[ 37.689348] audit: type=1800 audit(1583778510.884:33): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.726875] random: sshd: uninitialized urandom read (32 bytes read) [ 42.053236] kauditd_printk_skb: 1 callbacks suppressed [ 42.053245] audit: type=1400 audit(1583778515.254:35): avc: denied { map } for pid=7565 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 42.111011] random: sshd: uninitialized urandom read (32 bytes read) [ 42.951025] random: sshd: uninitialized urandom read (32 bytes read) [ 254.286209] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.222' (ECDSA) to the list of known hosts. [ 259.951122] random: sshd: uninitialized urandom read (32 bytes read) [ 260.284911] audit: type=1400 audit(1583778733.484:36): avc: denied { map } for pid=7577 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2020/03/09 18:32:13 parsed 1 programs [ 261.363466] random: cc1: uninitialized urandom read (8 bytes read) 2020/03/09 18:32:15 executed programs: 0 [ 262.363900] audit: type=1400 audit(1583778735.564:37): avc: denied { map } for pid=7577 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=67 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 262.440010] audit: type=1400 audit(1583778735.634:38): avc: denied { map } for pid=7577 comm="syz-execprog" path="/root/syzkaller-shm182654172" dev="sda1" ino=2233 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 262.781430] IPVS: ftp: loaded support on port[0] = 21 [ 263.566095] IPVS: ftp: loaded support on port[0] = 21 [ 263.654723] chnl_net:caif_netlink_parms(): no params data found [ 263.742812] IPVS: ftp: loaded support on port[0] = 21 [ 263.794982] chnl_net:caif_netlink_parms(): no params data found [ 263.865578] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.875130] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.884817] device bridge_slave_0 entered promiscuous mode [ 263.906353] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.916323] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.930210] device bridge_slave_1 entered promiscuous mode [ 263.981849] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 263.997696] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 264.033133] IPVS: ftp: loaded support on port[0] = 21 [ 264.079966] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.089088] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.098973] device bridge_slave_0 entered promiscuous mode [ 264.111530] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 264.122709] team0: Port device team_slave_0 added [ 264.152674] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.165344] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.175030] device bridge_slave_1 entered promiscuous mode [ 264.184444] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 264.193528] team0: Port device team_slave_1 added [ 264.263338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.272113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.302318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.323080] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 264.344894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.353032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.389411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.404347] chnl_net:caif_netlink_parms(): no params data found [ 264.417564] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 264.456397] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 264.482237] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 264.493040] team0: Port device team_slave_0 added [ 264.499732] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 264.515711] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 264.531571] team0: Port device team_slave_1 added [ 264.562987] IPVS: ftp: loaded support on port[0] = 21 [ 264.623228] device hsr_slave_0 entered promiscuous mode [ 264.680524] device hsr_slave_1 entered promiscuous mode [ 264.741167] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 264.755276] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 264.780228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.787207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.821852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.867011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.875554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.907119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.926050] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 264.945773] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 265.083976] device hsr_slave_0 entered promiscuous mode [ 265.140608] device hsr_slave_1 entered promiscuous mode [ 265.205004] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 265.256639] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 265.268769] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.277325] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.285653] device bridge_slave_0 entered promiscuous mode [ 265.297604] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.305645] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.313934] device bridge_slave_1 entered promiscuous mode [ 265.336609] chnl_net:caif_netlink_parms(): no params data found [ 265.384886] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 265.403521] IPVS: ftp: loaded support on port[0] = 21 [ 265.444349] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 265.511318] audit: type=1400 audit(1583778738.714:39): avc: denied { create } for pid=7603 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 265.554366] audit: type=1400 audit(1583778738.754:40): avc: denied { write } for pid=7603 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 265.590279] audit: type=1400 audit(1583778738.784:41): avc: denied { read } for pid=7603 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 265.591465] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 265.626653] team0: Port device team_slave_0 added [ 265.664541] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 265.672860] team0: Port device team_slave_1 added [ 265.812249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.819353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.847823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.874051] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.883981] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.891908] device bridge_slave_0 entered promiscuous mode [ 265.905400] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 265.914666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.922368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.966337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.982274] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 265.991029] chnl_net:caif_netlink_parms(): no params data found [ 266.018516] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.026326] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.037435] device bridge_slave_1 entered promiscuous mode [ 266.054666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 266.125404] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 266.172770] device hsr_slave_0 entered promiscuous mode [ 266.220585] device hsr_slave_1 entered promiscuous mode [ 266.323403] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 266.332924] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 266.363016] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 266.372646] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 266.392096] chnl_net:caif_netlink_parms(): no params data found [ 266.493655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.503362] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 266.514152] team0: Port device team_slave_0 added [ 266.570586] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 266.581528] team0: Port device team_slave_1 added [ 266.601728] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 266.611194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.623888] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.633492] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.646415] device bridge_slave_0 entered promiscuous mode [ 266.668560] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 266.693389] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.699989] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.711340] device bridge_slave_1 entered promiscuous mode [ 266.722583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.732903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.743600] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 266.762702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.769705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.801610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.817947] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 266.828621] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.863660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.870802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.901872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.918757] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 266.935720] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 266.949099] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 266.964718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 266.983611] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 266.999505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 267.023855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.032821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.043158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.054148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.063606] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.076394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.108123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.147706] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 267.156182] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.164861] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 267.172797] team0: Port device team_slave_0 added [ 267.181827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 267.191979] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.199819] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.208272] device bridge_slave_0 entered promiscuous mode [ 267.252942] device hsr_slave_0 entered promiscuous mode [ 267.290743] device hsr_slave_1 entered promiscuous mode [ 267.331573] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 267.345566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.354748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.365808] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.372476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.382973] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 267.393521] team0: Port device team_slave_1 added [ 267.415118] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.424572] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.436063] device bridge_slave_1 entered promiscuous mode [ 267.454228] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 267.487285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 267.500981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 267.511167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 267.530961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.541477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.575184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.586637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.595404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.606570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.615593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.626312] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.635372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.659005] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 267.675667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.684410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.714554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.726939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.738719] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 267.749591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 267.759618] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 267.776802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 267.786711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 267.800136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.808373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.819526] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.829606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.842852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.854721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.884682] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 267.898721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 267.918463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.929200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.938069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.949045] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 267.987729] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 267.998826] team0: Port device team_slave_0 added [ 268.007716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.022660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 268.105051] device hsr_slave_0 entered promiscuous mode [ 268.160712] device hsr_slave_1 entered promiscuous mode [ 268.221415] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 268.231817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 268.239180] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 268.248317] team0: Port device team_slave_1 added [ 268.264177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.274614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.284056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.305354] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 268.336346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.344997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.376196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.404307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 268.415046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 268.425669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.433381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.473125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.496089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.511497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.522505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.531923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.542106] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.563318] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 268.578945] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 268.587879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.607885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 268.631153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 268.654166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.666436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.683711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 268.764077] device hsr_slave_0 entered promiscuous mode [ 268.810451] device hsr_slave_1 entered promiscuous mode [ 268.851099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.862491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.875033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 268.905682] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 268.917559] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 268.931058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.942897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.953663] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 268.961840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.986972] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 268.997128] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 269.035573] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 269.053444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.065951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.086566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.122511] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 269.156845] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 269.168361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.177514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.205489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.266556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.278891] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 269.372295] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 269.402879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.414404] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 269.445571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.461297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.475676] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 269.487061] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 269.496406] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 269.508435] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.523611] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 269.550919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.561452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.574480] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 269.587617] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 269.594192] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.616317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 269.629830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 269.641088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.652624] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 269.659797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.671042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.679048] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.686703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.696640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.707656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.716695] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.724188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.735843] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 269.744732] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 269.765616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 269.781683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 269.791704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.801394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.812109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.821595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.829652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.839410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.848464] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.855739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.866951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.879472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 269.889516] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 269.902189] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 269.912451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.926253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.934637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.948671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.959072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.974316] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 269.985730] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 270.002678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.012705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.022917] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.030354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.038188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.046998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.055129] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.068470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 270.079978] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 270.091983] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 270.098931] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.113989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.127070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.137615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.151823] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 270.159723] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 270.168639] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 270.181948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 270.197095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 270.206383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 270.217778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 270.226649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.235875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.244297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.252703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.261662] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.268214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.275518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.288513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.297028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.309336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.321826] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.334336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 270.345383] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 270.353188] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 270.362616] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 270.375908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 270.387946] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 270.406451] device veth0_vlan entered promiscuous mode [ 270.415721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.428295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.436693] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.443333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.450899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.459182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.467128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.474788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.484125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.491622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.501882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 270.515067] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 270.527694] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 270.537975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.553428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.565223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.574211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.582442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.590820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.597997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.607028] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 270.618833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 270.630705] device veth1_vlan entered promiscuous mode [ 270.637037] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 270.647654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.657790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.667278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.679080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.687731] device veth0_vlan entered promiscuous mode [ 270.701686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 270.709731] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 270.723176] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 270.731443] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 270.747899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.756832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 270.765873] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.775009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.784232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.792308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.800013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.807341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.819687] device veth1_vlan entered promiscuous mode [ 270.827810] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 270.847124] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 270.856803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 270.867964] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 270.876827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.888400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.902563] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 270.909320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.921690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.929715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.938933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.952241] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 270.961493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 270.974010] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 270.983970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.998037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.007248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.016088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.024540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.036387] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 271.044467] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.055041] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 271.070908] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 271.087111] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 271.094674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.105284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.113693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.123391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.134887] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 271.148521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 271.162399] device veth0_macvtap entered promiscuous mode [ 271.170012] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 271.185765] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 271.194303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.201930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.209968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.218688] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.225891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.233924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.241807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.251855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.259104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.268233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.279834] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 271.290888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.304093] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 271.316211] device veth1_macvtap entered promiscuous mode [ 271.324656] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 271.341740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.362805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 271.375188] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.390915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.399013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.409287] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.419151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.435566] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 271.452644] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 271.471619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.484418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.495363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.507717] device veth0_macvtap entered promiscuous mode [ 271.514995] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 271.526967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 271.544616] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 271.556443] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 271.569606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 271.583008] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.593170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.601477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.610802] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 271.621149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 271.630716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.652546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.664489] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 271.676499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.698817] device veth1_macvtap entered promiscuous mode [ 271.706736] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 271.715016] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.727174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.737106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.806184] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 271.817315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 271.835501] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 271.845418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.856731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 271.868365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.877180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.886836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.897341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.905314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.914658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.923442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.934946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 271.946546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 271.974488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.985449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.005001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.017872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.031908] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 272.041603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.057643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 272.074539] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 272.085935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.097012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.107922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.117064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.129164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.145777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.158833] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 272.168475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.181604] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 272.189032] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 272.197703] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 272.210784] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 272.219302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.229899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.241299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.249522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.281330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 272.294749] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 272.302802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.322877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.331827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.342888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.359104] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 272.365946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.383702] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 272.399028] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 272.411632] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 272.420964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.434061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.453389] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 272.467103] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 272.484087] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 272.497157] device veth0_vlan entered promiscuous mode [ 272.519145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.528141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.538175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.548191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.559911] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 272.569656] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 272.587410] device veth1_vlan entered promiscuous mode [ 272.605435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.617466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.632428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.648539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.659673] device veth0_vlan entered promiscuous mode [ 272.675743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.697567] device veth1_vlan entered promiscuous mode [ 272.712818] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 272.737776] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 272.756178] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 272.784706] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 272.827723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.839621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.859664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.870866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.886840] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 272.903111] device veth0_macvtap entered promiscuous mode [ 272.913025] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 272.934601] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 272.954191] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 272.965642] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 272.974811] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 272.983250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.997002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.007476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.020973] device veth1_macvtap entered promiscuous mode [ 273.028324] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 273.039502] device veth0_macvtap entered promiscuous mode [ 273.047848] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 273.059387] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 273.081605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.089294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.109794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.123232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.135554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.145354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.156821] device veth0_vlan entered promiscuous mode [ 273.166584] device veth1_macvtap entered promiscuous mode [ 273.175108] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 273.184882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 273.203908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 273.233834] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 273.250497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 273.273987] device veth1_vlan entered promiscuous mode [ 273.293162] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 273.308704] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 273.320883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.345906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.359322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.380285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.404966] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 273.429887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.453153] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 273.477504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.499800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.525005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.549180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.578115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.615740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.662726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.689177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.711052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.740162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.762546] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 273.771515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.782094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.798441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.808009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.823211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.835993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.850579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.867150] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 273.876668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.912603] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 273.941552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.959631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.988418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.025109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.068832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.111895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.158120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.192055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.219776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.257628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.281329] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 274.297808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.329310] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 274.349707] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 274.372689] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 274.393925] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 274.419987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.449358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.478545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.508069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.545089] device veth0_macvtap entered promiscuous mode [ 274.559394] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 274.583861] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 274.609005] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.627004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.653967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.692960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.728500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.757121] device veth1_macvtap entered promiscuous mode [ 274.779407] device veth0_vlan entered promiscuous mode [ 274.816246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 274.870665] device veth1_vlan entered promiscuous mode [ 274.891927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 274.944864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.972533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.996030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.026944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.065128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.111141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.164328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.177318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.193948] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 275.204476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.226830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.251232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.268981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.292745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.307582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.318078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.333705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.344764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.358490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.371710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.392323] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 275.399839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.443989] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 275.457700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.478235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.532485] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 275.574807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.598868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.641081] device veth0_macvtap entered promiscuous mode [ 275.647870] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 275.668476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.690973] device veth1_macvtap entered promiscuous mode [ 275.731924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 275.770337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 275.798852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.835614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.860122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.870009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.890347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.890351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.890362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.890365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.890374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.890377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.891899] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 275.892022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.928147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.928154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.928159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.928163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.928170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.928173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 2020/03/09 18:32:29 executed programs: 6 [ 275.928178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.928181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.928186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.928189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.929587] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 275.929611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.477535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.487113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.495727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.506619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.596702] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 278.603567] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 278.655547] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 278.683581] CPU: 0 PID: 7899 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 278.692617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.702701] Call Trace: [ 278.704979] syz-executor.4 cpuset=syz4 [ 278.705464] dump_stack+0x13e/0x194 [ 278.705470] mems_allowed=0-1 [ 278.716378] warn_alloc.cold+0x96/0x1af [ 278.720435] ? zone_watermark_ok_safe+0x280/0x280 [ 278.726234] ? __alloc_pages_direct_compact+0xba/0x360 [ 278.732687] __alloc_pages_slowpath+0x2114/0x26c0 [ 278.737804] ? save_trace+0x290/0x290 [ 278.741774] ? warn_alloc+0xf0/0xf0 [ 278.745998] __alloc_pages_nodemask+0x5d3/0x700 [ 278.750825] ? lock_downgrade+0x6e0/0x6e0 [ 278.755036] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 278.760548] alloc_pages_current+0xe7/0x1e0 [ 278.765325] ion_page_pool_alloc+0x118/0x1b0 [ 278.769912] ion_system_heap_allocate+0x134/0x8d0 [ 278.775544] ? rcu_read_lock_sched_held+0x10a/0x130 [ 278.781617] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 278.787293] ? ion_system_heap_free+0x240/0x240 [ 278.792888] ion_alloc+0x1e9/0x7d0 [ 278.796486] ? ion_dma_buf_release+0x40/0x40 [ 278.801234] ? __might_fault+0x177/0x1b0 [ 278.805607] ion_ioctl+0xef/0x1f8 [ 278.809415] ? ion_alloc.cold+0x3d/0x3d [ 278.813924] ? selinux_file_ioctl+0x3f7/0x560 [ 278.819254] ? ion_alloc.cold+0x3d/0x3d [ 278.823352] do_vfs_ioctl+0x75a/0xfe0 [ 278.827393] ? selinux_file_mprotect+0x5c0/0x5c0 [ 278.832187] ? ioctl_preallocate+0x1a0/0x1a0 [ 278.836766] ? _copy_to_user+0x82/0xd0 [ 278.840886] ? put_timespec64+0xaa/0xf0 [ 278.845133] ? nsecs_to_jiffies+0x30/0x30 [ 278.850185] ? security_file_ioctl+0x76/0xb0 [ 278.855036] ? security_file_ioctl+0x83/0xb0 [ 278.859764] SyS_ioctl+0x7f/0xb0 [ 278.863784] ? do_vfs_ioctl+0xfe0/0xfe0 [ 278.867912] do_syscall_64+0x1d5/0x640 [ 278.872946] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 278.879825] RIP: 0033:0x45c4a9 [ 278.883148] RSP: 002b:00007ffcdb28dbb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.891255] RAX: ffffffffffffffda RBX: 0000000001d74914 RCX: 000000000045c4a9 [ 278.899348] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 278.908474] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 278.917710] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 278.926957] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 278.936435] CPU: 1 PID: 7881 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 278.944270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.954802] Call Trace: [ 278.957450] dump_stack+0x13e/0x194 [ 278.961124] warn_alloc.cold+0x96/0x1af [ 278.965215] ? zone_watermark_ok_safe+0x280/0x280 [ 278.970120] ? __alloc_pages_direct_compact+0xba/0x360 [ 278.975637] __alloc_pages_slowpath+0x2114/0x26c0 [ 278.980612] ? save_trace+0x290/0x290 [ 278.984470] ? warn_alloc+0xf0/0xf0 [ 278.988266] __alloc_pages_nodemask+0x5d3/0x700 [ 278.993507] ? lock_downgrade+0x6e0/0x6e0 [ 278.998325] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 279.004581] alloc_pages_current+0xe7/0x1e0 [ 279.009201] ion_page_pool_alloc+0x118/0x1b0 [ 279.013845] ion_system_heap_allocate+0x134/0x8d0 [ 279.020199] ? rcu_read_lock_sched_held+0x10a/0x130 [ 279.025255] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 279.030403] ? ion_system_heap_free+0x240/0x240 [ 279.035208] ion_alloc+0x1e9/0x7d0 [ 279.039083] ? ion_dma_buf_release+0x40/0x40 [ 279.043550] ? __might_fault+0x177/0x1b0 [ 279.047744] ion_ioctl+0xef/0x1f8 [ 279.051537] ? ion_alloc.cold+0x3d/0x3d [ 279.055609] ? selinux_file_ioctl+0x3f7/0x560 [ 279.060915] ? ion_alloc.cold+0x3d/0x3d [ 279.065250] do_vfs_ioctl+0x75a/0xfe0 [ 279.069745] ? selinux_file_mprotect+0x5c0/0x5c0 [ 279.074892] ? ioctl_preallocate+0x1a0/0x1a0 [ 279.079700] ? _copy_to_user+0x82/0xd0 [ 279.083721] ? put_timespec64+0xaa/0xf0 [ 279.088290] ? nsecs_to_jiffies+0x30/0x30 [ 279.093101] ? security_file_ioctl+0x76/0xb0 [ 279.097630] ? security_file_ioctl+0x83/0xb0 [ 279.103409] SyS_ioctl+0x7f/0xb0 [ 279.108503] ? do_vfs_ioctl+0xfe0/0xfe0 [ 279.112966] do_syscall_64+0x1d5/0x640 [ 279.117516] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 279.123641] RIP: 0033:0x45c4a9 [ 279.127372] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.136535] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 279.144877] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 279.156088] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 279.166051] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 279.174775] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 279.907138] Mem-Info: [ 279.919991] active_anon:6090 inactive_anon:196 isolated_anon:0 [ 279.919991] active_file:659 inactive_file:634 isolated_file:12 [ 279.919991] unevictable:0 dirty:0 writeback:0 unstable:0 [ 279.919991] slab_reclaimable:11549 slab_unreclaimable:104254 [ 279.919991] mapped:1027 shmem:250 pagetables:452 bounce:0 [ 279.919991] free:29122 free_pcp:194 free_cma:0 [ 280.043219] Node 0 active_anon:24356kB inactive_anon:784kB active_file:996kB inactive_file:1060kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:1008kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 280.128924] Node 1 active_anon:4kB inactive_anon:0kB active_file:124kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 280.195103] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.258859] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 280.266849] Node 0 DMA32 free:45112kB min:36272kB low:45340kB high:54408kB active_anon:24364kB inactive_anon:784kB active_file:340kB inactive_file:468kB unevictable:0kB writepending:32kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7200kB pagetables:1808kB bounce:0kB free_pcp:848kB local_pcp:160kB free_cma:0kB [ 280.369592] lowmem_reserve[]: 0 0 0 0 0 [ 280.405593] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.498108] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 280.515476] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 280.524032] lowmem_reserve[]: 0 0 0 0 0 [ 280.528413] Node 1 Normal free:53216kB min:53612kB low:67012kB high:80412kB active_anon:4kB inactive_anon:0kB active_file:628kB inactive_file:952kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:836kB local_pcp:536kB free_cma:0kB [ 280.529173] CPU: 0 PID: 7893 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 280.571675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.581888] Call Trace: [ 280.584545] dump_stack+0x13e/0x194 [ 280.588681] warn_alloc.cold+0x96/0x1af [ 280.593076] ? zone_watermark_ok_safe+0x280/0x280 [ 280.598196] ? __alloc_pages_direct_compact+0xba/0x360 [ 280.608536] __alloc_pages_slowpath+0x2114/0x26c0 [ 280.613881] ? save_trace+0x290/0x290 [ 280.617813] ? warn_alloc+0xf0/0xf0 [ 280.621489] __alloc_pages_nodemask+0x5d3/0x700 [ 280.626519] ? lock_downgrade+0x6e0/0x6e0 [ 280.631477] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 280.636909] alloc_pages_current+0xe7/0x1e0 [ 280.641289] ion_page_pool_alloc+0x118/0x1b0 [ 280.646112] ion_system_heap_allocate+0x134/0x8d0 [ 280.650093] lowmem_reserve[]: 0 [ 280.651962] ? rcu_read_lock_sched_held+0x10a/0x130 [ 280.651974] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 280.657223] 0 [ 280.663604] ? ion_system_heap_free+0x240/0x240 [ 280.663618] ion_alloc+0x1e9/0x7d0 [ 280.663630] ? ion_dma_buf_release+0x40/0x40 [ 280.663643] ? __might_fault+0x177/0x1b0 [ 280.663655] ion_ioctl+0xef/0x1f8 [ 280.693741] ? ion_alloc.cold+0x3d/0x3d [ 280.697769] ? selinux_file_ioctl+0x3f7/0x560 [ 280.700118] 0 [ 280.703004] ? ion_alloc.cold+0x3d/0x3d [ 280.703020] do_vfs_ioctl+0x75a/0xfe0 [ 280.706859] 0 [ 280.712564] ? selinux_file_mprotect+0x5c0/0x5c0 [ 280.712578] ? ioctl_preallocate+0x1a0/0x1a0 [ 280.712587] ? _copy_to_user+0x82/0xd0 [ 280.712597] ? put_timespec64+0xaa/0xf0 [ 280.712604] ? nsecs_to_jiffies+0x30/0x30 [ 280.712620] ? security_file_ioctl+0x76/0xb0 [ 280.736099] 0 [ 280.739359] ? security_file_ioctl+0x83/0xb0 [ 280.748990] SyS_ioctl+0x7f/0xb0 [ 280.752975] Node 0 [ 280.756581] ? do_vfs_ioctl+0xfe0/0xfe0 [ 280.760153] DMA: [ 280.762505] do_syscall_64+0x1d5/0x640 [ 280.767114] 4*4kB [ 280.769431] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 280.774330] (UE) [ 280.777416] RIP: 0033:0x45c4a9 [ 280.783005] 4*8kB [ 280.785049] RSP: 002b:00007ffc25dc5628 EFLAGS: 00000246 [ 280.788423] (UE) [ 280.790588] ORIG_RAX: 0000000000000010 [ 280.790595] RAX: ffffffffffffffda RBX: 000000000164f914 RCX: 000000000045c4a9 [ 280.790599] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 280.790603] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 280.790607] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 280.790610] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 280.849518] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 280.849545] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 280.849619] CPU: 0 PID: 7897 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 280.849630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.870339] 2*16kB [ 280.877588] Call Trace: [ 280.887914] (UE) [ 280.891010] dump_stack+0x13e/0x194 [ 280.891023] warn_alloc.cold+0x96/0x1af [ 280.891031] ? zone_watermark_ok_safe+0x280/0x280 [ 280.891046] ? __alloc_pages_direct_compact+0xba/0x360 [ 280.893651] 2*32kB [ 280.897151] __alloc_pages_slowpath+0x2114/0x26c0 [ 280.900865] (UE) [ 280.905013] ? save_trace+0x290/0x290 [ 280.910776] 1*64kB [ 280.916427] ? warn_alloc+0xf0/0xf0 [ 280.919141] (E) [ 280.924389] __alloc_pages_nodemask+0x5d3/0x700 [ 280.924404] ? lock_downgrade+0x6e0/0x6e0 [ 280.924412] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 280.924419] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 280.924436] alloc_pages_current+0xe7/0x1e0 [ 280.926496] 2*128kB [ 280.930309] ion_page_pool_alloc+0x118/0x1b0 [ 280.930319] ion_system_heap_allocate+0x134/0x8d0 [ 280.930338] ? rcu_read_lock_sched_held+0x10a/0x130 [ 280.930346] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 280.930356] ? ion_system_heap_free+0x240/0x240 [ 280.932591] (UE) [ 280.936314] ion_alloc+0x1e9/0x7d0 [ 280.938355] 1*256kB (E) [ 280.943424] ? ion_dma_buf_release+0x40/0x40 [ 280.943439] ? __might_fault+0x177/0x1b0 [ 280.943450] ion_ioctl+0xef/0x1f8 [ 280.943459] ? ion_alloc.cold+0x3d/0x3d [ 280.943473] ? selinux_file_ioctl+0x3f7/0x560 [ 280.947865] 1*512kB [ 280.952814] ? ion_alloc.cold+0x3d/0x3d [ 280.952828] do_vfs_ioctl+0x75a/0xfe0 [ 280.952840] ? selinux_file_mprotect+0x5c0/0x5c0 [ 280.952848] ? ioctl_preallocate+0x1a0/0x1a0 [ 280.952856] ? _copy_to_user+0x82/0xd0 [ 280.952869] ? put_timespec64+0xaa/0xf0 [ 280.957909] (E) [ 280.963398] ? nsecs_to_jiffies+0x30/0x30 [ 280.963416] ? security_file_ioctl+0x76/0xb0 [ 280.963422] ? security_file_ioctl+0x83/0xb0 [ 280.963435] SyS_ioctl+0x7f/0xb0 [ 280.963455] ? do_vfs_ioctl+0xfe0/0xfe0 [ 280.963475] do_syscall_64+0x1d5/0x640 [ 280.965906] 1*1024kB [ 280.970852] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 280.970885] RIP: 0033:0x45c4a9 [ 280.970898] RSP: 002b:00007ffeeb954df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.970918] RAX: ffffffffffffffda RBX: 0000000000f0b914 RCX: 000000000045c4a9 [ 280.970927] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 280.975901] (E) [ 280.980971] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 280.980978] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 280.980981] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 281.011351] warn_alloc_show_mem: 2 callbacks suppressed [ 281.011356] Mem-Info: [ 281.017495] oom_reaper: reaped process 7881 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 281.038412] active_anon:6092 inactive_anon:196 isolated_anon:0 [ 281.038412] active_file:58 inactive_file:17 isolated_file:38 [ 281.038412] unevictable:0 dirty:1 writeback:7 unstable:0 [ 281.038412] slab_reclaimable:11563 slab_unreclaimable:104260 [ 281.038412] mapped:43 shmem:250 pagetables:452 bounce:0 [ 281.038412] free:23550 free_pcp:77 free_cma:0 [ 281.093582] 2*2048kB [ 281.175826] Node 0 active_anon:24300kB inactive_anon:784kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 281.186219] oom_reaper: reaped process 7893 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 281.230534] syz-executor.5: [ 281.256369] syz-executor.3: [ 281.275621] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 281.304166] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 281.309424] Node 1 active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 281.343728] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 281.349926] CPU: 1 PID: 7902 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 281.358343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.365543] syz-executor.5 cpuset= [ 281.368416] Call Trace: [ 281.368418] syz5 mems_allowed=0-1 [ 281.373163] dump_stack+0x13e/0x194 [ 281.373179] warn_alloc.cold+0x96/0x1af [ 281.373187] ? zone_watermark_ok_safe+0x280/0x280 [ 281.373200] ? __alloc_pages_direct_compact+0xba/0x360 [ 281.373209] __alloc_pages_slowpath+0x2114/0x26c0 [ 281.373227] ? warn_alloc+0xf0/0xf0 [ 281.373243] __alloc_pages_nodemask+0x5d3/0x700 [ 281.373252] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 281.373337] ? wake_up_q+0x90/0xe0 [ 281.373359] alloc_pages_current+0xe7/0x1e0 [ 281.428738] ion_page_pool_alloc+0x118/0x1b0 [ 281.434314] ion_system_heap_allocate+0x134/0x8d0 [ 281.441613] ? rcu_read_lock_sched_held+0x10a/0x130 [ 281.449375] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 281.454654] ? ion_system_heap_free+0x240/0x240 [ 281.460015] ion_alloc+0x1e9/0x7d0 [ 281.463766] ? ion_dma_buf_release+0x40/0x40 [ 281.468894] ? __might_fault+0x177/0x1b0 [ 281.473609] ion_ioctl+0xef/0x1f8 [ 281.477473] ? ion_alloc.cold+0x3d/0x3d [ 281.481752] ? selinux_file_ioctl+0x3f7/0x560 [ 281.486740] ? ion_alloc.cold+0x3d/0x3d [ 281.490872] do_vfs_ioctl+0x75a/0xfe0 [ 281.495067] ? selinux_file_mprotect+0x5c0/0x5c0 [ 281.500072] ? ioctl_preallocate+0x1a0/0x1a0 [ 281.505224] ? _copy_to_user+0x82/0xd0 [ 281.509841] ? put_timespec64+0xaa/0xf0 [ 281.514081] syz-executor.4: page allocation failure: order:0 [ 281.514806] ? nsecs_to_jiffies+0x30/0x30 [ 281.514823] ? security_file_ioctl+0x76/0xb0 [ 281.531478] ? security_file_ioctl+0x83/0xb0 [ 281.537790] SyS_ioctl+0x7f/0xb0 [ 281.541379] ? do_vfs_ioctl+0xfe0/0xfe0 [ 281.545853] do_syscall_64+0x1d5/0x640 [ 281.549918] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 281.554163] Node 0 [ 281.555954] RIP: 0033:0x45c4a9 [ 281.555971] DMA free:10336kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.555978] lowmem_reserve[]: [ 281.558587] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.575460] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 281.590321] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 281.590327] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 281.590331] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 281.590335] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 281.590338] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 281.600925] (ME) [ 281.604709] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 281.609428] 1*4096kB (M) = 10448kB [ 281.609441] Node 0 DMA32: 89*4kB (UME) 102*8kB (ME) 31*16kB (UME) 482*32kB (UME) 4*64kB (U) 2*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18116kB [ 281.609545] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 281.628118] CPU: 0 PID: 7896 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 281.633588] syz-executor.0: [ 281.641467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.641473] Call Trace: [ 281.641504] dump_stack+0x13e/0x194 [ 281.641517] warn_alloc.cold+0x96/0x1af [ 281.641525] ? zone_watermark_ok_safe+0x280/0x280 [ 281.641539] ? __alloc_pages_direct_compact+0xba/0x360 [ 281.654175] page allocation failure: order:0 [ 281.663446] __alloc_pages_slowpath+0x2114/0x26c0 [ 281.663465] ? save_trace+0x290/0x290 [ 281.663477] ? warn_alloc+0xf0/0xf0 [ 281.663495] __alloc_pages_nodemask+0x5d3/0x700 [ 281.667172] 0*128kB [ 281.681772] ? lock_downgrade+0x6e0/0x6e0 [ 281.681783] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 281.681806] alloc_pages_current+0xe7/0x1e0 [ 281.681822] ion_page_pool_alloc+0x118/0x1b0 [ 281.688362] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 281.696955] ion_system_heap_allocate+0x134/0x8d0 [ 281.696968] ? rcu_read_lock_sched_held+0x10a/0x130 [ 281.696976] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 281.696983] ? ion_system_heap_free+0x240/0x240 [ 281.696998] ion_alloc+0x1e9/0x7d0 [ 281.700196] (null) [ 281.709925] ? ion_dma_buf_release+0x40/0x40 [ 281.713143] 0*256kB [ 281.717082] ? __might_fault+0x177/0x1b0 [ 281.721141] 0*512kB [ 281.726529] ion_ioctl+0xef/0x1f8 [ 281.732159] syz-executor.0 cpuset= [ 281.736540] ? ion_alloc.cold+0x3d/0x3d [ 281.742534] 0*1024kB [ 281.746328] ? selinux_file_ioctl+0x3f7/0x560 [ 281.750412] syz0 [ 281.755400] ? ion_alloc.cold+0x3d/0x3d [ 281.755417] do_vfs_ioctl+0x75a/0xfe0 [ 281.755430] ? selinux_file_mprotect+0x5c0/0x5c0 [ 281.758407] mems_allowed=0-1 [ 281.763200] ? ioctl_preallocate+0x1a0/0x1a0 [ 281.763213] ? _copy_to_user+0x82/0xd0 [ 281.763225] ? put_timespec64+0xaa/0xf0 [ 281.763232] ? nsecs_to_jiffies+0x30/0x30 [ 281.763245] ? security_file_ioctl+0x76/0xb0 [ 281.763257] ? security_file_ioctl+0x83/0xb0 [ 281.768313] 0*2048kB [ 281.772644] SyS_ioctl+0x7f/0xb0 [ 281.772654] ? do_vfs_ioctl+0xfe0/0xfe0 [ 281.772664] do_syscall_64+0x1d5/0x640 [ 281.772679] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 281.772690] RIP: 0033:0x45c4a9 [ 281.777410] 0*4096kB [ 281.784608] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.784618] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 281.784621] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 281.784625] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 281.784629] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 281.784633] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 281.805768] 0 [ 281.807858] CPU: 1 PID: 7893 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 281.809495] 2557 [ 281.811727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.811731] Call Trace: [ 281.811759] dump_stack+0x13e/0x194 [ 281.811772] warn_alloc.cold+0x96/0x1af [ 281.811780] ? zone_watermark_ok_safe+0x280/0x280 [ 281.811789] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 281.811805] __alloc_pages_slowpath+0x2114/0x26c0 [ 281.811822] ? warn_alloc+0xf0/0xf0 [ 281.811839] __alloc_pages_nodemask+0x5d3/0x700 [ 281.811853] ? lock_downgrade+0x6e0/0x6e0 [ 281.811861] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 281.811880] alloc_pages_current+0xe7/0x1e0 [ 281.811896] ion_page_pool_alloc+0x118/0x1b0 [ 281.811906] ion_system_heap_allocate+0x134/0x8d0 [ 281.811917] ? rcu_read_lock_sched_held+0x10a/0x130 [ 281.811922] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 281.811930] ? ion_system_heap_free+0x240/0x240 [ 281.811941] ion_alloc+0x1e9/0x7d0 [ 281.811951] ? ion_dma_buf_release+0x40/0x40 [ 281.811964] ? __might_fault+0x177/0x1b0 [ 281.811975] ion_ioctl+0xef/0x1f8 [ 281.811984] ? ion_alloc.cold+0x3d/0x3d [ 281.811999] ? selinux_file_ioctl+0x3f7/0x560 [ 281.812006] ? ion_alloc.cold+0x3d/0x3d [ 281.812017] do_vfs_ioctl+0x75a/0xfe0 [ 281.812026] ? selinux_file_mprotect+0x5c0/0x5c0 [ 281.812035] ? ioctl_preallocate+0x1a0/0x1a0 [ 281.812046] ? _copy_to_user+0x82/0xd0 [ 281.812058] ? put_timespec64+0xaa/0xf0 [ 281.812066] ? nsecs_to_jiffies+0x30/0x30 [ 281.812079] ? security_file_ioctl+0x76/0xb0 [ 281.812086] ? security_file_ioctl+0x83/0xb0 [ 281.812096] SyS_ioctl+0x7f/0xb0 [ 281.812103] ? do_vfs_ioctl+0xfe0/0xfe0 [ 281.812115] do_syscall_64+0x1d5/0x640 [ 281.812127] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 281.812137] RIP: 0033:0x45c4a9 [ 281.827486] 2557 [ 281.829897] RSP: 002b:00007ffc25dc5628 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.837063] 2557 [ 281.837559] RAX: ffffffffffffffda RBX: 000000000164f914 RCX: 000000000045c4a9 [ 281.847571] 2557 [ 281.851788] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 281.851793] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 281.851797] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 281.851801] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 281.854623] (null) [ 281.864276] (null) [ 281.870474] , order=0, oom_score_adj=0 [ 281.880034] syz-executor.1 cpuset= [ 281.887904] syz-executor.4 cpuset= [ 281.889735] syz1 [ 281.898557] Node 0 [ 281.908617] = 0kB [ 281.916704] DMA32 free:18152kB min:36272kB low:45340kB high:54408kB active_anon:24300kB inactive_anon:784kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7200kB pagetables:1808kB bounce:0kB free_pcp:232kB local_pcp:112kB free_cma:0kB [ 281.919055] Node 1 [ 281.921281] syz4 mems_allowed=0-1 [ 281.921307] CPU: 0 PID: 7881 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 281.921311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.921315] Call Trace: [ 281.921346] dump_stack+0x13e/0x194 [ 281.921362] warn_alloc.cold+0x96/0x1af [ 281.921378] ? zone_watermark_ok_safe+0x280/0x280 [ 281.921389] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 281.921405] __alloc_pages_slowpath+0x2114/0x26c0 [ 281.921426] ? warn_alloc+0xf0/0xf0 [ 281.921443] __alloc_pages_nodemask+0x5d3/0x700 [ 281.921453] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 281.921468] ? policy_nodemask+0x51/0x140 [ 281.921477] alloc_pages_current+0xe7/0x1e0 [ 281.921490] ion_page_pool_alloc+0x118/0x1b0 [ 281.921498] ion_system_heap_allocate+0x134/0x8d0 [ 281.921509] ? rcu_read_lock_sched_held+0x10a/0x130 [ 281.921515] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 281.921522] ? ion_system_heap_free+0x240/0x240 [ 281.921533] ion_alloc+0x1e9/0x7d0 [ 281.921545] ? ion_dma_buf_release+0x40/0x40 [ 281.921559] ? __might_fault+0x177/0x1b0 [ 281.921570] ion_ioctl+0xef/0x1f8 [ 281.921577] ? ion_alloc.cold+0x3d/0x3d [ 281.921592] ? selinux_file_ioctl+0x3f7/0x560 [ 281.921597] ? ion_alloc.cold+0x3d/0x3d [ 281.921607] do_vfs_ioctl+0x75a/0xfe0 [ 281.921614] ? selinux_file_mprotect+0x5c0/0x5c0 [ 281.921625] ? ioctl_preallocate+0x1a0/0x1a0 [ 281.935203] Normal: [ 281.937288] ? _copy_to_user+0x82/0xd0 [ 281.945989] mems_allowed=0-1 [ 281.953296] ? put_timespec64+0xaa/0xf0 [ 281.953305] ? nsecs_to_jiffies+0x30/0x30 [ 281.953317] ? security_file_ioctl+0x76/0xb0 [ 281.953324] ? security_file_ioctl+0x83/0xb0 [ 281.953336] SyS_ioctl+0x7f/0xb0 [ 281.953346] ? do_vfs_ioctl+0xfe0/0xfe0 [ 281.961037] 3*4kB [ 281.968881] do_syscall_64+0x1d5/0x640 [ 281.990089] (UME) [ 281.992703] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 281.996336] 2*8kB [ 282.000432] RIP: 0033:0x45c4a9 [ 282.000438] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.000445] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 282.000449] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 282.000452] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 282.000456] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 282.000460] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 282.016470] lowmem_reserve[]: [ 282.046615] CPU: 1 PID: 7601 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 282.128714] 0 [ 282.130079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.130083] Call Trace: [ 282.130110] dump_stack+0x13e/0x194 [ 282.130215] dump_header+0x178/0x6d4 [ 282.130231] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 282.142007] 0 [ 282.144878] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 282.144889] ? ___ratelimit+0x50/0x519 [ 282.144903] oom_kill_process.cold+0x10/0xae3 [ 282.174204] 0 [ 282.176621] ? lock_acquire+0x170/0x3f0 [ 282.176630] ? lock_downgrade+0x6e0/0x6e0 [ 282.176645] out_of_memory+0x2d5/0x1110 [ 282.176657] ? oom_killer_disable+0x1c0/0x1c0 [ 282.201233] 0 [ 282.205678] ? mutex_trylock+0x152/0x1a0 [ 282.205692] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 282.205712] ? warn_alloc+0xf0/0xf0 [ 282.245674] 0 [ 282.246348] __alloc_pages_nodemask+0x5d3/0x700 [ 282.279399] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 282.279412] ? lock_downgrade+0x6e0/0x6e0 [ 282.279427] alloc_pages_current+0xe7/0x1e0 [ 282.279437] __page_cache_alloc+0x245/0x3d0 [ 282.279447] filemap_fault+0xc21/0x1c30 [ 282.279461] ? __lock_page_or_retry+0x8a0/0x8a0 [ 282.279469] ? lock_acquire+0x170/0x3f0 [ 282.279571] ? ext4_filemap_fault+0x7c/0xb0 [ 282.279586] ext4_filemap_fault+0x84/0xb0 [ 282.344134] warn_alloc_show_mem: 1 callbacks suppressed [ 282.344138] Mem-Info: [ 282.344592] __do_fault+0xfa/0x380 [ 282.364182] Node 0 [ 282.368084] __handle_mm_fault+0x22e9/0x3280 [ 282.374363] active_anon:6076 inactive_anon:196 isolated_anon:0 [ 282.374363] active_file:10 inactive_file:239 isolated_file:0 [ 282.374363] unevictable:0 dirty:0 writeback:0 unstable:0 [ 282.374363] slab_reclaimable:11566 slab_unreclaimable:103978 [ 282.374363] mapped:115 shmem:250 pagetables:452 bounce:0 [ 282.374363] free:159922 free_pcp:137 free_cma:0 [ 282.379474] ? copy_page_range+0x1d70/0x1d70 [ 282.424729] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.426207] ? find_held_lock+0x2d/0x110 [ 282.432068] Node 0 active_anon:24300kB inactive_anon:784kB active_file:28kB inactive_file:864kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:452kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 282.436779] handle_mm_fault+0x288/0x7a0 [ 282.454765] lowmem_reserve[]: [ 282.456736] __do_page_fault+0x4bc/0xb40 [ 282.480143] Node 1 active_anon:4kB inactive_anon:0kB active_file:12kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 282.481331] ? vmalloc_fault+0xdf0/0xdf0 [ 282.485317] Node 0 [ 282.489864] ? do_page_fault+0x60/0x4f2 [ 282.497427] 0 [ 282.499429] ? page_fault+0x2f/0x50 [ 282.514258] 0 [ 282.516827] page_fault+0x45/0x50 [ 282.543178] DMA free:10336kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.545089] RIP: db28de20:0x43d4c [ 282.545095] RSP: 43d5e:0000000000000002 EFLAGS: 00000003 [ 282.570161] (ME) [ 282.612956] 0 [ 282.722631] 3*16kB [ 282.749756] lowmem_reserve[]: [ 282.825867] (ME) [ 282.910140] 0 [ 282.990842] 0 0 [ 282.995431] Node 1 Normal free:100028kB min:53612kB low:67012kB high:80412kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:72kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:312kB local_pcp:124kB free_cma:0kB [ 283.080458] 3*32kB (UM) 2*64kB (UE) 2*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (ME) 4*4096kB (M) = 26412kB [ 283.096152] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 283.109883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.116094] lowmem_reserve[]: [ 283.126312] syz-executor.0 cpuset= [ 283.128226] 0 [ 283.129988] syz0 [ 283.136694] 2557 [ 283.138409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 283.145941] 2557 [ 283.152453] 0 0 0 0 [ 283.155924] mems_allowed=0-1 [ 283.156877] Node 0 [ 283.160370] CPU: 1 PID: 7893 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 283.160376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.160380] Call Trace: [ 283.160404] dump_stack+0x13e/0x194 [ 283.168881] 2557 [ 283.175716] warn_alloc.cold+0x96/0x1af [ 283.175725] ? zone_watermark_ok_safe+0x280/0x280 [ 283.175739] ? __alloc_pages_direct_compact+0xba/0x360 [ 283.175748] __alloc_pages_slowpath+0x2114/0x26c0 [ 283.175762] ? save_trace+0x290/0x290 [ 283.175774] ? warn_alloc+0xf0/0xf0 [ 283.175793] __alloc_pages_nodemask+0x5d3/0x700 [ 283.193343] DMA: [ 283.195478] ? lock_downgrade+0x6e0/0x6e0 [ 283.199666] 2*4kB [ 283.205062] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 283.205076] ? find_held_lock+0x2d/0x110 [ 283.205088] alloc_pages_current+0xe7/0x1e0 [ 283.205103] ion_page_pool_alloc+0x118/0x1b0 [ 283.205112] ion_system_heap_allocate+0x134/0x8d0 [ 283.205121] ? _ion_heap_freelist_drain+0x6e/0x410 [ 283.205128] ? ion_system_heap_free+0x240/0x240 [ 283.205139] ion_alloc+0x611/0x7d0 [ 283.205150] ? ion_dma_buf_release+0x40/0x40 [ 283.205163] ? __might_fault+0x177/0x1b0 [ 283.205175] ion_ioctl+0xef/0x1f8 [ 283.205183] ? ion_alloc.cold+0x3d/0x3d [ 283.205196] ? selinux_file_ioctl+0x3f7/0x560 [ 283.205206] ? ion_alloc.cold+0x3d/0x3d [ 283.218489] 2557 [ 283.222897] do_vfs_ioctl+0x75a/0xfe0 [ 283.222913] ? selinux_file_mprotect+0x5c0/0x5c0 [ 283.222921] ? ioctl_preallocate+0x1a0/0x1a0 [ 283.222930] ? _copy_to_user+0x82/0xd0 [ 283.222941] ? put_timespec64+0xaa/0xf0 [ 283.222948] ? nsecs_to_jiffies+0x30/0x30 [ 283.222959] ? security_file_ioctl+0x76/0xb0 [ 283.222965] ? security_file_ioctl+0x83/0xb0 [ 283.222973] SyS_ioctl+0x7f/0xb0 [ 283.222979] ? do_vfs_ioctl+0xfe0/0xfe0 [ 283.222994] do_syscall_64+0x1d5/0x640 [ 283.227316] (UE) [ 283.231962] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 283.231972] RIP: 0033:0x45c4a9 [ 283.231976] RSP: 002b:00007ffc25dc5628 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.231983] RAX: ffffffffffffffda RBX: 000000000164f914 RCX: 000000000045c4a9 [ 283.231987] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 283.231991] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 283.231995] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 283.231999] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 283.241354] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.260462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 283.262308] 1*8kB [ 283.267372] 287 total pagecache pages [ 283.272744] Node 0 DMA32 free:18180kB min:36272kB low:45340kB high:54408kB active_anon:24264kB inactive_anon:784kB active_file:60kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7200kB pagetables:1808kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 283.272775] lowmem_reserve[]: [ 283.285295] 0 pages in swap cache [ 283.286022] (E) [ 283.294236] Swap cache stats: add 0, delete 0, find 0/0 [ 283.298685] 0 [ 283.310151] Free swap = 0kB [ 283.310842] 1*16kB [ 283.315011] Total swap = 0kB [ 283.322819] 0 0 0 0 [ 283.322838] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.322857] lowmem_reserve[]: 0 0 0 0 0 [ 283.322875] Node 1 Normal free:27136kB min:53612kB low:67012kB high:80412kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.322892] lowmem_reserve[]: 0 0 0 0 0 [ 283.322910] Node 0 DMA: 2*4kB (UE) 1*8kB (E) [ 283.335949] 1965979 pages RAM [ 283.338046] (E) [ 283.349314] 0 pages HighMem/MovableOnly [ 283.353516] 1*16kB (E) [ 283.361341] 339049 pages reserved [ 283.366054] 2*32kB [ 283.374092] 0 pages cma reserved [ 283.376456] (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB [ 283.398893] warn_alloc_show_mem: 2 callbacks suppressed [ 283.398898] Mem-Info: [ 283.403480] 2*32kB [ 283.426078] active_anon:6069 inactive_anon:196 isolated_anon:0 [ 283.426078] active_file:14 inactive_file:0 isolated_file:0 [ 283.426078] unevictable:0 dirty:0 writeback:0 unstable:0 [ 283.426078] slab_reclaimable:11571 slab_unreclaimable:104039 [ 283.426078] mapped:14 shmem:250 pagetables:452 bounce:0 [ 283.426078] free:13857 free_pcp:57 free_cma:0 [ 283.427710] (UE) [ 283.444100] Node 0 active_anon:24264kB inactive_anon:784kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 283.447833] (ME) [ 283.466499] Node 1 active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 283.490044] 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB [ 283.506813] Node 0 [ 283.507937] (M) [ 283.523826] DMA free:10336kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.549910] 1*4096kB [ 283.567958] lowmem_reserve[]: [ 283.586580] = 10336kB [ 283.586586] Node 0 DMA32: 85*4kB (UM) 94*8kB (UMEH) 20*16kB (UME) 12*32kB (UME) 4*64kB (ME) 2*128kB (UM) 1*256kB (M) 28*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 17924kB [ 283.586658] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 283.604956] 0 [ 283.608795] (M) [ 283.616860] 2557 [ 283.620092] = 10336kB [ 283.632267] 2557 [ 283.635489] 0*4096kB [ 283.637901] 2557 [ 283.643525] = 0kB [ 283.693644] 2557 [ 283.706349] Node 0 [ 283.740088] Mem-Info: [ 283.772416] Node 1 [ 283.812356] DMA32: [ 283.824341] Node 0 [ 283.838950] Normal: [ 283.857351] active_anon:6069 inactive_anon:196 isolated_anon:0 [ 283.857351] active_file:14 inactive_file:0 isolated_file:0 [ 283.857351] unevictable:0 dirty:0 writeback:0 unstable:0 [ 283.857351] slab_reclaimable:11571 slab_unreclaimable:104039 [ 283.857351] mapped:14 shmem:250 pagetables:452 bounce:0 [ 283.857351] free:13857 free_pcp:56 free_cma:0 [ 283.860106] 85*4kB [ 283.865212] Node 0 active_anon:24264kB inactive_anon:784kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 283.865685] (UM) [ 283.868046] Node 1 active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 283.871386] 8*4kB [ 283.880563] Node 0 [ 283.913955] 94*8kB [ 283.926776] DMA32 free:17956kB min:36272kB low:45340kB high:54408kB active_anon:24264kB inactive_anon:784kB active_file:60kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7200kB pagetables:1808kB bounce:0kB free_pcp:224kB local_pcp:108kB free_cma:0kB [ 283.947820] (UMEH) [ 283.960915] lowmem_reserve[]: [ 283.977679] (UME) [ 283.990497] DMA free:10336kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.018476] 20*16kB (UME) [ 284.037926] 0 [ 284.060837] 4*8kB (UME) 4*16kB (UME) 3*32kB (UM) 2*64kB (UE) 1*128kB (U) 0*256kB 52*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27104kB [ 284.069082] 0 [ 284.075366] lowmem_reserve[]: [ 284.077200] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.077272] 0 [ 284.082317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 284.101865] 0 0 0 [ 284.104657] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.106179] 12*32kB [ 284.138071] 2557 [ 284.140509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.140594] 2557 [ 284.142800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 284.157054] 2557 2557 [ 284.166553] Node 0 DMA32 free:17884kB min:36272kB low:45340kB high:54408kB active_anon:24264kB inactive_anon:784kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7200kB pagetables:1808kB bounce:0kB free_pcp:184kB local_pcp:80kB free_cma:0kB [ 284.171871] (UME) [ 284.205287] lowmem_reserve[]: [ 284.207718] 278 total pagecache pages [ 284.208447] 0 [ 284.212200] 0 pages in swap cache [ 284.215977] 0 [ 284.217945] Swap cache stats: add 0, delete 0, find 0/0 [ 284.228081] 0 0 0 [ 284.232593] Node 1 Normal free:27104kB min:53612kB low:67012kB high:80412kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.238715] 4*64kB [ 284.268942] lowmem_reserve[]: 0 0 0 0 0 [ 284.272672] Free swap = 0kB [ 284.275890] Node 0 [ 284.279966] Total swap = 0kB [ 284.279975] 1965979 pages RAM [ 284.288218] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.293485] 0 pages HighMem/MovableOnly [ 284.320546] lowmem_reserve[]: 0 0 0 0 0 [ 284.326510] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10336kB [ 284.328547] (ME) 2*128kB (UM) 1*256kB (M) 28*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 17924kB [ 284.354532] lowmem_reserve[]: 0 0 0 [ 284.365151] 339049 pages reserved [ 284.370117] Node 0 [ 284.370216] 0 pages cma reserved [ 284.374273] DMA32: [ 284.384505] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 284.398626] 0 0 [ 284.408081] 86*4kB (MEH) 77*8kB (MEH) 20*16kB (MEH) 11*32kB (UME) 4*64kB (ME) 2*128kB (UM) 1*256kB (M) 28*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 17760kB [ 284.430121] Node 1 Normal: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 1*32kB (M) 3*64kB (UME) 1*128kB (U) 2*256kB (UM) 28*512kB (U) 13*1024kB (UM) 4*2048kB (UM) 8*4096kB (U) = 69504kB [ 284.450100] Node 1 Normal free:105776kB min:53612kB low:67012kB high:80412kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:700kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:268kB local_pcp:184kB free_cma:0kB [ 284.530453] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 284.593639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.600110] Node 1 Normal: 2*4kB (UE) 2*8kB (ME) 2*16kB (ME) 2*32kB (UM) 2*64kB (ME) 1*128kB (U) 0*256kB 2*512kB (UM) 38*1024kB (U) 4*2048kB (UM) 8*4096kB (U) = 81272kB [ 284.614467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 284.636313] lowmem_reserve[]: 0 0 0 0 0 [ 284.650312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.666712] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10336kB [ 284.703309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 284.707534] syz-executor.4: [ 284.718871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.722754] page allocation failure: order:4 [ 284.726461] Node 0 [ 284.738692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.742117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 284.755868] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 284.766959] DMA32: 88*4kB (UME) 99*8kB (UME) 21*16kB (UME) 13*32kB (UME) 24*64kB (UME) 2*128kB (U) 1*256kB (U) 28*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18280kB [ 284.776228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 284.795788] 298 total pagecache pages [ 284.805434] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 284.811551] 0 pages in swap cache [ 284.817713] Swap cache stats: add 0, delete 0, find 0/0 [ 284.825265] CPU: 0 PID: 7881 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 284.825271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.825274] Call Trace: [ 284.825296] dump_stack+0x13e/0x194 [ 284.825310] warn_alloc.cold+0x96/0x1af [ 284.825318] ? zone_watermark_ok_safe+0x280/0x280 [ 284.825333] ? __alloc_pages_direct_compact+0xba/0x360 [ 284.825343] __alloc_pages_slowpath+0x2114/0x26c0 [ 284.825359] ? save_trace+0x290/0x290 [ 284.825373] ? warn_alloc+0xf0/0xf0 [ 284.825391] __alloc_pages_nodemask+0x5d3/0x700 [ 284.825411] ? lock_downgrade+0x6e0/0x6e0 [ 284.842274] Node 0 [ 284.844114] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 284.846868] Normal: [ 284.850978] ? find_held_lock+0x2d/0x110 [ 284.850993] alloc_pages_current+0xe7/0x1e0 [ 284.851008] ion_page_pool_alloc+0x118/0x1b0 [ 284.851018] ion_system_heap_allocate+0x134/0x8d0 [ 284.851029] ? _ion_heap_freelist_drain+0x6e/0x410 [ 284.855287] 0*4kB [ 284.860187] ? ion_system_heap_free+0x240/0x240 [ 284.860200] ion_alloc+0x611/0x7d0 [ 284.860213] ? ion_dma_buf_release+0x40/0x40 [ 284.860227] ? __might_fault+0x177/0x1b0 [ 284.860238] ion_ioctl+0xef/0x1f8 [ 284.865945] Free swap = 0kB [ 284.870794] ? ion_alloc.cold+0x3d/0x3d [ 284.870808] ? selinux_file_ioctl+0x3f7/0x560 [ 284.870813] ? ion_alloc.cold+0x3d/0x3d [ 284.870823] do_vfs_ioctl+0x75a/0xfe0 [ 284.870835] ? selinux_file_mprotect+0x5c0/0x5c0 [ 284.875063] Total swap = 0kB [ 284.878701] ? ioctl_preallocate+0x1a0/0x1a0 [ 284.883694] 0*8kB [ 284.888906] ? _copy_to_user+0x82/0xd0 [ 284.891208] 0*16kB [ 284.896348] ? put_timespec64+0xaa/0xf0 [ 284.898656] 0*32kB [ 284.903794] ? nsecs_to_jiffies+0x30/0x30 [ 284.903807] ? security_file_ioctl+0x76/0xb0 [ 284.903813] ? security_file_ioctl+0x83/0xb0 [ 284.903825] SyS_ioctl+0x7f/0xb0 [ 284.903834] ? do_vfs_ioctl+0xfe0/0xfe0 [ 284.903847] do_syscall_64+0x1d5/0x640 [ 284.909332] 1965979 pages RAM [ 284.914868] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 284.914878] RIP: 0033:0x45c4a9 [ 284.914883] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.914891] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 284.914895] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 284.914899] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 284.914908] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 284.923191] 0*64kB [ 284.928186] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 284.930795] 0 pages HighMem/MovableOnly [ 284.945747] 298 total pagecache pages [ 284.959095] 0*128kB [ 284.970500] 0 pages in swap cache [ 284.970508] Swap cache stats: add 0, delete 0, find 0/0 [ 284.970512] Free swap = 0kB [ 284.970514] Total swap = 0kB [ 284.970521] 1965979 pages RAM [ 284.970525] 0 pages HighMem/MovableOnly [ 284.970528] 339049 pages reserved [ 284.970531] 0 pages cma reserved [ 284.986075] Mem-Info: [ 284.989181] 339049 pages reserved [ 285.009926] active_anon:6071 inactive_anon:196 isolated_anon:0 [ 285.009926] active_file:33 inactive_file:20 isolated_file:0 [ 285.009926] unevictable:0 dirty:0 writeback:0 unstable:0 [ 285.009926] slab_reclaimable:11571 slab_unreclaimable:104059 [ 285.009926] mapped:2 shmem:250 pagetables:452 bounce:0 [ 285.009926] free:13784 free_pcp:0 free_cma:0 [ 285.012156] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 285.012182] Node 1 Normal: 3*4kB (UE) 2*8kB [ 285.034822] Node 0 active_anon:24264kB inactive_anon:784kB active_file:52kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 285.036023] 0 pages cma reserved [ 285.056937] Node 1 active_anon:20kB inactive_anon:0kB active_file:80kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 285.066078] (UE) [ 285.089732] Node 0 [ 285.103388] 3*16kB (UE) 2*32kB (U) 1*64kB (E) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 6*4096kB (UM) = 26700kB [ 285.103451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.103457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 285.103463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.103469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 285.103473] 302 total pagecache pages [ 285.103483] 0 pages in swap cache [ 285.103487] Swap cache stats: add 0, delete 0, find 0/0 [ 285.103490] Free swap = 0kB [ 285.103493] Total swap = 0kB [ 285.103598] 1965979 pages RAM [ 285.123738] DMA free:10336kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.144943] 0 pages HighMem/MovableOnly [ 285.160914] lowmem_reserve[]: [ 285.178339] 339049 pages reserved [ 285.216362] 0 [ 285.216932] syz-executor.0: [ 285.268720] 2557 [ 285.301243] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 285.319891] 2557 [ 285.322744] 0 pages cma reserved [ 285.355745] 2557 [ 285.359818] Out of memory: Kill process 7897 (syz-executor.2) score 999 or sacrifice child [ 285.384493] 2557 [ 285.387340] Killed process 7897 (syz-executor.2) total-vm:39756kB, anon-rss:88kB, file-rss:0kB, shmem-rss:0kB [ 285.425225] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 285.425244] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 285.425265] CPU: 1 PID: 7893 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 285.425270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.425278] Call Trace: [ 285.496089] Node 0 [ 285.505201] dump_stack+0x13e/0x194 [ 285.505216] warn_alloc.cold+0x96/0x1af [ 285.505224] ? zone_watermark_ok_safe+0x280/0x280 [ 285.505232] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 285.505256] __alloc_pages_slowpath+0x2114/0x26c0 [ 285.505274] ? warn_alloc+0xf0/0xf0 [ 285.505292] __alloc_pages_nodemask+0x5d3/0x700 [ 285.505304] ? lock_downgrade+0x6e0/0x6e0 [ 285.505312] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 285.505323] ? find_held_lock+0x2d/0x110 [ 285.505336] alloc_pages_current+0xe7/0x1e0 [ 285.505355] ion_page_pool_alloc+0x118/0x1b0 [ 285.559984] DMA32 free:18048kB min:36272kB low:45340kB high:54408kB active_anon:24264kB inactive_anon:784kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7200kB pagetables:1808kB bounce:0kB free_pcp:224kB local_pcp:116kB free_cma:0kB [ 285.562457] ion_system_heap_allocate+0x134/0x8d0 [ 285.562470] ? _ion_heap_freelist_drain+0x6e/0x410 [ 285.562477] ? ion_system_heap_free+0x240/0x240 [ 285.562488] ion_alloc+0x611/0x7d0 [ 285.562499] ? ion_dma_buf_release+0x40/0x40 [ 285.562512] ? __might_fault+0x177/0x1b0 [ 285.562522] ion_ioctl+0xef/0x1f8 [ 285.562531] ? ion_alloc.cold+0x3d/0x3d [ 285.562544] ? selinux_file_ioctl+0x3f7/0x560 [ 285.562555] ? ion_alloc.cold+0x3d/0x3d [ 285.562566] do_vfs_ioctl+0x75a/0xfe0 [ 285.562574] ? selinux_file_mprotect+0x5c0/0x5c0 [ 285.562586] ? ioctl_preallocate+0x1a0/0x1a0 [ 285.573998] syz-executor.2: [ 285.578086] ? _copy_to_user+0x82/0xd0 [ 285.588452] lowmem_reserve[]: [ 285.592627] ? put_timespec64+0xaa/0xf0 [ 285.592636] ? nsecs_to_jiffies+0x30/0x30 [ 285.592649] ? security_file_ioctl+0x76/0xb0 [ 285.592655] ? security_file_ioctl+0x83/0xb0 [ 285.592666] SyS_ioctl+0x7f/0xb0 [ 285.592675] ? do_vfs_ioctl+0xfe0/0xfe0 [ 285.592686] do_syscall_64+0x1d5/0x640 [ 285.592700] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 285.592708] RIP: 0033:0x45c4a9 [ 285.592714] RSP: 002b:00007ffc25dc5628 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.592722] RAX: ffffffffffffffda RBX: 000000000164f914 RCX: 000000000045c4a9 [ 285.592726] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 285.592730] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 285.592734] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 285.592738] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 285.599524] page allocation failure: order:0 [ 285.674570] 0 [ 285.680481] oom_reaper: reaped process 7897 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 285.714215] 0 [ 285.771124] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 285.853207] 0 0 0 [ 285.905763] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.949684] (null) [ 285.960257] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 285.968472] CPU: 1 PID: 7897 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 285.976513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.986069] Call Trace: [ 285.988809] dump_stack+0x13e/0x194 [ 285.992907] warn_alloc.cold+0x96/0x1af [ 285.998028] ? zone_watermark_ok_safe+0x280/0x280 [ 286.003337] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 286.009707] __alloc_pages_slowpath+0x2114/0x26c0 [ 286.015673] ? warn_alloc+0xf0/0xf0 [ 286.019587] __alloc_pages_nodemask+0x5d3/0x700 [ 286.024478] ? lock_downgrade+0x6e0/0x6e0 [ 286.028772] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 286.030732] lowmem_reserve[]: [ 286.035125] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 286.035145] alloc_pages_current+0xe7/0x1e0 [ 286.035161] ion_page_pool_alloc+0x118/0x1b0 [ 286.035170] ion_system_heap_allocate+0x134/0x8d0 [ 286.035182] ? rcu_read_lock_sched_held+0x10a/0x130 [ 286.035189] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 286.035197] ? ion_system_heap_free+0x240/0x240 [ 286.035208] ion_alloc+0x1e9/0x7d0 [ 286.035219] ? ion_dma_buf_release+0x40/0x40 [ 286.035233] ? __might_fault+0x177/0x1b0 [ 286.035244] ion_ioctl+0xef/0x1f8 [ 286.035250] ? ion_alloc.cold+0x3d/0x3d [ 286.035262] ? selinux_file_ioctl+0x3f7/0x560 [ 286.035268] ? ion_alloc.cold+0x3d/0x3d [ 286.035278] do_vfs_ioctl+0x75a/0xfe0 [ 286.035290] ? selinux_file_mprotect+0x5c0/0x5c0 [ 286.064147] 0 [ 286.068512] ? ioctl_preallocate+0x1a0/0x1a0 [ 286.104460] 0 [ 286.108287] ? _copy_to_user+0x82/0xd0 [ 286.137170] ? put_timespec64+0xaa/0xf0 [ 286.142839] ? nsecs_to_jiffies+0x30/0x30 [ 286.145472] 0 0 [ 286.149751] ? security_file_ioctl+0x76/0xb0 [ 286.149763] ? security_file_ioctl+0x83/0xb0 [ 286.161856] SyS_ioctl+0x7f/0xb0 [ 286.165430] ? do_vfs_ioctl+0xfe0/0xfe0 [ 286.170042] do_syscall_64+0x1d5/0x640 [ 286.170360] 0 [ 286.175534] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 286.175545] RIP: 0033:0x45c4a9 [ 286.175549] RSP: 002b:00007ffeeb954df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2020/03/09 18:32:39 executed programs: 8 [ 286.175557] RAX: ffffffffffffffda RBX: 0000000000f0b914 RCX: 000000000045c4a9 [ 286.175561] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 286.175565] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 286.175569] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 286.175572] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 286.260180] Node 1 Normal free:324180kB min:53612kB low:67012kB high:80412kB active_anon:24kB inactive_anon:0kB active_file:464kB inactive_file:3560kB unevictable:0kB writepending:56kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:264kB local_pcp:96kB free_cma:0kB [ 286.305608] lowmem_reserve[]: 0 0 0 0 0 [ 286.311994] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10336kB [ 286.370083] Node 0 DMA32: 2*4kB (ME) 31*8kB (E) 11*16kB (UME) 4*32kB (ME) 1*64kB (E) 1*128kB (U) 2*256kB (UM) 2*512kB (UH) 18*1024kB (UM) 10*2048kB (U) 1*4096kB (U) = 45296kB [ 286.475656] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 286.517908] oom_reaper: reaped process 7896 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 286.522576] Node 1 Normal: 9*4kB (UME) 8*8kB (UME) 5*16kB (UME) 5*32kB (M) 8*64kB (UME) 4*128kB (M) 4*256kB (UM) 2*512kB (M) 3*1024kB (M) 1*2048kB (M) 11*4096kB (U) = 53588kB [ 286.577299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.592378] oom_reaper: reaped process 7899 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 286.597532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 286.607298] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 286.659959] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 286.663582] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 286.684066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.685813] CPU: 1 PID: 7904 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 286.695008] syz-executor.3 cpuset= [ 286.702303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.702308] Call Trace: [ 286.702333] dump_stack+0x13e/0x194 [ 286.702345] warn_alloc.cold+0x96/0x1af [ 286.702352] ? zone_watermark_ok_safe+0x280/0x280 [ 286.702366] ? __alloc_pages_direct_compact+0xba/0x360 [ 286.702375] __alloc_pages_slowpath+0x2114/0x26c0 [ 286.702389] ? save_trace+0x290/0x290 [ 286.702402] ? warn_alloc+0xf0/0xf0 [ 286.702420] __alloc_pages_nodemask+0x5d3/0x700 [ 286.702428] ? lock_downgrade+0x6e0/0x6e0 [ 286.702436] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 286.702448] ? retint_kernel+0x2d/0x2d [ 286.702461] alloc_pages_current+0xe7/0x1e0 [ 286.710879] syz-executor.1: [ 286.717016] ion_page_pool_alloc+0x118/0x1b0 [ 286.721595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 286.724148] ion_system_heap_allocate+0x134/0x8d0 [ 286.728540] 303 total pagecache pages [ 286.734323] ? rcu_read_lock_sched_held+0x10a/0x130 [ 286.734334] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 286.734345] ? ion_system_heap_free+0x240/0x240 [ 286.734355] ion_alloc+0x1e9/0x7d0 [ 286.734367] ? ion_dma_buf_release+0x40/0x40 [ 286.734379] ? __might_fault+0x177/0x1b0 [ 286.734388] ion_ioctl+0xef/0x1f8 [ 286.734395] ? ion_alloc.cold+0x3d/0x3d [ 286.734408] ? selinux_file_ioctl+0x3f7/0x560 [ 286.734419] ? ion_alloc.cold+0x3d/0x3d [ 286.743358] page allocation failure: order:0 [ 286.746784] do_vfs_ioctl+0x75a/0xfe0 [ 286.750874] syz3 [ 286.754344] ? selinux_file_mprotect+0x5c0/0x5c0 [ 286.759305] mems_allowed=0-1 [ 286.765513] ? ioctl_preallocate+0x1a0/0x1a0 [ 286.765526] ? _copy_to_user+0x82/0xd0 [ 286.765537] ? put_timespec64+0xaa/0xf0 [ 286.765544] ? nsecs_to_jiffies+0x30/0x30 [ 286.765555] ? security_file_ioctl+0x76/0xb0 [ 286.765561] ? security_file_ioctl+0x83/0xb0 [ 286.765571] SyS_ioctl+0x7f/0xb0 [ 286.765580] ? do_vfs_ioctl+0xfe0/0xfe0 [ 286.765595] do_syscall_64+0x1d5/0x640 [ 286.765610] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 286.765619] RIP: 0033:0x45c4a9 [ 286.765629] RSP: 002b:00007ffc25dc5628 EFLAGS: 00000246 [ 286.774760] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 286.775971] ORIG_RAX: 0000000000000010 [ 286.780849] (null) [ 286.783804] RAX: ffffffffffffffda RBX: 000000000164f914 RCX: 000000000045c4a9 [ 286.788516] syz-executor.1 cpuset= [ 286.798329] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 286.798335] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 286.798339] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 286.798342] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 286.804110] oom_reaper: reaped process 7902 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 286.812555] syz-executor.5: [ 286.816539] warn_alloc_show_mem: 1 callbacks suppressed [ 286.816544] Mem-Info: [ 286.818960] page allocation failure: order:0 [ 286.825471] active_anon:6038 inactive_anon:194 isolated_anon:0 [ 286.825471] active_file:53 inactive_file:33 isolated_file:0 [ 286.825471] unevictable:0 dirty:25 writeback:0 unstable:0 [ 286.825471] slab_reclaimable:11583 slab_unreclaimable:103911 [ 286.825471] mapped:33 shmem:250 pagetables:444 bounce:0 [ 286.825471] free:13681 free_pcp:72 free_cma:0 [ 286.829491] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 286.836471] Node 0 active_anon:24128kB inactive_anon:776kB active_file:120kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:44kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 286.841406] 0 pages in swap cache [ 286.846267] Node 1 active_anon:24kB inactive_anon:0kB active_file:92kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:56kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 286.851538] (null) [ 286.859066] Node 0 [ 286.862827] CPU: 0 PID: 7902 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 286.865190] DMA free:10336kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.867263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.873051] lowmem_reserve[]: [ 286.876059] Call Trace: [ 286.880995] 0 [ 286.884987] dump_stack+0x13e/0x194 [ 286.889119] 2557 [ 286.894290] warn_alloc.cold+0x96/0x1af [ 286.894302] ? zone_watermark_ok_safe+0x280/0x280 [ 286.894319] ? wait_for_completion+0x390/0x390 [ 286.894329] __alloc_pages_slowpath+0x2114/0x26c0 [ 286.894351] ? warn_alloc+0xf0/0xf0 [ 286.899857] 2557 [ 286.905096] __alloc_pages_nodemask+0x5d3/0x700 [ 286.905111] ? lock_downgrade+0x6e0/0x6e0 [ 286.905118] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 286.905139] alloc_pages_current+0xe7/0x1e0 [ 286.909369] 2557 [ 286.915156] ion_page_pool_alloc+0x118/0x1b0 [ 286.915171] ion_system_heap_allocate+0x134/0x8d0 [ 286.915185] ? rcu_read_lock_sched_held+0x10a/0x130 [ 286.915192] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 286.915199] ? ion_system_heap_free+0x240/0x240 [ 286.915210] ion_alloc+0x1e9/0x7d0 [ 286.915226] ? ion_dma_buf_release+0x40/0x40 [ 286.922101] 2557 [ 286.925939] ? __might_fault+0x177/0x1b0 [ 286.935875] ion_ioctl+0xef/0x1f8 [ 286.935888] ? ion_alloc.cold+0x3d/0x3d [ 286.935901] ? selinux_file_ioctl+0x3f7/0x560 [ 286.935906] ? ion_alloc.cold+0x3d/0x3d [ 286.935918] do_vfs_ioctl+0x75a/0xfe0 [ 286.935936] ? selinux_file_mprotect+0x5c0/0x5c0 [ 286.944353] Node 0 [ 286.951393] ? ioctl_preallocate+0x1a0/0x1a0 [ 286.951403] ? _copy_to_user+0x82/0xd0 [ 286.951414] ? put_timespec64+0xaa/0xf0 [ 286.951421] ? nsecs_to_jiffies+0x30/0x30 [ 286.951437] ? security_file_ioctl+0x76/0xb0 [ 286.951449] ? security_file_ioctl+0x83/0xb0 [ 286.953872] DMA32 free:17588kB min:36272kB low:45340kB high:54408kB active_anon:24116kB inactive_anon:776kB active_file:160kB inactive_file:44kB unevictable:0kB writepending:44kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7168kB pagetables:1776kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 286.962557] SyS_ioctl+0x7f/0xb0 [ 286.962569] ? do_vfs_ioctl+0xfe0/0xfe0 [ 286.962579] do_syscall_64+0x1d5/0x640 [ 286.962594] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 286.962606] RIP: 0033:0x45c4a9 [ 286.968825] lowmem_reserve[]: [ 286.977808] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.977819] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 286.977823] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 286.977826] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 286.977830] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 286.977834] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 286.982533] Swap cache stats: add 0, delete 0, find 0/0 [ 286.992350] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 286.994345] Free swap = 0kB [ 287.008080] , order=0, oom_score_adj=0 [ 287.018561] syz1 [ 287.019810] 0 [ 287.027883] mems_allowed=0-1 [ 287.027900] CPU: 0 PID: 7899 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 287.027905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.027910] Call Trace: [ 287.027937] dump_stack+0x13e/0x194 [ 287.027950] warn_alloc.cold+0x96/0x1af [ 287.027959] ? zone_watermark_ok_safe+0x280/0x280 [ 287.027968] ? save_trace+0x290/0x290 [ 287.027977] ? rcu_read_lock_sched_held+0x10a/0x130 [ 287.027994] __alloc_pages_slowpath+0x2114/0x26c0 [ 287.037991] (null) [ 287.074924] ? warn_alloc+0xf0/0xf0 [ 287.074945] __alloc_pages_nodemask+0x5d3/0x700 [ 287.074957] ? lock_downgrade+0x6e0/0x6e0 [ 287.074968] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 287.086115] 0 [ 287.121625] alloc_pages_current+0xe7/0x1e0 [ 287.121648] ion_page_pool_alloc+0x118/0x1b0 [ 287.121657] ion_system_heap_allocate+0x134/0x8d0 [ 287.121671] ? rcu_read_lock_sched_held+0x10a/0x130 [ 287.121683] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 287.125710] rsyslogd cpuset= [ 287.163961] ? ion_system_heap_free+0x240/0x240 [ 287.163975] ion_alloc+0x1e9/0x7d0 [ 287.163990] ? ion_dma_buf_release+0x40/0x40 [ 287.164009] ? __might_fault+0x177/0x1b0 [ 287.164020] ion_ioctl+0xef/0x1f8 [ 287.166317] 0 [ 287.168621] ? ion_alloc.cold+0x3d/0x3d [ 287.177774] / [ 287.214506] ? selinux_file_ioctl+0x3f7/0x560 [ 287.227709] syz-executor.5 cpuset= [ 287.230942] ? ion_alloc.cold+0x3d/0x3d [ 287.230956] do_vfs_ioctl+0x75a/0xfe0 [ 287.230968] ? selinux_file_mprotect+0x5c0/0x5c0 [ 287.230977] ? ioctl_preallocate+0x1a0/0x1a0 [ 287.230987] ? _copy_to_user+0x82/0xd0 [ 287.231000] ? put_timespec64+0xaa/0xf0 [ 287.233593] syz5 [ 287.236046] ? nsecs_to_jiffies+0x30/0x30 [ 287.241884] 0 [ 287.244033] ? security_file_ioctl+0x76/0xb0 [ 287.248924] 0 [ 287.254575] ? security_file_ioctl+0x83/0xb0 [ 287.254592] SyS_ioctl+0x7f/0xb0 [ 287.254601] ? do_vfs_ioctl+0xfe0/0xfe0 [ 287.254613] do_syscall_64+0x1d5/0x640 [ 287.254629] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 287.254639] RIP: 0033:0x45c4a9 [ 287.254648] RSP: 002b:00007ffcdb28dbb8 EFLAGS: 00000246 [ 287.262160] mems_allowed=0-1 [ 287.268286] ORIG_RAX: 0000000000000010 [ 287.268296] RAX: ffffffffffffffda RBX: 0000000001d74914 RCX: 000000000045c4a9 [ 287.285768] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 287.285779] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 287.300137] Node 0 [ 287.303909] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 287.303920] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 287.320117] mems_allowed=0-1 [ 287.329646] Total swap = 0kB [ 287.337122] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 287.346689] 1965979 pages RAM [ 287.354419] CPU: 1 PID: 7896 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 287.359178] 0 pages HighMem/MovableOnly [ 287.364937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.364944] Call Trace: [ 287.364974] dump_stack+0x13e/0x194 [ 287.364986] warn_alloc.cold+0x96/0x1af [ 287.364994] ? zone_watermark_ok_safe+0x280/0x280 [ 287.365004] ? save_trace+0x290/0x290 [ 287.365013] ? rcu_read_lock_sched_held+0x10a/0x130 [ 287.365030] __alloc_pages_slowpath+0x2114/0x26c0 [ 287.365053] ? warn_alloc+0xf0/0xf0 [ 287.365072] __alloc_pages_nodemask+0x5d3/0x700 [ 287.365081] ? lock_downgrade+0x6e0/0x6e0 [ 287.365090] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 287.365097] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 287.365119] alloc_pages_current+0xe7/0x1e0 [ 287.374096] 339049 pages reserved [ 287.374924] ion_page_pool_alloc+0x118/0x1b0 [ 287.380226] 0 pages cma reserved [ 287.382813] ion_system_heap_allocate+0x134/0x8d0 [ 287.410236] syz-executor.4: [ 287.414622] ? rcu_read_lock_sched_held+0x10a/0x130 [ 287.590123] page allocation failure: order:0 [ 287.598403] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 287.640177] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 287.642177] ? ion_system_heap_free+0x240/0x240 [ 287.647351] (null) [ 287.652713] ion_alloc+0x1e9/0x7d0 [ 287.652733] ? ion_dma_buf_release+0x40/0x40 [ 287.652749] ? __might_fault+0x177/0x1b0 [ 287.652758] ion_ioctl+0xef/0x1f8 [ 287.652765] ? ion_alloc.cold+0x3d/0x3d [ 287.652779] ? selinux_file_ioctl+0x3f7/0x560 [ 287.652786] ? ion_alloc.cold+0x3d/0x3d [ 287.652798] do_vfs_ioctl+0x75a/0xfe0 [ 287.652805] ? selinux_file_mprotect+0x5c0/0x5c0 [ 287.652814] ? ioctl_preallocate+0x1a0/0x1a0 [ 287.652824] ? _copy_to_user+0x82/0xd0 [ 287.652842] ? put_timespec64+0xaa/0xf0 [ 287.720186] syz-executor.4 cpuset= [ 287.721203] ? nsecs_to_jiffies+0x30/0x30 [ 287.728969] syz4 [ 287.734118] ? security_file_ioctl+0x76/0xb0 [ 287.780191] mems_allowed=0-1 [ 287.783138] ? security_file_ioctl+0x83/0xb0 [ 288.220154] warn_alloc_show_mem: 2 callbacks suppressed [ 288.220160] Mem-Info: [ 288.222582] SyS_ioctl+0x7f/0xb0 [ 288.249968] ? do_vfs_ioctl+0xfe0/0xfe0 [ 288.256383] do_syscall_64+0x1d5/0x640 [ 288.261743] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 288.269570] RIP: 0033:0x45c4a9 [ 288.274445] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.280160] active_anon:6041 inactive_anon:194 isolated_anon:0 [ 288.280160] active_file:17 inactive_file:92 isolated_file:0 [ 288.280160] unevictable:0 dirty:0 writeback:0 unstable:0 [ 288.280160] slab_reclaimable:11598 slab_unreclaimable:103938 [ 288.280160] mapped:52 shmem:250 pagetables:457 bounce:0 [ 288.280160] free:97429 free_pcp:405 free_cma:0 [ 288.285198] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 288.285221] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 288.348769] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 288.357581] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 288.368978] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 288.395786] CPU: 1 PID: 7432 Comm: rsyslogd Not tainted 4.14.172-syzkaller #0 [ 288.407549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.424602] Call Trace: [ 288.429193] dump_stack+0x13e/0x194 [ 288.436361] dump_header+0x178/0x6d4 [ 288.441285] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 288.451314] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 288.460140] Node 0 active_anon:24048kB inactive_anon:776kB active_file:64kB inactive_file:664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:308kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 288.465468] ? ___ratelimit+0x50/0x519 [ 288.506517] oom_kill_process.cold+0x10/0xae3 [ 288.511190] ? lock_acquire+0x170/0x3f0 [ 288.517080] ? lock_downgrade+0x6e0/0x6e0 [ 288.522068] out_of_memory+0x2d5/0x1110 [ 288.527865] ? oom_killer_disable+0x1c0/0x1c0 [ 288.535487] ? mutex_trylock+0x152/0x1a0 [ 288.541312] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 288.551673] ? warn_alloc+0xf0/0xf0 [ 288.559036] __alloc_pages_nodemask+0x5d3/0x700 [ 288.564471] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 288.572987] ? lock_downgrade+0x6e0/0x6e0 [ 288.578965] alloc_pages_current+0xe7/0x1e0 [ 288.588193] __page_cache_alloc+0x245/0x3d0 [ 288.593456] filemap_fault+0xc21/0x1c30 [ 288.599410] ? __lock_page_or_retry+0x8a0/0x8a0 [ 288.604439] ? lock_acquire+0x170/0x3f0 [ 288.609972] ? ext4_filemap_fault+0x7c/0xb0 [ 288.616940] ext4_filemap_fault+0x84/0xb0 [ 288.623123] __do_fault+0xfa/0x380 [ 288.631886] __handle_mm_fault+0x22e9/0x3280 [ 288.641733] ? copy_page_range+0x1d70/0x1d70 [ 288.653035] ? find_held_lock+0x2d/0x110 [ 288.660042] handle_mm_fault+0x288/0x7a0 [ 288.668548] __do_page_fault+0x4bc/0xb40 [ 288.673793] Node 1 active_anon:116kB inactive_anon:0kB active_file:104kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 288.675446] ? vmalloc_fault+0xdf0/0xdf0 [ 288.675461] ? do_page_fault+0x60/0x4f2 [ 288.741318] ? page_fault+0x2f/0x50 [ 288.747415] page_fault+0x45/0x50 [ 288.754241] RIP: 3c2f09c0:0x7fae3f395040 [ 288.761343] RSP: d314b0:0000000000000000 EFLAGS: 0065e420 [ 288.762766] CPU: 0 PID: 7881 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 288.779897] lowmem_reserve[]: [ 288.786756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.786768] Call Trace: [ 288.786817] dump_stack+0x13e/0x194 [ 288.786846] warn_alloc.cold+0x96/0x1af [ 288.786868] ? zone_watermark_ok_safe+0x280/0x280 [ 288.786906] ? save_trace+0x290/0x290 [ 288.792529] 0 [ 288.805944] ? rcu_read_lock_sched_held+0x10a/0x130 [ 288.805991] __alloc_pages_slowpath+0x2114/0x26c0 [ 288.806014] ? warn_alloc+0xf0/0xf0 [ 288.809938] 0 [ 288.814795] __alloc_pages_nodemask+0x5d3/0x700 [ 288.814840] ? lock_downgrade+0x6e0/0x6e0 [ 288.814861] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 288.814874] ? find_held_lock+0x2d/0x110 [ 288.822445] 0 [ 288.831927] alloc_pages_current+0xe7/0x1e0 [ 288.831947] ion_page_pool_alloc+0x118/0x1b0 [ 288.831958] ion_system_heap_allocate+0x134/0x8d0 [ 288.831968] ? _ion_heap_freelist_drain+0x6e/0x410 [ 288.831981] ? ion_system_heap_free+0x240/0x240 [ 288.838686] 0 [ 288.841142] ion_alloc+0x611/0x7d0 [ 288.841158] ? ion_dma_buf_release+0x40/0x40 [ 288.841173] ? __might_fault+0x177/0x1b0 [ 288.841187] ion_ioctl+0xef/0x1f8 [ 288.848880] 0 [ 288.856633] ? ion_alloc.cold+0x3d/0x3d [ 288.856649] ? selinux_file_ioctl+0x3f7/0x560 [ 288.856655] ? ion_alloc.cold+0x3d/0x3d [ 288.856666] do_vfs_ioctl+0x75a/0xfe0 [ 288.856674] ? selinux_file_mprotect+0x5c0/0x5c0 [ 288.856685] ? ioctl_preallocate+0x1a0/0x1a0 [ 288.866899] ? _copy_to_user+0x82/0xd0 [ 288.875819] Node 1 [ 288.882783] ? put_timespec64+0xaa/0xf0 [ 288.882791] ? nsecs_to_jiffies+0x30/0x30 [ 288.882805] ? security_file_ioctl+0x76/0xb0 [ 288.882811] ? security_file_ioctl+0x83/0xb0 [ 288.882822] SyS_ioctl+0x7f/0xb0 [ 288.882831] ? do_vfs_ioctl+0xfe0/0xfe0 [ 288.882846] do_syscall_64+0x1d5/0x640 [ 288.891653] Normal free:92356kB min:53612kB low:67012kB high:80412kB active_anon:116kB inactive_anon:0kB active_file:104kB inactive_file:604kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:304kB local_pcp:156kB free_cma:0kB [ 288.900438] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 288.900448] RIP: 0033:0x45c4a9 [ 288.900453] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.900461] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 288.900465] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 288.900469] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 288.900478] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 288.903806] lowmem_reserve[]: [ 288.910861] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 289.033901] syz-executor.3: [ 289.043770] 0 [ 289.060285] Node 0 [ 289.074667] 0 [ 289.130094] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 289.130111] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 289.130133] CPU: 0 PID: 7902 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 289.130138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.130142] Call Trace: [ 289.130159] dump_stack+0x13e/0x194 [ 289.130172] warn_alloc.cold+0x96/0x1af [ 289.130181] ? zone_watermark_ok_safe+0x280/0x280 [ 289.130198] ? __alloc_pages_direct_compact+0xba/0x360 [ 289.130209] __alloc_pages_slowpath+0x2114/0x26c0 [ 289.130225] ? save_trace+0x290/0x290 [ 289.130238] ? warn_alloc+0xf0/0xf0 [ 289.130257] __alloc_pages_nodemask+0x5d3/0x700 [ 289.130267] ? lock_downgrade+0x6e0/0x6e0 [ 289.130276] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 289.130283] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 289.130299] alloc_pages_current+0xe7/0x1e0 [ 289.130312] ion_page_pool_alloc+0x118/0x1b0 [ 289.130320] ion_system_heap_allocate+0x134/0x8d0 [ 289.130340] ? _ion_heap_freelist_drain+0x6e/0x410 [ 289.130352] ? ion_system_heap_free+0x240/0x240 [ 289.142318] 0 [ 289.144742] ion_alloc+0x611/0x7d0 [ 289.157547] 0 [ 289.174411] ? ion_dma_buf_release+0x40/0x40 [ 289.174429] ? __might_fault+0x177/0x1b0 [ 289.174439] ion_ioctl+0xef/0x1f8 [ 289.174447] ? ion_alloc.cold+0x3d/0x3d [ 289.174462] ? selinux_file_ioctl+0x3f7/0x560 [ 289.191208] Mem-Info: [ 289.208327] ? ion_alloc.cold+0x3d/0x3d [ 289.208344] do_vfs_ioctl+0x75a/0xfe0 [ 289.208370] ? selinux_file_mprotect+0x5c0/0x5c0 [ 289.208379] ? ioctl_preallocate+0x1a0/0x1a0 [ 289.208392] ? _copy_to_user+0x82/0xd0 [ 289.208410] ? put_timespec64+0xaa/0xf0 [ 289.219295] 0 [ 289.236573] ? nsecs_to_jiffies+0x30/0x30 [ 289.236589] ? security_file_ioctl+0x76/0xb0 [ 289.236594] ? security_file_ioctl+0x83/0xb0 [ 289.236605] SyS_ioctl+0x7f/0xb0 [ 289.236614] ? do_vfs_ioctl+0xfe0/0xfe0 [ 289.236629] do_syscall_64+0x1d5/0x640 [ 289.242734] active_anon:6034 inactive_anon:194 isolated_anon:0 [ 289.242734] active_file:17 inactive_file:17 isolated_file:0 [ 289.242734] unevictable:0 dirty:0 writeback:0 unstable:0 [ 289.242734] slab_reclaimable:11611 slab_unreclaimable:103983 [ 289.242734] mapped:2 shmem:250 pagetables:452 bounce:0 [ 289.242734] free:14879 free_pcp:192 free_cma:0 [ 289.247762] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 289.251350] Node 0 active_anon:24040kB inactive_anon:776kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 289.253693] RIP: 0033:0x45c4a9 [ 289.287478] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.287493] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 289.287497] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 289.287500] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 289.287504] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 289.287507] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 289.301940] DMA free:10384kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.311659] Node 1 active_anon:96kB inactive_anon:0kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 289.344907] lowmem_reserve[]: [ 289.354297] Node 0 [ 289.365921] 0 [ 289.374545] Node 0 [ 289.395968] 2557 [ 289.404410] Mem-Info: [ 289.425718] 2557 [ 289.434949] DMA: [ 289.449284] 2557 [ 289.455028] 4*4kB [ 289.476384] 2557 [ 289.484805] DMA free:10384kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.550097] active_anon:6034 inactive_anon:194 isolated_anon:0 [ 289.550097] active_file:17 inactive_file:17 isolated_file:0 [ 289.550097] unevictable:0 dirty:0 writeback:0 unstable:0 [ 289.550097] slab_reclaimable:11611 slab_unreclaimable:103983 [ 289.550097] mapped:2 shmem:250 pagetables:452 bounce:0 [ 289.550097] free:13777 free_pcp:214 free_cma:0 [ 289.578980] Node 0 [ 289.581372] (UE) [ 289.608850] DMA32 free:18056kB min:36272kB low:45340kB high:54408kB active_anon:24040kB inactive_anon:776kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7168kB pagetables:1776kB bounce:0kB free_pcp:236kB local_pcp:120kB free_cma:0kB [ 289.615467] Node 0 active_anon:24040kB inactive_anon:776kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 289.636848] lowmem_reserve[]: [ 289.642499] Node 1 active_anon:96kB inactive_anon:0kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 289.718224] 0 [ 289.761074] 4*8kB [ 289.770981] syz-executor.3: [ 289.781369] lowmem_reserve[]: [ 289.805175] 0 [ 289.816693] (UE) [ 289.839584] page allocation failure: order:0 [ 289.843366] 0 [ 289.891410] 0 [ 289.928931] 2*16kB [ 289.936043] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 289.937564] (UE) [ 289.941706] (null) [ 289.941713] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 289.941736] CPU: 0 PID: 7902 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 289.941741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.941744] Call Trace: [ 289.941768] dump_stack+0x13e/0x194 [ 289.941783] warn_alloc.cold+0x96/0x1af [ 289.941791] ? zone_watermark_ok_safe+0x280/0x280 [ 289.941800] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 289.941819] __alloc_pages_slowpath+0x2114/0x26c0 [ 289.954763] 2*32kB [ 289.955941] ? warn_alloc+0xf0/0xf0 [ 289.961191] (UE) [ 289.965652] __alloc_pages_nodemask+0x5d3/0x700 [ 290.005269] 2*64kB [ 290.057315] ? lock_downgrade+0x6e0/0x6e0 [ 290.057326] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 290.057335] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 290.057352] alloc_pages_current+0xe7/0x1e0 [ 290.057374] ion_page_pool_alloc+0x118/0x1b0 [ 290.062861] Node 0 [ 290.066440] ion_system_heap_allocate+0x134/0x8d0 [ 290.111522] 2557 [ 290.159235] ? _ion_heap_freelist_drain+0x6e/0x410 [ 290.159252] ? ion_system_heap_free+0x240/0x240 [ 290.159264] ion_alloc+0x611/0x7d0 [ 290.159278] ? ion_dma_buf_release+0x40/0x40 [ 290.167423] DMA free:10324kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.214994] ? __might_fault+0x177/0x1b0 [ 290.215012] ion_ioctl+0xef/0x1f8 [ 290.215022] ? ion_alloc.cold+0x3d/0x3d [ 290.215035] ? selinux_file_ioctl+0x3f7/0x560 [ 290.215047] ? ion_alloc.cold+0x3d/0x3d [ 290.218727] (UE) [ 290.222444] do_vfs_ioctl+0x75a/0xfe0 [ 290.222457] ? selinux_file_mprotect+0x5c0/0x5c0 [ 290.222466] ? ioctl_preallocate+0x1a0/0x1a0 [ 290.222474] ? _copy_to_user+0x82/0xd0 [ 290.222493] ? put_timespec64+0xaa/0xf0 [ 290.227635] 1*128kB [ 290.232786] ? nsecs_to_jiffies+0x30/0x30 [ 290.232801] ? security_file_ioctl+0x76/0xb0 [ 290.232808] ? security_file_ioctl+0x83/0xb0 [ 290.232819] SyS_ioctl+0x7f/0xb0 [ 290.232829] ? do_vfs_ioctl+0xfe0/0xfe0 [ 290.232841] do_syscall_64+0x1d5/0x640 [ 290.232856] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 290.232865] RIP: 0033:0x45c4a9 [ 290.232869] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.232878] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 290.232883] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 290.232893] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 290.235993] 2557 [ 290.239568] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 290.239578] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 290.247753] (E) [ 290.256774] 0 [ 290.266824] 1*256kB [ 290.276644] 0 [ 290.290662] 2557 [ 290.314332] (E) [ 290.331378] Node 0 [ 290.339351] 2557 [ 290.346169] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.369194] lowmem_reserve[]: [ 290.382440] lowmem_reserve[]: [ 290.405619] 0 [ 290.413516] 1*512kB [ 290.434038] 0 [ 290.438003] Node 0 [ 290.447090] 0 [ 290.460831] 0 [ 290.477512] 0 [ 290.490849] (E) [ 290.503617] 0 [ 290.513039] DMA32 free:18160kB min:36272kB low:45340kB high:54408kB active_anon:24040kB inactive_anon:776kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7168kB pagetables:1776kB bounce:0kB free_pcp:320kB local_pcp:108kB free_cma:0kB [ 290.529292] 1*1024kB (E) [ 290.585232] Node 1 [ 290.592654] 2557 [ 290.598218] Normal free:26760kB min:53612kB low:67012kB high:80412kB active_anon:96kB inactive_anon:0kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:32kB bounce:0kB free_pcp:620kB local_pcp:620kB free_cma:0kB [ 290.609317] lowmem_reserve[]: [ 290.622025] lowmem_reserve[]: 0 0 0 0 0 [ 290.622050] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) [ 290.633521] 2557 [ 290.646643] 1*4096kB [ 290.659873] 0 [ 290.666842] (M) [ 290.679931] 2557 [ 290.687919] warn_alloc_show_mem: 1 callbacks suppressed [ 290.687923] Mem-Info: [ 290.689881] 0 [ 290.695038] active_anon:6034 inactive_anon:194 isolated_anon:0 [ 290.695038] active_file:17 inactive_file:17 isolated_file:0 [ 290.695038] unevictable:0 dirty:0 writeback:0 unstable:0 [ 290.695038] slab_reclaimable:11611 slab_unreclaimable:103942 [ 290.695038] mapped:2 shmem:250 pagetables:452 bounce:0 [ 290.695038] free:13811 free_pcp:234 free_cma:0 [ 290.695056] Node 0 active_anon:24040kB inactive_anon:776kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 290.695070] Node 1 active_anon:96kB inactive_anon:0kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 290.695074] Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.712175] 2557 [ 290.724022] = 10324kB [ 290.732174] 0 [ 290.737882] Node 0 [ 290.764567] lowmem_reserve[]: [ 290.780562] 2*2048kB [ 290.792198] DMA32: [ 290.806004] Node 0 [ 290.809064] 0 [ 290.812949] 0 [ 290.821910] 2557 [ 290.827170] DMA32 free:18160kB min:36272kB low:45340kB high:54408kB active_anon:24040kB inactive_anon:776kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7168kB pagetables:1776kB bounce:0kB free_pcp:312kB local_pcp:104kB free_cma:0kB [ 290.828726] 2557 [ 290.879103] (ME) [ 290.890128] 36*4kB [ 290.896500] 0 [ 290.898265] (UME) [ 290.902808] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.919053] 89*8kB [ 290.966821] 1*4096kB [ 290.984076] 2557 [ 291.021285] lowmem_reserve[]: [ 291.036848] (UMEH) [ 291.043956] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 291.043991] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 291.047790] (M) [ 291.059395] 304*16kB [ 291.076178] 0 [ 291.085946] (UME) [ 291.127999] lowmem_reserve[]: [ 291.173034] 2557 [ 291.215763] = 10384kB [ 291.290617] 388*32kB [ 291.305453] 0 [ 291.381159] 0 [ 291.454013] Node 0 DMA32: 36*4kB (UME) 58*8kB (UMEH) 304*16kB (UME) 388*32kB (UME) 155*64kB (UM) 26*128kB (U) 4*256kB (U) 4*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 38304kB [ 291.488436] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 291.490135] (UME) [ 291.503010] Node 0 DMA32 free:74996kB min:36272kB low:45340kB high:54408kB active_anon:24040kB inactive_anon:776kB active_file:32kB inactive_file:632kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7168kB pagetables:1776kB bounce:0kB free_pcp:612kB local_pcp:304kB free_cma:0kB [ 291.507548] 0 [ 291.567165] Node 1 Normal: 3*4kB (UME) 2*8kB (ME) 3*16kB (UME) 5*32kB (UM) 4*64kB (UE) 1*128kB (U) 1*256kB (M) 50*512kB (UM) 156*1024kB (U) 0*2048kB 0*4096kB = 186220kB [ 291.600311] 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18200kB [ 291.607461] 0 0 0 0 [ 291.624592] Node 1 Normal free:186156kB min:53612kB low:67012kB high:80412kB active_anon:96kB inactive_anon:0kB active_file:36kB inactive_file:1236kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:32kB bounce:0kB free_pcp:644kB local_pcp:172kB free_cma:0kB [ 291.640174] Node 0 [ 291.692213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.724414] 0 0 [ 291.727430] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.730131] Normal: [ 291.758626] lowmem_reserve[]: 0 0 0 0 0 [ 291.762666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 291.765482] Node 0 [ 291.800106] lowmem_reserve[]: 0 0 0 0 0 [ 291.807311] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 11472kB [ 291.820184] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.831798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.880140] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 291.890127] lowmem_reserve[]: 0 0 0 0 0 [ 291.896606] Node 1 Normal free:180396kB min:53612kB low:67012kB high:80412kB active_anon:96kB inactive_anon:0kB active_file:36kB inactive_file:1236kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:32kB bounce:0kB free_pcp:644kB local_pcp:172kB free_cma:0kB [ 291.910192] Node 1 [ 291.954120] Node 0 DMA32: 2*4kB (UE) 14*8kB (EH) 10*16kB (UE) 3*32kB (E) 1*64kB (U) 0*128kB 68*256kB (U) 80*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 58808kB [ 291.970111] lowmem_reserve[]: 0 0 0 0 0 [ 291.984079] Normal: 3*4kB (UME) 2*8kB (ME) 3*16kB (UME) 5*32kB (UM) 629*64kB (UE) 57*128kB (U) 50*256kB (UM) 80*512kB (UM) 79*1024kB (U) 8*2048kB (U) 1*4096kB (U) = 202924kB [ 291.990220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.030134] Node 1 Normal free:214120kB min:53612kB low:67012kB high:80412kB active_anon:96kB inactive_anon:0kB active_file:36kB inactive_file:1236kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:32kB bounce:0kB free_pcp:320kB local_pcp:148kB free_cma:0kB [ 292.050114] Node 0 [ 292.069376] lowmem_reserve[]: [ 292.070127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.072761] 0 [ 292.075917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.115188] 906 total pagecache pages [ 292.120826] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 292.138201] 0 pages in swap cache [ 292.155162] Swap cache stats: add 0, delete 0, find 0/0 [ 292.164101] 0 0 0 0 [ 292.167002] Node 0 DMA: 1*4kB (E) 1*8kB (E) 1*16kB (E) 1*32kB (E) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10492kB [ 292.170174] lowmem_reserve[]: [ 292.190149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.200985] Node 1 Normal: 2*4kB (ME) 2*8kB (ME) 2*16kB (ME) 2*32kB (UM) 441*64kB (UE) 65*128kB (U) 53*256kB (UM) 83*512kB (UM) 52*1024kB (U) 7*2048kB (U) 2*4096kB (U) = 168504kB [ 292.230197] 0 0 0 0 0 [ 292.243530] Free swap = 0kB [ 292.247589] Total swap = 0kB [ 292.250169] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.260151] 1965979 pages RAM [ 292.269955] 0 pages HighMem/MovableOnly [ 292.280170] Node 0 DMA: 1*4kB (E) 1*8kB (E) 1*16kB (E) 1*32kB (E) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10492kB [ 292.290119] Node 0 [ 292.310167] 339049 pages reserved [ 292.314439] 893 total pagecache pages [ 292.314960] 0 pages cma reserved [ 292.330294] 0 pages in swap cache [ 292.338120] Swap cache stats: add 0, delete 0, find 0/0 [ 292.340147] DMA32: 3*4kB (UE) 19*8kB (UEH) 10*16kB (UE) 3*32kB (E) 0*64kB 1*128kB (U) 15*256kB (U) 80*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45348kB [ 292.348636] Node 0 [ 292.371193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.384639] Free swap = 0kB [ 292.404771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.421948] Total swap = 0kB [ 292.430100] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 292.433713] DMA32: [ 292.461682] 1965979 pages RAM [ 292.474341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.481674] 0 pages HighMem/MovableOnly [ 292.490205] Node 1 Normal: 42*4kB (UME) 27*8kB (UME) 16*16kB (UME) 6*32kB (UM) 3*64kB (UME) 1*128kB (M) 1*256kB (U) 62*512kB (UM) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 38272kB [ 292.519273] 59*4kB (UME) 70*8kB (UMEH) 12*16kB (UME) 5*32kB (ME) 2*64kB (U) 1*128kB (U) 0*256kB 34*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18812kB [ 292.541729] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.561134] syz-executor.5: [ 292.572375] 339049 pages reserved [ 292.577613] syz-executor.2: [ 292.577907] 0 pages cma reserved [ 292.587909] page allocation failure: order:4 [ 292.591826] page allocation failure: order:4 [ 292.598287] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 292.605581] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 292.606174] (null) [ 292.634555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.641486] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 292.654683] 330 total pagecache pages [ 292.666120] (null) [ 292.666140] syz-executor.5 cpuset=syz5 [ 292.676130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.701083] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 292.709234] CPU: 1 PID: 7897 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 292.710222] mems_allowed=0-1 [ 292.721028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.721036] Call Trace: [ 292.721067] dump_stack+0x13e/0x194 [ 292.721081] warn_alloc.cold+0x96/0x1af [ 292.721089] ? zone_watermark_ok_safe+0x280/0x280 [ 292.721103] ? __alloc_pages_direct_compact+0xba/0x360 [ 292.721112] __alloc_pages_slowpath+0x2114/0x26c0 [ 292.721128] ? save_trace+0x290/0x290 [ 292.721140] ? warn_alloc+0xf0/0xf0 [ 292.770802] Node 1 [ 292.775778] __alloc_pages_nodemask+0x5d3/0x700 [ 292.795988] ? lock_downgrade+0x6e0/0x6e0 [ 292.800793] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 292.807941] alloc_pages_current+0xe7/0x1e0 [ 292.810175] Normal: 908*4kB [ 292.815843] ion_page_pool_alloc+0x118/0x1b0 [ 292.815855] ion_system_heap_allocate+0x134/0x8d0 [ 292.835120] ? _ion_heap_freelist_drain+0x6e/0x410 [ 292.843288] ? ion_system_heap_free+0x240/0x240 [ 292.849806] ion_alloc+0x611/0x7d0 [ 292.854671] ? ion_dma_buf_release+0x40/0x40 [ 292.860409] ? __might_fault+0x177/0x1b0 [ 292.865551] ion_ioctl+0xef/0x1f8 [ 292.869191] ? ion_alloc.cold+0x3d/0x3d [ 292.874482] ? selinux_file_ioctl+0x3f7/0x560 [ 292.880142] (UME) 390*8kB [ 292.880177] ? ion_alloc.cold+0x3d/0x3d [ 292.880192] do_vfs_ioctl+0x75a/0xfe0 [ 292.884075] (UME) [ 292.888723] ? selinux_file_mprotect+0x5c0/0x5c0 [ 292.902063] ? ioctl_preallocate+0x1a0/0x1a0 [ 292.907568] ? _copy_to_user+0x82/0xd0 [ 292.913401] ? put_timespec64+0xaa/0xf0 [ 292.918515] ? nsecs_to_jiffies+0x30/0x30 [ 292.924318] ? security_file_ioctl+0x76/0xb0 [ 292.930126] ? security_file_ioctl+0x83/0xb0 [ 292.935726] SyS_ioctl+0x7f/0xb0 [ 292.939925] ? do_vfs_ioctl+0xfe0/0xfe0 [ 292.940150] 272*16kB [ 292.944871] do_syscall_64+0x1d5/0x640 [ 292.944873] (UME) 36*32kB [ 292.950794] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 292.950806] RIP: 0033:0x45c4a9 [ 292.950810] RSP: 002b:00007ffeeb954df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.950818] RAX: ffffffffffffffda RBX: 0000000000f0b914 RCX: 000000000045c4a9 [ 292.950822] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 292.950826] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 292.950830] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 292.950834] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 292.956382] 0 pages in swap cache [ 292.961311] CPU: 0 PID: 7896 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 292.970705] Swap cache stats: add 0, delete 0, find 0/0 [ 292.974027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.974038] Call Trace: [ 292.986750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.997026] dump_stack+0x13e/0x194 [ 292.997041] warn_alloc.cold+0x96/0x1af [ 292.997049] ? zone_watermark_ok_safe+0x280/0x280 [ 292.997064] ? __alloc_pages_direct_compact+0xba/0x360 [ 292.997075] __alloc_pages_slowpath+0x2114/0x26c0 [ 293.007198] Free swap = 0kB [ 293.018824] ? save_trace+0x290/0x290 [ 293.018840] ? warn_alloc+0xf0/0xf0 [ 293.018863] __alloc_pages_nodemask+0x5d3/0x700 [ 293.030513] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 293.041077] ? lock_downgrade+0x6e0/0x6e0 [ 293.041089] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 293.041102] ? retint_kernel+0x2d/0x2d [ 293.041115] alloc_pages_current+0xe7/0x1e0 [ 293.041132] ion_page_pool_alloc+0x118/0x1b0 [ 293.045378] 330 total pagecache pages [ 293.054776] ion_system_heap_allocate+0x134/0x8d0 [ 293.054788] ? _ion_heap_freelist_drain+0x6e/0x410 [ 293.054795] ? ion_system_heap_free+0x240/0x240 [ 293.054806] ion_alloc+0x611/0x7d0 [ 293.054824] ? ion_dma_buf_release+0x40/0x40 [ 293.061339] Total swap = 0kB [ 293.072789] ? __might_fault+0x177/0x1b0 [ 293.072808] ion_ioctl+0xef/0x1f8 [ 293.072819] ? ion_alloc.cold+0x3d/0x3d [ 293.075613] 1965979 pages RAM [ 293.086489] ? selinux_file_ioctl+0x3f7/0x560 [ 293.086502] ? ion_alloc.cold+0x3d/0x3d [ 293.086513] do_vfs_ioctl+0x75a/0xfe0 [ 293.086523] ? selinux_file_mprotect+0x5c0/0x5c0 [ 293.086532] ? ioctl_preallocate+0x1a0/0x1a0 [ 293.086546] ? _copy_to_user+0x82/0xd0 [ 293.092086] 0 pages in swap cache [ 293.098223] ? put_timespec64+0xaa/0xf0 [ 293.106956] Swap cache stats: add 0, delete 0, find 0/0 [ 293.116713] ? nsecs_to_jiffies+0x30/0x30 [ 293.116727] ? security_file_ioctl+0x76/0xb0 [ 293.116734] ? security_file_ioctl+0x83/0xb0 [ 293.116745] SyS_ioctl+0x7f/0xb0 [ 293.116760] ? do_vfs_ioctl+0xfe0/0xfe0 [ 293.123395] 0 pages HighMem/MovableOnly [ 293.127013] do_syscall_64+0x1d5/0x640 [ 293.133719] 339049 pages reserved [ 293.139327] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 293.148204] Free swap = 0kB [ 293.160828] RIP: 0033:0x45c4a9 [ 293.160836] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.160844] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 293.160848] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 293.160852] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 293.160855] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 293.160859] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 293.190162] (UM) [ 293.200257] 0 pages cma reserved [ 293.220128] 26*64kB [ 293.264302] Out of memory: Kill process 7904 (syz-executor.0) score 999 or sacrifice child [ 293.276839] (UME) [ 293.290129] Total swap = 0kB [ 293.336690] syz-executor.1: [ 293.342606] Killed process 7904 (syz-executor.0) total-vm:39752kB, anon-rss:92kB, file-rss:0kB, shmem-rss:0kB [ 293.347186] 10*128kB [ 293.359024] 1965979 pages RAM [ 293.371547] (UM) [ 293.394155] oom_reaper: reaped process 7904 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 293.398540] page allocation failure: order:4 [ 293.405574] 0 pages HighMem/MovableOnly [ 293.413213] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 293.450133] 339049 pages reserved [ 293.453682] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 293.481497] 0 pages cma reserved [ 293.486386] 2*256kB [ 293.504415] warn_alloc_show_mem: 1 callbacks suppressed [ 293.504420] Mem-Info: [ 293.510145] (U) [ 293.527179] syz-executor.0: [ 293.540144] (null) [ 293.559646] active_anon:6032 inactive_anon:196 isolated_anon:0 [ 293.559646] active_file:16 inactive_file:9 isolated_file:0 [ 293.559646] unevictable:0 dirty:0 writeback:0 unstable:0 [ 293.559646] slab_reclaimable:11616 slab_unreclaimable:104019 [ 293.559646] mapped:2 shmem:250 pagetables:452 bounce:0 [ 293.559646] free:27796 free_pcp:207 free_cma:0 [ 293.561300] (null) [ 293.569145] Node 0 active_anon:24032kB inactive_anon:784kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 293.569160] Node 1 active_anon:96kB inactive_anon:0kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 293.569166] Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.569182] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 293.569197] Node 0 DMA32 free:17832kB min:36272kB low:45340kB high:54408kB active_anon:24032kB inactive_anon:784kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7168kB pagetables:1776kB bounce:0kB free_pcp:544kB local_pcp:12kB free_cma:0kB [ 293.569213] lowmem_reserve[]: 0 0 0 0 0 [ 293.569228] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.569242] lowmem_reserve[]: 0 0 0 [ 293.601679] 55*512kB [ 293.612891] page allocation failure: order:0 [ 293.617609] syz-executor.1 cpuset= [ 293.626477] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 293.640189] (UM) [ 293.685709] , order=0, oom_score_adj=0 [ 293.734122] syz1 [ 293.781392] 0 [ 293.961045] (null) [ 293.972375] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 293.979741] CPU: 1 PID: 7904 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 293.991292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.005673] Call Trace: [ 294.010253] dump_stack+0x13e/0x194 [ 294.015934] mems_allowed=0-1 [ 294.016007] warn_alloc.cold+0x96/0x1af [ 294.025562] ? zone_watermark_ok_safe+0x280/0x280 [ 294.036844] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 294.044261] __alloc_pages_slowpath+0x2114/0x26c0 [ 294.051778] ? warn_alloc+0xf0/0xf0 [ 294.056775] __alloc_pages_nodemask+0x5d3/0x700 [ 294.064225] ? lock_downgrade+0x6e0/0x6e0 [ 294.069539] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 294.074671] 96*1024kB (U) 2*2048kB [ 294.076145] ? retint_kernel+0x2d/0x2d [ 294.076161] alloc_pages_current+0xe7/0x1e0 [ 294.091094] ion_page_pool_alloc+0x118/0x1b0 [ 294.098873] ion_system_heap_allocate+0x134/0x8d0 [ 294.100132] (UM) [ 294.110071] ? rcu_read_lock_sched_held+0x10a/0x130 [ 294.110084] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 294.110098] ? ion_system_heap_free+0x240/0x240 [ 294.110109] ion_alloc+0x1e9/0x7d0 [ 294.110120] ? ion_dma_buf_release+0x40/0x40 [ 294.110137] ? __might_fault+0x177/0x1b0 [ 294.110146] ion_ioctl+0xef/0x1f8 [ 294.110153] ? ion_alloc.cold+0x3d/0x3d [ 294.110167] ? selinux_file_ioctl+0x3f7/0x560 [ 294.110173] ? ion_alloc.cold+0x3d/0x3d [ 294.110183] do_vfs_ioctl+0x75a/0xfe0 [ 294.110190] ? selinux_file_mprotect+0x5c0/0x5c0 [ 294.110199] ? ioctl_preallocate+0x1a0/0x1a0 [ 294.110210] ? _copy_to_user+0x82/0xd0 [ 294.110222] ? put_timespec64+0xaa/0xf0 [ 294.110229] ? nsecs_to_jiffies+0x30/0x30 [ 294.110250] ? security_file_ioctl+0x76/0xb0 [ 294.154609] 0*4096kB [ 294.155511] ? security_file_ioctl+0x83/0xb0 [ 294.195015] = 146272kB [ 294.203711] SyS_ioctl+0x7f/0xb0 [ 294.203724] ? do_vfs_ioctl+0xfe0/0xfe0 [ 294.203735] do_syscall_64+0x1d5/0x640 [ 294.203763] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 294.203772] RIP: 0033:0x45c4a9 [ 294.203777] RSP: 002b:00007ffc25dc5628 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.275672] RAX: ffffffffffffffda RBX: 000000000164f914 RCX: 000000000045c4a9 [ 294.280154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.286477] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 294.286488] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 294.325992] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 294.335985] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 294.359970] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 294.369280] CPU: 1 PID: 7600 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 294.380942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.394370] Call Trace: [ 294.400152] dump_stack+0x13e/0x194 [ 294.404535] dump_header+0x178/0x6d4 [ 294.410166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 294.411139] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 294.434097] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 294.441346] ? ___ratelimit+0x50/0x519 [ 294.447108] oom_kill_process.cold+0x10/0xae3 [ 294.452722] ? lock_acquire+0x170/0x3f0 [ 294.457777] ? lock_downgrade+0x6e0/0x6e0 [ 294.465994] out_of_memory+0x2d5/0x1110 [ 294.472128] ? oom_killer_disable+0x1c0/0x1c0 [ 294.480204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.481690] ? mutex_trylock+0x152/0x1a0 [ 294.501316] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 294.507617] ? warn_alloc+0xf0/0xf0 [ 294.512946] __alloc_pages_nodemask+0x5d3/0x700 [ 294.522089] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 294.531938] ? lock_downgrade+0x6e0/0x6e0 [ 294.535982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 294.542651] alloc_pages_current+0xe7/0x1e0 [ 294.542669] __page_cache_alloc+0x245/0x3d0 [ 294.542679] filemap_fault+0xc21/0x1c30 [ 294.542704] ? __lock_page_or_retry+0x8a0/0x8a0 [ 294.542717] ? lock_acquire+0x170/0x3f0 [ 294.542727] ? ext4_filemap_fault+0x7c/0xb0 [ 294.542740] ext4_filemap_fault+0x84/0xb0 [ 294.542748] __do_fault+0xfa/0x380 [ 294.542756] __handle_mm_fault+0x22e9/0x3280 [ 294.542765] ? copy_page_range+0x1d70/0x1d70 [ 294.542773] ? find_held_lock+0x2d/0x110 [ 294.542789] handle_mm_fault+0x288/0x7a0 [ 294.542799] __do_page_fault+0x4bc/0xb40 [ 294.542809] ? vmalloc_fault+0xdf0/0xdf0 [ 294.542816] ? do_page_fault+0x60/0x4f2 [ 294.542826] ? page_fault+0x2f/0x50 [ 294.542832] page_fault+0x45/0x50 [ 294.542840] RIP: 25dc5890:0x45de8 [ 294.542845] RSP: 000b:0000000000000003 EFLAGS: 00000003 [ 294.547677] 0 [ 294.562269] CPU: 0 PID: 7899 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 294.575417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.585730] Node 1 [ 294.593284] Call Trace: [ 294.593316] dump_stack+0x13e/0x194 [ 294.593329] warn_alloc.cold+0x96/0x1af [ 294.593338] ? zone_watermark_ok_safe+0x280/0x280 [ 294.593352] ? __alloc_pages_direct_compact+0xba/0x360 [ 294.593364] __alloc_pages_slowpath+0x2114/0x26c0 [ 294.601637] Normal free:571572kB min:53612kB low:67012kB high:80412kB active_anon:136kB inactive_anon:0kB active_file:536kB inactive_file:1568kB unevictable:0kB writepending:240kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:32kB bounce:0kB free_pcp:360kB local_pcp:116kB free_cma:0kB [ 294.608585] ? save_trace+0x290/0x290 [ 294.617338] lowmem_reserve[]: [ 294.621764] ? warn_alloc+0xf0/0xf0 [ 294.621784] __alloc_pages_nodemask+0x5d3/0x700 [ 294.621800] ? lock_downgrade+0x6e0/0x6e0 [ 294.621807] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 294.621821] ? find_held_lock+0x2d/0x110 [ 294.632753] 0 [ 294.638865] alloc_pages_current+0xe7/0x1e0 [ 294.648031] Mem-Info: [ 294.655213] ion_page_pool_alloc+0x118/0x1b0 [ 294.655225] ion_system_heap_allocate+0x134/0x8d0 [ 294.655235] ? _ion_heap_freelist_drain+0x6e/0x410 [ 294.655242] ? ion_system_heap_free+0x240/0x240 [ 294.655253] ion_alloc+0x611/0x7d0 [ 294.655266] ? ion_dma_buf_release+0x40/0x40 [ 294.661734] 0 [ 294.669464] ? __might_fault+0x177/0x1b0 [ 294.678541] active_anon:6039 inactive_anon:196 isolated_anon:0 [ 294.678541] active_file:142 inactive_file:400 isolated_file:0 [ 294.678541] unevictable:0 dirty:61 writeback:0 unstable:0 [ 294.678541] slab_reclaimable:11622 slab_unreclaimable:104011 [ 294.678541] mapped:350 shmem:250 pagetables:452 bounce:0 [ 294.678541] free:153955 free_pcp:326 free_cma:0 [ 294.684721] ion_ioctl+0xef/0x1f8 [ 294.684734] ? ion_alloc.cold+0x3d/0x3d [ 294.684748] ? selinux_file_ioctl+0x3f7/0x560 [ 294.684754] ? ion_alloc.cold+0x3d/0x3d [ 294.684768] do_vfs_ioctl+0x75a/0xfe0 [ 294.684781] ? selinux_file_mprotect+0x5c0/0x5c0 [ 294.691510] 0 [ 294.698896] ? ioctl_preallocate+0x1a0/0x1a0 [ 294.707622] Node 0 active_anon:24020kB inactive_anon:784kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 294.709944] ? _copy_to_user+0x82/0xd0 [ 294.722646] 0 [ 294.735887] ? put_timespec64+0xaa/0xf0 [ 294.735896] ? nsecs_to_jiffies+0x30/0x30 [ 294.735910] ? security_file_ioctl+0x76/0xb0 [ 294.735916] ? security_file_ioctl+0x83/0xb0 [ 294.735929] SyS_ioctl+0x7f/0xb0 [ 294.735938] ? do_vfs_ioctl+0xfe0/0xfe0 [ 294.735951] do_syscall_64+0x1d5/0x640 [ 294.735975] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 294.735991] RIP: 0033:0x45c4a9 [ 294.741127] Node 1 active_anon:136kB inactive_anon:0kB active_file:536kB inactive_file:1568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1392kB dirty:240kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 294.746164] RSP: 002b:00007ffcdb28dbb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.751635] Node 0 [ 294.756415] RAX: ffffffffffffffda RBX: 0000000001d74914 RCX: 000000000045c4a9 [ 294.767190] 0 [ 294.777214] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 294.777220] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 294.777224] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 294.777228] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 294.821906] 801 total pagecache pages [ 294.844232] DMA free:10332kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.883398] 0 pages in swap cache [ 294.886000] lowmem_reserve[]: [ 294.910276] Swap cache stats: add 0, delete 0, find 0/0 [ 294.920586] Free swap = 0kB [ 294.930370] 0 [ 294.960153] Total swap = 0kB [ 294.974213] Node 0 [ 295.026154] 1965979 pages RAM [ 295.040809] 2557 [ 295.045369] 0 pages HighMem/MovableOnly [ 295.070123] warn_alloc_show_mem: 1 callbacks suppressed [ 295.070127] Mem-Info: [ 295.078660] 339049 pages reserved [ 295.090543] 2557 [ 295.094096] 0 pages cma reserved [ 295.150669] active_anon:6039 inactive_anon:196 isolated_anon:0 [ 295.150669] active_file:142 inactive_file:400 isolated_file:0 [ 295.150669] unevictable:0 dirty:61 writeback:0 unstable:0 [ 295.150669] slab_reclaimable:11622 slab_unreclaimable:104011 [ 295.150669] mapped:350 shmem:250 pagetables:452 bounce:0 [ 295.150669] free:133429 free_pcp:329 free_cma:0 [ 295.484184] 2557 [ 295.531961] DMA: 1*4kB (E) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10332kB [ 295.567128] Node 0 DMA32: 518*4kB (U) 107*8kB (UE) 59*16kB (UME) 37*32kB (UME) 16*64kB (U) 0*128kB 1*256kB (U) 24*512kB (U) 15*1024kB (U) 0*2048kB 0*4096kB = 33984kB [ 295.593538] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 295.614980] 2557 [ 295.619329] Node 0 DMA32 free:33916kB min:36272kB low:45340kB high:54408kB active_anon:24020kB inactive_anon:784kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:4kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7168kB pagetables:1776kB bounce:0kB free_pcp:920kB local_pcp:292kB free_cma:0kB [ 295.675081] Node 1 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 1*32kB (E) 1*64kB (E) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 81*1024kB (UME) 60*2048kB (UME) 4*4096kB (U) = 224108kB [ 295.718346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.736863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 295.752056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.770630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 295.789733] 822 total pagecache pages [ 295.800099] 0 pages in swap cache [ 295.800691] lowmem_reserve[]: [ 295.806985] Swap cache stats: add 0, delete 0, find 0/0 [ 295.806996] Free swap = 0kB [ 295.832276] Total swap = 0kB [ 295.835997] 1965979 pages RAM [ 295.839940] 0 pages HighMem/MovableOnly [ 295.841154] 0 0 0 0 0 [ 295.849532] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.853161] 339049 pages reserved [ 295.924716] 0 pages cma reserved [ 295.960128] lowmem_reserve[]: 0 0 0 0 0 [ 295.966495] Node 1 Normal free:69440kB min:53612kB low:67012kB high:80412kB active_anon:136kB inactive_anon:0kB active_file:556kB inactive_file:1592kB unevictable:0kB writepending:288kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:32kB bounce:0kB free_pcp:256kB local_pcp:184kB free_cma:0kB [ 296.104500] Node 0 active_anon:24020kB inactive_anon:784kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 296.120132] lowmem_reserve[]: 0 0 0 0 0 [ 296.227419] Node 0 DMA: 1*4kB (E) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10332kB [ 296.291811] Node 1 active_anon:136kB inactive_anon:0kB active_file:556kB inactive_file:1648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1436kB dirty:300kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 296.308111] Node 0 [ 296.350780] Node 0 DMA free:10332kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.410915] DMA32: 1*4kB (U) 11*8kB (E) 20*16kB (UME) 7*32kB (ME) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 41*1024kB (U) 6*2048kB (U) 1*4096kB (U) = 59772kB [ 296.416999] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 296.470815] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 296.510197] Node 0 DMA32 free:97988kB min:36272kB low:45340kB high:54408kB active_anon:24020kB inactive_anon:784kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:4kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7168kB pagetables:1776kB bounce:0kB free_pcp:864kB local_pcp:216kB free_cma:0kB [ 296.551082] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 0*16kB 2*32kB (UE) 501*64kB (UE) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 182*1024kB (UME) 56*2048kB (UME) 12*4096kB (U) = 384148kB [ 296.664267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.680153] lowmem_reserve[]: 0 0 0 0 0 [ 296.686022] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.710158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 296.728458] lowmem_reserve[]: 0 0 0 0 0 [ 296.771117] Node 1 Normal free:330332kB min:53612kB low:67012kB high:80412kB active_anon:136kB inactive_anon:0kB active_file:556kB inactive_file:1648kB unevictable:0kB writepending:300kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:32kB bounce:0kB free_pcp:248kB local_pcp:64kB free_cma:0kB [ 296.830265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.860376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 296.924530] 825 total pagecache pages [ 296.931159] 0 pages in swap cache [ 296.936900] Swap cache stats: add 0, delete 0, find 0/0 [ 296.970295] lowmem_reserve[]: 0 0 0 0 0 [ 296.977311] Node 0 DMA: 1*4kB (E) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10332kB [ 297.013099] Free swap = 0kB [ 297.030384] Total swap = 0kB [ 297.060172] 1965979 pages RAM [ 297.066593] 0 pages HighMem/MovableOnly [ 297.090274] 339049 pages reserved [ 297.099325] 0 pages cma reserved [ 297.120187] Node 0 DMA32: 0*4kB 14*8kB (UE) 20*16kB (UME) 7*32kB (ME) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 27*1024kB (U) 6*2048kB (U) 1*4096kB (U) = 45264kB [ 297.170849] Out of memory: Kill process 7577 (syz-execprog) score 1 or sacrifice child [ 297.210873] Killed process 7597 (syz-executor.1) total-vm:39756kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 297.250213] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 297.301645] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (U) 2*32kB (UE) 2*64kB (UE) 8*128kB (UME) 34*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 6*2048kB (UME) 12*4096kB (U) = 75496kB [ 297.424352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.450704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 297.472148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.489371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 297.543691] 827 total pagecache pages [ 297.549227] 0 pages in swap cache [ 297.597730] Swap cache stats: add 0, delete 0, find 0/0 [ 297.665777] Free swap = 0kB [ 297.699854] Total swap = 0kB [ 297.723655] 1965979 pages RAM [ 297.737546] syz-execprog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 297.760197] 0 pages HighMem/MovableOnly [ 297.778021] 339049 pages reserved [ 297.783912] 0 pages cma reserved [ 297.790491] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 297.817703] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 297.830129] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 297.837498] syz-execprog cpuset= [ 297.867600] CPU: 0 PID: 7899 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 297.890107] / [ 297.890668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.890676] mems_allowed=0-1 [ 297.919567] Call Trace: [ 297.925476] dump_stack+0x13e/0x194 [ 297.932490] warn_alloc.cold+0x96/0x1af [ 297.938082] ? zone_watermark_ok_safe+0x280/0x280 [ 297.946846] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 297.955778] __alloc_pages_slowpath+0x2114/0x26c0 [ 297.964461] ? warn_alloc+0xf0/0xf0 [ 297.970063] __alloc_pages_nodemask+0x5d3/0x700 [ 297.975733] ? lock_downgrade+0x6e0/0x6e0 [ 297.980777] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 297.986979] alloc_pages_current+0xe7/0x1e0 [ 297.994734] ion_page_pool_alloc+0x118/0x1b0 [ 298.001084] ion_system_heap_allocate+0x134/0x8d0 [ 298.008738] ? _ion_heap_freelist_drain+0x6e/0x410 [ 298.015336] ? ion_system_heap_free+0x240/0x240 [ 298.022956] ion_alloc+0x611/0x7d0 [ 298.029232] ? ion_dma_buf_release+0x40/0x40 [ 298.035481] ? __might_fault+0x177/0x1b0 [ 298.042118] ion_ioctl+0xef/0x1f8 [ 298.046666] ? ion_alloc.cold+0x3d/0x3d [ 298.055697] ? selinux_file_ioctl+0x3f7/0x560 [ 298.066206] ? ion_alloc.cold+0x3d/0x3d [ 298.072735] do_vfs_ioctl+0x75a/0xfe0 [ 298.077580] ? selinux_file_mprotect+0x5c0/0x5c0 [ 298.088042] ? ioctl_preallocate+0x1a0/0x1a0 [ 298.093802] ? _copy_to_user+0x82/0xd0 [ 298.100815] ? put_timespec64+0xaa/0xf0 [ 298.109944] ? nsecs_to_jiffies+0x30/0x30 [ 298.116656] ? security_file_ioctl+0x76/0xb0 [ 298.122455] ? security_file_ioctl+0x83/0xb0 [ 298.128448] SyS_ioctl+0x7f/0xb0 [ 298.132549] ? do_vfs_ioctl+0xfe0/0xfe0 [ 298.139505] do_syscall_64+0x1d5/0x640 [ 298.145618] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 298.152429] RIP: 0033:0x45c4a9 [ 298.157456] RSP: 002b:00007ffcdb28dbb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.168584] RAX: ffffffffffffffda RBX: 0000000001d74914 RCX: 000000000045c4a9 [ 298.181011] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 298.193798] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 298.203041] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 298.215302] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 298.227432] CPU: 1 PID: 7578 Comm: syz-execprog Not tainted 4.14.172-syzkaller #0 [ 298.236235] syz-executor.2 cpuset= [ 298.238819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.238830] Call Trace: [ 298.260150] syz2 [ 298.260776] dump_stack+0x13e/0x194 [ 298.265570] mems_allowed=0-1 [ 298.269047] dump_header+0x178/0x6d4 [ 298.283919] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 298.291088] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 298.303110] ? ___ratelimit+0x50/0x519 [ 298.308328] oom_kill_process.cold+0x10/0xae3 [ 298.315139] ? lock_acquire+0x170/0x3f0 [ 298.320755] ? lock_downgrade+0x6e0/0x6e0 [ 298.327247] out_of_memory+0x2d5/0x1110 [ 298.335560] ? oom_killer_disable+0x1c0/0x1c0 [ 298.344667] ? mutex_trylock+0x152/0x1a0 [ 298.350796] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 298.360324] ? warn_alloc+0xf0/0xf0 [ 298.369463] __alloc_pages_nodemask+0x5d3/0x700 [ 298.377374] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 298.385706] ? lock_downgrade+0x6e0/0x6e0 [ 298.393129] alloc_pages_current+0xe7/0x1e0 [ 298.402167] __page_cache_alloc+0x245/0x3d0 [ 298.409236] filemap_fault+0xc21/0x1c30 [ 298.417450] ? __lock_page_or_retry+0x8a0/0x8a0 [ 298.431240] ? lock_acquire+0x170/0x3f0 [ 298.440921] ? ext4_filemap_fault+0x7c/0xb0 [ 298.451121] ext4_filemap_fault+0x84/0xb0 2020/03/09 18:32:51 executed programs: 9 [ 298.466153] __do_fault+0xfa/0x380 [ 298.473195] __handle_mm_fault+0x22e9/0x3280 [ 298.483859] ? copy_page_range+0x1d70/0x1d70 [ 298.495411] ? find_held_lock+0x2d/0x110 [ 298.502810] handle_mm_fault+0x288/0x7a0 [ 298.509995] __do_page_fault+0x4bc/0xb40 [ 298.516467] ? vmalloc_fault+0xdf0/0xdf0 [ 298.524206] ? do_page_fault+0x60/0x4f2 [ 298.532743] ? page_fault+0x2f/0x50 [ 298.541270] page_fault+0x45/0x50 [ 298.549348] RIP: 00f1:0x11 [ 298.554255] RSP: 0000:000000c420041f18 EFLAGS: 0042d2f0 [ 298.554288] CPU: 0 PID: 7897 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 298.569800] Mem-Info: [ 298.581472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.581479] Call Trace: [ 298.581513] dump_stack+0x13e/0x194 [ 298.581526] warn_alloc.cold+0x96/0x1af [ 298.581535] ? zone_watermark_ok_safe+0x280/0x280 [ 298.581543] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 298.581559] __alloc_pages_slowpath+0x2114/0x26c0 [ 298.581577] ? warn_alloc+0xf0/0xf0 [ 298.581595] __alloc_pages_nodemask+0x5d3/0x700 [ 298.581608] ? lock_downgrade+0x6e0/0x6e0 [ 298.581626] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 298.588557] active_anon:6028 inactive_anon:193 isolated_anon:0 [ 298.588557] active_file:53 inactive_file:1735 isolated_file:0 [ 298.588557] unevictable:0 dirty:10 writeback:0 unstable:0 [ 298.588557] slab_reclaimable:11656 slab_unreclaimable:103716 [ 298.588557] mapped:1167 shmem:250 pagetables:447 bounce:0 [ 298.588557] free:47923 free_pcp:225 free_cma:0 [ 298.603900] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 298.603920] alloc_pages_current+0xe7/0x1e0 [ 298.603939] ion_page_pool_alloc+0x118/0x1b0 [ 298.603948] ion_system_heap_allocate+0x134/0x8d0 [ 298.603960] ? _ion_heap_freelist_drain+0x6e/0x410 [ 298.607571] Node 0 active_anon:23924kB inactive_anon:772kB active_file:36kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 298.612641] ? ion_system_heap_free+0x240/0x240 [ 298.612657] ion_alloc+0x611/0x7d0 [ 298.612672] ? ion_dma_buf_release+0x40/0x40 [ 298.612686] ? __might_fault+0x177/0x1b0 [ 298.612696] ion_ioctl+0xef/0x1f8 [ 298.612704] ? ion_alloc.cold+0x3d/0x3d [ 298.612720] ? selinux_file_ioctl+0x3f7/0x560 [ 298.621535] Node 1 active_anon:188kB inactive_anon:0kB active_file:176kB inactive_file:6912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4660kB dirty:36kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 298.630174] ? ion_alloc.cold+0x3d/0x3d [ 298.630194] do_vfs_ioctl+0x75a/0xfe0 [ 298.630208] ? selinux_file_mprotect+0x5c0/0x5c0 [ 298.630231] ? ioctl_preallocate+0x1a0/0x1a0 [ 298.630246] ? _copy_to_user+0x82/0xd0 [ 298.638322] Node 0 [ 298.646532] ? put_timespec64+0xaa/0xf0 [ 298.646541] ? nsecs_to_jiffies+0x30/0x30 [ 298.646555] ? security_file_ioctl+0x76/0xb0 [ 298.646561] ? security_file_ioctl+0x83/0xb0 [ 298.646574] SyS_ioctl+0x7f/0xb0 [ 298.646588] ? do_vfs_ioctl+0xfe0/0xfe0 [ 298.655396] DMA free:10340kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.663708] do_syscall_64+0x1d5/0x640 [ 298.663727] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 298.663735] RIP: 0033:0x45c4a9 [ 298.663739] RSP: 002b:00007ffeeb954df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.663766] RAX: ffffffffffffffda RBX: 0000000000f0b914 RCX: 000000000045c4a9 [ 298.671492] lowmem_reserve[]: [ 298.685173] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 298.685180] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 298.685183] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 298.685187] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 298.750142] warn_alloc_show_mem: 1 callbacks suppressed [ 298.750147] Mem-Info: [ 298.750175] active_anon:6028 inactive_anon:193 isolated_anon:0 [ 298.750175] active_file:53 inactive_file:1735 isolated_file:0 [ 298.750175] unevictable:0 dirty:10 writeback:0 unstable:0 [ 298.750175] slab_reclaimable:11656 slab_unreclaimable:103716 [ 298.750175] mapped:1167 shmem:250 pagetables:447 bounce:0 [ 298.750175] free:13713 free_pcp:215 free_cma:0 [ 298.750188] Node 0 active_anon:23924kB inactive_anon:772kB active_file:36kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 298.750201] Node 1 active_anon:188kB inactive_anon:0kB active_file:176kB inactive_file:6912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4660kB dirty:36kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 298.750213] Node 0 [ 298.777324] 0 [ 298.786534] DMA free:10340kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.799001] 2557 [ 298.841591] lowmem_reserve[]: [ 298.847873] 2557 [ 298.855120] 0 [ 298.990262] 2557 [ 299.039433] 2557 [ 299.170150] 2557 [ 299.486899] 2557 [ 299.500211] Node 0 DMA32 free:107468kB min:36272kB low:45340kB high:54408kB active_anon:23924kB inactive_anon:772kB active_file:36kB inactive_file:28kB unevictable:0kB writepending:8kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7104kB pagetables:1680kB bounce:0kB free_pcp:1368kB local_pcp:636kB free_cma:0kB [ 299.504858] 2557 [ 299.551761] lowmem_reserve[]: 0 0 0 0 0 [ 299.551785] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.551803] lowmem_reserve[]: 0 0 0 0 0 [ 299.551822] Node 1 Normal free:475208kB min:53612kB low:67012kB high:80412kB active_anon:188kB inactive_anon:0kB active_file:176kB inactive_file:6980kB unevictable:0kB writepending:44kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:124kB bounce:0kB free_pcp:1356kB local_pcp:720kB free_cma:0kB [ 299.551841] lowmem_reserve[]: 0 0 0 0 0 [ 299.551860] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB [ 299.638326] 2557 [ 299.727866] (E) [ 299.743727] Node 0 DMA32 free:197968kB min:36272kB low:45340kB high:54408kB active_anon:23924kB inactive_anon:772kB active_file:36kB inactive_file:28kB unevictable:0kB writepending:8kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7104kB pagetables:1680kB bounce:0kB free_pcp:1336kB local_pcp:712kB free_cma:0kB [ 299.760162] 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10340kB [ 299.847232] Node 0 DMA32: 846*4kB (UME) 1821*8kB (UME) 521*16kB (UME) 592*32kB (UME) 748*64kB (UME) 247*128kB (UM) 82*256kB (UM) 37*512kB (UM) 32*1024kB (U) 12*2048kB (UM) 0*4096kB = 222000kB [ 299.862118] lowmem_reserve[]: 0 0 0 0 0 [ 299.883507] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.960174] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 299.964584] lowmem_reserve[]: [ 299.977334] Node 1 [ 299.988894] 0 [ 300.010219] Normal: 1008*4kB (UM) 183*8kB (UM) 214*16kB (UM) 255*32kB (UM) 2503*64kB (UME) 239*128kB (UM) 174*256kB (U) 156*512kB (UM) 272*1024kB (U) 21*2048kB (UM) 9*4096kB (UE) = 690680kB [ 300.025274] 0 [ 300.044368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.084400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 300.125217] 0 0 0 [ 300.137973] Node 1 Normal free:777280kB min:53612kB low:67012kB high:80412kB active_anon:188kB inactive_anon:0kB active_file:176kB inactive_file:6980kB unevictable:0kB writepending:44kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:128kB bounce:0kB free_pcp:1300kB local_pcp:652kB free_cma:0kB [ 300.160196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.189131] lowmem_reserve[]: 0 0 0 0 0 [ 300.198358] Node 0 DMA: 6*4kB (UE) 8*8kB (UE) 5*16kB (UE) 3*32kB (UE) 3*64kB (UE) 2*128kB (UE) 4*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 11464kB [ 300.198431] Node 0 DMA32: 1003*4kB (UME) 1848*8kB (UME) 711*16kB (UME) 594*32kB (UME) 749*64kB (UME) [ 300.203670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 300.258392] 2071 total pagecache pages [ 300.258416] 249*128kB (UM) 86*256kB (UM) 39*512kB (UM) 32*1024kB (U) 12*2048kB (UM) 0*4096kB = 228316kB [ 300.304065] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 300.310227] 0 pages in swap cache [ 300.325370] Node 1 Normal: 1451*4kB (UM) 625*8kB (UM) 660*16kB (UM) 698*32kB (UM) 2946*64kB (UME) 255*128kB (UM) 185*256kB (U) 167*512kB (UM) 355*1024kB (U) 28*2048kB (UM) 9*4096kB (UE) = 855476kB [ 300.370149] Swap cache stats: add 0, delete 0, find 0/0 [ 300.377049] Free swap = 0kB [ 300.390461] Total swap = 0kB [ 300.393838] 1965979 pages RAM [ 300.394790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.397972] 0 pages HighMem/MovableOnly [ 300.397979] 339049 pages reserved [ 300.397982] 0 pages cma reserved [ 300.397990] Out of memory: Kill process 7577 (syz-execprog) score 1 or sacrifice child [ 300.398070] Killed process 7595 (syz-executor.0) total-vm:39756kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 300.461653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 300.461662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.461667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 300.461671] 2071 total pagecache pages [ 300.461681] 0 pages in swap cache [ 300.461686] Swap cache stats: add 0, delete 0, find 0/0 [ 300.461689] Free swap = 0kB [ 300.461692] Total swap = 0kB [ 300.461699] 1965979 pages RAM [ 300.461703] 0 pages HighMem/MovableOnly [ 300.461706] 339049 pages reserved [ 300.461709] 0 pages cma reserved [ 301.797155] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 301.825622] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 301.869879] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 301.886905] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 301.888128] CPU: 0 PID: 7909 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 301.921217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.937253] Call Trace: [ 301.941445] dump_stack+0x13e/0x194 [ 301.949013] warn_alloc.cold+0x96/0x1af [ 301.954957] ? zone_watermark_ok_safe+0x280/0x280 [ 301.963519] ? __alloc_pages_direct_compact+0xba/0x360 [ 301.972194] __alloc_pages_slowpath+0x2114/0x26c0 [ 301.982068] ? warn_alloc+0xf0/0xf0 [ 301.988276] __alloc_pages_nodemask+0x5d3/0x700 [ 301.998266] ? lock_downgrade+0x6e0/0x6e0 [ 302.004576] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 302.013817] ? ion_page_pool_alloc+0x28/0x1b0 [ 302.020202] alloc_pages_current+0xe7/0x1e0 [ 302.028360] ion_page_pool_alloc+0x118/0x1b0 [ 302.039265] ion_system_heap_allocate+0x134/0x8d0 [ 302.046604] ? rcu_read_lock_sched_held+0x10a/0x130 [ 302.056573] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 302.063110] ? ion_system_heap_free+0x240/0x240 [ 302.068836] ion_alloc+0x1e9/0x7d0 [ 302.073119] ? ion_dma_buf_release+0x40/0x40 [ 302.081585] ? __might_fault+0x177/0x1b0 [ 302.093556] ion_ioctl+0xef/0x1f8 [ 302.101612] ? ion_alloc.cold+0x3d/0x3d [ 302.107430] ? selinux_file_ioctl+0x3f7/0x560 [ 302.115238] ? ion_alloc.cold+0x3d/0x3d [ 302.122586] do_vfs_ioctl+0x75a/0xfe0 [ 302.129217] ? selinux_file_mprotect+0x5c0/0x5c0 [ 302.138291] ? ioctl_preallocate+0x1a0/0x1a0 [ 302.148620] ? _copy_to_user+0x82/0xd0 [ 302.153110] ? put_timespec64+0xaa/0xf0 [ 302.158118] ? nsecs_to_jiffies+0x30/0x30 [ 302.164141] ? security_file_ioctl+0x76/0xb0 [ 302.169767] ? security_file_ioctl+0x83/0xb0 [ 302.176144] SyS_ioctl+0x7f/0xb0 [ 302.182627] ? do_vfs_ioctl+0xfe0/0xfe0 [ 302.188961] do_syscall_64+0x1d5/0x640 [ 302.194430] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.201912] RIP: 0033:0x45c4a9 [ 302.205901] RSP: 002b:00007ffeeb954df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.217884] RAX: ffffffffffffffda RBX: 0000000000f0b914 RCX: 000000000045c4a9 [ 302.227638] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 302.240213] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.253885] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 302.266652] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 302.278105] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 302.280207] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 302.290957] syz-executor.4: [ 302.307090] syz-executor.2 cpuset= [ 302.314539] syz-executor.5 cpuset= [ 302.320617] syz2 [ 302.321889] page allocation failure: order:4 [ 302.328184] mems_allowed=0-1 [ 302.337088] CPU: 1 PID: 7910 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 302.338874] syz5 [ 302.343979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.354151] mems_allowed=0-1 [ 302.356931] Call Trace: [ 302.379345] dump_stack+0x13e/0x194 [ 302.390662] warn_alloc.cold+0x96/0x1af [ 302.397785] ? zone_watermark_ok_safe+0x280/0x280 [ 302.410348] ? __alloc_pages_direct_compact+0xba/0x360 [ 302.419798] __alloc_pages_slowpath+0x2114/0x26c0 [ 302.427396] ? save_trace+0x290/0x290 [ 302.432573] ? warn_alloc+0xf0/0xf0 [ 302.439447] __alloc_pages_nodemask+0x5d3/0x700 [ 302.447559] ? lock_downgrade+0x6e0/0x6e0 [ 302.452140] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 302.458523] alloc_pages_current+0xe7/0x1e0 [ 302.464753] ion_page_pool_alloc+0x118/0x1b0 [ 302.470188] ion_system_heap_allocate+0x134/0x8d0 [ 302.477131] ? rcu_read_lock_sched_held+0x10a/0x130 [ 302.483996] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 302.490278] ? ion_system_heap_free+0x240/0x240 [ 302.496957] ion_alloc+0x1e9/0x7d0 [ 302.501698] ? ion_dma_buf_release+0x40/0x40 [ 302.507762] ? __might_fault+0x177/0x1b0 [ 302.514549] ion_ioctl+0xef/0x1f8 [ 302.519998] ? ion_alloc.cold+0x3d/0x3d [ 302.525549] ? selinux_file_ioctl+0x3f7/0x560 [ 302.530313] ? ion_alloc.cold+0x3d/0x3d [ 302.536291] do_vfs_ioctl+0x75a/0xfe0 [ 302.541173] ? selinux_file_mprotect+0x5c0/0x5c0 [ 302.548266] ? ioctl_preallocate+0x1a0/0x1a0 [ 302.553760] ? _copy_to_user+0x82/0xd0 [ 302.561398] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 302.562353] ? put_timespec64+0xaa/0xf0 [ 302.583310] ? nsecs_to_jiffies+0x30/0x30 [ 302.591604] ? security_file_ioctl+0x76/0xb0 [ 302.597913] ? security_file_ioctl+0x83/0xb0 [ 302.610083] SyS_ioctl+0x7f/0xb0 [ 302.618973] ? do_vfs_ioctl+0xfe0/0xfe0 [ 302.624848] do_syscall_64+0x1d5/0x640 [ 302.629607] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.639451] RIP: 0033:0x45c4a9 [ 302.644627] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.659880] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 302.672612] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 302.684925] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.693761] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 302.703248] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 302.712068] CPU: 0 PID: 7896 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 302.712763] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 302.723277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.723285] Call Trace: [ 302.723309] dump_stack+0x13e/0x194 [ 302.723322] warn_alloc.cold+0x96/0x1af [ 302.723331] ? zone_watermark_ok_safe+0x280/0x280 [ 302.723345] ? save_trace+0x290/0x290 [ 302.733087] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 302.750168] ? rcu_read_lock_sched_held+0x10a/0x130 [ 302.750194] __alloc_pages_slowpath+0x2114/0x26c0 [ 302.750217] ? warn_alloc+0xf0/0xf0 [ 302.750235] __alloc_pages_nodemask+0x5d3/0x700 [ 302.753791] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 302.760089] ? lock_downgrade+0x6e0/0x6e0 [ 302.760103] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 302.760116] ? policy_node+0x2b/0x120 [ 302.760130] alloc_pages_current+0xe7/0x1e0 [ 302.767089] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 302.774995] ion_page_pool_alloc+0x118/0x1b0 [ 302.775007] ion_system_heap_allocate+0x134/0x8d0 [ 302.775029] ? _ion_heap_freelist_drain+0x6e/0x410 [ 302.775042] ? ion_system_heap_free+0x240/0x240 [ 302.782225] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 302.797218] ion_alloc+0x611/0x7d0 [ 302.797242] ? ion_dma_buf_release+0x40/0x40 [ 302.797262] ? __might_fault+0x177/0x1b0 [ 302.797277] ion_ioctl+0xef/0x1f8 [ 302.805513] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 302.815780] ? ion_alloc.cold+0x3d/0x3d [ 302.815796] ? selinux_file_ioctl+0x3f7/0x560 [ 302.815802] ? ion_alloc.cold+0x3d/0x3d [ 302.815819] do_vfs_ioctl+0x75a/0xfe0 [ 302.823713] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 302.832935] ? selinux_file_mprotect+0x5c0/0x5c0 [ 302.832948] ? ioctl_preallocate+0x1a0/0x1a0 [ 302.832956] ? _copy_to_user+0x82/0xd0 [ 302.832967] ? put_timespec64+0xaa/0xf0 [ 302.832979] ? nsecs_to_jiffies+0x30/0x30 [ 302.844235] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 302.850082] ? security_file_ioctl+0x76/0xb0 [ 302.850092] ? security_file_ioctl+0x83/0xb0 [ 302.850103] SyS_ioctl+0x7f/0xb0 [ 302.850114] ? do_vfs_ioctl+0xfe0/0xfe0 [ 302.850131] do_syscall_64+0x1d5/0x640 [ 302.850148] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.856523] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 302.861872] RIP: 0033:0x45c4a9 [ 302.861879] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.861888] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 302.861892] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 302.861896] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.861900] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 302.861904] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 302.863961] CPU: 0 PID: 7598 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 302.880135] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 302.883650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.896416] (null) [ 302.900447] Call Trace: [ 302.900476] dump_stack+0x13e/0x194 [ 302.900491] dump_header+0x178/0x6d4 [ 302.900501] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 302.900511] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 302.900524] ? ___ratelimit+0x50/0x519 [ 302.910245] syz-executor.4 cpuset= [ 302.925438] oom_kill_process.cold+0x10/0xae3 [ 302.925459] ? lock_acquire+0x170/0x3f0 [ 302.925465] ? lock_downgrade+0x6e0/0x6e0 [ 302.925476] out_of_memory+0x2d5/0x1110 [ 302.925488] ? oom_killer_disable+0x1c0/0x1c0 [ 302.925505] ? mutex_trylock+0x152/0x1a0 [ 302.931570] syz4 [ 302.938758] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 302.949662] mems_allowed=0-1 [ 302.954586] ? warn_alloc+0xf0/0xf0 [ 302.954609] __alloc_pages_nodemask+0x5d3/0x700 [ 302.954620] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 302.954635] ? lock_downgrade+0x6e0/0x6e0 [ 302.954658] alloc_pages_current+0xe7/0x1e0 [ 303.240452] syz-executor.0: [ 303.243192] __page_cache_alloc+0x245/0x3d0 [ 303.260124] page allocation failure: order:4 [ 303.262767] filemap_fault+0xc21/0x1c30 [ 303.267856] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 303.273333] ? __lock_page_or_retry+0x8a0/0x8a0 [ 303.273347] ? lock_acquire+0x170/0x3f0 [ 303.273356] ? ext4_filemap_fault+0x7c/0xb0 [ 303.273370] ext4_filemap_fault+0x84/0xb0 [ 303.290173] warn_alloc_show_mem: 1 callbacks suppressed [ 303.290180] Mem-Info: [ 303.296282] __do_fault+0xfa/0x380 [ 303.310146] (null) [ 303.312736] __handle_mm_fault+0x22e9/0x3280 [ 303.316210] syz-executor.0 cpuset= [ 303.324736] ? copy_page_range+0x1d70/0x1d70 [ 303.324751] ? find_held_lock+0x2d/0x110 [ 303.324768] handle_mm_fault+0x288/0x7a0 [ 303.324779] __do_page_fault+0x4bc/0xb40 [ 303.324789] ? vmalloc_fault+0xdf0/0xdf0 [ 303.324801] ? do_page_fault+0x60/0x4f2 [ 303.333826] active_anon:7547 inactive_anon:196 isolated_anon:0 [ 303.333826] active_file:14 inactive_file:15 isolated_file:1 [ 303.333826] unevictable:0 dirty:6 writeback:0 unstable:0 [ 303.333826] slab_reclaimable:11695 slab_unreclaimable:103669 [ 303.333826] mapped:2 shmem:250 pagetables:422 bounce:0 [ 303.333826] free:13588 free_pcp:88 free_cma:0 [ 303.340769] ? page_fault+0x2f/0x50 [ 303.340780] page_fault+0x45/0x50 [ 303.340793] RIP: eb955060:0x498b4 [ 303.340797] RSP: 498cb:0000000000000003 EFLAGS: 00000003 [ 303.493787] CPU: 0 PID: 7907 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 303.561078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.572037] Call Trace: [ 303.575789] dump_stack+0x13e/0x194 [ 303.583436] warn_alloc.cold+0x96/0x1af [ 303.588479] ? zone_watermark_ok_safe+0x280/0x280 [ 303.595377] ? __alloc_pages_direct_compact+0xba/0x360 [ 303.603929] __alloc_pages_slowpath+0x2114/0x26c0 [ 303.610766] ? save_trace+0x290/0x290 [ 303.615344] ? warn_alloc+0xf0/0xf0 [ 303.620225] __alloc_pages_nodemask+0x5d3/0x700 [ 303.626934] ? lock_downgrade+0x6e0/0x6e0 [ 303.632657] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 303.639777] ? save_trace+0x290/0x290 [ 303.644054] alloc_pages_current+0xe7/0x1e0 [ 303.652986] ion_page_pool_alloc+0x118/0x1b0 [ 303.659969] ion_system_heap_allocate+0x134/0x8d0 [ 303.666918] ? rcu_read_lock_sched_held+0x10a/0x130 [ 303.670136] Node 0 active_anon:29964kB inactive_anon:776kB active_file:136kB inactive_file:336kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:108kB dirty:24kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 303.675169] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 303.730493] ? ion_system_heap_free+0x240/0x240 [ 303.736163] ion_alloc+0x1e9/0x7d0 [ 303.743525] ? ion_dma_buf_release+0x40/0x40 [ 303.751633] ? __might_fault+0x177/0x1b0 [ 303.757749] ion_ioctl+0xef/0x1f8 [ 303.762352] ? ion_alloc.cold+0x3d/0x3d [ 303.768278] ? selinux_file_ioctl+0x3f7/0x560 [ 303.770114] Node 1 active_anon:224kB inactive_anon:8kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 303.775122] ? ion_alloc.cold+0x3d/0x3d [ 303.775140] do_vfs_ioctl+0x75a/0xfe0 [ 303.834636] ? selinux_file_mprotect+0x5c0/0x5c0 [ 303.843345] ? ioctl_preallocate+0x1a0/0x1a0 [ 303.850925] ? _copy_to_user+0x82/0xd0 [ 303.853086] Node 0 [ 303.857914] ? put_timespec64+0xaa/0xf0 [ 303.857932] DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.857939] lowmem_reserve[]: [ 303.861425] ? nsecs_to_jiffies+0x30/0x30 [ 303.861447] ? security_file_ioctl+0x76/0xb0 [ 303.861453] ? security_file_ioctl+0x83/0xb0 [ 303.861466] SyS_ioctl+0x7f/0xb0 [ 303.861476] ? do_vfs_ioctl+0xfe0/0xfe0 [ 303.861490] do_syscall_64+0x1d5/0x640 [ 303.861508] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 303.867246] 0 [ 303.916787] RIP: 0033:0x45c4a9 [ 303.916792] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.916800] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 303.916804] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 303.916808] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 303.916812] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 303.916816] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 304.070662] 2557 2557 2557 2557 [ 304.075039] Node 0 DMA32 free:217736kB min:36272kB low:45340kB high:54408kB active_anon:29964kB inactive_anon:776kB active_file:36kB inactive_file:840kB unevictable:0kB writepending:24kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7040kB pagetables:1604kB bounce:0kB free_pcp:408kB local_pcp:128kB free_cma:0kB [ 304.100408] syz0 [ 304.137157] lowmem_reserve[]: 0 0 0 0 0 [ 304.154105] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.187169] lowmem_reserve[]: 0 0 0 0 0 [ 304.193608] Node 1 Normal free:796160kB min:53612kB low:67012kB high:80412kB active_anon:224kB inactive_anon:8kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:84kB bounce:0kB free_pcp:1460kB local_pcp:720kB free_cma:0kB [ 304.232041] lowmem_reserve[]: 0 0 0 0 0 [ 304.238436] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10316kB [ 304.270124] Node 0 DMA32: 38*4kB (UM) 46*8kB (UME) 38*16kB (UME) 533*32kB (UEH) 385*64kB (UM) 37*128kB (UM) 29*256kB (UME) 21*512kB (U) 134*1024kB (UM) 12*2048kB (U) 0*4096kB = 227528kB [ 304.340139] mems_allowed=0-1 [ 304.344402] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 304.348028] CPU: 0 PID: 7904 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 304.359032] Node 1 [ 304.365230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.365239] Call Trace: [ 304.365290] dump_stack+0x13e/0x194 [ 304.365303] warn_alloc.cold+0x96/0x1af [ 304.365311] ? zone_watermark_ok_safe+0x280/0x280 [ 304.365325] ? __alloc_pages_direct_compact+0xba/0x360 [ 304.365334] __alloc_pages_slowpath+0x2114/0x26c0 [ 304.365352] ? save_trace+0x290/0x290 [ 304.365371] ? warn_alloc+0xf0/0xf0 [ 304.369361] Normal: [ 304.380425] __alloc_pages_nodemask+0x5d3/0x700 [ 304.380445] ? lock_downgrade+0x6e0/0x6e0 [ 304.380452] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 304.380541] ? audit_add_tree_rule.cold+0x2f/0x2f [ 304.380557] alloc_pages_current+0xe7/0x1e0 [ 304.383374] 1739*4kB [ 304.388522] ion_page_pool_alloc+0x118/0x1b0 [ 304.394135] (UM) [ 304.401399] ion_system_heap_allocate+0x134/0x8d0 [ 304.401412] ? _ion_heap_freelist_drain+0x6e/0x410 [ 304.401419] ? ion_system_heap_free+0x240/0x240 [ 304.401430] ion_alloc+0x611/0x7d0 [ 304.401449] ? ion_dma_buf_release+0x40/0x40 [ 304.408734] 265*8kB [ 304.414946] ? __might_fault+0x177/0x1b0 [ 304.414963] ion_ioctl+0xef/0x1f8 [ 304.414973] ? ion_alloc.cold+0x3d/0x3d [ 304.414986] ? selinux_file_ioctl+0x3f7/0x560 [ 304.414992] ? ion_alloc.cold+0x3d/0x3d [ 304.415003] do_vfs_ioctl+0x75a/0xfe0 [ 304.415011] ? selinux_file_mprotect+0x5c0/0x5c0 [ 304.415020] ? ioctl_preallocate+0x1a0/0x1a0 [ 304.415037] ? _copy_to_user+0x82/0xd0 [ 304.420814] (UM) [ 304.424333] ? put_timespec64+0xaa/0xf0 [ 304.429862] 252*16kB [ 304.437374] ? nsecs_to_jiffies+0x30/0x30 [ 304.437391] ? security_file_ioctl+0x76/0xb0 [ 304.437397] ? security_file_ioctl+0x83/0xb0 [ 304.437409] SyS_ioctl+0x7f/0xb0 [ 304.437421] ? do_vfs_ioctl+0xfe0/0xfe0 [ 304.437434] do_syscall_64+0x1d5/0x640 [ 304.437480] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 304.442834] (UM) [ 304.449622] RIP: 0033:0x45c4a9 [ 304.456616] warn_alloc_show_mem: 2 callbacks suppressed [ 304.456621] Mem-Info: [ 304.463261] RSP: 002b:00007ffc25dc5628 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.463275] RAX: ffffffffffffffda RBX: 000000000164f914 RCX: 000000000045c4a9 [ 304.463279] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 304.463283] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 304.463287] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 304.463291] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 304.487294] Mem-Info: [ 304.493517] 251*32kB [ 304.507211] active_anon:7547 inactive_anon:196 isolated_anon:0 [ 304.507211] active_file:39 inactive_file:345 isolated_file:0 [ 304.507211] unevictable:0 dirty:2 writeback:0 unstable:0 [ 304.507211] slab_reclaimable:11698 slab_unreclaimable:103680 [ 304.507211] mapped:244 shmem:250 pagetables:422 bounce:0 [ 304.507211] free:282897 free_pcp:695 free_cma:0 [ 304.610470] (UM) [ 304.811675] active_anon:7547 inactive_anon:196 isolated_anon:0 [ 304.811675] active_file:164 inactive_file:207 isolated_file:32 [ 304.811675] unevictable:0 dirty:2 writeback:25 unstable:0 [ 304.811675] slab_reclaimable:11698 slab_unreclaimable:103705 [ 304.811675] mapped:244 shmem:250 pagetables:422 bounce:0 [ 304.811675] free:293922 free_pcp:509 free_cma:0 [ 304.814520] Node 0 active_anon:29964kB inactive_anon:776kB active_file:636kB inactive_file:804kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:976kB dirty:8kB writeback:100kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 304.890145] Node 0 active_anon:29964kB inactive_anon:776kB active_file:716kB inactive_file:804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:976kB dirty:8kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 304.932354] Node 1 active_anon:224kB inactive_anon:8kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 304.965946] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.005202] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 305.014510] Node 0 DMA32 free:213516kB min:36272kB low:45340kB high:54408kB active_anon:29964kB inactive_anon:776kB active_file:916kB inactive_file:1596kB unevictable:0kB writepending:8kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1604kB bounce:0kB free_pcp:592kB local_pcp:532kB free_cma:0kB [ 305.051083] 1914*64kB (UME) 125*128kB (UM) 82*256kB (UM) 110*512kB (UM) 471*1024kB (U) 49*2048kB (U) 13*4096kB (U) = 872852kB [ 305.065250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.078541] lowmem_reserve[]: 0 0 0 0 0 [ 305.086487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 305.097658] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.142094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.164123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 305.177308] 1607 total pagecache pages [ 305.193488] 0 pages in swap cache 2020/03/09 18:32:58 executed programs: 12 [ 305.203472] Node 1 active_anon:224kB inactive_anon:8kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 305.203666] Swap cache stats: add 0, delete 0, find 0/0 [ 305.244058] lowmem_reserve[]: 0 0 0 0 0 [ 305.253139] Node 1 Normal free:944276kB min:53612kB low:67012kB high:80412kB active_anon:224kB inactive_anon:8kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:84kB bounce:0kB free_pcp:1332kB local_pcp:640kB free_cma:0kB [ 305.287559] Free swap = 0kB [ 305.291335] lowmem_reserve[]: 0 0 0 0 0 [ 305.295648] Total swap = 0kB [ 305.298742] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.299041] Node 0 [ 305.345212] 1965979 pages RAM [ 305.352188] 0 pages HighMem/MovableOnly [ 305.357257] 339049 pages reserved [ 305.362456] 0 pages cma reserved 2020/03/09 18:32:58 result: hanged=false err=executor 1: failed to write control pipe: write |1: broken pipe [ 305.378288] DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10316kB [ 305.413616] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 305.430152] Node 0 DMA32: 0*4kB 2*8kB (ME) 3*16kB (UME) 5*32kB (UEH) 0*64kB 1*128kB (U) 3*256kB (ME) 0*512kB 25*1024kB (UM) 9*2048kB (U) 0*4096kB = 45152kB [ 305.480238] Node 0 DMA32 free:45232kB min:36272kB low:45340kB high:54408kB active_anon:30024kB inactive_anon:776kB active_file:1220kB inactive_file:6468kB unevictable:0kB writepending:20kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1604kB bounce:0kB free_pcp:264kB local_pcp:156kB free_cma:0kB [ 305.480266] Node 0 Normal: [ 305.586286] lowmem_reserve[]: 0 0 0 0 0 [ 305.610208] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.620155] 0*4kB [ 305.694270] lowmem_reserve[]: 0 0 0 0 0 [ 305.700119] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 305.716388] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 13*64kB (ME) 18*128kB (UM) 8*256kB (UM) 92*512kB (UM) 473*1024kB (U) 54*2048kB (U) 13*4096kB (U) = 700580kB [ 305.718825] Node 1 [ 305.761514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.775065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 305.787517] Normal free:653800kB min:53612kB low:67012kB high:80412kB active_anon:224kB inactive_anon:8kB active_file:24kB inactive_file:1120kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:84kB bounce:0kB free_pcp:168kB local_pcp:104kB free_cma:0kB [ 305.800134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.890253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 305.906489] lowmem_reserve[]: 0 0 0 0 0 [ 305.911769] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10316kB [ 305.920155] 2569 total pagecache pages [ 305.974350] 0 pages in swap cache [ 305.977999] Swap cache stats: add 0, delete 0, find 0/0 [ 305.986802] Free swap = 0kB [ 305.988728] Node 0 DMA32: 1*4kB (U) 49*8kB (UMEH) 3*16kB (UME) 4*32kB (EH) 0*64kB 1*128kB (U) 4*256kB (UME) 1*512kB (U) 24*1024kB (UM) 9*2048kB [ 305.990426] Total swap = 0kB [ 306.000411] (U) [ 306.030285] 1965979 pages RAM [ 306.037764] 0 pages HighMem/MovableOnly [ 306.060161] 0*4096kB = 45244kB [ 306.063794] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 306.077317] 339049 pages reserved [ 306.090158] 0 pages cma reserved [ 306.103574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.117440] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 14*64kB (UME) 17*128kB (M) 7*256kB (M) 4*512kB (UM) 208*1024kB (U) 54*2048kB (U) 13*4096kB (U) = 383836kB [ 306.150707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.154894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.174427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.200288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.210016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.240139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.244803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.249646] 2606 total pagecache pages [ 306.300239] 0 pages in swap cache [ 306.305036] Swap cache stats: add 0, delete 0, find 0/0 [ 306.307632] device bridge_slave_1 left promiscuous mode [ 306.326098] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.339330] Free swap = 0kB [ 306.342876] Total swap = 0kB [ 306.347905] 1965979 pages RAM [ 306.380141] 0 pages HighMem/MovableOnly [ 306.385127] 339049 pages reserved [ 306.388784] 0 pages cma reserved [ 306.410180] Out of memory: Kill process 7909 (syz-executor.2) score 999 or sacrifice child [ 306.418978] Killed process 7909 (syz-executor.2) total-vm:39752kB, anon-rss:2140kB, file-rss:0kB, shmem-rss:0kB [ 306.451535] device bridge_slave_0 left promiscuous mode [ 306.513212] oom_reaper: reaped process 7909 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 306.514716] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.641027] oom_reaper: reaped process 7907 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 306.719894] device veth1_macvtap left promiscuous mode [ 306.727128] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 306.743051] syz-executor.4: [ 306.753536] oom_reaper: reaped process 7910 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 306.768036] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 306.790186] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 306.793538] syz-executor.2: [ 306.827731] device veth0_macvtap left promiscuous mode [ 306.841588] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 306.849621] syz-execprog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 306.867525] CPU: 0 PID: 7910 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 306.893166] syz-executor.4 cpuset= [ 306.907617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.907624] Call Trace: [ 306.907664] dump_stack+0x13e/0x194 [ 306.907678] warn_alloc.cold+0x96/0x1af [ 306.907687] ? zone_watermark_ok_safe+0x280/0x280 [ 306.907705] ? wait_for_completion+0x390/0x390 [ 306.907720] __alloc_pages_slowpath+0x2114/0x26c0 [ 306.914450] device veth1_vlan left promiscuous mode [ 306.930017] ? warn_alloc+0xf0/0xf0 [ 306.930039] __alloc_pages_nodemask+0x5d3/0x700 [ 306.930054] ? lock_downgrade+0x6e0/0x6e0 [ 306.930063] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 306.930078] ? audit_add_tree_rule.cold+0x2f/0x2f [ 306.930094] alloc_pages_current+0xe7/0x1e0 [ 306.930117] ion_page_pool_alloc+0x118/0x1b0 [ 306.932970] page allocation failure: order:0 [ 306.936772] ion_system_heap_allocate+0x134/0x8d0 [ 306.941257] syz4 [ 306.947335] ? rcu_read_lock_sched_held+0x10a/0x130 [ 306.954395] syz-execprog cpuset= [ 306.961398] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 306.961412] ? ion_system_heap_free+0x240/0x240 [ 306.961422] ion_alloc+0x1e9/0x7d0 [ 306.961436] ? ion_dma_buf_release+0x40/0x40 [ 306.961454] ? __might_fault+0x177/0x1b0 [ 306.973964] device veth0_vlan left promiscuous mode [ 306.979761] ion_ioctl+0xef/0x1f8 [ 306.991765] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 306.997259] ? ion_alloc.cold+0x3d/0x3d [ 307.006400] mems_allowed=0-1 [ 307.013099] ? selinux_file_ioctl+0x3f7/0x560 [ 307.013114] ? ion_alloc.cold+0x3d/0x3d [ 307.013125] do_vfs_ioctl+0x75a/0xfe0 [ 307.013135] ? selinux_file_mprotect+0x5c0/0x5c0 [ 307.013143] ? ioctl_preallocate+0x1a0/0x1a0 [ 307.013153] ? _copy_to_user+0x82/0xd0 [ 307.013168] ? put_timespec64+0xaa/0xf0 [ 307.017801] (null) [ 307.022601] ? nsecs_to_jiffies+0x30/0x30 [ 307.022619] ? security_file_ioctl+0x76/0xb0 [ 307.022625] ? security_file_ioctl+0x83/0xb0 [ 307.022637] SyS_ioctl+0x7f/0xb0 [ 307.022647] ? do_vfs_ioctl+0xfe0/0xfe0 [ 307.022659] do_syscall_64+0x1d5/0x640 [ 307.022678] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.027452] / [ 307.033513] RIP: 0033:0x45c4a9 [ 307.050218] syz-executor.2 cpuset= [ 307.052104] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 [ 307.064369] mems_allowed=0-1 [ 307.070975] ORIG_RAX: 0000000000000010 [ 307.070984] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 307.070988] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 307.070992] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.070996] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 307.071000] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 307.083397] syz-executor.0 cpuset= [ 307.095054] syz2 [ 307.364388] syz0 [ 307.368390] CPU: 1 PID: 7907 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 307.378635] warn_alloc_show_mem: 1 callbacks suppressed [ 307.378640] Mem-Info: [ 307.380028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.380032] Call Trace: [ 307.380055] dump_stack+0x13e/0x194 [ 307.380067] warn_alloc.cold+0x96/0x1af [ 307.380075] ? zone_watermark_ok_safe+0x280/0x280 [ 307.380091] ? wait_for_completion+0x390/0x390 [ 307.380101] __alloc_pages_slowpath+0x2114/0x26c0 [ 307.380119] ? warn_alloc+0xf0/0xf0 [ 307.380140] __alloc_pages_nodemask+0x5d3/0x700 [ 307.387899] active_anon:6010 inactive_anon:196 isolated_anon:0 [ 307.387899] active_file:12 inactive_file:12 isolated_file:0 [ 307.387899] unevictable:0 dirty:0 writeback:0 unstable:0 [ 307.387899] slab_reclaimable:11736 slab_unreclaimable:103812 [ 307.387899] mapped:2 shmem:250 pagetables:421 bounce:0 [ 307.387899] free:13572 free_pcp:46 free_cma:0 [ 307.389389] ? lock_downgrade+0x6e0/0x6e0 [ 307.409639] Node 0 active_anon:23772kB inactive_anon:776kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 307.410053] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 307.410070] alloc_pages_current+0xe7/0x1e0 [ 307.410085] ion_page_pool_alloc+0x118/0x1b0 [ 307.410094] ion_system_heap_allocate+0x134/0x8d0 [ 307.410105] ? rcu_read_lock_sched_held+0x10a/0x130 [ 307.410115] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 307.414536] Node 1 active_anon:268kB inactive_anon:8kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 307.419671] ? ion_system_heap_free+0x240/0x240 [ 307.433037] Node 0 [ 307.436359] ion_alloc+0x1e9/0x7d0 [ 307.445567] DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.482718] ? ion_dma_buf_release+0x40/0x40 [ 307.482735] ? __might_fault+0x177/0x1b0 [ 307.482744] ion_ioctl+0xef/0x1f8 [ 307.482758] ? ion_alloc.cold+0x3d/0x3d [ 307.482773] ? selinux_file_ioctl+0x3f7/0x560 [ 307.482779] ? ion_alloc.cold+0x3d/0x3d [ 307.482792] do_vfs_ioctl+0x75a/0xfe0 [ 307.482800] ? selinux_file_mprotect+0x5c0/0x5c0 [ 307.482808] ? ioctl_preallocate+0x1a0/0x1a0 [ 307.482818] ? _copy_to_user+0x82/0xd0 [ 307.482829] ? put_timespec64+0xaa/0xf0 [ 307.482837] ? nsecs_to_jiffies+0x30/0x30 [ 307.482849] ? security_file_ioctl+0x76/0xb0 [ 307.482856] ? security_file_ioctl+0x83/0xb0 [ 307.482864] SyS_ioctl+0x7f/0xb0 [ 307.482871] ? do_vfs_ioctl+0xfe0/0xfe0 [ 307.482885] do_syscall_64+0x1d5/0x640 [ 307.495902] mems_allowed=0-1 [ 307.517785] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.517795] RIP: 0033:0x45c4a9 [ 307.517799] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.517807] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 307.517811] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 307.517815] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.517819] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 307.517823] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 307.544328] CPU: 1 PID: 7578 Comm: syz-execprog Not tainted 4.14.172-syzkaller #0 [ 307.549612] lowmem_reserve[]: [ 307.576490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.576495] Call Trace: [ 307.576519] dump_stack+0x13e/0x194 [ 307.576533] dump_header+0x178/0x6d4 [ 307.576543] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 307.576552] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 307.576560] ? ___ratelimit+0x50/0x519 [ 307.576569] oom_kill_process.cold+0x10/0xae3 [ 307.576578] ? lock_acquire+0x170/0x3f0 [ 307.576589] ? lock_downgrade+0x6e0/0x6e0 [ 307.581578] 0 [ 307.583771] out_of_memory+0x2d5/0x1110 [ 307.587950] 2557 [ 307.615867] ? oom_killer_disable+0x1c0/0x1c0 [ 307.615878] ? mutex_trylock+0x152/0x1a0 [ 307.615889] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 307.615907] ? warn_alloc+0xf0/0xf0 [ 307.615924] __alloc_pages_nodemask+0x5d3/0x700 [ 307.615933] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 307.615943] ? lock_downgrade+0x6e0/0x6e0 [ 307.615958] alloc_pages_current+0xe7/0x1e0 [ 307.615967] __page_cache_alloc+0x245/0x3d0 [ 307.615978] filemap_fault+0xc21/0x1c30 [ 307.615993] ? __lock_page_or_retry+0x8a0/0x8a0 [ 307.616003] ? lock_acquire+0x170/0x3f0 [ 307.616014] ? ext4_filemap_fault+0x7c/0xb0 [ 307.616027] ext4_filemap_fault+0x84/0xb0 [ 307.616039] __do_fault+0xfa/0x380 [ 307.650146] 2557 [ 307.650434] __handle_mm_fault+0x22e9/0x3280 [ 307.654944] 2557 [ 307.659179] ? copy_page_range+0x1d70/0x1d70 [ 307.680187] 2557 [ 307.681943] ? find_held_lock+0x2d/0x110 [ 307.691026] handle_mm_fault+0x288/0x7a0 [ 307.691050] __do_page_fault+0x4bc/0xb40 [ 307.691060] ? vmalloc_fault+0xdf0/0xdf0 [ 307.691067] ? do_page_fault+0x60/0x4f2 [ 307.691078] ? page_fault+0x2f/0x50 [ 307.691085] page_fault+0x45/0x50 [ 307.691100] RIP: 00f1:0x11 [ 307.711086] Node 0 [ 307.712044] RSP: 0000:000000c420041f18 EFLAGS: 0042d2f0 [ 307.719726] DMA32 free:18408kB min:36272kB low:45340kB high:54408kB active_anon:23772kB inactive_anon:776kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6944kB pagetables:1564kB bounce:0kB free_pcp:240kB local_pcp:16kB free_cma:0kB [ 307.980114] Mem-Info: [ 308.000115] CPU: 0 PID: 7904 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 308.009170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.010154] active_anon:6010 inactive_anon:196 isolated_anon:0 [ 308.010154] active_file:12 inactive_file:1262 isolated_file:0 [ 308.010154] unevictable:0 dirty:0 writeback:0 unstable:0 [ 308.010154] slab_reclaimable:11736 slab_unreclaimable:103380 [ 308.010154] mapped:752 shmem:250 pagetables:421 bounce:0 [ 308.010154] free:29001 free_pcp:414 free_cma:0 [ 308.020119] Call Trace: [ 308.020151] dump_stack+0x13e/0x194 [ 308.020164] warn_alloc.cold+0x96/0x1af [ 308.020172] ? zone_watermark_ok_safe+0x280/0x280 [ 308.020181] ? save_trace+0x290/0x290 [ 308.020190] ? rcu_read_lock_sched_held+0x10a/0x130 [ 308.020219] __alloc_pages_slowpath+0x2114/0x26c0 [ 308.086645] ? warn_alloc+0xf0/0xf0 [ 308.090332] __alloc_pages_nodemask+0x5d3/0x700 [ 308.095144] ? lock_downgrade+0x6e0/0x6e0 [ 308.099596] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 308.105111] ? retint_kernel+0x2d/0x2d [ 308.109047] alloc_pages_current+0xe7/0x1e0 [ 308.113913] ion_page_pool_alloc+0x118/0x1b0 [ 308.118605] ion_system_heap_allocate+0x134/0x8d0 [ 308.124969] ? _ion_heap_freelist_drain+0x6e/0x410 [ 308.130761] ? ion_system_heap_free+0x240/0x240 [ 308.137037] ion_alloc+0x611/0x7d0 [ 308.140999] ? ion_dma_buf_release+0x40/0x40 [ 308.145517] ? __might_fault+0x177/0x1b0 [ 308.149621] ion_ioctl+0xef/0x1f8 [ 308.153982] ? ion_alloc.cold+0x3d/0x3d [ 308.158343] ? selinux_file_ioctl+0x3f7/0x560 [ 308.163062] ? ion_alloc.cold+0x3d/0x3d [ 308.167145] do_vfs_ioctl+0x75a/0xfe0 [ 308.171019] ? selinux_file_mprotect+0x5c0/0x5c0 [ 308.176079] ? ioctl_preallocate+0x1a0/0x1a0 [ 308.181077] ? _copy_to_user+0x82/0xd0 [ 308.185209] Node 0 active_anon:23772kB inactive_anon:776kB active_file:1936kB inactive_file:1984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3008kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 308.185270] ? put_timespec64+0xaa/0xf0 [ 308.218105] ? nsecs_to_jiffies+0x30/0x30 [ 308.222323] ? security_file_ioctl+0x76/0xb0 [ 308.227123] ? security_file_ioctl+0x83/0xb0 [ 308.231765] SyS_ioctl+0x7f/0xb0 [ 308.235278] ? do_vfs_ioctl+0xfe0/0xfe0 [ 308.239366] do_syscall_64+0x1d5/0x640 [ 308.243317] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.248895] RIP: 0033:0x45c4a9 [ 308.250104] Node 1 active_anon:268kB inactive_anon:8kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 308.252092] RSP: 002b:00007ffc25dc5628 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.287219] syz-executor.4: [ 308.288435] RAX: ffffffffffffffda RBX: 000000000164f914 RCX: 000000000045c4a9 [ 308.288445] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 308.291545] mems_allowed=0-1 [ 308.298758] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 308.306345] page allocation failure: order:4 [ 308.309381] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 308.321975] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 308.323195] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 308.340276] Node 0 [ 308.372749] lowmem_reserve[]: 0 0 0 0 0 [ 308.381125] (null) [ 308.389619] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.407293] CPU: 1 PID: 7909 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 308.431311] lowmem_reserve[]: [ 308.436048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.436061] 0 [ 308.440680] Call Trace: [ 308.440710] dump_stack+0x13e/0x194 [ 308.440723] warn_alloc.cold+0x96/0x1af [ 308.440731] ? zone_watermark_ok_safe+0x280/0x280 [ 308.440739] ? save_trace+0x290/0x290 [ 308.440749] ? rcu_read_lock_sched_held+0x10a/0x130 [ 308.440773] __alloc_pages_slowpath+0x2114/0x26c0 [ 308.440791] ? warn_alloc+0xf0/0xf0 [ 308.440808] __alloc_pages_nodemask+0x5d3/0x700 [ 308.440825] ? lock_downgrade+0x6e0/0x6e0 [ 308.457504] 0 [ 308.461009] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 308.461031] alloc_pages_current+0xe7/0x1e0 [ 308.461053] ion_page_pool_alloc+0x118/0x1b0 [ 308.461062] ion_system_heap_allocate+0x134/0x8d0 [ 308.461076] ? rcu_read_lock_sched_held+0x10a/0x130 [ 308.461083] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 308.461091] ? ion_system_heap_free+0x240/0x240 [ 308.461104] ion_alloc+0x1e9/0x7d0 [ 308.475410] 0 [ 308.477581] ? ion_dma_buf_release+0x40/0x40 [ 308.486626] 0 [ 308.490372] ? __might_fault+0x177/0x1b0 [ 308.490390] ion_ioctl+0xef/0x1f8 [ 308.490401] ? ion_alloc.cold+0x3d/0x3d [ 308.490414] ? selinux_file_ioctl+0x3f7/0x560 [ 308.490420] ? ion_alloc.cold+0x3d/0x3d [ 308.490430] do_vfs_ioctl+0x75a/0xfe0 [ 308.490437] ? selinux_file_mprotect+0x5c0/0x5c0 [ 308.490446] ? ioctl_preallocate+0x1a0/0x1a0 [ 308.490456] ? _copy_to_user+0x82/0xd0 [ 308.490468] ? put_timespec64+0xaa/0xf0 [ 308.490479] ? nsecs_to_jiffies+0x30/0x30 [ 308.499554] 0 [ 308.501400] ? security_file_ioctl+0x76/0xb0 [ 308.501407] ? security_file_ioctl+0x83/0xb0 [ 308.501418] SyS_ioctl+0x7f/0xb0 [ 308.501427] ? do_vfs_ioctl+0xfe0/0xfe0 [ 308.501438] do_syscall_64+0x1d5/0x640 [ 308.501452] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.501460] RIP: 0033:0x45c4a9 [ 308.501464] RSP: 002b:00007ffeeb954df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.501477] RAX: ffffffffffffffda RBX: 0000000000f0b914 RCX: 000000000045c4a9 [ 308.511398] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 308.511404] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 308.511409] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 308.511412] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 308.530119] syz-executor.4 cpuset= [ 308.535551] Node 1 [ 308.537489] syz4 [ 308.544429] Normal free:38284kB min:53612kB low:67012kB high:80412kB active_anon:268kB inactive_anon:8kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:120kB bounce:0kB free_pcp:116kB local_pcp:4kB free_cma:0kB [ 308.563737] DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.567903] lowmem_reserve[]: [ 308.580495] lowmem_reserve[]: [ 308.588643] 0 [ 308.589406] 0 [ 308.594179] 0 0 0 0 [ 308.594195] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10316kB [ 308.594289] Node 0 DMA32: [ 308.612387] mems_allowed=0-1 [ 308.617894] 155*4kB [ 308.619400] CPU: 1 PID: 7907 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 308.623701] (UMH) [ 308.625924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.625935] Call Trace: [ 308.635657] 285*8kB [ 308.637628] dump_stack+0x13e/0x194 [ 308.641381] (UMEH) [ 308.645831] warn_alloc.cold+0x96/0x1af [ 308.655392] 49*16kB [ 308.658539] ? zone_watermark_ok_safe+0x280/0x280 [ 308.662036] (UMEH) [ 308.671367] ? __alloc_pages_direct_compact+0xba/0x360 [ 308.671395] __alloc_pages_slowpath+0x2114/0x26c0 [ 308.671426] ? save_trace+0x290/0x290 [ 308.671449] ? warn_alloc+0xf0/0xf0 [ 308.671478] __alloc_pages_nodemask+0x5d3/0x700 [ 308.671493] ? lock_downgrade+0x6e0/0x6e0 [ 308.671507] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 308.671530] ? find_held_lock+0x2d/0x110 [ 308.671587] alloc_pages_current+0xe7/0x1e0 [ 308.671629] ion_page_pool_alloc+0x118/0x1b0 [ 308.671664] ion_system_heap_allocate+0x134/0x8d0 [ 308.682204] warn_alloc_show_mem: 1 callbacks suppressed [ 308.682209] Mem-Info: [ 308.690758] ? _ion_heap_freelist_drain+0x6e/0x410 [ 308.690768] ? ion_system_heap_free+0x240/0x240 [ 308.690779] ion_alloc+0x611/0x7d0 [ 308.690790] ? ion_dma_buf_release+0x40/0x40 [ 308.690804] ? __might_fault+0x177/0x1b0 [ 308.690814] ion_ioctl+0xef/0x1f8 [ 308.690821] ? ion_alloc.cold+0x3d/0x3d [ 308.690834] ? selinux_file_ioctl+0x3f7/0x560 [ 308.690840] ? ion_alloc.cold+0x3d/0x3d [ 308.690854] do_vfs_ioctl+0x75a/0xfe0 [ 308.704814] 23*32kB [ 308.709609] ? selinux_file_mprotect+0x5c0/0x5c0 [ 308.718108] active_anon:6011 inactive_anon:196 isolated_anon:0 [ 308.718108] active_file:15 inactive_file:11 isolated_file:0 [ 308.718108] unevictable:0 dirty:0 writeback:4 unstable:0 [ 308.718108] slab_reclaimable:11746 slab_unreclaimable:103368 [ 308.718108] mapped:0 shmem:250 pagetables:421 bounce:0 [ 308.718108] free:16719 free_pcp:206 free_cma:0 [ 308.722046] ? ioctl_preallocate+0x1a0/0x1a0 [ 308.722058] ? _copy_to_user+0x82/0xd0 [ 308.722069] ? put_timespec64+0xaa/0xf0 [ 308.722075] ? nsecs_to_jiffies+0x30/0x30 [ 308.722087] ? security_file_ioctl+0x76/0xb0 [ 308.722093] ? security_file_ioctl+0x83/0xb0 [ 308.722102] SyS_ioctl+0x7f/0xb0 [ 308.722111] ? do_vfs_ioctl+0xfe0/0xfe0 [ 308.722122] do_syscall_64+0x1d5/0x640 [ 308.722137] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.722145] RIP: 0033:0x45c4a9 [ 308.722149] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.722163] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 308.728660] Node 0 active_anon:23776kB inactive_anon:776kB active_file:52kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:16kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 308.759471] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 308.759478] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 308.759482] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 308.759486] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 308.777075] 2557 [ 308.788213] (ME) [ 308.808234] 2557 [ 308.816977] 9*64kB (UM) 2*128kB (M) 5*256kB (ME) 1*512kB (M) 3*1024kB (UM) 2*2048kB (M) 1*4096kB (M) = 18308kB [ 308.817026] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 308.817071] Node 1 Normal: 618*4kB (U) 635*8kB (U) 635*16kB (UE) 628*32kB (UE) 11*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38512kB [ 308.817132] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.817139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 308.817144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.817150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 308.817154] 276 total pagecache pages [ 308.817164] 0 pages in swap cache [ 308.817174] Swap cache stats: add 0, delete 0, find 0/0 [ 308.845233] 2557 [ 308.851596] Node 1 active_anon:268kB inactive_anon:8kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 308.851602] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.851622] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 308.851641] Node 0 DMA32 free:18276kB min:36272kB low:45340kB high:54408kB active_anon:23776kB inactive_anon:776kB active_file:52kB inactive_file:32kB unevictable:0kB writepending:12kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6944kB pagetables:1564kB bounce:0kB free_pcp:704kB local_pcp:8kB free_cma:0kB [ 308.851659] lowmem_reserve[]: 0 0 0 0 0 [ 308.851675] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.851691] lowmem_reserve[]: 0 0 0 0 0 [ 308.851716] Node 1 [ 308.872386] 2557 [ 308.876847] Free swap = 0kB [ 308.884999] Total swap = 0kB [ 308.885011] 1965979 pages RAM [ 308.885013] 0 pages HighMem/MovableOnly [ 308.885016] 339049 pages reserved [ 308.885019] 0 pages cma reserved [ 308.900163] Normal free:38284kB min:53612kB low:67012kB high:80412kB active_anon:268kB inactive_anon:8kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:120kB bounce:0kB free_pcp:116kB local_pcp:4kB free_cma:0kB [ 308.981965] Node 0 [ 309.140122] lowmem_reserve[]: 0 0 0 0 0 [ 309.468448] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10316kB [ 309.487850] Node 0 DMA32: 249*4kB (UMEH) 494*8kB (UMEH) 161*16kB (UMEH) 124*32kB (UME) 14*64kB (UM) 2*128kB (UM) 3*256kB (UE) 4*512kB (UM) 5*1024kB (UM) 4*2048kB (UM) 0*4096kB = 28772kB [ 309.510718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 309.529888] Node 1 Normal: 1706*4kB (UME) 1281*8kB (UM) 1115*16kB (UME) 1230*32kB (UME) 56*64kB (UME) 19*128kB (U) 2*256kB (UM) 2*512kB (U) 173*1024kB (UE) 15*2048kB (U) 0*4096kB = 289696kB [ 309.558540] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.585550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 309.595144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.614858] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 309.633954] device hsr_slave_1 left promiscuous mode [ 309.650146] 1160 total pagecache pages [ 309.654419] 0 pages in swap cache [ 309.659654] Swap cache stats: add 0, delete 0, find 0/0 [ 309.674496] device hsr_slave_0 left promiscuous mode [ 309.700214] DMA32 free:47392kB min:36272kB low:45340kB high:54408kB active_anon:23776kB inactive_anon:776kB active_file:64kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6944kB pagetables:1564kB bounce:0kB free_pcp:788kB local_pcp:684kB free_cma:0kB [ 309.724204] Free swap = 0kB [ 309.783689] Total swap = 0kB [ 309.790456] 1965979 pages RAM [ 309.796685] 0 pages HighMem/MovableOnly [ 309.797234] team0 (unregistering): Port device team_slave_1 removed [ 309.808587] 339049 pages reserved [ 309.831924] 0 pages cma reserved [ 309.840964] lowmem_reserve[]: 0 0 0 0 0 [ 309.848217] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.877691] team0 (unregistering): Port device team_slave_0 removed [ 309.910168] lowmem_reserve[]: 0 0 0 0 0 [ 309.917031] Node 1 Normal free:219796kB min:53612kB low:67012kB high:80412kB active_anon:268kB inactive_anon:8kB active_file:108kB inactive_file:3412kB unevictable:0kB writepending:148kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:120kB bounce:0kB free_pcp:1264kB local_pcp:584kB free_cma:0kB [ 310.000283] lowmem_reserve[]: 0 0 0 0 0 [ 310.004663] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10316kB [ 310.010186] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 310.053849] Node 0 DMA32: 1080*4kB (UMEH) 663*8kB (UMEH) 225*16kB (UMEH) 185*32kB (UME) 8*64kB (M) 5*128kB (M) 4*256kB (ME) 3*512kB (UM) 10*1024kB (UM) 7*2048kB (UM) 0*4096kB = 47432kB [ 310.100945] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 310.125852] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 310.180148] Node 1 Normal: 12655*4kB (UME) 1646*8kB (UM) 1569*16kB (UME) 1436*32kB (UME) 3*64kB (UME) 1*128kB (U) 1*256kB (M) 0*512kB 2*1024kB (ME) 10*2048kB (U) 2*4096kB (U) = 166140kB [ 310.264999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.303470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 310.320570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.340932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 310.342108] bond0 (unregistering): Released all slaves [ 310.350895] 1056 total pagecache pages [ 310.350908] 0 pages in swap cache [ 310.350918] Swap cache stats: add 0, delete 0, find 0/0 [ 310.350920] Free swap = 0kB [ 310.350923] Total swap = 0kB [ 310.350930] 1965979 pages RAM [ 310.350933] 0 pages HighMem/MovableOnly [ 310.350936] 339049 pages reserved [ 310.350944] 0 pages cma reserved [ 310.350952] Out of memory: Kill process 7577 (syz-execprog) score 1 or sacrifice child [ 310.351032] Killed process 7911 (syz-executor.1) total-vm:39756kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 310.554196] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 310.574336] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 310.598500] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 310.605983] CPU: 1 PID: 7913 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 310.614816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.625267] Call Trace: [ 310.627911] dump_stack+0x13e/0x194 [ 310.631819] warn_alloc.cold+0x96/0x1af [ 310.636271] ? zone_watermark_ok_safe+0x280/0x280 [ 310.641511] ? __alloc_pages_direct_compact+0x28a/0x360 [ 310.647597] __alloc_pages_slowpath+0x2114/0x26c0 [ 310.652663] ? save_trace+0x290/0x290 [ 310.656602] ? warn_alloc+0xf0/0xf0 [ 310.661051] __alloc_pages_nodemask+0x5d3/0x700 [ 310.666317] ? lock_downgrade+0x6e0/0x6e0 [ 310.670595] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 310.676166] ? save_trace+0x290/0x290 [ 310.680241] alloc_pages_current+0xe7/0x1e0 [ 310.685719] ion_page_pool_alloc+0x118/0x1b0 [ 310.691321] ion_system_heap_allocate+0x134/0x8d0 [ 310.698327] ? rcu_read_lock_sched_held+0x10a/0x130 [ 310.705272] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 310.710985] ? ion_system_heap_free+0x240/0x240 [ 310.716226] ion_alloc+0x1e9/0x7d0 [ 310.720831] ? ion_dma_buf_release+0x40/0x40 [ 310.726068] ? __might_fault+0x177/0x1b0 [ 310.730901] ion_ioctl+0xef/0x1f8 [ 310.735708] ? ion_alloc.cold+0x3d/0x3d [ 310.741011] ? selinux_file_ioctl+0x3f7/0x560 [ 310.746924] ? ion_alloc.cold+0x3d/0x3d [ 310.751787] do_vfs_ioctl+0x75a/0xfe0 [ 310.756252] ? selinux_file_mprotect+0x5c0/0x5c0 [ 310.761374] ? ioctl_preallocate+0x1a0/0x1a0 [ 310.766263] ? _copy_to_user+0x82/0xd0 [ 310.770813] ? put_timespec64+0xaa/0xf0 [ 310.775386] ? nsecs_to_jiffies+0x30/0x30 [ 310.780242] ? security_file_ioctl+0x76/0xb0 [ 310.786084] ? security_file_ioctl+0x83/0xb0 [ 310.792984] SyS_ioctl+0x7f/0xb0 [ 310.798743] ? do_vfs_ioctl+0xfe0/0xfe0 [ 310.803776] do_syscall_64+0x1d5/0x640 [ 310.809970] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.815718] RIP: 0033:0x45c4a9 [ 310.819470] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.828347] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 310.836229] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 310.845001] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 310.852574] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 310.859881] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c 2020/03/09 18:33:04 result: hanged=false err=executor 1: EOF 2020/03/09 18:33:04 executed programs: 15 [ 310.920241] warn_alloc_show_mem: 2 callbacks suppressed [ 310.920245] Mem-Info: [ 310.930207] active_anon:6007 inactive_anon:196 isolated_anon:0 [ 310.930207] active_file:646 inactive_file:1580 isolated_file:17 [ 310.930207] unevictable:0 dirty:10 writeback:0 unstable:0 [ 310.930207] slab_reclaimable:11757 slab_unreclaimable:102327 [ 310.930207] mapped:1538 shmem:250 pagetables:421 bounce:0 [ 310.930207] free:52420 free_pcp:472 free_cma:0 [ 310.936844] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 310.978462] CPU: 0 PID: 7910 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 310.986422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.997230] Call Trace: [ 311.000226] dump_stack+0x13e/0x194 [ 311.004771] warn_alloc.cold+0x96/0x1af [ 311.009524] ? zone_watermark_ok_safe+0x280/0x280 [ 311.014574] ? __alloc_pages_direct_compact+0xba/0x360 [ 311.020792] __alloc_pages_slowpath+0x2114/0x26c0 [ 311.026127] ? save_trace+0x290/0x290 [ 311.030358] ? warn_alloc+0xf0/0xf0 [ 311.035260] __alloc_pages_nodemask+0x5d3/0x700 [ 311.040373] ? lock_downgrade+0x6e0/0x6e0 [ 311.046732] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 311.052994] ? __sanitizer_cov_trace_pc+0x1d/0x50 [ 311.058223] alloc_pages_current+0xe7/0x1e0 [ 311.063015] ion_page_pool_alloc+0x118/0x1b0 [ 311.068966] ion_system_heap_allocate+0x134/0x8d0 [ 311.074300] ? _ion_heap_freelist_drain+0x6e/0x410 [ 311.079312] ? ion_system_heap_free+0x240/0x240 [ 311.084034] ion_alloc+0x611/0x7d0 [ 311.089421] ? ion_dma_buf_release+0x40/0x40 [ 311.100184] Node 0 active_anon:23776kB inactive_anon:776kB active_file:132kB inactive_file:1564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:444kB dirty:16kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 311.101574] ? __might_fault+0x177/0x1b0 [ 311.176299] ion_ioctl+0xef/0x1f8 [ 311.184183] ? ion_alloc.cold+0x3d/0x3d [ 311.193394] ? selinux_file_ioctl+0x3f7/0x560 [ 311.204859] ? ion_alloc.cold+0x3d/0x3d [ 311.214847] do_vfs_ioctl+0x75a/0xfe0 [ 311.224118] ? selinux_file_mprotect+0x5c0/0x5c0 [ 311.232340] ? ioctl_preallocate+0x1a0/0x1a0 [ 311.238793] ? _copy_to_user+0x82/0xd0 [ 311.246048] ? put_timespec64+0xaa/0xf0 [ 311.252474] ? nsecs_to_jiffies+0x30/0x30 [ 311.258428] ? security_file_ioctl+0x76/0xb0 [ 311.267194] ? security_file_ioctl+0x83/0xb0 [ 311.272620] SyS_ioctl+0x7f/0xb0 [ 311.277559] ? do_vfs_ioctl+0xfe0/0xfe0 [ 311.284992] do_syscall_64+0x1d5/0x640 [ 311.290111] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.295877] RIP: 0033:0x45c4a9 [ 311.299995] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.308019] Node 1 active_anon:252kB inactive_anon:8kB active_file:2552kB inactive_file:5556kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:5908kB dirty:24kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 311.308948] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 311.362926] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 311.374668] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 311.388553] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 311.406424] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c 2020/03/09 18:33:04 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe [ 311.480457] Node 0 DMA free:10372kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.571328] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 311.576444] Node 0 DMA32 free:57624kB min:36272kB low:45340kB high:54408kB active_anon:23812kB inactive_anon:772kB active_file:596kB inactive_file:776kB unevictable:0kB writepending:28kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7008kB pagetables:1584kB bounce:0kB free_pcp:464kB local_pcp:108kB free_cma:0kB [ 311.694481] lowmem_reserve[]: 0 0 0 0 0 [ 311.697516] syz-executor.2: [ 311.698828] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.698852] lowmem_reserve[]: [ 311.718853] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 311.773668] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 311.786530] CPU: 0 PID: 7909 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 311.794504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.800133] 0 [ 311.805141] Call Trace: [ 311.805184] dump_stack+0x13e/0x194 [ 311.807025] 0 [ 311.810204] warn_alloc.cold+0x96/0x1af [ 311.810214] ? zone_watermark_ok_safe+0x280/0x280 [ 311.810228] ? __alloc_pages_direct_compact+0xba/0x360 [ 311.810236] __alloc_pages_slowpath+0x2114/0x26c0 [ 311.810251] ? save_trace+0x290/0x290 [ 311.810263] ? warn_alloc+0xf0/0xf0 [ 311.810280] __alloc_pages_nodemask+0x5d3/0x700 [ 311.810289] ? lock_downgrade+0x6e0/0x6e0 [ 311.810300] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 311.850096] 0 [ 311.853521] ? find_held_lock+0x2d/0x110 [ 311.858548] 0 [ 311.860381] alloc_pages_current+0xe7/0x1e0 [ 311.860397] ion_page_pool_alloc+0x118/0x1b0 [ 311.860406] ion_system_heap_allocate+0x134/0x8d0 [ 311.860416] ? _ion_heap_freelist_drain+0x6e/0x410 [ 311.860427] ? ion_system_heap_free+0x240/0x240 [ 311.890117] 0 [ 311.895988] ion_alloc+0x611/0x7d0 [ 311.896009] ? ion_dma_buf_release+0x40/0x40 [ 311.917984] ? __might_fault+0x177/0x1b0 [ 311.926017] ion_ioctl+0xef/0x1f8 [ 311.930163] Node 1 Normal free:67508kB min:53612kB low:67012kB high:80412kB active_anon:316kB inactive_anon:4kB active_file:3628kB inactive_file:3988kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:80kB bounce:0kB free_pcp:284kB local_pcp:160kB free_cma:0kB [ 311.931833] ? ion_alloc.cold+0x3d/0x3d [ 311.931850] ? selinux_file_ioctl+0x3f7/0x560 [ 311.991435] ? ion_alloc.cold+0x3d/0x3d [ 311.997006] do_vfs_ioctl+0x75a/0xfe0 [ 312.003045] ? selinux_file_mprotect+0x5c0/0x5c0 [ 312.012097] ? ioctl_preallocate+0x1a0/0x1a0 [ 312.019168] ? _copy_to_user+0x82/0xd0 [ 312.026748] ? put_timespec64+0xaa/0xf0 [ 312.033949] ? nsecs_to_jiffies+0x30/0x30 [ 312.040250] ? security_file_ioctl+0x76/0xb0 [ 312.048052] ? security_file_ioctl+0x83/0xb0 [ 312.053524] SyS_ioctl+0x7f/0xb0 [ 312.057113] ? do_vfs_ioctl+0xfe0/0xfe0 [ 312.062305] do_syscall_64+0x1d5/0x640 [ 312.066856] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 312.073218] RIP: 0033:0x45c4a9 [ 312.076463] RSP: 002b:00007ffeeb954df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.080120] lowmem_reserve[]: [ 312.085183] RAX: ffffffffffffffda RBX: 0000000000f0b914 RCX: 000000000045c4a9 [ 312.085195] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 312.088533] 0 [ 312.103571] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 312.103578] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 312.103582] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 312.200652] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 312.247002] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 312.272951] CPU: 1 PID: 7430 Comm: rs:main Q:Reg Not tainted 4.14.172-syzkaller #0 [ 312.281455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.291124] Call Trace: [ 312.294188] dump_stack+0x13e/0x194 [ 312.297984] dump_header+0x178/0x6d4 [ 312.301895] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 312.308461] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 312.314481] ? ___ratelimit+0x50/0x519 [ 312.319036] oom_kill_process.cold+0x10/0xae3 [ 312.323984] ? lock_acquire+0x170/0x3f0 [ 312.328546] ? lock_downgrade+0x6e0/0x6e0 [ 312.333593] out_of_memory+0x2d5/0x1110 [ 312.342436] ? oom_killer_disable+0x1c0/0x1c0 [ 312.348466] ? mutex_trylock+0x152/0x1a0 [ 312.354550] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 312.359706] ? warn_alloc+0xf0/0xf0 [ 312.363932] __alloc_pages_nodemask+0x5d3/0x700 [ 312.369343] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 312.377745] ? find_get_entry+0x21d/0x690 [ 312.382685] ? lock_downgrade+0x6e0/0x6e0 [ 312.387632] alloc_pages_current+0xe7/0x1e0 [ 312.392369] __page_cache_alloc+0x245/0x3d0 [ 312.397713] pagecache_get_page+0x174/0xa10 [ 312.402601] grab_cache_page_write_begin+0x6c/0xa0 [ 312.409053] ext4_da_write_begin+0x241/0xe60 [ 312.413773] ? lock_downgrade+0x6e0/0x6e0 [ 312.418291] ? ext4_write_begin+0x1240/0x1240 [ 312.423001] generic_perform_write+0x1c9/0x420 [ 312.428640] ? page_endio+0x520/0x520 [ 312.432782] ? current_time+0xb0/0xb0 [ 312.437530] ? ext4_file_write_iter+0x1d5/0xdc0 [ 312.443177] __generic_file_write_iter+0x227/0x590 [ 312.448595] ext4_file_write_iter+0x281/0xdc0 [ 312.454449] ? ext4_file_mmap+0x2b0/0x2b0 [ 312.459377] ? trace_hardirqs_on+0x10/0x10 [ 312.466561] ? iov_iter_init+0xa6/0x1c0 [ 312.470642] __vfs_write+0x44e/0x630 [ 312.476961] ? kernel_read+0x110/0x110 [ 312.481830] ? rcu_read_lock_sched_held+0x10a/0x130 [ 312.488467] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 312.493362] vfs_write+0x192/0x4e0 [ 312.497892] SyS_write+0xf2/0x210 [ 312.501761] ? SyS_read+0x210/0x210 [ 312.505695] ? __do_page_fault+0x35b/0xb40 [ 312.512800] ? do_syscall_64+0x4c/0x640 [ 312.517168] ? SyS_read+0x210/0x210 [ 312.520926] do_syscall_64+0x1d5/0x640 [ 312.525058] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 312.530362] RIP: 0033:0x7fae3ed5019d [ 312.534089] RSP: 002b:00007fae3d2f1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 312.542177] RAX: ffffffffffffffda RBX: 0000000000000048 RCX: 00007fae3ed5019d [ 312.549581] RDX: 0000000000000048 RSI: 0000000000d10a90 RDI: 0000000000000001 [ 312.556895] RBP: 0000000000d10a90 R08: 31313320205b203a R09: 5d3838393539382e [ 312.569514] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 312.576807] R13: 00007fae3d2f1480 R14: 0000000000000001 R15: 0000000000d10890 [ 312.620461] warn_alloc_show_mem: 1 callbacks suppressed [ 312.620466] Mem-Info: [ 312.630200] active_anon:6082 inactive_anon:194 isolated_anon:0 [ 312.630200] active_file:14 inactive_file:0 isolated_file:18 [ 312.630200] unevictable:0 dirty:0 writeback:0 unstable:0 [ 312.630200] slab_reclaimable:11819 slab_unreclaimable:102243 [ 312.630200] mapped:25 shmem:250 pagetables:416 bounce:0 [ 312.630200] free:13865 free_pcp:14 free_cma:0 [ 312.640237] 0 [ 312.664605] Node 0 active_anon:24012kB inactive_anon:772kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 312.690123] 0 0 0 [ 312.694033] Node 1 active_anon:316kB inactive_anon:4kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:96kB dirty:40kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 312.703893] Node 0 [ 312.730997] Node 0 DMA free:10332kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.750132] DMA: [ 312.771100] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 312.779194] Node 0 DMA32 free:17864kB min:36272kB low:45340kB high:54408kB active_anon:23812kB inactive_anon:772kB active_file:88kB inactive_file:92kB unevictable:0kB writepending:28kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7008kB pagetables:1584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.780110] 3*4kB [ 312.812174] lowmem_reserve[]: 0 0 0 0 0 [ 312.818619] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.846725] lowmem_reserve[]: 0 0 0 0 0 [ 312.851760] Node 1 Normal free:26756kB min:53612kB low:67012kB high:80412kB active_anon:316kB inactive_anon:4kB active_file:728kB inactive_file:660kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.854597] (UE) [ 312.890113] lowmem_reserve[]: 0 0 0 0 0 [ 312.896455] Node 0 DMA: 3*4kB (UE) 2*8kB (UE) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10332kB [ 312.923273] Node 0 DMA32: 63*4kB (UMEH) 22*8kB (UMEH) 474*16kB (UEH) 310*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17932kB [ 312.923769] 2*8kB [ 312.937595] Mem-Info: [ 312.942343] active_anon:6082 inactive_anon:194 isolated_anon:0 [ 312.942343] active_file:14 inactive_file:0 isolated_file:18 [ 312.942343] unevictable:0 dirty:0 writeback:0 unstable:0 [ 312.942343] slab_reclaimable:11819 slab_unreclaimable:102243 [ 312.942343] mapped:25 shmem:250 pagetables:416 bounce:0 [ 312.942343] free:13738 free_pcp:0 free_cma:0 [ 312.953590] (UE) [ 312.975958] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 312.989946] Node 1 Normal: 50*4kB (UME) 18*8kB (UME) 11*16kB (ME) 766*32kB (UME) 10*64kB (UM) 2*128kB (M) 4*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26952kB [ 313.000152] 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10332kB [ 313.005581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.040111] Node 0 active_anon:24012kB inactive_anon:772kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 313.050099] Node 0 [ 313.070351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 313.081711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.091673] DMA32: 63*4kB (UMEH) 22*8kB (UMEH) 474*16kB (UEH) 310*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17932kB [ 313.093154] Node 1 active_anon:332kB inactive_anon:4kB active_file:20kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:72kB dirty:0kB writeback:56kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 313.120156] Node 0 [ 313.150153] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 313.153932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 313.170125] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 313.182265] 278 total pagecache pages [ 313.194122] 0 pages in swap cache [ 313.198280] Swap cache stats: add 0, delete 0, find 0/0 [ 313.200135] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 313.204732] Node 0 [ 313.210775] Node 1 Normal: 45*4kB (ME) 18*8kB (UME) 11*16kB (ME) 751*32kB (UME) 10*64kB (UM) 2*128kB (M) 4*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26452kB [ 313.220873] Free swap = 0kB [ 313.231219] CPU: 1 PID: 7907 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 313.231229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.239700] DMA free:10332kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.250660] Call Trace: [ 313.250687] dump_stack+0x13e/0x194 [ 313.250699] warn_alloc.cold+0x96/0x1af [ 313.250706] ? zone_watermark_ok_safe+0x280/0x280 [ 313.250714] ? save_trace+0x290/0x290 [ 313.250813] ? queue_work_on+0xb6/0x1d0 [ 313.250834] __alloc_pages_slowpath+0x2114/0x26c0 [ 313.285478] Total swap = 0kB [ 313.289097] ? warn_alloc+0xf0/0xf0 [ 313.294977] 1965979 pages RAM [ 313.298789] __alloc_pages_nodemask+0x5d3/0x700 [ 313.309661] 0 pages HighMem/MovableOnly [ 313.313198] ? lock_downgrade+0x6e0/0x6e0 [ 313.313209] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 313.313225] alloc_pages_current+0xe7/0x1e0 [ 313.313239] ion_page_pool_alloc+0x118/0x1b0 [ 313.313248] ion_system_heap_allocate+0x134/0x8d0 [ 313.313259] ? _ion_heap_freelist_drain+0x6e/0x410 [ 313.317386] 339049 pages reserved [ 313.321370] ? ion_system_heap_free+0x240/0x240 [ 313.321411] ion_alloc+0x611/0x7d0 [ 313.321434] ? ion_dma_buf_release+0x40/0x40 [ 313.321464] ? __might_fault+0x177/0x1b0 [ 313.321475] ion_ioctl+0xef/0x1f8 [ 313.321490] ? ion_alloc.cold+0x3d/0x3d [ 313.321504] ? selinux_file_ioctl+0x3f7/0x560 [ 313.321511] ? ion_alloc.cold+0x3d/0x3d [ 313.321527] do_vfs_ioctl+0x75a/0xfe0 [ 313.321534] ? selinux_file_mprotect+0x5c0/0x5c0 [ 313.321549] ? ioctl_preallocate+0x1a0/0x1a0 [ 313.321569] ? _copy_to_user+0x82/0xd0 [ 313.331263] lowmem_reserve[]: [ 313.334796] ? put_timespec64+0xaa/0xf0 [ 313.339826] 0 [ 313.344290] ? nsecs_to_jiffies+0x30/0x30 [ 313.344304] ? security_file_ioctl+0x76/0xb0 [ 313.344311] ? security_file_ioctl+0x83/0xb0 [ 313.344322] SyS_ioctl+0x7f/0xb0 [ 313.344330] ? do_vfs_ioctl+0xfe0/0xfe0 [ 313.344341] do_syscall_64+0x1d5/0x640 [ 313.344355] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 313.344364] RIP: 0033:0x45c4a9 [ 313.344368] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.344376] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 313.344381] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 313.344385] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 313.344390] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 313.344394] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 313.376077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.396521] 0 pages cma reserved [ 313.422198] syz-executor.3: [ 313.428482] 2557 [ 313.437162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 313.440197] syz-executor.2: [ 313.448710] page allocation failure: order:0 [ 313.449086] page allocation failure: order:0 [ 313.455296] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.458377] 2557 [ 313.461050] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 313.465810] 2557 [ 313.469275] (null) [ 313.469286] syz-executor.3 cpuset= [ 313.478464] 2557 [ 313.488039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 313.507522] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 313.516108] Node 0 [ 313.525992] 278 total pagecache pages [ 313.533494] DMA32 free:17908kB min:36272kB low:45340kB high:54408kB active_anon:23960kB inactive_anon:780kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7008kB pagetables:1640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.537008] syz3 [ 313.573469] lowmem_reserve[]: [ 313.577024] (null) [ 313.620134] 0 [ 313.624014] 0 pages in swap cache [ 313.625867] 0 [ 313.630246] Swap cache stats: add 0, delete 0, find 0/0 [ 313.680840] mems_allowed=0-1 [ 313.684610] CPU: 1 PID: 7910 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 313.692510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.701882] Call Trace: [ 313.704529] dump_stack+0x13e/0x194 [ 313.708350] warn_alloc.cold+0x96/0x1af [ 313.712345] ? zone_watermark_ok_safe+0x280/0x280 [ 313.717391] ? save_trace+0x290/0x290 [ 313.721660] ? queue_work_on+0xb6/0x1d0 [ 313.726015] __alloc_pages_slowpath+0x2114/0x26c0 [ 313.732402] ? warn_alloc+0xf0/0xf0 [ 313.736686] __alloc_pages_nodemask+0x5d3/0x700 [ 313.741379] ? lock_downgrade+0x6e0/0x6e0 [ 313.746256] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 313.752762] alloc_pages_current+0xe7/0x1e0 [ 313.757169] ion_page_pool_alloc+0x118/0x1b0 [ 313.762677] ion_system_heap_allocate+0x134/0x8d0 [ 313.762905] 0 0 [ 313.767851] ? _ion_heap_freelist_drain+0x6e/0x410 [ 313.767865] ? ion_system_heap_free+0x240/0x240 [ 313.780533] ion_alloc+0x611/0x7d0 [ 313.784209] ? ion_dma_buf_release+0x40/0x40 [ 313.789437] ? __might_fault+0x177/0x1b0 [ 313.794303] ion_ioctl+0xef/0x1f8 [ 313.798017] ? ion_alloc.cold+0x3d/0x3d [ 313.802574] ? selinux_file_ioctl+0x3f7/0x560 [ 313.807459] ? ion_alloc.cold+0x3d/0x3d [ 313.811633] do_vfs_ioctl+0x75a/0xfe0 [ 313.815502] ? selinux_file_mprotect+0x5c0/0x5c0 [ 313.820820] ? ioctl_preallocate+0x1a0/0x1a0 [ 313.825266] ? _copy_to_user+0x82/0xd0 [ 313.829516] ? put_timespec64+0xaa/0xf0 [ 313.833637] ? nsecs_to_jiffies+0x30/0x30 [ 313.838013] ? security_file_ioctl+0x76/0xb0 [ 313.842557] ? security_file_ioctl+0x83/0xb0 [ 313.847108] SyS_ioctl+0x7f/0xb0 [ 313.850790] ? do_vfs_ioctl+0xfe0/0xfe0 [ 313.854906] do_syscall_64+0x1d5/0x640 [ 313.859227] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 313.866849] RIP: 0033:0x45c4a9 [ 313.870894] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.882118] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 313.890945] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 313.899041] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 313.906781] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 313.914513] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 313.922512] 0 [ 313.924499] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.940104] syz-executor.2 cpuset= [ 313.953980] Free swap = 0kB [ 313.960705] syz2 mems_allowed=0-1 [ 313.964203] CPU: 1 PID: 7909 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 313.974041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.984875] Call Trace: [ 313.987702] dump_stack+0x13e/0x194 [ 313.991404] warn_alloc.cold+0x96/0x1af [ 313.996021] ? zone_watermark_ok_safe+0x280/0x280 [ 314.011886] ? save_trace+0x290/0x290 [ 314.019633] ? rcu_read_lock_sched_held+0x10a/0x130 [ 314.020197] lowmem_reserve[]: [ 314.031243] __alloc_pages_slowpath+0x2114/0x26c0 [ 314.031268] ? warn_alloc+0xf0/0xf0 [ 314.031284] __alloc_pages_nodemask+0x5d3/0x700 [ 314.031298] ? lock_downgrade+0x6e0/0x6e0 [ 314.031305] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 314.031314] ? find_held_lock+0x2d/0x110 [ 314.031329] alloc_pages_current+0xe7/0x1e0 [ 314.031364] ion_page_pool_alloc+0x118/0x1b0 [ 314.031374] ion_system_heap_allocate+0x134/0x8d0 [ 314.031383] ? _ion_heap_freelist_drain+0x6e/0x410 [ 314.031397] ? ion_system_heap_free+0x240/0x240 [ 314.060226] 0 [ 314.065492] ion_alloc+0x611/0x7d0 [ 314.110206] 0 [ 314.117290] ? ion_dma_buf_release+0x40/0x40 [ 314.141803] ? __might_fault+0x177/0x1b0 [ 314.147904] ion_ioctl+0xef/0x1f8 [ 314.150222] 0 0 [ 314.153145] ? ion_alloc.cold+0x3d/0x3d [ 314.153162] ? selinux_file_ioctl+0x3f7/0x560 [ 314.155147] 0 [ 314.159745] ? ion_alloc.cold+0x3d/0x3d [ 314.172686] do_vfs_ioctl+0x75a/0xfe0 [ 314.178279] ? selinux_file_mprotect+0x5c0/0x5c0 [ 314.183071] ? ioctl_preallocate+0x1a0/0x1a0 [ 314.183075] Node 1 Normal free:474672kB min:53612kB low:67012kB high:80412kB active_anon:328kB inactive_anon:4kB active_file:24kB inactive_file:1776kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:84kB bounce:0kB free_pcp:800kB local_pcp:732kB free_cma:0kB [ 314.187711] ? _copy_to_user+0x82/0xd0 [ 314.226122] ? put_timespec64+0xaa/0xf0 [ 314.232022] ? nsecs_to_jiffies+0x30/0x30 [ 314.239065] ? security_file_ioctl+0x76/0xb0 [ 314.244761] ? security_file_ioctl+0x83/0xb0 [ 314.253697] SyS_ioctl+0x7f/0xb0 [ 314.258897] ? do_vfs_ioctl+0xfe0/0xfe0 [ 314.264614] do_syscall_64+0x1d5/0x640 [ 314.268814] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.275140] RIP: 0033:0x45c4a9 [ 314.278651] RSP: 002b:00007ffeeb954df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.287056] RAX: ffffffffffffffda RBX: 0000000000f0b914 RCX: 000000000045c4a9 [ 314.294902] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 314.300280] lowmem_reserve[]: [ 314.304293] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 314.304304] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 314.308236] 0 [ 314.315614] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 314.327110] Total swap = 0kB [ 314.336407] 1965979 pages RAM [ 314.339641] 0 pages HighMem/MovableOnly [ 314.344762] 339049 pages reserved [ 314.348412] 0 pages cma reserved [ 314.423729] 0 0 0 0 [ 314.426198] Node 0 DMA: 3*4kB (UE) 2*8kB (UE) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10332kB [ 314.470154] Node 0 DMA32: 1267*4kB (UMH) 30*8kB (UMEH) 460*16kB (UEH) 311*32kB (UME) 4*64kB (U) 2*128kB (U) 2*256kB (U) 4*512kB (U) 78*1024kB (U) 0*2048kB 0*4096kB = 105564kB [ 314.530191] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 314.550165] warn_alloc_show_mem: 1 callbacks suppressed [ 314.550177] Mem-Info: [ 314.553891] Node 1 [ 314.556636] active_anon:6072 inactive_anon:196 isolated_anon:0 [ 314.556636] active_file:13 inactive_file:474 isolated_file:0 [ 314.556636] unevictable:0 dirty:0 writeback:0 unstable:0 [ 314.556636] slab_reclaimable:11836 slab_unreclaimable:102198 [ 314.556636] mapped:292 shmem:250 pagetables:431 bounce:0 [ 314.556636] free:172926 free_pcp:418 free_cma:0 [ 314.564226] Normal: 13043*4kB (UME) 363*8kB (UE) 275*16kB (UE) 989*32kB (UME) 1173*64kB (UM) 93*128kB (UM) 56*256kB (UE) 42*512kB (U) 288*1024kB (U) 21*2048kB (U) 4*4096kB (U) = 568244kB [ 314.663785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.673182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 314.693710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.710250] Node 0 active_anon:23960kB inactive_anon:780kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 314.719866] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 314.757819] 692 total pagecache pages [ 314.763092] 0 pages in swap cache [ 314.766793] Swap cache stats: add 0, delete 0, find 0/0 [ 314.772660] Free swap = 0kB [ 314.775940] Total swap = 0kB [ 314.779209] 1965979 pages RAM [ 314.780197] Node 1 active_anon:328kB inactive_anon:4kB active_file:420kB inactive_file:1156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1160kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 314.783412] 0 pages HighMem/MovableOnly [ 314.815815] Node 0 DMA free:10332kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.820547] 339049 pages reserved [ 314.847957] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 314.853202] Node 0 DMA32 free:110240kB min:36272kB low:45340kB high:54408kB active_anon:23960kB inactive_anon:780kB active_file:32kB inactive_file:432kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7008kB pagetables:1640kB bounce:0kB free_pcp:328kB local_pcp:156kB free_cma:0kB [ 314.873508] 0 pages cma reserved [ 314.888389] lowmem_reserve[]: 0 0 0 0 0 [ 314.892514] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.900760] Out of memory: Kill process 7913 (syz-executor.5) score 999 or sacrifice child [ 314.923152] lowmem_reserve[]: 0 0 0 0 0 [ 314.935520] Node 1 Normal free:584772kB min:53612kB low:67012kB high:80412kB active_anon:328kB inactive_anon:4kB active_file:420kB inactive_file:1156kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:84kB bounce:0kB free_pcp:712kB local_pcp:68kB free_cma:0kB [ 314.957235] Killed process 7913 (syz-executor.5) total-vm:39752kB, anon-rss:88kB, file-rss:0kB, shmem-rss:0kB [ 314.968718] lowmem_reserve[]: 0 0 0 0 0 [ 314.984824] Node 0 DMA: 4*4kB (UE) 2*8kB (UE) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10336kB [ 315.003812] Node 0 DMA32: 6*4kB (EH) 9*8kB (UMEH) 2*16kB (UH) 2*32kB (E) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (U) 43*1024kB (UM) 0*2048kB 0*4096kB = 45248kB [ 315.019917] oom_reaper: reaped process 7913 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 315.035141] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 315.048838] Node 1 Normal: 12521*4kB (UE) 408*8kB (UME) 281*16kB (UE) 991*32kB (UE) 1175*64kB (U) 95*128kB (UM) 59*256kB (UE) 44*512kB (UM) 289*1024kB (UM) 21*2048kB (U) 3*4096kB (U) = 565780kB [ 315.073175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.082995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 315.149002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.168107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 315.263458] 2320 total pagecache pages [ 315.267488] 0 pages in swap cache [ 315.300168] Swap cache stats: add 0, delete 0, find 0/0 [ 315.305728] Free swap = 0kB [ 315.308980] Total swap = 0kB [ 315.340151] 1965979 pages RAM [ 315.343914] 0 pages HighMem/MovableOnly [ 315.364467] 339049 pages reserved [ 315.368232] 0 pages cma reserved [ 315.813956] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 315.826068] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 315.840949] CPU: 1 PID: 7919 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 315.849091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.858481] Call Trace: [ 315.861102] dump_stack+0x13e/0x194 [ 315.865119] warn_alloc.cold+0x96/0x1af [ 315.869602] ? zone_watermark_ok_safe+0x280/0x280 [ 315.880406] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 315.880582] ? __alloc_pages_direct_compact+0xba/0x360 [ 315.880594] __alloc_pages_slowpath+0x2114/0x26c0 [ 315.904737] ? save_trace+0x290/0x290 [ 315.909108] ? warn_alloc+0xf0/0xf0 [ 315.912994] __alloc_pages_nodemask+0x5d3/0x700 [ 315.917732] ? lock_downgrade+0x6e0/0x6e0 [ 315.922581] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 315.927908] alloc_pages_current+0xe7/0x1e0 [ 315.931275] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 315.932277] ion_page_pool_alloc+0x118/0x1b0 [ 315.932289] ion_system_heap_allocate+0x134/0x8d0 [ 315.952381] (null) [ 315.955889] ? rcu_read_lock_sched_held+0x10a/0x130 [ 315.958332] syz-executor.2 cpuset= [ 315.963558] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 315.963574] ? ion_system_heap_free+0x240/0x240 [ 315.963585] ion_alloc+0x1e9/0x7d0 [ 315.963600] ? ion_dma_buf_release+0x40/0x40 [ 315.963613] ? __might_fault+0x177/0x1b0 [ 315.963623] ion_ioctl+0xef/0x1f8 [ 315.963630] ? ion_alloc.cold+0x3d/0x3d [ 315.963643] ? selinux_file_ioctl+0x3f7/0x560 [ 315.963649] ? ion_alloc.cold+0x3d/0x3d [ 315.963660] do_vfs_ioctl+0x75a/0xfe0 [ 315.963668] ? selinux_file_mprotect+0x5c0/0x5c0 [ 315.963678] ? ioctl_preallocate+0x1a0/0x1a0 [ 315.963688] ? _copy_to_user+0x82/0xd0 [ 315.963703] ? put_timespec64+0xaa/0xf0 [ 315.995774] syz2 [ 315.997281] ? nsecs_to_jiffies+0x30/0x30 [ 316.004323] syz-executor.3 cpuset= [ 316.006174] ? security_file_ioctl+0x76/0xb0 [ 316.022082] mems_allowed=0-1 [ 316.025759] ? security_file_ioctl+0x83/0xb0 [ 316.036418] syz3 [ 316.036974] SyS_ioctl+0x7f/0xb0 [ 316.056682] mems_allowed=0-1 [ 316.056772] ? do_vfs_ioctl+0xfe0/0xfe0 [ 316.069324] do_syscall_64+0x1d5/0x640 [ 316.073447] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 316.078757] RIP: 0033:0x45c4a9 [ 316.082161] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.093395] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 316.101381] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 316.109185] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 316.121969] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 316.129453] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 316.137823] CPU: 0 PID: 7922 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 316.145171] warn_alloc_show_mem: 1 callbacks suppressed [ 316.145176] Mem-Info: [ 316.150019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.156588] active_anon:6126 inactive_anon:194 isolated_anon:0 [ 316.156588] active_file:14 inactive_file:16 isolated_file:0 [ 316.156588] unevictable:0 dirty:0 writeback:0 unstable:0 [ 316.156588] slab_reclaimable:11897 slab_unreclaimable:102146 [ 316.156588] mapped:2 shmem:250 pagetables:441 bounce:0 [ 316.156588] free:13776 free_pcp:153 free_cma:0 [ 316.158907] Call Trace: [ 316.171640] Node 0 active_anon:24004kB inactive_anon:768kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 316.205397] dump_stack+0x13e/0x194 [ 316.205413] warn_alloc.cold+0x96/0x1af [ 316.205422] ? zone_watermark_ok_safe+0x280/0x280 [ 316.205441] ? __alloc_pages_direct_compact+0xba/0x360 [ 316.208039] Node 1 active_anon:500kB inactive_anon:8kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 316.235292] __alloc_pages_slowpath+0x2114/0x26c0 [ 316.235311] ? save_trace+0x290/0x290 [ 316.235323] ? warn_alloc+0xf0/0xf0 [ 316.235341] __alloc_pages_nodemask+0x5d3/0x700 [ 316.238962] Node 0 [ 316.242943] ? lock_downgrade+0x6e0/0x6e0 [ 316.242953] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 316.242969] alloc_pages_current+0xe7/0x1e0 [ 316.242984] ion_page_pool_alloc+0x118/0x1b0 [ 316.248455] DMA free:10320kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.254026] ion_system_heap_allocate+0x134/0x8d0 [ 316.254039] ? rcu_read_lock_sched_held+0x10a/0x130 [ 316.254046] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 316.254054] ? ion_system_heap_free+0x240/0x240 [ 316.254067] ion_alloc+0x1e9/0x7d0 [ 316.284053] lowmem_reserve[]: [ 316.289715] ? ion_dma_buf_release+0x40/0x40 [ 316.293767] 0 [ 316.297448] ? __might_fault+0x177/0x1b0 [ 316.302268] 2557 [ 316.304468] ion_ioctl+0xef/0x1f8 [ 316.308639] 2557 [ 316.313887] ? ion_alloc.cold+0x3d/0x3d [ 316.313901] ? selinux_file_ioctl+0x3f7/0x560 [ 316.313907] ? ion_alloc.cold+0x3d/0x3d [ 316.313917] do_vfs_ioctl+0x75a/0xfe0 [ 316.313925] ? selinux_file_mprotect+0x5c0/0x5c0 [ 316.313936] ? ioctl_preallocate+0x1a0/0x1a0 [ 316.318292] 2557 [ 316.322910] ? _copy_to_user+0x82/0xd0 [ 316.322922] ? put_timespec64+0xaa/0xf0 [ 316.322929] ? nsecs_to_jiffies+0x30/0x30 [ 316.322941] ? security_file_ioctl+0x76/0xb0 [ 316.322948] ? security_file_ioctl+0x83/0xb0 [ 316.322964] SyS_ioctl+0x7f/0xb0 [ 316.350206] 2557 [ 316.356271] ? do_vfs_ioctl+0xfe0/0xfe0 [ 316.369391] do_syscall_64+0x1d5/0x640 [ 316.374118] Node 0 [ 316.377629] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 316.380909] DMA32 free:17908kB min:36272kB low:45340kB high:54408kB active_anon:24004kB inactive_anon:768kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1616kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 316.385270] RIP: 0033:0x45c4a9 [ 316.387054] lowmem_reserve[]: [ 316.391233] RSP: 002b:00007ffeeb954df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.391244] RAX: ffffffffffffffda RBX: 0000000000f0b914 RCX: 000000000045c4a9 [ 316.391248] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 316.391252] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 316.391255] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 316.391259] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 316.477122] CPU: 0 PID: 7924 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 316.495441] 0 [ 316.511959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.511965] Call Trace: [ 316.511999] dump_stack+0x13e/0x194 [ 316.512016] dump_header+0x178/0x6d4 [ 316.512028] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 316.512037] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 316.512046] ? ___ratelimit+0x50/0x519 [ 316.512058] oom_kill_process.cold+0x10/0xae3 [ 316.517911] 0 [ 316.521237] ? lock_acquire+0x170/0x3f0 [ 316.521246] ? lock_downgrade+0x6e0/0x6e0 [ 316.521272] out_of_memory+0x2d5/0x1110 [ 316.521285] ? oom_killer_disable+0x1c0/0x1c0 [ 316.521303] ? mutex_trylock+0x152/0x1a0 [ 316.529071] 0 [ 316.536567] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 316.536592] ? warn_alloc+0xf0/0xf0 [ 316.536608] __alloc_pages_nodemask+0x5d3/0x700 [ 316.536617] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 316.536630] ? lock_downgrade+0x6e0/0x6e0 [ 316.536648] alloc_pages_current+0xe7/0x1e0 [ 316.545963] 0 [ 316.557032] __page_cache_alloc+0x245/0x3d0 [ 316.557045] filemap_fault+0xc21/0x1c30 [ 316.557060] ? __lock_page_or_retry+0x8a0/0x8a0 [ 316.557072] ? lock_acquire+0x170/0x3f0 [ 316.557095] ? ext4_filemap_fault+0x7c/0xb0 [ 316.557113] ext4_filemap_fault+0x84/0xb0 [ 316.571140] 0 [ 316.582141] __do_fault+0xfa/0x380 [ 316.582152] __handle_mm_fault+0x22e9/0x3280 [ 316.582161] ? copy_page_range+0x1d70/0x1d70 [ 316.582173] ? find_held_lock+0x2d/0x110 [ 316.582189] handle_mm_fault+0x288/0x7a0 [ 316.593587] __do_page_fault+0x4bc/0xb40 [ 316.603345] Node 0 [ 316.606079] ? vmalloc_fault+0xdf0/0xdf0 [ 316.609724] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.613439] ? do_page_fault+0x60/0x4f2 [ 316.613450] ? page_fault+0x2f/0x50 [ 316.613457] page_fault+0x45/0x50 [ 316.613464] RIP: 96880e0: (null) [ 316.613468] RSP: 9687bc4:00007ffe09687bc0 EFLAGS: 004c204f [ 316.613734] syz-executor.5: [ 316.618862] lowmem_reserve[]: [ 316.627302] Mem-Info: [ 316.648275] 0 [ 316.653538] page allocation failure: order:0 [ 316.677158] 0 [ 316.680105] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 316.693376] 0 [ 316.694430] active_anon:6126 inactive_anon:194 isolated_anon:0 [ 316.694430] active_file:14 inactive_file:16 isolated_file:0 [ 316.694430] unevictable:0 dirty:0 writeback:0 unstable:0 [ 316.694430] slab_reclaimable:11897 slab_unreclaimable:102146 [ 316.694430] mapped:2 shmem:250 pagetables:441 bounce:0 [ 316.694430] free:13714 free_pcp:182 free_cma:0 [ 316.698726] 0 0 [ 316.703726] Node 0 active_anon:24004kB inactive_anon:768kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 316.728186] (null) [ 316.743934] Node 1 [ 316.749827] Node 1 active_anon:500kB inactive_anon:8kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 316.749874] Normal free:26752kB min:53612kB low:67012kB high:80412kB active_anon:500kB inactive_anon:8kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:148kB bounce:0kB free_pcp:492kB local_pcp:0kB free_cma:0kB [ 316.754689] syz-executor.5 cpuset= [ 316.797523] lowmem_reserve[]: [ 316.798763] Node 0 [ 316.816432] 0 [ 316.820464] DMA free:10320kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.832002] 0 [ 316.869361] syz5 [ 316.885843] 0 [ 316.900817] mems_allowed=0-1 [ 316.919689] 0 [ 316.933306] lowmem_reserve[]: [ 316.978914] 0 [ 317.003084] CPU: 0 PID: 7913 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 317.003092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.031000] Call Trace: [ 317.031036] dump_stack+0x13e/0x194 [ 317.031049] warn_alloc.cold+0x96/0x1af [ 317.031058] ? zone_watermark_ok_safe+0x280/0x280 [ 317.031067] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 317.031084] __alloc_pages_slowpath+0x2114/0x26c0 [ 317.041151] Node 0 [ 317.043732] ? warn_alloc+0xf0/0xf0 [ 317.047362] DMA: [ 317.051379] __alloc_pages_nodemask+0x5d3/0x700 [ 317.051395] ? lock_downgrade+0x6e0/0x6e0 [ 317.051402] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 317.051423] alloc_pages_current+0xe7/0x1e0 [ 317.057316] 2*4kB [ 317.070352] ion_page_pool_alloc+0x118/0x1b0 [ 317.070363] ion_system_heap_allocate+0x134/0x8d0 [ 317.070376] ? rcu_read_lock_sched_held+0x10a/0x130 [ 317.070383] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 317.070395] ? ion_system_heap_free+0x240/0x240 [ 317.075274] (UE) [ 317.077541] ion_alloc+0x1e9/0x7d0 [ 317.081239] 1*8kB [ 317.083277] ? ion_dma_buf_release+0x40/0x40 [ 317.087969] (E) [ 317.092175] ? __might_fault+0x177/0x1b0 [ 317.092193] ion_ioctl+0xef/0x1f8 [ 317.092203] ? ion_alloc.cold+0x3d/0x3d [ 317.092217] ? selinux_file_ioctl+0x3f7/0x560 [ 317.092228] ? ion_alloc.cold+0x3d/0x3d [ 317.097400] 2*16kB [ 317.101817] do_vfs_ioctl+0x75a/0xfe0 [ 317.101834] ? selinux_file_mprotect+0x5c0/0x5c0 [ 317.101843] ? ioctl_preallocate+0x1a0/0x1a0 [ 317.101851] ? _copy_to_user+0x82/0xd0 [ 317.101864] ? put_timespec64+0xaa/0xf0 [ 317.104139] (UE) [ 317.108569] ? nsecs_to_jiffies+0x30/0x30 [ 317.113486] 3*32kB [ 317.118930] ? security_file_ioctl+0x76/0xb0 [ 317.129196] (UE) [ 317.134427] ? security_file_ioctl+0x83/0xb0 [ 317.134441] SyS_ioctl+0x7f/0xb0 [ 317.134450] ? do_vfs_ioctl+0xfe0/0xfe0 [ 317.134464] do_syscall_64+0x1d5/0x640 [ 317.134492] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 317.137102] 1*64kB [ 317.141906] RIP: 0033:0x45c4a9 [ 317.141912] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.141920] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 317.141924] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 317.141928] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 317.141931] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 317.141935] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 317.144856] 0 [ 317.148875] (E) [ 317.151554] 2557 2557 2557 2557 [ 317.151575] Node 0 DMA32 free:17784kB min:36272kB low:45340kB high:54408kB active_anon:24004kB inactive_anon:768kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1616kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 317.151599] lowmem_reserve[]: 0 0 0 0 0 [ 317.151616] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.151633] lowmem_reserve[]: 0 0 0 0 0 [ 317.151651] Node 1 Normal free:26752kB min:53612kB low:67012kB high:80412kB active_anon:500kB inactive_anon:8kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:148kB bounce:0kB free_pcp:492kB local_pcp:492kB free_cma:0kB [ 317.151670] lowmem_reserve[]: 0 0 0 0 0 [ 317.151688] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10320kB [ 317.151874] Node 0 DMA32: 64*4kB (M) 11*8kB (M) 4*16kB (ME) 7*32kB (ME) 6*64kB (M) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 15*1024kB (UE) 0*2048kB 0*4096kB = 17784kB [ 317.151940] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 317.151982] Node 1 Normal: 50*4kB (UE) 25*8kB (UME) 29*16kB (ME) 23*32kB (UME) 19*64kB (UM) 5*128kB (M) 7*256kB (ME) 4*512kB (M) 1*1024kB (M) 9*2048kB (U) 0*4096kB = 26752kB [ 317.152049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.152055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 317.152068] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.173739] 1*128kB [ 317.177096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 317.177321] (E) [ 317.181343] 280 total pagecache pages [ 317.181355] 0 pages in swap cache [ 317.181360] Swap cache stats: add 0, delete 0, find 0/0 [ 317.181363] Free swap = 0kB [ 317.181366] Total swap = 0kB [ 317.181373] 1965979 pages RAM [ 317.181376] 0 pages HighMem/MovableOnly [ 317.181380] 339049 pages reserved [ 317.181383] 0 pages cma reserved [ 317.181391] Out of memory: Kill process 7919 (syz-executor.4) score 999 or sacrifice child [ 317.181421] Killed process 7919 (syz-executor.4) total-vm:39752kB, anon-rss:88kB, file-rss:0kB, shmem-rss:0kB [ 317.200009] warn_alloc_show_mem: 1 callbacks suppressed [ 317.234623] Mem-Info: [ 317.255445] 1*256kB [ 317.266856] oom_reaper: reaped process 7919 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 317.267399] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 317.291865] (E) [ 317.296299] active_anon:6126 inactive_anon:194 isolated_anon:0 [ 317.296299] active_file:14 inactive_file:16 isolated_file:0 [ 317.296299] unevictable:0 dirty:0 writeback:0 unstable:0 [ 317.296299] slab_reclaimable:11897 slab_unreclaimable:102149 [ 317.296299] mapped:2 shmem:250 pagetables:441 bounce:0 [ 317.296299] free:13714 free_pcp:195 free_cma:0 [ 317.296982] 1*512kB [ 317.328203] (null) [ 317.347062] (E) [ 317.358582] Node 0 active_anon:24004kB inactive_anon:768kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 317.377214] 1*1024kB [ 317.391796] , order=0, oom_score_adj=0 [ 317.411309] (E) [ 317.431909] Node 1 active_anon:500kB inactive_anon:8kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 317.457547] 2*2048kB [ 317.461696] syz-executor.3 cpuset= [ 317.485390] (ME) [ 317.488442] Node 0 [ 317.488655] 1*4096kB [ 317.497433] DMA free:10320kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.497438] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 317.497463] Node 0 DMA32 free:17784kB min:36272kB low:45340kB high:54408kB active_anon:24004kB inactive_anon:768kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1616kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 317.497485] lowmem_reserve[]: 0 0 0 0 0 [ 317.497504] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.497522] lowmem_reserve[]: 0 0 0 0 0 [ 317.497541] Node 1 Normal free:26752kB min:53612kB low:67012kB high:80412kB active_anon:500kB inactive_anon:8kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:148kB bounce:0kB free_pcp:548kB local_pcp:548kB free_cma:0kB [ 317.497558] lowmem_reserve[]: 0 0 0 0 0 [ 317.497579] Node 0 [ 317.516333] (M) [ 317.520122] syz3 [ 317.540718] = 10320kB [ 317.544453] DMA: [ 317.570107] Node 0 [ 317.577230] mems_allowed=0-1 [ 317.602368] DMA32: [ 317.623103] 2*4kB [ 317.640494] 64*4kB [ 317.659468] CPU: 0 PID: 7924 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 317.676547] (M) [ 317.694955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.694960] Call Trace: [ 317.694985] dump_stack+0x13e/0x194 [ 317.694998] dump_header+0x178/0x6d4 [ 317.695010] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 317.695025] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 317.697539] 11*8kB [ 317.701086] ? ___ratelimit+0x50/0x519 [ 317.701101] oom_kill_process.cold+0x10/0xae3 [ 317.701113] ? lock_acquire+0x170/0x3f0 [ 317.701120] ? lock_downgrade+0x6e0/0x6e0 [ 317.701132] out_of_memory+0x2d5/0x1110 [ 317.703213] (M) [ 317.705455] ? oom_killer_disable+0x1c0/0x1c0 [ 317.707904] 4*16kB [ 317.735236] ? mutex_trylock+0x152/0x1a0 [ 317.735252] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 317.735272] ? warn_alloc+0xf0/0xf0 [ 317.735289] __alloc_pages_nodemask+0x5d3/0x700 [ 317.735305] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 317.740672] (ME) [ 317.772736] ? lock_downgrade+0x6e0/0x6e0 [ 317.772754] alloc_pages_current+0xe7/0x1e0 [ 317.772768] __page_cache_alloc+0x245/0x3d0 [ 317.772784] filemap_fault+0xc21/0x1c30 [ 317.776787] 7*32kB [ 317.804918] ? __lock_page_or_retry+0x8a0/0x8a0 [ 317.804932] ? lock_acquire+0x170/0x3f0 [ 317.804942] ? ext4_filemap_fault+0x7c/0xb0 [ 317.804960] ext4_filemap_fault+0x84/0xb0 [ 317.810766] (ME) [ 317.841732] __do_fault+0xfa/0x380 [ 317.841743] __handle_mm_fault+0x22e9/0x3280 [ 317.841752] ? copy_page_range+0x1d70/0x1d70 [ 317.841763] ? find_held_lock+0x2d/0x110 [ 317.841787] handle_mm_fault+0x288/0x7a0 [ 317.845973] 6*64kB [ 317.848224] __do_page_fault+0x4bc/0xb40 [ 317.850230] (M) [ 317.852184] ? vmalloc_fault+0xdf0/0xdf0 [ 317.854570] 1*128kB [ 317.856677] ? do_page_fault+0x60/0x4f2 [ 317.858917] (M) [ 317.862164] ? page_fault+0x2f/0x50 [ 317.862174] page_fault+0x45/0x50 [ 317.862182] RIP: 96880e0: (null) [ 317.862186] RSP: 9687bc4:00007ffe09687bc0 EFLAGS: 004c204f [ 317.865360] (UE) [ 317.868051] 1*256kB [ 317.870891] 1*8kB (E) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10320kB [ 317.870954] Node 0 DMA32: 64*4kB (M) 11*8kB (M) 4*16kB (ME) 7*32kB (ME) 6*64kB (M) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 15*1024kB (UE) 0*2048kB 0*4096kB = 17784kB [ 317.871022] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 317.871065] Node 1 Normal: 50*4kB (UE) 25*8kB (UME) 29*16kB (ME) 23*32kB (UME) 19*64kB (UM) 5*128kB (M) 7*256kB (ME) 4*512kB (M) 1*1024kB (M) 9*2048kB (U) 0*4096kB = 26752kB [ 317.871141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.871147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 317.871152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.871162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 317.871165] 280 total pagecache pages [ 317.871173] 0 pages in swap cache [ 317.871178] Swap cache stats: add 0, delete 0, find 0/0 [ 317.871181] Free swap = 0kB [ 317.871184] Total swap = 0kB [ 317.871189] 1965979 pages RAM [ 317.871192] 0 pages HighMem/MovableOnly [ 317.871195] 339049 pages reserved [ 317.871198] 0 pages cma reserved [ 318.206631] (M) 2*512kB (UM) 15*1024kB (UE) 0*2048kB 0*4096kB = 17784kB [ 318.217326] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 318.234014] Node 1 Normal: 3948*4kB (UME) 2896*8kB (UME) 616*16kB (UE) 455*32kB (UE) 430*64kB (UM) 16*128kB (U) 16*256kB (UME) 11*512kB (UM) 25*1024kB (UM) 10*2048kB (U) 0*4096kB = 148752kB [ 318.255839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.265121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 318.279881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.294942] Mem-Info: [ 318.300513] active_anon:6082 inactive_anon:195 isolated_anon:0 [ 318.300513] active_file:14 inactive_file:1002 isolated_file:0 [ 318.300513] unevictable:0 dirty:25 writeback:0 unstable:0 [ 318.300513] slab_reclaimable:11903 slab_unreclaimable:102185 [ 318.300513] mapped:674 shmem:250 pagetables:431 bounce:0 [ 318.300513] free:54556 free_pcp:601 free_cma:0 [ 318.311756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 318.364783] Node 0 active_anon:23968kB inactive_anon:768kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 318.409824] 1296 total pagecache pages [ 318.420244] Node 1 active_anon:360kB inactive_anon:12kB active_file:36kB inactive_file:3984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2788kB dirty:100kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 318.429719] 0 pages in swap cache [ 318.463585] Node 0 DMA free:10320kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.463619] Swap cache stats: add 0, delete 0, find 0/0 [ 318.512457] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 318.517634] Node 0 DMA32 free:27384kB min:36272kB low:45340kB high:54408kB active_anon:23968kB inactive_anon:768kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1608kB bounce:0kB free_pcp:1536kB local_pcp:816kB free_cma:0kB [ 318.540108] Free swap = 0kB [ 318.572693] lowmem_reserve[]: 0 0 0 0 0 [ 318.577065] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.580306] Total swap = 0kB [ 318.633455] 1965979 pages RAM [ 318.636805] 0 pages HighMem/MovableOnly [ 318.640292] lowmem_reserve[]: 0 0 0 0 0 [ 318.643169] 339049 pages reserved [ 318.645151] Node 1 Normal free:227400kB min:53612kB low:67012kB high:80412kB active_anon:360kB inactive_anon:12kB active_file:36kB inactive_file:3984kB unevictable:0kB writepending:148kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:116kB bounce:0kB free_pcp:940kB local_pcp:320kB free_cma:0kB [ 318.650851] 0 pages cma reserved [ 318.692707] lowmem_reserve[]: 0 0 0 0 0 [ 318.696999] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10320kB [ 318.713033] Node 0 DMA32: 1427*4kB (UME) 124*8kB (UME) 39*16kB (UME) 30*32kB (UME) 28*64kB (UME) 10*128kB (UME) 5*256kB (UME) 4*512kB (UME) 14*1024kB (U) 0*2048kB 0*4096kB = 29020kB [ 318.730315] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 318.741883] Node 1 Normal: 4530*4kB (UME) 4912*8kB (UE) 1315*16kB (UME) 688*32kB (UME) 627*64kB (U) 37*128kB (U) 25*256kB (UME) 18*512kB (UM) 40*1024kB (UM) 12*2048kB (U) 0*4096kB = 226488kB [ 318.759799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.769941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 2020/03/09 18:33:12 executed programs: 21 [ 318.794297] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.806540] IPVS: ftp: loaded support on port[0] = 21 [ 318.818190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 318.868074] 2578 total pagecache pages [ 318.875697] 0 pages in swap cache [ 318.883246] Swap cache stats: add 0, delete 0, find 0/0 [ 318.888924] Free swap = 0kB [ 318.895292] Total swap = 0kB [ 318.899714] 1965979 pages RAM [ 318.904214] 0 pages HighMem/MovableOnly [ 318.910184] 339049 pages reserved [ 318.913790] 0 pages cma reserved [ 318.919651] Out of memory: Kill process 7922 (syz-executor.2) score 999 or sacrifice child [ 319.202498] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 319.203141] syz-executor.2: [ 319.221953] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 319.232458] CPU: 0 PID: 7913 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 319.240303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.241932] page allocation failure: order:4 [ 319.249689] Call Trace: [ 319.249721] dump_stack+0x13e/0x194 [ 319.249735] warn_alloc.cold+0x96/0x1af [ 319.249743] ? zone_watermark_ok_safe+0x280/0x280 [ 319.249758] ? __alloc_pages_direct_compact+0xba/0x360 [ 319.249770] __alloc_pages_slowpath+0x2114/0x26c0 [ 319.280574] ? save_trace+0x290/0x290 [ 319.281008] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 319.284713] ? warn_alloc+0xf0/0xf0 [ 319.284734] __alloc_pages_nodemask+0x5d3/0x700 [ 319.284748] ? lock_downgrade+0x6e0/0x6e0 [ 319.305923] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 319.311078] ? find_held_lock+0x2d/0x110 [ 319.315365] alloc_pages_current+0xe7/0x1e0 [ 319.317464] (null) [ 319.319724] ion_page_pool_alloc+0x118/0x1b0 [ 319.319735] ion_system_heap_allocate+0x134/0x8d0 [ 319.319746] ? _ion_heap_freelist_drain+0x6e/0x410 [ 319.330825] syz-executor.2 cpuset= [ 319.331547] ? ion_system_heap_free+0x240/0x240 [ 319.345427] ion_alloc+0x611/0x7d0 [ 319.349033] ? ion_dma_buf_release+0x40/0x40 [ 319.350313] syz2 [ 319.353690] ? __might_fault+0x177/0x1b0 [ 319.360020] ion_ioctl+0xef/0x1f8 [ 319.362605] mems_allowed=0-1 [ 319.363926] ? ion_alloc.cold+0x3d/0x3d [ 319.363940] ? selinux_file_ioctl+0x3f7/0x560 [ 319.375587] ? ion_alloc.cold+0x3d/0x3d [ 319.379718] do_vfs_ioctl+0x75a/0xfe0 [ 319.383568] ? selinux_file_mprotect+0x5c0/0x5c0 [ 319.388367] ? ioctl_preallocate+0x1a0/0x1a0 [ 319.392813] ? _copy_to_user+0x82/0xd0 [ 319.396847] ? put_timespec64+0xaa/0xf0 [ 319.400854] ? nsecs_to_jiffies+0x30/0x30 [ 319.405139] ? security_file_ioctl+0x76/0xb0 [ 319.409677] ? security_file_ioctl+0x83/0xb0 [ 319.414381] SyS_ioctl+0x7f/0xb0 [ 319.418789] ? do_vfs_ioctl+0xfe0/0xfe0 [ 319.422990] do_syscall_64+0x1d5/0x640 [ 319.427027] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 319.432682] RIP: 0033:0x45c4a9 [ 319.435933] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.443757] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 319.451957] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 319.459526] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 319.467535] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 319.474841] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 319.482728] CPU: 1 PID: 7926 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 319.490662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.500504] Call Trace: [ 319.503264] dump_stack+0x13e/0x194 [ 319.507791] warn_alloc.cold+0x96/0x1af [ 319.512328] ? zone_watermark_ok_safe+0x280/0x280 [ 319.518224] ? __alloc_pages_direct_compact+0x28a/0x360 [ 319.523841] __alloc_pages_slowpath+0x2114/0x26c0 [ 319.529263] ? save_trace+0x290/0x290 [ 319.533095] ? warn_alloc+0xf0/0xf0 [ 319.536770] __alloc_pages_nodemask+0x5d3/0x700 [ 319.543131] ? lock_downgrade+0x6e0/0x6e0 [ 319.547299] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 319.552351] ? retint_kernel+0x2d/0x2d [ 319.556268] alloc_pages_current+0xe7/0x1e0 [ 319.560620] ion_page_pool_alloc+0x118/0x1b0 [ 319.565678] ion_system_heap_allocate+0x134/0x8d0 [ 319.570666] ? rcu_read_lock_sched_held+0x10a/0x130 [ 319.575753] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 319.580637] ? ion_system_heap_free+0x240/0x240 [ 319.585345] ion_alloc+0x1e9/0x7d0 [ 319.588923] ? ion_dma_buf_release+0x40/0x40 [ 319.593471] ? __might_fault+0x177/0x1b0 [ 319.597591] ion_ioctl+0xef/0x1f8 [ 319.601099] ? ion_alloc.cold+0x3d/0x3d [ 319.605215] ? selinux_file_ioctl+0x3f7/0x560 [ 319.610893] ? ion_alloc.cold+0x3d/0x3d [ 319.614908] do_vfs_ioctl+0x75a/0xfe0 [ 319.618740] ? selinux_file_mprotect+0x5c0/0x5c0 [ 319.623533] ? ioctl_preallocate+0x1a0/0x1a0 [ 319.628043] ? _copy_to_user+0x82/0xd0 [ 319.631986] ? put_timespec64+0xaa/0xf0 [ 319.636005] ? nsecs_to_jiffies+0x30/0x30 [ 319.640187] ? security_file_ioctl+0x76/0xb0 [ 319.644634] ? security_file_ioctl+0x83/0xb0 [ 319.649320] SyS_ioctl+0x7f/0xb0 [ 319.652873] ? do_vfs_ioctl+0xfe0/0xfe0 [ 319.656887] do_syscall_64+0x1d5/0x640 [ 319.660908] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 319.666150] RIP: 0033:0x45c4a9 [ 319.669466] RSP: 002b:00007ffeeb954df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.677200] RAX: ffffffffffffffda RBX: 0000000000f0b914 RCX: 000000000045c4a9 [ 319.684489] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 319.691783] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 319.699169] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 319.706475] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 319.788420] Mem-Info: [ 319.794492] active_anon:6086 inactive_anon:196 isolated_anon:0 [ 319.794492] active_file:622 inactive_file:1831 isolated_file:12 [ 319.794492] unevictable:0 dirty:54 writeback:0 unstable:0 [ 319.794492] slab_reclaimable:11957 slab_unreclaimable:102129 [ 319.794492] mapped:1555 shmem:250 pagetables:434 bounce:0 [ 319.794492] free:96421 free_pcp:169 free_cma:0 [ 319.873889] Node 0 active_anon:23904kB inactive_anon:768kB active_file:24kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:24kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 319.937363] Node 1 active_anon:440kB inactive_anon:16kB active_file:2464kB inactive_file:7320kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:6212kB dirty:192kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 319.993439] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.041837] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 320.061693] Node 0 DMA32 free:45324kB min:36272kB low:45340kB high:54408kB active_anon:23904kB inactive_anon:768kB active_file:24kB inactive_file:4kB unevictable:0kB writepending:24kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1604kB bounce:0kB free_pcp:756kB local_pcp:352kB free_cma:0kB [ 320.130106] lowmem_reserve[]: 0 0 0 0 0 [ 320.134189] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.166242] lowmem_reserve[]: 0 0 0 0 0 [ 320.180472] Node 1 Normal free:861608kB min:53612kB low:67012kB high:80412kB active_anon:448kB inactive_anon:16kB active_file:2464kB inactive_file:7320kB unevictable:0kB writepending:208kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:132kB bounce:0kB free_pcp:796kB local_pcp:132kB free_cma:0kB [ 320.257814] lowmem_reserve[]: 0 0 0 0 0 [ 320.268677] IPVS: ftp: loaded support on port[0] = 21 [ 320.273754] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 2*16kB (UE) 3*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10384kB [ 320.322291] Node 0 DMA32: 33*4kB (MH) 20*8kB (UMH) 3*16kB (ME) 4*32kB (MH) 6*64kB (M) 2*128kB (E) 5*256kB (ME) 68*512kB (UE) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 43348kB [ 320.345655] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 320.365682] Node 1 Normal: 57*4kB (ME) 8*8kB (E) 4*16kB (UME) 1*32kB (E) 2140*64kB (U) 875*128kB (UM) 232*256kB (UME) 176*512kB (UME) 365*1024kB (UM) 35*2048kB (U) 2*4096kB (U) = 852484kB [ 320.393874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.415704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 320.449512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.485107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 320.517805] 2710 total pagecache pages [ 320.533611] 0 pages in swap cache [ 320.549921] Swap cache stats: add 0, delete 0, find 0/0 [ 320.566728] Free swap = 0kB [ 320.575386] Total swap = 0kB [ 320.581837] 1965979 pages RAM [ 320.593490] 0 pages HighMem/MovableOnly [ 320.603823] chnl_net:caif_netlink_parms(): no params data found [ 320.613603] 339049 pages reserved [ 320.623221] 0 pages cma reserved [ 321.094542] chnl_net:caif_netlink_parms(): no params data found [ 321.286545] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.314888] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.346298] device bridge_slave_0 entered promiscuous mode [ 321.400400] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.406872] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.441905] device bridge_slave_1 entered promiscuous mode [ 321.579301] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 321.663559] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 321.701899] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.710794] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.738743] device bridge_slave_0 entered promiscuous mode [ 321.762529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.769945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.818438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.862416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.896323] device bridge_slave_1 left promiscuous mode [ 321.915430] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.971040] device bridge_slave_0 left promiscuous mode [ 321.977913] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.053246] device veth1_macvtap left promiscuous mode [ 322.066019] device veth0_macvtap left promiscuous mode [ 322.085728] device veth1_vlan left promiscuous mode [ 322.102143] device veth0_vlan left promiscuous mode [ 322.461239] oom_reaper: reaped process 7926 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 322.498203] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 322.538695] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 322.553704] CPU: 1 PID: 7940 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 322.561840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.571308] Call Trace: [ 322.573939] dump_stack+0x13e/0x194 [ 322.577720] warn_alloc.cold+0x96/0x1af [ 322.581761] ? zone_watermark_ok_safe+0x280/0x280 [ 322.586658] ? __alloc_pages_direct_compact+0xba/0x360 [ 322.592014] __alloc_pages_slowpath+0x2114/0x26c0 [ 322.596919] ? save_trace+0x290/0x290 [ 322.600849] ? warn_alloc+0xf0/0xf0 [ 322.604613] __alloc_pages_nodemask+0x5d3/0x700 [ 322.609317] ? lock_downgrade+0x6e0/0x6e0 [ 322.613499] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 322.618632] ? retint_kernel+0x2d/0x2d [ 322.622569] alloc_pages_current+0xe7/0x1e0 [ 322.626916] ion_page_pool_alloc+0x118/0x1b0 [ 322.631372] ion_system_heap_allocate+0x134/0x8d0 [ 322.636278] ? rcu_read_lock_sched_held+0x10a/0x130 [ 322.641317] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 322.648637] ? ion_system_heap_free+0x240/0x240 [ 322.653364] ion_alloc+0x1e9/0x7d0 [ 322.656947] ? ion_dma_buf_release+0x40/0x40 [ 322.661391] ? __might_fault+0x177/0x1b0 [ 322.666384] ion_ioctl+0xef/0x1f8 [ 322.669873] ? ion_alloc.cold+0x3d/0x3d [ 322.673876] ? selinux_file_ioctl+0x3f7/0x560 [ 322.678428] ? ion_alloc.cold+0x3d/0x3d [ 322.682629] do_vfs_ioctl+0x75a/0xfe0 [ 322.686448] ? selinux_file_mprotect+0x5c0/0x5c0 [ 322.691330] ? ioctl_preallocate+0x1a0/0x1a0 [ 322.695934] ? _copy_to_user+0x82/0xd0 [ 322.699848] ? put_timespec64+0xaa/0xf0 [ 322.703843] ? nsecs_to_jiffies+0x30/0x30 [ 322.708011] ? security_file_ioctl+0x76/0xb0 [ 322.712441] ? security_file_ioctl+0x83/0xb0 [ 322.716948] SyS_ioctl+0x7f/0xb0 [ 322.720333] ? do_vfs_ioctl+0xfe0/0xfe0 [ 322.724337] do_syscall_64+0x1d5/0x640 [ 322.728342] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 322.733641] RIP: 0033:0x45c4a9 [ 322.737802] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.745617] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 322.753149] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 322.760662] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 322.768278] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 322.776401] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 322.784297] oom_reaper: reaped process 7928 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 322.927877] device hsr_slave_1 left promiscuous mode [ 322.959696] warn_alloc_show_mem: 1 callbacks suppressed [ 322.959700] Mem-Info: [ 322.976867] device hsr_slave_0 left promiscuous mode [ 322.980137] active_anon:6104 inactive_anon:196 isolated_anon:0 [ 322.980137] active_file:36 inactive_file:370 isolated_file:0 [ 322.980137] unevictable:0 dirty:5 writeback:0 unstable:0 [ 322.980137] slab_reclaimable:12024 slab_unreclaimable:102810 [ 322.980137] mapped:275 shmem:250 pagetables:434 bounce:0 [ 322.980137] free:29124 free_pcp:172 free_cma:0 [ 323.038493] Node 0 active_anon:23904kB inactive_anon:768kB active_file:76kB inactive_file:1424kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1080kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 323.071963] Node 1 active_anon:448kB inactive_anon:16kB active_file:68kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:20kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 323.127754] team0 (unregistering): Port device team_slave_1 removed [ 323.134676] Node 0 DMA free:10312kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.171943] team0 (unregistering): Port device team_slave_0 removed [ 323.200410] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 323.212646] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 323.225981] Node 0 DMA32 free:36380kB min:36272kB low:45340kB high:54408kB active_anon:23912kB inactive_anon:768kB active_file:48kB inactive_file:1444kB unevictable:0kB writepending:24kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1604kB bounce:0kB free_pcp:812kB local_pcp:68kB free_cma:0kB [ 323.261107] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 323.268697] lowmem_reserve[]: 0 0 0 0 0 [ 323.290545] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.371098] lowmem_reserve[]: 0 0 0 0 0 [ 323.375549] Node 1 Normal free:62288kB min:53612kB low:67012kB high:80412kB active_anon:384kB inactive_anon:16kB active_file:32kB inactive_file:436kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:132kB bounce:0kB free_pcp:156kB local_pcp:92kB free_cma:0kB [ 323.422024] bond0 (unregistering): Released all slaves [ 323.460613] lowmem_reserve[]: 0 0 0 0 0 [ 323.464984] Node 0 DMA: 14*4kB (UE) 3*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10368kB [ 323.497739] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.513583] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.521363] Node 0 DMA32: 71*4kB (UEH) 2*8kB (EH) 5*16kB (UMH) 4*32kB (UMEH) 2*64kB (ME) 2*128kB (MH) 8*256kB (UMEH) 3*512kB (UE) 25*1024kB (UM) 3*2048kB (U) 0*4096kB = 36220kB [ 323.547635] device bridge_slave_1 entered promiscuous mode [ 323.557777] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 323.590145] Node 1 Normal: 53*4kB (UME) 50*8kB (ME) 31*16kB (UME) 36*32kB (ME) 23*64kB (M) 22*128kB (UM) 28*256kB (UME) 12*512kB (UME) 10*1024kB (UM) 8*2048kB (U) 2*4096kB (U) = 54676kB [ 323.640106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.666542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 323.690853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.710116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 323.719517] 343 total pagecache pages [ 323.723957] 0 pages in swap cache [ 323.727428] Swap cache stats: add 0, delete 0, find 0/0 [ 323.740119] Free swap = 0kB [ 323.743212] Total swap = 0kB [ 323.746235] 1965979 pages RAM [ 323.749345] 0 pages HighMem/MovableOnly [ 323.775502] 339049 pages reserved [ 323.779018] 0 pages cma reserved [ 324.167113] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 324.199336] team0: Port device team_slave_0 added [ 324.217877] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 324.250593] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 324.278347] team0: Port device team_slave_1 added [ 324.299005] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 324.621350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.627778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.751276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.771820] oom_reaper: reaped process 7940 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 324.820819] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 324.848170] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 324.864868] CPU: 0 PID: 7940 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 324.873529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.883351] Call Trace: [ 324.885960] dump_stack+0x13e/0x194 [ 324.889715] dump_header+0x178/0x6d4 [ 324.893451] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 324.898555] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 324.903874] ? ___ratelimit+0x50/0x519 [ 324.907795] oom_kill_process.cold+0x10/0xae3 [ 324.912316] ? lock_acquire+0x170/0x3f0 [ 324.916408] ? lock_downgrade+0x6e0/0x6e0 [ 324.920589] out_of_memory+0x2d5/0x1110 [ 324.924596] ? oom_killer_disable+0x1c0/0x1c0 [ 324.929320] ? mutex_trylock+0x152/0x1a0 [ 324.933410] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 324.938480] ? warn_alloc+0xf0/0xf0 [ 324.942156] __alloc_pages_nodemask+0x5d3/0x700 [ 324.947021] ? lock_downgrade+0x6e0/0x6e0 [ 324.951192] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 324.956257] alloc_pages_current+0xe7/0x1e0 [ 324.960800] ion_page_pool_alloc+0x118/0x1b0 [ 324.965248] ion_system_heap_allocate+0x134/0x8d0 [ 324.970226] ? rcu_read_lock_sched_held+0x10a/0x130 [ 324.975277] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 324.980373] ? ion_system_heap_free+0x240/0x240 [ 324.985072] ion_alloc+0x1e9/0x7d0 [ 324.988731] ? ion_dma_buf_release+0x40/0x40 [ 324.993198] ? __might_fault+0x177/0x1b0 [ 324.997386] ion_ioctl+0xef/0x1f8 [ 325.000869] ? ion_alloc.cold+0x3d/0x3d [ 325.004866] ? selinux_file_ioctl+0x3f7/0x560 [ 325.009385] ? ion_alloc.cold+0x3d/0x3d [ 325.013389] do_vfs_ioctl+0x75a/0xfe0 [ 325.017228] ? selinux_file_mprotect+0x5c0/0x5c0 [ 325.022032] ? ioctl_preallocate+0x1a0/0x1a0 [ 325.026462] ? _copy_to_user+0x82/0xd0 [ 325.030382] ? put_timespec64+0xaa/0xf0 [ 325.034370] ? nsecs_to_jiffies+0x30/0x30 [ 325.038541] ? security_file_ioctl+0x76/0xb0 [ 325.042982] ? security_file_ioctl+0x83/0xb0 [ 325.047409] SyS_ioctl+0x7f/0xb0 [ 325.050786] ? do_vfs_ioctl+0xfe0/0xfe0 [ 325.054781] do_syscall_64+0x1d5/0x640 [ 325.058808] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 325.064095] RIP: 0033:0x45c4a9 [ 325.067313] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.075382] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 325.084240] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 325.091922] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 325.099396] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 325.107830] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 325.115556] net_ratelimit: 25 callbacks suppressed [ 325.115565] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 325.128499] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 325.170140] Mem-Info: [ 325.173018] active_anon:6061 inactive_anon:196 isolated_anon:0 [ 325.173018] active_file:11 inactive_file:12 isolated_file:0 [ 325.173018] unevictable:0 dirty:0 writeback:0 unstable:0 [ 325.173018] slab_reclaimable:12053 slab_unreclaimable:102039 [ 325.173018] mapped:2 shmem:250 pagetables:434 bounce:0 [ 325.173018] free:13630 free_pcp:27 free_cma:0 [ 325.253292] Node 0 active_anon:23912kB inactive_anon:768kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 325.285924] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 325.298206] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 325.320133] Node 1 active_anon:332kB inactive_anon:16kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 325.350167] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 325.360137] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 325.367700] CPU: 0 PID: 7928 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 325.375623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.380110] syz-executor.5 cpuset= [ 325.385014] Call Trace: [ 325.385040] dump_stack+0x13e/0x194 [ 325.388778] syz5 [ 325.391376] warn_alloc.cold+0x96/0x1af [ 325.401346] ? zone_watermark_ok_safe+0x280/0x280 [ 325.406316] ? __alloc_pages_direct_compact+0xba/0x360 [ 325.410104] mems_allowed=0-1 [ 325.411621] __alloc_pages_slowpath+0x2114/0x26c0 [ 325.419987] ? save_trace+0x290/0x290 [ 325.424235] ? warn_alloc+0xf0/0xf0 [ 325.427914] __alloc_pages_nodemask+0x5d3/0x700 [ 325.432637] ? lock_downgrade+0x6e0/0x6e0 [ 325.436809] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 325.441941] ? save_trace+0x290/0x290 [ 325.445790] alloc_pages_current+0xe7/0x1e0 [ 325.450227] ion_page_pool_alloc+0x118/0x1b0 [ 325.454748] ion_system_heap_allocate+0x134/0x8d0 [ 325.459710] ? rcu_read_lock_sched_held+0x10a/0x130 [ 325.464734] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 325.469599] ? ion_system_heap_free+0x240/0x240 [ 325.474815] ion_alloc+0x1e9/0x7d0 [ 325.478632] ? ion_dma_buf_release+0x40/0x40 [ 325.486547] ? __might_fault+0x177/0x1b0 [ 325.490724] ion_ioctl+0xef/0x1f8 [ 325.494188] ? ion_alloc.cold+0x3d/0x3d [ 325.498199] ? selinux_file_ioctl+0x3f7/0x560 [ 325.502719] ? ion_alloc.cold+0x3d/0x3d [ 325.506799] do_vfs_ioctl+0x75a/0xfe0 [ 325.510629] ? selinux_file_mprotect+0x5c0/0x5c0 [ 325.515485] ? ioctl_preallocate+0x1a0/0x1a0 [ 325.520289] ? _copy_to_user+0x82/0xd0 [ 325.524365] ? put_timespec64+0xaa/0xf0 [ 325.528368] ? nsecs_to_jiffies+0x30/0x30 [ 325.532546] ? security_file_ioctl+0x76/0xb0 [ 325.537079] ? security_file_ioctl+0x83/0xb0 [ 325.541503] SyS_ioctl+0x7f/0xb0 [ 325.544884] ? do_vfs_ioctl+0xfe0/0xfe0 [ 325.548985] do_syscall_64+0x1d5/0x640 [ 325.552903] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 325.558132] RIP: 0033:0x45c4a9 [ 325.561447] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.569422] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 325.576724] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 325.584380] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 325.591805] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 325.599130] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 325.606492] CPU: 1 PID: 7913 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 325.606854] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 325.614358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.614366] Call Trace: [ 325.614400] dump_stack+0x13e/0x194 [ 325.614413] warn_alloc.cold+0x96/0x1af [ 325.614421] ? zone_watermark_ok_safe+0x280/0x280 [ 325.614431] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 325.614448] __alloc_pages_slowpath+0x2114/0x26c0 [ 325.621577] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 325.630875] ? warn_alloc+0xf0/0xf0 [ 325.630896] __alloc_pages_nodemask+0x5d3/0x700 [ 325.630907] ? lock_downgrade+0x6e0/0x6e0 [ 325.630914] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 325.630932] alloc_pages_current+0xe7/0x1e0 [ 325.641865] syz-executor.2 cpuset= [ 325.647105] ion_page_pool_alloc+0x118/0x1b0 [ 325.666075] syz2 [ 325.668250] ion_system_heap_allocate+0x134/0x8d0 [ 325.685986] mems_allowed=0-1 [ 325.686602] ? _ion_heap_freelist_drain+0x6e/0x410 [ 325.696946] Node 0 [ 325.701379] ? ion_system_heap_free+0x240/0x240 [ 325.701392] ion_alloc+0x611/0x7d0 [ 325.701407] ? ion_dma_buf_release+0x40/0x40 [ 325.701420] ? __might_fault+0x177/0x1b0 [ 325.701430] ion_ioctl+0xef/0x1f8 [ 325.701437] ? ion_alloc.cold+0x3d/0x3d [ 325.701450] ? selinux_file_ioctl+0x3f7/0x560 [ 325.701456] ? ion_alloc.cold+0x3d/0x3d [ 325.701467] do_vfs_ioctl+0x75a/0xfe0 [ 325.701475] ? selinux_file_mprotect+0x5c0/0x5c0 [ 325.701485] ? ioctl_preallocate+0x1a0/0x1a0 [ 325.701493] ? _copy_to_user+0x82/0xd0 [ 325.701503] ? put_timespec64+0xaa/0xf0 [ 325.701513] ? nsecs_to_jiffies+0x30/0x30 [ 325.724561] DMA free:10312kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 325.728489] ? security_file_ioctl+0x76/0xb0 [ 325.765252] lowmem_reserve[]: [ 325.765820] ? security_file_ioctl+0x83/0xb0 [ 325.769961] 0 [ 325.799027] SyS_ioctl+0x7f/0xb0 [ 325.799038] ? do_vfs_ioctl+0xfe0/0xfe0 [ 325.799049] do_syscall_64+0x1d5/0x640 [ 325.799064] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 325.799073] RIP: 0033:0x45c4a9 [ 325.799077] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.799085] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 325.799089] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 325.799093] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 325.799097] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 325.799101] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 325.799578] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 325.814619] CPU: 0 PID: 7926 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 325.816735] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 325.820609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.820615] Call Trace: [ 325.820641] dump_stack+0x13e/0x194 [ 325.820653] warn_alloc.cold+0x96/0x1af [ 325.820662] ? zone_watermark_ok_safe+0x280/0x280 [ 325.820676] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 325.830291] Mem-Info: [ 325.834041] __alloc_pages_slowpath+0x2114/0x26c0 [ 325.841839] active_anon:6061 inactive_anon:196 isolated_anon:0 [ 325.841839] active_file:11 inactive_file:12 isolated_file:0 [ 325.841839] unevictable:0 dirty:0 writeback:0 unstable:0 [ 325.841839] slab_reclaimable:12053 slab_unreclaimable:102039 [ 325.841839] mapped:2 shmem:250 pagetables:434 bounce:0 [ 325.841839] free:13626 free_pcp:30 free_cma:0 [ 325.849074] ? warn_alloc+0xf0/0xf0 [ 325.856481] Node 0 active_anon:23912kB inactive_anon:768kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 325.863752] __alloc_pages_nodemask+0x5d3/0x700 [ 325.863775] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 325.863786] ? wake_up_q+0x90/0xe0 [ 325.863809] alloc_pages_current+0xe7/0x1e0 [ 325.871175] Node 1 active_anon:332kB inactive_anon:16kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 325.878666] ion_page_pool_alloc+0x118/0x1b0 [ 325.885232] Node 0 [ 325.893001] ion_system_heap_allocate+0x134/0x8d0 [ 325.893015] ? rcu_read_lock_sched_held+0x10a/0x130 [ 325.893023] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 325.893031] ? ion_system_heap_free+0x240/0x240 [ 325.893041] ion_alloc+0x1e9/0x7d0 [ 325.900319] DMA free:10312kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 325.910413] ? ion_dma_buf_release+0x40/0x40 [ 325.910429] ? __might_fault+0x177/0x1b0 [ 325.910439] ion_ioctl+0xef/0x1f8 [ 325.910447] ? ion_alloc.cold+0x3d/0x3d [ 325.910461] ? selinux_file_ioctl+0x3f7/0x560 [ 325.913052] lowmem_reserve[]: [ 325.916680] ? ion_alloc.cold+0x3d/0x3d [ 325.920892] 0 [ 325.926484] do_vfs_ioctl+0x75a/0xfe0 [ 325.931843] 2557 [ 325.934221] ? selinux_file_mprotect+0x5c0/0x5c0 [ 325.939339] 2557 2557 [ 325.974309] ? ioctl_preallocate+0x1a0/0x1a0 [ 325.974320] ? _copy_to_user+0x82/0xd0 [ 325.974330] ? put_timespec64+0xaa/0xf0 [ 325.974337] ? nsecs_to_jiffies+0x30/0x30 [ 325.974349] ? security_file_ioctl+0x76/0xb0 [ 325.974360] ? security_file_ioctl+0x83/0xb0 [ 325.978005] 2557 [ 326.005761] SyS_ioctl+0x7f/0xb0 [ 326.005773] ? do_vfs_ioctl+0xfe0/0xfe0 [ 326.005785] do_syscall_64+0x1d5/0x640 [ 326.005800] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 326.005813] RIP: 0033:0x45c4a9 [ 326.015531] RSP: 002b:00007ffeeb954df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.019083] Node 0 [ 326.023401] RAX: ffffffffffffffda RBX: 0000000000f0b914 RCX: 000000000045c4a9 [ 326.023408] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 326.023412] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 326.023415] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 326.023419] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 326.036381] 2557 [ 326.076173] DMA32 free:17564kB min:36272kB low:45340kB high:54408kB active_anon:23912kB inactive_anon:768kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6944kB pagetables:1604kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 326.089807] 2557 [ 326.119112] lowmem_reserve[]: [ 326.131476] 2557 [ 326.136392] syz-executor.3: [ 326.136816] 2557 [ 326.138639] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 326.160458] (null) [ 326.169934] Node 0 [ 326.177905] 0 [ 326.186056] DMA32 free:17752kB min:36272kB low:45340kB high:54408kB active_anon:23912kB inactive_anon:768kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6944kB pagetables:1604kB bounce:0kB free_pcp:164kB local_pcp:164kB free_cma:0kB [ 326.194277] 0 [ 326.197588] lowmem_reserve[]: [ 326.206670] 0 [ 326.214117] 0 [ 326.220422] syz-executor.3 cpuset= [ 326.226400] 0 [ 326.240831] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 326.240893] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 326.240954] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 326.241019] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 326.250267] 0 [ 326.252392] 0 [ 326.289888] syz3 [ 326.297795] 0 [ 326.306127] mems_allowed=0-1 [ 326.342544] 0 [ 326.343818] 0 [ 326.396799] CPU: 1 PID: 7928 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 326.405843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.410179] Node 0 [ 326.415409] Call Trace: [ 326.415441] dump_stack+0x13e/0x194 [ 326.417733] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 326.420536] warn_alloc.cold+0x96/0x1af [ 326.420547] ? zone_watermark_ok_safe+0x280/0x280 [ 326.420569] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 326.420585] __alloc_pages_slowpath+0x2114/0x26c0 [ 326.420604] ? warn_alloc+0xf0/0xf0 [ 326.420621] __alloc_pages_nodemask+0x5d3/0x700 [ 326.420633] ? lock_downgrade+0x6e0/0x6e0 [ 326.420640] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 326.420656] ? save_trace+0x290/0x290 [ 326.440115] lowmem_reserve[]: [ 326.458541] alloc_pages_current+0xe7/0x1e0 [ 326.458559] ion_page_pool_alloc+0x118/0x1b0 [ 326.458568] ion_system_heap_allocate+0x134/0x8d0 [ 326.458579] ? rcu_read_lock_sched_held+0x10a/0x130 [ 326.458586] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 326.458593] ? ion_system_heap_free+0x240/0x240 [ 326.458610] ion_alloc+0x1e9/0x7d0 [ 326.530225] 0 [ 326.534594] ? ion_dma_buf_release+0x40/0x40 [ 326.538118] 0 [ 326.539937] ? __might_fault+0x177/0x1b0 [ 326.550445] ion_ioctl+0xef/0x1f8 [ 326.553962] ? ion_alloc.cold+0x3d/0x3d [ 326.559589] ? selinux_file_ioctl+0x3f7/0x560 [ 326.564727] ? ion_alloc.cold+0x3d/0x3d [ 326.568746] do_vfs_ioctl+0x75a/0xfe0 [ 326.572573] ? selinux_file_mprotect+0x5c0/0x5c0 [ 326.577608] ? ioctl_preallocate+0x1a0/0x1a0 [ 326.582485] ? _copy_to_user+0x82/0xd0 [ 326.584264] 0 0 [ 326.586766] ? put_timespec64+0xaa/0xf0 [ 326.586776] ? nsecs_to_jiffies+0x30/0x30 [ 326.588766] 0 [ 326.592871] ? security_file_ioctl+0x76/0xb0 [ 326.592881] ? security_file_ioctl+0x83/0xb0 [ 326.592895] SyS_ioctl+0x7f/0xb0 [ 326.592904] ? do_vfs_ioctl+0xfe0/0xfe0 [ 326.592916] do_syscall_64+0x1d5/0x640 [ 326.592931] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 326.592940] RIP: 0033:0x45c4a9 [ 326.592945] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.592953] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 326.592957] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 326.592961] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 326.592965] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 326.592969] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 326.593867] Node 0 [ 326.638035] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 326.684991] Node 1 [ 326.702341] lowmem_reserve[]: 0 0 0 0 0 [ 326.709562] Node 1 Normal free:312372kB min:53612kB low:67012kB high:80412kB active_anon:332kB inactive_anon:16kB active_file:36kB inactive_file:2832kB unevictable:0kB writepending:148kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:132kB bounce:0kB free_pcp:920kB local_pcp:232kB free_cma:0kB [ 326.739992] lowmem_reserve[]: 0 0 0 0 0 [ 326.745229] Normal free:324072kB min:53612kB low:67012kB high:80412kB active_anon:332kB inactive_anon:16kB active_file:36kB inactive_file:2932kB unevictable:0kB writepending:148kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:132kB bounce:0kB free_pcp:824kB local_pcp:704kB free_cma:0kB [ 326.746029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.780879] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10312kB [ 326.796869] Node 0 DMA32: 1602*4kB (UME) 536*8kB (UME) 139*16kB (UME) 110*32kB (UME) 163*64kB (UM) 20*128kB (UME) 9*256kB (UME) 4*512kB (UE) 5*1024kB (UM) 3*2048kB (U) 0*4096kB = 45048kB [ 326.815129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.841687] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 326.852540] Node 1 Normal: 1553*4kB (UME) 958*8kB (UE) 256*16kB (UME) 234*32kB (UME) 1265*64kB (UME) 86*128kB (UM) 30*256kB (UME) 14*512kB (UME) 160*1024kB (UM) 15*2048kB (U) 2*4096kB (U) = 335028kB [ 326.860120] lowmem_reserve[]: [ 326.870638] warn_alloc_show_mem: 2 callbacks suppressed [ 326.870642] Mem-Info: [ 326.882158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.892132] active_anon:6061 inactive_anon:196 isolated_anon:0 [ 326.892132] active_file:12 inactive_file:736 isolated_file:0 [ 326.892132] unevictable:0 dirty:25 writeback:0 unstable:0 [ 326.892132] slab_reclaimable:12053 slab_unreclaimable:101958 [ 326.892132] mapped:502 shmem:250 pagetables:434 bounce:0 [ 326.892132] free:104424 free_pcp:421 free_cma:0 [ 326.900107] 0 [ 326.925496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.938137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 326.945441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 326.956460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 326.963579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.990119] 0 0 0 0 [ 326.992525] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10312kB [ 327.000122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 327.020420] Node 0 active_anon:23912kB inactive_anon:768kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 327.053858] Node 0 DMA32: 1858*4kB (UM) 943*8kB (UME) 188*16kB (UM) 159*32kB (UM) 194*64kB (UM) 32*128kB (UME) 14*256kB (UME) 5*512kB (UE) 5*1024kB (UM) 3*2048kB (U) 0*4096kB = 56992kB [ 327.080200] 1030 total pagecache pages [ 327.084853] 0 pages in swap cache [ 327.089172] Swap cache stats: add 0, delete 0, find 0/0 [ 327.099489] device hsr_slave_0 entered promiscuous mode [ 327.110444] Node 1 active_anon:332kB inactive_anon:16kB active_file:40kB inactive_file:2992kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2024kB dirty:100kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 327.114006] Free swap = 0kB [ 327.137646] Node 0 [ 327.145375] Total swap = 0kB [ 327.150138] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 327.150932] 1965979 pages RAM [ 327.168336] 0 pages HighMem/MovableOnly [ 327.172901] device hsr_slave_1 entered promiscuous mode [ 327.178975] 339049 pages reserved [ 327.186658] Node 0 DMA free:10312kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 327.200833] Node 1 [ 327.219025] 0 pages cma reserved [ 327.227400] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 327.234468] Normal: 7624*4kB (UME) 4699*8kB (UE) 838*16kB (UME) 617*32kB (UME) 1704*64kB (UME) 119*128kB (UM) 58*256kB (UME) 25*512kB (UME) 160*1024kB (UM) 15*2048kB (U) 2*4096kB (U) = 455928kB [ 327.239886] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 327.290093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.290157] lowmem_reserve[]: [ 327.299003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 327.299015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.309817] 0 2557 2557 2557 2557 [ 327.328112] Node 0 DMA32 free:81424kB min:36272kB low:45340kB high:54408kB active_anon:23912kB inactive_anon:768kB active_file:112kB inactive_file:12kB unevictable:0kB writepending:12kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1604kB bounce:0kB free_pcp:1028kB local_pcp:284kB free_cma:0kB [ 327.344720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 327.390220] lowmem_reserve[]: 0 0 0 0 0 [ 327.397875] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 327.423102] 1118 total pagecache pages [ 327.438561] 0 pages in swap cache [ 327.452548] Swap cache stats: add 0, delete 0, find 0/0 [ 327.464343] Free swap = 0kB [ 327.467469] Total swap = 0kB [ 327.491595] 1965979 pages RAM [ 327.494766] 0 pages HighMem/MovableOnly [ 327.499298] 339049 pages reserved [ 327.510130] lowmem_reserve[]: 0 0 0 0 0 [ 327.515933] Node 1 Normal free:455944kB min:53612kB low:67012kB high:80412kB active_anon:332kB inactive_anon:16kB active_file:32kB inactive_file:3060kB unevictable:0kB writepending:104kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:132kB bounce:0kB free_pcp:748kB local_pcp:124kB free_cma:0kB [ 327.524206] 0 pages cma reserved [ 327.602775] lowmem_reserve[]: 0 0 0 0 0 [ 327.606846] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10312kB [ 327.644172] Out of memory: Kill process 7577 (syz-execprog) score 1 or sacrifice child [ 327.653982] Killed process 7917 (syz-executor.0) total-vm:39756kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 327.666016] Node 0 DMA32: 1678*4kB (UME) 1351*8kB (UME) 229*16kB (UE) 175*32kB (UME) 369*64kB (U) 107*128kB (UME) 37*256kB (UE) 15*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 81248kB [ 327.742948] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 327.786868] Node 1 Normal: 13242*4kB (UME) 7097*8kB (UE) 1172*16kB (UME) 760*32kB (UME) 831*64kB (UME) 184*128kB (UM) 79*256kB (UME) 32*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 266160kB [ 327.888409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.923579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 327.947604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.984521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 327.998914] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 328.011899] 1451 total pagecache pages [ 328.015909] 0 pages in swap cache [ 328.019368] Swap cache stats: add 0, delete 0, find 0/0 [ 328.049839] Free swap = 0kB [ 328.060295] Total swap = 0kB [ 328.063426] 1965979 pages RAM [ 328.066725] 0 pages HighMem/MovableOnly [ 328.089958] 339049 pages reserved [ 328.102344] 0 pages cma reserved [ 328.143460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.154421] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 328.174313] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 328.181856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.189977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.208632] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 328.235644] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.264445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 328.276724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.288860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.302512] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.308922] bridge0: port 1(bridge_slave_0) entered forwarding state 2020/03/09 18:33:21 executed programs: 24 [ 328.338199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 328.347966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.375712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.395518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.408250] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.414945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.438342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 328.459718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.478534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 328.508550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.537756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 328.548539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.558043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.604317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 328.621113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.629842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.645015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.677465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 328.712887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.723757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.749084] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 328.772459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.784151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.806677] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 328.823051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.894866] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 328.925523] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 328.943257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.953495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.978623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.029833] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 329.050213] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 329.062924] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 329.068626] CPU: 0 PID: 7926 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 329.076498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.090387] Call Trace: [ 329.093177] dump_stack+0x13e/0x194 [ 329.096989] warn_alloc.cold+0x96/0x1af [ 329.101116] ? zone_watermark_ok_safe+0x280/0x280 [ 329.106030] ? __alloc_pages_direct_compact+0xba/0x360 [ 329.111495] __alloc_pages_slowpath+0x2114/0x26c0 [ 329.116421] ? save_trace+0x290/0x290 [ 329.120318] ? warn_alloc+0xf0/0xf0 [ 329.124002] __alloc_pages_nodemask+0x5d3/0x700 [ 329.128920] ? lock_downgrade+0x6e0/0x6e0 [ 329.130412] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 329.133729] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 329.143872] syz-executor.5: page allocation failure: order:4 [ 329.146531] ? find_held_lock+0x2d/0x110 [ 329.146548] alloc_pages_current+0xe7/0x1e0 [ 329.161041] team0: Port device team_slave_0 added [ 329.161942] ion_page_pool_alloc+0x118/0x1b0 [ 329.167904] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 329.171276] ion_system_heap_allocate+0x134/0x8d0 [ 329.171287] ? _ion_heap_freelist_drain+0x6e/0x410 [ 329.171294] ? ion_system_heap_free+0x240/0x240 [ 329.171305] ion_alloc+0x611/0x7d0 [ 329.171317] ? ion_dma_buf_release+0x40/0x40 [ 329.178458] (null) [ 329.183516] ? __might_fault+0x177/0x1b0 [ 329.183535] ion_ioctl+0xef/0x1f8 [ 329.183546] ? ion_alloc.cold+0x3d/0x3d [ 329.183560] ? selinux_file_ioctl+0x3f7/0x560 [ 329.183566] ? ion_alloc.cold+0x3d/0x3d [ 329.183581] do_vfs_ioctl+0x75a/0xfe0 [ 329.210107] syz-executor.5 cpuset= [ 329.211876] ? selinux_file_mprotect+0x5c0/0x5c0 [ 329.215870] syz5 [ 329.220558] ? ioctl_preallocate+0x1a0/0x1a0 [ 329.240144] mems_allowed=0-1 [ 329.243412] ? _copy_to_user+0x82/0xd0 [ 329.250453] ? put_timespec64+0xaa/0xf0 [ 329.255061] ? nsecs_to_jiffies+0x30/0x30 [ 329.259234] ? security_file_ioctl+0x76/0xb0 [ 329.263696] ? security_file_ioctl+0x83/0xb0 [ 329.268246] SyS_ioctl+0x7f/0xb0 [ 329.271646] ? do_vfs_ioctl+0xfe0/0xfe0 [ 329.275711] do_syscall_64+0x1d5/0x640 [ 329.279661] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 329.284888] RIP: 0033:0x45c4a9 [ 329.288089] RSP: 002b:00007ffeeb954df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.296764] RAX: ffffffffffffffda RBX: 0000000000f0b914 RCX: 000000000045c4a9 [ 329.304049] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 329.311419] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 329.318725] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 329.327941] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 329.342314] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 329.349231] CPU: 0 PID: 7928 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 329.357210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.366611] Call Trace: [ 329.369255] dump_stack+0x13e/0x194 [ 329.373012] warn_alloc.cold+0x96/0x1af [ 329.377015] ? zone_watermark_ok_safe+0x280/0x280 [ 329.381985] ? __alloc_pages_direct_compact+0xba/0x360 [ 329.387499] __alloc_pages_slowpath+0x2114/0x26c0 [ 329.392523] ? save_trace+0x290/0x290 [ 329.396543] ? warn_alloc+0xf0/0xf0 [ 329.400229] __alloc_pages_nodemask+0x5d3/0x700 [ 329.404952] ? lock_downgrade+0x6e0/0x6e0 [ 329.409137] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 329.414561] alloc_pages_current+0xe7/0x1e0 [ 329.420155] ion_page_pool_alloc+0x118/0x1b0 [ 329.424890] ion_system_heap_allocate+0x134/0x8d0 [ 329.429790] ? _ion_heap_freelist_drain+0x6e/0x410 [ 329.435186] ? ion_system_heap_free+0x240/0x240 [ 329.439948] ion_alloc+0x611/0x7d0 [ 329.443522] ? ion_dma_buf_release+0x40/0x40 [ 329.448047] ? __might_fault+0x177/0x1b0 [ 329.452154] ion_ioctl+0xef/0x1f8 [ 329.455704] ? ion_alloc.cold+0x3d/0x3d [ 329.459712] ? selinux_file_ioctl+0x3f7/0x560 [ 329.464341] ? ion_alloc.cold+0x3d/0x3d [ 329.468527] do_vfs_ioctl+0x75a/0xfe0 [ 329.472359] ? selinux_file_mprotect+0x5c0/0x5c0 [ 329.477270] ? ioctl_preallocate+0x1a0/0x1a0 [ 329.481707] ? _copy_to_user+0x82/0xd0 [ 329.485808] ? put_timespec64+0xaa/0xf0 [ 329.489822] ? nsecs_to_jiffies+0x30/0x30 [ 329.494802] ? security_file_ioctl+0x76/0xb0 [ 329.499230] ? security_file_ioctl+0x83/0xb0 [ 329.503691] SyS_ioctl+0x7f/0xb0 [ 329.507077] ? do_vfs_ioctl+0xfe0/0xfe0 [ 329.511204] do_syscall_64+0x1d5/0x640 [ 329.516391] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 329.521652] RIP: 0033:0x45c4a9 [ 329.525220] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.533859] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 329.541428] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 329.549308] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 329.556838] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 329.564263] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 329.571845] CPU: 1 PID: 7946 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 329.577132] Mem-Info: [ 329.579685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.579691] Call Trace: [ 329.579725] dump_stack+0x13e/0x194 [ 329.579744] warn_alloc.cold+0x96/0x1af [ 329.579754] ? zone_watermark_ok_safe+0x280/0x280 [ 329.579768] ? __alloc_pages_direct_compact+0x28a/0x360 [ 329.579776] __alloc_pages_slowpath+0x2114/0x26c0 [ 329.579794] ? save_trace+0x290/0x290 [ 329.579809] ? warn_alloc+0xf0/0xf0 [ 329.579830] __alloc_pages_nodemask+0x5d3/0x700 [ 329.579841] ? lock_downgrade+0x6e0/0x6e0 [ 329.579849] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 329.579866] ? retint_kernel+0x2d/0x2d [ 329.579886] alloc_pages_current+0xe7/0x1e0 [ 329.586300] active_anon:6067 inactive_anon:196 isolated_anon:12 [ 329.586300] active_file:347 inactive_file:404 isolated_file:12 [ 329.586300] unevictable:0 dirty:49 writeback:0 unstable:0 [ 329.586300] slab_reclaimable:12157 slab_unreclaimable:101882 [ 329.586300] mapped:688 shmem:250 pagetables:429 bounce:0 [ 329.586300] free:115295 free_pcp:368 free_cma:0 [ 329.591932] ion_page_pool_alloc+0x118/0x1b0 [ 329.591944] ion_system_heap_allocate+0x134/0x8d0 [ 329.591955] ? rcu_read_lock_sched_held+0x10a/0x130 [ 329.591962] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 329.591970] ? ion_system_heap_free+0x240/0x240 [ 329.591980] ion_alloc+0x1e9/0x7d0 [ 329.591991] ? ion_dma_buf_release+0x40/0x40 [ 329.592004] ? __might_fault+0x177/0x1b0 [ 329.592013] ion_ioctl+0xef/0x1f8 [ 329.592021] ? ion_alloc.cold+0x3d/0x3d [ 329.592033] ? selinux_file_ioctl+0x3f7/0x560 [ 329.592039] ? ion_alloc.cold+0x3d/0x3d [ 329.592048] do_vfs_ioctl+0x75a/0xfe0 [ 329.592055] ? selinux_file_mprotect+0x5c0/0x5c0 [ 329.592063] ? ioctl_preallocate+0x1a0/0x1a0 [ 329.592072] ? _copy_to_user+0x82/0xd0 [ 329.592082] ? put_timespec64+0xaa/0xf0 [ 329.592088] ? nsecs_to_jiffies+0x30/0x30 [ 329.592100] ? security_file_ioctl+0x76/0xb0 [ 329.592106] ? security_file_ioctl+0x83/0xb0 [ 329.592115] SyS_ioctl+0x7f/0xb0 [ 329.592122] ? do_vfs_ioctl+0xfe0/0xfe0 [ 329.592134] do_syscall_64+0x1d5/0x640 [ 329.592150] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 329.592159] RIP: 0033:0x45c4a9 [ 329.592164] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.592172] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 329.592177] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 329.592181] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 329.592190] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 329.600707] Node 0 active_anon:23964kB inactive_anon:772kB active_file:16kB inactive_file:64kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:0kB dirty:80kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 329.602414] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 329.886833] Node 1 active_anon:404kB inactive_anon:12kB active_file:2372kB inactive_file:3152kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:4460kB dirty:116kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 329.971560] Node 0 DMA free:10500kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 330.104169] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 330.109831] Node 0 DMA32 free:46388kB min:36272kB low:45340kB high:54408kB active_anon:23900kB inactive_anon:768kB active_file:736kB inactive_file:1724kB unevictable:0kB writepending:88kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7008kB pagetables:1612kB bounce:0kB free_pcp:712kB local_pcp:540kB free_cma:0kB [ 330.203716] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 330.212685] lowmem_reserve[]: 0 0 0 0 0 [ 330.216721] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 330.241763] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 330.255297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.273401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.284178] lowmem_reserve[]: 0 0 0 0 0 [ 330.288302] Node 1 Normal free:455136kB min:53612kB low:67012kB high:80412kB active_anon:392kB inactive_anon:16kB active_file:2816kB inactive_file:3048kB unevictable:0kB writepending:156kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:48kB bounce:0kB free_pcp:388kB local_pcp:384kB free_cma:0kB [ 330.392926] lowmem_reserve[]: 0 0 0 0 0 [ 330.406740] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 1*32kB (E) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10500kB [ 330.455089] Node 0 DMA32: 361*4kB (UME) 182*8kB (UMEH) 15*16kB (UMEH) 41*32kB (UMEH) 66*64kB (UME) 45*128kB (UM) 57*256kB (UM) 34*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 47460kB [ 330.490592] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 330.510299] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 330.527234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 330.546581] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 330.571226] Node 1 Normal: 859*4kB (UM) 81*8kB (UME) 4497*16kB (UME) 3625*32kB (UME) 1*64kB (U) 2*128kB (UM) 1*256kB (M) 2*512kB (U) 1*1024kB (U) 12*2048kB (U) 0*4096kB = 219236kB [ 330.594700] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 330.611748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.622064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.637176] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 330.649542] device veth0_vlan entered promiscuous mode [ 330.660405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.672356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.685547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 330.706755] device veth1_vlan entered promiscuous mode [ 330.727459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 330.775482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 330.807742] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 330.819064] 1848 total pagecache pages [ 330.846153] 0 pages in swap cache [ 330.860667] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 330.868744] Swap cache stats: add 0, delete 0, find 0/0 [ 330.876886] Free swap = 0kB [ 330.880567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.896576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.904104] Total swap = 0kB [ 330.916136] 1965979 pages RAM [ 330.924100] 0 pages HighMem/MovableOnly [ 330.936881] device veth0_macvtap entered promiscuous mode [ 330.945326] 339049 pages reserved [ 330.952432] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 330.959120] 0 pages cma reserved [ 330.963594] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 330.987225] device veth1_macvtap entered promiscuous mode [ 330.995160] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 331.012796] CPU: 0 PID: 7951 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 331.020907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.030358] Call Trace: [ 331.033841] dump_stack+0x13e/0x194 [ 331.037479] warn_alloc.cold+0x96/0x1af [ 331.041460] ? zone_watermark_ok_safe+0x280/0x280 [ 331.046333] ? __alloc_pages_direct_compact+0xba/0x360 [ 331.051627] __alloc_pages_slowpath+0x2114/0x26c0 [ 331.056483] ? save_trace+0x290/0x290 [ 331.060289] ? warn_alloc+0xf0/0xf0 [ 331.063935] __alloc_pages_nodemask+0x5d3/0x700 [ 331.068706] ? lock_downgrade+0x6e0/0x6e0 [ 331.072854] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 331.077868] ? retint_kernel+0x2d/0x2d [ 331.081763] alloc_pages_current+0xe7/0x1e0 [ 331.086084] ion_page_pool_alloc+0x118/0x1b0 [ 331.090487] ion_system_heap_allocate+0x134/0x8d0 [ 331.095325] ? rcu_read_lock_sched_held+0x10a/0x130 [ 331.100337] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 331.105176] ? ion_system_heap_free+0x240/0x240 [ 331.109856] ion_alloc+0x1e9/0x7d0 [ 331.113403] ? ion_dma_buf_release+0x40/0x40 [ 331.117821] ? __might_fault+0x177/0x1b0 [ 331.121971] ion_ioctl+0xef/0x1f8 [ 331.125417] ? ion_alloc.cold+0x3d/0x3d [ 331.129390] ? selinux_file_ioctl+0x3f7/0x560 [ 331.133883] ? ion_alloc.cold+0x3d/0x3d [ 331.137850] do_vfs_ioctl+0x75a/0xfe0 [ 331.141905] ? selinux_file_mprotect+0x5c0/0x5c0 [ 331.146661] ? ioctl_preallocate+0x1a0/0x1a0 [ 331.151065] ? _copy_to_user+0x82/0xd0 [ 331.154948] ? put_timespec64+0xaa/0xf0 [ 331.158919] ? nsecs_to_jiffies+0x30/0x30 [ 331.163075] ? security_file_ioctl+0x76/0xb0 [ 331.167477] ? security_file_ioctl+0x83/0xb0 [ 331.171886] SyS_ioctl+0x7f/0xb0 [ 331.175439] ? do_vfs_ioctl+0xfe0/0xfe0 [ 331.179423] do_syscall_64+0x1d5/0x640 [ 331.183317] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 331.188497] RIP: 0033:0x45c4a9 [ 331.191693] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.199405] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 331.206689] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 331.213985] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 331.221271] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 331.228549] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 331.243883] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 331.273642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 331.326419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 331.357906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 331.394468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.403995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 331.429157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.454912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 331.479307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.526433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 331.568172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.603679] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 331.622902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.643869] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 331.663067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 331.679759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.698648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.738066] warn_alloc_show_mem: 2 callbacks suppressed [ 331.738070] Mem-Info: [ 331.762558] active_anon:6064 inactive_anon:196 isolated_anon:0 [ 331.762558] active_file:171 inactive_file:233 isolated_file:29 [ 331.762558] unevictable:0 dirty:7 writeback:0 unstable:0 [ 331.762558] slab_reclaimable:12216 slab_unreclaimable:102253 [ 331.762558] mapped:134 shmem:250 pagetables:424 bounce:0 [ 331.762558] free:25423 free_pcp:359 free_cma:0 [ 331.830159] Node 0 active_anon:23904kB inactive_anon:768kB active_file:680kB inactive_file:856kB unevictable:0kB isolated(anon):0kB isolated(file):116kB mapped:504kB dirty:12kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 331.884664] Node 1 active_anon:352kB inactive_anon:16kB active_file:4kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:16kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 331.950379] Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.002676] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 332.008091] Node 0 DMA32 free:17792kB min:36272kB low:45340kB high:54408kB active_anon:23904kB inactive_anon:768kB active_file:892kB inactive_file:1216kB unevictable:0kB writepending:12kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1616kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.070198] lowmem_reserve[]: 0 0 0 0 0 [ 332.074267] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.154596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 332.181780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.215099] lowmem_reserve[]: 0 0 0 0 0 [ 332.219245] Node 1 Normal free:58204kB min:53612kB low:67012kB high:80412kB active_anon:360kB inactive_anon:16kB active_file:136kB inactive_file:284kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:80kB bounce:0kB free_pcp:1380kB local_pcp:732kB free_cma:0kB [ 332.230100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 332.251560] lowmem_reserve[]: 0 0 0 0 0 [ 332.263321] Node 0 DMA: 11*4kB (UE) 5*8kB (UE) 5*16kB (UE) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10436kB [ 332.296604] Node 0 DMA32: 4*4kB (MEH) 27*8kB (UMEH) 40*16kB (ME) 26*32kB (UMEH) 17*64kB (UME) 15*128kB (UM) 41*256kB (UM) 26*512kB (UM) 7*1024kB (U) 0*2048kB 0*4096kB = 35688kB [ 332.341405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.355128] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 332.370207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 332.382492] Node 1 Normal: 7*4kB (UME) 25*8kB (UME) 26*16kB (UME) 22*32kB (UME) 360*64kB (UM) 167*128kB (UM) 32*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 54980kB [ 332.416503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.453142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.462535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 332.480683] oom_reaper: reaped process 7946 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 332.490415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 332.499409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.508430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.518547] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 332.541106] rsyslogd cpuset=/ mems_allowed=0-1 [ 332.545773] CPU: 0 PID: 7432 Comm: rsyslogd Not tainted 4.14.172-syzkaller #0 [ 332.553146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.562859] Call Trace: [ 332.565620] dump_stack+0x13e/0x194 [ 332.569494] dump_header+0x178/0x6d4 [ 332.573253] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 332.578737] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 332.583919] ? ___ratelimit+0x50/0x519 [ 332.587850] oom_kill_process.cold+0x10/0xae3 [ 332.592382] ? lock_acquire+0x170/0x3f0 [ 332.596378] ? lock_downgrade+0x6e0/0x6e0 [ 332.600565] out_of_memory+0x2d5/0x1110 [ 332.604574] ? oom_killer_disable+0x1c0/0x1c0 [ 332.609106] ? mutex_trylock+0x152/0x1a0 [ 332.613200] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 332.618103] ? warn_alloc+0xf0/0xf0 [ 332.621875] __alloc_pages_nodemask+0x5d3/0x700 [ 332.626659] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 332.631825] ? lock_downgrade+0x6e0/0x6e0 [ 332.636034] alloc_pages_current+0xe7/0x1e0 [ 332.640466] __page_cache_alloc+0x245/0x3d0 [ 332.644820] filemap_fault+0xc21/0x1c30 [ 332.648863] ? __lock_page_or_retry+0x8a0/0x8a0 [ 332.653590] ? lock_acquire+0x170/0x3f0 [ 332.657582] ? ext4_filemap_fault+0x7c/0xb0 [ 332.661944] ext4_filemap_fault+0x84/0xb0 [ 332.666119] __do_fault+0xfa/0x380 [ 332.669688] __handle_mm_fault+0x22e9/0x3280 [ 332.674135] ? copy_page_range+0x1d70/0x1d70 [ 332.678583] ? find_held_lock+0x2d/0x110 [ 332.682684] handle_mm_fault+0x288/0x7a0 [ 332.686870] __do_page_fault+0x4bc/0xb40 [ 332.690951] ? vmalloc_fault+0xdf0/0xdf0 [ 332.695030] ? do_page_fault+0x60/0x4f2 [ 332.699841] ? page_fault+0x2f/0x50 [ 332.703483] page_fault+0x45/0x50 [ 332.706947] RIP: 0000:0x1 [ 332.709736] RSP: 0006:00007fae3db255a0 EFLAGS: 00000000 [ 332.720189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 332.760092] 330 total pagecache pages [ 332.763958] 0 pages in swap cache [ 332.767456] Swap cache stats: add 0, delete 0, find 0/0 [ 332.790066] Free swap = 0kB [ 332.793135] Total swap = 0kB [ 332.796192] 1965979 pages RAM [ 332.799841] 0 pages HighMem/MovableOnly [ 332.810088] 339049 pages reserved [ 332.813586] 0 pages cma reserved [ 332.838499] Mem-Info: [ 332.850813] active_anon:6066 inactive_anon:196 isolated_anon:0 [ 332.850813] active_file:21 inactive_file:16 isolated_file:0 [ 332.850813] unevictable:0 dirty:0 writeback:0 unstable:0 [ 332.850813] slab_reclaimable:12220 slab_unreclaimable:102312 [ 332.850813] mapped:41 shmem:250 pagetables:424 bounce:0 [ 332.850813] free:16596 free_pcp:196 free_cma:0 [ 332.920104] Node 0 active_anon:23904kB inactive_anon:768kB active_file:104kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 332.947633] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 332.954756] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 332.970118] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 332.971868] syz-executor.5: [ 332.977075] CPU: 0 PID: 7928 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 332.977080] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 332.980145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.980151] Call Trace: [ 332.980182] dump_stack+0x13e/0x194 [ 332.980195] warn_alloc.cold+0x96/0x1af [ 332.980204] ? zone_watermark_ok_safe+0x280/0x280 [ 332.980214] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 332.980230] __alloc_pages_slowpath+0x2114/0x26c0 [ 332.992809] (null) [ 332.997936] ? warn_alloc+0xf0/0xf0 [ 333.007371] syz-executor.2 cpuset= [ 333.009992] __alloc_pages_nodemask+0x5d3/0x700 [ 333.013649] syz2 [ 333.017600] ? lock_downgrade+0x6e0/0x6e0 [ 333.022534] syz-executor.5 cpuset= [ 333.027580] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 333.032749] mems_allowed=0-1 [ 333.034860] alloc_pages_current+0xe7/0x1e0 [ 333.050076] syz5 [ 333.052861] ion_page_pool_alloc+0x118/0x1b0 [ 333.056564] mems_allowed=0-1 [ 333.061589] ion_system_heap_allocate+0x134/0x8d0 [ 333.061601] ? _ion_heap_freelist_drain+0x6e/0x410 [ 333.061608] ? ion_system_heap_free+0x240/0x240 [ 333.061620] ion_alloc+0x611/0x7d0 [ 333.061631] ? ion_dma_buf_release+0x40/0x40 [ 333.100969] ? __might_fault+0x177/0x1b0 [ 333.105065] ion_ioctl+0xef/0x1f8 [ 333.108530] ? ion_alloc.cold+0x3d/0x3d [ 333.112641] ? selinux_file_ioctl+0x3f7/0x560 [ 333.117183] ? ion_alloc.cold+0x3d/0x3d [ 333.121277] do_vfs_ioctl+0x75a/0xfe0 [ 333.125217] ? selinux_file_mprotect+0x5c0/0x5c0 [ 333.130031] ? ioctl_preallocate+0x1a0/0x1a0 [ 333.134507] ? _copy_to_user+0x82/0xd0 [ 333.138738] ? put_timespec64+0xaa/0xf0 [ 333.142822] ? nsecs_to_jiffies+0x30/0x30 [ 333.147119] ? security_file_ioctl+0x76/0xb0 [ 333.151894] ? security_file_ioctl+0x83/0xb0 [ 333.156940] SyS_ioctl+0x7f/0xb0 [ 333.160328] ? do_vfs_ioctl+0xfe0/0xfe0 [ 333.164331] do_syscall_64+0x1d5/0x640 [ 333.168279] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 333.173742] RIP: 0033:0x45c4a9 [ 333.176938] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.185578] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 333.193122] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 333.200501] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.207874] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 333.215168] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 333.222852] CPU: 1 PID: 7946 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 333.230782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.240167] Node 1 active_anon:360kB inactive_anon:16kB active_file:24kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 333.240325] Call Trace: [ 333.269202] dump_stack+0x13e/0x194 [ 333.272876] warn_alloc.cold+0x96/0x1af [ 333.276886] ? zone_watermark_ok_safe+0x280/0x280 [ 333.281759] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 333.286898] __alloc_pages_slowpath+0x2114/0x26c0 [ 333.291785] ? warn_alloc+0xf0/0xf0 [ 333.295457] __alloc_pages_nodemask+0x5d3/0x700 [ 333.300147] Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 333.300708] ? lock_downgrade+0x6e0/0x6e0 [ 333.300722] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 333.336707] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 333.341774] alloc_pages_current+0xe7/0x1e0 [ 333.346443] ion_page_pool_alloc+0x118/0x1b0 [ 333.350741] lowmem_reserve[]: 0 [ 333.350971] ion_system_heap_allocate+0x134/0x8d0 [ 333.350974] 2557 2557 [ 333.354420] ? rcu_read_lock_sched_held+0x10a/0x130 [ 333.359257] 2557 [ 333.361783] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 333.361797] ? ion_system_heap_free+0x240/0x240 [ 333.361808] ion_alloc+0x1e9/0x7d0 [ 333.361821] ? ion_dma_buf_release+0x40/0x40 [ 333.361838] ? __might_fault+0x177/0x1b0 [ 333.361849] ion_ioctl+0xef/0x1f8 [ 333.381487] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 333.382166] ? ion_alloc.cold+0x3d/0x3d [ 333.386657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.390885] ? selinux_file_ioctl+0x3f7/0x560 [ 333.390900] ? ion_alloc.cold+0x3d/0x3d [ 333.390911] do_vfs_ioctl+0x75a/0xfe0 [ 333.390921] ? selinux_file_mprotect+0x5c0/0x5c0 [ 333.390929] ? ioctl_preallocate+0x1a0/0x1a0 [ 333.390937] ? _copy_to_user+0x82/0xd0 [ 333.390949] ? put_timespec64+0xaa/0xf0 [ 333.390960] ? nsecs_to_jiffies+0x30/0x30 [ 333.417244] 2557 [ 333.417577] ? security_file_ioctl+0x76/0xb0 [ 333.417585] ? security_file_ioctl+0x83/0xb0 [ 333.417597] SyS_ioctl+0x7f/0xb0 [ 333.417604] ? do_vfs_ioctl+0xfe0/0xfe0 [ 333.417618] do_syscall_64+0x1d5/0x640 [ 333.417632] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 333.417640] RIP: 0033:0x45c4a9 [ 333.417644] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.417652] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 333.417656] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 333.417660] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.417664] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 333.417673] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 333.443077] CPU: 1 PID: 7926 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 333.488131] Node 0 [ 333.495788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.495794] Call Trace: [ 333.495817] dump_stack+0x13e/0x194 [ 333.495829] warn_alloc.cold+0x96/0x1af [ 333.495837] ? zone_watermark_ok_safe+0x280/0x280 [ 333.495846] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 333.495863] __alloc_pages_slowpath+0x2114/0x26c0 [ 333.495886] ? warn_alloc+0xf0/0xf0 [ 333.507718] DMA32 free:36276kB min:36272kB low:45340kB high:54408kB active_anon:23852kB inactive_anon:768kB active_file:68kB inactive_file:380kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1616kB bounce:0kB free_pcp:1256kB local_pcp:0kB free_cma:0kB [ 333.512118] __alloc_pages_nodemask+0x5d3/0x700 [ 333.512133] ? lock_downgrade+0x6e0/0x6e0 [ 333.512140] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 333.512156] alloc_pages_current+0xe7/0x1e0 [ 333.512170] ion_page_pool_alloc+0x118/0x1b0 [ 333.512178] ion_system_heap_allocate+0x134/0x8d0 [ 333.512187] ? _ion_heap_freelist_drain+0x6e/0x410 [ 333.512195] ? ion_system_heap_free+0x240/0x240 [ 333.512205] ion_alloc+0x611/0x7d0 [ 333.512217] ? ion_dma_buf_release+0x40/0x40 [ 333.512229] ? __might_fault+0x177/0x1b0 [ 333.512239] ion_ioctl+0xef/0x1f8 [ 333.512246] ? ion_alloc.cold+0x3d/0x3d [ 333.512258] ? selinux_file_ioctl+0x3f7/0x560 [ 333.512272] ? ion_alloc.cold+0x3d/0x3d [ 333.512281] do_vfs_ioctl+0x75a/0xfe0 [ 333.512289] ? selinux_file_mprotect+0x5c0/0x5c0 [ 333.512297] ? ioctl_preallocate+0x1a0/0x1a0 [ 333.512307] ? _copy_to_user+0x82/0xd0 [ 333.512319] ? put_timespec64+0xaa/0xf0 [ 333.512326] ? nsecs_to_jiffies+0x30/0x30 [ 333.512339] ? security_file_ioctl+0x76/0xb0 [ 333.512346] ? security_file_ioctl+0x83/0xb0 [ 333.512355] SyS_ioctl+0x7f/0xb0 [ 333.512365] ? do_vfs_ioctl+0xfe0/0xfe0 [ 333.519935] lowmem_reserve[]: [ 333.527163] do_syscall_64+0x1d5/0x640 [ 333.527184] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 333.527193] RIP: 0033:0x45c4a9 [ 333.527197] RSP: 002b:00007ffeeb954df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.527205] RAX: ffffffffffffffda RBX: 0000000000f0b914 RCX: 000000000045c4a9 [ 333.527209] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 333.527213] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.527217] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 333.527221] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 333.534922] Mem-Info: [ 333.553629] 0 [ 333.601833] active_anon:6050 inactive_anon:196 isolated_anon:0 [ 333.601833] active_file:13 inactive_file:14 isolated_file:0 [ 333.601833] unevictable:0 dirty:0 writeback:0 unstable:0 [ 333.601833] slab_reclaimable:12221 slab_unreclaimable:101766 [ 333.601833] mapped:4 shmem:250 pagetables:424 bounce:0 [ 333.601833] free:24685 free_pcp:26 free_cma:0 [ 333.652502] 0 [ 333.698234] Node 0 active_anon:23852kB inactive_anon:768kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 333.734620] 0 [ 333.773403] Node 1 active_anon:348kB inactive_anon:16kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 333.884219] 0 0 [ 333.890853] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 333.891965] Node 0 [ 333.925953] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 333.939549] Node 0 DMA32 free:39832kB min:36272kB low:45340kB high:54408kB active_anon:23852kB inactive_anon:768kB active_file:68kB inactive_file:100kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1616kB bounce:0kB free_pcp:552kB local_pcp:352kB free_cma:0kB [ 333.987255] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.010103] lowmem_reserve[]: 0 0 0 0 0 [ 334.025957] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.057547] lowmem_reserve[]: 0 0 0 0 0 [ 334.060160] lowmem_reserve[]: 0 0 0 0 0 [ 334.061699] Node 1 [ 334.065669] Node 1 [ 334.065691] Normal free:317220kB min:53612kB low:67012kB high:80412kB active_anon:348kB inactive_anon:16kB active_file:36kB inactive_file:1036kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:80kB bounce:0kB free_pcp:168kB local_pcp:48kB free_cma:0kB [ 334.065699] lowmem_reserve[]: [ 334.067947] Normal free:317220kB min:53612kB low:67012kB high:80412kB active_anon:348kB inactive_anon:16kB active_file:36kB inactive_file:1036kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:80kB bounce:0kB free_pcp:168kB local_pcp:120kB free_cma:0kB [ 334.074867] 0 [ 334.150098] lowmem_reserve[]: 0 0 0 0 0 [ 334.156126] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 4*16kB (UE) 1*32kB (E) 4*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10480kB [ 334.184177] 0 0 0 0 [ 334.186590] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 4*16kB (UE) 1*32kB (E) 4*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10480kB [ 334.200127] Node 0 DMA32: 1*4kB (E) 12*8kB (UE) 1098*16kB (UME) 43*32kB (UME) 771*64kB (UME) 141*128kB (UM) 44*256kB (UM) 30*512kB (UE) 17*1024kB (UM) 0*2048kB 0*4096kB = 130468kB [ 334.240504] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 334.244435] Node 0 DMA32: 245*4kB (UME) 306*8kB (UME) 1177*16kB (UME) 132*32kB (UME) 782*64kB (UME) 146*128kB (UM) 44*256kB (UM) 30*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 121844kB [ 334.260120] Node 1 Normal: 8581*4kB (UME) 721*8kB (UME) 175*16kB (UME) 108*32kB (UME) 2703*64kB (U) 780*128kB (U) 358*256kB (U) 143*512kB (UM) 35*1024kB (U) 3*2048kB (U) 0*4096kB = 526028kB [ 334.294579] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 334.310766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.330116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 334.334148] Node 1 [ 334.339187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.339198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 334.341600] Normal: [ 334.370107] 753 total pagecache pages [ 334.370149] 11182*4kB [ 334.372500] 0 pages in swap cache [ 334.376338] (UME) [ 334.378839] Swap cache stats: add 0, delete 0, find 0/0 [ 334.405419] 1583*8kB (UME) 404*16kB (UME) 768*32kB (UME) 2592*64kB (U) 782*128kB (U) 359*256kB (U) 143*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 519536kB [ 334.410125] Free swap = 0kB [ 334.434418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.440730] Total swap = 0kB [ 334.446544] 1965979 pages RAM [ 334.449678] 0 pages HighMem/MovableOnly [ 334.450091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 334.460147] 339049 pages reserved [ 334.465760] 0 pages cma reserved [ 334.469145] Out of memory: Kill process 7951 (syz-executor.4) score 999 or sacrifice child [ 334.481131] Killed process 7951 (syz-executor.4) total-vm:39752kB, anon-rss:88kB, file-rss:0kB, shmem-rss:0kB [ 334.485470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.505435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 334.510880] oom_reaper: reaped process 7951 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 334.514224] 753 total pagecache pages [ 334.533676] 0 pages in swap cache 2020/03/09 18:33:27 executed programs: 26 [ 334.555677] Swap cache stats: add 0, delete 0, find 0/0 [ 334.596003] Free swap = 0kB [ 334.599835] Total swap = 0kB [ 334.603671] 1965979 pages RAM [ 334.614916] 0 pages HighMem/MovableOnly [ 334.618964] 339049 pages reserved [ 334.623141] 0 pages cma reserved [ 334.680647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.696281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2020/03/09 18:33:27 result: hanged=false err=executor 0: EOF [ 334.736698] syz-executor.0 (7918) used greatest stack depth: 24176 bytes left [ 334.948063] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 334.961670] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 334.965880] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 334.991309] CPU: 1 PID: 7946 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 334.991558] syz-executor.3 cpuset= [ 334.999182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.999192] Call Trace: [ 335.003993] syz3 [ 335.012394] dump_stack+0x13e/0x194 [ 335.015629] mems_allowed=0-1 [ 335.016977] warn_alloc.cold+0x96/0x1af [ 335.027700] ? zone_watermark_ok_safe+0x280/0x280 [ 335.032566] ? __alloc_pages_direct_compact+0xba/0x360 [ 335.037881] __alloc_pages_slowpath+0x2114/0x26c0 [ 335.042751] ? save_trace+0x290/0x290 [ 335.046580] ? warn_alloc+0xf0/0xf0 [ 335.050327] __alloc_pages_nodemask+0x5d3/0x700 [ 335.055014] ? lock_downgrade+0x6e0/0x6e0 [ 335.059182] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 335.064429] alloc_pages_current+0xe7/0x1e0 [ 335.068805] ion_page_pool_alloc+0x118/0x1b0 [ 335.073281] ion_system_heap_allocate+0x134/0x8d0 [ 335.078162] ? _ion_heap_freelist_drain+0x6e/0x410 [ 335.083207] ? ion_system_heap_free+0x240/0x240 [ 335.087909] ion_alloc+0x611/0x7d0 [ 335.091483] ? ion_dma_buf_release+0x40/0x40 [ 335.096078] ? __might_fault+0x177/0x1b0 [ 335.100712] ion_ioctl+0xef/0x1f8 [ 335.104181] ? ion_alloc.cold+0x3d/0x3d [ 335.108267] ? selinux_file_ioctl+0x3f7/0x560 [ 335.113061] ? ion_alloc.cold+0x3d/0x3d [ 335.117061] do_vfs_ioctl+0x75a/0xfe0 [ 335.120884] ? selinux_file_mprotect+0x5c0/0x5c0 [ 335.126000] ? ioctl_preallocate+0x1a0/0x1a0 [ 335.130438] ? _copy_to_user+0x82/0xd0 [ 335.134564] ? put_timespec64+0xaa/0xf0 [ 335.138562] ? nsecs_to_jiffies+0x30/0x30 [ 335.143258] ? security_file_ioctl+0x76/0xb0 [ 335.147710] ? security_file_ioctl+0x83/0xb0 [ 335.152225] SyS_ioctl+0x7f/0xb0 [ 335.155838] ? do_vfs_ioctl+0xfe0/0xfe0 [ 335.159850] do_syscall_64+0x1d5/0x640 [ 335.163782] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 335.169005] RIP: 0033:0x45c4a9 [ 335.172229] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.180096] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 335.187402] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 335.194881] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.202192] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 335.209680] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 335.219115] warn_alloc_show_mem: 2 callbacks suppressed [ 335.219119] Mem-Info: [ 335.234727] active_anon:6051 inactive_anon:196 isolated_anon:0 [ 335.234727] active_file:866 inactive_file:1691 isolated_file:0 [ 335.234727] unevictable:0 dirty:42 writeback:0 unstable:0 [ 335.234727] slab_reclaimable:12280 slab_unreclaimable:101830 [ 335.234727] mapped:1666 shmem:250 pagetables:424 bounce:0 [ 335.234727] free:62160 free_pcp:369 free_cma:0 [ 335.250258] CPU: 0 PID: 7967 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 335.277490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.287125] Call Trace: [ 335.289838] dump_stack+0x13e/0x194 [ 335.293491] warn_alloc.cold+0x96/0x1af [ 335.297489] ? zone_watermark_ok_safe+0x280/0x280 [ 335.301032] Node 0 active_anon:24088kB inactive_anon:776kB active_file:3060kB inactive_file:6036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5900kB dirty:156kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 335.302353] ? __alloc_pages_direct_compact+0x28a/0x360 [ 335.302364] __alloc_pages_slowpath+0x2114/0x26c0 [ 335.343168] ? save_trace+0x290/0x290 [ 335.347017] ? warn_alloc+0xf0/0xf0 [ 335.350675] __alloc_pages_nodemask+0x5d3/0x700 [ 335.355395] ? lock_downgrade+0x6e0/0x6e0 [ 335.358213] Node 1 active_anon:216kB inactive_anon:8kB active_file:404kB inactive_file:728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:964kB dirty:12kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 335.360123] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 335.360142] alloc_pages_current+0xe7/0x1e0 [ 335.360156] ion_page_pool_alloc+0x118/0x1b0 [ 335.360171] ion_system_heap_allocate+0x134/0x8d0 [ 335.395592] Node 0 [ 335.397933] ? rcu_read_lock_sched_held+0x10a/0x130 [ 335.397943] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 335.397957] ? ion_system_heap_free+0x240/0x240 [ 335.402833] DMA free:11212kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.407555] ion_alloc+0x1e9/0x7d0 [ 335.407570] ? ion_dma_buf_release+0x40/0x40 [ 335.407591] ? __might_fault+0x177/0x1b0 [ 335.409884] lowmem_reserve[]: [ 335.415299] ion_ioctl+0xef/0x1f8 [ 335.415310] ? ion_alloc.cold+0x3d/0x3d [ 335.415322] ? selinux_file_ioctl+0x3f7/0x560 [ 335.415329] ? ion_alloc.cold+0x3d/0x3d [ 335.415339] do_vfs_ioctl+0x75a/0xfe0 [ 335.415346] ? selinux_file_mprotect+0x5c0/0x5c0 [ 335.415359] ? ioctl_preallocate+0x1a0/0x1a0 [ 335.420308] 0 [ 335.424909] ? _copy_to_user+0x82/0xd0 [ 335.424920] ? put_timespec64+0xaa/0xf0 [ 335.424927] ? nsecs_to_jiffies+0x30/0x30 [ 335.424941] ? security_file_ioctl+0x76/0xb0 [ 335.450797] 2557 [ 335.454235] ? security_file_ioctl+0x83/0xb0 [ 335.454247] SyS_ioctl+0x7f/0xb0 [ 335.454256] ? do_vfs_ioctl+0xfe0/0xfe0 [ 335.454269] do_syscall_64+0x1d5/0x640 [ 335.458853] 2557 [ 335.462868] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 335.462877] RIP: 0033:0x45c4a9 [ 335.462882] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.462890] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 335.462894] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 335.462898] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.462902] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 335.462906] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 335.608688] 2557 2557 [ 335.616534] Node 0 DMA32 free:93436kB min:36272kB low:45340kB high:54408kB active_anon:23988kB inactive_anon:776kB active_file:3060kB inactive_file:6136kB unevictable:0kB writepending:156kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1648kB bounce:0kB free_pcp:1220kB local_pcp:496kB free_cma:0kB [ 335.662866] lowmem_reserve[]: 0 0 0 0 0 [ 335.666950] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.744502] lowmem_reserve[]: 0 0 0 0 0 [ 335.748570] Node 1 Normal free:348288kB min:53612kB low:67012kB high:80412kB active_anon:216kB inactive_anon:8kB active_file:404kB inactive_file:728kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:64kB pagetables:48kB bounce:0kB free_pcp:752kB local_pcp:60kB free_cma:0kB [ 335.783000] lowmem_reserve[]: 0 0 0 0 0 [ 335.787064] Node 0 DMA: 15*4kB (UE) 3*8kB (UE) 4*16kB (UE) 2*32kB (UE) 8*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 11220kB [ 335.828710] Node 0 DMA32: 3231*4kB (UM) 2486*8kB (UME) 2636*16kB (UME) 926*32kB (UME) 55*64kB (UM) 13*128kB (U) 1*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 110572kB [ 335.869325] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 335.884979] Node 1 Normal: 23586*4kB (UME) 13312*8kB (UME) 3546*16kB (UME) 2383*32kB (UE) 612*64kB (U) 59*128kB (U) 11*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 383368kB [ 335.909275] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.918246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 335.936134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.945785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 335.965482] 2881 total pagecache pages [ 335.969818] 0 pages in swap cache [ 335.978687] Swap cache stats: add 0, delete 0, find 0/0 [ 335.988887] Free swap = 0kB [ 335.997669] Total swap = 0kB [ 336.006443] 1965979 pages RAM [ 336.014112] 0 pages HighMem/MovableOnly [ 336.032612] 339049 pages reserved [ 336.036311] 0 pages cma reserved [ 336.210587] device bridge_slave_1 left promiscuous mode [ 336.216442] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.337034] device bridge_slave_0 left promiscuous mode [ 336.342989] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.445543] team0 (unregistering): Port device team_slave_0 removed [ 336.468045] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 336.490990] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 336.510753] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 336.516276] CPU: 0 PID: 7991 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 336.524315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.533862] Call Trace: [ 336.536473] dump_stack+0x13e/0x194 [ 336.540238] warn_alloc.cold+0x96/0x1af [ 336.548767] ? zone_watermark_ok_safe+0x280/0x280 [ 336.553669] ? __alloc_pages_direct_compact+0x28a/0x360 [ 336.559083] __alloc_pages_slowpath+0x2114/0x26c0 [ 336.563952] ? save_trace+0x290/0x290 [ 336.567978] ? warn_alloc+0xf0/0xf0 [ 336.571641] __alloc_pages_nodemask+0x5d3/0x700 [ 336.576418] ? lock_downgrade+0x6e0/0x6e0 [ 336.580597] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 336.585647] alloc_pages_current+0xe7/0x1e0 [ 336.590099] ion_page_pool_alloc+0x118/0x1b0 [ 336.594550] ion_system_heap_allocate+0x134/0x8d0 [ 336.599426] ? rcu_read_lock_sched_held+0x10a/0x130 [ 336.604494] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 336.609366] ? ion_system_heap_free+0x240/0x240 [ 336.614168] ion_alloc+0x1e9/0x7d0 [ 336.617768] ? ion_dma_buf_release+0x40/0x40 [ 336.622221] ? __might_fault+0x177/0x1b0 [ 336.626335] ion_ioctl+0xef/0x1f8 [ 336.629815] ? ion_alloc.cold+0x3d/0x3d [ 336.634046] ? selinux_file_ioctl+0x3f7/0x560 [ 336.638575] ? ion_alloc.cold+0x3d/0x3d [ 336.642573] do_vfs_ioctl+0x75a/0xfe0 [ 336.646408] ? selinux_file_mprotect+0x5c0/0x5c0 [ 336.651251] ? ioctl_preallocate+0x1a0/0x1a0 [ 336.655684] ? _copy_to_user+0x82/0xd0 [ 336.659605] ? put_timespec64+0xaa/0xf0 [ 336.663616] ? nsecs_to_jiffies+0x30/0x30 [ 336.667790] ? security_file_ioctl+0x76/0xb0 [ 336.672352] ? security_file_ioctl+0x83/0xb0 [ 336.676890] SyS_ioctl+0x7f/0xb0 [ 336.680311] ? do_vfs_ioctl+0xfe0/0xfe0 [ 336.684575] do_syscall_64+0x1d5/0x640 [ 336.688848] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 336.694075] RIP: 0033:0x45c4a9 [ 336.697290] RSP: 002b:00007ffe964353d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.705025] RAX: ffffffffffffffda RBX: 00000000014f8914 RCX: 000000000045c4a9 [ 336.712309] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 336.719720] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 336.727028] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 336.734347] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 336.803911] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 336.818469] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 336.829089] CPU: 0 PID: 7916 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 336.837033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.846518] Call Trace: [ 336.849128] dump_stack+0x13e/0x194 [ 336.852797] dump_header+0x178/0x6d4 [ 336.856899] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 336.862476] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 336.867783] ? ___ratelimit+0x50/0x519 [ 336.872753] oom_kill_process.cold+0x10/0xae3 [ 336.877537] ? lock_acquire+0x170/0x3f0 [ 336.881553] ? lock_downgrade+0x6e0/0x6e0 [ 336.885730] out_of_memory+0x2d5/0x1110 [ 336.889927] ? oom_killer_disable+0x1c0/0x1c0 [ 336.894057] warn_alloc_show_mem: 1 callbacks suppressed [ 336.894063] Mem-Info: [ 336.895775] ? mutex_trylock+0x152/0x1a0 [ 336.901233] active_anon:6055 inactive_anon:196 isolated_anon:0 [ 336.901233] active_file:53 inactive_file:48 isolated_file:0 [ 336.901233] unevictable:0 dirty:4 writeback:0 unstable:0 [ 336.901233] slab_reclaimable:12295 slab_unreclaimable:101481 [ 336.901233] mapped:8 shmem:250 pagetables:416 bounce:0 [ 336.901233] free:13737 free_pcp:60 free_cma:0 [ 336.903585] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 336.907681] Node 0 active_anon:24004kB inactive_anon:780kB active_file:32kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 336.940575] ? warn_alloc+0xf0/0xf0 [ 336.940596] __alloc_pages_nodemask+0x5d3/0x700 [ 336.940606] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 336.940619] ? lock_downgrade+0x6e0/0x6e0 [ 336.940638] alloc_pages_current+0xe7/0x1e0 [ 336.945530] Node 1 active_anon:216kB inactive_anon:4kB active_file:180kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:12kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 336.972525] __page_cache_alloc+0x245/0x3d0 [ 336.972537] filemap_fault+0xc21/0x1c30 [ 336.972551] ? __lock_page_or_retry+0x8a0/0x8a0 [ 336.972564] ? lock_acquire+0x170/0x3f0 [ 336.972578] ? ext4_filemap_fault+0x7c/0xb0 [ 336.976218] Node 0 [ 336.980917] ext4_filemap_fault+0x84/0xb0 [ 336.980928] __do_fault+0xfa/0x380 [ 336.980936] __handle_mm_fault+0x22e9/0x3280 [ 336.980950] ? copy_page_range+0x1d70/0x1d70 [ 336.985975] DMA free:10320kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.990119] ? find_held_lock+0x2d/0x110 [ 336.990138] handle_mm_fault+0x288/0x7a0 [ 336.990149] __do_page_fault+0x4bc/0xb40 [ 336.990160] ? vmalloc_fault+0xdf0/0xdf0 [ 336.994478] lowmem_reserve[]: [ 337.021409] ? do_page_fault+0x60/0x4f2 [ 337.021422] ? page_fault+0x2f/0x50 [ 337.021429] page_fault+0x45/0x50 [ 337.021438] RIP: 96435640:0x52197 [ 337.021448] RSP: 52197:0000000000000002 EFLAGS: 00000003 [ 337.039054] Mem-Info: [ 337.050230] syz-executor.4: [ 337.054591] active_anon:6055 inactive_anon:196 isolated_anon:0 [ 337.054591] active_file:53 inactive_file:48 isolated_file:0 [ 337.054591] unevictable:0 dirty:4 writeback:0 unstable:0 [ 337.054591] slab_reclaimable:12295 slab_unreclaimable:101481 [ 337.054591] mapped:8 shmem:250 pagetables:416 bounce:0 [ 337.054591] free:13737 free_pcp:60 free_cma:0 [ 337.058342] page allocation failure: order:0 [ 337.063334] Node 0 active_anon:24004kB inactive_anon:780kB active_file:32kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 337.089132] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 337.096999] Node 1 active_anon:216kB inactive_anon:4kB active_file:180kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:12kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 337.110101] syz-executor.5 cpuset= [ 337.117254] Node 0 [ 337.130016] syz5 [ 337.136019] DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 337.137557] 0 [ 337.178408] lowmem_reserve[]: [ 337.205379] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 337.221401] 0 [ 337.240328] mems_allowed=0-1 [ 337.255819] 2557 [ 337.274315] CPU: 1 PID: 7946 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 337.274322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.274325] Call Trace: [ 337.274352] dump_stack+0x13e/0x194 [ 337.274365] warn_alloc.cold+0x96/0x1af [ 337.288526] 2557 [ 337.291343] ? zone_watermark_ok_safe+0x280/0x280 [ 337.291353] ? save_trace+0x290/0x290 [ 337.291362] ? rcu_read_lock_sched_held+0x10a/0x130 [ 337.291388] __alloc_pages_slowpath+0x2114/0x26c0 [ 337.291407] ? warn_alloc+0xf0/0xf0 [ 337.291427] __alloc_pages_nodemask+0x5d3/0x700 [ 337.291436] ? lock_downgrade+0x6e0/0x6e0 [ 337.291443] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 337.291460] alloc_pages_current+0xe7/0x1e0 [ 337.291473] ion_page_pool_alloc+0x118/0x1b0 [ 337.291481] ion_system_heap_allocate+0x134/0x8d0 [ 337.291497] ? _ion_heap_freelist_drain+0x6e/0x410 [ 337.291506] ? ion_system_heap_free+0x240/0x240 [ 337.291519] ion_alloc+0x611/0x7d0 [ 337.291533] ? ion_dma_buf_release+0x40/0x40 [ 337.291547] ? __might_fault+0x177/0x1b0 [ 337.291558] ion_ioctl+0xef/0x1f8 [ 337.291566] ? ion_alloc.cold+0x3d/0x3d [ 337.291579] ? selinux_file_ioctl+0x3f7/0x560 [ 337.295652] 2557 [ 337.301449] ? ion_alloc.cold+0x3d/0x3d [ 337.301463] do_vfs_ioctl+0x75a/0xfe0 [ 337.301474] ? selinux_file_mprotect+0x5c0/0x5c0 [ 337.301483] ? ioctl_preallocate+0x1a0/0x1a0 [ 337.301491] ? _copy_to_user+0x82/0xd0 [ 337.301501] ? put_timespec64+0xaa/0xf0 [ 337.301508] ? nsecs_to_jiffies+0x30/0x30 [ 337.301519] ? security_file_ioctl+0x76/0xb0 [ 337.301525] ? security_file_ioctl+0x83/0xb0 [ 337.301534] SyS_ioctl+0x7f/0xb0 [ 337.301541] ? do_vfs_ioctl+0xfe0/0xfe0 [ 337.301553] do_syscall_64+0x1d5/0x640 [ 337.301568] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 337.301576] RIP: 0033:0x45c4a9 [ 337.301581] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.301590] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 337.301596] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 337.301600] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 337.301604] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 337.301608] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 337.301869] (null) [ 337.327678] 2557 [ 337.329189] 2557 [ 337.360104] syz-executor.4 cpuset= [ 337.431638] Node 0 [ 337.434352] 2557 2557 [ 337.452146] DMA32 free:90568kB min:36272kB low:45340kB high:54408kB active_anon:24068kB inactive_anon:772kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7008kB pagetables:1684kB bounce:0kB free_pcp:268kB local_pcp:220kB free_cma:0kB [ 337.470110] 2557 [ 337.537219] lowmem_reserve[]: 0 0 0 0 0 [ 337.640128] syz4 mems_allowed=0-1 [ 337.643684] CPU: 1 PID: 7951 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 337.649273] Node 0 [ 337.651577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.651581] Call Trace: [ 337.651605] dump_stack+0x13e/0x194 [ 337.651618] warn_alloc.cold+0x96/0x1af [ 337.651626] ? zone_watermark_ok_safe+0x280/0x280 [ 337.651635] ? save_trace+0x290/0x290 [ 337.651643] ? rcu_read_lock_sched_held+0x10a/0x130 [ 337.651661] __alloc_pages_slowpath+0x2114/0x26c0 [ 337.651678] ? warn_alloc+0xf0/0xf0 [ 337.651698] __alloc_pages_nodemask+0x5d3/0x700 [ 337.651718] ? lock_downgrade+0x6e0/0x6e0 [ 337.659650] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 337.663338] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 337.663353] ? retint_kernel+0x2d/0x2d [ 337.663365] alloc_pages_current+0xe7/0x1e0 [ 337.663381] ion_page_pool_alloc+0x118/0x1b0 [ 337.663390] ion_system_heap_allocate+0x134/0x8d0 [ 337.663402] ? rcu_read_lock_sched_held+0x10a/0x130 [ 337.663408] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 337.663417] ? ion_system_heap_free+0x240/0x240 [ 337.663429] ion_alloc+0x1e9/0x7d0 [ 337.663442] ? ion_dma_buf_release+0x40/0x40 [ 337.663456] ? __might_fault+0x177/0x1b0 [ 337.663466] ion_ioctl+0xef/0x1f8 [ 337.663473] ? ion_alloc.cold+0x3d/0x3d [ 337.663490] ? selinux_file_ioctl+0x3f7/0x560 [ 337.677906] lowmem_reserve[]: [ 337.678564] ? ion_alloc.cold+0x3d/0x3d [ 337.697207] 0 [ 337.700794] do_vfs_ioctl+0x75a/0xfe0 [ 337.700808] ? selinux_file_mprotect+0x5c0/0x5c0 [ 337.700816] ? ioctl_preallocate+0x1a0/0x1a0 [ 337.700826] ? _copy_to_user+0x82/0xd0 [ 337.700836] ? put_timespec64+0xaa/0xf0 [ 337.700843] ? nsecs_to_jiffies+0x30/0x30 [ 337.700854] ? security_file_ioctl+0x76/0xb0 [ 337.700861] ? security_file_ioctl+0x83/0xb0 [ 337.700871] SyS_ioctl+0x7f/0xb0 [ 337.700878] ? do_vfs_ioctl+0xfe0/0xfe0 [ 337.700890] do_syscall_64+0x1d5/0x640 [ 337.700904] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 337.718539] 0 [ 337.730523] RIP: 0033:0x45c4a9 [ 337.730529] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.730537] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 337.730541] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 337.730545] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 337.730548] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 337.730552] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 337.957722] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 337.965221] warn_alloc_show_mem: 1 callbacks suppressed [ 337.965226] Mem-Info: [ 337.969355] 0 0 0 [ 337.975826] Node 1 Normal free:665088kB min:53612kB low:67012kB high:80412kB active_anon:220kB inactive_anon:12kB active_file:288kB inactive_file:528kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:64kB pagetables:16kB bounce:0kB free_pcp:440kB local_pcp:320kB free_cma:0kB [ 337.980111] active_anon:6072 inactive_anon:196 isolated_anon:0 [ 337.980111] active_file:105 inactive_file:186 isolated_file:0 [ 337.980111] unevictable:0 dirty:0 writeback:0 unstable:0 [ 337.980111] slab_reclaimable:12318 slab_unreclaimable:101490 [ 337.980111] mapped:202 shmem:250 pagetables:425 bounce:0 [ 337.980111] free:208183 free_pcp:194 free_cma:0 [ 338.010556] lowmem_reserve[]: [ 338.040195] Node 0 DMA32 free:157200kB min:36272kB low:45340kB high:54408kB active_anon:24068kB inactive_anon:772kB active_file:132kB inactive_file:216kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7008kB pagetables:1684kB bounce:0kB free_pcp:340kB local_pcp:12kB free_cma:0kB [ 338.040219] lowmem_reserve[]: 0 0 0 0 0 [ 338.040239] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.040257] lowmem_reserve[]: 0 0 0 0 0 [ 338.040274] Node 1 Normal free:665088kB min:53612kB low:67012kB high:80412kB active_anon:220kB inactive_anon:12kB active_file:288kB inactive_file:528kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:64kB pagetables:16kB bounce:0kB free_pcp:504kB local_pcp:120kB free_cma:0kB [ 338.048664] 0 [ 338.111002] lowmem_reserve[]: [ 338.146256] 0 [ 338.170122] 0 0 0 0 0 [ 338.173402] 0 [ 338.174729] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 4*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10444kB [ 338.174800] Node 0 DMA32: 0*4kB 3*8kB (UME) 3*16kB (M) 5*32kB (UME) 3*64kB [ 338.178757] 0 0 [ 338.213956] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 4*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10444kB [ 338.234236] Node 0 DMA32: 0*4kB 1*8kB (E) 2*16kB (UM) 4*32kB (ME) 3*64kB (UME) 3*128kB (ME) 81*256kB (UME) 56*512kB (UE) 30*1024kB (UM) 0*2048kB 0*4096kB = 80872kB [ 338.237839] bond0 (unregistering): Released all slaves [ 338.254795] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 338.256347] Node 0 active_anon:24076kB inactive_anon:772kB active_file:148kB inactive_file:1268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1052kB dirty:0kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 338.256362] Node 1 active_anon:220kB inactive_anon:12kB active_file:328kB inactive_file:372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:640kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 338.263656] 0*256kB [ 338.300139] (ME) [ 338.330724] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 338.338624] Node 1 Normal: 2*4kB (UE) 3*8kB (ME) 4*16kB (UME) 653*32kB (UE) 4892*64kB (U) 663*128kB (U) 206*256kB (U) 68*512kB (U) 135*1024kB (U) 10*2048kB (U) 0*4096kB = 665216kB [ 338.340141] 79*128kB [ 338.362915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.377066] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.380199] (UE) [ 338.416088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 338.435792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.447074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 338.450209] 107*256kB (UE) 56*512kB (UE) 29*1024kB (U) 1*2048kB (U) 0*4096kB = 98344kB [ 338.462478] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 338.476649] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 338.479057] 792 total pagecache pages [ 338.492473] Node 0 DMA32 free:45304kB min:36272kB low:45340kB high:54408kB active_anon:24076kB inactive_anon:772kB active_file:148kB inactive_file:1268kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7008kB pagetables:1684kB bounce:0kB free_pcp:536kB local_pcp:352kB free_cma:0kB [ 338.510159] Node 1 [ 338.531612] 0 pages in swap cache [ 338.539744] Swap cache stats: add 0, delete 0, find 0/0 [ 338.546989] Normal: 2*4kB (ME) 3*8kB (ME) 3*16kB (ME) 1*32kB (E) 4128*64kB (U) 664*128kB (UM) 207*256kB (UM) 69*512kB (UM) 136*1024kB (UM) 9*2048kB (U) 0*4096kB = 595312kB [ 338.547894] Free swap = 0kB [ 338.575911] Total swap = 0kB [ 338.581525] lowmem_reserve[]: 0 0 0 0 0 [ 338.587101] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.590320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.625578] 1965979 pages RAM [ 338.632312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 338.632319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.632324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 338.632327] 792 total pagecache pages [ 338.632337] 0 pages in swap cache [ 338.632341] Swap cache stats: add 0, delete 0, find 0/0 [ 338.632344] Free swap = 0kB [ 338.632346] Total swap = 0kB [ 338.632354] 1965979 pages RAM [ 338.632357] 0 pages HighMem/MovableOnly [ 338.632361] 339049 pages reserved [ 338.632364] 0 pages cma reserved [ 338.760124] lowmem_reserve[]: 0 0 0 0 0 [ 338.764670] Node 1 Normal free:466972kB min:53612kB low:67012kB high:80412kB active_anon:220kB inactive_anon:12kB active_file:328kB inactive_file:372kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:656kB local_pcp:440kB free_cma:0kB [ 338.851469] lowmem_reserve[]: 0 0 0 0 0 [ 338.857090] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 4*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10444kB [ 338.890188] 0 pages HighMem/MovableOnly [ 338.894859] 339049 pages reserved [ 338.899715] 0 pages cma reserved [ 338.920172] Out of memory: Kill process 7967 (syz-executor.3) score 999 or sacrifice child [ 338.933104] Node 0 DMA32: 1*4kB (U) 1*8kB (E) 3*16kB (UM) 5*32kB (UME) 2*64kB (ME) 3*128kB (ME) 4*256kB (UME) 25*512kB (UE) 30*1024kB (UM) 0*2048kB 0*4096kB = 45276kB [ 338.960173] Killed process 7967 (syz-executor.3) total-vm:39752kB, anon-rss:88kB, file-rss:0kB, shmem-rss:0kB [ 338.970098] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 339.015347] oom_reaper: reaped process 7967 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 339.041973] Node 1 Normal: 2*4kB (UE) 3*8kB (ME) 3*16kB (ME) 3*32kB (UME) 0*64kB 323*128kB (U) 206*256kB (U) 68*512kB (U) 136*1024kB (UM) 9*2048kB (U) 0*4096kB = 286768kB [ 339.143918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.187510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 339.288585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.332023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 339.352037] 2085 total pagecache pages [ 339.358432] 0 pages in swap cache [ 339.382860] Swap cache stats: add 0, delete 0, find 0/0 [ 339.403229] Free swap = 0kB [ 339.407402] Total swap = 0kB [ 339.432177] 1965979 pages RAM [ 339.435996] 0 pages HighMem/MovableOnly [ 339.462224] 339049 pages reserved [ 339.465970] 0 pages cma reserved [ 340.177050] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 340.213776] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 340.234141] CPU: 1 PID: 7951 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 340.244160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.255616] Call Trace: [ 340.258714] dump_stack+0x13e/0x194 [ 340.263038] warn_alloc.cold+0x96/0x1af [ 340.267131] ? zone_watermark_ok_safe+0x280/0x280 [ 340.272660] ? __alloc_pages_direct_compact+0xba/0x360 [ 340.278990] __alloc_pages_slowpath+0x2114/0x26c0 [ 340.285424] ? save_trace+0x290/0x290 [ 340.291011] ? warn_alloc+0xf0/0xf0 [ 340.295227] __alloc_pages_nodemask+0x5d3/0x700 [ 340.300552] ? lock_downgrade+0x6e0/0x6e0 [ 340.306570] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 340.314069] ? retint_kernel+0x2d/0x2d [ 340.319489] alloc_pages_current+0xe7/0x1e0 [ 340.325643] ion_page_pool_alloc+0x118/0x1b0 [ 340.332417] ion_system_heap_allocate+0x134/0x8d0 [ 340.341706] ? _ion_heap_freelist_drain+0x6e/0x410 [ 340.347891] ? ion_system_heap_free+0x240/0x240 [ 340.353921] ion_alloc+0x611/0x7d0 [ 340.359598] ? ion_dma_buf_release+0x40/0x40 [ 340.367144] ? __might_fault+0x177/0x1b0 [ 340.372168] ion_ioctl+0xef/0x1f8 [ 340.376481] ? ion_alloc.cold+0x3d/0x3d [ 340.380978] ? selinux_file_ioctl+0x3f7/0x560 [ 340.385848] ? ion_alloc.cold+0x3d/0x3d [ 340.390265] do_vfs_ioctl+0x75a/0xfe0 [ 340.395127] ? selinux_file_mprotect+0x5c0/0x5c0 [ 340.401877] ? ioctl_preallocate+0x1a0/0x1a0 [ 340.406871] ? _copy_to_user+0x82/0xd0 [ 340.411516] ? put_timespec64+0xaa/0xf0 [ 340.417921] ? nsecs_to_jiffies+0x30/0x30 [ 340.423194] ? security_file_ioctl+0x76/0xb0 [ 340.429572] ? security_file_ioctl+0x83/0xb0 [ 340.436391] SyS_ioctl+0x7f/0xb0 [ 340.440855] ? do_vfs_ioctl+0xfe0/0xfe0 [ 340.445537] do_syscall_64+0x1d5/0x640 [ 340.451812] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 340.460601] RIP: 0033:0x45c4a9 [ 340.464218] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.474762] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 340.482817] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 340.491545] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 340.501720] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 340.511787] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 340.541829] Mem-Info: [ 340.545067] active_anon:6061 inactive_anon:196 isolated_anon:0 [ 340.545067] active_file:883 inactive_file:847 isolated_file:0 [ 340.545067] unevictable:0 dirty:12 writeback:0 unstable:0 [ 340.545067] slab_reclaimable:12357 slab_unreclaimable:100624 [ 340.545067] mapped:1221 shmem:250 pagetables:409 bounce:0 [ 340.545067] free:98656 free_pcp:412 free_cma:0 [ 340.590583] Node 0 active_anon:24048kB inactive_anon:772kB active_file:196kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:16kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 340.627010] Node 1 active_anon:196kB inactive_anon:12kB active_file:3336kB inactive_file:3180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4792kB dirty:32kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 340.670147] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.743881] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 340.764533] Node 0 DMA32 free:44924kB min:36272kB low:45340kB high:54408kB active_anon:24048kB inactive_anon:772kB active_file:296kB inactive_file:208kB unevictable:0kB writepending:16kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6944kB pagetables:1620kB bounce:0kB free_pcp:828kB local_pcp:708kB free_cma:0kB [ 340.850119] lowmem_reserve[]: 0 0 0 0 0 [ 340.854873] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.920222] lowmem_reserve[]: 0 0 0 0 0 [ 340.925422] Node 1 Normal free:412488kB min:53612kB low:67012kB high:80412kB active_anon:196kB inactive_anon:12kB active_file:3340kB inactive_file:3180kB unevictable:0kB writepending:32kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:808kB local_pcp:704kB free_cma:0kB [ 341.010145] lowmem_reserve[]: 0 0 0 0 0 [ 341.014386] Node 0 DMA: 31*4kB (UE) 9*8kB (UE) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10516kB [ 341.060116] Node 0 DMA32: 2156*4kB (UME) 1565*8kB (UME) 645*16kB (UME) 1000*32kB (UM) 149*64kB (U) 10*128kB (U) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 75304kB [ 341.100165] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 341.130172] Node 1 Normal: 11725*4kB (UME) 18896*8kB (UME) 6319*16kB (UME) 4001*32kB (UME) 342*64kB (U) 26*128kB (U) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 453188kB [ 341.170196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.190516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 341.213500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.253472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 341.280096] 1958 total pagecache pages [ 341.284598] 0 pages in swap cache [ 341.288436] Swap cache stats: add 0, delete 0, find 0/0 [ 341.313410] Free swap = 0kB [ 341.317093] Total swap = 0kB [ 341.333968] 1965979 pages RAM [ 341.337471] 0 pages HighMem/MovableOnly [ 341.356434] 339049 pages reserved [ 341.360476] 0 pages cma reserved [ 342.131731] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 342.131965] oom_reaper: reaped process 7991 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 342.145038] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 342.145066] CPU: 0 PID: 7951 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 342.145071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.145074] Call Trace: [ 342.145095] dump_stack+0x13e/0x194 [ 342.145108] warn_alloc.cold+0x96/0x1af [ 342.145116] ? zone_watermark_ok_safe+0x280/0x280 [ 342.145138] ? wait_for_completion+0x390/0x390 [ 342.166070] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 342.175643] __alloc_pages_slowpath+0x2114/0x26c0 [ 342.175665] ? warn_alloc+0xf0/0xf0 [ 342.175691] __alloc_pages_nodemask+0x5d3/0x700 [ 342.185840] (null) [ 342.188407] ? lock_downgrade+0x6e0/0x6e0 [ 342.192136] , order=0, oom_score_adj=1000 [ 342.196294] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 342.201754] syz-executor.1 cpuset= [ 342.206399] alloc_pages_current+0xe7/0x1e0 [ 342.219874] syz1 [ 342.225589] ion_page_pool_alloc+0x118/0x1b0 [ 342.225599] ion_system_heap_allocate+0x134/0x8d0 [ 342.225611] ? _ion_heap_freelist_drain+0x6e/0x410 [ 342.230867] mems_allowed=0-1 [ 342.236052] ? ion_system_heap_free+0x240/0x240 [ 342.292596] ion_alloc+0x611/0x7d0 [ 342.297656] ? ion_dma_buf_release+0x40/0x40 [ 342.302486] ? __might_fault+0x177/0x1b0 [ 342.306841] ion_ioctl+0xef/0x1f8 [ 342.310948] ? ion_alloc.cold+0x3d/0x3d [ 342.315539] ? selinux_file_ioctl+0x3f7/0x560 [ 342.320654] ? ion_alloc.cold+0x3d/0x3d [ 342.325282] do_vfs_ioctl+0x75a/0xfe0 [ 342.329447] ? selinux_file_mprotect+0x5c0/0x5c0 [ 342.334751] ? ioctl_preallocate+0x1a0/0x1a0 [ 342.339390] ? _copy_to_user+0x82/0xd0 [ 342.343603] ? put_timespec64+0xaa/0xf0 [ 342.350310] ? nsecs_to_jiffies+0x30/0x30 [ 342.355712] ? security_file_ioctl+0x76/0xb0 [ 342.360862] ? security_file_ioctl+0x83/0xb0 [ 342.365673] SyS_ioctl+0x7f/0xb0 [ 342.369324] ? do_vfs_ioctl+0xfe0/0xfe0 [ 342.373326] do_syscall_64+0x1d5/0x640 [ 342.379170] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 342.384878] RIP: 0033:0x45c4a9 [ 342.388384] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.398305] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 342.406487] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 342.414958] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 342.423616] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 342.431434] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 342.440434] CPU: 1 PID: 7991 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 342.448719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.450720] Mem-Info: [ 342.459490] Call Trace: [ 342.467018] active_anon:6061 inactive_anon:196 isolated_anon:0 [ 342.467018] active_file:22 inactive_file:20 isolated_file:0 [ 342.467018] unevictable:0 dirty:6 writeback:0 unstable:0 [ 342.467018] slab_reclaimable:12359 slab_unreclaimable:100679 [ 342.467018] mapped:2 shmem:250 pagetables:409 bounce:0 [ 342.467018] free:13781 free_pcp:0 free_cma:0 [ 342.467227] dump_stack+0x13e/0x194 [ 342.509230] Node 0 active_anon:24048kB inactive_anon:772kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:20kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 342.511645] dump_header+0x178/0x6d4 [ 342.511657] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 342.511667] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 342.511675] ? ___ratelimit+0x50/0x519 [ 342.511685] oom_kill_process.cold+0x10/0xae3 [ 342.511696] ? lock_acquire+0x170/0x3f0 [ 342.548413] Node 1 active_anon:196kB inactive_anon:12kB active_file:48kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 342.553498] ? lock_downgrade+0x6e0/0x6e0 [ 342.553513] out_of_memory+0x2d5/0x1110 [ 342.553527] ? oom_killer_disable+0x1c0/0x1c0 [ 342.553536] ? mutex_trylock+0x152/0x1a0 [ 342.553546] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 342.553565] ? warn_alloc+0xf0/0xf0 [ 342.564784] Node 0 [ 342.569214] __alloc_pages_nodemask+0x5d3/0x700 [ 342.575474] DMA free:10328kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.583131] ? lock_downgrade+0x6e0/0x6e0 [ 342.583141] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 342.583158] alloc_pages_current+0xe7/0x1e0 [ 342.583173] ion_page_pool_alloc+0x118/0x1b0 [ 342.583181] ion_system_heap_allocate+0x134/0x8d0 [ 342.583191] ? rcu_read_lock_sched_held+0x10a/0x130 [ 342.583198] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 342.583205] ? ion_system_heap_free+0x240/0x240 [ 342.583216] ion_alloc+0x1e9/0x7d0 [ 342.583233] ? ion_dma_buf_release+0x40/0x40 [ 342.583246] ? __might_fault+0x177/0x1b0 [ 342.583256] ion_ioctl+0xef/0x1f8 [ 342.590680] lowmem_reserve[]: [ 342.618044] ? ion_alloc.cold+0x3d/0x3d [ 342.618058] ? selinux_file_ioctl+0x3f7/0x560 [ 342.618064] ? ion_alloc.cold+0x3d/0x3d [ 342.618073] do_vfs_ioctl+0x75a/0xfe0 [ 342.618082] ? selinux_file_mprotect+0x5c0/0x5c0 [ 342.618091] ? ioctl_preallocate+0x1a0/0x1a0 [ 342.618099] ? _copy_to_user+0x82/0xd0 [ 342.618112] ? put_timespec64+0xaa/0xf0 [ 342.624450] 0 [ 342.627547] ? nsecs_to_jiffies+0x30/0x30 [ 342.633300] 2557 [ 342.637777] ? security_file_ioctl+0x76/0xb0 [ 342.652123] 2557 [ 342.655503] ? security_file_ioctl+0x83/0xb0 [ 342.689643] 2557 [ 342.692190] SyS_ioctl+0x7f/0xb0 [ 342.692201] ? do_vfs_ioctl+0xfe0/0xfe0 [ 342.692212] do_syscall_64+0x1d5/0x640 [ 342.692230] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 342.692238] RIP: 0033:0x45c4a9 [ 342.692246] RSP: 002b:00007ffe964353d8 EFLAGS: 00000246 [ 342.697377] 2557 [ 342.702686] ORIG_RAX: 0000000000000010 [ 342.702692] RAX: ffffffffffffffda RBX: 00000000014f8914 RCX: 000000000045c4a9 [ 342.702696] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 342.702700] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 342.702704] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 342.702745] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 342.703249] net_ratelimit: 3 callbacks suppressed [ 342.703253] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 342.724560] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 342.729930] Node 0 [ 342.734092] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 342.745798] DMA32 free:18068kB min:36272kB low:45340kB high:54408kB active_anon:24048kB inactive_anon:772kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:20kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6944kB pagetables:1620kB bounce:0kB free_pcp:108kB local_pcp:108kB free_cma:0kB [ 342.746841] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 342.751060] lowmem_reserve[]: [ 342.754560] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 342.759326] 0 [ 342.764165] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 342.773532] 0 [ 342.779011] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 342.784514] 0 [ 342.787901] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 342.789829] 0 [ 342.798476] Mem-Info: [ 342.808784] 0 [ 342.808969] active_anon:6061 inactive_anon:196 isolated_anon:0 [ 342.808969] active_file:22 inactive_file:20 isolated_file:0 [ 342.808969] unevictable:0 dirty:6 writeback:0 unstable:0 [ 342.808969] slab_reclaimable:12359 slab_unreclaimable:100679 [ 342.808969] mapped:2 shmem:250 pagetables:409 bounce:0 [ 342.808969] free:13781 free_pcp:56 free_cma:0 [ 342.817605] Node 0 active_anon:24048kB inactive_anon:772kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:20kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 342.826384] Node 0 [ 342.832306] Node 1 active_anon:196kB inactive_anon:12kB active_file:48kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 342.835355] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.841489] Node 0 [ 342.849806] lowmem_reserve[]: [ 342.858901] DMA free:10328kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.870849] 0 [ 342.874977] lowmem_reserve[]: [ 342.881728] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 342.881794] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 342.885901] 0 [ 342.890990] 0 2557 2557 2557 2557 [ 342.891012] Node 0 DMA32 free:18068kB min:36272kB low:45340kB high:54408kB active_anon:24048kB inactive_anon:772kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:20kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6944kB pagetables:1620kB bounce:0kB free_pcp:224kB local_pcp:120kB free_cma:0kB [ 342.891031] lowmem_reserve[]: 0 0 0 0 0 [ 342.891048] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.891064] lowmem_reserve[]: 0 0 0 0 0 [ 342.891081] Node 1 Normal free:26728kB min:53612kB low:67012kB high:80412kB active_anon:196kB inactive_anon:12kB active_file:48kB inactive_file:36kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.891097] lowmem_reserve[]: 0 0 0 0 0 [ 342.891114] Node 0 DMA: 2*4kB (UE) [ 342.898343] 0 [ 342.907777] 2*8kB [ 342.918663] 0 [ 342.927559] (UE) [ 342.974080] 0 [ 342.980363] 2*16kB [ 342.997974] (UE) [ 343.004076] Node 1 [ 343.005490] 1*32kB [ 343.007455] Normal free:26728kB min:53612kB low:67012kB high:80412kB active_anon:196kB inactive_anon:12kB active_file:48kB inactive_file:36kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.016116] (E) [ 343.016952] lowmem_reserve[]: [ 343.019709] 2*64kB (UE) [ 343.028537] 0 [ 343.063254] 1*128kB [ 343.095950] 0 [ 343.128044] (E) [ 343.161312] 0 [ 343.190365] 1*256kB [ 343.198900] 0 [ 343.200327] (E) [ 343.207807] 0 [ 343.209736] 1*512kB [ 343.249487] (E) [ 343.255649] Node 0 [ 343.285112] 1*1024kB [ 343.289453] DMA: [ 343.322102] (E) [ 343.327050] 2*4kB [ 343.327175] 2*2048kB [ 343.329667] (UE) [ 343.336027] (ME) [ 343.336939] 2*8kB [ 343.339020] 1*4096kB [ 343.345108] (UE) [ 343.346905] (M) [ 343.349162] 2*16kB [ 343.382073] = 10328kB [ 343.387860] (UE) [ 343.389203] Node 0 [ 343.392090] 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10328kB [ 343.392137] Node 0 DMA32: 111*4kB (UM) 50*8kB (UM) 25*16kB (ME) 14*32kB (UM) 0*64kB [ 343.396569] DMA32: [ 343.396668] 30*128kB [ 343.398722] 111*4kB [ 343.405352] (UE) [ 343.407914] (UM) [ 343.408310] 29*256kB [ 343.413803] 50*8kB [ 343.416541] (U) [ 343.418742] (UM) [ 343.424483] 10*512kB [ 343.425509] 25*16kB [ 343.428475] (UE) [ 343.434934] (ME) [ 343.435626] 0*1024kB [ 343.438701] 14*32kB [ 343.444722] 0*2048kB [ 343.446084] (UM) [ 343.449456] 0*4096kB = 18076kB [ 343.456545] 0*64kB [ 343.474936] Node 0 [ 343.484239] 30*128kB [ 343.485595] Normal: [ 343.488117] (UE) [ 343.493563] 0*4kB [ 343.494928] 29*256kB [ 343.497181] 0*8kB [ 343.499427] (U) [ 343.502500] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 343.509996] 10*512kB [ 343.514381] 0*512kB [ 343.516531] (UE) [ 343.521148] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 343.521169] Node 1 Normal: 7*4kB (ME) 9*8kB (ME) 10*16kB (ME) 11*32kB (UME) 6*64kB (UM) 150*128kB (UM) 6*256kB (UM) 2*512kB (M) 0*1024kB 2*2048kB (M) 0*4096kB = 26852kB [ 343.521249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.521255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 343.521261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.521267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 343.521271] 283 total pagecache pages [ 343.521283] 0 pages in swap cache [ 343.521288] Swap cache stats: add 0, delete 0, find 0/0 [ 343.521292] Free swap = 0kB [ 343.521296] Total swap = 0kB [ 343.521302] 1965979 pages RAM [ 343.521305] 0 pages HighMem/MovableOnly [ 343.521308] 339049 pages reserved [ 343.521312] 0 pages cma reserved [ 343.680290] 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 343.686998] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 343.699405] Node 1 Normal: 1*4kB (E) 4*8kB (UME) 4*16kB (UME) 9*32kB (UME) 5*64kB (M) 150*128kB (UM) 6*256kB (UM) 2*512kB (M) 177*1024kB (UM) 9*2048kB (UM) 0*4096kB = 222148kB [ 343.718929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.733450] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 343.743956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.755749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 343.766935] 431 total pagecache pages [ 343.772567] 0 pages in swap cache [ 343.776850] Swap cache stats: add 0, delete 0, find 0/0 [ 343.784136] Free swap = 0kB [ 343.787766] Total swap = 0kB [ 343.791327] 1965979 pages RAM [ 343.795041] 0 pages HighMem/MovableOnly [ 343.800141] 339049 pages reserved [ 343.804486] 0 pages cma reserved [ 343.807984] Out of memory: Kill process 7577 (syz-execprog) score 1 or sacrifice child [ 343.819040] Killed process 7593 (syz-executor.2) total-vm:39756kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB 2020/03/09 18:33:37 executed programs: 31 [ 344.834286] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 344.836147] syz-executor.4: [ 344.846765] syz-executor.5: [ 344.847614] syz-executor.3: [ 344.853747] page allocation failure: order:4 [ 344.857345] page allocation failure: order:4 [ 344.860266] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 344.862779] page allocation failure: order:4 [ 344.868616] (null) [ 344.873823] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 344.882833] syz-executor.1 cpuset= [ 344.886245] (null) [ 344.891255] syz-executor.5 cpuset= [ 344.893773] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 344.898120] syz5 [ 344.899610] (null) [ 344.911433] syz1 mems_allowed=0-1 [ 344.914973] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 344.918990] CPU: 1 PID: 7998 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 344.925108] syz-executor.4 cpuset= [ 344.929649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.929654] Call Trace: [ 344.929679] dump_stack+0x13e/0x194 [ 344.929691] warn_alloc.cold+0x96/0x1af [ 344.929703] ? zone_watermark_ok_safe+0x280/0x280 [ 344.942293] syz4 [ 344.942769] ? __alloc_pages_direct_compact+0x28a/0x360 [ 344.948772] mems_allowed=0-1 [ 344.949106] __alloc_pages_slowpath+0x2114/0x26c0 [ 344.973519] ? save_trace+0x290/0x290 [ 344.977360] ? warn_alloc+0xf0/0xf0 [ 344.981083] __alloc_pages_nodemask+0x5d3/0x700 [ 344.985883] ? lock_downgrade+0x6e0/0x6e0 [ 344.990661] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 344.995824] alloc_pages_current+0xe7/0x1e0 [ 345.000162] ion_page_pool_alloc+0x118/0x1b0 [ 345.004591] ion_system_heap_allocate+0x134/0x8d0 [ 345.009556] ? rcu_read_lock_sched_held+0x10a/0x130 [ 345.014696] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 345.019659] ? ion_system_heap_free+0x240/0x240 [ 345.024379] ion_alloc+0x1e9/0x7d0 [ 345.028050] ? ion_dma_buf_release+0x40/0x40 [ 345.032846] ? __might_fault+0x177/0x1b0 [ 345.036930] ion_ioctl+0xef/0x1f8 [ 345.040391] ? ion_alloc.cold+0x3d/0x3d [ 345.044521] ? selinux_file_ioctl+0x3f7/0x560 [ 345.049027] ? ion_alloc.cold+0x3d/0x3d [ 345.053009] do_vfs_ioctl+0x75a/0xfe0 [ 345.056831] ? selinux_file_mprotect+0x5c0/0x5c0 [ 345.061624] ? ioctl_preallocate+0x1a0/0x1a0 [ 345.066057] ? _copy_to_user+0x82/0xd0 [ 345.069997] ? put_timespec64+0xaa/0xf0 [ 345.074063] ? nsecs_to_jiffies+0x30/0x30 [ 345.078248] ? security_file_ioctl+0x76/0xb0 [ 345.082674] ? security_file_ioctl+0x83/0xb0 [ 345.087104] SyS_ioctl+0x7f/0xb0 [ 345.090673] ? do_vfs_ioctl+0xfe0/0xfe0 [ 345.094715] do_syscall_64+0x1d5/0x640 [ 345.098641] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 345.103850] RIP: 0033:0x45c4a9 [ 345.107062] RSP: 002b:00007ffe964353d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.114829] RAX: ffffffffffffffda RBX: 00000000014f8914 RCX: 000000000045c4a9 [ 345.122160] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 345.129457] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 345.136756] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 345.144038] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 345.151440] CPU: 0 PID: 7999 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 345.154409] mems_allowed=0-1 [ 345.159461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.159467] Call Trace: [ 345.159494] dump_stack+0x13e/0x194 [ 345.159507] warn_alloc.cold+0x96/0x1af [ 345.159520] ? zone_watermark_ok_safe+0x280/0x280 [ 345.191096] ? __alloc_pages_direct_compact+0xba/0x360 [ 345.196397] __alloc_pages_slowpath+0x2114/0x26c0 [ 345.201262] ? save_trace+0x290/0x290 [ 345.205167] ? warn_alloc+0xf0/0xf0 [ 345.208815] __alloc_pages_nodemask+0x5d3/0x700 [ 345.213522] ? lock_downgrade+0x6e0/0x6e0 [ 345.217704] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 345.222951] alloc_pages_current+0xe7/0x1e0 [ 345.227303] ion_page_pool_alloc+0x118/0x1b0 [ 345.231741] ion_system_heap_allocate+0x134/0x8d0 [ 345.236600] ? rcu_read_lock_sched_held+0x10a/0x130 [ 345.241631] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 345.246497] ? ion_system_heap_free+0x240/0x240 [ 345.251195] ion_alloc+0x1e9/0x7d0 [ 345.254763] ? ion_dma_buf_release+0x40/0x40 [ 345.259184] ? __might_fault+0x177/0x1b0 [ 345.263260] ion_ioctl+0xef/0x1f8 [ 345.266738] ? ion_alloc.cold+0x3d/0x3d [ 345.270726] ? selinux_file_ioctl+0x3f7/0x560 [ 345.275401] ? ion_alloc.cold+0x3d/0x3d [ 345.279394] do_vfs_ioctl+0x75a/0xfe0 [ 345.283224] ? selinux_file_mprotect+0x5c0/0x5c0 [ 345.287987] ? ioctl_preallocate+0x1a0/0x1a0 [ 345.292435] ? _copy_to_user+0x82/0xd0 [ 345.296335] ? put_timespec64+0xaa/0xf0 [ 345.300391] ? nsecs_to_jiffies+0x30/0x30 [ 345.304682] ? security_file_ioctl+0x76/0xb0 [ 345.309130] ? security_file_ioctl+0x83/0xb0 [ 345.314172] SyS_ioctl+0x7f/0xb0 [ 345.317647] ? do_vfs_ioctl+0xfe0/0xfe0 [ 345.321831] do_syscall_64+0x1d5/0x640 [ 345.325769] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 345.331078] RIP: 0033:0x45c4a9 [ 345.334278] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.342002] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 345.349281] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 345.356584] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 345.363885] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 345.371164] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 345.386702] CPU: 0 PID: 7997 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 345.394548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.404189] Call Trace: [ 345.406814] dump_stack+0x13e/0x194 [ 345.410483] warn_alloc.cold+0x96/0x1af [ 345.414474] ? zone_watermark_ok_safe+0x280/0x280 [ 345.420053] ? __alloc_pages_direct_compact+0xba/0x360 [ 345.425356] __alloc_pages_slowpath+0x2114/0x26c0 [ 345.430272] ? save_trace+0x290/0x290 [ 345.434095] ? warn_alloc+0xf0/0xf0 [ 345.437748] __alloc_pages_nodemask+0x5d3/0x700 [ 345.442449] ? lock_downgrade+0x6e0/0x6e0 [ 345.446697] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 345.451741] alloc_pages_current+0xe7/0x1e0 [ 345.456171] ion_page_pool_alloc+0x118/0x1b0 [ 345.460603] ion_system_heap_allocate+0x134/0x8d0 [ 345.465467] ? rcu_read_lock_sched_held+0x10a/0x130 [ 345.470499] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 345.475364] ? ion_system_heap_free+0x240/0x240 [ 345.480056] ion_alloc+0x1e9/0x7d0 [ 345.483629] ? ion_dma_buf_release+0x40/0x40 [ 345.488061] ? __might_fault+0x177/0x1b0 [ 345.492149] ion_ioctl+0xef/0x1f8 [ 345.495620] ? ion_alloc.cold+0x3d/0x3d [ 345.499770] ? selinux_file_ioctl+0x3f7/0x560 [ 345.505069] ? ion_alloc.cold+0x3d/0x3d [ 345.509073] do_vfs_ioctl+0x75a/0xfe0 [ 345.513173] ? selinux_file_mprotect+0x5c0/0x5c0 [ 345.518219] ? ioctl_preallocate+0x1a0/0x1a0 [ 345.522672] ? _copy_to_user+0x82/0xd0 [ 345.526659] ? put_timespec64+0xaa/0xf0 [ 345.530757] ? nsecs_to_jiffies+0x30/0x30 [ 345.535015] ? security_file_ioctl+0x76/0xb0 [ 345.539453] ? security_file_ioctl+0x83/0xb0 [ 345.543879] SyS_ioctl+0x7f/0xb0 [ 345.547310] ? do_vfs_ioctl+0xfe0/0xfe0 [ 345.551311] do_syscall_64+0x1d5/0x640 [ 345.555324] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 345.560560] RIP: 0033:0x45c4a9 [ 345.563750] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.571465] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 345.578766] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 345.586083] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 345.593560] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 345.600848] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 345.608880] CPU: 1 PID: 7996 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 345.614627] Mem-Info: [ 345.616836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.616841] Call Trace: [ 345.616864] dump_stack+0x13e/0x194 [ 345.616882] warn_alloc.cold+0x96/0x1af [ 345.619405] active_anon:6099 inactive_anon:196 isolated_anon:0 [ 345.619405] active_file:910 inactive_file:987 isolated_file:0 [ 345.619405] unevictable:0 dirty:0 writeback:0 unstable:0 [ 345.619405] slab_reclaimable:12436 slab_unreclaimable:100413 [ 345.619405] mapped:1787 shmem:250 pagetables:423 bounce:0 [ 345.619405] free:135945 free_pcp:395 free_cma:0 [ 345.628712] ? zone_watermark_ok_safe+0x280/0x280 [ 345.628728] ? __alloc_pages_direct_compact+0x28a/0x360 [ 345.628738] __alloc_pages_slowpath+0x2114/0x26c0 [ 345.628757] ? warn_alloc+0xf0/0xf0 [ 345.628776] __alloc_pages_nodemask+0x5d3/0x700 [ 345.628788] ? lock_downgrade+0x6e0/0x6e0 [ 345.628796] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 345.628812] alloc_pages_current+0xe7/0x1e0 [ 345.641644] Node 0 active_anon:24168kB inactive_anon:776kB active_file:3632kB inactive_file:3940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7148kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 345.672723] ion_page_pool_alloc+0x118/0x1b0 [ 345.672734] ion_system_heap_allocate+0x134/0x8d0 [ 345.672745] ? rcu_read_lock_sched_held+0x10a/0x130 [ 345.672754] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 345.672761] ? ion_system_heap_free+0x240/0x240 [ 345.672772] ion_alloc+0x1e9/0x7d0 [ 345.672784] ? ion_dma_buf_release+0x40/0x40 [ 345.672812] ? __might_fault+0x177/0x1b0 [ 345.711003] Node 1 active_anon:228kB inactive_anon:8kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 345.737498] ion_ioctl+0xef/0x1f8 [ 345.737511] ? ion_alloc.cold+0x3d/0x3d [ 345.737524] ? selinux_file_ioctl+0x3f7/0x560 [ 345.737530] ? ion_alloc.cold+0x3d/0x3d [ 345.737540] do_vfs_ioctl+0x75a/0xfe0 [ 345.737547] ? selinux_file_mprotect+0x5c0/0x5c0 [ 345.737556] ? ioctl_preallocate+0x1a0/0x1a0 [ 345.737564] ? _copy_to_user+0x82/0xd0 [ 345.737577] ? put_timespec64+0xaa/0xf0 [ 345.775280] Node 0 [ 345.802732] ? nsecs_to_jiffies+0x30/0x30 [ 345.802746] ? security_file_ioctl+0x76/0xb0 [ 345.802752] ? security_file_ioctl+0x83/0xb0 [ 345.802781] SyS_ioctl+0x7f/0xb0 [ 345.802791] ? do_vfs_ioctl+0xfe0/0xfe0 [ 345.802802] do_syscall_64+0x1d5/0x640 [ 345.802818] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 345.835351] DMA free:10668kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.835936] RIP: 0033:0x45c4a9 [ 345.845781] lowmem_reserve[]: [ 345.847192] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.847202] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 345.847208] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 345.847212] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 345.847216] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 345.847225] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 345.857381] 0 2557 2557 2557 2557 [ 346.003593] Node 0 DMA32 free:46476kB min:36272kB low:45340kB high:54408kB active_anon:24168kB inactive_anon:776kB active_file:3632kB inactive_file:3980kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7040kB pagetables:1692kB bounce:0kB free_pcp:784kB local_pcp:120kB free_cma:0kB [ 346.038530] lowmem_reserve[]: 0 0 0 0 0 [ 346.045250] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.105178] lowmem_reserve[]: 0 0 0 0 0 [ 346.123604] Node 1 Normal free:418192kB min:53612kB low:67012kB high:80412kB active_anon:228kB inactive_anon:8kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:72kB local_pcp:32kB free_cma:0kB [ 346.165287] lowmem_reserve[]: 0 0 0 0 0 [ 346.183367] Node 0 DMA: 18*4kB (UE) 6*8kB (UE) 4*16kB (UE) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10488kB [ 346.218972] Node 0 DMA32: 17*4kB (UMH) 18*8kB (MEH) 1616*16kB (UMEH) 512*32kB (UMEH) 33*64kB (UMH) 4*128kB (UH) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45332kB [ 346.243622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 346.280092] Node 1 Normal: 8589*4kB (UE) 18009*8kB (UE) 6555*16kB (UE) 2887*32kB (UE) 414*64kB (U) 46*128kB (U) 7*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 410380kB [ 346.328824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.348581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 346.377428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.399996] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 346.422325] 1991 total pagecache pages [ 346.433953] 0 pages in swap cache [ 346.441213] Swap cache stats: add 0, delete 0, find 0/0 [ 346.458059] Free swap = 0kB [ 346.477166] Total swap = 0kB [ 346.492904] 1965979 pages RAM [ 346.506845] 0 pages HighMem/MovableOnly [ 346.524746] 339049 pages reserved [ 346.534972] 0 pages cma reserved [ 347.505233] oom_reaper: reaped process 7996 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 347.549808] oom_reaper: reaped process 7998 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 347.583680] oom_reaper: reaped process 7997 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 347.623670] oom_reaper: reaped process 7999 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 347.657408] syz-execprog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 347.676557] syz-execprog cpuset=/ mems_allowed=0-1 [ 347.686287] CPU: 1 PID: 7579 Comm: syz-execprog Not tainted 4.14.172-syzkaller #0 [ 347.694169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.703651] Call Trace: [ 347.706698] dump_stack+0x13e/0x194 [ 347.710439] dump_header+0x178/0x6d4 [ 347.714172] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 347.720649] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 347.725972] ? ___ratelimit+0x50/0x519 [ 347.730416] oom_kill_process.cold+0x10/0xae3 [ 347.735104] ? lock_acquire+0x170/0x3f0 [ 347.739272] ? lock_downgrade+0x6e0/0x6e0 [ 347.743520] out_of_memory+0x2d5/0x1110 [ 347.747679] ? oom_killer_disable+0x1c0/0x1c0 [ 347.752465] ? mutex_trylock+0x152/0x1a0 [ 347.756629] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 347.761664] ? warn_alloc+0xf0/0xf0 [ 347.765304] __alloc_pages_nodemask+0x5d3/0x700 [ 347.770587] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 347.776848] ? lock_downgrade+0x6e0/0x6e0 [ 347.782139] alloc_pages_current+0xe7/0x1e0 [ 347.787818] __page_cache_alloc+0x245/0x3d0 [ 347.792189] filemap_fault+0xc21/0x1c30 [ 347.796180] ? __lock_page_or_retry+0x8a0/0x8a0 [ 347.800874] ? lock_acquire+0x170/0x3f0 [ 347.804843] ? ext4_filemap_fault+0x7c/0xb0 [ 347.809195] ext4_filemap_fault+0x84/0xb0 [ 347.813375] __do_fault+0xfa/0x380 [ 347.816953] __handle_mm_fault+0x22e9/0x3280 [ 347.821373] ? copy_page_range+0x1d70/0x1d70 [ 347.825814] ? find_held_lock+0x2d/0x110 [ 347.829893] handle_mm_fault+0x288/0x7a0 [ 347.834069] __do_page_fault+0x4bc/0xb40 [ 347.838148] ? vmalloc_fault+0xdf0/0xdf0 [ 347.842212] ? do_page_fault+0x60/0x4f2 [ 347.846185] ? page_fault+0x2f/0x50 [ 347.849908] page_fault+0x45/0x50 [ 347.853363] RIP: 00c1:0xc0 [ 347.856197] RSP: ffffffff:000000c42003dea0 EFLAGS: ffffffffffffffff [ 347.856366] syz-executor.3: [ 347.856780] syz-executor.5: [ 347.864962] syz-executor.1: [ 347.866222] page allocation failure: order:0 [ 347.869027] page allocation failure: order:0 [ 347.872129] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 347.876588] syz-executor.4: [ 347.881025] (null) [ 347.881034] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 347.896365] page allocation failure: order:0 [ 347.900182] CPU: 1 PID: 7996 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 347.900187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.900192] Call Trace: [ 347.900223] dump_stack+0x13e/0x194 [ 347.900238] warn_alloc.cold+0x96/0x1af [ 347.900248] ? zone_watermark_ok_safe+0x280/0x280 [ 347.900259] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 347.900278] __alloc_pages_slowpath+0x2114/0x26c0 [ 347.900300] ? warn_alloc+0xf0/0xf0 [ 347.900322] __alloc_pages_nodemask+0x5d3/0x700 [ 347.900335] ? lock_downgrade+0x6e0/0x6e0 [ 347.900346] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 347.911777] page allocation failure: order:0 [ 347.912631] alloc_pages_current+0xe7/0x1e0 [ 347.923106] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 347.924812] ion_page_pool_alloc+0x118/0x1b0 [ 347.928527] (null) [ 347.932598] ion_system_heap_allocate+0x134/0x8d0 [ 347.932609] ? rcu_read_lock_sched_held+0x10a/0x130 [ 347.932616] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 347.932624] ? ion_system_heap_free+0x240/0x240 [ 347.932636] ion_alloc+0x1e9/0x7d0 [ 347.937552] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 347.942601] ? ion_dma_buf_release+0x40/0x40 [ 347.942615] ? __might_fault+0x177/0x1b0 [ 347.942625] ion_ioctl+0xef/0x1f8 [ 347.942635] ? ion_alloc.cold+0x3d/0x3d [ 347.947593] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 347.951295] ? selinux_file_ioctl+0x3f7/0x560 [ 347.951305] ? ion_alloc.cold+0x3d/0x3d [ 347.951315] do_vfs_ioctl+0x75a/0xfe0 [ 347.951324] ? selinux_file_mprotect+0x5c0/0x5c0 [ 347.951334] ? ioctl_preallocate+0x1a0/0x1a0 [ 347.956200] (null) [ 347.960338] ? _copy_to_user+0x82/0xd0 [ 347.960349] ? put_timespec64+0xaa/0xf0 [ 347.960356] ? nsecs_to_jiffies+0x30/0x30 [ 347.960368] ? security_file_ioctl+0x76/0xb0 [ 347.960378] ? security_file_ioctl+0x83/0xb0 [ 347.965410] syz-executor.4 cpuset= [ 347.969806] SyS_ioctl+0x7f/0xb0 [ 347.974182] (null) [ 347.981232] ? do_vfs_ioctl+0xfe0/0xfe0 [ 347.981245] do_syscall_64+0x1d5/0x640 [ 347.981259] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 347.981276] RIP: 0033:0x45c4a9 [ 347.985708] syz-executor.1 cpuset= [ 347.987851] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 [ 347.992759] syz4 [ 347.997831] ORIG_RAX: 0000000000000010 [ 348.002757] syz-executor.3 cpuset= [ 348.007364] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 348.010966] syz1 [ 348.018026] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 348.022508] mems_allowed=0-1 [ 348.026514] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 348.026523] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 348.030072] syz3 [ 348.033944] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 348.050076] mems_allowed=0-1 [ 348.058495] warn_alloc_show_mem: 3 callbacks suppressed [ 348.058499] Mem-Info: [ 348.071222] mems_allowed=0-1 [ 348.073111] active_anon:6053 inactive_anon:196 isolated_anon:0 [ 348.073111] active_file:30 inactive_file:11 isolated_file:0 [ 348.073111] unevictable:0 dirty:0 writeback:0 unstable:0 [ 348.073111] slab_reclaimable:12436 slab_unreclaimable:100191 [ 348.073111] mapped:26 shmem:250 pagetables:423 bounce:0 [ 348.073111] free:13754 free_pcp:133 free_cma:0 [ 348.077132] CPU: 0 PID: 7997 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 348.086629] Node 0 active_anon:23928kB inactive_anon:776kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 348.090167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.090174] Call Trace: [ 348.090199] dump_stack+0x13e/0x194 [ 348.090211] warn_alloc.cold+0x96/0x1af [ 348.090218] ? zone_watermark_ok_safe+0x280/0x280 [ 348.090227] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 348.090244] __alloc_pages_slowpath+0x2114/0x26c0 [ 348.090272] ? warn_alloc+0xf0/0xf0 [ 348.093760] Node 1 active_anon:244kB inactive_anon:8kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 348.095918] __alloc_pages_nodemask+0x5d3/0x700 [ 348.099869] Node 0 [ 348.104136] ? lock_downgrade+0x6e0/0x6e0 [ 348.104146] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 348.104161] alloc_pages_current+0xe7/0x1e0 [ 348.104175] ion_page_pool_alloc+0x118/0x1b0 [ 348.104183] ion_system_heap_allocate+0x134/0x8d0 [ 348.104193] ? rcu_read_lock_sched_held+0x10a/0x130 [ 348.104200] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 348.104210] ? ion_system_heap_free+0x240/0x240 [ 348.109416] DMA free:10324kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.112616] ion_alloc+0x1e9/0x7d0 [ 348.112629] ? ion_dma_buf_release+0x40/0x40 [ 348.112644] ? __might_fault+0x177/0x1b0 [ 348.112654] ion_ioctl+0xef/0x1f8 [ 348.112661] ? ion_alloc.cold+0x3d/0x3d [ 348.112673] ? selinux_file_ioctl+0x3f7/0x560 [ 348.112679] ? ion_alloc.cold+0x3d/0x3d [ 348.112689] do_vfs_ioctl+0x75a/0xfe0 [ 348.112698] ? selinux_file_mprotect+0x5c0/0x5c0 [ 348.116324] lowmem_reserve[]: [ 348.122237] ? ioctl_preallocate+0x1a0/0x1a0 [ 348.122246] ? _copy_to_user+0x82/0xd0 [ 348.122256] ? put_timespec64+0xaa/0xf0 [ 348.122269] ? nsecs_to_jiffies+0x30/0x30 [ 348.122281] ? security_file_ioctl+0x76/0xb0 [ 348.122287] ? security_file_ioctl+0x83/0xb0 [ 348.122296] SyS_ioctl+0x7f/0xb0 [ 348.122305] ? do_vfs_ioctl+0xfe0/0xfe0 [ 348.124289] 0 [ 348.128275] do_syscall_64+0x1d5/0x640 [ 348.131877] 2557 [ 348.139085] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 348.141105] 2557 [ 348.148406] RIP: 0033:0x45c4a9 [ 348.151572] 2557 [ 348.158777] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.166116] 2557 [ 348.168034] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 348.180060] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 348.180065] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 348.180070] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 348.180074] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 348.184248] CPU: 0 PID: 7998 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 348.200162] Node 0 [ 348.224129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.224134] Call Trace: [ 348.224165] dump_stack+0x13e/0x194 [ 348.224177] warn_alloc.cold+0x96/0x1af [ 348.224184] ? zone_watermark_ok_safe+0x280/0x280 [ 348.224193] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 348.224210] __alloc_pages_slowpath+0x2114/0x26c0 [ 348.224229] ? warn_alloc+0xf0/0xf0 [ 348.224247] __alloc_pages_nodemask+0x5d3/0x700 [ 348.273465] DMA32 free:18236kB min:36272kB low:45340kB high:54408kB active_anon:23928kB inactive_anon:776kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7040kB pagetables:1692kB bounce:0kB free_pcp:340kB local_pcp:208kB free_cma:0kB [ 348.274547] ? lock_downgrade+0x6e0/0x6e0 [ 348.278526] lowmem_reserve[]: [ 348.283390] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 348.283408] alloc_pages_current+0xe7/0x1e0 [ 348.283423] ion_page_pool_alloc+0x118/0x1b0 [ 348.283432] ion_system_heap_allocate+0x134/0x8d0 [ 348.283442] ? rcu_read_lock_sched_held+0x10a/0x130 [ 348.283449] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 348.283457] ? ion_system_heap_free+0x240/0x240 [ 348.283470] ion_alloc+0x1e9/0x7d0 [ 348.300141] 0 [ 348.322943] ? ion_dma_buf_release+0x40/0x40 [ 348.322959] ? __might_fault+0x177/0x1b0 [ 348.322969] ion_ioctl+0xef/0x1f8 [ 348.322976] ? ion_alloc.cold+0x3d/0x3d [ 348.322989] ? selinux_file_ioctl+0x3f7/0x560 [ 348.322995] ? ion_alloc.cold+0x3d/0x3d [ 348.323004] do_vfs_ioctl+0x75a/0xfe0 [ 348.323012] ? selinux_file_mprotect+0x5c0/0x5c0 [ 348.323020] ? ioctl_preallocate+0x1a0/0x1a0 [ 348.323028] ? _copy_to_user+0x82/0xd0 [ 348.323040] ? put_timespec64+0xaa/0xf0 [ 348.323047] ? nsecs_to_jiffies+0x30/0x30 [ 348.323059] ? security_file_ioctl+0x76/0xb0 [ 348.323065] ? security_file_ioctl+0x83/0xb0 [ 348.323073] SyS_ioctl+0x7f/0xb0 [ 348.323080] ? do_vfs_ioctl+0xfe0/0xfe0 [ 348.323090] do_syscall_64+0x1d5/0x640 [ 348.323105] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 348.362666] 0 [ 348.363090] RIP: 0033:0x45c4a9 [ 348.367776] 0 [ 348.393408] RSP: 002b:00007ffe964353d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.393418] RAX: ffffffffffffffda RBX: 00000000014f8914 RCX: 000000000045c4a9 [ 348.393422] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 348.393426] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 348.393430] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 348.393434] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 348.640104] Mem-Info: [ 348.644842] CPU: 1 PID: 7999 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 348.647228] active_anon:6043 inactive_anon:196 isolated_anon:0 [ 348.647228] active_file:14 inactive_file:164 isolated_file:0 [ 348.647228] unevictable:0 dirty:0 writeback:0 unstable:0 [ 348.647228] slab_reclaimable:12436 slab_unreclaimable:100135 [ 348.647228] mapped:102 shmem:250 pagetables:423 bounce:0 [ 348.647228] free:105246 free_pcp:193 free_cma:0 [ 348.652246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.652251] Call Trace: [ 348.652274] dump_stack+0x13e/0x194 [ 348.652285] warn_alloc.cold+0x96/0x1af [ 348.652293] ? zone_watermark_ok_safe+0x280/0x280 [ 348.652301] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 348.652318] __alloc_pages_slowpath+0x2114/0x26c0 [ 348.652337] ? warn_alloc+0xf0/0xf0 [ 348.652354] __alloc_pages_nodemask+0x5d3/0x700 [ 348.652370] ? lock_downgrade+0x6e0/0x6e0 [ 348.652385] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 348.652397] ? retint_kernel+0x2d/0x2d [ 348.652411] alloc_pages_current+0xe7/0x1e0 [ 348.652423] ion_page_pool_alloc+0x118/0x1b0 [ 348.652433] ion_system_heap_allocate+0x134/0x8d0 [ 348.652443] ? rcu_read_lock_sched_held+0x10a/0x130 [ 348.652450] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 348.652458] ? ion_system_heap_free+0x240/0x240 [ 348.652470] ion_alloc+0x1e9/0x7d0 [ 348.652483] ? ion_dma_buf_release+0x40/0x40 [ 348.652495] ? __might_fault+0x177/0x1b0 [ 348.652504] ion_ioctl+0xef/0x1f8 [ 348.652512] ? ion_alloc.cold+0x3d/0x3d [ 348.652524] ? selinux_file_ioctl+0x3f7/0x560 [ 348.652529] ? ion_alloc.cold+0x3d/0x3d [ 348.652538] do_vfs_ioctl+0x75a/0xfe0 [ 348.652545] ? selinux_file_mprotect+0x5c0/0x5c0 [ 348.652553] ? ioctl_preallocate+0x1a0/0x1a0 [ 348.652562] ? _copy_to_user+0x82/0xd0 [ 348.652572] ? put_timespec64+0xaa/0xf0 [ 348.652578] ? nsecs_to_jiffies+0x30/0x30 [ 348.652591] ? security_file_ioctl+0x76/0xb0 [ 348.652598] ? security_file_ioctl+0x83/0xb0 [ 348.652607] SyS_ioctl+0x7f/0xb0 [ 348.652614] ? do_vfs_ioctl+0xfe0/0xfe0 [ 348.652625] do_syscall_64+0x1d5/0x640 [ 348.652637] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 348.652648] RIP: 0033:0x45c4a9 [ 348.680109] Node 0 active_anon:23928kB inactive_anon:776kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 348.683532] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 [ 348.688055] Node 1 active_anon:244kB inactive_anon:8kB active_file:8kB inactive_file:608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:400kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 348.692016] ORIG_RAX: 0000000000000010 [ 348.692023] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 348.692027] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 348.692031] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 348.692035] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 348.692039] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 349.150137] warn_alloc_show_mem: 2 callbacks suppressed [ 349.150141] Mem-Info: [ 349.159549] active_anon:6043 inactive_anon:196 isolated_anon:0 [ 349.159549] active_file:14 inactive_file:168 isolated_file:0 [ 349.159549] unevictable:0 dirty:0 writeback:0 unstable:0 [ 349.159549] slab_reclaimable:12436 slab_unreclaimable:99837 [ 349.159549] mapped:113 shmem:250 pagetables:423 bounce:0 [ 349.159549] free:259817 free_pcp:669 free_cma:0 [ 349.270307] Node 0 active_anon:23928kB inactive_anon:776kB active_file:48kB inactive_file:648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:408kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 349.270329] Node 1 active_anon:244kB inactive_anon:8kB active_file:8kB inactive_file:624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:444kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 349.270338] Node 0 DMA free:10464kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.500136] 0 0 [ 349.502168] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.575453] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 349.590105] Node 0 DMA32 free:158620kB min:36272kB low:45340kB high:54408kB active_anon:23928kB inactive_anon:776kB active_file:48kB inactive_file:648kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7008kB pagetables:1692kB bounce:0kB free_pcp:1572kB local_pcp:892kB free_cma:0kB [ 349.619585] lowmem_reserve[]: 0 0 0 0 0 [ 349.623666] Node 1 Normal free:503148kB min:53612kB low:67012kB high:80412kB active_anon:244kB inactive_anon:8kB active_file:8kB inactive_file:624kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:1360kB local_pcp:708kB free_cma:0kB [ 349.700153] lowmem_reserve[]: 0 0 0 0 0 [ 349.703761] lowmem_reserve[]: [ 349.704895] Node 0 [ 349.704897] 0 0 [ 349.708021] DMA: 20*4kB (UE) 10*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10464kB [ 349.728945] 0 0 0 [ 349.755816] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.793552] Node 0 DMA32: 12158*4kB (UME) 9240*8kB (UME) 2737*16kB (UE) 1493*32kB (UME) 27*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 215848kB [ 349.796918] lowmem_reserve[]: 0 0 0 0 0 [ 349.814776] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 349.817667] syz-executor.4: [ 349.836521] Node 0 [ 349.836635] Node 1 [ 349.839713] Normal: [ 349.850091] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 349.857881] CPU: 1 PID: 7997 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 349.860121] page allocation failure: order:4 [ 349.865678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.865686] Call Trace: [ 349.870375] Normal free:304556kB min:53612kB low:67012kB high:80412kB active_anon:244kB inactive_anon:8kB active_file:8kB inactive_file:624kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:1176kB local_pcp:644kB free_cma:0kB [ 349.879730] dump_stack+0x13e/0x194 [ 349.890101] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 349.910729] warn_alloc.cold+0x96/0x1af [ 349.910738] ? zone_watermark_ok_safe+0x280/0x280 [ 349.910753] ? __alloc_pages_direct_compact+0xba/0x360 [ 349.910762] __alloc_pages_slowpath+0x2114/0x26c0 [ 349.910777] ? save_trace+0x290/0x290 [ 349.920112] lowmem_reserve[]: [ 349.921561] ? warn_alloc+0xf0/0xf0 [ 349.925673] 0 [ 349.930740] __alloc_pages_nodemask+0x5d3/0x700 [ 349.930759] ? lock_downgrade+0x6e0/0x6e0 [ 349.930772] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 349.930787] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 349.930801] alloc_pages_current+0xe7/0x1e0 [ 349.950115] 0 [ 349.951538] ion_page_pool_alloc+0x118/0x1b0 [ 349.953324] 0 [ 349.958780] ion_system_heap_allocate+0x134/0x8d0 [ 349.970122] (null) [ 349.973007] ? _ion_heap_freelist_drain+0x6e/0x410 [ 349.977319] syz-executor.4 cpuset= [ 349.979136] ? ion_system_heap_free+0x240/0x240 [ 349.990109] 0 [ 349.990711] ion_alloc+0x611/0x7d0 [ 349.992846] 0 [ 349.997824] ? ion_dma_buf_release+0x40/0x40 [ 350.010098] syz4 [ 350.012256] ? __might_fault+0x177/0x1b0 [ 350.014058] mems_allowed=0-1 [ 350.027745] ion_ioctl+0xef/0x1f8 [ 350.031206] Node 0 [ 350.031228] ? ion_alloc.cold+0x3d/0x3d [ 350.031243] ? selinux_file_ioctl+0x3f7/0x560 [ 350.033489] DMA: [ 350.037621] ? ion_alloc.cold+0x3d/0x3d [ 350.048303] do_vfs_ioctl+0x75a/0xfe0 [ 350.052120] ? selinux_file_mprotect+0x5c0/0x5c0 [ 350.056898] ? ioctl_preallocate+0x1a0/0x1a0 [ 350.061326] ? _copy_to_user+0x82/0xd0 [ 350.065248] ? put_timespec64+0xaa/0xf0 [ 350.069243] ? nsecs_to_jiffies+0x30/0x30 [ 350.070111] 20*4kB [ 350.073421] ? security_file_ioctl+0x76/0xb0 [ 350.073423] (UE) 10*8kB [ 350.075762] ? security_file_ioctl+0x83/0xb0 [ 350.087288] SyS_ioctl+0x7f/0xb0 [ 350.090669] ? do_vfs_ioctl+0xfe0/0xfe0 [ 350.094661] do_syscall_64+0x1d5/0x640 [ 350.098571] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 350.100081] (UE) [ 350.103767] RIP: 0033:0x45c4a9 [ 350.103771] 2*16kB (UE) [ 350.105826] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.109030] 1*32kB [ 350.111690] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 350.111694] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 350.111698] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 350.111702] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 350.111705] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 350.112544] 0*4kB [ 350.130109] CPU: 0 PID: 7999 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 350.160116] 0*8kB [ 350.160603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.169109] 0*16kB [ 350.171255] Call Trace: [ 350.171279] dump_stack+0x13e/0x194 [ 350.171290] warn_alloc.cold+0x96/0x1af [ 350.171298] ? zone_watermark_ok_safe+0x280/0x280 [ 350.171312] ? __alloc_pages_direct_compact+0xba/0x360 [ 350.171321] __alloc_pages_slowpath+0x2114/0x26c0 [ 350.171335] ? save_trace+0x290/0x290 [ 350.171347] ? warn_alloc+0xf0/0xf0 [ 350.171366] __alloc_pages_nodemask+0x5d3/0x700 [ 350.171376] ? lock_downgrade+0x6e0/0x6e0 [ 350.210140] 0*32kB [ 350.212381] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 350.212396] ? retint_kernel+0x2d/0x2d [ 350.212410] alloc_pages_current+0xe7/0x1e0 [ 350.216342] 0*64kB [ 350.221022] ion_page_pool_alloc+0x118/0x1b0 [ 350.221032] ion_system_heap_allocate+0x134/0x8d0 [ 350.221041] ? _ion_heap_freelist_drain+0x6e/0x410 [ 350.221049] ? ion_system_heap_free+0x240/0x240 [ 350.221059] ion_alloc+0x611/0x7d0 [ 350.221070] ? ion_dma_buf_release+0x40/0x40 [ 350.221084] ? __might_fault+0x177/0x1b0 [ 350.221094] ion_ioctl+0xef/0x1f8 [ 350.221101] ? ion_alloc.cold+0x3d/0x3d [ 350.221113] ? selinux_file_ioctl+0x3f7/0x560 [ 350.230138] 0*128kB [ 350.232611] ? ion_alloc.cold+0x3d/0x3d [ 350.232625] do_vfs_ioctl+0x75a/0xfe0 [ 350.236615] 0*256kB [ 350.240928] ? selinux_file_mprotect+0x5c0/0x5c0 [ 350.240939] ? ioctl_preallocate+0x1a0/0x1a0 [ 350.240947] ? _copy_to_user+0x82/0xd0 [ 350.240957] ? put_timespec64+0xaa/0xf0 [ 350.240964] ? nsecs_to_jiffies+0x30/0x30 [ 350.240974] ? security_file_ioctl+0x76/0xb0 [ 350.240981] ? security_file_ioctl+0x83/0xb0 [ 350.240989] SyS_ioctl+0x7f/0xb0 [ 350.240995] ? do_vfs_ioctl+0xfe0/0xfe0 [ 350.241006] do_syscall_64+0x1d5/0x640 [ 350.241018] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 350.241026] RIP: 0033:0x45c4a9 [ 350.241030] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.241038] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 350.241046] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 350.260184] 0*512kB [ 350.262344] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 350.265909] 0*1024kB [ 350.270409] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 350.270415] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 350.281282] (E) [ 350.318889] 0*2048kB [ 350.324760] 1*64kB [ 350.326497] 0*4096kB [ 350.332050] (E) [ 350.340128] = 0kB [ 350.343574] 1*128kB [ 350.344716] Node 1 [ 350.349968] (E) [ 350.356161] Normal: [ 350.361093] 1*256kB [ 350.368638] 15567*4kB [ 350.376253] Node 0 [ 350.382632] (UE) [ 350.386981] (E) [ 350.388949] 13969*8kB [ 350.398022] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.403771] (UE) [ 350.409983] 1*512kB [ 350.411021] 7459*16kB [ 350.415444] (E) [ 350.417889] (UE) [ 350.420081] 1*1024kB [ 350.423094] 4411*32kB [ 350.424421] lowmem_reserve[]: [ 350.427071] (UE) [ 350.429150] 0 [ 350.444713] 825*64kB [ 350.468079] (E) [ 350.478961] (U) [ 350.481908] 2*2048kB [ 350.484170] 8*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 488340kB [ 350.484198] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.484204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 350.484209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.484214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 350.484217] 834 total pagecache pages [ 350.484226] 0 pages in swap cache [ 350.484230] Swap cache stats: add 0, delete 0, find 0/0 [ 350.484233] Free swap = 0kB [ 350.484236] Total swap = 0kB [ 350.484242] 1965979 pages RAM [ 350.484245] 0 pages HighMem/MovableOnly [ 350.484248] 339049 pages reserved [ 350.484251] 0 pages cma reserved [ 350.493935] Mem-Info: [ 350.496733] (ME) [ 350.497440] active_anon:6118 inactive_anon:196 isolated_anon:0 [ 350.497440] active_file:139 inactive_file:419 isolated_file:0 [ 350.497440] unevictable:0 dirty:0 writeback:0 unstable:0 [ 350.497440] slab_reclaimable:12437 slab_unreclaimable:99547 [ 350.497440] mapped:414 shmem:250 pagetables:423 bounce:0 [ 350.497440] free:186320 free_pcp:649 free_cma:0 [ 350.497454] Node 0 active_anon:24228kB inactive_anon:776kB active_file:348kB inactive_file:1392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1212kB dirty:0kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 350.497466] Node 1 active_anon:244kB inactive_anon:8kB active_file:208kB inactive_file:284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:444kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 350.497470] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.497486] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 350.497503] Node 0 DMA32 free:246588kB min:36272kB low:45340kB high:54408kB active_anon:24228kB inactive_anon:776kB active_file:348kB inactive_file:1392kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7008kB pagetables:1692kB bounce:0kB free_pcp:1328kB local_pcp:688kB free_cma:0kB [ 350.497520] lowmem_reserve[]: 0 0 0 0 [ 350.500196] 1*4096kB [ 350.513442] 0 [ 350.534464] 2557 [ 350.575649] (M) [ 350.578183] Node 0 [ 350.581539] = 10400kB [ 350.590198] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.616590] 2557 [ 350.672653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.701947] Node 0 [ 350.736010] lowmem_reserve[]: [ 350.750532] syz-executor.5: [ 350.754580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.754941] page allocation failure: order:4 [ 350.784331] 0 [ 350.790918] DMA32: [ 350.791283] 0 [ 350.794396] 12216*4kB [ 350.797771] 0 [ 350.819587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.828635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.830128] (UE) 9381*8kB (U) 2800*16kB (UE) 1759*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 225000kB [ 350.836287] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 350.852551] 0 0 [ 350.860092] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 350.864477] device bridge_slave_1 left promiscuous mode [ 350.879939] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.887163] Node 1 Normal: 15576*4kB (UE) 13974*8kB (UE) 7466*16kB (UE) 4429*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 435280kB [ 350.888972] Node 1 [ 350.902367] 2557 2557 [ 350.902379] Node 0 DMA32 free:225204kB min:36272kB low:45340kB high:54408kB active_anon:23928kB inactive_anon:776kB active_file:348kB inactive_file:1692kB unevictable:0kB writepending:296kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7008kB pagetables:1692kB bounce:0kB free_pcp:376kB local_pcp:260kB free_cma:0kB [ 350.902403] lowmem_reserve[]: [ 350.907980] (null) [ 350.945661] Normal free:435592kB min:53612kB low:67012kB high:80412kB active_anon:244kB inactive_anon:8kB active_file:208kB inactive_file:284kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:152kB local_pcp:0kB free_cma:0kB [ 350.950111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.976800] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 350.989335] CPU: 1 PID: 7996 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 350.997158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.000103] 0 [ 351.007445] Call Trace: [ 351.007473] dump_stack+0x13e/0x194 [ 351.009275] 0 [ 351.012480] warn_alloc.cold+0x96/0x1af [ 351.012489] ? zone_watermark_ok_safe+0x280/0x280 [ 351.012504] ? __alloc_pages_direct_compact+0xba/0x360 [ 351.012512] __alloc_pages_slowpath+0x2114/0x26c0 [ 351.012527] ? save_trace+0x290/0x290 [ 351.012539] ? warn_alloc+0xf0/0xf0 [ 351.012561] __alloc_pages_nodemask+0x5d3/0x700 [ 351.030094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.033582] ? lock_downgrade+0x6e0/0x6e0 [ 351.038701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.042506] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 351.042519] ? retint_kernel+0x2d/0x2d [ 351.042531] alloc_pages_current+0xe7/0x1e0 [ 351.042546] ion_page_pool_alloc+0x118/0x1b0 [ 351.042557] ion_system_heap_allocate+0x134/0x8d0 [ 351.060084] 0 [ 351.063700] ? _ion_heap_freelist_drain+0x6e/0x410 [ 351.080100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.082474] ? ion_system_heap_free+0x240/0x240 [ 351.087768] 858 total pagecache pages [ 351.092201] ion_alloc+0x611/0x7d0 [ 351.092216] ? ion_dma_buf_release+0x40/0x40 [ 351.092229] ? __might_fault+0x177/0x1b0 [ 351.092244] ion_ioctl+0xef/0x1f8 [ 351.097147] 0 [ 351.098944] ? ion_alloc.cold+0x3d/0x3d [ 351.110109] 0 [ 351.112460] ? selinux_file_ioctl+0x3f7/0x560 [ 351.121051] ? ion_alloc.cold+0x3d/0x3d [ 351.121065] do_vfs_ioctl+0x75a/0xfe0 [ 351.121077] ? selinux_file_mprotect+0x5c0/0x5c0 [ 351.121086] ? ioctl_preallocate+0x1a0/0x1a0 [ 351.121094] ? _copy_to_user+0x82/0xd0 [ 351.121107] ? put_timespec64+0xaa/0xf0 [ 351.130095] 0 pages in swap cache [ 351.133309] ? nsecs_to_jiffies+0x30/0x30 [ 351.136769] Swap cache stats: add 0, delete 0, find 0/0 [ 351.138918] ? security_file_ioctl+0x76/0xb0 [ 351.150078] Node 0 [ 351.153599] ? security_file_ioctl+0x83/0xb0 [ 351.157403] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.162160] SyS_ioctl+0x7f/0xb0 [ 351.162170] ? do_vfs_ioctl+0xfe0/0xfe0 [ 351.162180] do_syscall_64+0x1d5/0x640 [ 351.162195] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 351.162204] RIP: 0033:0x45c4a9 [ 351.180081] Free swap = 0kB [ 351.182089] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.187468] Total swap = 0kB [ 351.191869] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 351.191874] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 351.191878] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 351.191882] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 351.191886] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 351.196235] lowmem_reserve[]: [ 351.210098] lowmem_reserve[]: [ 351.228599] 0 [ 351.231165] 1965979 pages RAM [ 351.235104] device bridge_slave_0 left promiscuous mode [ 351.250129] 0 pages HighMem/MovableOnly [ 351.258504] 0 [ 351.270149] 0 [ 351.276962] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.290126] 339049 pages reserved [ 351.302545] 0 [ 351.303588] 0 [ 351.306303] 0 [ 351.320185] 0 pages cma reserved [ 351.330649] 0 [ 351.332767] 0 [ 351.337635] 0 [ 351.344007] Node 0 DMA: 17*4kB (UE) 11*8kB (UE) 5*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10380kB [ 351.360111] 0 [ 351.369206] Node 0 DMA32: 1*4kB (M) 1*8kB (M) 1530*16kB (U) 1757*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 80716kB [ 351.370154] Node 1 [ 351.385842] device veth1_macvtap left promiscuous mode [ 351.398373] device veth0_macvtap left promiscuous mode [ 351.400124] Normal free:435280kB min:53612kB low:67012kB high:80412kB active_anon:168kB inactive_anon:8kB active_file:136kB inactive_file:204kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:152kB local_pcp:152kB free_cma:0kB [ 351.404100] device veth1_vlan left promiscuous mode [ 351.442513] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 351.454862] Node 1 Normal: 15576*4kB (UE) 13974*8kB (UE) 7466*16kB (UE) 4429*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 435280kB [ 351.472954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.481969] device veth0_vlan left promiscuous mode [ 351.487679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.498526] lowmem_reserve[]: 0 0 0 0 0 [ 351.502626] Node 0 DMA: 17*4kB (UE) 11*8kB (UE) 5*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10380kB [ 351.505243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.560762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.569426] 857 total pagecache pages [ 351.570106] Node 0 DMA32: 1*4kB (M) 2*8kB (UM) 1430*16kB (U) 1758*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 79156kB [ 351.578956] 0 pages in swap cache [ 351.605196] Swap cache stats: add 0, delete 0, find 0/0 [ 351.610150] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 351.621935] Free swap = 0kB [ 351.624980] Total swap = 0kB [ 351.628239] 1965979 pages RAM [ 351.634913] 0 pages HighMem/MovableOnly [ 351.638946] 339049 pages reserved [ 351.644198] 0 pages cma reserved [ 351.650367] warn_alloc_show_mem: 1 callbacks suppressed [ 351.650371] Mem-Info: [ 351.659307] active_anon:6031 inactive_anon:196 isolated_anon:0 [ 351.659307] active_file:173 inactive_file:391 isolated_file:0 [ 351.659307] unevictable:0 dirty:79 writeback:0 unstable:0 [ 351.659307] slab_reclaimable:12442 slab_unreclaimable:99413 [ 351.659307] mapped:414 shmem:250 pagetables:424 bounce:0 [ 351.659307] free:131415 free_pcp:204 free_cma:0 [ 351.660126] Node 1 Normal: 15576*4kB (UE) 13974*8kB (UE) 7466*16kB (UE) 4429*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 435280kB [ 351.790169] Node 0 active_anon:23956kB inactive_anon:776kB active_file:556kB inactive_file:1360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1328kB dirty:316kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 351.810127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.822800] Node 1 active_anon:168kB inactive_anon:8kB active_file:136kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:328kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 351.870124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.884040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.885942] syz-executor.1: [ 351.893370] device hsr_slave_1 left promiscuous mode [ 351.910189] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 351.920102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.930175] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.934441] 394 total pagecache pages [ 351.956872] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 351.956898] CPU: 1 PID: 7998 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 351.956907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.984071] Call Trace: [ 351.986679] dump_stack+0x13e/0x194 [ 351.990331] warn_alloc.cold+0x96/0x1af [ 351.994331] ? zone_watermark_ok_safe+0x280/0x280 [ 351.999468] ? __alloc_pages_direct_compact+0xba/0x360 [ 352.000099] 0 pages in swap cache [ 352.004826] __alloc_pages_slowpath+0x2114/0x26c0 [ 352.008313] Swap cache stats: add 0, delete 0, find 0/0 [ 352.013202] ? save_trace+0x290/0x290 [ 352.013218] ? warn_alloc+0xf0/0xf0 [ 352.013234] __alloc_pages_nodemask+0x5d3/0x700 [ 352.013243] ? lock_downgrade+0x6e0/0x6e0 [ 352.013250] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 352.013260] ? find_held_lock+0x2d/0x110 [ 352.013275] alloc_pages_current+0xe7/0x1e0 [ 352.040106] Free swap = 0kB [ 352.040335] ion_page_pool_alloc+0x118/0x1b0 [ 352.044547] Total swap = 0kB [ 352.049114] ion_system_heap_allocate+0x134/0x8d0 [ 352.060102] 1965979 pages RAM [ 352.065011] ? _ion_heap_freelist_drain+0x6e/0x410 [ 352.068344] 0 pages HighMem/MovableOnly [ 352.073322] ? ion_system_heap_free+0x240/0x240 [ 352.073335] ion_alloc+0x611/0x7d0 [ 352.073347] ? ion_dma_buf_release+0x40/0x40 [ 352.073360] ? __might_fault+0x177/0x1b0 [ 352.073370] ion_ioctl+0xef/0x1f8 [ 352.073377] ? ion_alloc.cold+0x3d/0x3d [ 352.073390] ? selinux_file_ioctl+0x3f7/0x560 [ 352.073397] ? ion_alloc.cold+0x3d/0x3d [ 352.073410] do_vfs_ioctl+0x75a/0xfe0 [ 352.090122] 339049 pages reserved [ 352.090660] ? selinux_file_mprotect+0x5c0/0x5c0 [ 352.094835] 0 pages cma reserved [ 352.098489] ? ioctl_preallocate+0x1a0/0x1a0 [ 352.120092] Out of memory: Kill process 7577 (syz-execprog) score 1 or sacrifice child [ 352.123003] ? _copy_to_user+0x82/0xd0 [ 352.126471] Killed process 7602 (syz-executor.5) total-vm:39756kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 352.130818] ? put_timespec64+0xaa/0xf0 [ 352.130826] ? nsecs_to_jiffies+0x30/0x30 [ 352.130838] ? security_file_ioctl+0x76/0xb0 [ 352.130844] ? security_file_ioctl+0x83/0xb0 [ 352.130855] SyS_ioctl+0x7f/0xb0 [ 352.130863] ? do_vfs_ioctl+0xfe0/0xfe0 [ 352.130874] do_syscall_64+0x1d5/0x640 [ 352.130888] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 352.186435] RIP: 0033:0x45c4a9 [ 352.189736] RSP: 002b:00007ffe964353d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.197995] RAX: ffffffffffffffda RBX: 00000000014f8914 RCX: 000000000045c4a9 [ 352.205299] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 352.212602] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 352.219887] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 352.227256] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 352.244187] device hsr_slave_0 left promiscuous mode [ 352.255148] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 352.270368] Node 0 DMA32 free:45008kB min:36272kB low:45340kB high:54408kB active_anon:23856kB inactive_anon:776kB active_file:52kB inactive_file:40kB unevictable:0kB writepending:4kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1696kB bounce:0kB free_pcp:1008kB local_pcp:328kB free_cma:0kB [ 352.352605] lowmem_reserve[]: 0 0 0 0 0 [ 352.370160] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.395918] lowmem_reserve[]: 0 0 0 0 0 2020/03/09 18:33:45 executed programs: 33 [ 352.400463] Node 1 Normal free:88932kB min:53612kB low:67012kB high:80412kB active_anon:164kB inactive_anon:8kB active_file:620kB inactive_file:3812kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:284kB local_pcp:96kB free_cma:0kB [ 352.430203] lowmem_reserve[]: 0 0 0 0 0 [ 352.434327] Node 0 DMA: 17*4kB (UE) 11*8kB (UE) 5*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10380kB [ 352.480168] Node 0 DMA32: 14*4kB (ME) 17*8kB (UME) 4*16kB (ME) 977*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31520kB [ 352.513874] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 352.552366] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 7*16kB (ME) 1358*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43584kB [ 352.578881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.595768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 352.597823] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 352.606529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.607609] (null) [ 352.617435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 352.617441] 311 total pagecache pages [ 352.617451] 0 pages in swap cache [ 352.617456] Swap cache stats: add 0, delete 0, find 0/0 [ 352.617459] Free swap = 0kB [ 352.617463] Total swap = 0kB [ 352.617470] 1965979 pages RAM [ 352.617473] 0 pages HighMem/MovableOnly [ 352.617476] 339049 pages reserved [ 352.617480] 0 pages cma reserved [ 352.675410] , order=0, oom_score_adj=0 [ 352.679495] ion_system_heap cpuset=/ mems_allowed=0-1 [ 352.686159] CPU: 1 PID: 3279 Comm: ion_system_heap Not tainted 4.14.172-syzkaller #0 [ 352.695539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.705013] Call Trace: [ 352.707604] dump_stack+0x13e/0x194 [ 352.711228] dump_header+0x178/0x6d4 [ 352.714949] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 352.720022] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 352.725146] ? ___ratelimit+0x50/0x519 [ 352.729032] oom_kill_process.cold+0x10/0xae3 [ 352.733713] ? lock_acquire+0x170/0x3f0 [ 352.737707] ? lock_downgrade+0x6e0/0x6e0 [ 352.741870] out_of_memory+0x2d5/0x1110 [ 352.745857] ? oom_killer_disable+0x1c0/0x1c0 [ 352.750346] ? mutex_trylock+0x152/0x1a0 [ 352.754398] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 352.759420] ? warn_alloc+0xf0/0xf0 [ 352.763049] ? find_held_lock+0x2d/0x110 [ 352.767107] ? fs_reclaim_acquire+0x10/0x10 [ 352.771447] __alloc_pages_nodemask+0x5d3/0x700 [ 352.777104] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 352.782321] ? find_held_lock+0x2d/0x110 [ 352.787036] ? cache_grow_begin+0x32d/0x410 [ 352.792029] cache_grow_begin+0x7b/0x410 [ 352.796867] ? __cpuset_node_allowed+0xfa/0x450 [ 352.801930] fallback_alloc+0x205/0x2b0 [ 352.806988] kmem_cache_alloc_node_trace+0xf2/0x7b0 [ 352.813519] ? lock_downgrade+0x6e0/0x6e0 [ 352.817683] vm_map_ram+0x44f/0xb60 [ 352.821319] ? __sg_page_iter_next.part.0+0x17a/0x1f0 [ 352.826513] ion_heap_clear_pages+0x26/0x70 [ 352.830839] ion_heap_sglist_zero+0x167/0x220 [ 352.835451] ? ion_heap_deferred_free+0x490/0x490 [ 352.840386] ? trace_hardirqs_on+0x10/0x10 [ 352.844762] ? pagerange_is_ram_callback+0x100/0x100 [ 352.849916] ? ion_heap_deferred_free+0x232/0x490 [ 352.855026] ion_system_heap_free+0x1ca/0x240 [ 352.859675] ? lock_downgrade+0x6e0/0x6e0 [ 352.864250] ion_buffer_destroy+0x132/0x190 [ 352.869057] ion_heap_deferred_free+0x23a/0x490 [ 352.873825] ? __schedule+0x12a7/0x1ca0 [ 352.878262] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 352.883045] ? finish_wait+0x260/0x260 [ 352.886970] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 352.892094] kthread+0x30d/0x420 [ 352.895827] ? kthread_create_on_node+0xd0/0xd0 [ 352.900764] ret_from_fork+0x24/0x30 [ 352.908436] Mem-Info: [ 352.910952] active_anon:5998 inactive_anon:196 isolated_anon:0 [ 352.910952] active_file:14 inactive_file:11 isolated_file:0 [ 352.910952] unevictable:0 dirty:1 writeback:0 unstable:0 [ 352.910952] slab_reclaimable:12450 slab_unreclaimable:99065 [ 352.910952] mapped:2 shmem:250 pagetables:413 bounce:0 [ 352.910952] free:13583 free_pcp:0 free_cma:0 [ 352.944641] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 352.948469] Node 0 active_anon:23824kB inactive_anon:776kB active_file:48kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 352.957179] syz-executor.5: [ 352.988003] Node 1 active_anon:168kB inactive_anon:8kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 352.993369] syz-executor.1: [ 353.017423] syz-executor.4: [ 353.021051] Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.028904] page allocation failure: order:0 [ 353.051721] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 353.061740] CPU: 0 PID: 7997 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 353.066682] page allocation failure: order:0 [ 353.071232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.071238] Call Trace: [ 353.071269] dump_stack+0x13e/0x194 [ 353.071281] warn_alloc.cold+0x96/0x1af [ 353.071289] ? zone_watermark_ok_safe+0x280/0x280 [ 353.071299] ? save_trace+0x290/0x290 [ 353.071307] ? rcu_read_lock_sched_held+0x10a/0x130 [ 353.071325] __alloc_pages_slowpath+0x2114/0x26c0 [ 353.071343] ? warn_alloc+0xf0/0xf0 [ 353.071363] __alloc_pages_nodemask+0x5d3/0x700 [ 353.071372] ? lock_downgrade+0x6e0/0x6e0 [ 353.071380] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 353.071399] alloc_pages_current+0xe7/0x1e0 [ 353.071412] ion_page_pool_alloc+0x118/0x1b0 [ 353.071421] ion_system_heap_allocate+0x134/0x8d0 [ 353.071432] ? _ion_heap_freelist_drain+0x6e/0x410 [ 353.071443] ? ion_system_heap_free+0x240/0x240 [ 353.090848] page allocation failure: order:0 [ 353.093036] ion_alloc+0x611/0x7d0 [ 353.097206] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 353.102690] ? ion_dma_buf_release+0x40/0x40 [ 353.102706] ? __might_fault+0x177/0x1b0 [ 353.102727] ion_ioctl+0xef/0x1f8 [ 353.102741] ? ion_alloc.cold+0x3d/0x3d [ 353.102753] ? selinux_file_ioctl+0x3f7/0x560 [ 353.102759] ? ion_alloc.cold+0x3d/0x3d [ 353.102768] do_vfs_ioctl+0x75a/0xfe0 [ 353.102777] ? selinux_file_mprotect+0x5c0/0x5c0 [ 353.102786] ? ioctl_preallocate+0x1a0/0x1a0 [ 353.102795] ? _copy_to_user+0x82/0xd0 [ 353.102813] ? put_timespec64+0xaa/0xf0 [ 353.102825] ? nsecs_to_jiffies+0x30/0x30 [ 353.117757] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 353.120773] ? security_file_ioctl+0x76/0xb0 [ 353.120780] ? security_file_ioctl+0x83/0xb0 [ 353.120791] SyS_ioctl+0x7f/0xb0 [ 353.120800] ? do_vfs_ioctl+0xfe0/0xfe0 [ 353.120810] do_syscall_64+0x1d5/0x640 [ 353.120825] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 353.120833] RIP: 0033:0x45c4a9 [ 353.120838] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.120845] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 353.120849] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 353.120853] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.120862] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 353.140690] (null) [ 353.143493] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 353.149039] syz-executor.1 cpuset= [ 353.154185] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 353.174372] (null) [ 353.174988] (null) [ 353.179443] syz-executor.5 cpuset= [ 353.186216] syz-executor.4 cpuset= [ 353.202309] syz1 [ 353.208427] lowmem_reserve[]: [ 353.224074] syz5 [ 353.344111] syz4 [ 353.354337] mems_allowed=0-1 [ 353.356292] warn_alloc_show_mem: 1 callbacks suppressed [ 353.356296] Mem-Info: [ 353.356366] CPU: 1 PID: 7998 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 353.359471] active_anon:5998 inactive_anon:196 isolated_anon:0 [ 353.359471] active_file:12 inactive_file:13 isolated_file:0 [ 353.359471] unevictable:0 dirty:1 writeback:0 unstable:0 [ 353.359471] slab_reclaimable:12450 slab_unreclaimable:99065 [ 353.359471] mapped:2 shmem:250 pagetables:413 bounce:0 [ 353.359471] free:13584 free_pcp:0 free_cma:0 [ 353.365010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.365015] Call Trace: [ 353.365037] dump_stack+0x13e/0x194 [ 353.365049] warn_alloc.cold+0x96/0x1af [ 353.365057] ? zone_watermark_ok_safe+0x280/0x280 [ 353.365066] ? save_trace+0x290/0x290 [ 353.365084] __alloc_pages_slowpath+0x2114/0x26c0 [ 353.367776] Node 0 active_anon:23824kB inactive_anon:776kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 353.376474] ? warn_alloc+0xf0/0xf0 [ 353.376495] __alloc_pages_nodemask+0x5d3/0x700 [ 353.376522] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 353.411275] Node 1 active_anon:168kB inactive_anon:8kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 353.420593] ? wake_up_q+0x90/0xe0 [ 353.420611] alloc_pages_current+0xe7/0x1e0 [ 353.420627] ion_page_pool_alloc+0x118/0x1b0 [ 353.420636] ion_system_heap_allocate+0x134/0x8d0 [ 353.420648] ? _ion_heap_freelist_drain+0x6e/0x410 [ 353.423366] Node 0 [ 353.427102] ? ion_system_heap_free+0x240/0x240 [ 353.431249] mems_allowed=0-1 [ 353.436677] ion_alloc+0x611/0x7d0 [ 353.440922] DMA free:10324kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.445697] ? ion_dma_buf_release+0x40/0x40 [ 353.500126] lowmem_reserve[]: [ 353.514598] ? __might_fault+0x177/0x1b0 [ 353.514614] ion_ioctl+0xef/0x1f8 [ 353.514624] ? ion_alloc.cold+0x3d/0x3d [ 353.514637] ? selinux_file_ioctl+0x3f7/0x560 [ 353.514648] ? ion_alloc.cold+0x3d/0x3d [ 353.540097] 0 [ 353.544127] do_vfs_ioctl+0x75a/0xfe0 [ 353.547222] 2557 [ 353.550769] ? selinux_file_mprotect+0x5c0/0x5c0 [ 353.550780] ? ioctl_preallocate+0x1a0/0x1a0 [ 353.550788] ? _copy_to_user+0x82/0xd0 [ 353.550799] ? put_timespec64+0xaa/0xf0 [ 353.550805] ? nsecs_to_jiffies+0x30/0x30 [ 353.550820] ? security_file_ioctl+0x76/0xb0 [ 353.610083] 2557 [ 353.611952] ? security_file_ioctl+0x83/0xb0 [ 353.617333] 2557 [ 353.621754] SyS_ioctl+0x7f/0xb0 [ 353.621764] ? do_vfs_ioctl+0xfe0/0xfe0 [ 353.621774] do_syscall_64+0x1d5/0x640 [ 353.621788] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 353.621799] RIP: 0033:0x45c4a9 [ 353.640078] 2557 [ 353.640424] RSP: 002b:00007ffe964353d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.647264] RAX: ffffffffffffffda RBX: 00000000014f8914 RCX: 000000000045c4a9 [ 353.647276] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 353.670102] Node 0 [ 353.677955] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.700117] DMA32 free:17444kB min:36272kB low:45340kB high:54408kB active_anon:23824kB inactive_anon:776kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:4kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1652kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.702131] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 353.737631] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 353.744956] CPU: 0 PID: 7999 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 353.753086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.755056] mems_allowed=0-1 [ 353.762990] Call Trace: [ 353.763015] dump_stack+0x13e/0x194 [ 353.763027] warn_alloc.cold+0x96/0x1af [ 353.763034] ? zone_watermark_ok_safe+0x280/0x280 [ 353.763043] ? save_trace+0x290/0x290 [ 353.763060] __alloc_pages_slowpath+0x2114/0x26c0 [ 353.763079] ? warn_alloc+0xf0/0xf0 [ 353.763098] __alloc_pages_nodemask+0x5d3/0x700 [ 353.763107] ? lock_downgrade+0x6e0/0x6e0 [ 353.763114] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 353.763131] alloc_pages_current+0xe7/0x1e0 [ 353.812185] ion_page_pool_alloc+0x118/0x1b0 [ 353.816616] ion_system_heap_allocate+0x134/0x8d0 [ 353.821484] ? _ion_heap_freelist_drain+0x6e/0x410 [ 353.826436] ? ion_system_heap_free+0x240/0x240 [ 353.831132] ion_alloc+0x611/0x7d0 [ 353.834695] ? ion_dma_buf_release+0x40/0x40 [ 353.839122] ? __might_fault+0x177/0x1b0 [ 353.843197] ion_ioctl+0xef/0x1f8 [ 353.846677] ? ion_alloc.cold+0x3d/0x3d [ 353.850665] ? selinux_file_ioctl+0x3f7/0x560 [ 353.855174] ? ion_alloc.cold+0x3d/0x3d [ 353.859161] do_vfs_ioctl+0x75a/0xfe0 [ 353.862977] ? selinux_file_mprotect+0x5c0/0x5c0 [ 353.867745] ? ioctl_preallocate+0x1a0/0x1a0 [ 353.872189] ? _copy_to_user+0x82/0xd0 [ 353.876101] ? put_timespec64+0xaa/0xf0 [ 353.880090] ? nsecs_to_jiffies+0x30/0x30 [ 353.884272] ? security_file_ioctl+0x76/0xb0 [ 353.888686] ? security_file_ioctl+0x83/0xb0 [ 353.894078] SyS_ioctl+0x7f/0xb0 [ 353.897586] ? do_vfs_ioctl+0xfe0/0xfe0 [ 353.901575] do_syscall_64+0x1d5/0x640 [ 353.905587] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 353.910791] RIP: 0033:0x45c4a9 [ 353.913994] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.921718] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 353.929013] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 353.936291] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.943573] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 353.950853] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 353.958159] CPU: 1 PID: 7996 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0 [ 353.962909] lowmem_reserve[]: [ 353.965979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.965989] 0 [ 353.969084] Call Trace: [ 353.978503] 0 [ 353.980268] dump_stack+0x13e/0x194 [ 353.980281] warn_alloc.cold+0x96/0x1af [ 353.982885] 0 [ 353.984686] ? zone_watermark_ok_safe+0x280/0x280 [ 353.988289] 0 [ 353.992270] ? save_trace+0x290/0x290 [ 353.992278] ? queue_work_on+0xb6/0x1d0 [ 353.992298] __alloc_pages_slowpath+0x2114/0x26c0 [ 353.992318] ? warn_alloc+0xf0/0xf0 [ 353.994114] 0 [ 353.998969] __alloc_pages_nodemask+0x5d3/0x700 [ 354.004651] ? lock_downgrade+0x6e0/0x6e0 [ 354.008638] Node 0 [ 354.013590] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 354.013605] ? retint_kernel+0x2d/0x2d [ 354.013618] alloc_pages_current+0xe7/0x1e0 [ 354.013635] ion_page_pool_alloc+0x118/0x1b0 [ 354.013645] ion_system_heap_allocate+0x134/0x8d0 [ 354.017284] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.019080] ? _ion_heap_freelist_drain+0x6e/0x410 [ 354.024498] lowmem_reserve[]: [ 354.028641] ? ion_system_heap_free+0x240/0x240 [ 354.030889] 0 [ 354.035888] ion_alloc+0x611/0x7d0 [ 354.039788] 0 [ 354.044158] ? ion_dma_buf_release+0x40/0x40 [ 354.044176] ? __might_fault+0x177/0x1b0 [ 354.044186] ion_ioctl+0xef/0x1f8 [ 354.044194] ? ion_alloc.cold+0x3d/0x3d [ 354.044218] ? selinux_file_ioctl+0x3f7/0x560 [ 354.048668] 0 [ 354.053694] ? ion_alloc.cold+0x3d/0x3d [ 354.053709] do_vfs_ioctl+0x75a/0xfe0 [ 354.053721] ? selinux_file_mprotect+0x5c0/0x5c0 [ 354.053729] ? ioctl_preallocate+0x1a0/0x1a0 [ 354.053743] ? _copy_to_user+0x82/0xd0 [ 354.078902] 0 [ 354.083815] ? put_timespec64+0xaa/0xf0 [ 354.083824] ? nsecs_to_jiffies+0x30/0x30 [ 354.083836] ? security_file_ioctl+0x76/0xb0 [ 354.083848] ? security_file_ioctl+0x83/0xb0 [ 354.086982] 0 [ 354.091673] SyS_ioctl+0x7f/0xb0 [ 354.091684] ? do_vfs_ioctl+0xfe0/0xfe0 [ 354.091694] do_syscall_64+0x1d5/0x640 [ 354.091708] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 354.091719] RIP: 0033:0x45c4a9 [ 354.097081] RSP: 002b:00007fff630e28f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.098882] Node 1 [ 354.103376] RAX: ffffffffffffffda RBX: 00000000026b2914 RCX: 000000000045c4a9 [ 354.103456] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 354.103461] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 354.103466] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 354.103475] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 354.107572] Normal free:26568kB min:53612kB low:67012kB high:80412kB active_anon:168kB inactive_anon:8kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.275313] lowmem_reserve[]: 0 0 0 0 0 [ 354.279711] Node 0 DMA: 3*4kB (UE) 11*8kB (UE) 5*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10324kB [ 354.297342] Node 0 DMA32: 2*4kB (ME) 139*8kB (UE) 7*16kB (U) 504*32kB (UM) 37*64kB (UE) 48*128kB (UE) 10*256kB (UE) 1*512kB (E) 20*1024kB (U) 0*2048kB 0*4096kB = 49424kB [ 354.316148] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 354.327881] Node 1 Normal: 20*4kB (UME) 4*8kB (UM) 5*16kB (UME) 821*32kB (U) 84*64kB (UM) 11*128kB (UM) 184*256kB (UM) 91*512kB (U) 187*1024kB (UM) 14*2048kB (U) 0*4096kB = 347104kB [ 354.345308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.354314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 354.363107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.372496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 354.382006] 1274 total pagecache pages [ 354.386807] 0 pages in swap cache [ 354.391908] Swap cache stats: add 0, delete 0, find 0/0 [ 354.397520] Free swap = 0kB [ 354.401314] Total swap = 0kB [ 354.404349] 1965979 pages RAM [ 354.409049] 0 pages HighMem/MovableOnly [ 354.413301] 339049 pages reserved [ 354.416862] 0 pages cma reserved 2020/03/09 18:33:47 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe [ 354.705097] 0 2557 2557 2557 2557 [ 354.708733] Node 0 DMA32 free:176872kB min:36272kB low:45340kB high:54408kB active_anon:23824kB inactive_anon:776kB active_file:140kB inactive_file:6744kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7008kB pagetables:1652kB bounce:0kB free_pcp:468kB local_pcp:124kB free_cma:0kB [ 354.739306] lowmem_reserve[]: 0 0 0 0 0 [ 354.744728] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.772353] lowmem_reserve[]: 0 0 0 0 0 [ 354.776495] Node 1 Normal free:1316768kB min:53612kB low:67012kB high:80412kB active_anon:168kB inactive_anon:8kB active_file:8kB inactive_file:2608kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 354.805799] lowmem_reserve[]: 0 0 0 0 0 [ 354.809818] Node 0 DMA: 3*4kB (UE) 11*8kB (UE) 5*16kB (UE) 1*32kB (E) 5*64kB (UE) 2*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10772kB [ 354.825422] Node 0 DMA32: 1*4kB (E) 110*8kB (UE) 8*16kB (UM) 499*32kB (U) 997*64kB (UME) 406*128kB (UE) 137*256kB (UE) 18*512kB (UME) 23*1024kB (U) 0*2048kB 0*4096kB = 200596kB [ 354.841468] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 354.853370] Node 1 Normal: 20*4kB (UME) 4*8kB (UM) 5*16kB (UME) 821*32kB (U) 6908*64kB (UM) 2088*128kB (UM) 470*256kB (UM) 229*512kB (U) 387*1024kB (UM) 68*2048kB (U) 1*4096kB (U) = 1513056kB [ 354.870811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.879741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 354.889035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.897971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 354.906835] 2680 total pagecache pages [ 354.910795] 0 pages in swap cache [ 354.914278] Swap cache stats: add 0, delete 0, find 0/0 [ 354.919659] Free swap = 0kB [ 354.922928] Total swap = 0kB [ 354.927937] 1965979 pages RAM [ 354.931873] 0 pages HighMem/MovableOnly [ 354.935858] 339049 pages reserved [ 354.939313] 0 pages cma reserved [ 354.942928] Out of memory: Kill process 7577 (syz-execprog) score 1 or sacrifice child [ 354.953713] Killed process 8002 (syz-executor.2) total-vm:39756kB, anon-rss:60kB, file-rss:712kB, shmem-rss:0kB [ 354.982783] oom_reaper: reaped process 8002 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2020/03/09 18:33:48 result: hanged=false err=executor 2: EOF [ 355.802286] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 355.836569] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 355.851763] CPU: 1 PID: 8004 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 355.859619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.868987] Call Trace: [ 355.871596] dump_stack+0x13e/0x194 [ 355.874854] syz-executor.4: [ 355.875239] warn_alloc.cold+0x96/0x1af [ 355.875248] ? zone_watermark_ok_safe+0x280/0x280 [ 355.875263] ? __alloc_pages_direct_compact+0xba/0x360 [ 355.879489] page allocation failure: order:4 [ 355.882319] __alloc_pages_slowpath+0x2114/0x26c0 [ 355.882338] ? save_trace+0x290/0x290 [ 355.882362] ? warn_alloc+0xf0/0xf0 [ 355.882389] __alloc_pages_nodemask+0x5d3/0x700 [ 355.882401] ? lock_downgrade+0x6e0/0x6e0 [ 355.890702] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 355.892538] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 355.892551] ? __alloc_pages_nodemask+0x1f1/0x700 [ 355.892564] alloc_pages_current+0xe7/0x1e0 [ 355.899322] (null) [ 355.901881] ion_page_pool_alloc+0x118/0x1b0 [ 355.901893] ion_system_heap_allocate+0x134/0x8d0 [ 355.901904] ? rcu_read_lock_sched_held+0x10a/0x130 [ 355.901912] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 355.901921] ? ion_system_heap_free+0x240/0x240 [ 355.901933] ion_alloc+0x1e9/0x7d0 [ 355.901945] ? ion_dma_buf_release+0x40/0x40 [ 355.908293] syz-executor.4 cpuset= [ 355.909504] ? __might_fault+0x177/0x1b0 [ 355.909521] ion_ioctl+0xef/0x1f8 [ 355.921002] syz4 [ 355.925496] ? ion_alloc.cold+0x3d/0x3d [ 355.940798] mems_allowed=0-1 [ 355.942074] ? selinux_file_ioctl+0x3f7/0x560 [ 355.942085] ? ion_alloc.cold+0x3d/0x3d [ 355.942097] do_vfs_ioctl+0x75a/0xfe0 [ 356.006689] ? selinux_file_mprotect+0x5c0/0x5c0 [ 356.011472] ? ioctl_preallocate+0x1a0/0x1a0 [ 356.015901] ? _copy_to_user+0x82/0xd0 [ 356.019813] ? put_timespec64+0xaa/0xf0 [ 356.023812] ? nsecs_to_jiffies+0x30/0x30 [ 356.027974] ? security_file_ioctl+0x76/0xb0 [ 356.032409] ? security_file_ioctl+0x83/0xb0 [ 356.037061] SyS_ioctl+0x7f/0xb0 [ 356.040549] ? do_vfs_ioctl+0xfe0/0xfe0 [ 356.044550] do_syscall_64+0x1d5/0x640 [ 356.048470] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 356.053671] RIP: 0033:0x45c4a9 [ 356.056865] RSP: 002b:00007ffe964353d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.064585] RAX: ffffffffffffffda RBX: 00000000014f8914 RCX: 000000000045c4a9 [ 356.071867] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 356.079176] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 356.086462] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 356.093750] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 356.101155] CPU: 0 PID: 8005 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 356.109078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.115516] warn_alloc_show_mem: 3 callbacks suppressed [ 356.115521] Mem-Info: [ 356.118479] Call Trace: [ 356.118503] dump_stack+0x13e/0x194 [ 356.118516] warn_alloc.cold+0x96/0x1af [ 356.124050] active_anon:6126 inactive_anon:196 isolated_anon:0 [ 356.124050] active_file:1018 inactive_file:1254 isolated_file:24 [ 356.124050] unevictable:0 dirty:4 writeback:9 unstable:0 [ 356.124050] slab_reclaimable:12526 slab_unreclaimable:98976 [ 356.124050] mapped:1898 shmem:250 pagetables:430 bounce:0 [ 356.124050] free:133885 free_pcp:336 free_cma:0 [ 356.126310] ? zone_watermark_ok_safe+0x280/0x280 [ 356.126326] ? __alloc_pages_direct_compact+0x28a/0x360 [ 356.126337] __alloc_pages_slowpath+0x2114/0x26c0 [ 356.129013] Node 0 active_anon:24360kB inactive_anon:780kB active_file:3516kB inactive_file:2932kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:5340kB dirty:16kB writeback:20kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 356.132585] ? save_trace+0x290/0x290 [ 356.132600] ? warn_alloc+0xf0/0xf0 [ 356.132617] __alloc_pages_nodemask+0x5d3/0x700 [ 356.132626] ? lock_downgrade+0x6e0/0x6e0 [ 356.132633] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 356.132651] alloc_pages_current+0xe7/0x1e0 [ 356.132665] ion_page_pool_alloc+0x118/0x1b0 [ 356.132674] ion_system_heap_allocate+0x134/0x8d0 [ 356.132689] ? rcu_read_lock_sched_held+0x10a/0x130 [ 356.140571] Node 1 active_anon:144kB inactive_anon:4kB active_file:556kB inactive_file:2084kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:2252kB dirty:0kB writeback:16kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 356.169837] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 356.169850] ? ion_system_heap_free+0x240/0x240 [ 356.169861] ion_alloc+0x1e9/0x7d0 [ 356.169874] ? ion_dma_buf_release+0x40/0x40 [ 356.169886] ? __might_fault+0x177/0x1b0 [ 356.169896] ion_ioctl+0xef/0x1f8 [ 356.169904] ? ion_alloc.cold+0x3d/0x3d [ 356.169915] ? selinux_file_ioctl+0x3f7/0x560 [ 356.169922] ? ion_alloc.cold+0x3d/0x3d [ 356.169932] do_vfs_ioctl+0x75a/0xfe0 [ 356.169940] ? selinux_file_mprotect+0x5c0/0x5c0 [ 356.169949] ? ioctl_preallocate+0x1a0/0x1a0 [ 356.169958] ? _copy_to_user+0x82/0xd0 [ 356.169969] ? put_timespec64+0xaa/0xf0 [ 356.169976] ? nsecs_to_jiffies+0x30/0x30 [ 356.169987] ? security_file_ioctl+0x76/0xb0 [ 356.169994] ? security_file_ioctl+0x83/0xb0 [ 356.170005] SyS_ioctl+0x7f/0xb0 [ 356.174984] Node 0 [ 356.180283] ? do_vfs_ioctl+0xfe0/0xfe0 [ 356.180297] do_syscall_64+0x1d5/0x640 [ 356.180311] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 356.180319] RIP: 0033:0x45c4a9 [ 356.180323] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.180330] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 356.180335] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 356.180339] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 356.180344] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 356.180348] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 356.428898] DMA free:10448kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.455754] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 356.466724] Node 0 DMA32 free:147988kB min:36272kB low:45340kB high:54408kB active_anon:24360kB inactive_anon:780kB active_file:3700kB inactive_file:3100kB unevictable:0kB writepending:16kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7072kB pagetables:1720kB bounce:0kB free_pcp:664kB local_pcp:0kB free_cma:0kB [ 356.503534] lowmem_reserve[]: 0 0 0 0 0 [ 356.509101] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.517833] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 356.566856] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 356.569182] lowmem_reserve[]: [ 356.575606] CPU: 0 PID: 8006 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 356.577863] 0 [ 356.578748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.595873] 0 [ 356.597904] Call Trace: [ 356.597934] dump_stack+0x13e/0x194 [ 356.597949] warn_alloc.cold+0x96/0x1af [ 356.602075] 0 [ 356.602380] ? zone_watermark_ok_safe+0x280/0x280 [ 356.611913] 0 [ 356.612184] ? __alloc_pages_direct_compact+0x28a/0x360 [ 356.622773] 0 [ 356.624730] __alloc_pages_slowpath+0x2114/0x26c0 [ 356.624753] ? save_trace+0x290/0x290 [ 356.631507] ? warn_alloc+0xf0/0xf0 [ 356.631528] __alloc_pages_nodemask+0x5d3/0x700 [ 356.631540] ? lock_downgrade+0x6e0/0x6e0 [ 356.631548] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 356.631555] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 356.631571] alloc_pages_current+0xe7/0x1e0 [ 356.631585] ion_page_pool_alloc+0x118/0x1b0 [ 356.631594] ion_system_heap_allocate+0x134/0x8d0 [ 356.631607] ? rcu_read_lock_sched_held+0x10a/0x130 [ 356.639920] Node 1 [ 356.643764] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 356.643778] ? ion_system_heap_free+0x240/0x240 [ 356.643789] ion_alloc+0x1e9/0x7d0 [ 356.643802] ? ion_dma_buf_release+0x40/0x40 [ 356.643815] ? __might_fault+0x177/0x1b0 [ 356.643827] ion_ioctl+0xef/0x1f8 [ 356.643834] ? ion_alloc.cold+0x3d/0x3d [ 356.643847] ? selinux_file_ioctl+0x3f7/0x560 [ 356.643857] ? ion_alloc.cold+0x3d/0x3d [ 356.652599] Normal free:470380kB min:53612kB low:67012kB high:80412kB active_anon:144kB inactive_anon:4kB active_file:556kB inactive_file:2084kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:656kB local_pcp:0kB free_cma:0kB [ 356.652898] do_vfs_ioctl+0x75a/0xfe0 [ 356.663918] lowmem_reserve[]: [ 356.667095] ? selinux_file_mprotect+0x5c0/0x5c0 [ 356.667108] ? ioctl_preallocate+0x1a0/0x1a0 [ 356.667116] ? _copy_to_user+0x82/0xd0 [ 356.667128] ? put_timespec64+0xaa/0xf0 [ 356.667138] ? nsecs_to_jiffies+0x30/0x30 [ 356.681109] 0 [ 356.684558] ? security_file_ioctl+0x76/0xb0 [ 356.684566] ? security_file_ioctl+0x83/0xb0 [ 356.684576] SyS_ioctl+0x7f/0xb0 [ 356.684586] ? do_vfs_ioctl+0xfe0/0xfe0 [ 356.684597] do_syscall_64+0x1d5/0x640 [ 356.684612] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 356.693917] 0 [ 356.697632] RIP: 0033:0x45c4a9 [ 356.697637] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.697645] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 356.697650] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 356.697655] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 356.697658] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 356.697662] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 356.859311] 0 0 0 [ 356.870124] Node 0 DMA: 32*4kB (UE) 14*8kB (UE) 5*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10496kB [ 356.885897] Node 0 DMA32: 10979*4kB (UM) 3775*8kB (UME) 2223*16kB (UME) 1713*32kB (UME) 362*64kB (UM) 13*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 189332kB [ 356.901925] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 356.915086] Node 1 Normal: 21234*4kB (UE) 14922*8kB (U) 9530*16kB (UE) 6097*32kB (U) 453*64kB (U) 9*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 582040kB [ 356.933829] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.943789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 356.958288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.975802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 356.995785] 2462 total pagecache pages [ 357.001460] 0 pages in swap cache [ 357.009806] team0 (unregistering): Port device team_slave_1 removed [ 357.019914] Swap cache stats: add 0, delete 0, find 0/0 [ 357.033921] Free swap = 0kB [ 357.037885] team0 (unregistering): Port device team_slave_0 removed [ 357.044612] Total swap = 0kB [ 357.047717] 1965979 pages RAM [ 357.058665] 0 pages HighMem/MovableOnly [ 357.064949] 339049 pages reserved [ 357.064997] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 357.079492] 0 pages cma reserved [ 357.126877] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 357.228535] bond0 (unregistering): Released all slaves 2020/03/09 18:33:50 result: hanged=false err=executor 5: failed to write control pipe: write |1: broken pipe [ 357.982450] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 358.023160] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 358.028598] CPU: 0 PID: 8005 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 358.036493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.045951] Call Trace: [ 358.048568] dump_stack+0x13e/0x194 [ 358.052219] dump_header+0x178/0x6d4 [ 358.055949] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 358.060985] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 358.066116] ? ___ratelimit+0x50/0x519 [ 358.070218] oom_kill_process.cold+0x10/0xae3 [ 358.074738] ? lock_acquire+0x170/0x3f0 [ 358.078741] ? lock_downgrade+0x6e0/0x6e0 [ 358.082921] out_of_memory+0x2d5/0x1110 [ 358.086922] ? oom_killer_disable+0x1c0/0x1c0 [ 358.091439] ? mutex_trylock+0x152/0x1a0 [ 358.095553] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 358.100641] ? warn_alloc+0xf0/0xf0 [ 358.104322] __alloc_pages_nodemask+0x5d3/0x700 [ 358.109106] ? lock_downgrade+0x6e0/0x6e0 [ 358.113275] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 358.118321] alloc_pages_current+0xe7/0x1e0 [ 358.122668] ion_page_pool_alloc+0x118/0x1b0 [ 358.127109] ion_system_heap_allocate+0x134/0x8d0 [ 358.131972] ? rcu_read_lock_sched_held+0x10a/0x130 [ 358.137004] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 358.141867] ? ion_system_heap_free+0x240/0x240 [ 358.146586] ion_alloc+0x1e9/0x7d0 [ 358.150147] ? ion_dma_buf_release+0x40/0x40 [ 358.155882] ? __might_fault+0x177/0x1b0 [ 358.159972] ion_ioctl+0xef/0x1f8 [ 358.163443] ? ion_alloc.cold+0x3d/0x3d [ 358.167438] ? selinux_file_ioctl+0x3f7/0x560 [ 358.171950] ? ion_alloc.cold+0x3d/0x3d [ 358.175969] do_vfs_ioctl+0x75a/0xfe0 [ 358.179801] ? selinux_file_mprotect+0x5c0/0x5c0 [ 358.184573] ? ioctl_preallocate+0x1a0/0x1a0 [ 358.189002] ? _copy_to_user+0x82/0xd0 [ 358.192908] ? put_timespec64+0xaa/0xf0 [ 358.196902] ? nsecs_to_jiffies+0x30/0x30 [ 358.201082] ? security_file_ioctl+0x76/0xb0 [ 358.205512] ? security_file_ioctl+0x83/0xb0 [ 358.209941] SyS_ioctl+0x7f/0xb0 [ 358.213327] ? do_vfs_ioctl+0xfe0/0xfe0 [ 358.217321] do_syscall_64+0x1d5/0x640 [ 358.221234] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 358.226442] RIP: 0033:0x45c4a9 [ 358.229657] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.237389] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 358.244784] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 358.252174] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 358.259488] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 358.266772] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 359.216244] Mem-Info: [ 359.218735] active_anon:6160 inactive_anon:196 isolated_anon:0 [ 359.218735] active_file:39 inactive_file:4 isolated_file:0 [ 359.218735] unevictable:0 dirty:0 writeback:0 unstable:0 [ 359.218735] slab_reclaimable:12538 slab_unreclaimable:98079 [ 359.218735] mapped:2 shmem:250 pagetables:441 bounce:0 [ 359.218735] free:24952 free_pcp:0 free_cma:0 [ 359.397750] Node 0 active_anon:24396kB inactive_anon:780kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 359.550641] Node 1 active_anon:244kB inactive_anon:4kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 359.589786] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.621929] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 359.627942] Node 0 DMA32 free:35908kB min:36272kB low:45340kB high:54408kB active_anon:24396kB inactive_anon:780kB active_file:92kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1724kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 359.662645] lowmem_reserve[]: 0 0 0 0 0 [ 359.666742] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.707317] lowmem_reserve[]: 0 0 0 0 0 [ 359.717420] Node 1 Normal free:53456kB min:53612kB low:67012kB high:80412kB active_anon:244kB inactive_anon:4kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.766471] lowmem_reserve[]: 0 0 0 0 0 [ 359.771150] Node 0 DMA: 18*4kB (UE) 14*8kB (UE) 5*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10440kB [ 359.793560] Node 0 DMA32: 157*4kB (ME) 70*8kB (UME) 26*16kB (UME) 231*32kB (UME) 381*64kB (UME) 19*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36068kB [ 359.817246] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 359.836625] Node 1 Normal: 2*4kB (ME) 1*8kB (M) 2*16kB (ME) 615*32kB (UM) 503*64kB (U) 12*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53456kB [ 359.858507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 359.867823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 359.884195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 359.895109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 359.909778] 304 total pagecache pages [ 359.915544] 0 pages in swap cache [ 359.919063] Swap cache stats: add 0, delete 0, find 0/0 [ 359.933381] Free swap = 0kB [ 359.936795] Total swap = 0kB [ 359.942049] 1965979 pages RAM [ 359.945202] 0 pages HighMem/MovableOnly [ 359.949785] 339049 pages reserved [ 359.955366] 0 pages cma reserved [ 359.959634] Out of memory: Kill process 8004 (syz-executor.1) score 999 or sacrifice child [ 359.969971] Killed process 8004 (syz-executor.1) total-vm:39752kB, anon-rss:88kB, file-rss:0kB, shmem-rss:0kB [ 360.006841] oom_reaper: reaped process 8004 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 360.022378] syz-execprog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 360.036671] syz-execprog cpuset=/ mems_allowed=0-1 [ 360.058485] CPU: 1 PID: 7581 Comm: syz-execprog Not tainted 4.14.172-syzkaller #0 [ 360.066192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.075648] Call Trace: [ 360.078256] dump_stack+0x13e/0x194 [ 360.082198] dump_header+0x178/0x6d4 [ 360.085950] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 360.091004] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 360.096154] ? ___ratelimit+0x50/0x519 [ 360.100075] oom_kill_process.cold+0x10/0xae3 [ 360.104579] ? lock_acquire+0x170/0x3f0 [ 360.108547] ? lock_downgrade+0x6e0/0x6e0 [ 360.112712] out_of_memory+0x2d5/0x1110 [ 360.117022] ? oom_killer_disable+0x1c0/0x1c0 [ 360.121553] ? mutex_trylock+0x152/0x1a0 [ 360.125605] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 360.130510] ? warn_alloc+0xf0/0xf0 [ 360.134308] __alloc_pages_nodemask+0x5d3/0x700 [ 360.138992] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 360.144052] ? lock_downgrade+0x6e0/0x6e0 [ 360.148221] alloc_pages_current+0xe7/0x1e0 [ 360.152638] __page_cache_alloc+0x245/0x3d0 [ 360.156976] filemap_fault+0xc21/0x1c30 [ 360.161036] ? __lock_page_or_retry+0x8a0/0x8a0 [ 360.165712] ? lock_acquire+0x170/0x3f0 [ 360.170343] ? ext4_filemap_fault+0x7c/0xb0 [ 360.174675] ext4_filemap_fault+0x84/0xb0 [ 360.179198] __do_fault+0xfa/0x380 [ 360.182880] __handle_mm_fault+0x22e9/0x3280 [ 360.187307] ? copy_page_range+0x1d70/0x1d70 [ 360.191913] ? find_held_lock+0x2d/0x110 [ 360.195973] handle_mm_fault+0x288/0x7a0 [ 360.200043] __do_page_fault+0x4bc/0xb40 [ 360.204106] ? vmalloc_fault+0xdf0/0xdf0 [ 360.208176] ? do_page_fault+0x60/0x4f2 [ 360.212157] ? page_fault+0x2f/0x50 [ 360.215774] page_fault+0x45/0x50 [ 360.219215] RIP: 0002:0xc4200630e0 [ 360.222741] RSP: 3b987a67:000000c42002b6e8 EFLAGS: 60a208863b [ 360.231288] syz-executor.1: [ 360.231711] Mem-Info: [ 360.237257] page allocation failure: order:0 [ 360.245939] active_anon:6146 inactive_anon:196 isolated_anon:0 [ 360.245939] active_file:15 inactive_file:15 isolated_file:0 [ 360.245939] unevictable:0 dirty:0 writeback:0 unstable:0 [ 360.245939] slab_reclaimable:12538 slab_unreclaimable:98079 [ 360.245939] mapped:2 shmem:250 pagetables:441 bounce:0 [ 360.245939] free:13814 free_pcp:97 free_cma:0 [ 360.251469] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 360.290718] Node 0 active_anon:24340kB inactive_anon:780kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 360.291837] (null) [ 360.297883] Node 1 active_anon:244kB inactive_anon:4kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 360.339641] syz-executor.1 cpuset= [ 360.358950] Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.366713] syz1 [ 360.394508] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 360.401747] Node 0 DMA32 free:18120kB min:36272kB low:45340kB high:54408kB active_anon:24340kB inactive_anon:780kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1724kB bounce:0kB free_pcp:236kB local_pcp:200kB free_cma:0kB [ 360.403117] mems_allowed=0-1 [ 360.434385] lowmem_reserve[]: 0 0 0 0 0 [ 360.438390] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.447461] CPU: 0 PID: 8004 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 360.468043] lowmem_reserve[]: [ 360.472178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.472184] Call Trace: [ 360.472212] dump_stack+0x13e/0x194 [ 360.472224] warn_alloc.cold+0x96/0x1af [ 360.472232] ? zone_watermark_ok_safe+0x280/0x280 [ 360.472241] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 360.472257] __alloc_pages_slowpath+0x2114/0x26c0 [ 360.472338] ? warn_alloc+0xf0/0xf0 [ 360.475461] 0 [ 360.484870] __alloc_pages_nodemask+0x5d3/0x700 [ 360.484887] ? lock_downgrade+0x6e0/0x6e0 [ 360.484893] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 360.484906] ? retint_kernel+0x2d/0x2d [ 360.484917] alloc_pages_current+0xe7/0x1e0 [ 360.484931] ion_page_pool_alloc+0x118/0x1b0 [ 360.484940] ion_system_heap_allocate+0x134/0x8d0 [ 360.484951] ? rcu_read_lock_sched_held+0x10a/0x130 [ 360.484958] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 360.484965] ? ion_system_heap_free+0x240/0x240 [ 360.484977] ion_alloc+0x1e9/0x7d0 [ 360.484994] ? ion_dma_buf_release+0x40/0x40 [ 360.491575] 0 [ 360.495341] ? __might_fault+0x177/0x1b0 [ 360.500274] 0 [ 360.505409] ion_ioctl+0xef/0x1f8 [ 360.514778] 0 [ 360.516368] ? ion_alloc.cold+0x3d/0x3d [ 360.521120] 0 [ 360.525354] ? selinux_file_ioctl+0x3f7/0x560 [ 360.534498] ? ion_alloc.cold+0x3d/0x3d [ 360.538816] Node 1 [ 360.543279] do_vfs_ioctl+0x75a/0xfe0 [ 360.543300] ? selinux_file_mprotect+0x5c0/0x5c0 [ 360.543308] ? ioctl_preallocate+0x1a0/0x1a0 [ 360.543317] ? _copy_to_user+0x82/0xd0 [ 360.543327] ? put_timespec64+0xaa/0xf0 [ 360.543334] ? nsecs_to_jiffies+0x30/0x30 [ 360.543345] ? security_file_ioctl+0x76/0xb0 [ 360.543351] ? security_file_ioctl+0x83/0xb0 [ 360.543362] SyS_ioctl+0x7f/0xb0 [ 360.548325] Normal free:26796kB min:53612kB low:67012kB high:80412kB active_anon:244kB inactive_anon:4kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:40kB bounce:0kB free_pcp:156kB local_pcp:36kB free_cma:0kB [ 360.553350] ? do_vfs_ioctl+0xfe0/0xfe0 [ 360.553363] do_syscall_64+0x1d5/0x640 [ 360.553377] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 360.553386] RIP: 0033:0x45c4a9 [ 360.553390] RSP: 002b:00007ffe964353d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.553397] RAX: ffffffffffffffda RBX: 00000000014f8914 RCX: 000000000045c4a9 [ 360.553401] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 360.553405] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 360.553409] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 360.553413] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 360.568589] warn_alloc_show_mem: 2 callbacks suppressed [ 360.568593] Mem-Info: [ 360.574698] lowmem_reserve[]: [ 360.586338] active_anon:6146 inactive_anon:196 isolated_anon:0 [ 360.586338] active_file:15 inactive_file:15 isolated_file:0 [ 360.586338] unevictable:0 dirty:0 writeback:0 unstable:0 [ 360.586338] slab_reclaimable:12538 slab_unreclaimable:98079 [ 360.586338] mapped:2 shmem:250 pagetables:441 bounce:0 [ 360.586338] free:13814 free_pcp:94 free_cma:0 [ 360.588525] 0 [ 360.596698] Node 0 active_anon:24340kB inactive_anon:780kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 360.601961] 0 [ 360.609377] Node 1 active_anon:244kB inactive_anon:4kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 360.609836] 0 [ 360.621695] Node 0 [ 360.624997] 0 [ 360.626393] DMA free:10340kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.630853] 0 [ 360.630862] Node 0 DMA: 1*4kB (E) 10*8kB (UE) 5*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10340kB [ 360.630939] Node 0 DMA32: 158*4kB (UME) 82*8kB (UME) 26*16kB (UME) 23*32kB [ 360.647435] lowmem_reserve[]: [ 360.671964] (UME) [ 360.682678] 0 [ 360.684682] 204*64kB [ 360.697749] 2557 [ 360.703771] (UME) [ 360.712537] 2557 [ 360.716437] 19*128kB [ 360.731933] 2557 [ 360.739973] (UME) [ 360.750140] 2557 [ 360.781978] 1*256kB [ 360.832204] (M) [ 360.848191] Node 0 [ 360.868811] 0*512kB [ 360.887134] DMA32 free:18120kB min:36272kB low:45340kB high:54408kB active_anon:24340kB inactive_anon:780kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1724kB bounce:0kB free_pcp:216kB local_pcp:20kB free_cma:0kB [ 360.896915] 0*1024kB [ 360.903779] lowmem_reserve[]: [ 360.905338] 0*2048kB [ 360.907400] 0 0 [ 360.909555] 0*4096kB [ 360.916122] 0 [ 360.924571] = 18184kB [ 360.955065] 0 [ 360.964863] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 360.967945] 0 [ 360.986616] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.987493] Node 1 [ 361.018986] lowmem_reserve[]: 0 0 0 0 0 [ 361.021385] Normal: [ 361.025303] Node 1 [ 361.025307] 3*4kB (UME) [ 361.027643] Normal free:26796kB min:53612kB low:67012kB high:80412kB active_anon:244kB inactive_anon:4kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:40kB bounce:0kB free_pcp:156kB local_pcp:120kB free_cma:0kB [ 361.029896] 2*8kB [ 361.038883] lowmem_reserve[]: [ 361.061233] (UM) 3*16kB (UME) 1*32kB (M) 393*64kB (U) 12*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26796kB [ 361.077736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.078235] 0 [ 361.087068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 361.097698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.099881] 0 [ 361.106667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 361.106674] 280 total pagecache pages [ 361.122087] 0 pages in swap cache [ 361.124018] 0 [ 361.125749] Swap cache stats: add 0, delete 0, find 0/0 [ 361.125758] Free swap = 0kB [ 361.127568] 0 0 [ 361.133008] Total swap = 0kB [ 361.133018] 1965979 pages RAM [ 361.133021] 0 pages HighMem/MovableOnly [ 361.133024] 339049 pages reserved [ 361.133027] 0 pages cma reserved [ 361.133035] Out of memory: Kill process 8005 (syz-executor.4) score 999 or sacrifice child [ 361.133060] Killed process 8005 (syz-executor.4) total-vm:39752kB, anon-rss:88kB, file-rss:0kB, shmem-rss:0kB [ 361.160350] oom_reaper: reaped process 8005 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 361.186714] Node 0 DMA: 1*4kB (E) 10*8kB (UE) 5*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10340kB [ 361.204292] Node 0 DMA32: 157*4kB (ME) 69*8kB (ME) 25*16kB (ME) 23*32kB (UME) 204*64kB (UME) 19*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18060kB [ 361.219341] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 361.223558] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 361.240721] Node 1 [ 361.245119] (null) [ 361.271934] Normal: 3*4kB (UME) 2*8kB (UM) 3*16kB (UME) 1*32kB (M) 393*64kB (U) 12*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26796kB [ 361.289618] , order=0, oom_score_adj=0 [ 361.297365] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 361.309528] CPU: 1 PID: 7916 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 361.317368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.321390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.326742] Call Trace: [ 361.335791] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 361.338222] dump_stack+0x13e/0x194 [ 361.346837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.350423] dump_header+0x178/0x6d4 [ 361.350436] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 361.350448] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 361.360824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 361.364509] ? ___ratelimit+0x50/0x519 [ 361.369529] 280 total pagecache pages [ 361.374661] oom_kill_process.cold+0x10/0xae3 [ 361.374676] ? lock_acquire+0x170/0x3f0 [ 361.374683] ? lock_downgrade+0x6e0/0x6e0 [ 361.374699] out_of_memory+0x2d5/0x1110 [ 361.383321] 0 pages in swap cache [ 361.388481] ? oom_killer_disable+0x1c0/0x1c0 [ 361.394134] Swap cache stats: add 0, delete 0, find 0/0 [ 361.398597] ? mutex_trylock+0x152/0x1a0 [ 361.402635] Free swap = 0kB [ 361.406776] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 361.410796] Total swap = 0kB [ 361.414489] ? warn_alloc+0xf0/0xf0 [ 361.420857] 1965979 pages RAM [ 361.426477] __alloc_pages_nodemask+0x5d3/0x700 [ 361.430692] 0 pages HighMem/MovableOnly [ 361.434042] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 361.439276] 339049 pages reserved [ 361.442608] ? lock_downgrade+0x6e0/0x6e0 [ 361.442628] alloc_pages_current+0xe7/0x1e0 [ 361.442643] __page_cache_alloc+0x245/0x3d0 [ 361.442653] filemap_fault+0xc21/0x1c30 [ 361.442670] ? __lock_page_or_retry+0x8a0/0x8a0 [ 361.446301] 0 pages cma reserved [ 361.449429] ? lock_acquire+0x170/0x3f0 [ 361.499128] ? ext4_filemap_fault+0x7c/0xb0 [ 361.503491] ext4_filemap_fault+0x84/0xb0 [ 361.507659] __do_fault+0xfa/0x380 [ 361.511244] __handle_mm_fault+0x22e9/0x3280 [ 361.515689] ? copy_page_range+0x1d70/0x1d70 [ 361.522233] ? find_held_lock+0x2d/0x110 [ 361.526349] handle_mm_fault+0x288/0x7a0 [ 361.531561] __do_page_fault+0x4bc/0xb40 [ 361.535642] ? vmalloc_fault+0xdf0/0xdf0 [ 361.539717] ? do_page_fault+0x60/0x4f2 [ 361.543704] ? page_fault+0x2f/0x50 [ 361.547362] page_fault+0x45/0x50 [ 361.550842] RIP: 96435640:0x56adc [ 361.554317] RSP: 56b00:0000000000000004 EFLAGS: 00000003 [ 361.560104] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 361.579134] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 361.579636] Mem-Info: [ 361.584605] CPU: 1 PID: 8005 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 361.584611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.584615] Call Trace: [ 361.584637] dump_stack+0x13e/0x194 [ 361.584649] warn_alloc.cold+0x96/0x1af [ 361.584657] ? zone_watermark_ok_safe+0x280/0x280 [ 361.584665] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 361.584682] __alloc_pages_slowpath+0x2114/0x26c0 [ 361.584703] ? warn_alloc+0xf0/0xf0 [ 361.584724] __alloc_pages_nodemask+0x5d3/0x700 [ 361.584736] ? lock_downgrade+0x6e0/0x6e0 [ 361.584753] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 361.584773] alloc_pages_current+0xe7/0x1e0 [ 361.584787] ion_page_pool_alloc+0x118/0x1b0 [ 361.584797] ion_system_heap_allocate+0x134/0x8d0 [ 361.584807] ? rcu_read_lock_sched_held+0x10a/0x130 [ 361.584817] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 361.584825] ? ion_system_heap_free+0x240/0x240 [ 361.584837] ion_alloc+0x1e9/0x7d0 [ 361.584850] ? ion_dma_buf_release+0x40/0x40 [ 361.584864] ? __might_fault+0x177/0x1b0 [ 361.584875] ion_ioctl+0xef/0x1f8 [ 361.584884] ? ion_alloc.cold+0x3d/0x3d [ 361.584898] ? selinux_file_ioctl+0x3f7/0x560 [ 361.584905] ? ion_alloc.cold+0x3d/0x3d [ 361.584916] do_vfs_ioctl+0x75a/0xfe0 [ 361.584925] ? selinux_file_mprotect+0x5c0/0x5c0 [ 361.584934] ? ioctl_preallocate+0x1a0/0x1a0 [ 361.584944] ? _copy_to_user+0x82/0xd0 [ 361.584956] ? put_timespec64+0xaa/0xf0 [ 361.584964] ? nsecs_to_jiffies+0x30/0x30 [ 361.584976] ? security_file_ioctl+0x76/0xb0 [ 361.584983] ? security_file_ioctl+0x83/0xb0 [ 361.584993] SyS_ioctl+0x7f/0xb0 [ 361.605073] active_anon:6146 inactive_anon:196 isolated_anon:0 [ 361.605073] active_file:37 inactive_file:193 isolated_file:0 [ 361.605073] unevictable:0 dirty:0 writeback:0 unstable:0 [ 361.605073] slab_reclaimable:12538 slab_unreclaimable:98063 [ 361.605073] mapped:102 shmem:250 pagetables:441 bounce:0 [ 361.605073] free:30031 free_pcp:369 free_cma:0 [ 361.607277] ? do_vfs_ioctl+0xfe0/0xfe0 [ 361.607292] do_syscall_64+0x1d5/0x640 [ 361.607308] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 361.607317] RIP: 0033:0x45c4a9 [ 361.607325] RSP: 002b:00007ffd9857de08 EFLAGS: 00000246 [ 361.635731] Node 0 active_anon:24340kB inactive_anon:780kB active_file:140kB inactive_file:2652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1608kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 361.638286] ORIG_RAX: 0000000000000010 [ 361.638292] RAX: ffffffffffffffda RBX: 0000000002209914 RCX: 000000000045c4a9 [ 361.638297] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 361.638301] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 361.638305] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 361.638311] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 361.639723] Mem-Info: [ 361.664354] Node 1 active_anon:244kB inactive_anon:4kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 361.667414] active_anon:6146 inactive_anon:196 isolated_anon:0 [ 361.667414] active_file:37 inactive_file:693 isolated_file:0 [ 361.667414] unevictable:0 dirty:0 writeback:0 unstable:0 [ 361.667414] slab_reclaimable:12538 slab_unreclaimable:98063 [ 361.667414] mapped:477 shmem:250 pagetables:441 bounce:0 [ 361.667414] free:33140 free_pcp:433 free_cma:0 [ 361.687241] Node 0 [ 361.690285] Node 0 active_anon:24340kB inactive_anon:780kB active_file:140kB inactive_file:2852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2008kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 361.711822] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.720571] Node 1 active_anon:244kB inactive_anon:4kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 361.752828] lowmem_reserve[]: [ 361.778605] Node 0 [ 361.846372] syz-executor.1: [ 361.877089] DMA free:10376kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.908202] 0 [ 361.933811] lowmem_reserve[]: [ 361.978524] page allocation failure: order:4 [ 362.009983] 0 [ 362.014928] 2557 [ 362.018990] 2557 [ 362.020813] 2557 2557 2557 [ 362.020826] Node 0 DMA32 free:32424kB min:36272kB low:45340kB high:54408kB active_anon:24340kB inactive_anon:780kB active_file:108kB inactive_file:4kB unevictable:0kB writepending:148kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1724kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.020851] lowmem_reserve[]: [ 362.056327] 2557 [ 362.058020] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 362.059884] 2557 [ 362.062025] (null) [ 362.062032] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 362.062054] CPU: 0 PID: 8004 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 362.062061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.066931] 2557 [ 362.095128] Call Trace: [ 362.095155] dump_stack+0x13e/0x194 [ 362.095167] warn_alloc.cold+0x96/0x1af [ 362.095174] ? zone_watermark_ok_safe+0x280/0x280 [ 362.095189] ? __alloc_pages_direct_compact+0xba/0x360 [ 362.095198] __alloc_pages_slowpath+0x2114/0x26c0 [ 362.095218] ? save_trace+0x290/0x290 [ 362.095232] ? warn_alloc+0xf0/0xf0 [ 362.095252] __alloc_pages_nodemask+0x5d3/0x700 [ 362.095261] ? lock_downgrade+0x6e0/0x6e0 [ 362.095269] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 362.095280] ? find_held_lock+0x2d/0x110 [ 362.095292] alloc_pages_current+0xe7/0x1e0 [ 362.095304] ion_page_pool_alloc+0x118/0x1b0 [ 362.095313] ion_system_heap_allocate+0x134/0x8d0 [ 362.095324] ? _ion_heap_freelist_drain+0x6e/0x410 [ 362.095332] ? ion_system_heap_free+0x240/0x240 [ 362.095345] ion_alloc+0x611/0x7d0 [ 362.095358] ? ion_dma_buf_release+0x40/0x40 [ 362.095370] ? __might_fault+0x177/0x1b0 [ 362.095382] ion_ioctl+0xef/0x1f8 [ 362.095389] ? ion_alloc.cold+0x3d/0x3d [ 362.095401] ? selinux_file_ioctl+0x3f7/0x560 [ 362.095408] ? ion_alloc.cold+0x3d/0x3d [ 362.095418] do_vfs_ioctl+0x75a/0xfe0 [ 362.095432] ? selinux_file_mprotect+0x5c0/0x5c0 [ 362.095441] ? ioctl_preallocate+0x1a0/0x1a0 [ 362.095449] ? _copy_to_user+0x82/0xd0 [ 362.095458] ? put_timespec64+0xaa/0xf0 [ 362.095465] ? nsecs_to_jiffies+0x30/0x30 [ 362.095476] ? security_file_ioctl+0x76/0xb0 [ 362.095482] ? security_file_ioctl+0x83/0xb0 [ 362.095491] SyS_ioctl+0x7f/0xb0 [ 362.095498] ? do_vfs_ioctl+0xfe0/0xfe0 [ 362.095509] do_syscall_64+0x1d5/0x640 [ 362.095523] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 362.095531] RIP: 0033:0x45c4a9 [ 362.095536] RSP: 002b:00007ffe964353d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.095545] RAX: ffffffffffffffda RBX: 00000000014f8914 RCX: 000000000045c4a9 [ 362.095550] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 362.095554] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 362.095559] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 362.095563] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 362.097208] 0 [ 362.113230] 0 [ 362.118576] Node 0 [ 362.125788] 0 0 0 [ 362.125803] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.125824] lowmem_reserve[]: 0 0 [ 362.145366] DMA32 free:32948kB min:36272kB low:45340kB high:54408kB active_anon:24380kB inactive_anon:780kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1724kB bounce:0kB free_pcp:180kB local_pcp:4kB free_cma:0kB [ 362.170110] 0 [ 362.180168] lowmem_reserve[]: [ 362.200110] 0 [ 362.212265] 0 [ 362.227207] 0 [ 362.237295] 0 [ 362.272055] 0 [ 362.293405] Node 1 [ 362.314700] 0 [ 362.346687] Normal free:26692kB min:53612kB low:67012kB high:80412kB active_anon:252kB inactive_anon:4kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:40kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 362.374606] 0 [ 362.378068] syz-executor.1: [ 362.412873] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.412897] lowmem_reserve[]: [ 362.430094] lowmem_reserve[]: [ 362.459933] 0 [ 362.495493] page allocation failure: order:0 [ 362.496715] 0 [ 362.497360] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 362.505558] 0 [ 362.516355] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 362.524549] 0 0 [ 362.525669] 0 0 [ 362.526556] Node 1 Normal free:26692kB min:53612kB low:67012kB high:80412kB active_anon:252kB inactive_anon:4kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:40kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 362.528532] 0 [ 362.561420] CPU: 0 PID: 8004 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 362.567380] lowmem_reserve[]: [ 362.571250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.571255] Call Trace: [ 362.571287] dump_stack+0x13e/0x194 [ 362.571300] warn_alloc.cold+0x96/0x1af [ 362.571308] ? zone_watermark_ok_safe+0x280/0x280 [ 362.571317] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 362.571334] __alloc_pages_slowpath+0x2114/0x26c0 [ 362.571351] ? warn_alloc+0xf0/0xf0 [ 362.571368] __alloc_pages_nodemask+0x5d3/0x700 [ 362.571382] ? lock_downgrade+0x6e0/0x6e0 [ 362.571389] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 362.571406] alloc_pages_current+0xe7/0x1e0 [ 362.571419] ion_page_pool_alloc+0x118/0x1b0 [ 362.571427] ion_system_heap_allocate+0x134/0x8d0 [ 362.571437] ? _ion_heap_freelist_drain+0x6e/0x410 [ 362.571445] ? ion_system_heap_free+0x240/0x240 [ 362.571456] ion_alloc+0x611/0x7d0 [ 362.571469] ? ion_dma_buf_release+0x40/0x40 [ 362.577991] 0 [ 362.584097] ? __might_fault+0x177/0x1b0 [ 362.584113] ion_ioctl+0xef/0x1f8 [ 362.584123] ? ion_alloc.cold+0x3d/0x3d [ 362.584136] ? selinux_file_ioctl+0x3f7/0x560 [ 362.584141] ? ion_alloc.cold+0x3d/0x3d [ 362.584151] do_vfs_ioctl+0x75a/0xfe0 [ 362.584158] ? selinux_file_mprotect+0x5c0/0x5c0 [ 362.584166] ? ioctl_preallocate+0x1a0/0x1a0 [ 362.584176] ? _copy_to_user+0x82/0xd0 [ 362.584187] ? put_timespec64+0xaa/0xf0 [ 362.584195] ? nsecs_to_jiffies+0x30/0x30 [ 362.584207] ? security_file_ioctl+0x76/0xb0 [ 362.584214] ? security_file_ioctl+0x83/0xb0 [ 362.584223] SyS_ioctl+0x7f/0xb0 [ 362.584230] ? do_vfs_ioctl+0xfe0/0xfe0 [ 362.584241] do_syscall_64+0x1d5/0x640 [ 362.584255] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 362.597102] 0 [ 362.599326] RIP: 0033:0x45c4a9 [ 362.606423] 0 [ 362.609314] RSP: 002b:00007ffe964353d8 EFLAGS: 00000246 [ 362.623096] 0 [ 362.627222] ORIG_RAX: 0000000000000010 [ 362.638265] 0 [ 362.640818] RAX: ffffffffffffffda RBX: 00000000014f8914 RCX: 000000000045c4a9 [ 362.640823] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 362.640827] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 362.640831] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 362.640835] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 362.650915] warn_alloc_show_mem: 1 callbacks suppressed [ 362.650931] Mem-Info: [ 362.650951] active_anon:6158 inactive_anon:196 isolated_anon:0 [ 362.650951] active_file:40 inactive_file:0 isolated_file:0 [ 362.650951] unevictable:0 dirty:0 writeback:0 unstable:0 [ 362.650951] slab_reclaimable:12548 slab_unreclaimable:98040 [ 362.650951] mapped:2 shmem:250 pagetables:441 bounce:0 [ 362.650951] free:13778 free_pcp:59 free_cma:0 [ 362.650967] Node 0 active_anon:24380kB inactive_anon:780kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 362.659985] 0 [ 362.670322] Node 1 active_anon:252kB inactive_anon:4kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 362.678091] 0 [ 362.689717] Node 0 [ 362.694573] DMA free:10336kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.694578] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 362.694601] Node 0 [ 362.735209] DMA32 free:18084kB min:36272kB low:45340kB high:54408kB active_anon:24380kB inactive_anon:780kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6976kB pagetables:1724kB bounce:0kB free_pcp:116kB local_pcp:108kB free_cma:0kB [ 362.743726] Node 0 [ 362.750287] lowmem_reserve[]: [ 362.751704] DMA: [ 362.753602] 0 [ 362.766504] 8*4kB [ 362.796490] 0 [ 362.802227] Node 0 [ 362.887272] 0 [ 362.892199] (UE) 14*8kB (UE) 5*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10336kB [ 362.909356] 0 [ 362.926297] Node 0 DMA32: 40*4kB (UME) 33*8kB (UME) 373*16kB (UME) 334*32kB (UME) 6*64kB [ 362.947533] 0 [ 362.962799] DMA: [ 362.993617] (M) 5*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18104kB [ 362.993654] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 363.010141] Node 0 [ 363.010780] 0*32kB [ 363.018293] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.023468] 8*4kB (UE) 14*8kB (UE) 5*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10336kB [ 363.023537] Node 0 DMA32: 40*4kB (UME) 33*8kB (UME) 373*16kB (UME) 334*32kB (UME) 6*64kB (M) 5*128kB (M) [ 363.040171] lowmem_reserve[]: [ 363.062879] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 363.092546] 0 [ 363.097823] Node 1 [ 363.097826] 0 0 [ 363.099642] Normal: 67*4kB [ 363.103968] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18104kB [ 363.113274] (UME) 439*8kB (UM) 568*16kB (UE) 426*32kB (UM) 1*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26692kB [ 363.115359] 0 [ 363.125828] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 363.138826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.139211] 0 [ 363.149801] Node 1 Normal: 67*4kB (UME) 439*8kB (UM) 568*16kB (UE) 426*32kB (UM) 1*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26692kB [ 363.149870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.149879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 363.175458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 363.175467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.175472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 363.175477] 279 total pagecache pages [ 363.175488] 0 pages in swap cache [ 363.175493] Swap cache stats: add 0, delete 0, find 0/0 [ 363.175497] Free swap = 0kB [ 363.175501] Total swap = 0kB [ 363.175508] 1965979 pages RAM [ 363.175511] 0 pages HighMem/MovableOnly [ 363.175515] 339049 pages reserved [ 363.175518] 0 pages cma reserved [ 363.175526] Out of memory: Kill process 8006 (syz-executor.3) score 999 or sacrifice child [ 363.175548] Killed process 8006 (syz-executor.3) total-vm:39752kB, anon-rss:88kB, file-rss:0kB, shmem-rss:0kB [ 363.219411] Node 1 [ 363.224406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.224415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 363.246109] Normal free:26692kB min:53612kB low:67012kB high:80412kB active_anon:252kB inactive_anon:4kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:40kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 363.253168] 279 total pagecache pages [ 363.286211] lowmem_reserve[]: [ 363.320411] oom_reaper: reaped process 8006 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 363.328519] syz-executor.3: [ 363.334464] 0 pages in swap cache [ 363.335809] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 363.337502] Swap cache stats: add 0, delete 0, find 0/0 [ 363.351371] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 363.357237] Free swap = 0kB [ 363.370464] Total swap = 0kB [ 363.374716] 1965979 pages RAM [ 363.377820] 0 pages HighMem/MovableOnly [ 363.378611] 0 0 0 0 0 [ 363.384504] (null) [ 363.385086] Node 0 [ 363.385090] , order=0, oom_score_adj=0 [ 363.385096] rsyslogd cpuset= [ 363.387264] DMA: 8*4kB (UE) [ 363.389600] / [ 363.393633] syz-executor.3 cpuset= [ 363.399656] 339049 pages reserved [ 363.408727] 0 pages cma reserved [ 363.410555] 14*8kB (UE) 5*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10336kB [ 363.416515] mems_allowed=0-1 [ 363.450508] syz3 mems_allowed=0-1 [ 363.456401] CPU: 0 PID: 8006 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 363.464226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.473801] Call Trace: [ 363.476785] dump_stack+0x13e/0x194 [ 363.480535] warn_alloc.cold+0x96/0x1af [ 363.484524] ? zone_watermark_ok_safe+0x280/0x280 [ 363.489491] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 363.494705] __alloc_pages_slowpath+0x2114/0x26c0 [ 363.499580] ? warn_alloc+0xf0/0xf0 [ 363.503409] __alloc_pages_nodemask+0x5d3/0x700 [ 363.508532] ? lock_downgrade+0x6e0/0x6e0 [ 363.513315] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 363.518618] ? retint_kernel+0x2d/0x2d [ 363.523145] alloc_pages_current+0xe7/0x1e0 [ 363.527502] ion_page_pool_alloc+0x118/0x1b0 [ 363.531932] ion_system_heap_allocate+0x134/0x8d0 [ 363.536797] ? rcu_read_lock_sched_held+0x10a/0x130 [ 363.542789] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 363.547672] ? ion_system_heap_free+0x240/0x240 [ 363.552375] ion_alloc+0x1e9/0x7d0 [ 363.556376] ? ion_dma_buf_release+0x40/0x40 [ 363.561140] ? __might_fault+0x177/0x1b0 [ 363.565224] ion_ioctl+0xef/0x1f8 [ 363.569333] ? ion_alloc.cold+0x3d/0x3d [ 363.573517] ? selinux_file_ioctl+0x3f7/0x560 [ 363.578190] ? ion_alloc.cold+0x3d/0x3d [ 363.582383] do_vfs_ioctl+0x75a/0xfe0 [ 363.586218] ? selinux_file_mprotect+0x5c0/0x5c0 [ 363.591522] ? ioctl_preallocate+0x1a0/0x1a0 [ 363.596393] ? _copy_to_user+0x82/0xd0 [ 363.600398] ? put_timespec64+0xaa/0xf0 [ 363.604926] ? nsecs_to_jiffies+0x30/0x30 [ 363.609265] ? security_file_ioctl+0x76/0xb0 [ 363.615087] ? security_file_ioctl+0x83/0xb0 [ 363.619703] SyS_ioctl+0x7f/0xb0 [ 363.623783] ? do_vfs_ioctl+0xfe0/0xfe0 [ 363.627969] do_syscall_64+0x1d5/0x640 [ 363.632015] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 363.637397] RIP: 0033:0x45c4a9 [ 363.640605] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.648369] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 363.656377] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 363.663675] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 363.671141] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 363.678558] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 363.685879] CPU: 1 PID: 7432 Comm: rsyslogd Not tainted 4.14.172-syzkaller #0 [ 363.693626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.703123] Call Trace: [ 363.705530] Node 0 DMA32: [ 363.705849] dump_stack+0x13e/0x194 [ 363.705864] dump_header+0x178/0x6d4 [ 363.712812] 4*4kB [ 363.716146] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 363.716158] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 363.716166] ? ___ratelimit+0x50/0x519 [ 363.716179] oom_kill_process.cold+0x10/0xae3 [ 363.716187] ? lock_acquire+0x170/0x3f0 [ 363.716195] ? lock_downgrade+0x6e0/0x6e0 [ 363.716207] out_of_memory+0x2d5/0x1110 [ 363.716220] ? oom_killer_disable+0x1c0/0x1c0 [ 363.716231] ? mutex_trylock+0x152/0x1a0 [ 363.730146] (UME) [ 363.732415] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 363.736922] 157*8kB [ 363.740945] ? warn_alloc+0xf0/0xf0 [ 363.740965] __alloc_pages_nodemask+0x5d3/0x700 [ 363.740975] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 363.740985] ? lock_downgrade+0x6e0/0x6e0 [ 363.741001] alloc_pages_current+0xe7/0x1e0 [ 363.760099] (U) [ 363.761328] __page_cache_alloc+0x245/0x3d0 [ 363.766265] 377*16kB [ 363.768603] filemap_fault+0xc21/0x1c30 [ 363.780093] (U) [ 363.782045] ? __lock_page_or_retry+0x8a0/0x8a0 [ 363.786191] 330*32kB [ 363.790562] ? lock_acquire+0x170/0x3f0 [ 363.790573] ? ext4_filemap_fault+0x7c/0xb0 [ 363.790586] ext4_filemap_fault+0x84/0xb0 [ 363.790596] __do_fault+0xfa/0x380 [ 363.790609] __handle_mm_fault+0x22e9/0x3280 [ 363.810083] (U) [ 363.812285] ? copy_page_range+0x1d70/0x1d70 [ 363.816257] 905*64kB [ 363.820589] ? find_held_lock+0x2d/0x110 [ 363.820609] handle_mm_fault+0x288/0x7a0 [ 363.820621] __do_page_fault+0x4bc/0xb40 [ 363.820631] ? vmalloc_fault+0xdf0/0xdf0 [ 363.831476] (UE) [ 363.832866] ? do_page_fault+0x60/0x4f2 [ 363.836334] 48*128kB [ 363.840985] ? page_fault+0x2f/0x50 [ 363.840997] page_fault+0x45/0x50 [ 363.841006] RIP: 3c2f09c0:0x7fae3f395040 [ 363.841011] RSP: d314b0:0000000000000000 EFLAGS: 0065e420 [ 363.890182] Mem-Info: [ 363.895995] (UE) 26*256kB (UME) 8*512kB (UE) 27*1024kB (U) 0*2048kB 0*4096kB = 120328kB [ 363.906676] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 363.920240] active_anon:5758 inactive_anon:196 isolated_anon:0 [ 363.920240] active_file:90 inactive_file:437 isolated_file:0 [ 363.920240] unevictable:0 dirty:0 writeback:0 unstable:0 [ 363.920240] slab_reclaimable:12546 slab_unreclaimable:97665 [ 363.920240] mapped:202 shmem:250 pagetables:441 bounce:0 [ 363.920240] free:220186 free_pcp:370 free_cma:0 [ 363.922766] Node 1 Normal: 67*4kB (UME) 439*8kB (UM) 568*16kB (UE) 426*32kB (UM) 6035*64kB (UM) 337*128kB (U) 112*256kB (U) 19*512kB (U) 181*1024kB (U) 18*2048kB (U) 0*4096kB = 716484kB [ 364.020699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.029708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 364.030221] Node 0 active_anon:22780kB inactive_anon:780kB active_file:344kB inactive_file:1736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:808kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 364.070189] Node 1 active_anon:252kB inactive_anon:4kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 364.072755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.097496] Node 0 [ 364.106088] Mem-Info: [ 364.110824] active_anon:5720 inactive_anon:196 isolated_anon:0 [ 364.110824] active_file:96 inactive_file:445 isolated_file:0 [ 364.110824] unevictable:0 dirty:0 writeback:0 unstable:0 [ 364.110824] slab_reclaimable:12551 slab_unreclaimable:97693 [ 364.110824] mapped:233 shmem:250 pagetables:425 bounce:0 [ 364.110824] free:253725 free_pcp:684 free_cma:0 [ 364.132785] DMA free:10900kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.150109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 364.190187] 792 total pagecache pages [ 364.201724] IPVS: ftp: loaded support on port[0] = 21 [ 364.210148] 0 pages in swap cache [ 364.212760] lowmem_reserve[]: [ 364.213840] Swap cache stats: add 0, delete 0, find 0/0 [ 364.213848] Free swap = 0kB [ 364.216964] 0 [ 364.230151] Node 0 active_anon:22644kB inactive_anon:780kB active_file:368kB inactive_file:1768kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:932kB dirty:0kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 364.252809] 2557 2557 2557 2557 [ 364.280104] Total swap = 0kB [ 364.280212] Node 0 DMA32 free:347236kB min:36272kB low:45340kB high:54408kB active_anon:22644kB inactive_anon:780kB active_file:368kB inactive_file:1768kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6944kB pagetables:1660kB bounce:0kB free_pcp:1324kB local_pcp:704kB free_cma:0kB [ 364.283203] 1965979 pages RAM [ 364.283210] 0 pages HighMem/MovableOnly [ 364.340108] Node 1 active_anon:236kB inactive_anon:4kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 364.370161] 339049 pages reserved [ 364.380111] 0 pages cma reserved [ 364.410203] Node 0 DMA free:11000kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.420112] lowmem_reserve[]: 0 0 0 0 0 [ 364.500115] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 364.505225] Node 0 DMA32 free:420756kB min:36272kB low:45340kB high:54408kB active_anon:22644kB inactive_anon:780kB active_file:368kB inactive_file:1768kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:6944kB pagetables:1660kB bounce:0kB free_pcp:1468kB local_pcp:672kB free_cma:0kB [ 364.512180] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.610089] lowmem_reserve[]: 0 0 0 0 0 [ 364.650095] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.671532] lowmem_reserve[]: 0 0 0 0 0 [ 364.701785] Node 1 Normal free:1268388kB min:53612kB low:67012kB high:80412kB active_anon:236kB inactive_anon:4kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:40kB bounce:0kB free_pcp:1320kB local_pcp:692kB free_cma:0kB [ 364.730098] lowmem_reserve[]: 0 0 0 0 0 [ 364.736436] Node 1 Normal free:1304488kB min:53612kB low:67012kB high:80412kB active_anon:236kB inactive_anon:4kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:40kB bounce:0kB free_pcp:1364kB local_pcp:660kB free_cma:0kB [ 364.765915] lowmem_reserve[]: 0 0 0 0 0 [ 364.769973] Node 0 DMA: 27*4kB (UE) 18*8kB (UE) 8*16kB (UE) 7*32kB (UE) 8*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11100kB [ 364.820087] lowmem_reserve[]: 0 0 0 0 0 [ 364.824142] Node 0 DMA: 29*4kB (UE) 18*8kB (UE) 9*16kB (UE) 6*32kB (UE) 9*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11156kB [ 364.830105] Node 0 DMA32: 7797*4kB (UME) 10224*8kB (UME) 5319*16kB (UE) 2653*32kB (UME) 1393*64kB (UME) 481*128kB (UE) 150*256kB (UME) 26*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 485412kB [ 364.890126] Node 0 DMA32: 7797*4kB (UME) 10224*8kB (UME) 5319*16kB (UE) 2653*32kB (UME) 416*64kB (UME) 481*128kB (UE) 150*256kB (UME) 26*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 422884kB [ 364.910096] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 364.940169] Node 1 Normal: 19089*4kB (UME) 14224*8kB (UM) 8607*16kB (UE) 2987*32kB (UM) 7155*64kB (U) 1800*128kB (U) 642*256kB (U) 188*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 1373396kB [ 364.950266] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 364.957633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.010228] Node 1 Normal: 19424*4kB (UME) 14412*8kB (UM) 9084*16kB (UE) 3915*32kB (UM) 7212*64kB (U) 1836*128kB (U) 647*256kB (U) 187*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 1423616kB [ 365.020093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 365.060150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.069412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 365.070973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.103323] 804 total pagecache pages [ 365.107880] 0 pages in swap cache [ 365.111813] Swap cache stats: add 0, delete 0, find 0/0 [ 365.117194] Free swap = 0kB [ 365.120511] Total swap = 0kB [ 365.123755] 1965979 pages RAM [ 365.127017] 0 pages HighMem/MovableOnly [ 365.132059] 339049 pages reserved [ 365.136164] 0 pages cma reserved [ 365.140116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 365.152865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.170138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 365.178766] 1079 total pagecache pages [ 365.195449] 0 pages in swap cache [ 365.200846] Swap cache stats: add 0, delete 0, find 0/0 [ 365.206224] Free swap = 0kB [ 365.209265] Total swap = 0kB [ 365.212669] 1965979 pages RAM [ 365.215796] 0 pages HighMem/MovableOnly [ 365.223550] 339049 pages reserved [ 365.228337] 0 pages cma reserved [ 365.232296] Out of memory: Kill process 7577 (syz-execprog) score 1 or sacrifice child [ 365.258540] Killed process 8013 (syz-executor.5) total-vm:39756kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 365.272086] IPVS: ftp: loaded support on port[0] = 21 [ 365.406499] chnl_net:caif_netlink_parms(): no params data found 2020/03/09 18:33:58 result: hanged=false err=executor 5: EOF 2020/03/09 18:33:58 executed programs: 41 [ 365.716643] chnl_net:caif_netlink_parms(): no params data found [ 365.734654] syz-executor.0: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 365.745402] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 365.751579] CPU: 0 PID: 8001 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 365.759417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.768876] Call Trace: [ 365.771519] dump_stack+0x13e/0x194 [ 365.775186] warn_alloc.cold+0x96/0x1af [ 365.779789] ? zone_watermark_ok_safe+0x280/0x280 [ 365.784661] ? wake_all_kswapds+0x178/0x380 [ 365.789461] __alloc_pages_slowpath+0x2114/0x26c0 [ 365.794375] ? __alloc_pages_slowpath+0x2114/0x26c0 [ 365.799579] ? warn_alloc+0xf0/0xf0 [ 365.803414] ? trace_hardirqs_on+0x10/0x10 [ 365.807934] __alloc_pages_nodemask+0x5d3/0x700 [ 365.812625] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 365.817665] ? find_held_lock+0x2d/0x110 [ 365.821901] cache_grow_begin+0x7b/0x410 [ 365.825997] ? __cpuset_node_allowed+0xfa/0x450 [ 365.830770] fallback_alloc+0x205/0x2b0 [ 365.834762] __kmalloc+0x214/0x7c0 [ 365.838383] ? batadv_hash_new+0xaa/0x280 [ 365.842550] ? __lockdep_init_map+0x100/0x560 [ 365.847065] batadv_hash_new+0xaa/0x280 [ 365.851124] ? batadv_v_ogm_packet_recv+0xc00/0xc00 [ 365.856234] batadv_originator_init+0x57/0x2a0 [ 365.860855] batadv_mesh_init+0x460/0x630 [ 365.865024] batadv_softif_init_late+0xa21/0xc90 [ 365.869802] ? batadv_interface_stats+0x180/0x180 [ 365.874923] ? dev_alloc_name+0x160/0x160 [ 365.879205] ? batadv_interface_stats+0x180/0x180 [ 365.884074] register_netdevice+0x286/0xc70 [ 365.888420] ? netdev_change_features+0x80/0x80 [ 365.893206] ? rtnl_create_link+0x129/0x880 [ 365.898354] rtnl_newlink+0x1469/0x1720 [ 365.902381] ? rtnl_newlink+0x3f5/0x1720 [ 365.906468] ? trace_hardirqs_on+0x10/0x10 [ 365.910822] ? rtnl_link_unregister+0x1f0/0x1f0 [ 365.915531] ? lock_acquire+0x170/0x3f0 [ 365.919638] ? lock_acquire+0x170/0x3f0 [ 365.923633] ? rtnetlink_rcv_msg+0x31d/0xb10 [ 365.928072] ? __lock_is_held+0xad/0x140 [ 365.932146] ? lock_downgrade+0x6e0/0x6e0 [ 365.936309] ? rtnl_link_unregister+0x1f0/0x1f0 [ 365.940991] rtnetlink_rcv_msg+0x3be/0xb10 [ 365.945238] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 365.949841] ? save_trace+0x290/0x290 [ 365.953662] ? save_trace+0x290/0x290 [ 365.957585] netlink_rcv_skb+0x127/0x370 [ 365.961871] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 365.966606] ? netlink_ack+0x960/0x960 [ 365.970532] netlink_unicast+0x437/0x620 [ 365.974715] ? netlink_attachskb+0x600/0x600 [ 365.979338] netlink_sendmsg+0x733/0xbe0 [ 365.983439] ? netlink_unicast+0x620/0x620 [ 365.987732] ? security_socket_sendmsg+0x83/0xb0 [ 365.992521] ? netlink_unicast+0x620/0x620 [ 365.996805] sock_sendmsg+0xc5/0x100 [ 366.000534] SYSC_sendto+0x1c4/0x2b0 [ 366.004263] ? SYSC_connect+0x250/0x250 [ 366.008278] ? __sock_create+0x6d/0x620 [ 366.012340] ? sock_map_fd+0x4e/0x70 [ 366.016071] ? SyS_socket+0x103/0x170 [ 366.019893] ? move_addr_to_kernel+0x60/0x60 [ 366.024440] ? do_syscall_64+0x4c/0x640 [ 366.029124] ? SyS_sendto+0x21/0x50 [ 366.032793] ? SyS_getpeername+0x30/0x30 [ 366.037319] do_syscall_64+0x1d5/0x640 [ 366.041248] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 366.046464] RIP: 0033:0x4161a3 [ 366.049660] RSP: 002b:00007ffec0da2b68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 366.057476] RAX: ffffffffffffffda RBX: 0000000000c82200 RCX: 00000000004161a3 [ 366.065058] RDX: 000000000000003c RSI: 0000000000c82250 RDI: 0000000000000003 [ 366.072364] RBP: 0000000000000000 R08: 00007ffec0da2b70 R09: 000000000000000c [ 366.079823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.087381] R13: 0000000000000000 R14: 0000000000c82250 R15: 0000000000000003 [ 366.095493] Mem-Info: [ 366.098040] active_anon:5743 inactive_anon:197 isolated_anon:0 [ 366.098040] active_file:812 inactive_file:1964 isolated_file:0 [ 366.098040] unevictable:0 dirty:35 writeback:0 unstable:0 [ 366.098040] slab_reclaimable:12618 slab_unreclaimable:99104 [ 366.098040] mapped:1701 shmem:250 pagetables:430 bounce:0 [ 366.098040] free:189400 free_pcp:632 free_cma:0 [ 366.131576] Node 0 active_anon:22872kB inactive_anon:784kB active_file:3236kB inactive_file:7840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6804kB dirty:136kB writeback:0kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 366.159303] Node 1 active_anon:100kB inactive_anon:4kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 366.185373] Node 0 DMA free:10364kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 366.211521] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 366.216614] Node 0 DMA32 free:237544kB min:36272kB low:45340kB high:54408kB active_anon:22872kB inactive_anon:784kB active_file:3236kB inactive_file:7840kB unevictable:0kB writepending:184kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:7040kB pagetables:1680kB bounce:0kB free_pcp:1208kB local_pcp:580kB free_cma:0kB [ 366.246056] lowmem_reserve[]: 0 0 0 0 0 [ 366.250069] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 366.275514] lowmem_reserve[]: 0 0 0 0 0 [ 366.279710] Node 1 Normal free:393304kB min:53612kB low:67012kB high:80412kB active_anon:100kB inactive_anon:4kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:40kB bounce:0kB free_pcp:1340kB local_pcp:696kB free_cma:0kB [ 366.308033] lowmem_reserve[]: 0 0 0 0 0 [ 366.312063] Node 0 DMA: 7*4kB (UE) 7*8kB (UE) 4*16kB (UE) 3*32kB (UE) 6*64kB (UE) 2*128kB (EH) 1*256kB (E) 2*512kB (EH) 2*1024kB (EH) 3*2048kB (UME) 0*4096kB = 10356kB [ 366.327432] Node 0 DMA32: 4606*4kB (UE) 7966*8kB (UE) 4424*16kB (UE) 2652*32kB (UE) 17*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 238888kB [ 366.341751] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 366.352493] Node 1 Normal: 3130*4kB (UME) 3764*8kB (UM) 4494*16kB (UE) 4728*32kB (U) 1733*64kB (U) 145*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 395560kB [ 366.367957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.377163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 366.385753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.394607] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 366.403391] 3003 total pagecache pages [ 366.407316] 0 pages in swap cache [ 366.410792] Swap cache stats: add 0, delete 0, find 0/0 [ 366.416168] Free swap = 0kB [ 366.419197] Total swap = 0kB [ 366.422401] 1965979 pages RAM [ 366.425600] 0 pages HighMem/MovableOnly [ 366.429683] 339049 pages reserved [ 366.433173] 0 pages cma reserved [ 366.512182] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 366.522575] ------------[ cut here ]------------ [ 366.527886] WARNING: CPU: 0 PID: 8001 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 366.537265] Kernel panic - not syncing: panic_on_warn set ... [ 366.537265] [ 366.544917] CPU: 0 PID: 8001 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 366.545967] syz-executor.3: [ 366.553173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.553180] Call Trace: [ 366.553223] dump_stack+0x13e/0x194 [ 366.553310] panic+0x1f9/0x42d [ 366.553319] ? add_taint.cold+0x16/0x16 [ 366.553332] ? debug_print_object.cold+0xa7/0xdb [ 366.553341] ? debug_print_object.cold+0xa7/0xdb [ 366.553347] __warn.cold+0x2f/0x30 [ 366.553357] ? ist_end_non_atomic+0x10/0x10 [ 366.553368] ? debug_print_object.cold+0xa7/0xdb [ 366.568484] page allocation failure: order:4 [ 366.570004] report_bug+0x20a/0x248 [ 366.575927] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 366.578362] do_error_trap+0x195/0x2d0 [ 366.585208] (null) [ 366.588279] ? math_error+0x2d0/0x2d0 [ 366.596779] syz-executor.3 cpuset= [ 366.599175] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 366.605224] syz3 [ 366.608148] invalid_op+0x1b/0x40 [ 366.617883] mems_allowed=0-1 [ 366.618321] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 366.661248] RSP: 0018:ffff88806bb4f260 EFLAGS: 00010082 [ 366.666620] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 366.673922] RDX: 0000000000000000 RSI: ffffffff86ac0860 RDI: ffffed100d769e42 [ 366.681199] RBP: ffffffff86abbae0 R08: 0000000000000061 R09: 0000000000000001 [ 366.688491] R10: ffff8880a13f08e8 R11: ffff8880a13f0040 R12: 0000000000000000 [ 366.700421] R13: 0000000000000000 R14: 1ffff1100d769e56 R15: ffff88809f1420b0 [ 366.707739] debug_object_assert_init+0x22f/0x300 [ 366.712622] ? kasan_slab_free+0x75/0xc0 [ 366.716703] ? debug_object_init_on_stack+0x20/0x20 [ 366.721745] del_timer+0x5d/0xe0 [ 366.725142] ? trigger_dyntick_cpu.isra.0+0x180/0x180 [ 366.730339] ? find_held_lock+0x2d/0x110 [ 366.734429] try_to_grab_pending+0x261/0x610 [ 366.739645] __cancel_work_timer+0x92/0x460 [ 366.744112] ? cancel_delayed_work+0x20/0x20 [ 366.748623] ? batadv_tvlv_handler_get+0x1df/0x2c0 [ 366.753580] batadv_nc_mesh_free+0x41/0x116 [ 366.757932] batadv_mesh_free+0x70/0x150 [ 366.762106] batadv_mesh_init+0x561/0x630 [ 366.766269] batadv_softif_init_late+0xa21/0xc90 [ 366.772792] ? batadv_interface_stats+0x180/0x180 [ 366.777865] ? dev_alloc_name+0x160/0x160 [ 366.782071] ? batadv_interface_stats+0x180/0x180 [ 366.786955] register_netdevice+0x286/0xc70 [ 366.791386] ? netdev_change_features+0x80/0x80 [ 366.796071] ? rtnl_create_link+0x129/0x880 [ 366.800438] rtnl_newlink+0x1469/0x1720 [ 366.804525] ? rtnl_newlink+0x3f5/0x1720 [ 366.808609] ? trace_hardirqs_on+0x10/0x10 [ 366.812857] ? rtnl_link_unregister+0x1f0/0x1f0 [ 366.817544] ? lock_acquire+0x170/0x3f0 [ 366.821533] ? lock_acquire+0x170/0x3f0 [ 366.825520] ? rtnetlink_rcv_msg+0x31d/0xb10 [ 366.829964] ? __lock_is_held+0xad/0x140 [ 366.834051] ? lock_downgrade+0x6e0/0x6e0 [ 366.838229] ? rtnl_link_unregister+0x1f0/0x1f0 [ 366.842910] rtnetlink_rcv_msg+0x3be/0xb10 [ 366.847181] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 366.851777] ? save_trace+0x290/0x290 [ 366.856212] ? save_trace+0x290/0x290 [ 366.860026] netlink_rcv_skb+0x127/0x370 [ 366.864102] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 366.868710] ? netlink_ack+0x960/0x960 [ 366.872640] netlink_unicast+0x437/0x620 [ 366.876705] ? netlink_attachskb+0x600/0x600 [ 366.881121] netlink_sendmsg+0x733/0xbe0 [ 366.885200] ? netlink_unicast+0x620/0x620 [ 366.889449] ? security_socket_sendmsg+0x83/0xb0 [ 366.894332] ? netlink_unicast+0x620/0x620 [ 366.898590] sock_sendmsg+0xc5/0x100 [ 366.902306] SYSC_sendto+0x1c4/0x2b0 [ 366.906031] ? SYSC_connect+0x250/0x250 [ 366.910198] ? __sock_create+0x6d/0x620 [ 366.914182] ? sock_map_fd+0x4e/0x70 [ 366.917897] ? SyS_socket+0x103/0x170 [ 366.921703] ? move_addr_to_kernel+0x60/0x60 [ 366.926119] ? do_syscall_64+0x4c/0x640 [ 366.930202] ? SyS_sendto+0x21/0x50 [ 366.933855] ? SyS_getpeername+0x30/0x30 [ 366.937935] do_syscall_64+0x1d5/0x640 [ 366.941855] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 366.947051] RIP: 0033:0x4161a3 [ 366.950326] RSP: 002b:00007ffec0da2b68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 366.958064] RAX: ffffffffffffffda RBX: 0000000000c82200 RCX: 00000000004161a3 [ 366.965601] RDX: 000000000000003c RSI: 0000000000c82250 RDI: 0000000000000003 [ 366.973143] RBP: 0000000000000000 R08: 00007ffec0da2b70 R09: 000000000000000c [ 366.981562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.989044] R13: 0000000000000000 R14: 0000000000c82250 R15: 0000000000000003 [ 366.997388] CPU: 1 PID: 8006 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 367.005259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.014909] Call Trace: [ 367.017543] dump_stack+0x13e/0x194 [ 367.021194] warn_alloc.cold+0x96/0x1af [ 367.025197] ? zone_watermark_ok_safe+0x280/0x280 [ 367.030187] ? __alloc_pages_direct_compact+0xba/0x360 [ 367.035481] __alloc_pages_slowpath+0x2114/0x26c0 [ 367.040343] ? save_trace+0x290/0x290 [ 367.044428] ? warn_alloc+0xf0/0xf0 [ 367.048080] __alloc_pages_nodemask+0x5d3/0x700 [ 367.052803] ? lock_downgrade+0x6e0/0x6e0 [ 367.057000] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 367.062049] ? audit_add_tree_rule.cold+0x2f/0x2f [ 367.067345] alloc_pages_current+0xe7/0x1e0 [ 367.071816] ion_page_pool_alloc+0x118/0x1b0 [ 367.076252] ion_system_heap_allocate+0x134/0x8d0 [ 367.081157] ? _ion_heap_freelist_drain+0x6e/0x410 [ 367.086111] ? ion_system_heap_free+0x240/0x240 [ 367.090829] ion_alloc+0x611/0x7d0 [ 367.094394] ? ion_dma_buf_release+0x40/0x40 [ 367.098826] ? __might_fault+0x177/0x1b0 [ 367.103046] ion_ioctl+0xef/0x1f8 [ 367.106522] ? ion_alloc.cold+0x3d/0x3d [ 367.111235] ? selinux_file_ioctl+0x3f7/0x560 [ 367.115746] ? ion_alloc.cold+0x3d/0x3d [ 367.119748] do_vfs_ioctl+0x75a/0xfe0 [ 367.123653] ? selinux_file_mprotect+0x5c0/0x5c0 [ 367.128971] ? ioctl_preallocate+0x1a0/0x1a0 [ 367.133420] ? _copy_to_user+0x82/0xd0 [ 367.137325] ? put_timespec64+0xaa/0xf0 [ 367.141315] ? nsecs_to_jiffies+0x30/0x30 [ 367.145495] ? security_file_ioctl+0x76/0xb0 [ 367.149920] ? security_file_ioctl+0x83/0xb0 [ 367.154348] SyS_ioctl+0x7f/0xb0 [ 367.157836] ? do_vfs_ioctl+0xfe0/0xfe0 [ 367.161850] do_syscall_64+0x1d5/0x640 [ 367.165765] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 367.171004] RIP: 0033:0x45c4a9 [ 367.174210] RSP: 002b:00007ffe09687e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.182052] RAX: ffffffffffffffda RBX: 0000000001119914 RCX: 000000000045c4a9 [ 367.189342] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 367.196626] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 367.203977] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 367.211292] R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bf2c [ 367.219833] Kernel Offset: disabled [ 367.223600] Rebooting in 86400 seconds..