ 334.353165] (M) [ 334.355194] __do_page_fault+0x44d/0xb00 [ 334.359842] 5*8kB [ 334.361990] ? vmalloc_fault+0xc90/0xc90 [ 334.362000] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 334.362005] ? page_fault+0x2f/0x50 [ 334.362010] do_page_fault+0x64/0x3fb [ 334.362015] ? page_fault+0x2f/0x50 [ 334.365973] (UM) [ 334.370277] page_fault+0x45/0x50 [ 334.370283] RIP: 0033:0x459411 [ 334.370286] RSP: 002b:00007ffea46a25a0 EFLAGS: 00010293 [ 334.370292] RAX: 0000000000000000 RBX: 0000000000051b55 RCX: 0000000000459411 [ 334.370294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffea46a25b0 [ 334.370297] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 334.370301] R10: 00007ffea46a26a0 R11: 0000000000000293 R12: 000000000075bf20 [ 334.374456] Node 0 [ 334.377964] R13: 000000000075c9a0 R14: 0000000000760320 R15: 000000000075bf2c [ 334.379747] DMA: [ 334.387514] Node 1 [ 334.389250] 5*16kB [ 334.399992] Normal: [ 334.403040] 4*4kB [ 334.408193] 165*4kB [ 334.420085] (M) [ 334.425682] (UM) [ 334.426856] 5*8kB (UM) [ 334.430697] 4*8kB (ME) 25*16kB (UME) 834*32kB (UE) 0*64kB 0*128kB [ 334.440126] (ME) [ 334.445577] 0*256kB [ 334.448516] 22*32kB [ 334.462378] 0*512kB [ 334.463188] 5*16kB [ 334.482379] 0*1024kB [ 334.487273] (UM) [ 334.489261] 0*2048kB [ 334.491512] 5*64kB (ME) 4*128kB (UME) 4*256kB [ 334.507296] 0*4096kB [ 334.513492] (ME) 22*32kB [ 334.516698] = 27780kB [ 334.517904] (UM) [ 334.522741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.525058] 5*64kB [ 334.527209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 334.529253] (ME) [ 334.531690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.531694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 334.531697] 329 total pagecache pages [ 334.531705] 0 pages in swap cache [ 334.531708] Swap cache stats: add 0, delete 0, find 0/0 [ 334.531710] Free swap = 0kB [ 334.531712] Total swap = 0kB [ 334.531718] 1965979 pages RAM [ 334.537383] 4*128kB [ 334.538842] 0 pages HighMem/MovableOnly [ 334.541658] (UME) 4*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10376kB [ 334.541687] Node 0 DMA32: 550*4kB (ME) 1646*8kB (UME) 114*16kB (UE) 29*32kB (UE) [ 334.546421] 335868 pages reserved [ 334.555088] (UME) [ 334.557464] 0 pages cma reserved [ 334.566660] 1*512kB [ 334.639610] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18120kB [ 334.667679] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 334.720252] Node 1 Normal: 2*4kB (M) 5*8kB (UME) 3*16kB (ME) 834*32kB (UE) 2*64kB (U) 1*128kB (U) [ 334.720304] Mem-Info: [ 334.720317] active_anon:5345 inactive_anon:194 isolated_anon:0 [ 334.720317] active_file:42 inactive_file:26 isolated_file:1 [ 334.720317] unevictable:0 dirty:0 writeback:0 unstable:0 [ 334.720317] slab_reclaimable:13025 slab_unreclaimable:97088 [ 334.720317] mapped:21 shmem:248 pagetables:414 bounce:0 [ 334.720317] free:48611 free_pcp:397 free_cma:0 [ 334.729961] 1*256kB (U) [ 334.732487] Node 0 active_anon:21216kB inactive_anon:772kB active_file:76kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:60kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 334.732495] Node 1 active_anon:164kB inactive_anon:4kB active_file:92kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 334.840097] 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 30880kB [ 334.840180] Node 0 [ 334.846654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.846660] DMA free:10372kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.846663] lowmem_reserve[]: [ 334.848878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 334.857759] 0 2570 2570 2570 2570 [ 334.857773] Node 0 DMA32 free:227092kB min:36384kB low:45480kB high:54576kB active_anon:21204kB inactive_anon:772kB active_file:100kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6912kB pagetables:1580kB bounce:0kB free_pcp:1312kB local_pcp:676kB free_cma:0kB [ 334.857785] lowmem_reserve[]: 0 0 0 0 0 [ 334.857800] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.857811] lowmem_reserve[]: [ 334.883554] (E) [ 334.927926] 0 [ 334.990107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.020121] 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10376kB [ 335.022362] 0 0 0 0 [ 335.050157] Node 1 Normal free:160424kB min:53504kB low:66880kB high:80256kB active_anon:164kB inactive_anon:4kB active_file:8kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:76kB bounce:0kB free_pcp:1268kB local_pcp:628kB free_cma:0kB [ 335.050213] Node 0 [ 335.079194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 335.081636] lowmem_reserve[]: 0 0 0 0 0 [ 335.094784] Node 0 DMA: 4*4kB (M) 5*8kB (UM) 5*16kB (ME) 22*32kB (UM) 5*64kB (ME) 4*128kB (UME) 4*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10376kB [ 335.120406] 297 total pagecache pages [ 335.122947] Node 0 DMA32: [ 335.124249] 0 pages in swap cache [ 335.124250] 6171*4kB (UME) [ 335.127081] Swap cache stats: add 0, delete 0, find 0/0 [ 335.130625] 7597*8kB [ 335.133551] Free swap = 0kB [ 335.144334] DMA32: 6222*4kB (UME) 7564*8kB (UME) 2901*16kB (UE) 2443*32kB (UE) 517*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 243592kB [ 335.172697] (UME) 2889*16kB (UE) 2427*32kB (UE) 504*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 241732kB [ 335.200144] Total swap = 0kB [ 335.203052] Node 0 Normal: [ 335.203228] 1965979 pages RAM [ 335.203231] 0 pages HighMem/MovableOnly [ 335.206158] 0*4kB [ 335.209247] 335868 pages reserved [ 335.209250] 0 pages cma reserved [ 335.215591] 0*8kB [ 335.240100] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 335.282642] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 335.310099] Node 1 Normal: 469*4kB (UM) 252*8kB (UME) 329*16kB (UME) 1049*32kB (UE) 1651*64kB (U) 95*128kB (U) 59*256kB (U) 39*512kB (U) 39*1024kB (U) 1*2048kB (U) 0*4096kB = 237604kB [ 335.330593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.330892] Node 1 [ 335.339596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 335.339601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.339605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 335.356622] Normal: [ 335.390979] 491 total pagecache pages [ 335.393287] 469*4kB (UM) 252*8kB (UME) 329*16kB (UME) 1049*32kB (UE) 1651*64kB (U) 95*128kB (U) 59*256kB (U) 39*512kB (U) 39*1024kB (U) 1*2048kB (U) 0*4096kB = 237604kB [ 335.414465] 0 pages in swap cache [ 335.420801] Swap cache stats: add 0, delete 0, find 0/0 [ 335.421513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.435895] Free swap = 0kB [ 335.438942] Total swap = 0kB [ 335.444478] 1965979 pages RAM [ 335.447602] 0 pages HighMem/MovableOnly [ 335.451715] 335868 pages reserved [ 335.455168] 0 pages cma reserved [ 335.474677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 335.495677] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.530284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 335.549018] 1132 total pagecache pages [ 335.592756] 0 pages in swap cache [ 335.596248] Swap cache stats: add 0, delete 0, find 0/0 [ 335.620105] Free swap = 0kB [ 335.630441] Total swap = 0kB [ 335.640185] 1965979 pages RAM [ 335.643377] 0 pages HighMem/MovableOnly [ 335.647413] 335868 pages reserved [ 335.670137] 0 pages cma reserved [ 335.673556] Out of memory: Kill process 8024 (syz-executor.4) score 999 or sacrifice child [ 335.690086] Killed process 8024 (syz-executor.4) total-vm:37772kB, anon-rss:88kB, file-rss:0kB, shmem-rss:0kB [ 335.703287] oom_reaper: reaped process 8024 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 336.091304] IPVS: ftp: loaded support on port[0] = 21 [ 336.906843] IPVS: ftp: loaded support on port[0] = 21 [ 337.271677] chnl_net:caif_netlink_parms(): no params data found 2020/03/09 03:20:47 result: hanged=false err=executor 5: failed to write control pipe: write |1: broken pipe [ 337.573948] chnl_net:caif_netlink_parms(): no params data found 2020/03/09 03:20:47 result: hanged=false err=executor 5: EOF mmap of data segment failed (errno 12) [ 337.713698] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.727065] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.755318] device bridge_slave_0 entered promiscuous mode [ 337.791068] warn_alloc: 3 callbacks suppressed 2020/03/09 03:20:47 result: hanged=false err=executor 5: EOF mmap of data segment failed (errno 12) [ 337.791073] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 337.870279] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 337.890152] CPU: 0 PID: 8033 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 337.898110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.907481] Call Trace: [ 337.910241] dump_stack+0xf7/0x13b [ 337.913798] warn_alloc.cold.110+0xa2/0x1be [ 337.918140] ? zone_watermark_ok_safe+0x260/0x260 [ 337.923014] ? __alloc_pages_direct_compact+0xc2/0x330 [ 337.928428] __alloc_pages_slowpath+0x2052/0x2650 [ 337.933293] ? trace_hardirqs_off+0x10/0x10 [ 337.937752] ? warn_alloc+0x100/0x100 [ 337.941566] ? get_page_from_freelist+0x1046/0x23b0 [ 337.946699] ? __might_sleep+0x93/0xb0 [ 337.950712] __alloc_pages_nodemask+0x60d/0x770 [ 337.955407] ? trace_hardirqs_off+0x10/0x10 [ 337.959752] ? __alloc_pages_slowpath+0x2650/0x2650 [ 337.964821] ? wait_for_completion+0x440/0x440 [ 337.969430] alloc_pages_current+0xd6/0x1b0 [ 337.973771] ion_page_pool_alloc+0x102/0x180 [ 337.978223] ion_system_heap_allocate+0x14e/0x930 [ 337.983084] ? ion_system_heap_free+0x270/0x270 [ 337.987913] ion_alloc+0x216/0x770 [ 337.991477] ? ion_dma_buf_release+0x40/0x40 [ 337.995925] ? kasan_check_write+0x14/0x20 [ 338.000184] ion_ioctl+0xe2/0x1b6 [ 338.003660] ? ion_alloc.cold.15+0x32/0x32 [ 338.007921] do_vfs_ioctl+0x180/0xfb0 [ 338.011746] ? __fget+0x1ad/0x2f0 [ 338.015216] ? ioctl_preallocate+0x1a0/0x1a0 [ 338.019651] ? __fget+0x1ca/0x2f0 [ 338.023119] ? security_file_ioctl+0x6a/0xa0 [ 338.027531] ? SyS_clock_settime+0x1a0/0x1a0 [ 338.031971] ? security_file_ioctl+0x6a/0xa0 [ 338.036508] SyS_ioctl+0x74/0x80 [ 338.039882] ? do_vfs_ioctl+0xfb0/0xfb0 [ 338.043870] do_syscall_64+0x1c7/0x5b0 [ 338.047751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 338.052739] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 338.057939] RIP: 0033:0x45af49 [ 338.061134] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.068985] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 338.076277] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 338.083563] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 338.090820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 338.098086] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 338.109662] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.120563] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 338.139736] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.190093] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 338.195200] CPU: 0 PID: 6992 Comm: rs:main Q:Reg Not tainted 4.14.172-syzkaller #0 [ 338.202918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.212285] Call Trace: [ 338.214897] dump_stack+0xf7/0x13b [ 338.218454] dump_header+0x160/0x63f [ 338.222179] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 338.227333] ? ___ratelimit+0x243/0x519 [ 338.231555] ? do_raw_spin_unlock+0x16a/0x250 [ 338.236076] oom_kill_process.cold.24+0xb/0xa1a [ 338.242333] ? out_of_memory+0x7f9/0x1030 [ 338.246501] ? lock_downgrade+0x7f0/0x7f0 [ 338.250668] out_of_memory+0x2b0/0x1030 [ 338.254657] ? oom_killer_disable+0x1a0/0x1a0 [ 338.259788] ? __alloc_pages_slowpath+0xb69/0x2650 [ 338.264829] __alloc_pages_slowpath+0x1ef3/0x2650 [ 338.269670] ? warn_alloc+0x100/0x100 [ 338.273462] ? get_page_from_freelist+0x1046/0x23b0 [ 338.278472] ? __might_sleep+0x93/0xb0 [ 338.282347] __alloc_pages_nodemask+0x60d/0x770 [ 338.287014] ? __alloc_pages_slowpath+0x2650/0x2650 [ 338.292019] ? find_get_entry+0xd7/0x5a0 [ 338.296073] ? lock_downgrade+0x7f0/0x7f0 [ 338.300228] ? radix_tree_lookup_slot+0x55/0x90 [ 338.304900] alloc_pages_current+0xd6/0x1b0 [ 338.309217] __page_cache_alloc+0x1da/0x330 [ 338.313823] ? trace_hardirqs_off+0x10/0x10 [ 338.318138] pagecache_get_page+0x129/0x7c0 [ 338.322539] grab_cache_page_write_begin+0x55/0x90 [ 338.327632] ? rcu_read_lock_sched_held+0x108/0x120 [ 338.332637] ext4_da_write_begin+0x243/0xd30 [ 338.337033] ? ext4_write_begin+0x10e0/0x10e0 [ 338.341520] ? balance_dirty_pages_ratelimited+0x751/0x14e0 [ 338.347657] generic_perform_write+0x271/0x450 [ 338.352227] ? __mark_inode_dirty+0xbf5/0xe80 [ 338.356796] ? page_endio+0x410/0x410 [ 338.360596] ? file_update_time+0x22d/0x360 [ 338.364935] ? current_time+0xa0/0xa0 [ 338.368735] ? lock_acquire+0x173/0x400 [ 338.372700] ? ext4_file_write_iter+0x1db/0xe40 [ 338.377580] __generic_file_write_iter+0x201/0x580 [ 338.382689] ext4_file_write_iter+0x27a/0xe40 [ 338.387281] ? trace_hardirqs_off+0x10/0x10 [ 338.391637] ? ext4_file_mmap+0x260/0x260 [ 338.395780] ? trace_hardirqs_on+0x10/0x10 [ 338.400027] ? trace_hardirqs_off+0x10/0x10 [ 338.404348] __vfs_write+0x413/0x840 [ 338.408049] ? trace_hardirqs_off+0x10/0x10 [ 338.412364] ? kernel_read+0x130/0x130 [ 338.416258] ? __lock_is_held+0xb5/0x140 [ 338.420318] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 338.425059] ? __sb_start_write+0x1f3/0x2a0 [ 338.429366] vfs_write+0x150/0x4f0 [ 338.432893] SyS_write+0x100/0x250 [ 338.436434] ? SyS_read+0x250/0x250 [ 338.440050] ? do_syscall_64+0x4c/0x5b0 [ 338.444015] ? SyS_read+0x250/0x250 [ 338.447629] do_syscall_64+0x1c7/0x5b0 [ 338.451503] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 338.456337] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 338.461514] RIP: 0033:0x7f79068fd19d [ 338.465209] RSP: 002b:00007f7904e9df90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 338.472924] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 00007f79068fd19d [ 338.480212] RDX: 0000000000000400 RSI: 00000000020baa90 RDI: 0000000000000005 [ 338.487474] RBP: 00000000020baa90 R08: 0000000002115c80 R09: 302039202072614d [ 338.494730] R10: 2038343a30323a33 R11: 0000000000000293 R12: 0000000000000000 [ 338.501996] R13: 00007f7904e9e410 R14: 0000000002115c80 R15: 00000000020ba890 [ 338.528366] device bridge_slave_1 entered promiscuous mode [ 338.617403] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 338.656450] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 338.763986] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.782613] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.801532] device bridge_slave_0 entered promiscuous mode [ 338.818621] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 338.829612] team0: Port device team_slave_0 added [ 338.847975] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.859224] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.878065] device bridge_slave_1 entered promiscuous mode [ 338.895067] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 338.906873] team0: Port device team_slave_1 added [ 338.930976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 338.977029] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 339.002201] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 339.012249] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 339.051341] Mem-Info: [ 339.066968] warn_alloc_show_mem: 1 callbacks suppressed [ 339.066973] Mem-Info: [ 339.070163] active_anon:5360 inactive_anon:195 isolated_anon:0 [ 339.070163] active_file:662 inactive_file:1115 isolated_file:12 [ 339.070163] unevictable:0 dirty:1 writeback:1 unstable:0 [ 339.070163] slab_reclaimable:13020 slab_unreclaimable:98384 [ 339.070163] mapped:1103 shmem:249 pagetables:406 bounce:0 [ 339.070163] free:75385 free_pcp:347 free_cma:0 [ 339.087958] active_anon:5360 inactive_anon:195 isolated_anon:0 [ 339.087958] active_file:662 inactive_file:1115 isolated_file:12 [ 339.087958] unevictable:0 dirty:1 writeback:1 unstable:0 [ 339.087958] slab_reclaimable:13020 slab_unreclaimable:98384 [ 339.087958] mapped:1103 shmem:249 pagetables:406 bounce:0 [ 339.087958] free:79166 free_pcp:334 free_cma:0 [ 339.152548] device hsr_slave_0 entered promiscuous mode [ 339.190419] device hsr_slave_1 entered promiscuous mode [ 339.200307] Node 0 active_anon:21204kB inactive_anon:768kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:8kB dirty:24kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 339.250095] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 339.257430] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 339.295122] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 339.310380] Node 1 active_anon:300kB inactive_anon:12kB active_file:2672kB inactive_file:4388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4392kB dirty:24kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 339.330860] team0: Port device team_slave_0 added [ 339.345744] Node 0 active_anon:21204kB inactive_anon:768kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:8kB dirty:24kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 339.390091] Node 0 DMA free:10632kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.401545] device bridge_slave_1 left promiscuous mode [ 339.470186] Node 1 active_anon:300kB inactive_anon:12kB active_file:2672kB inactive_file:4388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4392kB dirty:24kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 339.470321] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.503926] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 339.508979] Node 0 DMA32 free:46216kB min:36384kB low:45480kB high:54576kB active_anon:21192kB inactive_anon:768kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:24kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6848kB pagetables:1512kB bounce:0kB free_pcp:848kB local_pcp:608kB free_cma:0kB [ 339.561320] Node 0 DMA free:10532kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.610145] lowmem_reserve[]: 0 0 0 0 0 [ 339.614203] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.640757] device bridge_slave_0 left promiscuous mode [ 339.670245] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.671810] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 339.702019] Node 0 DMA32 free:49148kB min:36384kB low:45480kB high:54576kB active_anon:21192kB inactive_anon:768kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:24kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6848kB pagetables:1512kB bounce:0kB free_pcp:1320kB local_pcp:692kB free_cma:0kB [ 339.710084] lowmem_reserve[]: [ 339.733537] device veth1_vlan left promiscuous mode [ 339.760168] device veth0_vlan left promiscuous mode [ 339.814591] lowmem_reserve[]: 0 0 0 0 0 [ 339.818922] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.830101] 0 0 0 0 0 [ 339.867926] Node 1 Normal free:241836kB min:53504kB low:66880kB high:80256kB active_anon:300kB inactive_anon:12kB active_file:2672kB inactive_file:4388kB unevictable:0kB writepending:24kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:320kB pagetables:148kB bounce:0kB free_pcp:576kB local_pcp:532kB free_cma:0kB [ 339.930117] lowmem_reserve[]: 0 0 0 0 0 [ 339.934172] Node 1 Normal free:231296kB min:53504kB low:66880kB high:80256kB active_anon:300kB inactive_anon:12kB active_file:2672kB inactive_file:4388kB unevictable:0kB writepending:24kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:320kB pagetables:148kB bounce:0kB free_pcp:484kB local_pcp:24kB free_cma:0kB [ 339.960068] lowmem_reserve[]: 0 0 0 0 0 [ 339.979865] Node 0 DMA: 3*4kB (M) 3*8kB (M) 5*16kB (UME) 15*32kB (UM) 13*64kB (UME) 9*128kB (UME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10516kB [ 340.020105] lowmem_reserve[]: 0 0 0 0 0 [ 340.024166] Node 0 DMA: 3*4kB (M) 9*8kB (UM) 15*16kB (UME) 15*32kB (UM) 13*64kB (UME) 9*128kB (UME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10724kB [ 340.043869] Node 0 DMA32: 550*4kB (MEH) 156*8kB (UMEH) 40*16kB (UMEH) 15*32kB (UMEH) 20*64kB (UMEH) 4*128kB (UM) 15*256kB (UMH) 63*512kB (U) 3*1024kB (UM) 0*2048kB 0*4096kB = 45528kB [ 340.067321] device hsr_slave_1 left promiscuous mode [ 340.090079] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 340.120066] Node 1 Normal: 0*4kB 3*8kB (UME) 2*16kB [ 340.120110] Node 0 [ 340.120131] (UE) [ 340.125244] DMA32: [ 340.127476] 3*32kB [ 340.129519] 551*4kB [ 340.138908] device hsr_slave_0 left promiscuous mode [ 340.160167] (UME) 1*64kB (M) 0*128kB 0*256kB 16*512kB (UM) 137*1024kB (U) 7*2048kB (UM) 3*4096kB (U) = 175320kB [ 340.173591] (MEH) 156*8kB (MEH) 44*16kB (UMEH) 17*32kB (UMEH) 20*64kB (UMEH) 4*128kB (UM) 14*256kB (UMH) 63*512kB (U) 3*1024kB (UM) 0*2048kB 0*4096kB = 45404kB [ 340.194140] team0 (unregistering): Port device team_slave_1 removed [ 340.200147] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 340.200671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.236521] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 340.260082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 340.260240] Node 1 Normal: 0*4kB 3*8kB (UME) 1*16kB (E) 2*32kB (ME) 2*64kB (UM) 1*128kB (U) 0*256kB 2*512kB (UM) [ 340.268746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.268752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 340.330739] 124*1024kB (U) 7*2048kB (UM) 3*4096kB (U) = 154984kB [ 340.337004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.350122] 2017 total pagecache pages [ 340.354075] 0 pages in swap cache [ 340.357586] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 340.370083] Swap cache stats: add 0, delete 0, find 0/0 [ 340.375466] Free swap = 0kB [ 340.378674] Total swap = 0kB [ 340.410125] 1965979 pages RAM [ 340.410765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 340.413278] 0 pages HighMem/MovableOnly [ 340.450103] 335868 pages reserved [ 340.453618] 0 pages cma reserved [ 340.456987] Out of memory: Kill process 8030 (syz-executor.0) score 1000 or sacrifice child [ 340.463142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.479501] bond0 (unregistering): Released all slaves [ 340.510132] Killed process 8031 (syz-executor.0) total-vm:38036kB, anon-rss:128kB, file-rss:0kB, shmem-rss:0kB [ 340.510750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 340.560349] oom_reaper: reaped process 8031 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 340.566768] 1167 total pagecache pages [ 340.574241] 0 pages in swap cache [ 340.577942] Swap cache stats: add 0, delete 0, find 0/0 [ 340.587799] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 340.612345] team0: Port device team_slave_1 added [ 340.645174] Free swap = 0kB [ 340.657727] Total swap = 0kB [ 340.670311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 340.678666] 1965979 pages RAM [ 340.699445] 0 pages HighMem/MovableOnly [ 340.709310] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 340.725410] syz-executor.5 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 340.737646] 335868 pages reserved [ 340.748553] 0 pages cma reserved [ 340.752643] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 340.793865] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 340.808569] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 340.827148] CPU: 0 PID: 8042 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 340.834984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.844345] Call Trace: [ 340.846972] dump_stack+0xf7/0x13b [ 340.850520] dump_header+0x160/0x63f [ 340.854228] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 340.859325] ? ___ratelimit+0x243/0x519 [ 340.863305] ? do_raw_spin_unlock+0x16a/0x250 [ 340.867806] oom_kill_process.cold.24+0xb/0xa1a [ 340.872482] ? out_of_memory+0x7f9/0x1030 [ 340.876634] ? lock_downgrade+0x7f0/0x7f0 [ 340.880793] out_of_memory+0x2b0/0x1030 [ 340.884774] ? oom_killer_disable+0x1a0/0x1a0 [ 340.889271] ? __alloc_pages_slowpath+0xb69/0x2650 [ 340.894217] __alloc_pages_slowpath+0x1ef3/0x2650 [ 340.899101] ? warn_alloc+0x100/0x100 [ 340.902907] ? get_page_from_freelist+0x1046/0x23b0 [ 340.907942] ? __might_sleep+0x93/0xb0 [ 340.911838] __alloc_pages_nodemask+0x60d/0x770 [ 340.916515] ? find_held_lock+0x36/0x1d0 [ 340.920581] ? __alloc_pages_slowpath+0x2650/0x2650 [ 340.925604] ? trace_hardirqs_off+0x10/0x10 [ 340.929934] ? reacquire_held_locks+0xb7/0x3a0 [ 340.934523] ? alloc_set_pte+0xa89/0x11a0 [ 340.938682] alloc_pages_vma+0xad/0x420 [ 340.942668] wp_page_copy+0x1f4/0x1070 [ 340.946555] ? lock_downgrade+0x7f0/0x7f0 [ 340.950704] ? pmd_devmap_trans_unstable+0x130/0x130 [ 340.955802] ? __pte_alloc_kernel+0x1c0/0x1c0 [ 340.960315] ? do_raw_spin_unlock+0x16a/0x250 [ 340.964807] do_wp_page+0x21b/0x1390 [ 340.968518] ? finish_mkwrite_fault+0x600/0x600 [ 340.973170] ? add_mm_counter_fast+0xc0/0xc0 [ 340.977564] __handle_mm_fault+0x1b3a/0x3870 [ 340.981976] ? copy_page_range+0x1d10/0x1d10 [ 340.986377] ? find_held_lock+0x36/0x1d0 [ 340.990431] handle_mm_fault+0x234/0x6e0 [ 340.994480] ? find_vma+0xe2/0x150 [ 340.998008] __do_page_fault+0x44d/0xb00 [ 341.002052] ? vmalloc_fault+0xc90/0xc90 [ 341.006101] ? retint_user+0x18/0x18 [ 341.009800] ? page_fault+0x2f/0x50 [ 341.013428] do_page_fault+0x64/0x3fb [ 341.017225] ? page_fault+0x2f/0x50 [ 341.020836] page_fault+0x45/0x50 [ 341.024272] RIP: 0033:0x401446 [ 341.027446] RSP: 002b:00007ffe844c4810 EFLAGS: 00010202 [ 341.032797] RAX: 0000000000001f6b RBX: 00007ffe844c4850 RCX: 000000000045951a [ 341.040053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001f6b [ 341.047309] RBP: 0000000000000000 R08: 0000000000001f6a R09: 0000000001060940 [ 341.054564] R10: 0000000001060c10 R11: 0000000000000246 R12: 0000000000416a50 [ 341.061821] R13: 00007ffe844c4a78 R14: 0000000000000000 R15: 0000000000000000 [ 341.069094] CPU: 1 PID: 8031 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 341.076921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.086409] Call Trace: [ 341.089005] dump_stack+0xf7/0x13b [ 341.092555] warn_alloc.cold.110+0xa2/0x1be [ 341.097022] ? zone_watermark_ok_safe+0x260/0x260 [ 341.101896] ? __alloc_pages_direct_compact+0xc2/0x330 [ 341.107194] __alloc_pages_slowpath+0x2052/0x2650 [ 341.112056] ? trace_hardirqs_off+0x10/0x10 [ 341.116383] ? warn_alloc+0x100/0x100 [ 341.120191] ? get_page_from_freelist+0x1046/0x23b0 [ 341.125220] ? __might_sleep+0x93/0xb0 [ 341.129110] __alloc_pages_nodemask+0x60d/0x770 [ 341.133783] ? __alloc_pages_slowpath+0x2650/0x2650 [ 341.138801] ? wait_for_completion+0x440/0x440 [ 341.143435] alloc_pages_current+0xd6/0x1b0 [ 341.147767] ion_page_pool_alloc+0x102/0x180 [ 341.152179] ion_system_heap_allocate+0x14e/0x930 [ 341.157020] ? ion_system_heap_free+0x270/0x270 [ 341.161699] ion_alloc+0x216/0x770 [ 341.165239] ? ion_dma_buf_release+0x40/0x40 [ 341.169674] ? kasan_check_write+0x14/0x20 [ 341.173911] ion_ioctl+0xe2/0x1b6 [ 341.177357] ? ion_alloc.cold.15+0x32/0x32 [ 341.181599] do_vfs_ioctl+0x180/0xfb0 [ 341.185416] ? __fget+0x1ad/0x2f0 [ 341.188867] ? ioctl_preallocate+0x1a0/0x1a0 [ 341.193277] ? __fget+0x1ca/0x2f0 [ 341.196727] ? security_file_ioctl+0x6a/0xa0 [ 341.201149] ? SyS_clock_settime+0x1a0/0x1a0 [ 341.205570] ? security_file_ioctl+0x6a/0xa0 [ 341.209991] SyS_ioctl+0x74/0x80 [ 341.213449] ? do_vfs_ioctl+0xfb0/0xfb0 [ 341.217445] do_syscall_64+0x1c7/0x5b0 [ 341.221467] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.226345] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 341.231535] RIP: 0033:0x45af49 [ 341.234720] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.242426] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 341.249698] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 341.256980] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 341.264274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 341.271542] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 341.279969] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 341.291846] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 341.303701] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 341.319484] Mem-Info: [ 341.322644] Mem-Info: [ 341.325733] active_anon:5376 inactive_anon:195 isolated_anon:0 [ 341.325733] active_file:14 inactive_file:164 isolated_file:0 [ 341.325733] unevictable:0 dirty:0 writeback:0 unstable:0 [ 341.325733] slab_reclaimable:13020 slab_unreclaimable:98005 [ 341.325733] mapped:77 shmem:249 pagetables:422 bounce:0 [ 341.325733] free:82198 free_pcp:519 free_cma:0 [ 341.325814] active_anon:5376 inactive_anon:195 isolated_anon:0 [ 341.325814] active_file:14 inactive_file:189 isolated_file:0 [ 341.325814] unevictable:0 dirty:0 writeback:0 unstable:0 [ 341.325814] slab_reclaimable:13020 slab_unreclaimable:98005 [ 341.325814] mapped:77 shmem:249 pagetables:422 bounce:0 [ 341.325814] free:82198 free_pcp:519 free_cma:0 [ 341.386934] Node 0 active_anon:21200kB inactive_anon:768kB active_file:24kB inactive_file:1624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1108kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 341.400138] syz-executor.4 cpuset= [ 341.418785] syz-executor.3 cpuset= [ 341.422806] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 341.440166] syz3 mems_allowed=0-1 [ 341.443668] CPU: 1 PID: 8018 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 341.451466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.460827] Call Trace: [ 341.463420] dump_stack+0xf7/0x13b [ 341.466962] warn_alloc.cold.110+0xa2/0x1be [ 341.471287] ? zone_watermark_ok_safe+0x260/0x260 [ 341.476131] ? usleep_range+0x120/0x120 [ 341.480110] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 341.485217] ? call_timer_fn+0x570/0x570 [ 341.489366] ? unreserve_highatomic_pageblock+0x315/0x450 [ 341.494914] __alloc_pages_slowpath+0x2052/0x2650 [ 341.499767] ? warn_alloc+0x100/0x100 [ 341.503565] ? get_page_from_freelist+0x1046/0x23b0 [ 341.508591] ? __might_sleep+0x93/0xb0 [ 341.512572] __alloc_pages_nodemask+0x60d/0x770 [ 341.517240] ? __alloc_pages_slowpath+0x2650/0x2650 [ 341.522267] ? wait_for_completion+0x440/0x440 [ 341.526860] alloc_pages_current+0xd6/0x1b0 [ 341.531193] ion_page_pool_alloc+0x102/0x180 [ 341.535602] ion_system_heap_allocate+0x14e/0x930 [ 341.540451] ? do_raw_spin_unlock+0x16a/0x250 [ 341.544945] ? ion_system_heap_free+0x270/0x270 [ 341.549619] ion_alloc+0x27f/0x770 [ 341.553160] ? ion_dma_buf_release+0x40/0x40 [ 341.557572] ? kasan_check_write+0x14/0x20 [ 341.561808] ion_ioctl+0xe2/0x1b6 [ 341.565256] ? ion_alloc.cold.15+0x32/0x32 [ 341.569492] do_vfs_ioctl+0x180/0xfb0 [ 341.570165] Node 1 active_anon:304kB inactive_anon:12kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 341.573289] ? __fget+0x1ad/0x2f0 [ 341.602942] ? ioctl_preallocate+0x1a0/0x1a0 [ 341.607355] ? __fget+0x1ca/0x2f0 [ 341.610812] ? security_file_ioctl+0x6a/0xa0 [ 341.615219] ? SyS_clock_settime+0x1a0/0x1a0 [ 341.619623] ? security_file_ioctl+0x6a/0xa0 [ 341.624038] SyS_ioctl+0x74/0x80 [ 341.627407] ? do_vfs_ioctl+0xfb0/0xfb0 [ 341.631386] do_syscall_64+0x1c7/0x5b0 [ 341.635268] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.640112] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 341.645296] RIP: 0033:0x45af49 [ 341.648480] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.656187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 341.663459] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 341.670726] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 341.678003] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 341.685275] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 341.693610] CPU: 1 PID: 8023 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 341.701449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.710809] Call Trace: [ 341.713431] dump_stack+0xf7/0x13b [ 341.716967] warn_alloc.cold.110+0xa2/0x1be [ 341.721289] ? zone_watermark_ok_safe+0x260/0x260 [ 341.726124] ? usleep_range+0x120/0x120 [ 341.730094] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 341.735194] ? call_timer_fn+0x570/0x570 [ 341.739252] ? unreserve_highatomic_pageblock+0x315/0x450 [ 341.744794] __alloc_pages_slowpath+0x2052/0x2650 [ 341.749649] ? warn_alloc+0x100/0x100 [ 341.750655] Node 0 DMA free:10528kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 341.753450] ? get_page_from_freelist+0x1046/0x23b0 [ 341.753465] ? __might_sleep+0x93/0xb0 [ 341.788548] __alloc_pages_nodemask+0x60d/0x770 [ 341.793221] ? __alloc_pages_slowpath+0x2650/0x2650 [ 341.798240] ? wait_for_completion+0x440/0x440 [ 341.802828] alloc_pages_current+0xd6/0x1b0 [ 341.807152] ion_page_pool_alloc+0x102/0x180 [ 341.811557] ion_system_heap_allocate+0x14e/0x930 [ 341.816394] ? do_raw_spin_unlock+0x16a/0x250 [ 341.820891] ? ion_system_heap_free+0x270/0x270 [ 341.825559] ion_alloc+0x27f/0x770 [ 341.829095] ? ion_dma_buf_release+0x40/0x40 [ 341.833502] ? kasan_check_write+0x14/0x20 [ 341.837826] ion_ioctl+0xe2/0x1b6 [ 341.841297] ? ion_alloc.cold.15+0x32/0x32 [ 341.845560] do_vfs_ioctl+0x180/0xfb0 [ 341.849364] ? __fget+0x1ad/0x2f0 [ 341.852941] ? ioctl_preallocate+0x1a0/0x1a0 [ 341.857454] ? __fget+0x1ca/0x2f0 [ 341.860923] ? security_file_ioctl+0x6a/0xa0 [ 341.865343] ? SyS_clock_settime+0x1a0/0x1a0 [ 341.869767] ? security_file_ioctl+0x6a/0xa0 [ 341.874197] SyS_ioctl+0x74/0x80 [ 341.877557] ? do_vfs_ioctl+0xfb0/0xfb0 [ 341.881529] do_syscall_64+0x1c7/0x5b0 [ 341.885436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.890472] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 341.895674] RIP: 0033:0x45af49 [ 341.898871] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.906680] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 341.913955] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 341.921232] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 341.928511] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 341.935789] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 341.943870] syz4 mems_allowed=0-1 [ 341.945363] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 341.947450] CPU: 1 PID: 8025 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 341.960173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.969543] Call Trace: [ 341.972169] dump_stack+0xf7/0x13b [ 341.975725] warn_alloc.cold.110+0xa2/0x1be [ 341.980054] ? zone_watermark_ok_safe+0x260/0x260 [ 341.983646] Node 0 [ 341.984899] ? usleep_range+0x120/0x120 [ 341.984911] DMA32 free:321528kB min:36384kB low:45480kB high:54576kB active_anon:21188kB inactive_anon:768kB active_file:1144kB inactive_file:2392kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6848kB pagetables:1528kB bounce:0kB free_pcp:916kB local_pcp:180kB free_cma:0kB [ 341.987129] ? rcu_read_lock_sched_held+0x108/0x120 [ 342.010715] lowmem_reserve[]: [ 342.019684] ? call_timer_fn+0x570/0x570 [ 342.031858] __alloc_pages_slowpath+0x2052/0x2650 [ 342.037064] ? warn_alloc+0x100/0x100 [ 342.040883] ? get_page_from_freelist+0x1046/0x23b0 [ 342.045916] ? __might_sleep+0x93/0xb0 [ 342.049820] __alloc_pages_nodemask+0x60d/0x770 [ 342.054587] ? __alloc_pages_slowpath+0x2650/0x2650 [ 342.059848] ? wait_for_completion+0x440/0x440 [ 342.064534] alloc_pages_current+0xd6/0x1b0 [ 342.068890] ion_page_pool_alloc+0x102/0x180 [ 342.070214] 0 0 [ 342.073449] ion_system_heap_allocate+0x14e/0x930 [ 342.073458] ? ion_system_heap_free+0x270/0x270 [ 342.075480] 0 [ 342.080344] ion_alloc+0x216/0x770 [ 342.080355] ? ion_dma_buf_release+0x40/0x40 [ 342.080367] ? kasan_check_write+0x14/0x20 [ 342.080372] ion_ioctl+0xe2/0x1b6 [ 342.080378] ? ion_alloc.cold.15+0x32/0x32 [ 342.080390] do_vfs_ioctl+0x180/0xfb0 [ 342.080396] ? __fget+0x1ad/0x2f0 [ 342.080403] ? ioctl_preallocate+0x1a0/0x1a0 [ 342.080410] ? __fget+0x1ca/0x2f0 [ 342.080423] ? security_file_ioctl+0x6a/0xa0 [ 342.080428] ? SyS_clock_settime+0x1a0/0x1a0 [ 342.080432] ? security_file_ioctl+0x6a/0xa0 [ 342.080437] SyS_ioctl+0x74/0x80 [ 342.080442] ? do_vfs_ioctl+0xfb0/0xfb0 [ 342.080450] do_syscall_64+0x1c7/0x5b0 [ 342.080455] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 342.080468] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 342.080473] RIP: 0033:0x45af49 [ 342.080476] RSP: 002b:00007ffa6e582c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.080483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 342.080493] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 342.080495] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 342.080498] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5836d4 [ 342.080501] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 342.081132] Node 0 active_anon:21200kB inactive_anon:768kB active_file:1144kB inactive_file:2392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2008kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 342.110245] 0 [ 342.111821] Node 1 active_anon:256kB inactive_anon:12kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 342.114606] 0 [ 342.119015] Node 0 [ 342.152488] DMA free:10528kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.157295] Node 0 [ 342.160563] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 342.160586] Node 0 DMA32 free:281940kB min:36384kB low:45480kB high:54576kB active_anon:21184kB inactive_anon:768kB active_file:1180kB inactive_file:2332kB unevictable:0kB writepending:4kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6848kB pagetables:1516kB bounce:0kB free_pcp:968kB local_pcp:720kB free_cma:0kB [ 342.160597] lowmem_reserve[]: 0 0 0 0 0 [ 342.160608] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.160617] lowmem_reserve[]: 0 0 0 0 0 [ 342.160632] Node 1 Normal free:328356kB min:53504kB low:66880kB high:80256kB active_anon:256kB inactive_anon:12kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:288kB pagetables:148kB bounce:0kB free_pcp:672kB local_pcp:12kB free_cma:0kB [ 342.160642] lowmem_reserve[]: 0 0 0 0 0 [ 342.160657] Node 0 DMA: 8*4kB (UM) 10*8kB (UM) 9*16kB (UME) 11*32kB (UM) 13*64kB (UME) 9*128kB (UME) 3*256kB (UME) 2*512kB (UE) 2*1024kB [ 342.174965] device hsr_slave_0 entered promiscuous mode [ 342.190088] (ME) [ 342.220107] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.273431] 2*2048kB [ 342.382961] lowmem_reserve[]: [ 342.453703] warn_alloc_show_mem: 1 callbacks suppressed [ 342.453707] Mem-Info: [ 342.464690] active_anon:5363 inactive_anon:195 isolated_anon:0 [ 342.464690] active_file:303 inactive_file:591 isolated_file:0 [ 342.464690] unevictable:0 dirty:1 writeback:0 unstable:0 [ 342.464690] slab_reclaimable:13020 slab_unreclaimable:98220 [ 342.464690] mapped:512 shmem:249 pagetables:416 bounce:0 [ 342.464690] free:155206 free_pcp:392 free_cma:0 [ 342.503862] device hsr_slave_1 entered promiscuous mode [ 342.541042] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 342.548389] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 342.560084] Node 0 active_anon:21196kB inactive_anon:768kB active_file:1180kB inactive_file:2332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2048kB dirty:4kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 342.583760] 0 0 0 0 0 [ 342.589974] Node 1 Normal free:328356kB min:53504kB low:66880kB high:80256kB active_anon:256kB inactive_anon:12kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:288kB pagetables:148kB bounce:0kB free_pcp:672kB local_pcp:660kB free_cma:0kB [ 342.630139] (UE) 0*4096kB = 10528kB [ 342.650076] Node 0 DMA32: 509*4kB (UE) 164*8kB (UME) 19*16kB (UME) 309*32kB (UME) 2817*64kB (UME) 377*128kB (UM) 109*256kB (UM) 5*512kB (UM) 9*1024kB (UM) 0*2048kB 0*4096kB = 281764kB [ 342.687302] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 342.694326] Node 1 active_anon:256kB inactive_anon:12kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 342.710969] lowmem_reserve[]: 0 0 0 0 0 [ 342.740408] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 342.752483] Node 0 DMA: 8*4kB (UM) 10*8kB (UM) 9*16kB (UME) 11*32kB (UM) 13*64kB (UME) 9*128kB (UME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10528kB [ 342.785201] Node 1 Normal: 609*4kB (UM) 862*8kB (UME) 591*16kB (UME) 1006*32kB (UME) 1122*64kB (UM) 182*128kB (UM) 90*256kB (UM) 37*512kB (UM) 101*1024kB (UM) 12*2048kB (UM) 3*4096kB (U) = 328356kB [ 342.791867] Node 0 [ 342.832707] Node 0 DMA free:10528kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.860162] DMA32: 510*4kB (UME) 197*8kB (UME) 21*16kB (UE) 288*32kB (UE) 2816*64kB (UE) 375*128kB (UM) 109*256kB (UM) 5*512kB (UM) 9*1024kB (UM) 0*2048kB 0*4096kB = 281072kB [ 342.864941] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 342.883916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.892834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 342.912647] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 342.914664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.930584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.939456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 342.961397] Node 1 Normal: 609*4kB (UM) 863*8kB (UME) 591*16kB (UME) 1006*32kB (UME) 1122*64kB (UM) 182*128kB (UM) 90*256kB (UM) 37*512kB (UM) 101*1024kB (UM) 12*2048kB (UM) 3*4096kB (U) = 328364kB [ 342.961694] lowmem_reserve[]: [ 342.990479] 1290 total pagecache pages [ 343.000739] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 343.010115] 0 pages in swap cache [ 343.013592] Swap cache stats: add 0, delete 0, find 0/0 [ 343.018947] Free swap = 0kB [ 343.030290] 0 2570 2570 2570 2570 [ 343.033902] Node 0 DMA32 free:271808kB min:36384kB low:45480kB high:54576kB active_anon:21184kB inactive_anon:768kB active_file:2080kB inactive_file:1732kB unevictable:0kB writepending:4kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6848kB pagetables:1516kB bounce:0kB free_pcp:404kB local_pcp:212kB free_cma:0kB [ 343.053093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.070956] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 343.079298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.090603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.110163] Total swap = 0kB [ 343.113480] 1965979 pages RAM [ 343.116591] 0 pages HighMem/MovableOnly [ 343.134083] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 343.150190] 335868 pages reserved [ 343.153333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 343.153694] 0 pages cma reserved [ 343.166296] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.179342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.180997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.200841] lowmem_reserve[]: 0 0 0 0 0 [ 343.204879] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.240594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 343.249536] 1273 total pagecache pages [ 343.253449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 343.280166] 0 pages in swap cache [ 343.280465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.283849] Swap cache stats: add 0, delete 0, find 0/0 [ 343.292330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.330163] lowmem_reserve[]: 0 0 0 0 0 [ 343.332979] Free swap = 0kB [ 343.334210] Node 1 [ 343.337217] Total swap = 0kB [ 343.337227] Normal free:188076kB min:53504kB low:66880kB high:80256kB active_anon:256kB inactive_anon:12kB active_file:44kB inactive_file:20kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:288kB pagetables:148kB bounce:0kB free_pcp:672kB local_pcp:12kB free_cma:0kB [ 343.339443] 1965979 pages RAM [ 343.342955] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.379874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.402433] lowmem_reserve[]: 0 0 0 0 0 [ 343.406571] Node 0 DMA: 8*4kB (UM) 10*8kB (UM) 9*16kB (UME) 11*32kB (UM) 13*64kB (UME) 9*128kB (UME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10528kB [ 343.450132] Node 0 DMA32: 509*4kB (ME) 133*8kB (ME) 18*16kB (UE) 4*32kB (E) 1791*64kB (UE) 375*128kB (UM) 109*256kB (UM) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 196604kB [ 343.482825] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 343.500101] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 343.512984] 0 pages HighMem/MovableOnly [ 343.513894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 343.517028] 335868 pages reserved [ 343.540081] 0 pages cma reserved [ 343.543513] Out of memory: Kill process 7217 (syz-execprog) score 1 or sacrifice child [ 343.550355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.559697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.571037] Node 1 Normal: 609*4kB (UM) 863*8kB (UME) 591*16kB (UME) 1006*32kB (UME) 1122*64kB (UM) 182*128kB (UM) 90*256kB (UM) 37*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 188076kB [ 343.580696] Killed process 8027 (syz-executor.2) total-vm:37644kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 343.610746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.643529] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.649923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.656703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.686931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 343.704668] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 343.713324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 343.730613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.739506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 343.748657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.760731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.767792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.790119] 1310 total pagecache pages [ 343.794044] 0 pages in swap cache [ 343.797500] Swap cache stats: add 0, delete 0, find 0/0 [ 343.806360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 343.821213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.836463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 343.844976] Free swap = 0kB [ 343.847999] Total swap = 0kB [ 343.854483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.865174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.874505] 1965979 pages RAM [ 343.877909] 0 pages HighMem/MovableOnly 2020/03/09 03:20:53 result: hanged=false err=executor 2: EOF 2020/03/09 03:20:53 executed programs: 106 [ 343.887119] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 343.894877] 335868 pages reserved [ 343.898413] 0 pages cma reserved [ 343.902594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.911306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.919491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.932299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 343.957767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 343.973542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.982007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.031099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.038688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.153061] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 344.159297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.249329] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 344.272108] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 344.278434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.310261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.335072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.722713] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 344.757013] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 344.781234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.820873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.009251] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 345.031637] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 345.038982] IPVS: ftp: loaded support on port[0] = 21 [ 345.061433] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 345.108147] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 345.146043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.179106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.216772] device veth0_vlan entered promiscuous mode [ 345.230192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.248639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.299013] device veth1_vlan entered promiscuous mode [ 345.315885] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 345.367726] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 345.474753] IPVS: ftp: loaded support on port[0] = 21 [ 345.808824] chnl_net:caif_netlink_parms(): no params data found [ 346.163292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 346.174889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 346.225493] chnl_net:caif_netlink_parms(): no params data found [ 346.448818] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.458983] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 346.464263] syz-executor.3: [ 346.472321] syz-executor.3: [ 346.472327] syz-executor.4: [ 346.490954] page allocation failure: order:4 [ 346.500738] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.504440] page allocation failure: order:4 [ 346.505308] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 346.516103] page allocation failure: order:4 [ 346.518110] syz-executor.0: [ 346.526719] syz-executor.1: [ 346.528139] syz-executor.1: [ 346.539684] device bridge_slave_0 entered promiscuous mode [ 346.546804] page allocation failure: order:4 [ 346.548560] page allocation failure: order:4 [ 346.549643] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 346.553155] syz-executor.0 cpuset= [ 346.563202] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 346.565139] page allocation failure: order:4 [ 346.568319] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 346.577659] (null) [ 346.585471] (null) [ 346.588990] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.599430] (null) [ 346.601637] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 346.601645] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 346.601663] CPU: 1 PID: 8092 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 346.601666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.601668] Call Trace: [ 346.601684] dump_stack+0xf7/0x13b [ 346.601696] warn_alloc.cold.110+0xa2/0x1be [ 346.601702] ? zone_watermark_ok_safe+0x260/0x260 [ 346.601714] ? __alloc_pages_direct_compact+0xc2/0x330 [ 346.601721] __alloc_pages_slowpath+0x2052/0x2650 [ 346.601736] ? trace_hardirqs_off+0x10/0x10 [ 346.620429] syz-executor.4 cpuset= [ 346.623042] ? mark_held_locks+0xc7/0x130 [ 346.623051] ? warn_alloc+0x100/0x100 [ 346.623059] ? get_page_from_freelist+0x1046/0x23b0 [ 346.632699] syz-executor.1 cpuset= [ 346.635043] ? __might_sleep+0x93/0xb0 [ 346.635054] __alloc_pages_nodemask+0x60d/0x770 [ 346.639051] syz1 [ 346.643329] ? __alloc_pages_slowpath+0x2650/0x2650 [ 346.656401] (null) [ 346.658551] ? wait_for_completion+0x440/0x440 [ 346.658564] alloc_pages_current+0xd6/0x1b0 [ 346.658577] ion_page_pool_alloc+0x102/0x180 [ 346.681713] syz-executor.3 cpuset= [ 346.683062] ion_system_heap_allocate+0x14e/0x930 [ 346.683071] ? ion_system_heap_free+0x270/0x270 [ 346.689210] syz3 [ 346.691644] ion_alloc+0x216/0x770 [ 346.699384] mems_allowed=0-1 [ 346.700776] ? ion_dma_buf_release+0x40/0x40 [ 346.700789] ? kasan_check_write+0x14/0x20 [ 346.700797] ion_ioctl+0xe2/0x1b6 [ 346.700803] ? ion_alloc.cold.15+0x32/0x32 [ 346.700816] do_vfs_ioctl+0x180/0xfb0 [ 346.700824] ? __fget+0x1ad/0x2f0 [ 346.705465] syz4 [ 346.709743] ? ioctl_preallocate+0x1a0/0x1a0 [ 346.729783] mems_allowed=0-1 [ 346.732802] ? __fget+0x1ca/0x2f0 [ 346.732814] ? security_file_ioctl+0x6a/0xa0 [ 346.732820] ? SyS_clock_settime+0x1a0/0x1a0 [ 346.732824] ? security_file_ioctl+0x6a/0xa0 [ 346.732834] SyS_ioctl+0x74/0x80 [ 346.732841] ? do_vfs_ioctl+0xfb0/0xfb0 [ 346.732848] do_syscall_64+0x1c7/0x5b0 [ 346.732853] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 346.732865] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 346.732871] RIP: 0033:0x45af49 [ 346.732874] RSP: 002b:00007fb6d4db8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.732880] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 346.732883] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 346.732886] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 346.732888] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6d4db96d4 [ 346.732890] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 346.736974] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.742918] CPU: 0 PID: 8082 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 346.749162] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 346.752369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.752373] Call Trace: [ 346.752390] dump_stack+0xf7/0x13b [ 346.752401] warn_alloc.cold.110+0xa2/0x1be [ 346.752406] ? zone_watermark_ok_safe+0x260/0x260 [ 346.752421] ? __alloc_pages_direct_compact+0xc2/0x330 [ 346.752429] __alloc_pages_slowpath+0x2052/0x2650 [ 346.752445] ? trace_hardirqs_off+0x10/0x10 [ 346.756300] syz-executor.3 cpuset= [ 346.759691] ? warn_alloc+0x100/0x100 [ 346.759698] ? get_page_from_freelist+0x1046/0x23b0 [ 346.759714] ? __might_sleep+0x93/0xb0 [ 346.759720] __alloc_pages_nodemask+0x60d/0x770 [ 346.762646] device bridge_slave_1 entered promiscuous mode [ 346.766122] ? __alloc_pages_slowpath+0x2650/0x2650 [ 346.766135] ? wait_for_completion+0x440/0x440 [ 346.766145] alloc_pages_current+0xd6/0x1b0 [ 346.766155] ion_page_pool_alloc+0x102/0x180 [ 346.769333] syz0 [ 346.772705] ion_system_heap_allocate+0x14e/0x930 [ 346.780476] (null) [ 346.781503] ? ion_system_heap_free+0x270/0x270 [ 346.786540] syz3 [ 346.789289] ion_alloc+0x216/0x770 [ 346.795568] syz-executor.0 cpuset= [ 346.797142] ? ion_dma_buf_release+0x40/0x40 [ 346.797156] ? kasan_check_write+0x14/0x20 [ 346.803179] mems_allowed=0-1 [ 346.807283] ion_ioctl+0xe2/0x1b6 [ 346.807290] ? ion_alloc.cold.15+0x32/0x32 [ 346.807304] do_vfs_ioctl+0x180/0xfb0 [ 346.807312] ? __fget+0x1ad/0x2f0 [ 346.814981] mems_allowed=0-1 [ 346.818215] ? ioctl_preallocate+0x1a0/0x1a0 [ 346.818227] ? __fget+0x1ca/0x2f0 [ 346.818239] ? security_file_ioctl+0x6a/0xa0 [ 346.829140] syz0 [ 346.833068] ? SyS_clock_settime+0x1a0/0x1a0 [ 346.867929] mems_allowed=0-1 [ 346.868986] ? security_file_ioctl+0x6a/0xa0 [ 346.869001] SyS_ioctl+0x74/0x80 [ 346.869008] ? do_vfs_ioctl+0xfb0/0xfb0 [ 347.045744] do_syscall_64+0x1c7/0x5b0 [ 347.049647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.054517] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 347.059707] RIP: 0033:0x45af49 [ 347.062885] RSP: 002b:00007fb6d4dfac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.070620] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 347.077910] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 347.085175] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 347.092440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6d4dfb6d4 [ 347.099708] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 347.106986] CPU: 1 PID: 8084 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 347.114797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.124324] Call Trace: [ 347.126567] mems_allowed=0-1 [ 347.126948] dump_stack+0xf7/0x13b [ 347.133590] warn_alloc.cold.110+0xa2/0x1be [ 347.137935] ? zone_watermark_ok_safe+0x260/0x260 [ 347.142887] ? __alloc_pages_direct_compact+0xc2/0x330 [ 347.148173] __alloc_pages_slowpath+0x2052/0x2650 [ 347.153036] ? trace_hardirqs_off+0x10/0x10 [ 347.157350] ? warn_alloc+0x100/0x100 [ 347.161141] ? get_page_from_freelist+0x1046/0x23b0 [ 347.166156] ? __might_sleep+0x93/0xb0 [ 347.170043] __alloc_pages_nodemask+0x60d/0x770 [ 347.174719] ? trace_hardirqs_off+0x10/0x10 [ 347.179058] ? __alloc_pages_slowpath+0x2650/0x2650 [ 347.184084] ? wait_for_completion+0x440/0x440 [ 347.188678] alloc_pages_current+0xd6/0x1b0 [ 347.193014] ion_page_pool_alloc+0x102/0x180 [ 347.197435] ion_system_heap_allocate+0x14e/0x930 [ 347.202460] ? ion_system_heap_free+0x270/0x270 [ 347.208012] ion_alloc+0x216/0x770 [ 347.211564] ? ion_dma_buf_release+0x40/0x40 [ 347.215977] ? kasan_check_write+0x14/0x20 [ 347.220204] ion_ioctl+0xe2/0x1b6 [ 347.223653] ? ion_alloc.cold.15+0x32/0x32 [ 347.227926] do_vfs_ioctl+0x180/0xfb0 [ 347.231778] ? __fget+0x1ad/0x2f0 [ 347.235241] ? ioctl_preallocate+0x1a0/0x1a0 [ 347.239685] ? __fget+0x1ca/0x2f0 [ 347.243139] ? security_file_ioctl+0x6a/0xa0 [ 347.247552] ? SyS_clock_settime+0x1a0/0x1a0 [ 347.251980] ? security_file_ioctl+0x6a/0xa0 [ 347.256392] SyS_ioctl+0x74/0x80 [ 347.259765] ? do_vfs_ioctl+0xfb0/0xfb0 [ 347.263740] do_syscall_64+0x1c7/0x5b0 [ 347.267626] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.272477] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 347.277668] RIP: 0033:0x45af49 [ 347.280950] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.288656] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 347.295920] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 347.303196] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 347.310476] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 347.318229] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 347.325520] CPU: 0 PID: 8068 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 347.333339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.342714] Call Trace: [ 347.345302] dump_stack+0xf7/0x13b [ 347.348843] warn_alloc.cold.110+0xa2/0x1be [ 347.353157] ? zone_watermark_ok_safe+0x260/0x260 [ 347.358015] ? __alloc_pages_direct_compact+0xc2/0x330 [ 347.363385] __alloc_pages_slowpath+0x2052/0x2650 [ 347.368236] ? trace_hardirqs_off+0x10/0x10 [ 347.372828] ? warn_alloc+0x100/0x100 [ 347.376619] ? get_page_from_freelist+0x1046/0x23b0 [ 347.381636] ? __might_sleep+0x93/0xb0 [ 347.385520] __alloc_pages_nodemask+0x60d/0x770 [ 347.390181] ? __alloc_pages_slowpath+0x2650/0x2650 [ 347.395215] ? wait_for_completion+0x440/0x440 [ 347.399792] alloc_pages_current+0xd6/0x1b0 [ 347.406466] ion_page_pool_alloc+0x102/0x180 [ 347.410873] ion_system_heap_allocate+0x14e/0x930 [ 347.415716] ? ion_system_heap_free+0x270/0x270 [ 347.420381] ion_alloc+0x216/0x770 [ 347.423924] ? ion_dma_buf_release+0x40/0x40 [ 347.428344] ? kasan_check_write+0x14/0x20 [ 347.432590] ion_ioctl+0xe2/0x1b6 [ 347.436217] ? ion_alloc.cold.15+0x32/0x32 [ 347.440462] do_vfs_ioctl+0x180/0xfb0 [ 347.444286] ? __fget+0x1ad/0x2f0 [ 347.447755] ? ioctl_preallocate+0x1a0/0x1a0 [ 347.452158] ? __fget+0x1ca/0x2f0 [ 347.455605] ? security_file_ioctl+0x6a/0xa0 [ 347.458461] warn_alloc_show_mem: 1 callbacks suppressed [ 347.458464] Mem-Info: [ 347.460000] ? SyS_clock_settime+0x1a0/0x1a0 [ 347.460006] ? security_file_ioctl+0x6a/0xa0 [ 347.460017] SyS_ioctl+0x74/0x80 [ 347.460024] ? do_vfs_ioctl+0xfb0/0xfb0 [ 347.460032] do_syscall_64+0x1c7/0x5b0 [ 347.460037] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.460050] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 347.470932] active_anon:5455 inactive_anon:196 isolated_anon:0 [ 347.470932] active_file:997 inactive_file:1227 isolated_file:0 [ 347.470932] unevictable:0 dirty:28 writeback:0 unstable:0 [ 347.470932] slab_reclaimable:13038 slab_unreclaimable:99841 [ 347.470932] mapped:1452 shmem:250 pagetables:428 bounce:0 [ 347.470932] free:185645 free_pcp:436 free_cma:0 [ 347.472185] RIP: 0033:0x45af49 [ 347.472188] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.472196] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 347.472199] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 347.472201] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 347.472205] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 347.480015] Node 0 active_anon:21564kB inactive_anon:780kB active_file:3964kB inactive_file:4860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5784kB dirty:96kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 347.480064] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 347.497481] Node 1 active_anon:256kB inactive_anon:4kB active_file:24kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:16kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 347.506120] CPU: 0 PID: 8086 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 347.639908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.641828] Node 0 [ 347.649251] Call Trace: [ 347.649272] dump_stack+0xf7/0x13b [ 347.649283] warn_alloc.cold.110+0xa2/0x1be [ 347.649290] ? zone_watermark_ok_safe+0x260/0x260 [ 347.666868] ? __alloc_pages_direct_compact+0xc2/0x330 [ 347.672165] __alloc_pages_slowpath+0x2052/0x2650 [ 347.677018] ? trace_hardirqs_off+0x10/0x10 [ 347.681361] ? warn_alloc+0x100/0x100 [ 347.681393] DMA free:10628kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.685161] ? get_page_from_freelist+0x1046/0x23b0 [ 347.685176] ? __might_sleep+0x93/0xb0 [ 347.685182] __alloc_pages_nodemask+0x60d/0x770 [ 347.685191] ? __alloc_pages_slowpath+0x2650/0x2650 [ 347.729365] ? wait_for_completion+0x440/0x440 [ 347.733945] alloc_pages_current+0xd6/0x1b0 [ 347.738267] ion_page_pool_alloc+0x102/0x180 [ 347.742666] ion_system_heap_allocate+0x14e/0x930 [ 347.747519] ? ion_system_heap_free+0x270/0x270 [ 347.752209] ion_alloc+0x216/0x770 [ 347.755826] ? ion_dma_buf_release+0x40/0x40 [ 347.760228] ? kasan_check_write+0x14/0x20 [ 347.764458] ion_ioctl+0xe2/0x1b6 [ 347.768158] ? ion_alloc.cold.15+0x32/0x32 [ 347.772384] do_vfs_ioctl+0x180/0xfb0 [ 347.776801] ? __fget+0x1ad/0x2f0 [ 347.780252] ? ioctl_preallocate+0x1a0/0x1a0 [ 347.784659] ? __fget+0x1ca/0x2f0 [ 347.788102] ? security_file_ioctl+0x6a/0xa0 [ 347.792502] ? SyS_clock_settime+0x1a0/0x1a0 [ 347.796901] ? security_file_ioctl+0x6a/0xa0 [ 347.801313] SyS_ioctl+0x74/0x80 [ 347.801976] lowmem_reserve[]: [ 347.804671] ? do_vfs_ioctl+0xfb0/0xfb0 [ 347.804678] do_syscall_64+0x1c7/0x5b0 [ 347.804684] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.804697] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 347.816572] 0 [ 347.820466] RIP: 0033:0x45af49 [ 347.820469] RSP: 002b:00007ffa6e540c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.820475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 347.820478] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 347.820481] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 347.820484] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5416d4 [ 347.820486] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 347.886004] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.890130] CPU: 1 PID: 8057 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 347.895543] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.900257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.900261] Call Trace: [ 347.900278] dump_stack+0xf7/0x13b [ 347.900289] warn_alloc.cold.110+0xa2/0x1be [ 347.900294] ? zone_watermark_ok_safe+0x260/0x260 [ 347.900307] ? __alloc_pages_direct_compact+0xc2/0x330 [ 347.900313] __alloc_pages_slowpath+0x2052/0x2650 [ 347.900329] ? trace_hardirqs_off+0x10/0x10 [ 347.900336] ? warn_alloc+0x100/0x100 [ 347.900342] ? get_page_from_freelist+0x1046/0x23b0 [ 347.900356] ? __might_sleep+0x93/0xb0 [ 347.900363] __alloc_pages_nodemask+0x60d/0x770 [ 347.900370] ? __alloc_pages_slowpath+0x2650/0x2650 [ 347.900380] ? wait_for_completion+0x440/0x440 [ 347.900390] alloc_pages_current+0xd6/0x1b0 [ 347.900400] ion_page_pool_alloc+0x102/0x180 [ 347.900407] ion_system_heap_allocate+0x14e/0x930 [ 347.900415] ? ion_system_heap_free+0x270/0x270 [ 347.918494] device bridge_slave_0 entered promiscuous mode [ 347.922766] ion_alloc+0x216/0x770 [ 347.922778] ? ion_dma_buf_release+0x40/0x40 [ 347.922790] ? kasan_check_write+0x14/0x20 [ 347.922796] ion_ioctl+0xe2/0x1b6 [ 347.922801] ? ion_alloc.cold.15+0x32/0x32 [ 347.922813] do_vfs_ioctl+0x180/0xfb0 [ 347.922820] ? __fget+0x1ad/0x2f0 [ 347.922827] ? ioctl_preallocate+0x1a0/0x1a0 [ 347.922836] ? __fget+0x1ca/0x2f0 [ 347.922847] ? security_file_ioctl+0x6a/0xa0 [ 347.922854] ? SyS_clock_settime+0x1a0/0x1a0 [ 347.922858] ? security_file_ioctl+0x6a/0xa0 [ 347.922863] SyS_ioctl+0x74/0x80 [ 347.922870] ? do_vfs_ioctl+0xfb0/0xfb0 [ 347.922877] do_syscall_64+0x1c7/0x5b0 [ 347.922882] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.922900] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 347.922906] RIP: 0033:0x45af49 [ 347.922909] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.922915] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 347.922918] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 347.922921] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 347.922924] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 347.922926] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 347.929595] CPU: 1 PID: 8076 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 347.966267] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.970137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.970141] Call Trace: [ 347.970156] dump_stack+0xf7/0x13b [ 347.970168] warn_alloc.cold.110+0xa2/0x1be [ 347.970173] ? zone_watermark_ok_safe+0x260/0x260 [ 347.970187] ? __alloc_pages_direct_compact+0xc2/0x330 [ 347.970194] __alloc_pages_slowpath+0x2052/0x2650 [ 347.970209] ? trace_hardirqs_off+0x10/0x10 [ 347.970216] ? warn_alloc+0x100/0x100 [ 347.970222] ? get_page_from_freelist+0x1046/0x23b0 [ 347.970238] ? __might_sleep+0x93/0xb0 [ 347.970245] __alloc_pages_nodemask+0x60d/0x770 [ 347.970253] ? __alloc_pages_slowpath+0x2650/0x2650 [ 347.970263] ? wait_for_completion+0x440/0x440 [ 347.970273] alloc_pages_current+0xd6/0x1b0 [ 347.970284] ion_page_pool_alloc+0x102/0x180 [ 347.989297] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.993494] ion_system_heap_allocate+0x14e/0x930 [ 347.993502] ? ion_system_heap_free+0x270/0x270 [ 347.993511] ion_alloc+0x216/0x770 [ 347.993522] ? ion_dma_buf_release+0x40/0x40 [ 347.993535] ? kasan_check_write+0x14/0x20 [ 347.993541] ion_ioctl+0xe2/0x1b6 [ 347.993545] ? ion_alloc.cold.15+0x32/0x32 [ 347.993556] do_vfs_ioctl+0x180/0xfb0 [ 347.993563] ? __fget+0x1ad/0x2f0 [ 347.993570] ? ioctl_preallocate+0x1a0/0x1a0 [ 347.993579] ? __fget+0x1ca/0x2f0 [ 347.993591] ? security_file_ioctl+0x6a/0xa0 [ 347.993597] ? SyS_clock_settime+0x1a0/0x1a0 [ 347.993601] ? security_file_ioctl+0x6a/0xa0 [ 347.993608] SyS_ioctl+0x74/0x80 [ 347.993613] ? do_vfs_ioctl+0xfb0/0xfb0 [ 347.993621] do_syscall_64+0x1c7/0x5b0 [ 348.014520] device bridge_slave_1 entered promiscuous mode [ 348.016125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.016140] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 348.016147] RIP: 0033:0x45af49 [ 348.095087] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 348.099176] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.099184] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 348.099187] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 348.099190] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 348.099193] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 348.099196] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 348.342373] 2570 2570 2570 2570 [ 348.410271] Node 0 DMA32 free:400412kB min:36384kB low:45480kB high:54576kB active_anon:21552kB inactive_anon:780kB active_file:3964kB inactive_file:4860kB unevictable:0kB writepending:96kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1588kB bounce:0kB free_pcp:468kB local_pcp:92kB free_cma:0kB [ 348.429941] warn_alloc_show_mem: 1 callbacks suppressed [ 348.429945] Mem-Info: [ 348.462769] active_anon:5457 inactive_anon:196 isolated_anon:0 [ 348.462769] active_file:997 inactive_file:1227 isolated_file:0 [ 348.462769] unevictable:0 dirty:28 writeback:0 unstable:0 [ 348.462769] slab_reclaimable:13032 slab_unreclaimable:100012 [ 348.462769] mapped:1452 shmem:250 pagetables:428 bounce:0 [ 348.462769] free:343183 free_pcp:305 free_cma:0 [ 348.539775] lowmem_reserve[]: 0 0 0 0 0 [ 348.567206] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.580103] Node 0 active_anon:21564kB inactive_anon:780kB active_file:3964kB inactive_file:4860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5784kB dirty:96kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 348.660088] Node 1 active_anon:264kB inactive_anon:4kB active_file:24kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:16kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 348.680070] lowmem_reserve[]: 0 0 0 0 0 [ 348.720082] Node 0 DMA free:11104kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.730062] Node 1 [ 348.770086] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 348.777428] Node 0 DMA32 free:166688kB min:36384kB low:45480kB high:54576kB active_anon:21552kB inactive_anon:780kB active_file:3964kB inactive_file:4832kB unevictable:0kB writepending:244kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1588kB bounce:0kB free_pcp:760kB local_pcp:748kB free_cma:0kB [ 348.807054] Normal free:1065684kB min:53504kB low:66880kB high:80256kB active_anon:264kB inactive_anon:4kB active_file:24kB inactive_file:48kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:320kB pagetables:124kB bounce:0kB free_pcp:688kB local_pcp:636kB free_cma:0kB [ 348.908421] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 348.940238] lowmem_reserve[]: 0 0 0 0 0 [ 348.944273] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.960080] lowmem_reserve[]: 0 0 0 0 0 [ 348.979096] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 349.017197] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 349.040528] Node 0 DMA: 3*4kB (M) 35*8kB (UM) 28*16kB (UME) 20*32kB (UM) 5*64kB (UME) 5*128kB (UME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10532kB [ 349.054136] lowmem_reserve[]: 0 0 0 0 0 [ 349.080107] Node 0 DMA32: 327*4kB (UEH) 118*8kB (MEH) 10*16kB (UMEH) 1351*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45644kB [ 349.110286] Node 1 Normal free:950908kB min:53504kB low:66880kB high:80256kB active_anon:264kB inactive_anon:4kB active_file:24kB inactive_file:60kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:320kB pagetables:124kB bounce:0kB free_pcp:568kB local_pcp:40kB free_cma:0kB [ 349.148242] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 349.164960] team0: Port device team_slave_0 added [ 349.180202] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 349.206180] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 349.230772] team0: Port device team_slave_0 added [ 349.236086] Node 1 Normal: [ 349.236095] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 349.236533] team0: Port device team_slave_1 added [ 349.239067] 2*4kB [ 349.264731] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 349.270094] (UM) 1*8kB (E) 2916*16kB (UME) 3021*32kB (UE) 2644*64kB (U) 1923*128kB (UM) 500*256kB (UM) 225*512kB (UM) 70*1024kB (UM) 2*2048kB (UM) 0*4096kB = 877680kB [ 349.274452] lowmem_reserve[]: 0 0 0 0 0 [ 349.344191] Node 0 DMA: 7*4kB (UM) 35*8kB (UM) 28*16kB (UME) 20*32kB (UM) 5*64kB (UME) 5*128kB (UME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10548kB [ 349.384073] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 349.400179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.405560] team0: Port device team_slave_1 added [ 349.409077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 349.450663] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 349.460414] Node 0 DMA32: 328*4kB (UMEH) 103*8kB (MEH) 10*16kB (UMEH) 1283*32kB (UM) 31*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45464kB [ 349.480152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.489062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 349.498420] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 349.554865] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 349.570159] 2486 total pagecache pages [ 349.574122] 0 pages in swap cache [ 349.575188] Node 1 [ 349.577600] Swap cache stats: add 0, delete 0, find 0/0 [ 349.577607] Normal: [ 349.579836] Free swap = 0kB [ 349.579840] Total swap = 0kB [ 349.579847] 1965979 pages RAM [ 349.599747] 1*4kB (M) 2*8kB (UE) 2*16kB (ME) 1*32kB (E) 1079*64kB (U) 1930*128kB (UM) 503*256kB (UM) 231*512kB (UM) 71*1024kB (UM) 2*2048kB (UM) 0*4096kB = 640020kB [ 349.650719] device hsr_slave_0 entered promiscuous mode [ 349.684550] 0 pages HighMem/MovableOnly [ 349.688565] 335868 pages reserved [ 349.690458] device hsr_slave_1 entered promiscuous mode [ 349.700138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.709057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 349.720240] 0 pages cma reserved [ 349.750087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.758964] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 349.770683] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 349.777627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 349.826405] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 349.898161] 2486 total pagecache pages [ 349.910401] 0 pages in swap cache [ 349.913898] Swap cache stats: add 0, delete 0, find 0/0 [ 349.919267] Free swap = 0kB [ 349.943564] device hsr_slave_0 entered promiscuous mode [ 349.960178] Total swap = 0kB [ 349.963264] 1965979 pages RAM [ 349.966408] 0 pages HighMem/MovableOnly [ 349.971207] device hsr_slave_1 entered promiscuous mode [ 350.010099] 335868 pages reserved [ 350.013604] 0 pages cma reserved [ 350.021155] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 350.030401] device bridge_slave_1 left promiscuous mode [ 350.035935] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.104649] device bridge_slave_0 left promiscuous mode [ 350.158960] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.221452] oom_reaper: reaped process 8092 (syz-executor.1), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 350.263907] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 350.280213] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 350.286310] rsyslogd cpuset=/ mems_allowed=0-1 [ 350.297221] CPU: 0 PID: 6994 Comm: rsyslogd Not tainted 4.14.172-syzkaller #0 [ 350.304501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.310846] syz-executor.4 cpuset= [ 350.313865] Call Trace: [ 350.313866] syz4 mems_allowed=0-1 [ 350.317410] dump_stack+0xf7/0x13b [ 350.326962] dump_header+0x160/0x63f [ 350.330675] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 350.335773] ? ___ratelimit+0x243/0x519 [ 350.339734] ? do_raw_spin_unlock+0x16a/0x250 [ 350.344228] oom_kill_process.cold.24+0xb/0xa1a [ 350.348912] ? out_of_memory+0x7f9/0x1030 [ 350.353075] ? lock_downgrade+0x7f0/0x7f0 [ 350.357228] out_of_memory+0x2b0/0x1030 [ 350.361207] ? oom_killer_disable+0x1a0/0x1a0 [ 350.365702] ? __alloc_pages_slowpath+0xb69/0x2650 [ 350.370651] __alloc_pages_slowpath+0x1ef3/0x2650 [ 350.375490] ? warn_alloc+0x100/0x100 [ 350.379286] ? get_page_from_freelist+0x1046/0x23b0 [ 350.384301] ? __might_sleep+0x93/0xb0 [ 350.388184] __alloc_pages_nodemask+0x60d/0x770 [ 350.392839] ? __alloc_pages_slowpath+0x2650/0x2650 [ 350.397840] ? lock_downgrade+0x7f0/0x7f0 [ 350.402002] alloc_pages_current+0xd6/0x1b0 [ 350.406327] __page_cache_alloc+0x1da/0x330 [ 350.410641] filemap_fault+0xbc8/0x1ae0 [ 350.414605] ? __lock_page_or_retry+0x820/0x820 [ 350.419262] ? lock_acquire+0x173/0x400 [ 350.423238] ? ext4_filemap_fault+0x75/0xb0 [ 350.427580] ext4_filemap_fault+0x7d/0xb0 [ 350.431739] __do_fault+0xf3/0x340 [ 350.435300] __handle_mm_fault+0x21eb/0x3870 [ 350.439703] ? copy_page_range+0x1d10/0x1d10 [ 350.444203] ? find_held_lock+0x36/0x1d0 [ 350.448260] handle_mm_fault+0x234/0x6e0 [ 350.452306] ? find_vma+0x1a/0x150 [ 350.455841] __do_page_fault+0x44d/0xb00 [ 350.459890] ? SyS_read+0x1c5/0x250 [ 350.463501] ? firmware_map_remove+0x177/0x177 [ 350.468075] ? vmalloc_fault+0xc90/0xc90 [ 350.472124] ? retint_user+0x18/0x18 [ 350.475824] ? page_fault+0x2f/0x50 [ 350.479452] do_page_fault+0x64/0x3fb [ 350.483242] ? page_fault+0x2f/0x50 [ 350.486856] page_fault+0x45/0x50 [ 350.490290] RIP: 0033:0x7f79061d09d0 [ 350.494000] RSP: 002b:00007f7903e9cd68 EFLAGS: 00010202 [ 350.499350] RAX: 0000000000000000 RBX: 00007f7903e9cd88 RCX: 0000000000000006 [ 350.506606] RDX: 0000000000000000 RSI: 00007f79054cf50c RDI: 0000000000000210 [ 350.513862] RBP: 0000000000000006 R08: 000000000000003e R09: 00007f7906291100 [ 350.521116] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 350.528385] R13: 00007f79056d25a3 R14: 0000000000000001 R15: 00007f79056d1612 [ 350.535655] CPU: 1 PID: 8074 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 350.543669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.551673] Mem-Info: [ 350.553064] Call Trace: [ 350.555495] active_anon:5462 inactive_anon:196 isolated_anon:0 [ 350.555495] active_file:25 inactive_file:33 isolated_file:0 [ 350.555495] unevictable:0 dirty:41 writeback:0 unstable:0 [ 350.555495] slab_reclaimable:13023 slab_unreclaimable:100183 [ 350.555495] mapped:27 shmem:250 pagetables:428 bounce:0 [ 350.555495] free:13785 free_pcp:60 free_cma:0 [ 350.558097] dump_stack+0xf7/0x13b [ 350.592527] Node 0 active_anon:21584kB inactive_anon:780kB active_file:76kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:132kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 350.594351] warn_alloc.cold.110+0xa2/0x1be [ 350.622940] Node 1 active_anon:264kB inactive_anon:4kB active_file:24kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:32kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 350.625640] ? zone_watermark_ok_safe+0x260/0x260 [ 350.653533] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.656706] ? __alloc_pages_direct_compact+0xc2/0x330 [ 350.656715] __alloc_pages_slowpath+0x2052/0x2650 [ 350.685278] lowmem_reserve[]: [ 350.688342] ? trace_hardirqs_off+0x10/0x10 [ 350.693211] 0 [ 350.696255] ? warn_alloc+0x100/0x100 [ 350.702089] 2570 [ 350.702349] ? get_page_from_freelist+0x1046/0x23b0 [ 350.706135] 2570 [ 350.708188] ? __might_sleep+0x93/0xb0 [ 350.713247] 2570 [ 350.715250] __alloc_pages_nodemask+0x60d/0x770 [ 350.719111] 2570 [ 350.721181] ? trace_hardirqs_on_caller+0x40c/0x580 [ 350.721189] ? __alloc_pages_slowpath+0x2650/0x2650 [ 350.721199] ? wait_for_completion+0x440/0x440 [ 350.721209] alloc_pages_current+0xd6/0x1b0 [ 350.721219] ion_page_pool_alloc+0x102/0x180 [ 350.721226] ion_system_heap_allocate+0x14e/0x930 [ 350.721235] ? ion_system_heap_free+0x270/0x270 [ 350.721243] ion_alloc+0x216/0x770 [ 350.721253] ? ion_dma_buf_release+0x40/0x40 [ 350.727965] ? kasan_check_write+0x14/0x20 [ 350.733008] Node 0 [ 350.737977] ion_ioctl+0xe2/0x1b6 [ 350.744091] DMA32 free:18132kB min:36384kB low:45480kB high:54576kB active_anon:21572kB inactive_anon:780kB active_file:76kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1588kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 350.746862] ? ion_alloc.cold.15+0x32/0x32 [ 350.751318] lowmem_reserve[]: [ 350.756122] do_vfs_ioctl+0x180/0xfb0 [ 350.762325] 0 [ 350.764301] ? __fget+0x1ad/0x2f0 [ 350.768686] 0 [ 350.772938] ? ioctl_preallocate+0x1a0/0x1a0 [ 350.772948] ? __fget+0x1ca/0x2f0 [ 350.772959] ? security_file_ioctl+0x6a/0xa0 [ 350.772965] ? SyS_clock_settime+0x1a0/0x1a0 [ 350.772968] ? security_file_ioctl+0x6a/0xa0 [ 350.772974] SyS_ioctl+0x74/0x80 [ 350.772980] ? do_vfs_ioctl+0xfb0/0xfb0 [ 350.772988] do_syscall_64+0x1c7/0x5b0 [ 350.772992] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 350.773004] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 350.775240] 0 [ 350.778701] RIP: 0033:0x45af49 [ 350.822592] 0 [ 350.823027] RSP: 002b:00007ffa6e582c78 EFLAGS: 00000246 [ 350.824830] 0 [ 350.829221] ORIG_RAX: 0000000000000010 [ 350.837071] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 350.837075] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 350.844510] Node 0 [ 350.845877] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 350.849237] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.853201] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5836d4 [ 350.853204] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 350.860190] syz-executor.1: [ 350.865031] lowmem_reserve[]: [ 350.867175] page allocation failure: order:0 [ 350.868959] 0 [ 350.881469] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 350.907518] 0 [ 350.931781] (null) [ 350.957218] 0 [ 350.966866] syz-executor.1 cpuset= [ 350.973087] syz-executor.1: [ 350.974848] syz1 [ 350.975124] page allocation failure: order:0 [ 350.978647] mems_allowed=0-1 [ 350.981698] 0 0 [ 350.981710] Node 1 Normal free:26620kB min:53504kB low:66880kB high:80256kB active_anon:264kB inactive_anon:4kB active_file:24kB inactive_file:68kB unevictable:0kB writepending:32kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:320kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.981723] lowmem_reserve[]: 0 0 0 0 0 [ 350.981737] Node 0 DMA: 3*4kB [ 350.989088] CPU: 1 PID: 8092 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 351.000122] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 351.021210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.021214] Call Trace: [ 351.021233] dump_stack+0xf7/0x13b [ 351.021243] warn_alloc.cold.110+0xa2/0x1be [ 351.021248] ? zone_watermark_ok_safe+0x260/0x260 [ 351.021255] ? usleep_range+0x120/0x120 [ 351.021261] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 351.021268] ? call_timer_fn+0x570/0x570 [ 351.021273] ? unreserve_highatomic_pageblock+0x315/0x450 [ 351.021282] __alloc_pages_slowpath+0x2052/0x2650 [ 351.021298] ? warn_alloc+0x100/0x100 [ 351.021304] ? get_page_from_freelist+0x1046/0x23b0 [ 351.021320] ? __might_sleep+0x93/0xb0 [ 351.021326] __alloc_pages_nodemask+0x60d/0x770 [ 351.021333] ? __alloc_pages_slowpath+0x2650/0x2650 [ 351.021341] ? wait_for_completion+0x440/0x440 [ 351.021352] alloc_pages_current+0xd6/0x1b0 [ 351.021363] ion_page_pool_alloc+0x102/0x180 [ 351.021368] ion_system_heap_allocate+0x14e/0x930 [ 351.021375] ? ion_system_heap_free+0x270/0x270 [ 351.021384] ion_alloc+0x216/0x770 [ 351.021392] ? ion_dma_buf_release+0x40/0x40 [ 351.021403] ? kasan_check_write+0x14/0x20 [ 351.033070] (M) [ 351.036375] ion_ioctl+0xe2/0x1b6 [ 351.048334] 17*8kB [ 351.052835] ? ion_alloc.cold.15+0x32/0x32 [ 351.052850] do_vfs_ioctl+0x180/0xfb0 [ 351.052856] ? __fget+0x1ad/0x2f0 [ 351.052862] ? ioctl_preallocate+0x1a0/0x1a0 [ 351.052870] ? __fget+0x1ca/0x2f0 [ 351.052882] ? security_file_ioctl+0x6a/0xa0 [ 351.052887] ? SyS_clock_settime+0x1a0/0x1a0 [ 351.052891] ? security_file_ioctl+0x6a/0xa0 [ 351.052896] SyS_ioctl+0x74/0x80 [ 351.052902] ? do_vfs_ioctl+0xfb0/0xfb0 [ 351.052909] do_syscall_64+0x1c7/0x5b0 [ 351.052914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 351.052928] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 351.052933] RIP: 0033:0x45af49 [ 351.052939] RSP: 002b:00007fb6d4db8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.052945] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 351.052948] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 351.052950] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 351.052953] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6d4db96d4 [ 351.052956] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 351.064711] warn_alloc_show_mem: 4 callbacks suppressed [ 351.064715] Mem-Info: [ 351.076728] (null) [ 351.083081] active_anon:5440 inactive_anon:196 isolated_anon:0 [ 351.083081] active_file:2 inactive_file:20 isolated_file:0 [ 351.083081] unevictable:0 dirty:19 writeback:26 unstable:0 [ 351.083081] slab_reclaimable:13023 slab_unreclaimable:100193 [ 351.083081] mapped:10 shmem:250 pagetables:428 bounce:0 [ 351.083081] free:13845 free_pcp:1 free_cma:0 [ 351.088370] syz-executor.1 cpuset= [ 351.097574] Node 0 active_anon:21496kB inactive_anon:780kB active_file:0kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:64kB writeback:84kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 351.109684] (UM) [ 351.111615] Node 1 active_anon:264kB inactive_anon:4kB active_file:12kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:20kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 351.115059] 28*16kB [ 351.119626] Node 0 [ 351.128438] syz1 [ 351.140099] DMA free:10388kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.147043] (UME) [ 351.147254] lowmem_reserve[]: [ 351.151536] 20*32kB (UM) 5*64kB (UME) 5*128kB (UME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 351.151574] Node 0 DMA32: 464*4kB [ 351.163729] 0 [ 351.171723] mems_allowed=0-1 [ 351.184138] 2570 [ 351.189177] (UME) [ 351.196341] 2570 [ 351.209896] 129*8kB [ 351.221689] 2570 [ 351.229694] CPU: 0 PID: 8082 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 351.236897] 2570 [ 351.240208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.240211] Call Trace: [ 351.240230] dump_stack+0xf7/0x13b [ 351.240242] warn_alloc.cold.110+0xa2/0x1be [ 351.240248] ? zone_watermark_ok_safe+0x260/0x260 [ 351.240256] ? usleep_range+0x120/0x120 [ 351.254779] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 351.254787] ? call_timer_fn+0x570/0x570 [ 351.254794] ? unreserve_highatomic_pageblock+0x315/0x450 [ 351.254802] __alloc_pages_slowpath+0x2052/0x2650 [ 351.254817] ? warn_alloc+0x100/0x100 [ 351.262104] Node 0 [ 351.267426] ? get_page_from_freelist+0x1046/0x23b0 [ 351.269820] DMA32 free:18264kB min:36384kB low:45480kB high:54576kB active_anon:21484kB inactive_anon:780kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1588kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 351.271958] ? __might_sleep+0x93/0xb0 [ 351.271965] __alloc_pages_nodemask+0x60d/0x770 [ 351.271978] ? __alloc_pages_slowpath+0x2650/0x2650 [ 351.304577] lowmem_reserve[]: [ 351.308065] ? wait_for_completion+0x440/0x440 [ 351.335050] 0 [ 351.337070] alloc_pages_current+0xd6/0x1b0 [ 351.364942] 0 [ 351.365593] ion_page_pool_alloc+0x102/0x180 [ 351.367799] 0 [ 351.369775] ion_system_heap_allocate+0x14e/0x930 [ 351.395499] 0 [ 351.397605] ? ion_system_heap_free+0x270/0x270 [ 351.400702] 0 [ 351.412036] ion_alloc+0x216/0x770 [ 351.412046] ? ion_dma_buf_release+0x40/0x40 [ 351.412059] ? kasan_check_write+0x14/0x20 [ 351.417370] ion_ioctl+0xe2/0x1b6 [ 351.420479] Node 0 [ 351.422497] ? ion_alloc.cold.15+0x32/0x32 [ 351.424626] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.426769] do_vfs_ioctl+0x180/0xfb0 [ 351.429066] lowmem_reserve[]: [ 351.431289] ? __fget+0x1ad/0x2f0 [ 351.431295] ? ioctl_preallocate+0x1a0/0x1a0 [ 351.431302] ? __fget+0x1ca/0x2f0 [ 351.431315] ? security_file_ioctl+0x6a/0xa0 [ 351.431322] ? SyS_clock_settime+0x1a0/0x1a0 [ 351.439100] 0 [ 351.441150] ? security_file_ioctl+0x6a/0xa0 [ 351.441159] SyS_ioctl+0x74/0x80 [ 351.441169] ? do_vfs_ioctl+0xfb0/0xfb0 [ 351.441176] do_syscall_64+0x1c7/0x5b0 [ 351.441183] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 351.450544] 0 [ 351.453103] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 351.456611] 0 [ 351.460917] RIP: 0033:0x45af49 [ 351.460920] RSP: 002b:00007fb6d4dfac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.460925] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 351.460928] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 351.460930] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 351.460933] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6d4dfb6d4 [ 351.460936] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 351.467322] (UME) [ 351.469754] 0 [ 351.474989] 14*16kB (UME) 4*32kB (M) 75*64kB (UM) 78*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18280kB [ 351.475027] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 351.475061] Node 1 Normal: 0*4kB 8*8kB (UE) 4*16kB (UE) 1*32kB (E) 0*64kB 0*128kB 0*256kB 0*512kB 20*1024kB (U) 1*2048kB (U) 1*4096kB (M) = 26784kB [ 351.475116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.475119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.475122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.475124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.475127] 271 total pagecache pages [ 351.475136] 0 pages in swap cache [ 351.475138] Swap cache stats: add 0, delete 0, find 0/0 [ 351.475141] Free swap = 0kB [ 351.475143] Total swap = 0kB [ 351.475148] 1965979 pages RAM [ 351.475151] 0 pages HighMem/MovableOnly [ 351.475153] 335868 pages reserved [ 351.475155] 0 pages cma reserved [ 351.475160] Out of memory: Kill process 8056 (syz-executor.0) score 999 or sacrifice child [ 351.475181] Killed process 8057 (syz-executor.0) total-vm:38036kB, anon-rss:128kB, file-rss:0kB, shmem-rss:0kB [ 351.640244] oom_reaper: reaped process 8086 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 351.681751] 0 [ 351.712919] syz-executor.3: [ 351.720331] syz-executor.4: [ 351.726130] syz-executor.4: [ 351.733332] syz-executor.0: [ 351.759680] page allocation failure: order:0 [ 351.779420] page allocation failure: order:0 [ 351.784400] syz-executor.3: [ 351.790046] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 351.798924] syz-executor.0: [ 351.818229] page allocation failure: order:0 [ 351.823083] (null) [ 351.823178] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 351.826179] syz-executor.4 cpuset= [ 351.829267] (null) [ 351.829272] syz-executor.3 cpuset= [ 351.833285] Node 1 Normal free:26688kB min:53504kB low:66880kB high:80256kB active_anon:264kB inactive_anon:4kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:320kB pagetables:124kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 351.833296] lowmem_reserve[]: 0 0 0 0 0 [ 351.833310] Node 0 DMA: [ 351.844987] page allocation failure: order:0 [ 351.852485] page allocation failure: order:0 [ 351.858942] page allocation failure: order:0 [ 351.876298] 3*4kB [ 351.880124] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 351.890059] syz4 [ 351.910278] oom_reaper: reaped process 8068 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 351.919661] (M) [ 351.919938] syz3 [ 351.940093] 17*8kB [ 351.959482] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 351.993672] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 352.000848] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 352.020198] (null) [ 352.021651] (null) [ 352.027663] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 352.027684] CPU: 1 PID: 8076 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 352.027687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.027689] Call Trace: [ 352.027704] dump_stack+0xf7/0x13b [ 352.027714] warn_alloc.cold.110+0xa2/0x1be [ 352.027720] ? zone_watermark_ok_safe+0x260/0x260 [ 352.027726] ? usleep_range+0x120/0x120 [ 352.027733] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 352.027740] ? call_timer_fn+0x570/0x570 [ 352.027746] ? unreserve_highatomic_pageblock+0x315/0x450 [ 352.027756] __alloc_pages_slowpath+0x2052/0x2650 [ 352.093365] ? warn_alloc+0x100/0x100 [ 352.097156] ? get_page_from_freelist+0x1046/0x23b0 [ 352.102166] ? __might_sleep+0x93/0xb0 [ 352.106058] __alloc_pages_nodemask+0x60d/0x770 [ 352.110722] ? __alloc_pages_slowpath+0x2650/0x2650 [ 352.116186] ? wait_for_completion+0x440/0x440 [ 352.120756] alloc_pages_current+0xd6/0x1b0 [ 352.125087] ion_page_pool_alloc+0x102/0x180 [ 352.129480] ion_system_heap_allocate+0x14e/0x930 [ 352.134308] ? ion_system_heap_free+0x270/0x270 [ 352.138966] ion_alloc+0x216/0x770 [ 352.142492] ? ion_dma_buf_release+0x40/0x40 [ 352.146900] ? kasan_check_write+0x14/0x20 [ 352.151126] ion_ioctl+0xe2/0x1b6 [ 352.154564] ? ion_alloc.cold.15+0x32/0x32 [ 352.158794] do_vfs_ioctl+0x180/0xfb0 [ 352.162579] ? __fget+0x1ad/0x2f0 [ 352.166019] ? ioctl_preallocate+0x1a0/0x1a0 [ 352.170412] ? __fget+0x1ca/0x2f0 [ 352.173853] ? security_file_ioctl+0x6a/0xa0 [ 352.178266] ? SyS_clock_settime+0x1a0/0x1a0 [ 352.183627] ? security_file_ioctl+0x6a/0xa0 [ 352.188088] SyS_ioctl+0x74/0x80 [ 352.191463] ? do_vfs_ioctl+0xfb0/0xfb0 [ 352.195455] do_syscall_64+0x1c7/0x5b0 [ 352.199398] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.204241] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 352.209677] RIP: 0033:0x45af49 [ 352.212857] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.220553] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 352.227823] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 352.235087] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 352.242358] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 352.249625] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 352.261106] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 352.266910] CPU: 0 PID: 8086 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 352.274798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.280070] mems_allowed=0-1 [ 352.284146] Call Trace: [ 352.289831] dump_stack+0xf7/0x13b [ 352.293369] warn_alloc.cold.110+0xa2/0x1be [ 352.297685] ? zone_watermark_ok_safe+0x260/0x260 [ 352.300081] (UM) [ 352.302520] ? usleep_range+0x120/0x120 [ 352.302524] 28*16kB [ 352.304572] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 352.308531] (UME) [ 352.310840] ? call_timer_fn+0x570/0x570 [ 352.310847] ? unreserve_highatomic_pageblock+0x315/0x450 [ 352.310856] __alloc_pages_slowpath+0x2052/0x2650 [ 352.310873] ? warn_alloc+0x100/0x100 [ 352.338271] ? get_page_from_freelist+0x1046/0x23b0 [ 352.343489] ? __might_sleep+0x93/0xb0 [ 352.347402] __alloc_pages_nodemask+0x60d/0x770 [ 352.350089] (null) [ 352.352211] ? __alloc_pages_slowpath+0x2650/0x2650 [ 352.354344] syz-executor.0 cpuset= [ 352.359369] ? wait_for_completion+0x440/0x440 [ 352.359370] syz0 mems_allowed=0-1 [ 352.362923] alloc_pages_current+0xd6/0x1b0 [ 352.362935] ion_page_pool_alloc+0x102/0x180 [ 352.362940] ion_system_heap_allocate+0x14e/0x930 [ 352.362946] ? ion_system_heap_free+0x270/0x270 [ 352.362955] ion_alloc+0x216/0x770 [ 352.362967] ? ion_dma_buf_release+0x40/0x40 [ 352.362978] ? kasan_check_write+0x14/0x20 [ 352.362984] ion_ioctl+0xe2/0x1b6 [ 352.400053] 20*32kB [ 352.401788] ? ion_alloc.cold.15+0x32/0x32 [ 352.405213] (UM) [ 352.407528] do_vfs_ioctl+0x180/0xfb0 [ 352.417731] ? __fget+0x1ad/0x2f0 [ 352.421204] ? ioctl_preallocate+0x1a0/0x1a0 [ 352.425622] ? __fget+0x1ca/0x2f0 [ 352.429124] ? security_file_ioctl+0x6a/0xa0 [ 352.433543] ? SyS_clock_settime+0x1a0/0x1a0 [ 352.437962] ? security_file_ioctl+0x6a/0xa0 [ 352.442373] SyS_ioctl+0x74/0x80 [ 352.445751] ? do_vfs_ioctl+0xfb0/0xfb0 [ 352.449720] do_syscall_64+0x1c7/0x5b0 [ 352.453707] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.458592] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 352.463791] RIP: 0033:0x45af49 [ 352.466964] RSP: 002b:00007ffa6e540c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.470052] 5*64kB [ 352.474657] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 352.474661] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 352.476908] (UME) [ 352.484192] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 352.484195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5416d4 [ 352.484198] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 352.490810] (null) [ 352.491764] CPU: 1 PID: 8057 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 352.498110] syz-executor.3 cpuset= [ 352.501355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.501358] Call Trace: [ 352.501374] dump_stack+0xf7/0x13b [ 352.501384] warn_alloc.cold.110+0xa2/0x1be [ 352.501389] ? zone_watermark_ok_safe+0x260/0x260 [ 352.501395] ? usleep_range+0x120/0x120 [ 352.501402] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 352.501410] ? call_timer_fn+0x570/0x570 [ 352.501416] ? unreserve_highatomic_pageblock+0x315/0x450 [ 352.501424] __alloc_pages_slowpath+0x2052/0x2650 [ 352.501439] ? warn_alloc+0x100/0x100 [ 352.520106] syz3 [ 352.526012] ? get_page_from_freelist+0x1046/0x23b0 [ 352.529547] mems_allowed=0-1 [ 352.539445] ? __might_sleep+0x93/0xb0 [ 352.539453] __alloc_pages_nodemask+0x60d/0x770 [ 352.539460] ? __alloc_pages_slowpath+0x2650/0x2650 [ 352.539471] ? wait_for_completion+0x440/0x440 [ 352.539481] alloc_pages_current+0xd6/0x1b0 [ 352.539491] ion_page_pool_alloc+0x102/0x180 [ 352.539496] ion_system_heap_allocate+0x14e/0x930 [ 352.539504] ? ion_system_heap_free+0x270/0x270 [ 352.539512] ion_alloc+0x216/0x770 [ 352.539521] ? ion_dma_buf_release+0x40/0x40 [ 352.539532] ? kasan_check_write+0x14/0x20 [ 352.539539] ion_ioctl+0xe2/0x1b6 [ 352.539544] ? ion_alloc.cold.15+0x32/0x32 [ 352.539556] do_vfs_ioctl+0x180/0xfb0 [ 352.539563] ? __fget+0x1ad/0x2f0 [ 352.539577] ? ioctl_preallocate+0x1a0/0x1a0 [ 352.546159] mems_allowed=0-1 [ 352.550023] ? __fget+0x1ca/0x2f0 [ 352.550036] ? security_file_ioctl+0x6a/0xa0 [ 352.550041] ? SyS_clock_settime+0x1a0/0x1a0 [ 352.550045] ? security_file_ioctl+0x6a/0xa0 [ 352.550053] SyS_ioctl+0x74/0x80 [ 352.550059] ? do_vfs_ioctl+0xfb0/0xfb0 [ 352.550067] do_syscall_64+0x1c7/0x5b0 [ 352.550077] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.550088] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 352.550094] RIP: 0033:0x45af49 [ 352.550096] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.550102] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 352.550105] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 352.550108] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 352.550110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 352.550113] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 352.560083] CPU: 1 PID: 8074 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 352.758999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.768371] Call Trace: [ 352.770970] dump_stack+0xf7/0x13b [ 352.774505] warn_alloc.cold.110+0xa2/0x1be [ 352.778823] ? zone_watermark_ok_safe+0x260/0x260 [ 352.783653] ? usleep_range+0x120/0x120 [ 352.787660] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 352.792921] ? call_timer_fn+0x570/0x570 [ 352.796987] ? unreserve_highatomic_pageblock+0x315/0x450 [ 352.802523] __alloc_pages_slowpath+0x2052/0x2650 [ 352.807364] ? warn_alloc+0x100/0x100 [ 352.811152] ? get_page_from_freelist+0x1046/0x23b0 [ 352.816167] ? __might_sleep+0x93/0xb0 [ 352.820042] __alloc_pages_nodemask+0x60d/0x770 [ 352.824734] ? trace_hardirqs_on_caller+0x40c/0x580 [ 352.829826] ? __alloc_pages_slowpath+0x2650/0x2650 [ 352.834983] ? wait_for_completion+0x440/0x440 [ 352.839607] alloc_pages_current+0xd6/0x1b0 [ 352.843957] ion_page_pool_alloc+0x102/0x180 [ 352.848359] ion_system_heap_allocate+0x14e/0x930 [ 352.853205] ? ion_system_heap_free+0x270/0x270 [ 352.857864] ion_alloc+0x216/0x770 [ 352.861391] ? ion_dma_buf_release+0x40/0x40 [ 352.865788] ? kasan_check_write+0x14/0x20 [ 352.870006] ion_ioctl+0xe2/0x1b6 [ 352.870102] warn_alloc_show_mem: 2 callbacks suppressed [ 352.870105] Mem-Info: [ 352.873448] ? ion_alloc.cold.15+0x32/0x32 [ 352.873462] do_vfs_ioctl+0x180/0xfb0 [ 352.878822] active_anon:5394 inactive_anon:196 isolated_anon:0 [ 352.878822] active_file:184 inactive_file:346 isolated_file:0 [ 352.878822] unevictable:0 dirty:26 writeback:0 unstable:0 [ 352.878822] slab_reclaimable:13022 slab_unreclaimable:100120 [ 352.878822] mapped:379 shmem:250 pagetables:428 bounce:0 [ 352.878822] free:83106 free_pcp:641 free_cma:0 [ 352.881229] ? __fget+0x1ad/0x2f0 [ 352.881236] ? ioctl_preallocate+0x1a0/0x1a0 [ 352.881243] ? __fget+0x1ca/0x2f0 [ 352.881255] ? security_file_ioctl+0x6a/0xa0 [ 352.881260] ? SyS_clock_settime+0x1a0/0x1a0 [ 352.881264] ? security_file_ioctl+0x6a/0xa0 [ 352.881269] SyS_ioctl+0x74/0x80 [ 352.881275] ? do_vfs_ioctl+0xfb0/0xfb0 [ 352.881282] do_syscall_64+0x1c7/0x5b0 [ 352.881287] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.881298] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 352.881304] RIP: 0033:0x45af49 [ 352.881307] RSP: 002b:00007ffa6e582c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.881314] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 352.881317] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 352.881319] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 352.881321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5836d4 [ 352.881324] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 352.900073] 5*128kB [ 352.923640] CPU: 0 PID: 8084 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 352.960068] (UME) [ 352.963469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.968670] 2*256kB (ME) [ 352.971864] Call Trace: [ 352.971885] dump_stack+0xf7/0x13b [ 352.971895] warn_alloc.cold.110+0xa2/0x1be [ 352.971900] ? zone_watermark_ok_safe+0x260/0x260 [ 352.971906] ? usleep_range+0x120/0x120 [ 352.971913] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 352.971921] ? call_timer_fn+0x570/0x570 [ 352.971928] ? unreserve_highatomic_pageblock+0x315/0x450 [ 353.000070] 1*512kB [ 353.001493] __alloc_pages_slowpath+0x2052/0x2650 [ 353.008738] (E) 3*1024kB [ 353.016039] ? warn_alloc+0x100/0x100 [ 353.016048] ? get_page_from_freelist+0x1046/0x23b0 [ 353.016061] ? __might_sleep+0x93/0xb0 [ 353.016068] __alloc_pages_nodemask+0x60d/0x770 [ 353.016078] ? __alloc_pages_slowpath+0x2650/0x2650 [ 353.030099] (UME) [ 353.037942] ? wait_for_completion+0x440/0x440 [ 353.050092] 2*2048kB [ 353.051201] alloc_pages_current+0xd6/0x1b0 [ 353.056026] (UE) [ 353.060006] ion_page_pool_alloc+0x102/0x180 [ 353.080075] 0*4096kB [ 353.082074] ion_system_heap_allocate+0x14e/0x930 [ 353.084811] = 10388kB [ 353.088612] ? ion_system_heap_free+0x270/0x270 [ 353.114898] Node 0 [ 353.116362] ion_alloc+0x216/0x770 [ 353.120708] DMA32: [ 353.122722] ? ion_dma_buf_release+0x40/0x40 [ 353.127105] 2065*4kB [ 353.129514] ? kasan_check_write+0x14/0x20 [ 353.134370] (UME) [ 353.136743] ion_ioctl+0xe2/0x1b6 [ 353.141426] 1012*8kB [ 353.143635] ? ion_alloc.cold.15+0x32/0x32 [ 353.147165] (UME) [ 353.149404] do_vfs_ioctl+0x180/0xfb0 [ 353.153825] 1394*16kB [ 353.156198] ? __fget+0x1ad/0x2f0 [ 353.160435] (UME) [ 353.162550] ? ioctl_preallocate+0x1a0/0x1a0 [ 353.165974] 363*32kB (U) [ 353.168381] ? __fget+0x1ca/0x2f0 [ 353.180090] 0*64kB [ 353.181082] ? security_file_ioctl+0x6a/0xa0 [ 353.184504] 0*128kB [ 353.186656] ? SyS_clock_settime+0x1a0/0x1a0 [ 353.210090] 0*256kB 0*512kB [ 353.210582] ? security_file_ioctl+0x6a/0xa0 [ 353.210595] SyS_ioctl+0x74/0x80 [ 353.213598] 0*1024kB [ 353.218007] ? do_vfs_ioctl+0xfb0/0xfb0 [ 353.229051] do_syscall_64+0x1c7/0x5b0 [ 353.230082] 0*2048kB [ 353.232934] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.232939] 0*4096kB [ 353.235339] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 353.247794] RIP: 0033:0x45af49 [ 353.250094] = 50276kB [ 353.251003] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 [ 353.253404] Node 0 [ 353.253407] ORIG_RAX: 0000000000000010 [ 353.253411] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 353.258773] Normal: [ 353.261015] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 353.261025] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 353.261028] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 353.261030] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 353.262854] CPU: 0 PID: 8068 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 353.310084] 0*4kB [ 353.312652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.312658] Call Trace: [ 353.314803] 0*8kB [ 353.324164] dump_stack+0xf7/0x13b [ 353.324176] warn_alloc.cold.110+0xa2/0x1be [ 353.324181] ? zone_watermark_ok_safe+0x260/0x260 [ 353.324188] ? usleep_range+0x120/0x120 [ 353.324194] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 353.324201] ? call_timer_fn+0x570/0x570 [ 353.324207] ? unreserve_highatomic_pageblock+0x315/0x450 [ 353.324216] __alloc_pages_slowpath+0x2052/0x2650 [ 353.350084] 0*16kB [ 353.350672] ? warn_alloc+0x100/0x100 [ 353.354699] 0*32kB [ 353.360245] ? get_page_from_freelist+0x1046/0x23b0 [ 353.360258] ? __might_sleep+0x93/0xb0 [ 353.360265] __alloc_pages_nodemask+0x60d/0x770 [ 353.360273] ? trace_hardirqs_on_caller+0x40c/0x580 [ 353.360279] ? __alloc_pages_slowpath+0x2650/0x2650 [ 353.397446] ? wait_for_completion+0x440/0x440 [ 353.400090] Node 0 active_anon:21224kB inactive_anon:780kB active_file:744kB inactive_file:940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:976kB dirty:144kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 353.402044] alloc_pages_current+0xd6/0x1b0 [ 353.429250] 0*64kB [ 353.433525] ion_page_pool_alloc+0x102/0x180 [ 353.433532] ion_system_heap_allocate+0x14e/0x930 [ 353.435781] 0*128kB [ 353.440341] ? ion_system_heap_free+0x270/0x270 [ 353.440352] ion_alloc+0x216/0x770 [ 353.440362] ? ion_dma_buf_release+0x40/0x40 [ 353.460173] ? kasan_check_write+0x14/0x20 [ 353.464442] ion_ioctl+0xe2/0x1b6 [ 353.467921] ? ion_alloc.cold.15+0x32/0x32 [ 353.470074] 0*256kB 0*512kB 0*1024kB [ 353.472157] do_vfs_ioctl+0x180/0xfb0 [ 353.472161] 0*2048kB [ 353.475946] ? __fget+0x1ad/0x2f0 [ 353.479740] 0*4096kB [ 353.482137] ? ioctl_preallocate+0x1a0/0x1a0 [ 353.482145] ? __fget+0x1ca/0x2f0 [ 353.482157] ? security_file_ioctl+0x6a/0xa0 [ 353.482163] ? SyS_clock_settime+0x1a0/0x1a0 [ 353.482168] ? security_file_ioctl+0x6a/0xa0 [ 353.494585] syz-executor.1: [ 353.496125] SyS_ioctl+0x74/0x80 [ 353.500576] Node 1 active_anon:256kB inactive_anon:4kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 353.505084] ? do_vfs_ioctl+0xfb0/0xfb0 [ 353.509494] Node 0 [ 353.512502] do_syscall_64+0x1c7/0x5b0 [ 353.512507] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.512519] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 353.512525] RIP: 0033:0x45af49 [ 353.512528] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.515913] page allocation failure: order:4 [ 353.541742] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 353.541746] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 353.541748] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.541751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 353.541753] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 353.543311] oom_reaper: reaped process 8057 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 353.550357] syz-executor.0: [ 353.631906] = 0kB [ 353.637009] Node 1 Normal: 10761*4kB (U) 2274*8kB (UE) 2910*16kB (UE) 1799*32kB (UE) 8*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 165876kB [ 353.660384] DMA free:10412kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.691234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.705488] device hsr_slave_1 left promiscuous mode [ 353.711932] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 353.719575] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 353.720152] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 353.727933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 353.747680] CPU: 1 PID: 8082 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 353.755513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.760228] syz-executor.0 cpuset= [ 353.764875] Call Trace: [ 353.764899] dump_stack+0xf7/0x13b [ 353.768421] syz0 [ 353.770993] warn_alloc.cold.110+0xa2/0x1be [ 353.780838] ? zone_watermark_ok_safe+0x260/0x260 [ 353.785706] ? __alloc_pages_direct_compact+0xc2/0x330 [ 353.790094] mems_allowed=0-1 [ 353.790979] __alloc_pages_slowpath+0x2052/0x2650 [ 353.798905] ? trace_hardirqs_off+0x10/0x10 [ 353.803240] ? warn_alloc+0x100/0x100 [ 353.807048] ? get_page_from_freelist+0x1046/0x23b0 [ 353.812061] ? __might_sleep+0x93/0xb0 [ 353.815952] __alloc_pages_nodemask+0x60d/0x770 [ 353.820613] ? trace_hardirqs_off+0x10/0x10 [ 353.824929] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 353.829768] ? __alloc_pages_slowpath+0x2650/0x2650 [ 353.834788] ? wait_for_completion+0x440/0x440 [ 353.839379] alloc_pages_current+0xd6/0x1b0 [ 353.843719] ion_page_pool_alloc+0x102/0x180 [ 353.848115] ion_system_heap_allocate+0x14e/0x930 [ 353.852950] ? do_raw_spin_unlock+0x16a/0x250 [ 353.857467] ? ion_system_heap_free+0x270/0x270 [ 353.862182] ion_alloc+0x27f/0x770 [ 353.865715] ? ion_dma_buf_release+0x40/0x40 [ 353.870119] ? kasan_check_write+0x14/0x20 [ 353.870360] syz-executor.3: page allocation failure: order:4 [ 353.874350] ion_ioctl+0xe2/0x1b6 [ 353.874357] ? ion_alloc.cold.15+0x32/0x32 [ 353.880322] lowmem_reserve[]: [ 353.883639] do_vfs_ioctl+0x180/0xfb0 [ 353.887843] 0 [ 353.890948] ? __fget+0x1ad/0x2f0 [ 353.890955] ? ioctl_preallocate+0x1a0/0x1a0 [ 353.890963] ? __fget+0x1ca/0x2f0 [ 353.890974] ? security_file_ioctl+0x6a/0xa0 [ 353.890981] ? SyS_clock_settime+0x1a0/0x1a0 [ 353.890984] ? security_file_ioctl+0x6a/0xa0 [ 353.890990] SyS_ioctl+0x74/0x80 [ 353.890995] ? do_vfs_ioctl+0xfb0/0xfb0 [ 353.891002] do_syscall_64+0x1c7/0x5b0 [ 353.891007] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.891019] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 353.891026] RIP: 0033:0x45af49 [ 353.910070] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 353.912446] RSP: 002b:00007fb6d4dfac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.916888] (null) [ 353.921288] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 353.921292] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 353.921295] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.921297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6d4dfb6d4 [ 353.921300] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 353.927335] warn_alloc_show_mem: 3 callbacks suppressed [ 353.927340] Mem-Info: [ 353.930787] 2570 [ 353.935987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.938161] syz-executor.4: [ 353.947091] device hsr_slave_0 left promiscuous mode [ 353.954991] CPU: 0 PID: 8076 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 353.961213] active_anon:5370 inactive_anon:196 isolated_anon:0 [ 353.961213] active_file:187 inactive_file:311 isolated_file:0 [ 353.961213] unevictable:0 dirty:36 writeback:0 unstable:0 [ 353.961213] slab_reclaimable:13004 slab_unreclaimable:99942 [ 353.961213] mapped:344 shmem:250 pagetables:428 bounce:0 [ 353.961213] free:84665 free_pcp:30 free_cma:0 [ 353.963238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.970696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 353.978886] Call Trace: [ 353.986282] Node 0 active_anon:21224kB inactive_anon:780kB active_file:744kB inactive_file:1240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:144kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 353.993453] dump_stack+0xf7/0x13b [ 353.993465] warn_alloc.cold.110+0xa2/0x1be [ 353.993470] ? zone_watermark_ok_safe+0x260/0x260 [ 353.993483] ? __alloc_pages_direct_compact+0xc2/0x330 [ 353.993490] __alloc_pages_slowpath+0x2052/0x2650 [ 353.993505] ? trace_hardirqs_off+0x10/0x10 [ 354.000974] 797 total pagecache pages [ 354.006140] ? warn_alloc+0x100/0x100 [ 354.008541] 0 pages in swap cache [ 354.010607] ? get_page_from_freelist+0x1046/0x23b0 [ 354.010622] ? __might_sleep+0x93/0xb0 [ 354.010628] __alloc_pages_nodemask+0x60d/0x770 [ 354.010638] ? trace_hardirqs_off+0x10/0x10 [ 354.010645] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 354.010651] ? __alloc_pages_slowpath+0x2650/0x2650 [ 354.010658] ? wait_for_completion+0x440/0x440 [ 354.010668] alloc_pages_current+0xd6/0x1b0 [ 354.010680] ion_page_pool_alloc+0x102/0x180 [ 354.019709] Node 1 active_anon:256kB inactive_anon:4kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 354.022548] ion_system_heap_allocate+0x14e/0x930 [ 354.022555] ? do_raw_spin_unlock+0x16a/0x250 [ 354.022562] ? ion_system_heap_free+0x270/0x270 [ 354.022570] ion_alloc+0x27f/0x770 [ 354.022579] ? ion_dma_buf_release+0x40/0x40 [ 354.022591] ? kasan_check_write+0x14/0x20 [ 354.027693] Node 0 [ 354.035580] ion_ioctl+0xe2/0x1b6 [ 354.035587] ? ion_alloc.cold.15+0x32/0x32 [ 354.035599] do_vfs_ioctl+0x180/0xfb0 [ 354.035606] ? __fget+0x1ad/0x2f0 [ 354.035612] ? ioctl_preallocate+0x1a0/0x1a0 [ 354.035619] ? __fget+0x1ca/0x2f0 [ 354.035631] ? security_file_ioctl+0x6a/0xa0 [ 354.035636] ? SyS_clock_settime+0x1a0/0x1a0 [ 354.035640] ? security_file_ioctl+0x6a/0xa0 [ 354.035645] SyS_ioctl+0x74/0x80 [ 354.035656] ? do_vfs_ioctl+0xfb0/0xfb0 [ 354.069076] Swap cache stats: add 0, delete 0, find 0/0 [ 354.078187] do_syscall_64+0x1c7/0x5b0 [ 354.078193] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.078205] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 354.078210] RIP: 0033:0x45af49 [ 354.078213] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.078222] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 354.086832] Free swap = 0kB [ 354.089370] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 354.116996] DMA free:10412kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.120262] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 354.120265] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 354.120268] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 354.122489] 2570 [ 354.124749] Total swap = 0kB [ 354.129698] 2570 [ 354.139820] lowmem_reserve[]: [ 354.144033] syz-executor.3 cpuset= [ 354.147938] 0 [ 354.160337] 2570 [ 354.168195] page allocation failure: order:4 [ 354.168942] syz3 [ 354.175762] 1965979 pages RAM [ 354.187812] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 354.192207] mems_allowed=0-1 [ 354.196407] 2570 [ 354.230115] Node 0 [ 354.235851] 0 pages HighMem/MovableOnly [ 354.240229] DMA32 free:127944kB min:36384kB low:45480kB high:54576kB active_anon:21136kB inactive_anon:780kB active_file:820kB inactive_file:1360kB unevictable:0kB writepending:224kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1588kB bounce:0kB free_pcp:108kB local_pcp:108kB free_cma:0kB [ 354.244450] (null) [ 354.250622] lowmem_reserve[]: [ 354.250932] syz-executor.4 cpuset= [ 354.260113] 0 [ 354.262309] 335868 pages reserved [ 354.265703] 0 0 [ 354.274226] 0 pages cma reserved [ 354.290070] 0 [ 354.290921] syz4 [ 354.298725] 0 [ 354.300302] mems_allowed=0-1 [ 354.308921] CPU: 1 PID: 8086 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 354.340140] Node 0 [ 354.342587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.342592] Call Trace: [ 354.444152] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.463933] dump_stack+0xf7/0x13b [ 354.463945] warn_alloc.cold.110+0xa2/0x1be [ 354.463950] ? zone_watermark_ok_safe+0x260/0x260 [ 354.463962] ? __alloc_pages_direct_compact+0xc2/0x330 [ 354.463968] __alloc_pages_slowpath+0x2052/0x2650 [ 354.463983] ? trace_hardirqs_off+0x10/0x10 [ 354.463990] ? warn_alloc+0x100/0x100 [ 354.463996] ? get_page_from_freelist+0x1046/0x23b0 [ 354.464012] ? __might_sleep+0x93/0xb0 [ 354.464018] __alloc_pages_nodemask+0x60d/0x770 [ 354.464023] ? trace_hardirqs_off+0x10/0x10 [ 354.464030] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 354.464035] ? __alloc_pages_slowpath+0x2650/0x2650 [ 354.464043] ? wait_for_completion+0x440/0x440 [ 354.464054] alloc_pages_current+0xd6/0x1b0 [ 354.464064] ion_page_pool_alloc+0x102/0x180 [ 354.464069] ion_system_heap_allocate+0x14e/0x930 [ 354.464075] ? do_raw_spin_unlock+0x16a/0x250 [ 354.464082] ? ion_system_heap_free+0x270/0x270 [ 354.464091] ion_alloc+0x27f/0x770 [ 354.464100] ? ion_dma_buf_release+0x40/0x40 [ 354.483784] 2570 [ 354.485421] ? kasan_check_write+0x14/0x20 [ 354.487367] 2570 [ 354.489168] ion_ioctl+0xe2/0x1b6 [ 354.511180] 2570 [ 354.511665] ? ion_alloc.cold.15+0x32/0x32 [ 354.539209] do_vfs_ioctl+0x180/0xfb0 [ 354.539218] ? __fget+0x1ad/0x2f0 [ 354.539224] ? ioctl_preallocate+0x1a0/0x1a0 [ 354.539231] ? __fget+0x1ca/0x2f0 [ 354.539243] ? security_file_ioctl+0x6a/0xa0 [ 354.539249] ? SyS_clock_settime+0x1a0/0x1a0 [ 354.539253] ? security_file_ioctl+0x6a/0xa0 [ 354.539258] SyS_ioctl+0x74/0x80 [ 354.539263] ? do_vfs_ioctl+0xfb0/0xfb0 [ 354.539270] do_syscall_64+0x1c7/0x5b0 [ 354.539275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.539286] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 354.539291] RIP: 0033:0x45af49 [ 354.539294] RSP: 002b:00007ffa6e540c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.539301] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 354.539304] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 354.539307] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 354.539310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5416d4 [ 354.539313] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 354.549419] team0 (unregistering): Port device team_slave_1 removed [ 354.560124] CPU: 0 PID: 8068 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 354.766227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.775587] Call Trace: [ 354.778192] dump_stack+0xf7/0x13b [ 354.781740] warn_alloc.cold.110+0xa2/0x1be [ 354.786158] ? zone_watermark_ok_safe+0x260/0x260 [ 354.791042] ? __alloc_pages_direct_compact+0xc2/0x330 [ 354.796331] __alloc_pages_slowpath+0x2052/0x2650 [ 354.801213] ? trace_hardirqs_off+0x10/0x10 [ 354.805548] ? warn_alloc+0x100/0x100 [ 354.809355] ? get_page_from_freelist+0x1046/0x23b0 [ 354.814379] ? __might_sleep+0x93/0xb0 [ 354.818361] __alloc_pages_nodemask+0x60d/0x770 [ 354.823038] ? trace_hardirqs_off+0x10/0x10 [ 354.827391] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 354.832381] ? __alloc_pages_slowpath+0x2650/0x2650 [ 354.837706] ? wait_for_completion+0x440/0x440 [ 354.842322] alloc_pages_current+0xd6/0x1b0 [ 354.846659] ion_page_pool_alloc+0x102/0x180 [ 354.851078] ion_system_heap_allocate+0x14e/0x930 [ 354.855953] ? do_raw_spin_unlock+0x16a/0x250 [ 354.860545] ? ion_system_heap_free+0x270/0x270 [ 354.865227] ion_alloc+0x27f/0x770 [ 354.868860] ? ion_dma_buf_release+0x40/0x40 [ 354.873286] ? kasan_check_write+0x14/0x20 [ 354.877527] ion_ioctl+0xe2/0x1b6 [ 354.880987] ? ion_alloc.cold.15+0x32/0x32 [ 354.885240] do_vfs_ioctl+0x180/0xfb0 [ 354.889049] ? __fget+0x1ad/0x2f0 [ 354.892505] ? ioctl_preallocate+0x1a0/0x1a0 [ 354.896920] ? __fget+0x1ca/0x2f0 [ 354.900386] ? security_file_ioctl+0x6a/0xa0 [ 354.904791] ? SyS_clock_settime+0x1a0/0x1a0 [ 354.909247] ? security_file_ioctl+0x6a/0xa0 [ 354.913945] SyS_ioctl+0x74/0x80 [ 354.917315] ? do_vfs_ioctl+0xfb0/0xfb0 [ 354.921298] do_syscall_64+0x1c7/0x5b0 [ 354.925290] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.930143] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 354.935334] RIP: 0033:0x45af49 [ 354.938872] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.946705] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 354.954162] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 354.961445] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 354.968730] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 354.976011] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 354.984315] team0 (unregistering): Port device team_slave_0 removed [ 354.987897] lowmem_reserve[]: 0 0 0 0 0 [ 354.997405] Node 1 Normal free:97164kB min:53504kB low:66880kB high:80256kB active_anon:240kB inactive_anon:4kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:320kB pagetables:124kB bounce:0kB free_pcp:60kB local_pcp:0kB free_cma:0kB [ 355.025398] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 355.040328] Node 0 DMA32 free:39316kB min:36384kB low:45480kB high:54576kB active_anon:21136kB inactive_anon:780kB active_file:820kB inactive_file:1360kB unevictable:0kB writepending:224kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1588kB bounce:0kB free_pcp:108kB local_pcp:36kB free_cma:0kB [ 355.084521] lowmem_reserve[]: 0 0 0 0 0 [ 355.088583] Node 0 DMA: 27*4kB (UM) 22*8kB (UM) 29*16kB (UME) 20*32kB (UM) 5*64kB (UME) 4*128kB (ME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10412kB [ 355.104369] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 355.128677] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 355.148491] warn_alloc_show_mem: 3 callbacks suppressed [ 355.148495] Mem-Info: [ 355.165573] active_anon:5272 inactive_anon:196 isolated_anon:0 [ 355.165573] active_file:58 inactive_file:47 isolated_file:0 [ 355.165573] unevictable:0 dirty:62 writeback:0 unstable:0 [ 355.165573] slab_reclaimable:13003 slab_unreclaimable:99915 [ 355.165573] mapped:34 shmem:250 pagetables:428 bounce:0 [ 355.165573] free:13716 free_pcp:144 free_cma:0 [ 355.171667] rs:main Q:Reg cpuset= [ 355.202914] Node 0 DMA32: 449*4kB (ME) 137*8kB (ME) 33*16kB (UME) 453*32kB (UME) 4*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18300kB [ 355.208582] lowmem_reserve[]: [ 355.220825] / mems_allowed=0-1 [ 355.227157] CPU: 0 PID: 6992 Comm: rs:main Q:Reg Not tainted 4.14.172-syzkaller #0 [ 355.228060] 0 [ 355.234880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.234885] Call Trace: [ 355.234905] dump_stack+0xf7/0x13b [ 355.234917] dump_header+0x160/0x63f [ 355.234925] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 355.234933] ? ___ratelimit+0x243/0x519 [ 355.234940] ? do_raw_spin_unlock+0x16a/0x250 [ 355.234946] oom_kill_process.cold.24+0xb/0xa1a [ 355.234953] ? out_of_memory+0x7f9/0x1030 [ 355.236778] 0 [ 355.247078] ? lock_downgrade+0x7f0/0x7f0 [ 355.247090] out_of_memory+0x2b0/0x1030 [ 355.247099] ? oom_killer_disable+0x1a0/0x1a0 [ 355.247107] ? __alloc_pages_slowpath+0xb69/0x2650 [ 355.247115] __alloc_pages_slowpath+0x1ef3/0x2650 [ 355.249712] Node 0 active_anon:20848kB inactive_anon:780kB active_file:184kB inactive_file:184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136kB dirty:232kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 355.253218] ? warn_alloc+0x100/0x100 [ 355.253225] ? get_page_from_freelist+0x1046/0x23b0 [ 355.253241] ? __might_sleep+0x93/0xb0 [ 355.256952] Node 1 active_anon:240kB inactive_anon:4kB active_file:4kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 355.262054] __alloc_pages_nodemask+0x60d/0x770 [ 355.262062] ? __alloc_pages_slowpath+0x2650/0x2650 [ 355.262071] ? find_get_entry+0xd7/0x5a0 [ 355.262080] ? lock_downgrade+0x7f0/0x7f0 [ 355.266052] 0 [ 355.270530] ? radix_tree_lookup_slot+0x55/0x90 [ 355.270540] alloc_pages_current+0xd6/0x1b0 [ 355.270548] __page_cache_alloc+0x1da/0x330 [ 355.270555] ? trace_hardirqs_off+0x10/0x10 [ 355.275375] 0 [ 355.279513] pagecache_get_page+0x129/0x7c0 [ 355.281341] Node 0 [ 355.285434] grab_cache_page_write_begin+0x55/0x90 [ 355.289392] DMA free:10372kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.293878] ? rcu_read_lock_sched_held+0x108/0x120 [ 355.293888] ext4_da_write_begin+0x243/0xd30 [ 355.293897] ? ext4_write_begin+0x10e0/0x10e0 [ 355.293906] ? balance_dirty_pages_ratelimited+0x751/0x14e0 [ 355.293915] generic_perform_write+0x271/0x450 [ 355.298844] 0 [ 355.303660] ? __mark_inode_dirty+0x58c/0xe80 [ 355.303671] ? page_endio+0x410/0x410 [ 355.303677] ? file_update_time+0x22d/0x360 [ 355.303684] ? __lock_acquire+0x6a4/0x4500 [ 355.303690] ? current_time+0xa0/0xa0 [ 355.330805] lowmem_reserve[]: [ 355.334652] ? lock_acquire+0x173/0x400 [ 355.339637] 0 [ 355.343514] ? ext4_file_write_iter+0x1db/0xe40 [ 355.343523] __generic_file_write_iter+0x201/0x580 [ 355.343531] ext4_file_write_iter+0x27a/0xe40 [ 355.343538] ? trace_hardirqs_off+0x10/0x10 [ 355.343542] ? find_held_lock+0x36/0x1d0 [ 355.343548] ? ext4_file_mmap+0x260/0x260 [ 355.374242] ? trace_hardirqs_on+0x10/0x10 [ 355.374250] ? trace_hardirqs_off+0x10/0x10 [ 355.374257] __vfs_write+0x413/0x840 [ 355.379257] Node 0 [ 355.383361] ? trace_hardirqs_off+0x10/0x10 [ 355.383369] ? kernel_read+0x130/0x130 [ 355.383374] ? __lock_is_held+0xb5/0x140 [ 355.383394] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 355.383401] ? __sb_start_write+0x1f3/0x2a0 [ 355.383406] vfs_write+0x150/0x4f0 [ 355.383413] SyS_write+0x100/0x250 [ 355.383418] ? SyS_read+0x250/0x250 [ 355.383427] ? do_syscall_64+0x4c/0x5b0 [ 355.387587] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.389375] ? SyS_read+0x250/0x250 [ 355.394116] 2570 [ 355.398370] do_syscall_64+0x1c7/0x5b0 [ 355.402710] lowmem_reserve[]: [ 355.407071] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.408850] 0 [ 355.413178] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 355.413185] RIP: 0033:0x7f79068fd19d [ 355.413188] RSP: 002b:00007f7904e9e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 355.413195] RAX: ffffffffffffffda RBX: 000000000000028e RCX: 00007f79068fd19d [ 355.413198] RDX: 000000000000028e RSI: 00000000020bc340 RDI: 0000000000000001 [ 355.413201] RBP: 00000000020bc340 R08: 00000000020bc5be R09: 00007f790627a157 [ 355.413204] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 355.415456] 2570 [ 355.420482] R13: 00007f7904e9e480 R14: 0000000000000003 R15: 00000000020bc140 [ 355.423392] Node 0 [ 355.457803] 0 [ 355.462410] Normal: [ 355.473083] 0 [ 355.477101] 0*4kB [ 355.492292] 0 [ 355.495413] 0*8kB [ 355.498741] 0 [ 355.500599] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 355.500622] Node 1 Normal: 0*4kB 2*8kB (UM) 2*16kB (M) 835*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26768kB [ 355.500662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.500666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 355.500668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.500671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 355.500675] 364 total pagecache pages [ 355.500683] 0 pages in swap cache [ 355.500687] Swap cache stats: add 0, delete 0, find 0/0 [ 355.514307] Free swap = 0kB [ 355.519255] Node 1 [ 355.521300] Total swap = 0kB [ 355.521306] 1965979 pages RAM [ 355.521309] 0 pages HighMem/MovableOnly [ 355.521311] 335868 pages reserved [ 355.521313] 0 pages cma reserved [ 355.794665] 2570 2570 [ 355.797217] Node 0 DMA32 free:42784kB min:36384kB low:45480kB high:54576kB active_anon:21136kB inactive_anon:780kB active_file:116kB inactive_file:768kB unevictable:0kB writepending:232kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1588kB bounce:0kB free_pcp:284kB local_pcp:212kB free_cma:0kB [ 355.906744] bond0 (unregistering): Released all slaves [ 355.917830] Mem-Info: [ 355.920420] active_anon:5272 inactive_anon:196 isolated_anon:0 [ 355.920420] active_file:42 inactive_file:97 isolated_file:0 [ 355.920420] unevictable:0 dirty:62 writeback:0 unstable:0 [ 355.920420] slab_reclaimable:13003 slab_unreclaimable:99737 [ 355.920420] mapped:34 shmem:250 pagetables:428 bounce:0 [ 355.920420] free:13761 free_pcp:34 free_cma:0 [ 355.950219] lowmem_reserve[]: 0 0 0 0 0 [ 355.955793] Node 0 active_anon:20848kB inactive_anon:780kB active_file:184kB inactive_file:236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136kB dirty:232kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 355.957299] Node 0 [ 355.986552] Node 1 active_anon:240kB inactive_anon:4kB active_file:72kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 355.990618] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.016948] Node 0 [ 356.049594] lowmem_reserve[]: 0 0 0 0 0 [ 356.055972] Node 1 Normal free:26504kB min:53504kB low:66880kB high:80256kB active_anon:240kB inactive_anon:4kB active_file:172kB inactive_file:352kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:320kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.061989] DMA free:10384kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.092628] lowmem_reserve[]: 0 0 0 0 0 [ 356.114462] Node 0 DMA: 4*4kB (UM) 5*8kB (UM) 22*16kB (UME) 20*32kB (UM) 10*64kB (UME) 4*128kB (ME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10392kB [ 356.116934] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 356.135255] Node 0 [ 356.139174] Node 0 [ 356.139176] DMA32: 477*4kB [ 356.141491] DMA32 free:18340kB min:36384kB low:45480kB high:54576kB active_anon:20768kB inactive_anon:780kB active_file:148kB inactive_file:204kB unevictable:0kB writepending:228kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1588kB bounce:0kB free_pcp:204kB local_pcp:76kB free_cma:0kB [ 356.143689] (UME) [ 356.146598] lowmem_reserve[]: [ 356.185965] 147*8kB (UME) 25*16kB (ME) 8*32kB (UME) 7*64kB (UM) 85*128kB (UM) 13*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18396kB [ 356.193102] 0 [ 356.206905] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 356.213639] 0 0 0 0 [ 356.219541] Node 1 Normal: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 83*128kB (U) 50*256kB (U) 4*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 26608kB [ 356.227225] Node 0 [ 356.237811] Mem-Info: [ 356.241652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.245060] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.255691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 356.278921] active_anon:5255 inactive_anon:196 isolated_anon:0 [ 356.278921] active_file:30 inactive_file:65 isolated_file:0 [ 356.278921] unevictable:0 dirty:61 writeback:0 unstable:0 [ 356.278921] slab_reclaimable:13000 slab_unreclaimable:99666 [ 356.278921] mapped:2 shmem:250 pagetables:428 bounce:0 [ 356.278921] free:13677 free_pcp:32 free_cma:0 [ 356.294280] Normal free:26588kB min:53504kB low:66880kB high:80256kB active_anon:240kB inactive_anon:4kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:320kB pagetables:124kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 356.335825] lowmem_reserve[]: [ 356.354794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.363745] Node 0 active_anon:20780kB inactive_anon:780kB active_file:64kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:228kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 356.366837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 356.396430] 0 0 0 0 0 [ 356.409289] lowmem_reserve[]: 0 0 0 0 0 [ 356.410846] Node 1 [ 356.414796] Node 0 [ 356.414808] Normal free:26688kB min:53504kB low:66880kB high:80256kB active_anon:240kB inactive_anon:4kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:320kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.417176] DMA: 4*4kB [ 356.419419] lowmem_reserve[]: [ 356.454296] 344 total pagecache pages [ 356.458152] Node 1 active_anon:240kB inactive_anon:4kB active_file:4kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 356.466762] 0 pages in swap cache [ 356.490141] 0 0 0 0 0 [ 356.493805] Node 0 DMA: 4*4kB (UM) 5*8kB (UM) 22*16kB (UME) 20*32kB (UM) 10*64kB (UME) 4*128kB (ME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10392kB [ 356.498522] Swap cache stats: add 0, delete 0, find 0/0 [ 356.513314] Node 0 DMA free:10384kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.520879] (UM) [ 356.546284] Node 0 [ 356.548167] Free swap = 0kB [ 356.548529] DMA32: [ 356.551096] Total swap = 0kB [ 356.553843] 496*4kB [ 356.556080] 1965979 pages RAM [ 356.559100] (UME) [ 356.567851] 5*8kB (UM) 22*16kB (UME) 20*32kB (UM) 10*64kB (UME) 4*128kB (ME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10392kB [ 356.573370] 139*8kB [ 356.591563] lowmem_reserve[]: [ 356.593719] 0 pages HighMem/MovableOnly [ 356.593930] 0 [ 356.597045] 335868 pages reserved [ 356.602819] 2570 [ 356.605223] 0 pages cma reserved [ 356.606399] 2570 [ 356.610315] Node 0 [ 356.613766] (UME) [ 356.615213] DMA32: [ 356.617443] 25*16kB [ 356.619583] 496*4kB [ 356.623494] (ME) 8*32kB (UME) 7*64kB (UM) 82*128kB (UM) 13*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18024kB [ 356.629777] 2570 [ 356.637215] (UME) [ 356.639209] Node 0 [ 356.639281] 139*8kB [ 356.643203] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 356.649458] (UME) [ 356.656429] 2570 [ 356.658252] Node 1 [ 356.658582] Node 0 [ 356.662446] Normal: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 84*128kB (U) 50*256kB (U) 4*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 26728kB [ 356.668797] 25*16kB [ 356.678592] DMA32 free:17736kB min:36384kB low:45480kB high:54576kB active_anon:20768kB inactive_anon:780kB active_file:52kB inactive_file:188kB unevictable:0kB writepending:228kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6976kB pagetables:1588kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.685479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.716426] (ME) 8*32kB (UME) 7*64kB (UM) 82*128kB (UM) 13*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18024kB [ 356.736729] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 356.743724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 356.747553] lowmem_reserve[]: [ 356.756107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.756111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 356.756114] 344 total pagecache pages [ 356.756124] 0 pages in swap cache [ 356.756127] Swap cache stats: add 0, delete 0, find 0/0 [ 356.756130] Free swap = 0kB [ 356.756133] Total swap = 0kB [ 356.756140] 1965979 pages RAM [ 356.756143] 0 pages HighMem/MovableOnly [ 356.756146] 335868 pages reserved [ 356.756148] 0 pages cma reserved [ 356.756154] Out of memory: Kill process 7217 (syz-execprog) score 1 or sacrifice child [ 356.756231] Killed process 8042 (syz-executor.5) total-vm:37644kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 356.763261] Node 1 [ 356.775458] 0 [ 356.777079] Normal: [ 356.784984] 0 [ 356.789585] 0*4kB [ 356.830708] 0 0 0 [ 356.839633] 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 84*128kB (U) 50*256kB (U) 4*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 26728kB [ 356.853542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.858960] Node 0 [ 356.862452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 356.862456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.862459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 356.862463] 319 total pagecache pages [ 356.862470] 0 pages in swap cache [ 356.862473] Swap cache stats: add 0, delete 0, find 0/0 [ 356.862475] Free swap = 0kB [ 356.862477] Total swap = 0kB [ 356.862483] 1965979 pages RAM [ 356.862485] 0 pages HighMem/MovableOnly [ 356.862487] 335868 pages reserved [ 356.862489] 0 pages cma reserved [ 356.924029] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.984493] lowmem_reserve[]: 0 0 0 0 0 [ 356.985229] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 356.988542] Node 1 Normal free:26220kB min:53504kB low:66880kB high:80256kB active_anon:240kB inactive_anon:4kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:288kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.026303] , order=0, oom_score_adj=1000 [ 357.036997] warn_alloc: 3 callbacks suppressed [ 357.037001] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 357.086400] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 357.098418] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 357.104154] CPU: 1 PID: 8057 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 357.110107] syz-executor.3: [ 357.111969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.111974] Call Trace: [ 357.114993] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 357.124365] dump_stack+0xf7/0x13b [ 357.124383] dump_header+0x160/0x63f [ 357.124391] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 357.124399] ? ___ratelimit+0x243/0x519 [ 357.124407] ? do_raw_spin_unlock+0x16a/0x250 [ 357.124413] oom_kill_process.cold.24+0xb/0xa1a [ 357.124417] ? out_of_memory+0x7f9/0x1030 [ 357.124425] ? lock_downgrade+0x7f0/0x7f0 [ 357.124435] out_of_memory+0x2b0/0x1030 [ 357.124443] ? oom_killer_disable+0x1a0/0x1a0 [ 357.124451] ? __alloc_pages_slowpath+0xb69/0x2650 [ 357.124457] __alloc_pages_slowpath+0x1ef3/0x2650 [ 357.124472] ? warn_alloc+0x100/0x100 [ 357.124478] ? get_page_from_freelist+0x1046/0x23b0 [ 357.124493] ? __might_sleep+0x93/0xb0 [ 357.124498] __alloc_pages_nodemask+0x60d/0x770 [ 357.124502] ? trace_hardirqs_off+0x10/0x10 [ 357.124507] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 357.124513] ? __alloc_pages_slowpath+0x2650/0x2650 [ 357.124520] ? wait_for_completion+0x440/0x440 [ 357.124537] alloc_pages_current+0xd6/0x1b0 [ 357.124550] ion_page_pool_alloc+0x102/0x180 [ 357.132034] syz-executor.1: [ 357.137147] ion_system_heap_allocate+0x14e/0x930 [ 357.152895] page allocation failure: order:0 [ 357.153425] ? do_raw_spin_unlock+0x16a/0x250 [ 357.163028] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 357.166720] ? ion_system_heap_free+0x270/0x270 [ 357.183028] (null) [ 357.184290] ion_alloc+0x27f/0x770 [ 357.184302] ? ion_dma_buf_release+0x40/0x40 [ 357.184315] ? kasan_check_write+0x14/0x20 [ 357.184321] ion_ioctl+0xe2/0x1b6 [ 357.184328] ? ion_alloc.cold.15+0x32/0x32 [ 357.189174] syz-executor.3 cpuset= [ 357.192971] do_vfs_ioctl+0x180/0xfb0 [ 357.192979] ? __fget+0x1ad/0x2f0 [ 357.192985] ? ioctl_preallocate+0x1a0/0x1a0 [ 357.192992] ? __fget+0x1ca/0x2f0 [ 357.193003] ? security_file_ioctl+0x6a/0xa0 [ 357.193009] ? SyS_clock_settime+0x1a0/0x1a0 [ 357.193012] ? security_file_ioctl+0x6a/0xa0 [ 357.193018] SyS_ioctl+0x74/0x80 [ 357.193023] ? do_vfs_ioctl+0xfb0/0xfb0 [ 357.193030] do_syscall_64+0x1c7/0x5b0 [ 357.193034] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.193045] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 357.193050] RIP: 0033:0x45af49 [ 357.193053] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.193059] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 357.193062] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 357.193065] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 357.193068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 357.193071] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 357.193377] syz-executor.0: [ 357.198104] lowmem_reserve[]: [ 357.202028] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 357.209665] CPU: 0 PID: 8074 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 357.216558] syz-executor.4: [ 357.220899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.220903] Call Trace: [ 357.220922] dump_stack+0xf7/0x13b [ 357.220932] warn_alloc.cold.110+0xa2/0x1be [ 357.220937] ? zone_watermark_ok_safe+0x260/0x260 [ 357.220951] ? __alloc_pages_direct_compact+0xc2/0x330 [ 357.228623] Mem-Info: [ 357.229870] __alloc_pages_slowpath+0x2052/0x2650 [ 357.234350] page allocation failure: order:0 [ 357.237327] ? trace_hardirqs_off+0x10/0x10 [ 357.242233] page allocation failure: order:0 [ 357.246570] ? warn_alloc+0x100/0x100 [ 357.251089] syz-executor.1 cpuset= [ 357.258138] ? get_page_from_freelist+0x1046/0x23b0 [ 357.262828] (null) [ 357.264953] ? __might_sleep+0x93/0xb0 [ 357.268465] syz-executor.1 cpuset= [ 357.272873] __alloc_pages_nodemask+0x60d/0x770 [ 357.272883] ? trace_hardirqs_off+0x10/0x10 [ 357.272891] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 357.272898] ? __alloc_pages_slowpath+0x2650/0x2650 [ 357.277152] active_anon:5246 inactive_anon:196 isolated_anon:0 [ 357.277152] active_file:17 inactive_file:16 isolated_file:0 [ 357.277152] unevictable:0 dirty:0 writeback:0 unstable:0 [ 357.277152] slab_reclaimable:12993 slab_unreclaimable:99613 [ 357.277152] mapped:2 shmem:250 pagetables:423 bounce:0 [ 357.277152] free:13635 free_pcp:0 free_cma:0 [ 357.280648] ? wait_for_completion+0x440/0x440 [ 357.280659] alloc_pages_current+0xd6/0x1b0 [ 357.280669] ion_page_pool_alloc+0x102/0x180 [ 357.280675] ion_system_heap_allocate+0x14e/0x930 [ 357.284908] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 357.289210] ? do_raw_spin_unlock+0x16a/0x250 [ 357.293097] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 357.296442] ? ion_system_heap_free+0x270/0x270 [ 357.300881] Node 0 active_anon:20776kB inactive_anon:780kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 357.304283] ion_alloc+0x27f/0x770 [ 357.308680] Node 1 active_anon:208kB inactive_anon:4kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 357.313077] ? ion_dma_buf_release+0x40/0x40 [ 357.313088] ? kasan_check_write+0x14/0x20 [ 357.313094] ion_ioctl+0xe2/0x1b6 [ 357.313099] ? ion_alloc.cold.15+0x32/0x32 [ 357.313112] do_vfs_ioctl+0x180/0xfb0 [ 357.317531] syz1 [ 357.320866] ? __fget+0x1ad/0x2f0 [ 357.325148] syz1 [ 357.328720] ? ioctl_preallocate+0x1a0/0x1a0 [ 357.333633] (null) [ 357.338882] ? __fget+0x1ca/0x2f0 [ 357.342152] (null) [ 357.349763] ? security_file_ioctl+0x6a/0xa0 [ 357.357062] mems_allowed=0-1 [ 357.364273] ? SyS_clock_settime+0x1a0/0x1a0 [ 357.364278] ? security_file_ioctl+0x6a/0xa0 [ 357.364289] SyS_ioctl+0x74/0x80 [ 357.364296] ? do_vfs_ioctl+0xfb0/0xfb0 [ 357.371594] mems_allowed=0-1 [ 357.378834] do_syscall_64+0x1c7/0x5b0 [ 357.386143] syz-executor.0 cpuset= [ 357.389094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.392221] Node 0 [ 357.404069] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 357.404076] RIP: 0033:0x45af49 [ 357.404078] RSP: 002b:00007ffa6e582c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.404085] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 357.404087] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 357.404093] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 357.411936] syz0 [ 357.414947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5836d4 [ 357.414951] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 357.424345] syz-executor.4 cpuset= [ 357.429387] syz3 [ 357.440312] CPU: 1 PID: 8082 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 357.463082] 0 [ 357.465139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.468929] 0 [ 357.472451] Call Trace: [ 357.472470] dump_stack+0xf7/0x13b [ 357.472480] warn_alloc.cold.110+0xa2/0x1be [ 357.472485] ? zone_watermark_ok_safe+0x260/0x260 [ 357.472492] ? usleep_range+0x120/0x120 [ 357.472498] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 357.472505] ? call_timer_fn+0x570/0x570 [ 357.472510] ? unreserve_highatomic_pageblock+0x315/0x450 [ 357.472520] __alloc_pages_slowpath+0x2052/0x2650 [ 357.490089] mems_allowed=0-1 [ 357.491680] ? trace_hardirqs_on_caller+0x40c/0x580 [ 357.503084] 0 [ 357.505854] ? warn_alloc+0x100/0x100 [ 357.623276] 0 [ 357.636145] ? get_page_from_freelist+0x1046/0x23b0 [ 357.636160] ? __might_sleep+0x93/0xb0 [ 357.636172] __alloc_pages_nodemask+0x60d/0x770 [ 357.636181] ? __alloc_pages_slowpath+0x2650/0x2650 [ 357.636191] ? wait_for_completion+0x440/0x440 [ 357.636202] alloc_pages_current+0xd6/0x1b0 [ 357.636211] ion_page_pool_alloc+0x102/0x180 [ 357.636217] ion_system_heap_allocate+0x14e/0x930 [ 357.636223] ? do_raw_spin_unlock+0x16a/0x250 [ 357.636230] ? ion_system_heap_free+0x270/0x270 [ 357.636238] ion_alloc+0x27f/0x770 [ 357.636247] ? ion_dma_buf_release+0x40/0x40 [ 357.636261] ? kasan_check_write+0x14/0x20 [ 357.683947] 0 [ 357.688072] ion_ioctl+0xe2/0x1b6 [ 357.712941] ? ion_alloc.cold.15+0x32/0x32 [ 357.717782] Node 0 [ 357.720014] do_vfs_ioctl+0x180/0xfb0 [ 357.770133] DMA: [ 357.774869] ? __fget+0x1ad/0x2f0 [ 357.778389] 3*4kB [ 357.780365] ? ioctl_preallocate+0x1a0/0x1a0 [ 357.780375] ? __fget+0x1ca/0x2f0 [ 357.780386] ? security_file_ioctl+0x6a/0xa0 [ 357.780392] ? SyS_clock_settime+0x1a0/0x1a0 [ 357.780395] ? security_file_ioctl+0x6a/0xa0 [ 357.780401] SyS_ioctl+0x74/0x80 [ 357.780407] ? do_vfs_ioctl+0xfb0/0xfb0 [ 357.780414] do_syscall_64+0x1c7/0x5b0 [ 357.780418] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.780430] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 357.780436] RIP: 0033:0x45af49 [ 357.780438] RSP: 002b:00007fb6d4dfac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.780445] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 357.780448] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 357.780450] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 357.780453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6d4dfb6d4 [ 357.780455] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 357.794840] syz4 [ 357.804138] CPU: 0 PID: 8092 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 357.809580] mems_allowed=0-1 [ 357.812977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.812982] Call Trace: [ 357.813001] dump_stack+0xf7/0x13b [ 357.813012] warn_alloc.cold.110+0xa2/0x1be [ 357.813017] ? zone_watermark_ok_safe+0x260/0x260 [ 357.813023] ? usleep_range+0x120/0x120 [ 357.813036] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 357.817906] DMA free:10340kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.821856] ? call_timer_fn+0x570/0x570 [ 357.821864] ? unreserve_highatomic_pageblock+0x315/0x450 [ 357.821874] __alloc_pages_slowpath+0x2052/0x2650 [ 357.821889] ? warn_alloc+0x100/0x100 [ 357.821896] ? get_page_from_freelist+0x1046/0x23b0 [ 357.827030] mems_allowed=0-1 [ 357.831083] ? __might_sleep+0x93/0xb0 [ 357.831093] __alloc_pages_nodemask+0x60d/0x770 [ 357.831102] ? __alloc_pages_slowpath+0x2650/0x2650 [ 357.831113] ? wait_for_completion+0x440/0x440 [ 357.831125] alloc_pages_current+0xd6/0x1b0 [ 357.850108] lowmem_reserve[]: [ 357.851504] ion_page_pool_alloc+0x102/0x180 [ 357.855279] 0 [ 357.857067] ion_system_heap_allocate+0x14e/0x930 [ 357.890057] 2570 [ 357.893652] ? do_raw_spin_unlock+0x16a/0x250 [ 357.898123] 2570 2570 [ 357.902788] ? ion_system_heap_free+0x270/0x270 [ 357.902797] ion_alloc+0x27f/0x770 [ 357.902807] ? ion_dma_buf_release+0x40/0x40 [ 357.902819] ? kasan_check_write+0x14/0x20 [ 357.930059] 2570 [ 357.930363] ion_ioctl+0xe2/0x1b6 [ 357.935932] ? ion_alloc.cold.15+0x32/0x32 [ 357.938062] Node 0 [ 357.942458] do_vfs_ioctl+0x180/0xfb0 [ 357.942465] ? __fget+0x1ad/0x2f0 [ 357.942472] ? ioctl_preallocate+0x1a0/0x1a0 [ 357.942482] ? __fget+0x1ca/0x2f0 [ 357.942494] ? security_file_ioctl+0x6a/0xa0 [ 357.990065] DMA32 free:18256kB min:36384kB low:45480kB high:54576kB active_anon:20764kB inactive_anon:780kB active_file:64kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6944kB pagetables:1588kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.996132] ? SyS_clock_settime+0x1a0/0x1a0 [ 358.020058] lowmem_reserve[]: [ 358.025189] ? security_file_ioctl+0x6a/0xa0 [ 358.025203] SyS_ioctl+0x74/0x80 [ 358.060052] 0 [ 358.060803] ? do_vfs_ioctl+0xfb0/0xfb0 [ 358.065116] 0 [ 358.070120] do_syscall_64+0x1c7/0x5b0 [ 358.070126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.070138] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 358.070144] RIP: 0033:0x45af49 [ 358.070148] RSP: 002b:00007fb6d4db8c78 EFLAGS: 00000246 [ 358.100060] 0 [ 358.104869] ORIG_RAX: 0000000000000010 [ 358.104874] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 358.108929] 0 [ 358.114448] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 358.114451] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 358.114453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6d4db96d4 [ 358.114456] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 358.119202] CPU: 0 PID: 8084 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 358.160096] 0 [ 358.161175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.167824] Call Trace: [ 358.169874] Node 0 [ 358.174368] dump_stack+0xf7/0x13b [ 358.174379] warn_alloc.cold.110+0xa2/0x1be [ 358.174384] ? zone_watermark_ok_safe+0x260/0x260 [ 358.174390] ? usleep_range+0x120/0x120 [ 358.174396] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 358.174403] ? call_timer_fn+0x570/0x570 [ 358.174409] ? unreserve_highatomic_pageblock+0x315/0x450 [ 358.174419] __alloc_pages_slowpath+0x2052/0x2650 [ 358.220057] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 358.220657] ? warn_alloc+0x100/0x100 [ 358.225040] lowmem_reserve[]: [ 358.252812] ? get_page_from_freelist+0x1046/0x23b0 [ 358.252828] ? __might_sleep+0x93/0xb0 [ 358.252835] __alloc_pages_nodemask+0x60d/0x770 [ 358.252843] ? __alloc_pages_slowpath+0x2650/0x2650 [ 358.252854] ? wait_for_completion+0x440/0x440 [ 358.252865] alloc_pages_current+0xd6/0x1b0 [ 358.320059] 0 [ 358.320104] ion_page_pool_alloc+0x102/0x180 [ 358.327352] 0 0 [ 358.334619] ion_system_heap_allocate+0x14e/0x930 [ 358.334628] ? do_raw_spin_unlock+0x16a/0x250 [ 358.334634] ? ion_system_heap_free+0x270/0x270 [ 358.334644] ion_alloc+0x27f/0x770 [ 358.334653] ? ion_dma_buf_release+0x40/0x40 [ 358.390052] 0 [ 358.392636] ? kasan_check_write+0x14/0x20 [ 358.398256] 0 [ 358.403091] ion_ioctl+0xe2/0x1b6 [ 358.403097] ? ion_alloc.cold.15+0x32/0x32 [ 358.403109] do_vfs_ioctl+0x180/0xfb0 [ 358.403117] ? __fget+0x1ad/0x2f0 [ 358.403123] ? ioctl_preallocate+0x1a0/0x1a0 [ 358.511228] ? __fget+0x1ca/0x2f0 [ 358.514669] Node 1 [ 358.519068] ? security_file_ioctl+0x6a/0xa0 [ 358.529135] ? SyS_clock_settime+0x1a0/0x1a0 [ 358.533538] ? security_file_ioctl+0x6a/0xa0 [ 358.537941] SyS_ioctl+0x74/0x80 [ 358.541296] ? do_vfs_ioctl+0xfb0/0xfb0 [ 358.545256] do_syscall_64+0x1c7/0x5b0 [ 358.549130] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.550059] Normal free:25944kB min:53504kB low:66880kB high:80256kB active_anon:208kB inactive_anon:4kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:288kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 358.553965] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 358.586301] RIP: 0033:0x45af49 [ 358.589473] RSP: 002b:00007f024cf67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.597169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 358.604441] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 358.611698] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 358.619041] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cf686d4 [ 358.626308] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 358.633579] CPU: 1 PID: 8086 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 358.637576] (M) [ 358.641373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.641376] Call Trace: [ 358.641393] dump_stack+0xf7/0x13b [ 358.641403] warn_alloc.cold.110+0xa2/0x1be [ 358.641413] ? zone_watermark_ok_safe+0x260/0x260 [ 358.641419] ? usleep_range+0x120/0x120 [ 358.641425] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 358.641433] ? call_timer_fn+0x570/0x570 [ 358.641442] ? unreserve_highatomic_pageblock+0x315/0x450 [ 358.643674] 3*8kB [ 358.653026] __alloc_pages_slowpath+0x2052/0x2650 [ 358.653040] ? warn_alloc+0x100/0x100 [ 358.653046] ? get_page_from_freelist+0x1046/0x23b0 [ 358.653060] ? __might_sleep+0x93/0xb0 [ 358.653066] __alloc_pages_nodemask+0x60d/0x770 [ 358.653073] ? __alloc_pages_slowpath+0x2650/0x2650 [ 358.653082] ? wait_for_completion+0x440/0x440 [ 358.653092] alloc_pages_current+0xd6/0x1b0 [ 358.653102] ion_page_pool_alloc+0x102/0x180 [ 358.653108] ion_system_heap_allocate+0x14e/0x930 [ 358.658743] (M) [ 358.659208] ? do_raw_spin_unlock+0x16a/0x250 [ 358.663812] 20*16kB [ 358.668601] ? ion_system_heap_free+0x270/0x270 [ 358.675560] (UME) [ 358.677651] ion_alloc+0x27f/0x770 [ 358.681755] 20*32kB [ 358.687232] ? ion_dma_buf_release+0x40/0x40 [ 358.689373] (UM) [ 358.694204] ? kasan_check_write+0x14/0x20 [ 358.694211] ion_ioctl+0xe2/0x1b6 [ 358.694216] ? ion_alloc.cold.15+0x32/0x32 [ 358.694228] do_vfs_ioctl+0x180/0xfb0 [ 358.694235] ? __fget+0x1ad/0x2f0 [ 358.694241] ? ioctl_preallocate+0x1a0/0x1a0 [ 358.694248] ? __fget+0x1ca/0x2f0 [ 358.694260] ? security_file_ioctl+0x6a/0xa0 [ 358.694266] ? SyS_clock_settime+0x1a0/0x1a0 [ 358.694269] ? security_file_ioctl+0x6a/0xa0 [ 358.694275] SyS_ioctl+0x74/0x80 [ 358.694279] ? do_vfs_ioctl+0xfb0/0xfb0 [ 358.694287] do_syscall_64+0x1c7/0x5b0 [ 358.694293] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.701224] 10*64kB [ 358.703098] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 358.706958] (UME) 4*128kB [ 358.711619] RIP: 0033:0x45af49 [ 358.711622] RSP: 002b:00007ffa6e540c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.711627] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 358.711630] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 358.711632] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 358.711635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5416d4 [ 358.711637] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 358.724206] lowmem_reserve[]: [ 358.728704] (ME) [ 358.734191] CPU: 1 PID: 8076 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 358.735005] 2*256kB [ 358.736982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.744542] (ME) [ 358.748436] Call Trace: [ 358.748455] dump_stack+0xf7/0x13b [ 358.750662] 1*512kB [ 358.754118] warn_alloc.cold.110+0xa2/0x1be [ 358.756424] (E) [ 358.760816] ? zone_watermark_ok_safe+0x260/0x260 [ 358.760824] ? usleep_range+0x120/0x120 [ 358.760830] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 358.760837] ? call_timer_fn+0x570/0x570 [ 358.760843] ? unreserve_highatomic_pageblock+0x315/0x450 [ 358.760853] __alloc_pages_slowpath+0x2052/0x2650 [ 358.760866] ? warn_alloc+0x100/0x100 [ 358.760873] ? get_page_from_freelist+0x1046/0x23b0 [ 358.760887] ? __might_sleep+0x93/0xb0 [ 358.760893] __alloc_pages_nodemask+0x60d/0x770 [ 358.760900] ? trace_hardirqs_off+0x10/0x10 [ 358.760904] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 358.760911] ? __alloc_pages_slowpath+0x2650/0x2650 [ 358.760917] ? wait_for_completion+0x440/0x440 [ 358.760927] alloc_pages_current+0xd6/0x1b0 [ 358.760937] ion_page_pool_alloc+0x102/0x180 [ 358.766445] Mem-Info: [ 358.767204] ion_system_heap_allocate+0x14e/0x930 [ 358.770704] active_anon:5246 inactive_anon:196 isolated_anon:0 [ 358.770704] active_file:17 inactive_file:16 isolated_file:0 [ 358.770704] unevictable:0 dirty:0 writeback:0 unstable:0 [ 358.770704] slab_reclaimable:12968 slab_unreclaimable:99526 [ 358.770704] mapped:2 shmem:250 pagetables:423 bounce:0 [ 358.770704] free:13699 free_pcp:66 free_cma:0 [ 358.774859] ? do_raw_spin_unlock+0x16a/0x250 [ 358.778640] Node 0 active_anon:20776kB inactive_anon:780kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 358.782076] ? ion_system_heap_free+0x270/0x270 [ 358.782085] ion_alloc+0x27f/0x770 [ 358.782094] ? ion_dma_buf_release+0x40/0x40 [ 358.782105] ? kasan_check_write+0x14/0x20 [ 358.782111] ion_ioctl+0xe2/0x1b6 [ 358.782116] ? ion_alloc.cold.15+0x32/0x32 [ 358.782129] do_vfs_ioctl+0x180/0xfb0 [ 358.782136] ? __fget+0x1ad/0x2f0 [ 358.782143] ? ioctl_preallocate+0x1a0/0x1a0 [ 358.782151] ? __fget+0x1ca/0x2f0 [ 358.789615] 3*1024kB [ 358.789991] ? security_file_ioctl+0x6a/0xa0 [ 358.794483] (UME) [ 358.798804] ? SyS_clock_settime+0x1a0/0x1a0 [ 358.806323] Node 1 active_anon:208kB inactive_anon:4kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 358.806548] ? security_file_ioctl+0x6a/0xa0 [ 358.810559] Node 0 [ 358.814382] SyS_ioctl+0x74/0x80 [ 358.819287] DMA free:10340kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 358.821595] ? do_vfs_ioctl+0xfb0/0xfb0 [ 358.821605] do_syscall_64+0x1c7/0x5b0 [ 358.821610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.821622] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 358.821627] RIP: 0033:0x45af49 [ 358.821630] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.821636] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 358.821638] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 358.821640] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 358.821643] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 358.821646] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 358.834699] 0 [ 358.842276] 2*2048kB [ 358.857358] 0 [ 358.864376] (UE) [ 358.879020] 0 [ 358.882396] lowmem_reserve[]: [ 358.883367] 0 [ 358.897230] 0*4096kB [ 358.907360] 0 [ 358.909172] 0 [ 358.919598] 2570 [ 358.919964] Node 0 [ 358.926475] = 10340kB [ 358.936134] DMA: [ 358.939718] 2570 [ 358.975230] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 358.980585] Node 0 [ 358.985786] 3*4kB [ 359.002224] DMA32: [ 359.182501] (M) [ 359.190221] 2570 [ 359.226609] 3*8kB [ 359.234095] 2570 [ 359.303110] Node 0 DMA32 free:105280kB min:36384kB low:45480kB high:54576kB active_anon:20788kB inactive_anon:780kB active_file:60kB inactive_file:2236kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:6880kB pagetables:1584kB bounce:0kB free_pcp:528kB local_pcp:276kB free_cma:0kB [ 359.303506] (M) [ 359.340624] lowmem_reserve[]: 0 0 0 0 0 [ 359.346831] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.417993] 20*16kB (UME) 20*32kB (UM) 10*64kB (UME) 4*128kB (ME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10340kB [ 359.419854] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 359.450099] lowmem_reserve[]: 0 0 0 0 0 [ 359.454128] Node 1 Normal free:411068kB min:53504kB low:66880kB high:80256kB active_anon:168kB inactive_anon:4kB active_file:4kB inactive_file:660kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:256kB pagetables:88kB bounce:0kB free_pcp:456kB local_pcp:144kB free_cma:0kB [ 359.460077] Node 0 [ 359.534104] lowmem_reserve[]: 0 0 0 0 0 [ 359.543115] DMA32: 436*4kB (UME) 176*8kB (UE) 19*16kB (UME) 8*32kB (UE) 1622*64kB (U) 405*128kB (UM) 53*256kB (UM) 17*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 181632kB [ 359.550381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.564679] Node 0 DMA: 3*4kB (M) 3*8kB (M) 20*16kB (UME) 20*32kB (UM) 15*64kB (UME) 5*128kB (UME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10788kB [ 359.600081] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 359.602536] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 359.617584] Node 0 DMA32: 932*4kB (UME) 247*8kB (UME) 54*16kB (UME) 368*32kB (UE) 1681*64kB (UM) 408*128kB (UM) 54*256kB (UM) 17*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 200680kB [ 359.643109] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 359.649303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.650060] Node 1 Normal: 515*4kB (UM) 231*8kB (UM) 580*16kB (U) 589*32kB (UM) 3590*64kB (UM) 979*128kB (U) 337*256kB (U) 78*512kB (U) 46*1024kB (U) 4*2048kB (U) 1*4096kB (U) = 572708kB [ 359.660629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.690908] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 359.710207] Node 1 Normal: 704*4kB (UM) 422*8kB (UM) 765*16kB (U) 772*32kB (UM) 3801*64kB (UM) 1063*128kB (U) 342*256kB (U) 78*512kB (U) 46*1024kB (U) 4*2048kB (U) 1*4096kB (U) = 609344kB [ 359.731620] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 359.737712] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.740070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 359.763263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 359.770344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 359.779185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 359.783479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 359.787982] 1028*4kB [ 359.800220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.820272] (UME) 405*8kB (UME) 89*16kB (UME) 717*32kB (UE) 1838*64kB (UM) 445*128kB (UM) 61*256kB (UM) 17*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 230632kB [ 359.823721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 359.834968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.870187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 359.879069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 359.890123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 359.891425] Node 0 [ 359.898726] 992 total pagecache pages [ 359.898727] Normal: 0*4kB [ 359.912140] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.921386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.930122] 0 pages in swap cache [ 359.933618] Swap cache stats: add 0, delete 0, find 0/0 [ 359.938973] Free swap = 0kB [ 359.941209] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 359.953777] 992 total pagecache pages [ 359.957683] 0 pages in swap cache [ 359.960095] Total swap = 0kB [ 359.964144] 1965979 pages RAM [ 359.967239] 0 pages HighMem/MovableOnly [ 359.972448] Swap cache stats: add 0, delete 0, find 0/0 [ 359.977817] Free swap = 0kB [ 359.984788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 359.990090] 335868 pages reserved [ 359.994921] Node 1 Normal: 5954*4kB (UM) 2991*8kB (UM) 2306*16kB (U) 1329*32kB (UM) [ 359.995204] 0 pages cma reserved [ 359.995210] Out of memory: Kill process 7217 (syz-execprog) score 1 or sacrifice child [ 360.012780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 360.023633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 360.033807] Total swap = 0kB [ 360.036843] 1965979 pages RAM [ 360.039939] 0 pages HighMem/MovableOnly [ 360.050174] Killed process 8046 (syz-executor.2) total-vm:37644kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 360.064142] 3963*64kB (UM) 1317*128kB (U) 414*256kB (U) 78*512kB (U) 59*1024kB (U) 5*2048kB (U) 1*4096kB (U) = 770048kB [ 360.081075] oom_reaper: reaped process 8046 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 360.090111] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 360.094093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 360.120121] 335868 pages reserved [ 360.123621] 0 pages cma reserved [ 360.130198] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 360.133570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.136764] CPU: 1 PID: 8057 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 360.152231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.161593] Call Trace: [ 360.164181] dump_stack+0xf7/0x13b [ 360.167755] warn_alloc.cold.110+0xa2/0x1be [ 360.172096] ? zone_watermark_ok_safe+0x260/0x260 [ 360.174174] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.176946] ? wake_up_q+0x9c/0xe0 [ 360.176957] ? __mutex_unlock_slowpath+0x29b/0x7e0 [ 360.176970] __alloc_pages_slowpath+0x2052/0x2650 [ 360.176985] ? warn_alloc+0x100/0x100 [ 360.176991] ? get_page_from_freelist+0x1046/0x23b0 [ 360.177003] ? __might_sleep+0x93/0xb0 [ 360.177010] __alloc_pages_nodemask+0x60d/0x770 [ 360.177018] ? trace_hardirqs_off+0x10/0x10 [ 360.177021] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 360.177026] ? __alloc_pages_slowpath+0x2650/0x2650 [ 360.177033] ? wait_for_completion+0x440/0x440 [ 360.177043] alloc_pages_current+0xd6/0x1b0 [ 360.177053] ion_page_pool_alloc+0x102/0x180 [ 360.184248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.187730] ion_system_heap_allocate+0x14e/0x930 [ 360.196794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 360.197520] ? do_raw_spin_unlock+0x16a/0x250 [ 360.213581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.215099] ? ion_system_heap_free+0x270/0x270 [ 360.215108] ion_alloc+0x27f/0x770 [ 360.215117] ? ion_dma_buf_release+0x40/0x40 [ 360.215128] ? kasan_check_write+0x14/0x20 [ 360.215134] ion_ioctl+0xe2/0x1b6 [ 360.215139] ? ion_alloc.cold.15+0x32/0x32 [ 360.215151] do_vfs_ioctl+0x180/0xfb0 [ 360.215158] ? __fget+0x1ad/0x2f0 [ 360.215164] ? ioctl_preallocate+0x1a0/0x1a0 [ 360.215173] ? __fget+0x1ca/0x2f0 [ 360.215184] ? security_file_ioctl+0x6a/0xa0 [ 360.215189] ? SyS_clock_settime+0x1a0/0x1a0 [ 360.215193] ? security_file_ioctl+0x6a/0xa0 [ 360.215199] SyS_ioctl+0x74/0x80 [ 360.215205] ? do_vfs_ioctl+0xfb0/0xfb0 [ 360.220120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 360.224373] do_syscall_64+0x1c7/0x5b0 [ 360.229381] 1194 total pagecache pages [ 360.233955] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.233969] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 360.233974] RIP: 0033:0x45af49 [ 360.233977] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.233982] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 360.233985] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 360.233988] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 360.233990] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 360.233993] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 360.310121] warn_alloc_show_mem: 4 callbacks suppressed [ 360.310124] Mem-Info: 2020/03/09 03:21:10 executed programs: 110 [ 360.433966] active_anon:5235 inactive_anon:194 isolated_anon:0 [ 360.433966] active_file:141 inactive_file:1675 isolated_file:0 [ 360.433966] unevictable:0 dirty:0 writeback:0 unstable:0 [ 360.433966] slab_reclaimable:12958 slab_unreclaimable:99192 [ 360.433966] mapped:1113 shmem:250 pagetables:420 bounce:0 [ 360.433966] free:303139 free_pcp:600 free_cma:0 [ 360.544069] Node 0 active_anon:20948kB inactive_anon:772kB active_file:2160kB inactive_file:6840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5256kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 360.580214] 0 pages in swap cache [ 360.583713] Swap cache stats: add 0, delete 0, find 0/0 [ 360.589105] Free swap = 0kB [ 360.636390] Node 1 active_anon:92kB inactive_anon:4kB active_file:4kB inactive_file:660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:496kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 360.640239] Total swap = 0kB 2020/03/09 03:21:10 result: hanged=false err=executor 2: EOF 2020/03/09 03:21:10 result: hanged=false err=executor 5: EOF [ 360.752781] 1965979 pages RAM [ 360.767595] Node 0 DMA free:11016kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.772955] 0 pages HighMem/MovableOnly [ 360.868785] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 360.886178] Node 0 DMA32 free:455876kB min:36384kB low:45480kB high:54576kB active_anon:21136kB inactive_anon:772kB active_file:3260kB inactive_file:7056kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7072kB pagetables:1636kB bounce:0kB free_pcp:1312kB local_pcp:568kB free_cma:0kB [ 360.897215] 335868 pages reserved [ 360.976059] 0 pages cma reserved [ 360.996230] lowmem_reserve[]: 0 0 0 0 0 [ 361.013825] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.103459] lowmem_reserve[]: 0 0 0 0 0 [ 361.117653] Node 1 Normal free:1061088kB min:53504kB low:66880kB high:80256kB active_anon:68kB inactive_anon:4kB active_file:172kB inactive_file:464kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:1216kB local_pcp:736kB free_cma:0kB [ 361.220956] lowmem_reserve[]: 0 0 0 0 0 [ 361.237893] Node 0 DMA: 4*4kB (UM) 15*8kB (UM) 20*16kB (UME) 20*32kB (UM) 10*64kB (UME) 5*128kB (UME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10568kB [ 361.304106] Node 0 DMA32: 423*4kB (E) 1163*8kB (UE) 4545*16kB (UE) 1392*32kB (UE) 40*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 130820kB [ 361.359316] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 361.415893] Node 1 Normal: 6180*4kB (UM) 2948*8kB (UM) 2313*16kB (U) 1573*32kB (UM) 3009*64kB (UM) 1944*128kB (U) 702*256kB (U) 186*512kB (U) 10*1024kB (U) 3*2048kB (U) 0*4096kB = 868384kB [ 361.522952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.579467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 361.636023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.673267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 361.728844] 3096 total pagecache pages [ 361.749301] 0 pages in swap cache [ 361.767197] Swap cache stats: add 0, delete 0, find 0/0 [ 361.795746] Free swap = 0kB [ 361.812080] Total swap = 0kB [ 361.828443] 1965979 pages RAM [ 361.844871] 0 pages HighMem/MovableOnly [ 361.865484] 335868 pages reserved [ 361.883400] 0 pages cma reserved [ 362.018082] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 362.018498] syz-executor.1: [ 362.030885] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 362.066952] warn_alloc: 1 callbacks suppressed [ 362.066956] syz-executor.0: [ 362.079342] page allocation failure: order:4 [ 362.081825] syz-executor.4: [ 362.086901] syz-executor.4 cpuset= [ 362.089991] page allocation failure: order:4 [ 362.097140] syz-executor.0 cpuset= [ 362.099002] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 362.101665] syz4 [ 362.112573] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 362.116813] page allocation failure: order:4 [ 362.119512] (null) [ 362.126231] syz0 [ 362.132563] (null) [ 362.135097] mems_allowed=0-1 [ 362.140969] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 362.149959] CPU: 0 PID: 8111 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 362.153030] syz-executor.0 cpuset= [ 362.157750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.157753] Call Trace: [ 362.157773] dump_stack+0xf7/0x13b [ 362.157785] warn_alloc.cold.110+0xa2/0x1be [ 362.171331] syz-executor.1 cpuset= [ 362.173682] ? zone_watermark_ok_safe+0x260/0x260 [ 362.173697] ? __alloc_pages_direct_compact+0xc2/0x330 [ 362.177259] syz1 [ 362.184313] __alloc_pages_slowpath+0x2052/0x2650 [ 362.203334] syz0 [ 362.204743] ? trace_hardirqs_off+0x10/0x10 [ 362.210218] mems_allowed=0-1 [ 362.211033] ? warn_alloc+0x100/0x100 [ 362.217955] ? get_page_from_freelist+0x1046/0x23b0 [ 362.223004] ? __might_sleep+0x93/0xb0 [ 362.226914] __alloc_pages_nodemask+0x60d/0x770 [ 362.231614] ? __alloc_pages_slowpath+0x2650/0x2650 [ 362.232710] mems_allowed=0-1 [ 362.236629] ? wait_for_completion+0x440/0x440 [ 362.236641] alloc_pages_current+0xd6/0x1b0 [ 362.236652] ion_page_pool_alloc+0x102/0x180 [ 362.253110] ion_system_heap_allocate+0x14e/0x930 [ 362.257949] ? ion_system_heap_free+0x270/0x270 [ 362.262619] ion_alloc+0x216/0x770 [ 362.266156] ? ion_dma_buf_release+0x40/0x40 [ 362.270594] ? kasan_check_write+0x14/0x20 [ 362.274832] ion_ioctl+0xe2/0x1b6 [ 362.278287] ? ion_alloc.cold.15+0x32/0x32 [ 362.282526] do_vfs_ioctl+0x180/0xfb0 [ 362.286328] ? __fget+0x1ad/0x2f0 [ 362.289775] ? ioctl_preallocate+0x1a0/0x1a0 [ 362.294200] ? __fget+0x1ca/0x2f0 [ 362.297669] ? security_file_ioctl+0x6a/0xa0 [ 362.302083] ? SyS_clock_settime+0x1a0/0x1a0 [ 362.306496] ? security_file_ioctl+0x6a/0xa0 [ 362.310907] SyS_ioctl+0x74/0x80 [ 362.314310] ? do_vfs_ioctl+0xfb0/0xfb0 [ 362.318297] do_syscall_64+0x1c7/0x5b0 [ 362.322326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.327192] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 362.332392] RIP: 0033:0x45af49 [ 362.335577] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.343282] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 362.350554] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 362.357821] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 362.368663] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 362.376216] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 362.383504] CPU: 1 PID: 8112 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 362.384912] mems_allowed=0-1 [ 362.391416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.391420] Call Trace: [ 362.391435] dump_stack+0xf7/0x13b [ 362.391446] warn_alloc.cold.110+0xa2/0x1be [ 362.391452] ? zone_watermark_ok_safe+0x260/0x260 [ 362.391464] ? __alloc_pages_direct_compact+0xc2/0x330 [ 362.391471] __alloc_pages_slowpath+0x2052/0x2650 [ 362.391485] ? trace_hardirqs_off+0x10/0x10 [ 362.391492] ? warn_alloc+0x100/0x100 [ 362.405017] syz-executor.4 cpuset= [ 362.406624] ? get_page_from_freelist+0x1046/0x23b0 [ 362.406640] ? __might_sleep+0x93/0xb0 [ 362.421245] syz4 [ 362.424713] __alloc_pages_nodemask+0x60d/0x770 [ 362.447647] mems_allowed=0-1 [ 362.450746] ? __alloc_pages_slowpath+0x2650/0x2650 [ 362.450759] ? wait_for_completion+0x440/0x440 [ 362.450773] alloc_pages_current+0xd6/0x1b0 [ 362.450794] ion_page_pool_alloc+0x102/0x180 [ 362.450800] ion_system_heap_allocate+0x14e/0x930 [ 362.450808] ? ion_system_heap_free+0x270/0x270 [ 362.450819] ion_alloc+0x216/0x770 [ 362.450828] ? ion_dma_buf_release+0x40/0x40 [ 362.450839] ? kasan_check_write+0x14/0x20 [ 362.450846] ion_ioctl+0xe2/0x1b6 [ 362.450851] ? ion_alloc.cold.15+0x32/0x32 [ 362.450874] do_vfs_ioctl+0x180/0xfb0 [ 362.512822] ? __fget+0x1ad/0x2f0 [ 362.516300] ? ioctl_preallocate+0x1a0/0x1a0 [ 362.520718] ? __fget+0x1ca/0x2f0 [ 362.524190] ? security_file_ioctl+0x6a/0xa0 [ 362.528612] ? SyS_clock_settime+0x1a0/0x1a0 [ 362.533025] ? security_file_ioctl+0x6a/0xa0 [ 362.537442] SyS_ioctl+0x74/0x80 [ 362.540802] ? do_vfs_ioctl+0xfb0/0xfb0 [ 362.544817] do_syscall_64+0x1c7/0x5b0 [ 362.548715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.553613] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 362.560918] RIP: 0033:0x45af49 [ 362.565141] RSP: 002b:00007fb6d4db8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.572959] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 362.580361] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 362.587643] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 362.594930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6d4db96d4 [ 362.602238] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 362.609544] CPU: 0 PID: 8104 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 362.617362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.626746] Call Trace: [ 362.629353] dump_stack+0xf7/0x13b [ 362.633039] warn_alloc.cold.110+0xa2/0x1be [ 362.637368] ? zone_watermark_ok_safe+0x260/0x260 [ 362.642411] ? __alloc_pages_direct_compact+0xc2/0x330 [ 362.647705] __alloc_pages_slowpath+0x2052/0x2650 [ 362.652569] ? trace_hardirqs_off+0x10/0x10 [ 362.656905] ? warn_alloc+0x100/0x100 [ 362.660715] ? get_page_from_freelist+0x1046/0x23b0 [ 362.665770] ? __might_sleep+0x93/0xb0 [ 362.669659] __alloc_pages_nodemask+0x60d/0x770 [ 362.674335] ? __alloc_pages_slowpath+0x2650/0x2650 [ 362.679349] ? wait_for_completion+0x440/0x440 [ 362.683951] alloc_pages_current+0xd6/0x1b0 [ 362.688298] ion_page_pool_alloc+0x102/0x180 [ 362.692723] ion_system_heap_allocate+0x14e/0x930 [ 362.697573] ? ion_system_heap_free+0x270/0x270 [ 362.702254] ion_alloc+0x216/0x770 [ 362.705797] ? ion_dma_buf_release+0x40/0x40 [ 362.710213] ? kasan_check_write+0x14/0x20 [ 362.714448] ion_ioctl+0xe2/0x1b6 [ 362.717900] ? ion_alloc.cold.15+0x32/0x32 [ 362.722160] do_vfs_ioctl+0x180/0xfb0 [ 362.726094] ? __fget+0x1ad/0x2f0 [ 362.729576] ? ioctl_preallocate+0x1a0/0x1a0 [ 362.734014] ? __fget+0x1ca/0x2f0 [ 362.737483] ? security_file_ioctl+0x6a/0xa0 [ 362.741900] ? SyS_clock_settime+0x1a0/0x1a0 [ 362.746329] ? security_file_ioctl+0x6a/0xa0 [ 362.750767] SyS_ioctl+0x74/0x80 [ 362.754150] ? do_vfs_ioctl+0xfb0/0xfb0 [ 362.758139] do_syscall_64+0x1c7/0x5b0 [ 362.762034] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.766891] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 362.772090] RIP: 0033:0x45af49 [ 362.775278] RSP: 002b:00007ffa6e582c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.783090] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 362.790456] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 362.797738] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 362.805021] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5836d4 [ 362.812308] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 362.819610] CPU: 1 PID: 8100 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 362.827424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.836784] Call Trace: [ 362.839369] dump_stack+0xf7/0x13b [ 362.842918] warn_alloc.cold.110+0xa2/0x1be [ 362.847246] ? zone_watermark_ok_safe+0x260/0x260 [ 362.852101] ? __alloc_pages_direct_compact+0xc2/0x330 [ 362.857519] __alloc_pages_slowpath+0x2052/0x2650 [ 362.862396] ? trace_hardirqs_off+0x10/0x10 [ 362.866748] ? warn_alloc+0x100/0x100 [ 362.870662] ? get_page_from_freelist+0x1046/0x23b0 [ 362.875711] ? __might_sleep+0x93/0xb0 [ 362.879608] __alloc_pages_nodemask+0x60d/0x770 [ 362.884297] ? __alloc_pages_slowpath+0x2650/0x2650 [ 362.889328] ? wait_for_completion+0x440/0x440 [ 362.893935] alloc_pages_current+0xd6/0x1b0 [ 362.898280] ion_page_pool_alloc+0x102/0x180 [ 362.902724] ion_system_heap_allocate+0x14e/0x930 [ 362.907568] ? ion_system_heap_free+0x270/0x270 [ 362.912234] ion_alloc+0x216/0x770 [ 362.915765] ? ion_dma_buf_release+0x40/0x40 [ 362.920172] ? kasan_check_write+0x14/0x20 [ 362.924404] ion_ioctl+0xe2/0x1b6 [ 362.927853] ? ion_alloc.cold.15+0x32/0x32 [ 362.932123] do_vfs_ioctl+0x180/0xfb0 [ 362.935930] ? __fget+0x1ad/0x2f0 [ 362.939377] ? ioctl_preallocate+0x1a0/0x1a0 [ 362.943783] ? __fget+0x1ca/0x2f0 [ 362.947252] ? security_file_ioctl+0x6a/0xa0 [ 362.951650] ? SyS_clock_settime+0x1a0/0x1a0 [ 362.956053] ? security_file_ioctl+0x6a/0xa0 [ 362.960457] SyS_ioctl+0x74/0x80 [ 362.963832] ? do_vfs_ioctl+0xfb0/0xfb0 [ 362.967807] do_syscall_64+0x1c7/0x5b0 [ 362.971693] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.976546] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 362.981739] RIP: 0033:0x45af49 [ 362.984922] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.992720] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 362.999991] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 363.007283] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 363.014561] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 363.021824] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 363.029117] CPU: 0 PID: 8114 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 363.037054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.046432] Call Trace: [ 363.049078] dump_stack+0xf7/0x13b [ 363.052655] warn_alloc.cold.110+0xa2/0x1be [ 363.057009] ? zone_watermark_ok_safe+0x260/0x260 [ 363.061883] ? __alloc_pages_direct_compact+0xc2/0x330 [ 363.067188] __alloc_pages_slowpath+0x2052/0x2650 [ 363.072055] ? trace_hardirqs_off+0x10/0x10 [ 363.076402] ? warn_alloc+0x100/0x100 [ 363.080211] ? get_page_from_freelist+0x1046/0x23b0 [ 363.085253] ? __might_sleep+0x93/0xb0 [ 363.089156] __alloc_pages_nodemask+0x60d/0x770 [ 363.093830] ? __alloc_pages_slowpath+0x2650/0x2650 [ 363.098854] ? wait_for_completion+0x440/0x440 [ 363.103451] alloc_pages_current+0xd6/0x1b0 [ 363.107784] ion_page_pool_alloc+0x102/0x180 [ 363.112206] ion_system_heap_allocate+0x14e/0x930 [ 363.117055] ? ion_system_heap_free+0x270/0x270 [ 363.121741] ion_alloc+0x216/0x770 [ 363.125295] ? ion_dma_buf_release+0x40/0x40 [ 363.129707] ? kasan_check_write+0x14/0x20 [ 363.133950] ion_ioctl+0xe2/0x1b6 [ 363.137400] ? ion_alloc.cold.15+0x32/0x32 [ 363.141643] do_vfs_ioctl+0x180/0xfb0 [ 363.145450] ? __fget+0x1ad/0x2f0 [ 363.148905] ? ioctl_preallocate+0x1a0/0x1a0 [ 363.153317] ? __fget+0x1ca/0x2f0 [ 363.156783] ? security_file_ioctl+0x6a/0xa0 [ 363.161200] ? SyS_clock_settime+0x1a0/0x1a0 [ 363.165703] ? security_file_ioctl+0x6a/0xa0 [ 363.170117] SyS_ioctl+0x74/0x80 [ 363.173491] ? do_vfs_ioctl+0xfb0/0xfb0 [ 363.177502] do_syscall_64+0x1c7/0x5b0 [ 363.181520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.186495] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 363.191693] RIP: 0033:0x45af49 [ 363.194879] RSP: 002b:00007ffa6e540c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.202623] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 363.209903] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 363.217178] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 363.224499] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5416d4 [ 363.231933] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 363.248506] warn_alloc_show_mem: 1 callbacks suppressed [ 363.248510] Mem-Info: [ 363.256494] active_anon:5392 inactive_anon:196 isolated_anon:0 [ 363.256494] active_file:908 inactive_file:1933 isolated_file:0 [ 363.256494] unevictable:0 dirty:34 writeback:0 unstable:0 [ 363.256494] slab_reclaimable:12941 slab_unreclaimable:99212 [ 363.256494] mapped:1790 shmem:250 pagetables:424 bounce:0 [ 363.256494] free:159612 free_pcp:115 free_cma:0 [ 363.293481] Node 0 active_anon:21448kB inactive_anon:780kB active_file:3424kB inactive_file:7268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6628kB dirty:128kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 363.350111] Node 1 active_anon:120kB inactive_anon:4kB active_file:208kB inactive_file:464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:532kB dirty:8kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 363.487867] Node 0 DMA free:10540kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.576017] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 363.593900] Node 0 DMA32 free:45460kB min:36384kB low:45480kB high:54576kB active_anon:21436kB inactive_anon:780kB active_file:3424kB inactive_file:7268kB unevictable:0kB writepending:128kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7104kB pagetables:1652kB bounce:0kB free_pcp:364kB local_pcp:244kB free_cma:0kB [ 363.680119] lowmem_reserve[]: 0 0 0 0 0 [ 363.684155] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.810105] lowmem_reserve[]: 0 0 0 0 0 [ 363.814179] Node 1 Normal free:297868kB min:53504kB low:66880kB high:80256kB active_anon:120kB inactive_anon:4kB active_file:208kB inactive_file:464kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:156kB local_pcp:8kB free_cma:0kB [ 363.980130] lowmem_reserve[]: 0 0 0 0 0 [ 363.984288] Node 0 DMA: 3*4kB (M) 4*8kB (UM) 5*16kB (UME) 10*32kB (UM) 16*64kB (UME) 7*128kB (UME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10556kB [ 364.050122] Node 0 DMA32: 424*4kB (ME) 103*8kB (UME) 6*16kB (E) 5*32kB (UME) 5*64kB (ME) 2*128kB (M) 128*256kB (U) 15*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 43800kB [ 364.087953] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 364.098828] Node 1 Normal: 1*4kB (U) 0*8kB 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (U) 126*256kB (U) 24*512kB (UM) 8*1024kB (U) 0*2048kB 0*4096kB = 53092kB [ 364.121206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.130473] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 364.147183] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 364.152325] CPU: 0 PID: 6992 Comm: rs:main Q:Reg Not tainted 4.14.172-syzkaller #0 [ 364.160034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.169382] Call Trace: [ 364.171968] dump_stack+0xf7/0x13b [ 364.175509] dump_header+0x160/0x63f [ 364.179349] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 364.184467] ? ___ratelimit+0x243/0x519 [ 364.188443] ? do_raw_spin_unlock+0x16a/0x250 [ 364.192951] oom_kill_process.cold.24+0xb/0xa1a [ 364.197612] ? out_of_memory+0x7f9/0x1030 [ 364.201755] ? lock_downgrade+0x7f0/0x7f0 [ 364.205897] out_of_memory+0x2b0/0x1030 [ 364.209859] ? oom_killer_disable+0x1a0/0x1a0 [ 364.214341] ? __alloc_pages_slowpath+0xb69/0x2650 [ 364.219256] __alloc_pages_slowpath+0x1ef3/0x2650 [ 364.224094] ? warn_alloc+0x100/0x100 [ 364.227879] ? get_page_from_freelist+0x1046/0x23b0 [ 364.232972] ? __might_sleep+0x93/0xb0 [ 364.236843] __alloc_pages_nodemask+0x60d/0x770 [ 364.241514] ? __alloc_pages_slowpath+0x2650/0x2650 [ 364.246523] ? find_get_entry+0xd7/0x5a0 [ 364.251361] ? lock_downgrade+0x7f0/0x7f0 [ 364.255500] alloc_pages_current+0xd6/0x1b0 [ 364.260006] __page_cache_alloc+0x1da/0x330 [ 364.264319] pagecache_get_page+0x129/0x7c0 [ 364.268634] grab_cache_page_write_begin+0x55/0x90 [ 364.273552] ? rcu_read_lock_sched_held+0x108/0x120 [ 364.278566] ext4_da_write_begin+0x243/0xd30 [ 364.282967] ? ext4_write_begin+0x10e0/0x10e0 [ 364.287448] generic_perform_write+0x271/0x450 [ 364.292019] ? __mark_inode_dirty+0xbf5/0xe80 [ 364.296506] ? page_endio+0x410/0x410 [ 364.300290] ? file_update_time+0x22d/0x360 [ 364.304603] ? current_time+0xa0/0xa0 [ 364.308395] ? lock_acquire+0x173/0x400 [ 364.312613] ? ext4_file_write_iter+0x1db/0xe40 [ 364.317274] __generic_file_write_iter+0x201/0x580 [ 364.322196] ext4_file_write_iter+0x27a/0xe40 [ 364.326696] ? trace_hardirqs_off+0x10/0x10 [ 364.331006] ? ext4_file_mmap+0x260/0x260 [ 364.335146] ? trace_hardirqs_on+0x10/0x10 [ 364.340682] ? trace_hardirqs_off+0x10/0x10 [ 364.344993] __vfs_write+0x413/0x840 [ 364.348699] ? trace_hardirqs_off+0x10/0x10 [ 364.353008] ? kernel_read+0x130/0x130 [ 364.356891] ? __lock_is_held+0xb5/0x140 [ 364.360950] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 364.365692] ? __sb_start_write+0x1f3/0x2a0 [ 364.370012] vfs_write+0x150/0x4f0 [ 364.373541] SyS_write+0x100/0x250 [ 364.377090] ? SyS_read+0x250/0x250 [ 364.380706] ? do_syscall_64+0x4c/0x5b0 [ 364.384663] ? SyS_read+0x250/0x250 [ 364.388331] do_syscall_64+0x1c7/0x5b0 [ 364.392227] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.397072] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 364.402272] RIP: 0033:0x7f79068fd19d [ 364.407362] RSP: 002b:00007f7904e9e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 364.415076] RAX: ffffffffffffffda RBX: 000000000000015f RCX: 00007f79068fd19d [ 364.422333] RDX: 000000000000015f RSI: 00000000020baa90 RDI: 0000000000000005 [ 364.429587] RBP: 00000000020baa90 R08: 2a3820294d552820 R09: 2820426b34323031 [ 364.436858] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 364.444117] R13: 00007f7904e9e480 R14: 0000000000000002 R15: 00000000020ba890 [ 364.456842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 364.461549] IPVS: ftp: loaded support on port[0] = 21 [ 364.465506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.485280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 364.496144] 2086 total pagecache pages [ 364.504044] 0 pages in swap cache [ 364.507516] Swap cache stats: add 0, delete 0, find 0/0 [ 364.514725] Free swap = 0kB [ 364.517753] Total swap = 0kB [ 364.526794] 1965979 pages RAM [ 364.529925] 0 pages HighMem/MovableOnly [ 364.536223] 335868 pages reserved [ 364.539736] 0 pages cma reserved [ 364.555296] Mem-Info: [ 364.557747] active_anon:5357 inactive_anon:196 isolated_anon:0 [ 364.557747] active_file:104 inactive_file:85 isolated_file:0 [ 364.557747] unevictable:0 dirty:0 writeback:0 unstable:0 [ 364.557747] slab_reclaimable:12936 slab_unreclaimable:99273 [ 364.557747] mapped:140 shmem:250 pagetables:426 bounce:0 [ 364.557747] free:15524 free_pcp:57 free_cma:0 [ 364.600838] Node 0 active_anon:21276kB inactive_anon:780kB active_file:0kB inactive_file:152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 364.633900] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 364.635797] Node 1 active_anon:152kB inactive_anon:4kB active_file:124kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 364.647704] syz-executor.3 cpuset= [ 364.674382] Node 0 DMA free:10376kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.681949] syz3 [ 364.706095] lowmem_reserve[]: 0 2570 2570 2570 2570 [ 364.713190] Node 0 DMA32 free:18060kB min:36384kB low:45480kB high:54576kB active_anon:21264kB inactive_anon:780kB active_file:216kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7104kB pagetables:1652kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.732126] mems_allowed=0-1 [ 364.745062] lowmem_reserve[]: 0 0 0 0 0 [ 364.749059] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.756813] CPU: 1 PID: 8068 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 364.778267] lowmem_reserve[]: [ 364.782658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.782663] Call Trace: [ 364.782683] dump_stack+0xf7/0x13b [ 364.782695] warn_alloc.cold.110+0xa2/0x1be [ 364.782699] ? zone_watermark_ok_safe+0x260/0x260 [ 364.782706] ? usleep_range+0x120/0x120 [ 364.782715] ? rcu_read_lock_sched_held+0x108/0x120 [ 364.782721] ? call_timer_fn+0x570/0x570 [ 364.782732] __alloc_pages_slowpath+0x2052/0x2650 [ 364.782746] ? warn_alloc+0x100/0x100 [ 364.782752] ? get_page_from_freelist+0x1046/0x23b0 [ 364.782766] ? __might_sleep+0x93/0xb0 [ 364.785852] 0 [ 364.795320] __alloc_pages_nodemask+0x60d/0x770 [ 364.795330] ? __alloc_pages_slowpath+0x2650/0x2650 [ 364.795346] ? wait_for_completion+0x440/0x440 [ 364.795356] alloc_pages_current+0xd6/0x1b0 [ 364.795365] ion_page_pool_alloc+0x102/0x180 [ 364.795371] ion_system_heap_allocate+0x14e/0x930 [ 364.795378] ? do_raw_spin_unlock+0x16a/0x250 [ 364.795384] ? ion_system_heap_free+0x270/0x270 [ 364.795393] ion_alloc+0x27f/0x770 [ 364.795403] ? ion_dma_buf_release+0x40/0x40 [ 364.795414] ? kasan_check_write+0x14/0x20 [ 364.795420] ion_ioctl+0xe2/0x1b6 [ 364.795425] ? ion_alloc.cold.15+0x32/0x32 [ 364.795437] do_vfs_ioctl+0x180/0xfb0 [ 364.795447] ? __fget+0x1ad/0x2f0 [ 364.801140] 0 [ 364.801566] ? ioctl_preallocate+0x1a0/0x1a0 [ 364.805863] 0 [ 364.810695] ? __fget+0x1ca/0x2f0 [ 364.810707] ? security_file_ioctl+0x6a/0xa0 [ 364.810712] ? SyS_clock_settime+0x1a0/0x1a0 [ 364.810715] ? security_file_ioctl+0x6a/0xa0 [ 364.810722] SyS_ioctl+0x74/0x80 [ 364.810729] ? do_vfs_ioctl+0xfb0/0xfb0 [ 364.810735] do_syscall_64+0x1c7/0x5b0 [ 364.810740] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.810751] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 364.810756] RIP: 0033:0x45af49 [ 364.810759] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.810765] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 364.810769] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 364.814723] 0 [ 364.819719] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 364.819722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 364.826777] 0 [ 364.828604] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 364.845031] warn_alloc_show_mem: 4 callbacks suppressed [ 364.845035] Mem-Info: [ 364.862486] active_anon:5357 inactive_anon:196 isolated_anon:0 [ 364.862486] active_file:67 inactive_file:30 isolated_file:0 [ 364.862486] unevictable:0 dirty:0 writeback:0 unstable:0 [ 364.862486] slab_reclaimable:12936 slab_unreclaimable:99273 [ 364.862486] mapped:40 shmem:250 pagetables:426 bounce:0 [ 364.862486] free:13697 free_pcp:0 free_cma:0 [ 364.863300] Node 1 [ 364.866929] Node 0 active_anon:21276kB inactive_anon:780kB active_file:144kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 364.874159] Normal free:26352kB min:53504kB low:66880kB high:80256kB active_anon:152kB inactive_anon:4kB active_file:124kB inactive_file:80kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.890091] Node 1 active_anon:152kB inactive_anon:4kB active_file:124kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 364.893943] lowmem_reserve[]: [ 364.896565] Node 0 [ 364.899273] 0 [ 364.915608] DMA free:10376kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.919500] 0 [ 364.930212] lowmem_reserve[]: [ 364.933385] 0 [ 364.935782] 0 [ 364.939119] 0 [ 364.956501] 2570 [ 364.959485] 0 [ 364.969002] 2570 [ 364.996177] 2570 [ 365.001993] Node 0 [ 365.017231] 2570 [ 365.052380] DMA: [ 365.127827] 4*4kB [ 365.135877] Node 0 [ 365.151516] (UM) [ 365.169125] DMA32 free:18192kB min:36384kB low:45480kB high:54576kB active_anon:21264kB inactive_anon:780kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7104kB pagetables:1652kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 365.183911] 3*8kB [ 365.187031] lowmem_reserve[]: [ 365.188343] (M) [ 365.190423] 0 0 0 0 0 [ 365.190436] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.190447] lowmem_reserve[]: 0 0 0 0 0 [ 365.190463] Node 1 Normal free:26360kB min:53504kB low:66880kB high:80256kB active_anon:152kB inactive_anon:4kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.190473] lowmem_reserve[]: 0 0 0 0 0 [ 365.190487] Node 0 DMA: 4*4kB (UM) [ 365.206309] 4*16kB [ 365.232827] 3*8kB [ 365.245057] (ME) [ 365.268360] (M) [ 365.303045] 5*32kB [ 365.313518] 4*16kB [ 365.315321] (UM) [ 365.315763] (ME) [ 365.317983] 16*64kB [ 365.324850] 5*32kB [ 365.326066] (UME) [ 365.327192] (UM) 16*64kB [ 365.329429] 7*128kB (UME) [ 365.336147] (UME) [ 365.338894] 2*256kB [ 365.339012] 7*128kB [ 365.344909] (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10376kB [ 365.348085] (UME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10376kB [ 365.359862] Node 0 [ 365.376765] Node 0 [ 365.379029] DMA32: 520*4kB [ 365.381300] DMA32: 520*4kB (ME) 164*8kB (UME) 38*16kB (UME) 19*32kB (ME) 21*64kB (ME) 12*128kB (UM) 8*256kB (UM) 17*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18240kB [ 365.385408] (ME) [ 365.407559] Node 0 [ 365.409501] 164*8kB [ 365.409639] Normal: [ 365.411932] (UME) [ 365.414349] 0*4kB [ 365.416667] 38*16kB [ 365.418795] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 365.433081] (UME) [ 365.439413] Node 1 [ 365.439419] 19*32kB [ 365.446332] Normal: 6*4kB (UM) 6*8kB (UM) 3*16kB (UM) 2*32kB (M) 3*64kB (UM) 3*128kB (UM) 20*256kB (U) 24*512kB (UM) 8*1024kB (U) 0*2048kB 0*4096kB = 26360kB [ 365.454820] (ME) 21*64kB (ME) 12*128kB (UM) 8*256kB (UM) 17*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18240kB [ 365.469845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.490604] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 365.494440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 365.509966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.511952] Node 1 Normal: 6*4kB (UM) 6*8kB (UM) 3*16kB (UM) 2*32kB (M) 3*64kB (UM) 3*128kB (UM) 20*256kB (U) 24*512kB (UM) 8*1024kB (U) 0*2048kB 0*4096kB = 26360kB [ 365.524546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 365.544856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.548509] 273 total pagecache pages [ 365.557577] 0 pages in swap cache [ 365.558733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 365.566704] Swap cache stats: add 0, delete 0, find 0/0 [ 365.575084] Free swap = 0kB [ 365.578096] Total swap = 0kB [ 365.579587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.586854] 1965979 pages RAM [ 365.589981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 365.593299] 0 pages HighMem/MovableOnly [ 365.593302] 335868 pages reserved [ 365.593304] 0 pages cma reserved [ 365.670154] 717 total pagecache pages [ 365.674008] 0 pages in swap cache [ 365.677455] Swap cache stats: add 0, delete 0, find 0/0 [ 365.700698] Free swap = 0kB [ 365.703753] Total swap = 0kB [ 365.706791] 1965979 pages RAM [ 365.709889] 0 pages HighMem/MovableOnly [ 365.730138] 335868 pages reserved [ 365.733733] 0 pages cma reserved [ 365.737096] Out of memory: Kill process 8099 (syz-executor.0) score 1000 or sacrifice child [ 365.749822] Killed process 8100 (syz-executor.0) total-vm:38036kB, anon-rss:128kB, file-rss:0kB, shmem-rss:0kB [ 365.800622] oom_reaper: reaped process 8100 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 366.380370] udevd invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000 [ 366.441272] udevd cpuset=/ mems_allowed=0-1 [ 366.445654] CPU: 1 PID: 8115 Comm: udevd Not tainted 4.14.172-syzkaller #0 [ 366.452666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.462039] Call Trace: [ 366.464629] dump_stack+0xf7/0x13b [ 366.468177] dump_header+0x160/0x63f [ 366.471884] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 366.477006] ? ___ratelimit+0x243/0x519 [ 366.480999] ? do_raw_spin_unlock+0x16a/0x250 [ 366.485516] oom_kill_process.cold.24+0xb/0xa1a [ 366.490102] syz-executor.0: [ 366.490198] ? out_of_memory+0x7f9/0x1030 [ 366.490203] page allocation failure: order:0 [ 366.493230] ? lock_downgrade+0x7f0/0x7f0 [ 366.497372] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 366.501772] out_of_memory+0x2b0/0x1030 [ 366.501781] ? oom_killer_disable+0x1a0/0x1a0 [ 366.501788] ? __alloc_pages_slowpath+0xb69/0x2650 [ 366.501794] __alloc_pages_slowpath+0x1ef3/0x2650 [ 366.501808] ? warn_alloc+0x100/0x100 [ 366.501814] ? get_page_from_freelist+0x1046/0x23b0 [ 366.501830] ? __might_sleep+0x93/0xb0 [ 366.501835] __alloc_pages_nodemask+0x60d/0x770 [ 366.501841] ? find_held_lock+0x36/0x1d0 [ 366.501846] ? __alloc_pages_slowpath+0x2650/0x2650 [ 366.501853] ? trace_hardirqs_off+0x10/0x10 [ 366.501857] ? reacquire_held_locks+0xb7/0x3a0 [ 366.501863] ? alloc_set_pte+0xa89/0x11a0 [ 366.501874] alloc_pages_vma+0xad/0x420 [ 366.501881] wp_page_copy+0x1f4/0x1070 [ 366.501888] ? lock_downgrade+0x7f0/0x7f0 [ 366.501895] ? pmd_devmap_trans_unstable+0x130/0x130 [ 366.501898] ? __pte_alloc_kernel+0x1c0/0x1c0 [ 366.501907] ? do_raw_spin_unlock+0x16a/0x250 [ 366.501913] do_wp_page+0x21b/0x1390 [ 366.510295] (null) [ 366.513264] ? finish_mkwrite_fault+0x600/0x600 [ 366.517220] syz-executor.0 cpuset= [ 366.521718] ? add_mm_counter_fast+0xc0/0xc0 [ 366.521727] __handle_mm_fault+0x1b3a/0x3870 [ 366.521734] ? copy_page_range+0x1d10/0x1d10 [ 366.521743] ? find_held_lock+0x36/0x1d0 [ 366.521758] handle_mm_fault+0x234/0x6e0 [ 366.521763] ? find_vma+0xe2/0x150 [ 366.521770] __do_page_fault+0x44d/0xb00 [ 366.521781] ? vmalloc_fault+0xc90/0xc90 [ 366.521790] ? retint_user+0x18/0x18 [ 366.521795] ? page_fault+0x2f/0x50 [ 366.521800] do_page_fault+0x64/0x3fb [ 366.521804] ? page_fault+0x2f/0x50 [ 366.521809] page_fault+0x45/0x50 [ 366.521814] RIP: 0033:0x7f168167ffa1 [ 366.521817] RSP: 002b:00007ffe9b6b7860 EFLAGS: 00010246 [ 366.542809] syz0 [ 366.549121] mems_allowed=0-1 [ 366.553163] RAX: 00007f1682464a60 RBX: 00007f1681891240 RCX: 00007f16818952a0 [ 366.553166] RDX: 00007f1681891240 RSI: 00007f1681891240 RDI: 00007f1681e216c0 [ 366.553169] RBP: 00007f1681891250 R08: 0000000000001d90 R09: 0000000000001d90 [ 366.553171] R10: 00007f1681891240 R11: 00007f16824647a0 R12: 0000000000000000 [ 366.553174] R13: 0000000000000000 R14: 00007f168246f040 R15: 0000000000000005 [ 366.556152] Mem-Info: [ 366.606865] CPU: 0 PID: 8100 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 366.611386] active_anon:5334 inactive_anon:196 isolated_anon:0 [ 366.611386] active_file:49 inactive_file:29 isolated_file:0 [ 366.611386] unevictable:0 dirty:22 writeback:0 unstable:0 [ 366.611386] slab_reclaimable:12941 slab_unreclaimable:99301 [ 366.611386] mapped:46 shmem:250 pagetables:426 bounce:0 [ 366.611386] free:13732 free_pcp:30 free_cma:0 [ 366.611952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.616351] Node 0 active_anon:21184kB inactive_anon:780kB active_file:76kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:88kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 366.620760] Call Trace: [ 366.620777] dump_stack+0xf7/0x13b [ 366.620787] warn_alloc.cold.110+0xa2/0x1be [ 366.620792] ? zone_watermark_ok_safe+0x260/0x260 [ 366.620799] ? usleep_range+0x120/0x120 [ 366.620806] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 366.625213] Node 1 active_anon:152kB inactive_anon:4kB active_file:120kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 366.629258] ? call_timer_fn+0x570/0x570 [ 366.633329] Node 0 [ 366.636917] ? unreserve_highatomic_pageblock+0x315/0x450 [ 366.640985] DMA free:10372kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 366.645019] __alloc_pages_slowpath+0x2052/0x2650 [ 366.648716] lowmem_reserve[]: [ 366.652338] ? warn_alloc+0x100/0x100 [ 366.652345] ? get_page_from_freelist+0x1046/0x23b0 [ 366.652359] ? __might_sleep+0x93/0xb0 [ 366.656151] 0 [ 366.659767] __alloc_pages_nodemask+0x60d/0x770 [ 366.663237] 2570 [ 366.666917] ? retint_kernel+0x2d/0x2d [ 366.672275] 2570 [ 366.674223] ? __alloc_pages_slowpath+0x2650/0x2650 [ 366.677329] 2570 [ 366.684603] ? wait_for_completion+0x440/0x440 [ 366.684615] alloc_pages_current+0xd6/0x1b0 [ 366.684626] ion_page_pool_alloc+0x102/0x180 [ 366.684633] ion_system_heap_allocate+0x14e/0x930 [ 366.691929] 2570 [ 366.699186] ? ion_system_heap_free+0x270/0x270 [ 366.713713] ion_alloc+0x216/0x770 [ 366.713725] ? ion_dma_buf_release+0x40/0x40 [ 366.713736] ? kasan_check_write+0x14/0x20 [ 366.716127] Node 0 [ 366.723909] ion_ioctl+0xe2/0x1b6 [ 366.723916] ? ion_alloc.cold.15+0x32/0x32 [ 366.723928] do_vfs_ioctl+0x180/0xfb0 [ 366.723941] ? __fget+0x1ad/0x2f0 [ 366.756421] DMA32 free:18188kB min:36384kB low:45480kB high:54576kB active_anon:21172kB inactive_anon:780kB active_file:76kB inactive_file:128kB unevictable:0kB writepending:88kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7104kB pagetables:1652kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 366.765734] ? ioctl_preallocate+0x1a0/0x1a0 [ 366.765746] ? __fget+0x1ca/0x2f0 [ 366.765758] ? security_file_ioctl+0x6a/0xa0 [ 366.792584] lowmem_reserve[]: [ 366.795142] ? SyS_clock_settime+0x1a0/0x1a0 [ 366.798655] 0 [ 366.803010] ? security_file_ioctl+0x6a/0xa0 [ 366.803021] SyS_ioctl+0x74/0x80 [ 366.803028] ? do_vfs_ioctl+0xfb0/0xfb0 [ 366.803035] do_syscall_64+0x1c7/0x5b0 [ 366.803041] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 366.807864] 0 [ 366.811854] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 366.811860] RIP: 0033:0x45af49 [ 366.811863] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.811872] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 366.817047] 0 0 [ 366.843238] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 366.843241] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 366.843244] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 366.843246] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 366.881153] syz-executor.0: page allocation failure: order:0 [ 366.894053] 0 [ 366.907821] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 366.943206] (null) [ 366.960073] Node 0 [ 366.986915] syz-executor.0 cpuset= [ 367.014345] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.067369] syz0 [ 367.074810] lowmem_reserve[]: [ 367.107380] mems_allowed=0-1 [ 367.119345] 0 [ 367.152794] CPU: 0 PID: 8111 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 367.162345] 0 [ 367.164251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.166057] 0 0 [ 367.173833] Call Trace: [ 367.173852] dump_stack+0xf7/0x13b [ 367.173862] warn_alloc.cold.110+0xa2/0x1be [ 367.173868] ? zone_watermark_ok_safe+0x260/0x260 [ 367.173874] ? usleep_range+0x120/0x120 [ 367.173881] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 367.175681] Mem-Info: [ 367.185204] ? call_timer_fn+0x570/0x570 [ 367.185213] ? unreserve_highatomic_pageblock+0x315/0x450 [ 367.185222] __alloc_pages_slowpath+0x2052/0x2650 [ 367.185237] ? warn_alloc+0x100/0x100 [ 367.185243] ? get_page_from_freelist+0x1046/0x23b0 [ 367.185257] ? __might_sleep+0x93/0xb0 [ 367.187247] 0 [ 367.189816] __alloc_pages_nodemask+0x60d/0x770 [ 367.197661] ? __alloc_pages_slowpath+0x2650/0x2650 [ 367.202528] active_anon:5344 inactive_anon:194 isolated_anon:0 [ 367.202528] active_file:10 inactive_file:11 isolated_file:0 [ 367.202528] unevictable:0 dirty:0 writeback:0 unstable:0 [ 367.202528] slab_reclaimable:12941 slab_unreclaimable:99342 [ 367.202528] mapped:2 shmem:250 pagetables:430 bounce:0 [ 367.202528] free:13813 free_pcp:38 free_cma:0 [ 367.207578] ? wait_for_completion+0x440/0x440 [ 367.212700] Node 1 [ 367.215062] alloc_pages_current+0xd6/0x1b0 [ 367.219102] Normal free:26248kB min:53504kB low:66880kB high:80256kB active_anon:184kB inactive_anon:4kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.224636] ion_page_pool_alloc+0x102/0x180 [ 367.224643] ion_system_heap_allocate+0x14e/0x930 [ 367.224650] ? ion_system_heap_free+0x270/0x270 [ 367.224657] ion_alloc+0x216/0x770 [ 367.224664] ? ion_dma_buf_release+0x40/0x40 [ 367.224673] ? kasan_check_write+0x14/0x20 [ 367.224678] ion_ioctl+0xe2/0x1b6 [ 367.224682] ? ion_alloc.cold.15+0x32/0x32 [ 367.224692] do_vfs_ioctl+0x180/0xfb0 [ 367.224698] ? __fget+0x1ad/0x2f0 [ 367.224705] ? ioctl_preallocate+0x1a0/0x1a0 [ 367.224713] ? __fget+0x1ca/0x2f0 [ 367.224725] ? security_file_ioctl+0x6a/0xa0 [ 367.229748] Node 0 active_anon:21192kB inactive_anon:772kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 367.233514] ? SyS_clock_settime+0x1a0/0x1a0 [ 367.233520] ? security_file_ioctl+0x6a/0xa0 [ 367.233528] SyS_ioctl+0x74/0x80 [ 367.233534] ? do_vfs_ioctl+0xfb0/0xfb0 [ 367.233541] do_syscall_64+0x1c7/0x5b0 [ 367.233547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.238549] Node 1 active_anon:184kB inactive_anon:4kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 367.242450] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 367.242456] RIP: 0033:0x45af49 [ 367.242459] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.242465] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 367.242469] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 367.244266] lowmem_reserve[]: [ 367.249009] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 367.249013] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 367.254055] Node 0 [ 367.286370] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 367.416895] 0 [ 367.422793] DMA free:10372kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.442974] 0 [ 367.467021] lowmem_reserve[]: [ 367.519653] 0 [ 367.551705] 0 2570 2570 2570 2570 [ 367.557075] Node 0 DMA32 free:18632kB min:36384kB low:45480kB high:54576kB active_anon:21180kB inactive_anon:772kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7104kB pagetables:1616kB bounce:0kB free_pcp:152kB local_pcp:120kB free_cma:0kB [ 367.593431] lowmem_reserve[]: 0 0 0 0 0 [ 367.597451] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.618739] 0 0 [ 367.626496] Node 0 DMA: 3*4kB (M) 3*8kB (M) 4*16kB (ME) 3*32kB (M) 17*64kB (UME) 7*128kB (UME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10372kB [ 367.640094] lowmem_reserve[]: 0 0 0 0 0 [ 367.645815] Node 1 Normal free:26248kB min:53504kB low:66880kB high:80256kB active_anon:184kB inactive_anon:4kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.680742] Node 0 DMA32: 491*4kB (ME) 157*8kB (UME) 34*16kB (UME) 19*32kB (UME) 309*64kB (UME) 26*128kB (UM) 5*256kB (UM) 6*512kB (UM) 7*1024kB (U) 0*2048kB 0*4096kB = 38996kB 2020/03/09 03:21:16 executed programs: 115 [ 367.710455] lowmem_reserve[]: 0 0 0 0 0 [ 367.718499] Node 0 DMA: 3*4kB (M) 3*8kB (M) 4*16kB (ME) 3*32kB (M) 17*64kB (UME) 7*128kB (UME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10372kB [ 367.755647] Node 0 DMA32: 838*4kB (UME) 114*8kB (UME) 11*16kB (UME) 4*32kB (UME) 894*64kB (UE) 88*128kB (U) 4*256kB (UM) 6*512kB (UM) 7*1024kB (U) 0*2048kB 0*4096kB = 84312kB [ 367.779054] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 367.805404] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 367.805978] Node 1 [ 367.816225] Node 1 Normal: 2267*4kB (UME) 19*8kB (UM) 10*16kB (UME) 12*32kB (ME) 1020*64kB (UM) 82*128kB (UM) 48*256kB (UM) 10*512kB (UM) 29*1024kB (UM) 2*2048kB (U) 0*4096kB = 136740kB [ 367.816278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.816281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 367.816284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.816286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 367.816288] 1800 total pagecache pages [ 367.816296] 0 pages in swap cache [ 367.816299] Swap cache stats: add 0, delete 0, find 0/0 [ 367.816301] Free swap = 0kB [ 367.816303] Total swap = 0kB [ 367.816309] 1965979 pages RAM [ 367.816312] 0 pages HighMem/MovableOnly [ 367.816314] 335868 pages reserved [ 367.816316] 0 pages cma reserved [ 367.987214] Normal: 2267*4kB (UME) 19*8kB (UM) 10*16kB (UME) 12*32kB (ME) 1020*64kB (UM) 82*128kB (UM) 48*256kB (UM) 10*512kB (UM) 94*1024kB (UM) 4*2048kB (U) 0*4096kB = 207396kB [ 368.074432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 368.088578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 368.120303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 368.129177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 368.150064] 1944 total pagecache pages [ 368.154010] 0 pages in swap cache [ 368.157472] Swap cache stats: add 0, delete 0, find 0/0 [ 368.180081] Free swap = 0kB [ 368.183157] Total swap = 0kB [ 368.186176] 1965979 pages RAM [ 368.189270] 0 pages HighMem/MovableOnly [ 368.230099] 335868 pages reserved [ 368.233789] 0 pages cma reserved [ 368.237164] Out of memory: Kill process 8103 (syz-executor.4) score 999 or sacrifice child [ 368.281664] Killed process 8104 (syz-executor.4) total-vm:38036kB, anon-rss:128kB, file-rss:0kB, shmem-rss:0kB [ 368.330448] oom_reaper: reaped process 8104 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 368.367827] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 368.380773] oom_reaper: reaped process 8101 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 368.410929] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 368.425818] udevd invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000 [ 368.434239] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 368.473129] CPU: 0 PID: 8117 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 368.480973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.490344] Call Trace: [ 368.492936] dump_stack+0xf7/0x13b [ 368.496464] warn_alloc.cold.110+0xa2/0x1be [ 368.500767] ? zone_watermark_ok_safe+0x260/0x260 [ 368.505610] ? __alloc_pages_direct_compact+0xc2/0x330 [ 368.510874] __alloc_pages_slowpath+0x2052/0x2650 [ 368.515722] ? trace_hardirqs_off+0x10/0x10 [ 368.520034] ? warn_alloc+0x100/0x100 [ 368.523826] ? get_page_from_freelist+0x1046/0x23b0 [ 368.528847] ? __might_sleep+0x93/0xb0 [ 368.532725] __alloc_pages_nodemask+0x60d/0x770 [ 368.537394] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 368.542150] ? __alloc_pages_slowpath+0x2650/0x2650 [ 368.547244] ? wait_for_completion+0x440/0x440 [ 368.551816] alloc_pages_current+0xd6/0x1b0 [ 368.556128] ion_page_pool_alloc+0x102/0x180 [ 368.560532] ion_system_heap_allocate+0x14e/0x930 [ 368.565376] ? ion_system_heap_free+0x270/0x270 [ 368.570043] ion_alloc+0x216/0x770 [ 368.573575] ? ion_dma_buf_release+0x40/0x40 [ 368.577987] ? kasan_check_write+0x14/0x20 [ 368.582225] ion_ioctl+0xe2/0x1b6 [ 368.585664] ? ion_alloc.cold.15+0x32/0x32 [ 368.589888] do_vfs_ioctl+0x180/0xfb0 [ 368.593674] ? __fget+0x1ad/0x2f0 [ 368.597110] ? ioctl_preallocate+0x1a0/0x1a0 [ 368.601515] ? __fget+0x1ca/0x2f0 [ 368.604957] ? security_file_ioctl+0x6a/0xa0 [ 368.609362] ? SyS_clock_settime+0x1a0/0x1a0 [ 368.613756] ? security_file_ioctl+0x6a/0xa0 [ 368.618165] SyS_ioctl+0x74/0x80 [ 368.621605] ? do_vfs_ioctl+0xfb0/0xfb0 [ 368.625582] do_syscall_64+0x1c7/0x5b0 [ 368.629454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 368.634301] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 368.639486] RIP: 0033:0x45af49 [ 368.642659] RSP: 002b:00007f024cfa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.650349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 368.657620] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 368.664878] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 368.672146] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024cfaa6d4 [ 368.679404] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 368.687423] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 368.699890] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 368.708751] udevd cpuset=/ mems_allowed=0-1 [ 368.716354] CPU: 1 PID: 8111 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 368.727315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.736677] Call Trace: [ 368.739274] dump_stack+0xf7/0x13b [ 368.742818] warn_alloc.cold.110+0xa2/0x1be [ 368.747760] ? zone_watermark_ok_safe+0x260/0x260 [ 368.752614] ? __alloc_pages_direct_compact+0xc2/0x330 [ 368.757891] __alloc_pages_slowpath+0x2052/0x2650 [ 368.762745] ? trace_hardirqs_off+0x10/0x10 [ 368.767072] ? warn_alloc+0x100/0x100 [ 368.768143] warn_alloc_show_mem: 1 callbacks suppressed [ 368.768145] Mem-Info: [ 368.770864] ? get_page_from_freelist+0x1046/0x23b0 [ 368.770879] ? __might_sleep+0x93/0xb0 [ 368.770884] __alloc_pages_nodemask+0x60d/0x770 [ 368.770892] ? __alloc_pages_slowpath+0x2650/0x2650 [ 368.770902] ? wait_for_completion+0x440/0x440 [ 368.770912] alloc_pages_current+0xd6/0x1b0 [ 368.770923] ion_page_pool_alloc+0x102/0x180 [ 368.770929] ion_system_heap_allocate+0x14e/0x930 [ 368.770936] ? do_raw_spin_unlock+0x16a/0x250 [ 368.770943] ? ion_system_heap_free+0x270/0x270 [ 368.770954] ion_alloc+0x27f/0x770 [ 368.770963] ? ion_dma_buf_release+0x40/0x40 [ 368.770975] ? kasan_check_write+0x14/0x20 [ 368.782983] syz-executor.4: [ 368.783756] ion_ioctl+0xe2/0x1b6 [ 368.787663] page allocation failure: order:0 [ 368.792338] ? ion_alloc.cold.15+0x32/0x32 [ 368.792352] do_vfs_ioctl+0x180/0xfb0 [ 368.792359] ? __fget+0x1ad/0x2f0 [ 368.792365] ? ioctl_preallocate+0x1a0/0x1a0 [ 368.792372] ? __fget+0x1ca/0x2f0 [ 368.792383] ? security_file_ioctl+0x6a/0xa0 [ 368.792389] ? SyS_clock_settime+0x1a0/0x1a0 [ 368.792392] ? security_file_ioctl+0x6a/0xa0 [ 368.792398] SyS_ioctl+0x74/0x80 [ 368.792403] ? do_vfs_ioctl+0xfb0/0xfb0 [ 368.792410] do_syscall_64+0x1c7/0x5b0 [ 368.792414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 368.792425] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 368.792431] RIP: 0033:0x45af49 [ 368.792433] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.792440] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 368.792443] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 368.792446] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 368.792449] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 368.792451] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 368.810118] CPU: 1 PID: 8115 Comm: udevd Not tainted 4.14.172-syzkaller #0 [ 368.822979] active_anon:5334 inactive_anon:194 isolated_anon:0 [ 368.822979] active_file:11 inactive_file:18 isolated_file:0 [ 368.822979] unevictable:0 dirty:7 writeback:0 unstable:0 [ 368.822979] slab_reclaimable:12938 slab_unreclaimable:99138 [ 368.822979] mapped:30 shmem:250 pagetables:439 bounce:0 [ 368.822979] free:13783 free_pcp:30 free_cma:0 [ 368.824851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.828384] Node 0 active_anon:21152kB inactive_anon:772kB active_file:24kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:12kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 368.832771] Call Trace: [ 368.832789] dump_stack+0xf7/0x13b [ 368.832801] dump_header+0x160/0x63f [ 368.832810] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 368.832817] ? ___ratelimit+0x243/0x519 [ 368.832824] ? do_raw_spin_unlock+0x16a/0x250 [ 368.832830] oom_kill_process.cold.24+0xb/0xa1a [ 368.832834] ? out_of_memory+0x7f9/0x1030 [ 368.832842] ? lock_downgrade+0x7f0/0x7f0 [ 368.832852] out_of_memory+0x2b0/0x1030 [ 368.832862] ? oom_killer_disable+0x1a0/0x1a0 [ 368.832871] ? __alloc_pages_slowpath+0xb69/0x2650 [ 368.832877] __alloc_pages_slowpath+0x1ef3/0x2650 [ 368.832893] ? warn_alloc+0x100/0x100 [ 368.855770] Node 1 active_anon:184kB inactive_anon:4kB active_file:20kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 368.855984] ? get_page_from_freelist+0x1046/0x23b0 [ 368.859408] Node 0 [ 368.863808] ? __might_sleep+0x93/0xb0 [ 368.863815] __alloc_pages_nodemask+0x60d/0x770 [ 368.863824] ? find_held_lock+0x36/0x1d0 [ 368.863830] ? __alloc_pages_slowpath+0x2650/0x2650 [ 368.863837] ? trace_hardirqs_off+0x10/0x10 [ 368.863841] ? reacquire_held_locks+0xb7/0x3a0 [ 368.863848] ? alloc_set_pte+0xa89/0x11a0 [ 368.863856] alloc_pages_vma+0xad/0x420 [ 368.863863] wp_page_copy+0x1f4/0x1070 [ 368.863869] ? lock_downgrade+0x7f0/0x7f0 [ 368.863876] ? pmd_devmap_trans_unstable+0x130/0x130 [ 368.863879] ? __pte_alloc_kernel+0x1c0/0x1c0 [ 368.863888] ? do_raw_spin_unlock+0x16a/0x250 [ 368.863895] do_wp_page+0x21b/0x1390 [ 368.863901] ? finish_mkwrite_fault+0x600/0x600 [ 368.863904] ? add_mm_counter_fast+0xc0/0xc0 [ 368.863912] __handle_mm_fault+0x1b3a/0x3870 [ 368.863920] ? copy_page_range+0x1d10/0x1d10 [ 368.884204] DMA free:10364kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 368.887924] ? find_held_lock+0x36/0x1d0 [ 368.896987] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 368.901856] handle_mm_fault+0x234/0x6e0 [ 368.901864] ? find_vma+0xe2/0x150 [ 368.901871] __do_page_fault+0x44d/0xb00 [ 368.901881] ? vmalloc_fault+0xc90/0xc90 [ 368.901891] ? retint_user+0x18/0x18 [ 368.901896] ? page_fault+0x2f/0x50 [ 368.901902] do_page_fault+0x64/0x3fb [ 368.901906] ? page_fault+0x2f/0x50 [ 368.901911] page_fault+0x45/0x50 [ 368.901916] RIP: 0033:0x7f168167ffa1 [ 368.901919] RSP: 002b:00007ffe9b6b7860 EFLAGS: 00010246 [ 368.901924] RAX: 00007f1682464a60 RBX: 00007f1681891240 RCX: 00007f16818952a0 [ 368.901927] RDX: 00007f1681891240 RSI: 00007f1681891240 RDI: 00007f1681e216c0 [ 368.901929] RBP: 00007f1681891250 R08: 0000000000001d90 R09: 0000000000001d90 [ 368.901932] R10: 00007f1681891240 R11: 00007f16824647a0 R12: 0000000000000000 [ 368.901934] R13: 0000000000000000 R14: 00007f168246f040 R15: 0000000000000005 [ 368.908099] syz-executor.0 cpuset= [ 368.913002] syz-executor.4: [ 368.939080] syz0 [ 368.949180] lowmem_reserve[]: [ 368.957610] mems_allowed=0-1 [ 368.996645] (null) [ 369.004801] syz-executor.1: [ 369.032439] page allocation failure: order:0 [ 369.041538] CPU: 1 PID: 8100 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 369.049054] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 369.049632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.057263] (null) [ 369.058562] Call Trace: [ 369.066824] 0 2570 [ 369.071351] dump_stack+0xf7/0x13b [ 369.071362] warn_alloc.cold.110+0xa2/0x1be [ 369.071367] ? zone_watermark_ok_safe+0x260/0x260 [ 369.071379] ? __alloc_pages_direct_compact+0xc2/0x330 [ 369.071385] __alloc_pages_slowpath+0x2052/0x2650 [ 369.071400] ? trace_hardirqs_off+0x10/0x10 [ 369.071406] ? warn_alloc+0x100/0x100 [ 369.071411] ? get_page_from_freelist+0x1046/0x23b0 [ 369.071424] ? __might_sleep+0x93/0xb0 [ 369.071430] __alloc_pages_nodemask+0x60d/0x770 [ 369.071435] ? trace_hardirqs_off+0x10/0x10 [ 369.071441] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 369.071447] ? __alloc_pages_slowpath+0x2650/0x2650 [ 369.071455] ? wait_for_completion+0x440/0x440 [ 369.071465] alloc_pages_current+0xd6/0x1b0 [ 369.071475] ion_page_pool_alloc+0x102/0x180 [ 369.071480] ion_system_heap_allocate+0x14e/0x930 [ 369.071486] ? do_raw_spin_unlock+0x16a/0x250 [ 369.071494] ? ion_system_heap_free+0x270/0x270 [ 369.071505] ion_alloc+0x27f/0x770 [ 369.078817] syz-executor.4 cpuset= [ 369.081269] ? ion_dma_buf_release+0x40/0x40 [ 369.081281] ? kasan_check_write+0x14/0x20 [ 369.081287] ion_ioctl+0xe2/0x1b6 [ 369.081291] ? ion_alloc.cold.15+0x32/0x32 [ 369.081304] do_vfs_ioctl+0x180/0xfb0 [ 369.081311] ? __fget+0x1ad/0x2f0 [ 369.081317] ? ioctl_preallocate+0x1a0/0x1a0 [ 369.081326] ? __fget+0x1ca/0x2f0 [ 369.081339] ? security_file_ioctl+0x6a/0xa0 [ 369.081344] ? SyS_clock_settime+0x1a0/0x1a0 [ 369.081348] ? security_file_ioctl+0x6a/0xa0 [ 369.081355] SyS_ioctl+0x74/0x80 [ 369.081360] ? do_vfs_ioctl+0xfb0/0xfb0 [ 369.081367] do_syscall_64+0x1c7/0x5b0 [ 369.081371] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.081382] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 369.089515] syz-executor.4 cpuset= [ 369.111299] RIP: 0033:0x45af49 [ 369.111303] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.111308] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 369.111311] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 369.111313] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 369.111315] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 369.111317] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 369.118477] Mem-Info: [ 369.126715] syz4 [ 369.127661] active_anon:5336 inactive_anon:194 isolated_anon:0 [ 369.127661] active_file:18 inactive_file:0 isolated_file:7 [ 369.127661] unevictable:0 dirty:1 writeback:12 unstable:0 [ 369.127661] slab_reclaimable:12930 slab_unreclaimable:99136 [ 369.127661] mapped:17 shmem:250 pagetables:439 bounce:0 [ 369.127661] free:13798 free_pcp:60 free_cma:0 [ 369.132761] 2570 [ 369.141754] Node 0 active_anon:21076kB inactive_anon:772kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:8kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 369.149527] page allocation failure: order:0 [ 369.150663] Node 1 active_anon:184kB inactive_anon:4kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 369.154308] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 369.158194] Node 0 [ 369.162453] mems_allowed=0-1 [ 369.167492] DMA free:10364kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.175523] CPU: 0 PID: 8104 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 369.176552] lowmem_reserve[]: [ 369.180225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.180228] Call Trace: [ 369.180246] dump_stack+0xf7/0x13b [ 369.180257] warn_alloc.cold.110+0xa2/0x1be [ 369.180263] ? zone_watermark_ok_safe+0x260/0x260 [ 369.184919] 0 [ 369.189317] ? usleep_range+0x120/0x120 [ 369.189325] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 369.195104] 2570 [ 369.198132] ? call_timer_fn+0x570/0x570 [ 369.223982] 2570 [ 369.227988] ? unreserve_highatomic_pageblock+0x315/0x450 [ 369.235102] 2570 [ 369.239138] __alloc_pages_slowpath+0x2052/0x2650 [ 369.243112] 2570 [ 369.246723] ? warn_alloc+0x100/0x100 [ 369.254453] ? get_page_from_freelist+0x1046/0x23b0 [ 369.258056] Node 0 [ 369.261851] ? __might_sleep+0x93/0xb0 [ 369.261859] __alloc_pages_nodemask+0x60d/0x770 [ 369.261867] ? __alloc_pages_slowpath+0x2650/0x2650 [ 369.261878] ? wait_for_completion+0x440/0x440 [ 369.265860] DMA32 free:18180kB min:36384kB low:45480kB high:54576kB active_anon:21064kB inactive_anon:772kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7168kB pagetables:1652kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 369.269295] alloc_pages_current+0xd6/0x1b0 [ 369.273019] lowmem_reserve[]: [ 369.278363] ion_page_pool_alloc+0x102/0x180 [ 369.285743] 0 [ 369.292984] ion_system_heap_allocate+0x14e/0x930 [ 369.292993] ? ion_system_heap_free+0x270/0x270 [ 369.293002] ion_alloc+0x216/0x770 [ 369.293011] ? ion_dma_buf_release+0x40/0x40 [ 369.301596] 0 [ 369.308876] ? kasan_check_write+0x14/0x20 [ 369.316260] 0 [ 369.319757] ion_ioctl+0xe2/0x1b6 [ 369.322810] 0 [ 369.324792] ? ion_alloc.cold.15+0x32/0x32 [ 369.327890] 0 [ 369.331006] do_vfs_ioctl+0x180/0xfb0 [ 369.331016] ? __fget+0x1ad/0x2f0 [ 369.331021] ? ioctl_preallocate+0x1a0/0x1a0 [ 369.331029] ? __fget+0x1ca/0x2f0 [ 369.331041] ? security_file_ioctl+0x6a/0xa0 [ 369.331049] ? SyS_clock_settime+0x1a0/0x1a0 [ 369.336293] ? security_file_ioctl+0x6a/0xa0 [ 369.336303] SyS_ioctl+0x74/0x80 [ 369.340743] Node 0 [ 369.348491] ? do_vfs_ioctl+0xfb0/0xfb0 [ 369.355606] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.364921] do_syscall_64+0x1c7/0x5b0 [ 369.364928] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.364941] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 369.364947] RIP: 0033:0x45af49 [ 369.367081] lowmem_reserve[]: [ 369.369653] RSP: 002b:00007ffa6e582c78 EFLAGS: 00000246 [ 369.371903] 0 [ 369.375394] ORIG_RAX: 0000000000000010 [ 369.375398] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 369.379704] 0 [ 369.384529] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 369.384532] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 369.384534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5836d4 [ 369.384537] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 369.389711] 2570 [ 369.393892] 0 [ 369.394711] 2570 [ 369.398974] 0 [ 369.406996] syz4 [ 369.409137] (null) [ 369.413016] mems_allowed=0-1 [ 369.417657] syz-executor.1 cpuset= [ 369.426954] 0 [ 369.431977] Node 0 [ 369.444309] CPU: 0 PID: 8114 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 369.445354] syz1 [ 369.450315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.454918] Node 1 [ 369.459572] Call Trace: [ 369.463148] mems_allowed=0-1 [ 369.466636] dump_stack+0xf7/0x13b [ 369.480053] Normal free:26688kB min:53504kB low:66880kB high:80256kB active_anon:184kB inactive_anon:4kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:104kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 369.482907] warn_alloc.cold.110+0xa2/0x1be [ 369.486689] lowmem_reserve[]: [ 369.490162] ? zone_watermark_ok_safe+0x260/0x260 [ 369.490171] ? usleep_range+0x120/0x120 [ 369.490177] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 369.490184] ? call_timer_fn+0x570/0x570 [ 369.490189] ? unreserve_highatomic_pageblock+0x315/0x450 [ 369.490198] __alloc_pages_slowpath+0x2052/0x2650 [ 369.490213] ? warn_alloc+0x100/0x100 [ 369.510051] 0 [ 369.511265] ? get_page_from_freelist+0x1046/0x23b0 [ 369.514603] 0 [ 369.518567] ? __might_sleep+0x93/0xb0 [ 369.530048] 0 [ 369.532441] __alloc_pages_nodemask+0x60d/0x770 [ 369.535963] 0 0 [ 369.539148] ? __alloc_pages_slowpath+0x2650/0x2650 [ 369.561361] ? wait_for_completion+0x440/0x440 [ 369.568629] Node 0 [ 369.575894] alloc_pages_current+0xd6/0x1b0 [ 369.575906] ion_page_pool_alloc+0x102/0x180 [ 369.575912] ion_system_heap_allocate+0x14e/0x930 [ 369.575921] ? ion_system_heap_free+0x270/0x270 [ 369.610070] DMA: [ 369.620091] ion_alloc+0x216/0x770 [ 369.620103] ? ion_dma_buf_release+0x40/0x40 [ 369.630045] 3*4kB [ 369.648797] ? kasan_check_write+0x14/0x20 [ 369.648806] ion_ioctl+0xe2/0x1b6 [ 369.648812] ? ion_alloc.cold.15+0x32/0x32 [ 369.648824] do_vfs_ioctl+0x180/0xfb0 [ 369.680050] (M) [ 369.686327] ? __fget+0x1ad/0x2f0 [ 369.688550] 4*8kB [ 369.691640] ? ioctl_preallocate+0x1a0/0x1a0 [ 369.691650] ? __fget+0x1ca/0x2f0 [ 369.691661] ? security_file_ioctl+0x6a/0xa0 [ 369.691667] ? SyS_clock_settime+0x1a0/0x1a0 [ 369.691672] ? security_file_ioctl+0x6a/0xa0 [ 369.760054] (UM) [ 369.763577] SyS_ioctl+0x74/0x80 [ 369.765627] 5*16kB [ 369.769675] ? do_vfs_ioctl+0xfb0/0xfb0 [ 369.780060] (UME) [ 369.784423] do_syscall_64+0x1c7/0x5b0 [ 369.786453] 4*32kB [ 369.790239] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.790251] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 369.790257] RIP: 0033:0x45af49 [ 369.790259] RSP: 002b:00007ffa6e540c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.790265] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 369.790268] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 369.790271] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 369.810053] (UM) [ 369.811016] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5416d4 [ 369.815586] 14*64kB [ 369.843508] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 369.852559] DMA32 free:18156kB min:36384kB low:45480kB high:54576kB active_anon:21064kB inactive_anon:772kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7168kB pagetables:1652kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 369.860489] CPU: 1 PID: 8101 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 369.866298] lowmem_reserve[]: [ 369.867512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.883485] 0 [ 369.886688] Call Trace: [ 369.888495] 0 [ 369.892726] dump_stack+0xf7/0x13b [ 369.892736] warn_alloc.cold.110+0xa2/0x1be [ 369.892742] ? zone_watermark_ok_safe+0x260/0x260 [ 369.892748] ? usleep_range+0x120/0x120 [ 369.892755] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 369.892762] ? call_timer_fn+0x570/0x570 [ 369.892768] ? unreserve_highatomic_pageblock+0x315/0x450 [ 369.892778] __alloc_pages_slowpath+0x2052/0x2650 [ 369.892794] ? warn_alloc+0x100/0x100 [ 369.892801] ? get_page_from_freelist+0x1046/0x23b0 [ 369.892816] ? __might_sleep+0x93/0xb0 [ 369.898565] 0 [ 369.901828] __alloc_pages_nodemask+0x60d/0x770 [ 369.901835] ? __alloc_pages_slowpath+0x2650/0x2650 [ 369.901844] ? wait_for_completion+0x440/0x440 [ 369.901854] alloc_pages_current+0xd6/0x1b0 [ 369.901863] ion_page_pool_alloc+0x102/0x180 [ 369.901870] ion_system_heap_allocate+0x14e/0x930 [ 369.901878] ? ion_system_heap_free+0x270/0x270 [ 369.901889] ion_alloc+0x216/0x770 [ 369.901903] ? ion_dma_buf_release+0x40/0x40 [ 369.901913] ? kasan_check_write+0x14/0x20 [ 369.901919] ion_ioctl+0xe2/0x1b6 [ 369.901924] ? ion_alloc.cold.15+0x32/0x32 [ 369.901936] do_vfs_ioctl+0x180/0xfb0 [ 369.909687] 0 [ 369.909764] ? __fget+0x1ad/0x2f0 [ 369.914209] 0 [ 369.918550] ? ioctl_preallocate+0x1a0/0x1a0 [ 369.928552] ? __fget+0x1ca/0x2f0 [ 369.932541] Node 0 [ 369.957232] ? security_file_ioctl+0x6a/0xa0 [ 369.957239] ? SyS_clock_settime+0x1a0/0x1a0 [ 369.957242] ? security_file_ioctl+0x6a/0xa0 [ 369.957251] SyS_ioctl+0x74/0x80 [ 369.957258] ? do_vfs_ioctl+0xfb0/0xfb0 [ 369.957265] do_syscall_64+0x1c7/0x5b0 [ 369.957269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.957281] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 369.957286] RIP: 0033:0x45af49 [ 369.957289] RSP: 002b:00007fb6d4dfac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.957296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 369.957298] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 369.957302] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 369.957305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6d4dfb6d4 [ 369.957307] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 369.961900] (UME) [ 369.969529] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.974970] 6*128kB [ 369.977658] lowmem_reserve[]: [ 369.983051] (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10364kB [ 369.983079] Node 0 DMA32: 528*4kB (UME) 158*8kB (ME) 37*16kB (UME) 21*32kB (ME) 26*64kB (ME) 16*128kB (UM) 5*256kB (M) 17*512kB (UM) [ 369.988758] 0 [ 369.989407] 0*1024kB [ 369.996718] 0 [ 369.998509] 0*2048kB [ 370.019125] 0 [ 370.021009] 0*4096kB = 18336kB [ 370.030063] 0 [ 370.030397] warn_alloc_show_mem: 2 callbacks suppressed [ 370.030400] Mem-Info: [ 370.032130] 0 [ 370.034199] active_anon:5315 inactive_anon:194 isolated_anon:0 [ 370.034199] active_file:7 inactive_file:7 isolated_file:7 [ 370.034199] unevictable:0 dirty:0 writeback:0 unstable:0 [ 370.034199] slab_reclaimable:12930 slab_unreclaimable:99160 [ 370.034199] mapped:2 shmem:250 pagetables:439 bounce:0 [ 370.034199] free:13799 free_pcp:30 free_cma:0 [ 370.035986] Node 1 [ 370.038072] Node 0 active_anon:21076kB inactive_anon:772kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:8kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 370.043718] Normal free:26680kB min:53504kB low:66880kB high:80256kB active_anon:184kB inactive_anon:4kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:104kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 370.046902] Node 0 [ 370.048687] lowmem_reserve[]: [ 370.050941] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 370.050974] Node 1 Normal: 20*4kB (ME) 11*8kB (UM) 9*16kB (ME) 12*32kB (UME) 6*64kB (UM) 4*128kB [ 370.059073] 0 [ 370.061083] Node 1 active_anon:184kB inactive_anon:4kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 370.061087] Node 0 DMA free:10364kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.061100] lowmem_reserve[]: [ 370.074359] 0 [ 370.075984] (UM) [ 370.080420] 0 0 [ 370.084722] 44*256kB [ 370.115662] 0 [ 370.119896] 0 [ 370.142817] syz-executor.1: [ 370.147647] Node 0 [ 370.151494] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 370.151511] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 370.151529] CPU: 1 PID: 8100 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 370.151532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.151536] Call Trace: [ 370.151552] dump_stack+0xf7/0x13b [ 370.159895] DMA: [ 370.160153] warn_alloc.cold.110+0xa2/0x1be [ 370.160158] ? zone_watermark_ok_safe+0x260/0x260 [ 370.160166] ? usleep_range+0x120/0x120 [ 370.160176] ? rcu_read_lock_sched_held+0x108/0x120 [ 370.160183] ? call_timer_fn+0x570/0x570 [ 370.160196] __alloc_pages_slowpath+0x2052/0x2650 [ 370.160212] ? warn_alloc+0x100/0x100 [ 370.160218] ? get_page_from_freelist+0x1046/0x23b0 [ 370.160232] ? __might_sleep+0x93/0xb0 [ 370.164172] 3*4kB [ 370.165909] __alloc_pages_nodemask+0x60d/0x770 [ 370.177227] (M) [ 370.177543] ? trace_hardirqs_off+0x10/0x10 [ 370.182486] page allocation failure: order:0 [ 370.184328] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 370.188635] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 370.193033] ? __alloc_pages_slowpath+0x2650/0x2650 [ 370.193042] ? wait_for_completion+0x440/0x440 [ 370.193052] alloc_pages_current+0xd6/0x1b0 [ 370.193062] ion_page_pool_alloc+0x102/0x180 [ 370.193068] ion_system_heap_allocate+0x14e/0x930 [ 370.193075] ? do_raw_spin_unlock+0x16a/0x250 [ 370.193082] ? ion_system_heap_free+0x270/0x270 [ 370.193091] ion_alloc+0x27f/0x770 [ 370.193101] ? ion_dma_buf_release+0x40/0x40 [ 370.193112] ? kasan_check_write+0x14/0x20 [ 370.193119] ion_ioctl+0xe2/0x1b6 [ 370.193124] ? ion_alloc.cold.15+0x32/0x32 [ 370.193138] do_vfs_ioctl+0x180/0xfb0 [ 370.193144] ? __fget+0x1ad/0x2f0 [ 370.193151] ? ioctl_preallocate+0x1a0/0x1a0 [ 370.193159] ? __fget+0x1ca/0x2f0 [ 370.203987] syz-executor.0: [ 370.204749] ? security_file_ioctl+0x6a/0xa0 [ 370.208260] page allocation failure: order:0 [ 370.212660] ? SyS_clock_settime+0x1a0/0x1a0 [ 370.212666] ? security_file_ioctl+0x6a/0xa0 [ 370.212675] SyS_ioctl+0x74/0x80 [ 370.212681] ? do_vfs_ioctl+0xfb0/0xfb0 [ 370.212688] do_syscall_64+0x1c7/0x5b0 [ 370.212693] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.212705] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 370.212710] RIP: 0033:0x45af49 [ 370.212713] RSP: 002b:00007efef092fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.212719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 370.212722] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 370.212724] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 370.212727] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef09306d4 [ 370.212729] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 370.214106] 2570 [ 370.215752] 4*8kB [ 370.219101] 2570 2570 [ 370.227353] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 370.236460] (UM) [ 370.238817] (UM) [ 370.242834] 13*512kB [ 370.250325] (null) [ 370.270084] (UM) [ 370.289669] (null) [ 370.290388] 2570 [ 370.293179] 5*16kB [ 370.323433] syz-executor.1 cpuset= [ 370.338407] 7*1024kB [ 370.343397] syz-executor.0 cpuset= [ 370.373132] Node 0 [ 370.386542] syz1 [ 370.427577] DMA32 free:24684kB min:36384kB low:45480kB high:54576kB active_anon:21064kB inactive_anon:772kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:7136kB pagetables:1652kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.463522] (UME) [ 370.494714] (U) [ 370.503793] syz0 [ 370.535389] 0*2048kB [ 370.537287] 4*32kB [ 370.548600] 0*4096kB [ 370.552839] mems_allowed=0-1 [ 370.552862] CPU: 0 PID: 8112 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 370.590162] = 26680kB [ 370.592705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.592709] Call Trace: [ 370.592728] dump_stack+0xf7/0x13b [ 370.592740] warn_alloc.cold.110+0xa2/0x1be [ 370.613337] lowmem_reserve[]: [ 370.634284] ? zone_watermark_ok_safe+0x260/0x260 [ 370.634295] ? usleep_range+0x120/0x120 [ 370.634300] ? get_page_from_freelist+0x26e/0x23b0 [ 370.634306] ? call_timer_fn+0x570/0x570 [ 370.634318] __alloc_pages_slowpath+0x2052/0x2650 [ 370.634332] ? warn_alloc+0x100/0x100 [ 370.634337] ? get_page_from_freelist+0x1046/0x23b0 [ 370.634351] ? __might_sleep+0x93/0xb0 [ 370.634359] __alloc_pages_nodemask+0x60d/0x770 [ 370.637544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.640557] ? __alloc_pages_slowpath+0x2650/0x2650 [ 370.640568] ? wait_for_completion+0x440/0x440 [ 370.640579] alloc_pages_current+0xd6/0x1b0 [ 370.640590] ion_page_pool_alloc+0x102/0x180 [ 370.640596] ion_system_heap_allocate+0x14e/0x930 [ 370.640604] ? ion_system_heap_free+0x270/0x270 [ 370.640614] ion_alloc+0x216/0x770 [ 370.659452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 370.661702] ? ion_dma_buf_release+0x40/0x40 [ 370.661716] ? kasan_check_write+0x14/0x20 [ 370.661723] ion_ioctl+0xe2/0x1b6 [ 370.661729] ? ion_alloc.cold.15+0x32/0x32 [ 370.672411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.675297] do_vfs_ioctl+0x180/0xfb0 [ 370.675306] ? __fget+0x1ad/0x2f0 [ 370.685985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 370.686777] ? ioctl_preallocate+0x1a0/0x1a0 [ 370.757823] 0 [ 370.775798] ? __fget+0x1ca/0x2f0 [ 370.775812] ? security_file_ioctl+0x6a/0xa0 [ 370.775818] ? SyS_clock_settime+0x1a0/0x1a0 [ 370.775821] ? security_file_ioctl+0x6a/0xa0 [ 370.775830] SyS_ioctl+0x74/0x80 [ 370.775837] ? do_vfs_ioctl+0xfb0/0xfb0 [ 370.775844] do_syscall_64+0x1c7/0x5b0 [ 370.775849] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.775861] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 370.775870] RIP: 0033:0x45af49 [ 370.836251] 0 [ 370.854504] RSP: 002b:00007fb6d4db8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.854512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 370.854514] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 370.854517] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 370.854519] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6d4db96d4 [ 370.854522] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 370.855735] (UM) [ 370.868592] 1010 total pagecache pages [ 370.870092] mems_allowed=0-1 [ 370.893386] 0 pages in swap cache [ 370.904391] 14*64kB [ 370.953807] 0 [ 370.955886] CPU: 0 PID: 8111 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 370.966990] 0 [ 370.968016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.990096] Swap cache stats: add 0, delete 0, find 0/0 [ 370.993982] Call Trace: [ 370.998568] Free swap = 0kB [ 371.002887] dump_stack+0xf7/0x13b [ 371.002897] warn_alloc.cold.110+0xa2/0x1be [ 371.002902] ? zone_watermark_ok_safe+0x260/0x260 [ 371.002908] ? usleep_range+0x120/0x120 [ 371.002918] ? rcu_read_lock_sched_held+0x108/0x120 [ 371.002924] ? call_timer_fn+0x570/0x570 [ 371.002937] __alloc_pages_slowpath+0x2052/0x2650 [ 371.007524] 0 [ 371.012206] ? warn_alloc+0x100/0x100 [ 371.012213] ? get_page_from_freelist+0x1046/0x23b0 [ 371.012227] ? __might_sleep+0x93/0xb0 [ 371.012234] __alloc_pages_nodemask+0x60d/0x770 [ 371.052955] ? __alloc_pages_slowpath+0x2650/0x2650 [ 371.056416] Node 0 [ 371.059450] ? wait_for_completion+0x440/0x440 [ 371.070074] Total swap = 0kB [ 371.072650] alloc_pages_current+0xd6/0x1b0 [ 371.077062] 1965979 pages RAM [ 371.080523] ion_page_pool_alloc+0x102/0x180 [ 371.080528] ion_system_heap_allocate+0x14e/0x930 [ 371.080536] ? do_raw_spin_unlock+0x16a/0x250 [ 371.080543] ? ion_system_heap_free+0x270/0x270 [ 371.080551] ion_alloc+0x27f/0x770 [ 371.080559] ? ion_dma_buf_release+0x40/0x40 [ 371.080569] ? kasan_check_write+0x14/0x20 [ 371.080574] ion_ioctl+0xe2/0x1b6 [ 371.080579] ? ion_alloc.cold.15+0x32/0x32 [ 371.080591] do_vfs_ioctl+0x180/0xfb0 [ 371.080598] ? __fget+0x1ad/0x2f0 [ 371.080605] ? ioctl_preallocate+0x1a0/0x1a0 [ 371.120086] 0 pages HighMem/MovableOnly [ 371.123946] ? __fget+0x1ca/0x2f0 [ 371.131621] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 371.138839] ? security_file_ioctl+0x6a/0xa0 [ 371.180075] 335868 pages reserved [ 371.180711] ? SyS_clock_settime+0x1a0/0x1a0 [ 371.183104] 0 pages cma reserved [ 371.186631] ? security_file_ioctl+0x6a/0xa0 [ 371.188852] Out of memory: Kill process 8116 (syz-executor.3) score 999 or sacrifice child [ 371.190822] SyS_ioctl+0x74/0x80 [ 371.190828] ? do_vfs_ioctl+0xfb0/0xfb0 [ 371.190835] do_syscall_64+0x1c7/0x5b0 [ 371.190840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.190853] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 371.190858] RIP: 0033:0x45af49 [ 371.190860] RSP: 002b:00007efef08edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.190866] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 371.190872] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 371.220219] lowmem_reserve[]: [ 371.221047] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 371.223003] 0 [ 371.224959] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef08ee6d4 [ 371.227346] 0 [ 371.229600] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 371.237119] (UME) [ 371.272275] IPVS: ftp: loaded support on port[0] = 21 [ 371.276583] 6*128kB [ 371.290625] syz-executor.4: [ 371.295049] warn_alloc_show_mem: 2 callbacks suppressed [ 371.295052] Mem-Info: [ 371.326878] page allocation failure: order:4 [ 371.336703] (UME) [ 371.373459] 0 [ 371.375146] active_anon:5324 inactive_anon:194 isolated_anon:12 [ 371.375146] active_file:291 inactive_file:353 isolated_file:12 [ 371.375146] unevictable:0 dirty:28 writeback:0 unstable:0 [ 371.375146] slab_reclaimable:12929 slab_unreclaimable:99272 [ 371.375146] mapped:573 shmem:250 pagetables:439 bounce:0 [ 371.375146] free:41520 free_pcp:61 free_cma:0 [ 371.378286] 0 [ 371.387203] 3*256kB [ 371.394541] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 371.403365] Node 0 active_anon:21092kB inactive_anon:772kB active_file:112kB inactive_file:332kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:256kB dirty:8kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 371.430152] Killed process 8117 (syz-executor.3) total-vm:38036kB, anon-rss:128kB, file-rss:692kB, shmem-rss:0kB [ 371.433737] (UME) [ 371.452641] 0 [ 371.460529] Node 1 active_anon:204kB inactive_anon:4kB active_file:1052kB inactive_file:1080kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:2036kB dirty:104kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 371.469771] (null) [ 371.475429] oom_reaper: reaped process 8117 (syz-executor.3), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 371.504349] 1*512kB [ 371.521872] Node 1 [ 371.522892] Node 0 [ 371.536231] Normal free:88336kB min:53504kB low:66880kB high:80256kB active_anon:204kB inactive_anon:4kB active_file:1092kB inactive_file:1824kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:104kB bounce:0kB free_pcp:352kB local_pcp:212kB free_cma:0kB [ 371.539310] DMA free:10408kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 371.553205] syz-executor.4 cpuset= [ 371.557685] (E) [ 371.568930] chnl_net:caif_netlink_parms(): no params data found [ 371.570903] lowmem_reserve[]: [ 371.580220] lowmem_reserve[]: [ 371.582524] 3*1024kB [ 371.593452] 0 [ 371.595937] (UME) [ 371.610070] syz4 [ 371.611039] 0 [ 371.622985] mems_allowed=0-1 [ 371.622997] CPU: 1 PID: 8104 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 371.623000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.623003] Call Trace: [ 371.623016] dump_stack+0xf7/0x13b [ 371.623027] warn_alloc.cold.110+0xa2/0x1be [ 371.623032] ? zone_watermark_ok_safe+0x260/0x260 [ 371.623048] ? __alloc_pages_direct_compact+0xc2/0x330 [ 371.623056] __alloc_pages_slowpath+0x2052/0x2650 [ 371.623071] ? trace_hardirqs_off+0x10/0x10 [ 371.623079] ? warn_alloc+0x100/0x100 [ 371.623084] ? get_page_from_freelist+0x1046/0x23b0 [ 371.623099] ? __might_sleep+0x93/0xb0 [ 371.623106] __alloc_pages_nodemask+0x60d/0x770 [ 371.623110] ? trace_hardirqs_off+0x10/0x10 [ 371.623117] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 371.623124] ? __alloc_pages_slowpath+0x2650/0x2650 [ 371.623131] ? wait_for_completion+0x440/0x440 [ 371.623141] alloc_pages_current+0xd6/0x1b0 [ 371.623151] ion_page_pool_alloc+0x102/0x180 [ 371.623157] ion_system_heap_allocate+0x14e/0x930 [ 371.628173] 2570 [ 371.632656] ? do_raw_spin_unlock+0x16a/0x250 [ 371.632666] ? ion_system_heap_free+0x270/0x270 [ 371.632674] ion_alloc+0x27f/0x770 [ 371.632683] ? ion_dma_buf_release+0x40/0x40 [ 371.632694] ? kasan_check_write+0x14/0x20 [ 371.632700] ion_ioctl+0xe2/0x1b6 [ 371.632705] ? ion_alloc.cold.15+0x32/0x32 [ 371.632717] do_vfs_ioctl+0x180/0xfb0 [ 371.632724] ? __fget+0x1ad/0x2f0 [ 371.632730] ? ioctl_preallocate+0x1a0/0x1a0 [ 371.632738] ? __fget+0x1ca/0x2f0 [ 371.632749] ? security_file_ioctl+0x6a/0xa0 [ 371.632754] ? SyS_clock_settime+0x1a0/0x1a0 [ 371.632758] ? security_file_ioctl+0x6a/0xa0 [ 371.632764] SyS_ioctl+0x74/0x80 [ 371.632769] ? do_vfs_ioctl+0xfb0/0xfb0 [ 371.632775] do_syscall_64+0x1c7/0x5b0 [ 371.632780] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.632790] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 371.632796] RIP: 0033:0x45af49 [ 371.632800] RSP: 002b:00007ffa6e582c78 EFLAGS: 00000246 [ 371.637980] 2*2048kB [ 371.640987] ORIG_RAX: 0000000000000010 [ 371.640990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 371.640993] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 371.640995] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 371.640998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5836d4 [ 371.641000] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 371.663172] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 371.670830] 2570 [ 371.673494] ------------[ cut here ]------------ [ 371.673510] WARNING: CPU: 1 PID: 8107 at lib/debugobjects.c:290 debug_print_object.cold.13+0xa7/0xdb [ 371.673514] Kernel panic - not syncing: panic_on_warn set ... [ 371.673514] [ 371.673521] CPU: 1 PID: 8107 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 371.673524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.673527] Call Trace: [ 371.673538] dump_stack+0xf7/0x13b [ 371.673544] ? debug_print_object.cold.13+0xa7/0xdb [ 371.673551] panic+0x1b0/0x358 [ 371.673556] ? add_taint.cold.5+0x11/0x11 [ 371.673568] ? debug_print_object.cold.13+0xa7/0xdb [ 371.673572] __warn.cold.8+0x25/0x2c [ 371.673577] ? debug_print_object.cold.13+0xa7/0xdb [ 371.673582] report_bug+0x1a4/0x1f3 [ 371.673593] do_error_trap+0x1bd/0x310 [ 371.673599] ? math_error+0x300/0x300 [ 371.673610] ? vprintk_emit+0x1be/0x4e0 [ 371.673620] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.673628] do_invalid_op+0x1b/0x20 [ 371.673636] invalid_op+0x1b/0x40 [ 371.673640] RIP: 0010:debug_print_object.cold.13+0xa7/0xdb [ 371.673644] RSP: 0018:ffff88804732f038 EFLAGS: 00010082 [ 371.673650] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 371.673653] RDX: 0000000000000061 RSI: 0000000000000000 RDI: ffffed1008e65dfe [ 371.673656] RBP: ffff88804732f060 R08: 0000000000000001 R09: 0000000000000000 [ 371.673660] R10: 0000000000000078 R11: ffff8880a68c04c0 R12: ffffffff86cbdd80 [ 371.673663] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87f934a0 [ 371.673675] ? debug_print_object.cold.13+0xa7/0xdb [ 371.673682] debug_object_assert_init+0x24d/0x370 [ 371.673689] ? debug_object_init_on_stack+0x20/0x20 [ 371.673701] del_timer+0x6c/0xf0 [ 371.673705] ? trigger_dyntick_cpu.isra.24+0x1a0/0x1a0 [ 371.673713] ? trace_hardirqs_off+0x10/0x10 [ 371.673724] try_to_grab_pending+0x219/0x590 [ 371.677479] 2570 [ 371.702009] __cancel_work_timer+0x93/0x420 [ 371.702019] ? batadv_tvlv_handler_get+0x158/0x260 [ 371.702024] ? cancel_delayed_work+0x10/0x10 [ 371.702032] ? batadv_tvlv_handler_get+0x175/0x260 [ 371.702040] cancel_delayed_work_sync+0xe/0x10 [ 371.702048] batadv_nc_mesh_free+0x3e/0x116 [ 371.702052] batadv_mesh_free+0x73/0x160 [ 371.702056] batadv_mesh_init+0x531/0x600 [ 371.702061] batadv_softif_init_late+0xa32/0xd00 [ 371.702067] ? batadv_interface_stats+0x180/0x180 [ 371.702076] ? __lockdep_init_map+0x105/0x550 [ 371.702085] register_netdevice+0x252/0xe50 [ 371.702092] ? alloc_netdev_mqs+0x797/0xb40 [ 371.702099] ? security_capable+0x6f/0xa0 [ 371.702105] ? netdev_change_features+0x80/0x80 [ 371.702113] ? rtnl_create_link+0x1a8/0x950 [ 371.702119] ? ns_capable+0xe/0x10 [ 371.702128] ? __netlink_ns_capable+0xc3/0xf0 [ 371.702135] rtnl_newlink+0x10d8/0x1390 [ 371.702139] ? rtnl_newlink+0x329/0x1390 [ 371.702152] ? rtnl_link_unregister+0x270/0x270 [ 371.702156] ? avc_has_perm_noaudit+0x236/0x400 [ 371.702161] ? lock_downgrade+0x7f0/0x7f0 [ 371.702198] rtnetlink_rcv_msg+0x34c/0x9e0 [ 371.702204] ? rtnl_bridge_getlink+0x760/0x760 [ 371.702209] ? find_held_lock+0x36/0x1d0 [ 371.702217] netlink_rcv_skb+0x133/0x370 [ 371.702222] ? rtnl_bridge_getlink+0x760/0x760 [ 371.702227] ? netlink_ack+0xa00/0xa00 [ 371.702235] ? netlink_deliver_tap+0x8e/0x920 [ 371.702249] rtnetlink_rcv+0x10/0x20 [ 371.702252] netlink_unicast+0x40b/0x600 [ 371.702260] ? netlink_attachskb+0x6d0/0x6d0 [ 371.702267] netlink_sendmsg+0x730/0xbd0 [ 371.702274] ? netlink_unicast+0x600/0x600 [ 371.702281] ? selinux_socket_sendmsg+0x31/0x40 [ 371.702286] ? security_socket_sendmsg+0x6a/0xa0 [ 371.702290] ? netlink_unicast+0x600/0x600 [ 371.702296] sock_sendmsg+0xb5/0xf0 [ 371.702302] SYSC_sendto+0x1e3/0x2c0 [ 371.702306] ? SYSC_connect+0x2a0/0x2a0 [ 371.702316] ? __fd_install+0x1f0/0x5b0 [ 371.702328] ? fd_install+0x47/0x60 [ 371.702336] ? SyS_socket+0xdd/0x1a0 [ 371.702340] ? task_work_run+0xbf/0x170 [ 371.702345] ? move_addr_to_kernel+0x20/0x20 [ 371.702353] ? do_syscall_64+0x4c/0x5b0 [ 371.702360] ? SyS_getpeername+0x10/0x10 [ 371.702364] SyS_sendto+0x9/0x10 [ 371.702368] do_syscall_64+0x1c7/0x5b0 [ 371.702373] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.702386] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 371.702392] RIP: 0033:0x414c43 [ 371.702395] RSP: 002b:00007fffdd460b68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 371.702402] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414c43 [ 371.702405] RDX: 000000000000003c RSI: 0000000000a72250 RDI: 0000000000000003 [ 371.702408] RBP: 0000000000000000 R08: 00007fffdd460b70 R09: 000000000000000c [ 371.702410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.702413] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003 [ 371.708943] Kernel Offset: disabled [ 372.760789] Rebooting in 86400 seconds..