syzbot


WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected

Status: auto-closed as invalid on 2020/08/13 01:44
Reported-by: syzbot+ee9b387c5b896f32b37b@syzkaller.appspotmail.com
First crash: 814d, last: 800d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected C 2126 1509d 1523d 6/22 fixed on 2018/05/08 18:30
upstream WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected (2) C done 640 535d 653d 21/22 fixed on 2021/03/10 01:49

Sample crash report:
Node 1 active_anon:1245220kB inactive_anon:15752kB active_file:57228kB inactive_file:31024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:204kB writeback:0kB shmem:23092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
=====================================================
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
4.14.176-syzkaller #0 Not tainted
-----------------------------------------------------
syz-executor.5/31323 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
 (&(&info->lock)->rlock){+.+.}, at: [<ffffffff8174eed4>] shmem_uncharge+0x24/0x250 mm/shmem.c:318

and this task is already holding:
 (&(&mapping->tree_lock)->rlock){-.-.}, at: [<ffffffff81861f78>] spin_lock include/linux/spinlock.h:317 [inline]
 (&(&mapping->tree_lock)->rlock){-.-.}, at: [<ffffffff81861f78>] split_huge_page_to_list+0x548/0x1f40 mm/huge_memory.c:2625
which would create a new lock dependency:
 (&(&mapping->tree_lock)->rlock){-.-.} -> (&(&info->lock)->rlock){+.+.}

but this new dependency connects a HARDIRQ-irq-safe lock:
 (&(&mapping->tree_lock)->rlock){-.-.}

... which became HARDIRQ-irq-safe at:
  lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3994
  __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
  _raw_spin_lock_irqsave+0x8c/0xbf kernel/locking/spinlock.c:160
  test_clear_page_writeback+0x199/0xc20 mm/page-writeback.c:2742
  end_page_writeback+0xe4/0x210 mm/filemap.c:1153
  ext4_finish_bio+0x483/0x710 fs/ext4/page-io.c:118
  ext4_end_bio+0x14b/0x5a0 fs/ext4/page-io.c:342
  bio_endio+0x315/0x670 block/bio.c:1918
  req_bio_endio block/blk-core.c:204 [inline]
  blk_update_request+0x27a/0x9d0 block/blk-core.c:2763
  scsi_end_request+0x7d/0x9b0 drivers/scsi/scsi_lib.c:659
  scsi_io_completion+0xa63/0x1590 drivers/scsi/scsi_lib.c:885
  scsi_softirq_done+0x2c8/0x360 drivers/scsi/scsi_lib.c:1671
  __blk_mq_complete_request+0x30b/0x6c0 block/blk-mq.c:571
  blk_mq_complete_request+0x51/0x60 block/blk-mq.c:591
  virtscsi_vq_done+0xa7/0x130 drivers/scsi/virtio_scsi.c:223
  vring_interrupt+0x101/0x150 drivers/virtio/virtio_ring.c:951
  __handle_irq_event_percpu+0x125/0x7e0 kernel/irq/handle.c:147
  handle_irq_event_percpu+0x66/0x120 kernel/irq/handle.c:187
  handle_irq_event+0xa2/0x12d kernel/irq/handle.c:204
  handle_edge_irq+0x215/0x810 kernel/irq/chip.c:770
  generic_handle_irq_desc include/linux/irqdesc.h:159 [inline]
  handle_irq+0x35/0x50 arch/x86/kernel/irq_64.c:87
  do_IRQ+0x93/0x1d0 arch/x86/kernel/irq.c:230
  ret_from_intr+0x0/0x1e

to a HARDIRQ-irq-unsafe lock:
 (&(&info->lock)->rlock){+.+.}

... which became HARDIRQ-irq-unsafe at:
...
  lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3994
  __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
  _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:152
  spin_lock include/linux/spinlock.h:317 [inline]
  shmem_mfill_atomic_pte+0x11ba/0x1790 mm/shmem.c:2333
  shmem_mfill_zeropage_pte+0x81/0xa0 mm/shmem.c:2382
  mfill_atomic_pte mm/userfaultfd.c:429 [inline]
  __mcopy_atomic mm/userfaultfd.c:549 [inline]
  mfill_zeropage+0x773/0xcd0 mm/userfaultfd.c:604
  userfaultfd_zeropage fs/userfaultfd.c:1760 [inline]
  userfaultfd_ioctl+0x10da/0x2f80 fs/userfaultfd.c:1861
  vfs_ioctl fs/ioctl.c:46 [inline]
  file_ioctl fs/ioctl.c:500 [inline]
  do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
  SYSC_ioctl fs/ioctl.c:701 [inline]
  SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
  do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
  entry_SYSCALL_64_after_hwframe+0x42/0xb7

other info that might help us debug this:

 Possible interrupt unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&(&info->lock)->rlock);
                               local_irq_disable();
                               lock(&(&mapping->tree_lock)->rlock);
                               lock(&(&info->lock)->rlock);
  <Interrupt>
    lock(&(&mapping->tree_lock)->rlock);

 *** DEADLOCK ***

5 locks held by syz-executor.5/31323:
 #0:  (shrinker_rwsem){++++}, at: [<ffffffff81723230>] shrink_slab.part.0+0xb0/0xa50 mm/vmscan.c:474
 #1:  (&type->s_umount_key#34){++++}, at: [<ffffffff818bbcfb>] trylock_super+0x1b/0xe0 fs/super.c:402
 #2:  (&mapping->i_mmap_rwsem){++++}, at: [<ffffffff81861cbd>] i_mmap_lock_read include/linux/fs.h:483 [inline]
 #2:  (&mapping->i_mmap_rwsem){++++}, at: [<ffffffff81861cbd>] split_huge_page_to_list+0x28d/0x1f40 mm/huge_memory.c:2590
 #3:  (&(&pgdat->lru_lock)->rlock){-.-.}, at: [<ffffffff81861f59>] split_huge_page_to_list+0x529/0x1f40 mm/huge_memory.c:2620
 #4:  (&(&mapping->tree_lock)->rlock){-.-.}, at: [<ffffffff81861f78>] spin_lock include/linux/spinlock.h:317 [inline]
 #4:  (&(&mapping->tree_lock)->rlock){-.-.}, at: [<ffffffff81861f78>] split_huge_page_to_list+0x548/0x1f40 mm/huge_memory.c:2625

the dependencies between HARDIRQ-irq-safe lock and the holding lock:
-> (&(&mapping->tree_lock)->rlock){-.-.} ops: 1157811 {
   IN-HARDIRQ-W at:
                    lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3994
                    __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
                    _raw_spin_lock_irqsave+0x8c/0xbf kernel/locking/spinlock.c:160
                    test_clear_page_writeback+0x199/0xc20 mm/page-writeback.c:2742
                    end_page_writeback+0xe4/0x210 mm/filemap.c:1153
                    ext4_finish_bio+0x483/0x710 fs/ext4/page-io.c:118
                    ext4_end_bio+0x14b/0x5a0 fs/ext4/page-io.c:342
                    bio_endio+0x315/0x670 block/bio.c:1918
                    req_bio_endio block/blk-core.c:204 [inline]
                    blk_update_request+0x27a/0x9d0 block/blk-core.c:2763
                    scsi_end_request+0x7d/0x9b0 drivers/scsi/scsi_lib.c:659
                    scsi_io_completion+0xa63/0x1590 drivers/scsi/scsi_lib.c:885
                    scsi_softirq_done+0x2c8/0x360 drivers/scsi/scsi_lib.c:1671
                    __blk_mq_complete_request+0x30b/0x6c0 block/blk-mq.c:571
                    blk_mq_complete_request+0x51/0x60 block/blk-mq.c:591
                    virtscsi_vq_done+0xa7/0x130 drivers/scsi/virtio_scsi.c:223
                    vring_interrupt+0x101/0x150 drivers/virtio/virtio_ring.c:951
                    __handle_irq_event_percpu+0x125/0x7e0 kernel/irq/handle.c:147
                    handle_irq_event_percpu+0x66/0x120 kernel/irq/handle.c:187
                    handle_irq_event+0xa2/0x12d kernel/irq/handle.c:204
                    handle_edge_irq+0x215/0x810 kernel/irq/chip.c:770
                    generic_handle_irq_desc include/linux/irqdesc.h:159 [inline]
                    handle_irq+0x35/0x50 arch/x86/kernel/irq_64.c:87
                    do_IRQ+0x93/0x1d0 arch/x86/kernel/irq.c:230
                    ret_from_intr+0x0/0x1e
   IN-SOFTIRQ-W at:
                    lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3994
                    __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
                    _raw_spin_lock_irqsave+0x8c/0xbf kernel/locking/spinlock.c:160
                    test_clear_page_writeback+0x199/0xc20 mm/page-writeback.c:2742
                    end_page_writeback+0xe4/0x210 mm/filemap.c:1153
                    end_buffer_async_write+0x367/0x6a0 fs/buffer.c:377
                    end_bio_bh_io_sync+0xbf/0x100 fs/buffer.c:3038
                    bio_endio+0x315/0x670 block/bio.c:1918
                    req_bio_endio block/blk-core.c:204 [inline]
                    blk_update_request+0x27a/0x9d0 block/blk-core.c:2763
                    scsi_end_request+0x7d/0x9b0 drivers/scsi/scsi_lib.c:659
                    scsi_io_completion+0xa63/0x1590 drivers/scsi/scsi_lib.c:885
                    scsi_softirq_done+0x2c8/0x360 drivers/scsi/scsi_lib.c:1671
                    __blk_mq_complete_request+0x30b/0x6c0 block/blk-mq.c:571
                    blk_mq_complete_request+0x51/0x60 block/blk-mq.c:591
                    virtscsi_vq_done+0xa7/0x130 drivers/scsi/virtio_scsi.c:223
                    vring_interrupt+0x101/0x150 drivers/virtio/virtio_ring.c:951
                    __handle_irq_event_percpu+0x125/0x7e0 kernel/irq/handle.c:147
                    handle_irq_event_percpu+0x66/0x120 kernel/irq/handle.c:187
                    handle_irq_event+0xa2/0x12d kernel/irq/handle.c:204
                    handle_edge_irq+0x215/0x810 kernel/irq/chip.c:770
                    generic_handle_irq_desc include/linux/irqdesc.h:159 [inline]
                    handle_irq+0x35/0x50 arch/x86/kernel/irq_64.c:87
                    do_IRQ+0x93/0x1d0 arch/x86/kernel/irq.c:230
                    ret_from_intr+0x0/0x1e
                    arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline]
                    kfree+0xf4/0x260 mm/slab.c:3816
                    skb_free_head+0x83/0xa0 net/core/skbuff.c:554
                    skb_release_data+0x528/0x7b0 net/core/skbuff.c:574
                    skb_release_all+0x46/0x60 net/core/skbuff.c:631
                    __kfree_skb net/core/skbuff.c:645 [inline]
                    consume_skb+0xa7/0x330 net/core/skbuff.c:705
                    __dev_kfree_skb_any+0x7a/0xa0 net/core/dev.c:2533
                    dev_consume_skb_any include/linux/netdevice.h:3276 [inline]
                    free_old_xmit_skbs.isra.0+0x178/0x2a0 drivers/net/virtio_net.c:1137
                    start_xmit+0x148/0x1400 drivers/net/virtio_net.c:1299
                    __netdev_start_xmit include/linux/netdevice.h:4039 [inline]
                    netdev_start_xmit include/linux/netdevice.h:4048 [inline]
                    xmit_one net/core/dev.c:3009 [inline]
                    dev_hard_start_xmit+0x186/0x890 net/core/dev.c:3025
                    sch_direct_xmit+0x25f/0x510 net/sched/sch_generic.c:186
                    __dev_xmit_skb net/core/dev.c:3218 [inline]
                    __dev_queue_xmit+0x1b6e/0x25c0 net/core/dev.c:3493
                    neigh_hh_output include/net/neighbour.h:490 [inline]
                    neigh_output include/net/neighbour.h:498 [inline]
                    ip_finish_output2+0xde8/0x14a0 net/ipv4/ip_output.c:229
                    ip_finish_output+0x556/0xc30 net/ipv4/ip_output.c:317
                    NF_HOOK_COND include/linux/netfilter.h:239 [inline]
                    ip_output+0x1c2/0x520 net/ipv4/ip_output.c:405
                    dst_output include/net/dst.h:462 [inline]
                    ip_local_out+0x93/0x170 net/ipv4/ip_output.c:124
                    ip_queue_xmit+0x7b2/0x1b20 net/ipv4/ip_output.c:504
                    __tcp_transmit_skb+0x1654/0x2dd0 net/ipv4/tcp_output.c:1131
                    __tcp_send_ack.part.0+0x3ab/0x5a0 net/ipv4/tcp_output.c:3640
                    __tcp_send_ack net/ipv4/tcp_output.c:3646 [inline]
                    tcp_send_ack+0x6f/0x90 net/ipv4/tcp_output.c:3646
                    __tcp_ack_snd_check+0xf6/0x380 net/ipv4/tcp_input.c:5145
                    tcp_rcv_established+0x1122/0x15d0 net/ipv4/tcp_input.c:5535
                    tcp_v4_do_rcv+0x55d/0x7e0 net/ipv4/tcp_ipv4.c:1467
                    tcp_v4_rcv+0x25ac/0x3250 net/ipv4/tcp_ipv4.c:1741
                    ip_local_deliver_finish+0x245/0xaa0 net/ipv4/ip_input.c:216
                    NF_HOOK include/linux/netfilter.h:250 [inline]
                    NF_HOOK include/linux/netfilter.h:244 [inline]
                    ip_local_deliver+0x1a6/0x450 net/ipv4/ip_input.c:257
                    dst_input include/net/dst.h:468 [inline]
                    ip_rcv_finish+0x79b/0x1a10 net/ipv4/ip_input.c:396
                    NF_HOOK include/linux/netfilter.h:250 [inline]
                    NF_HOOK include/linux/netfilter.h:244 [inline]
                    ip_rcv+0x9d8/0xfec net/ipv4/ip_input.c:493
                    __netif_receive_skb_core+0x1e50/0x2c00 net/core/dev.c:4477
                    __netif_receive_skb+0x27/0x1a0 net/core/dev.c:4515
                    netif_receive_skb_internal+0xd7/0x580 net/core/dev.c:4588
                    napi_skb_finish net/core/dev.c:4949 [inline]
                    napi_gro_receive+0x2ed/0x410 net/core/dev.c:4980
                    receive_buf+0x4e6/0x4480 drivers/net/virtio_net.c:852
                    virtnet_receive drivers/net/virtio_net.c:1098 [inline]
                    virtnet_poll+0x4d3/0x9b3 drivers/net/virtio_net.c:1189
                    napi_poll net/core/dev.c:5598 [inline]
                    net_rx_action+0x456/0xe90 net/core/dev.c:5664
                    __do_softirq+0x254/0x9bf kernel/softirq.c:288
                    invoke_softirq kernel/softirq.c:368 [inline]
                    irq_exit+0x15b/0x1a0 kernel/softirq.c:409
                    exiting_irq arch/x86/include/asm/apic.h:648 [inline]
                    do_IRQ+0x112/0x1d0 arch/x86/kernel/irq.c:242
                    ret_from_intr+0x0/0x1e
                    native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60
                    arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline]
                    default_idle+0x47/0x370 arch/x86/kernel/process.c:566
                    cpuidle_idle_call kernel/sched/idle.c:156 [inline]
                    do_idle+0x250/0x3c0 kernel/sched/idle.c:246
                    cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:351
                    start_kernel+0x659/0x676 init/main.c:708
                    secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:240
   INITIAL USE at:
                   lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3994
                   __raw_spin_lock_irq include/linux/spinlock_api_smp.h:128 [inline]
                   _raw_spin_lock_irq+0x5b/0x80 kernel/locking/spinlock.c:168
                   spin_lock_irq include/linux/spinlock.h:342 [inline]
                   __add_to_page_cache_locked+0x286/0x870 mm/filemap.c:781
                   add_to_page_cache_lru+0xe9/0x300 mm/filemap.c:830
                   do_read_cache_page+0x6d5/0x12a0 mm/filemap.c:2703
                   read_mapping_page include/linux/pagemap.h:398 [inline]
                   read_dev_sector+0xbf/0x3d0 block/partition-generic.c:659
                   read_part_sector block/partitions/check.h:38 [inline]
                   adfspart_check_ICS+0xf3/0xc10 block/partitions/acorn.c:366
                   check_partition+0x33f/0x62d block/partitions/check.c:167
                   rescan_partitions+0x1e5/0x850 block/partition-generic.c:523
                   __blkdev_get+0x926/0x10d0 fs/block_dev.c:1503
                   blkdev_get+0x84/0x8a0 fs/block_dev.c:1612
                   register_disk block/genhd.c:616 [inline]
                   device_add_disk+0x897/0xd80 block/genhd.c:679
                   add_disk include/linux/genhd.h:396 [inline]
                   brd_init+0x214/0x3c9 drivers/block/brd.c:586
                   do_one_initcall+0x88/0x202 init/main.c:824
                   do_initcall_level init/main.c:890 [inline]
                   do_initcalls init/main.c:898 [inline]
                   do_basic_setup init/main.c:916 [inline]
                   kernel_init_freeable+0x465/0x526 init/main.c:1073
                   kernel_init+0xd/0x15b init/main.c:998
                   ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
 }
 ... key      at: [<ffffffff8a5a8020>] __key.49022+0x0/0x40
 ... acquired at:
   lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3994
   __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
   _raw_spin_lock_irqsave+0x8c/0xbf kernel/locking/spinlock.c:160
   shmem_uncharge+0x24/0x250 mm/shmem.c:318
   __split_huge_page mm/huge_memory.c:2387 [inline]
   split_huge_page_to_list+0x1590/0x1f40 mm/huge_memory.c:2649
   split_huge_page include/linux/huge_mm.h:141 [inline]
   shmem_unused_huge_shrink+0x5ca/0x1180 mm/shmem.c:526
   shmem_unused_huge_scan+0x70/0xa0 mm/shmem.c:558
   super_cache_scan+0x333/0x460 fs/super.c:107
   do_shrink_slab mm/vmscan.c:401 [inline]
   shrink_slab.part.0+0x3bb/0xa50 mm/vmscan.c:504
   shrink_slab mm/vmscan.c:468 [inline]
   shrink_node+0x848/0xb60 mm/vmscan.c:2672
   shrink_zones mm/vmscan.c:2819 [inline]
   do_try_to_free_pages+0x357/0xe80 mm/vmscan.c:2877
   try_to_free_pages+0x233/0x6e0 mm/vmscan.c:3083
   __perform_reclaim mm/page_alloc.c:3581 [inline]
   __alloc_pages_direct_reclaim mm/page_alloc.c:3602 [inline]
   __alloc_pages_slowpath+0x91d/0x26c0 mm/page_alloc.c:3989
   __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
   alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
   alloc_pages include/linux/gfp.h:520 [inline]
   alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
   kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
   kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
   kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
   vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
   kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
   kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
   vfs_ioctl fs/ioctl.c:46 [inline]
   file_ioctl fs/ioctl.c:500 [inline]
   do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
   SYSC_ioctl fs/ioctl.c:701 [inline]
   SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
   do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
   entry_SYSCALL_64_after_hwframe+0x42/0xb7


the dependencies between the lock to be acquired
 and HARDIRQ-irq-unsafe lock:
-> (&(&info->lock)->rlock){+.+.} ops: 96687 {
   HARDIRQ-ON-W at:
                    lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3994
                    __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
                    _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:152
                    spin_lock include/linux/spinlock.h:317 [inline]
                    shmem_mfill_atomic_pte+0x11ba/0x1790 mm/shmem.c:2333
                    shmem_mfill_zeropage_pte+0x81/0xa0 mm/shmem.c:2382
                    mfill_atomic_pte mm/userfaultfd.c:429 [inline]
                    __mcopy_atomic mm/userfaultfd.c:549 [inline]
                    mfill_zeropage+0x773/0xcd0 mm/userfaultfd.c:604
                    userfaultfd_zeropage fs/userfaultfd.c:1760 [inline]
                    userfaultfd_ioctl+0x10da/0x2f80 fs/userfaultfd.c:1861
                    vfs_ioctl fs/ioctl.c:46 [inline]
                    file_ioctl fs/ioctl.c:500 [inline]
                    do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
                    SYSC_ioctl fs/ioctl.c:701 [inline]
                    SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
                    do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
                    entry_SYSCALL_64_after_hwframe+0x42/0xb7
   SOFTIRQ-ON-W at:
                    lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3994
                    __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
                    _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:152
                    spin_lock include/linux/spinlock.h:317 [inline]
                    shmem_mfill_atomic_pte+0x11ba/0x1790 mm/shmem.c:2333
                    shmem_mfill_zeropage_pte+0x81/0xa0 mm/shmem.c:2382
                    mfill_atomic_pte mm/userfaultfd.c:429 [inline]
                    __mcopy_atomic mm/userfaultfd.c:549 [inline]
                    mfill_zeropage+0x773/0xcd0 mm/userfaultfd.c:604
                    userfaultfd_zeropage fs/userfaultfd.c:1760 [inline]
                    userfaultfd_ioctl+0x10da/0x2f80 fs/userfaultfd.c:1861
                    vfs_ioctl fs/ioctl.c:46 [inline]
                    file_ioctl fs/ioctl.c:500 [inline]
                    do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
                    SYSC_ioctl fs/ioctl.c:701 [inline]
                    SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
                    do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
                    entry_SYSCALL_64_after_hwframe+0x42/0xb7
   INITIAL USE at:
                   lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3994
                   __raw_spin_lock_irq include/linux/spinlock_api_smp.h:128 [inline]
                   _raw_spin_lock_irq+0x5b/0x80 kernel/locking/spinlock.c:168
                   spin_lock_irq include/linux/spinlock.h:342 [inline]
                   shmem_getpage_gfp+0x17c6/0x2790 mm/shmem.c:1829
                   shmem_getpage mm/shmem.c:131 [inline]
                   shmem_write_begin+0xf4/0x190 mm/shmem.c:2413
                   generic_perform_write+0x1c9/0x420 mm/filemap.c:3047
                   __generic_file_write_iter+0x227/0x590 mm/filemap.c:3172
                   generic_file_write_iter+0x2fa/0x650 mm/filemap.c:3200
                   call_write_iter include/linux/fs.h:1778 [inline]
                   new_sync_write fs/read_write.c:469 [inline]
                   __vfs_write+0x44e/0x630 fs/read_write.c:482
                   vfs_write+0x192/0x4e0 fs/read_write.c:544
                   SYSC_write fs/read_write.c:590 [inline]
                   SyS_write+0xf2/0x210 fs/read_write.c:582
                   do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
                   entry_SYSCALL_64_after_hwframe+0x42/0xb7
 }
 ... key      at: [<ffffffff8a5968c0>] __key.49220+0x0/0x40
 ... acquired at:
   lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3994
   __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
   _raw_spin_lock_irqsave+0x8c/0xbf kernel/locking/spinlock.c:160
   shmem_uncharge+0x24/0x250 mm/shmem.c:318
   __split_huge_page mm/huge_memory.c:2387 [inline]
   split_huge_page_to_list+0x1590/0x1f40 mm/huge_memory.c:2649
   split_huge_page include/linux/huge_mm.h:141 [inline]
   shmem_unused_huge_shrink+0x5ca/0x1180 mm/shmem.c:526
   shmem_unused_huge_scan+0x70/0xa0 mm/shmem.c:558
   super_cache_scan+0x333/0x460 fs/super.c:107
   do_shrink_slab mm/vmscan.c:401 [inline]
   shrink_slab.part.0+0x3bb/0xa50 mm/vmscan.c:504
   shrink_slab mm/vmscan.c:468 [inline]
   shrink_node+0x848/0xb60 mm/vmscan.c:2672
   shrink_zones mm/vmscan.c:2819 [inline]
   do_try_to_free_pages+0x357/0xe80 mm/vmscan.c:2877
   try_to_free_pages+0x233/0x6e0 mm/vmscan.c:3083
   __perform_reclaim mm/page_alloc.c:3581 [inline]
   __alloc_pages_direct_reclaim mm/page_alloc.c:3602 [inline]
   __alloc_pages_slowpath+0x91d/0x26c0 mm/page_alloc.c:3989
   __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
   alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
   alloc_pages include/linux/gfp.h:520 [inline]
   alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
   kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
   kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
   kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
   vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
   kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
   kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
   vfs_ioctl fs/ioctl.c:46 [inline]
   file_ioctl fs/ioctl.c:500 [inline]
   do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
   SYSC_ioctl fs/ioctl.c:701 [inline]
   SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
   do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
   entry_SYSCALL_64_after_hwframe+0x42/0xb7


stack backtrace:
CPU: 0 PID: 31323 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 print_bad_irq_dependency kernel/locking/lockdep.c:1605 [inline]
 check_usage.cold+0x60e/0x97b kernel/locking/lockdep.c:1637
 check_irq_usage kernel/locking/lockdep.c:1693 [inline]
 check_prev_add_irq kernel/locking/lockdep_states.h:7 [inline]
 check_prev_add kernel/locking/lockdep.c:1906 [inline]
 check_prevs_add kernel/locking/lockdep.c:2018 [inline]
 validate_chain kernel/locking/lockdep.c:2460 [inline]
 __lock_acquire+0x1d77/0x4620 kernel/locking/lockdep.c:3487
 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3994
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x8c/0xbf kernel/locking/spinlock.c:160
 shmem_uncharge+0x24/0x250 mm/shmem.c:318
 __split_huge_page mm/huge_memory.c:2387 [inline]
 split_huge_page_to_list+0x1590/0x1f40 mm/huge_memory.c:2649
 split_huge_page include/linux/huge_mm.h:141 [inline]
 shmem_unused_huge_shrink+0x5ca/0x1180 mm/shmem.c:526
 shmem_unused_huge_scan+0x70/0xa0 mm/shmem.c:558
 super_cache_scan+0x333/0x460 fs/super.c:107
 do_shrink_slab mm/vmscan.c:401 [inline]
 shrink_slab.part.0+0x3bb/0xa50 mm/vmscan.c:504
 shrink_slab mm/vmscan.c:468 [inline]
 shrink_node+0x848/0xb60 mm/vmscan.c:2672
 shrink_zones mm/vmscan.c:2819 [inline]
 do_try_to_free_pages+0x357/0xe80 mm/vmscan.c:2877
 try_to_free_pages+0x233/0x6e0 mm/vmscan.c:3083
 __perform_reclaim mm/page_alloc.c:3581 [inline]
 __alloc_pages_direct_reclaim mm/page_alloc.c:3602 [inline]
 __alloc_pages_slowpath+0x91d/0x26c0 mm/page_alloc.c:3989
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
RSP: 002b:00007f73f5256c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f73f52576d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c
Node 1 Normal: 271*4kB (UM) 126*8kB (UM) 61*16kB (UME) 51*32kB (UM) 23*64kB (UM) 19*128kB (UM) 13*256kB (ME) 32*512kB (UM) 10*1024kB (UME) 3*2048kB (UME) 394*4096kB (M) = 1658524kB
Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
ieee80211 phy1850: Selected rate control algorithm 'minstrel_ht'
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
lowmem_reserve[]: 0 2557 2557 2557 2557
Node 0 DMA32 free:20712kB min:36272kB low:45340kB high:54408kB active_anon:1940012kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:336kB local_pcp:192kB free_cma:0kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
ieee80211 phy1850: hwaddr 02:00:00:07:3a:00 registered
syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
32065 total pagecache pages
syz-executor.5 cpuset=/ mems_allowed=0-1
0 pages in swap cache
CPU: 0 PID: 31335 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Swap cache stats: add 0, delete 0, find 0/0
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
Free swap  = 0kB
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
Total swap = 0kB
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
1965979 pages RAM
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
0 pages HighMem/MovableOnly
339050 pages reserved
0 pages cma reserved
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
RSP: 002b:00007f73f51f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
ieee80211 phy1851: Selected rate control algorithm 'minstrel_ht'
RAX: ffffffffffffffda RBX: 00007f73f51f46d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
RBP: 000000000076c0e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076c0ec
lowmem_reserve[]: 0 0 0 0 0
Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:1655492kB min:53612kB low:67012kB high:80412kB active_anon:1245340kB inactive_anon:17804kB active_file:57228kB inactive_file:31132kB unevictable:0kB writepending:424kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9536kB pagetables:21212kB bounce:0kB free_pcp:700kB local_pcp:200kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
ieee80211 phy1851: hwaddr 02:00:00:07:3b:00 registered
Node 0 DMA: 1*4kB (M) 8*8kB (UM) 6*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10340kB
Node 0 DMA32: 300*4kB (UME) 180*8kB (UME) 37*16kB (UM) 514*32kB (UME) 1*64kB (U) 9*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20896kB
Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
Node 1 Normal: 241*4kB (UME) 207*8kB (UM) 52*16kB (UME) 56*32kB (UM) 24*64kB (UM) 20*128kB (UME) 13*256kB (UM) 25*512kB (UM) 10*1024kB (UME) 3*2048kB (UME) 394*4096kB (M) = 1655676kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
32065 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
339050 pages reserved
0 pages cma reserved
Mem-Info:
active_anon:797379 inactive_anon:8471 isolated_anon:0
 active_file:14308 inactive_file:7784 isolated_file:0
 unevictable:0 dirty:95 writeback:0 unstable:0
 slab_reclaimable:57223 slab_unreclaimable:203777
 mapped:62944 shmem:9963 pagetables:13000 bounce:0
 free:421884 free_pcp:358 free_cma:0
Node 0 active_anon:1944176kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216572kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Node 1 active_anon:1245356kB inactive_anon:17804kB active_file:57228kB inactive_file:31152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35192kB dirty:456kB writeback:0kB shmem:23100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 2557 2557 2557 2557
Node 0 DMA32 free:20896kB min:36272kB low:45340kB high:54408kB active_anon:1940012kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:336kB local_pcp:192kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:1654220kB min:53612kB low:67012kB high:80412kB active_anon:1245600kB inactive_anon:17808kB active_file:57228kB inactive_file:31152kB unevictable:0kB writepending:504kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9408kB pagetables:21236kB bounce:0kB free_pcp:808kB local_pcp:552kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 0 DMA: 1*4kB (M) 8*8kB (UM) 6*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10340kB
Node 0 DMA32: 300*4kB (UME) 180*8kB (UME) 37*16kB (UM) 514*32kB (UME) 1*64kB (U) 9*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20896kB
Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
Node 1 Normal: 190*4kB (UM) 232*8kB (UME) 77*16kB (UME) 51*32kB (UME) 22*64kB (M) 19*128kB (UM) 12*256kB (M) 23*512kB (UM) 10*1024kB (UME) 3*2048kB (UME) 394*4096kB (M) = 1654376kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
32063 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
339050 pages reserved
0 pages cma reserved
ieee80211 phy1852: Selected rate control algorithm 'minstrel_ht'
syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
syz-executor.5 cpuset=/ mems_allowed=0-1
CPU: 0 PID: 31323 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
ieee80211 phy1852: hwaddr 02:00:00:07:3c:00 registered
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
RSP: 002b:00007f73f5256c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f73f52576d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c
ieee80211 phy1853: Selected rate control algorithm 'minstrel_ht'
ieee80211 phy1853: hwaddr 02:00:00:07:3d:00 registered
syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
syz-executor.3 cpuset=/ mems_allowed=0-1
syz-executor.3 cpuset=/ mems_allowed=0-1
syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
CPU: 1 PID: 31462 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
syz-executor.3 cpuset=
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
/
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 mems_allowed=0-1
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
RSP: 002b:00007f083e4c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f083e4c86d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007
RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bfac
CPU: 0 PID: 31489 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
RSP: 002b:00007f083e4a6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f083e4a76d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005
RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076c04c
syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
CPU: 0 PID: 31444 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
syz-executor.3 cpuset=
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
/
 mems_allowed=0-1
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
RSP: 002b:00007f083e4e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f083e4e96d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c
CPU: 1 PID: 31491 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
ieee80211 phy1854: Selected rate control algorithm 'minstrel_ht'
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
ieee80211 phy1854: hwaddr 02:00:00:07:3e:00 registered
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
RSP: 002b:00007f083e485c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f083e4866d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005
RBP: 000000000076c0e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076c0ec
ieee80211 phy1855: Selected rate control algorithm 'minstrel_ht'
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
ieee80211 phy1855: hwaddr 02:00:00:07:3f:00 registered
active_anon:797262 inactive_anon:7962 isolated_anon:0
 active_file:14308 inactive_file:7805 isolated_file:0
 unevictable:0 dirty:30 writeback:2 unstable:0
 slab_reclaimable:57335 slab_unreclaimable:205107
 mapped:62770 shmem:9970 pagetables:12982 bounce:0
 free:420988 free_pcp:327 free_cma:0
Node 0 active_anon:1944176kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216584kB dirty:4kB writeback:4kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Node 1 active_anon:1244672kB inactive_anon:15768kB active_file:57228kB inactive_file:31216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34396kB dirty:116kB writeback:4kB shmem:23124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 2557 2557 2557 2557
Node 0 DMA32 free:20904kB min:36272kB low:45340kB high:54408kB active_anon:1940012kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:264kB local_pcp:152kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:1653516kB min:53612kB low:67012kB high:80412kB active_anon:1244636kB inactive_anon:15772kB active_file:57228kB inactive_file:31220kB unevictable:0kB writepending:296kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8736kB pagetables:20660kB bounce:0kB free_pcp:852kB local_pcp:468kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 0 DMA: 1*4kB (M) 10*8kB (UM) 6*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10356kB
Node 0 DMA32: 300*4kB (UME) 182*8kB (UME) 37*16kB (UM) 514*32kB (UME) 1*64kB (U) 9*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20912kB
Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
Node 1 Normal: 524*4kB (UME) 266*8kB (UME) 92*16kB (UME) 62*32kB (UM) 24*64kB (UME) 16*128kB (M) 17*256kB (UME) 13*512kB (UME) 11*1024kB (UM) 3*2048kB (UME) 394*4096kB (M) = 1653504kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
32087 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
339050 pages reserved
0 pages cma reserved
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
syz-executor.3 cpuset=/ mems_allowed=0-1
CPU: 1 PID: 31580 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
ieee80211 phy1856: Selected rate control algorithm 'minstrel_ht'
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
ieee80211 phy1856: hwaddr 02:00:00:07:40:00 registered
RSP: 002b:00007f083e4e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f083e4e96d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c
syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
syz-executor.3 cpuset=/ mems_allowed=0-1
CPU: 1 PID: 31580 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
RSP: 002b:00007f083e4e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f083e4e96d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c
warn_alloc_show_mem: 4 callbacks suppressed
Mem-Info:
ieee80211 phy1857: Selected rate control algorithm 'minstrel_ht'
active_anon:797389 inactive_anon:7965 isolated_anon:0
 active_file:14308 inactive_file:7818 isolated_file:0
 unevictable:0 dirty:19 writeback:0 unstable:0
 slab_reclaimable:57367 slab_unreclaimable:205870
 mapped:62967 shmem:9975 pagetables:13019 bounce:0
 free:419912 free_pcp:356 free_cma:0
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
ieee80211 phy1857: hwaddr 02:00:00:07:41:00 registered
Node 0 active_anon:1944176kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216600kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Node 1 active_anon:1246380kB inactive_anon:30980kB active_file:57228kB inactive_file:31268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35368kB dirty:172kB writeback:0kB shmem:38344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
lowmem_reserve[]: 0 2557 2557 2557 2557
syz-executor.3 cpuset=/ mems_allowed=0-1
Node 0 DMA32 free:20788kB min:36272kB low:45340kB high:54408kB active_anon:1940012kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:172kB local_pcp:80kB free_cma:0kB
CPU: 0 PID: 31672 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
syz-executor.1 cpuset=
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
/
 mems_allowed=0-1
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
lowmem_reserve[]:
 0
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
 0
 0
 0
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 0
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
RSP: 002b:00007f083e485c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f083e4866d4 RCX: 000000000045c889
Node 0 
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
RBP: 000000000076c0e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076c0ec
CPU: 0 PID: 31680 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0
Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
lowmem_reserve[]:
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
 0
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
 0
 0
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
 0
 0
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
Node 1 
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
RSP: 002b:00007fed3131bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fed3131c6d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
Normal free:1630336kB min:53612kB low:67012kB high:80412kB active_anon:1262204kB inactive_anon:15776kB active_file:57264kB inactive_file:31288kB unevictable:0kB writepending:36kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9344kB pagetables:21324kB bounce:0kB free_pcp:1124kB local_pcp:624kB free_cma:0kB
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
lowmem_reserve[]:
active_anon:801395 inactive_anon:7964 isolated_anon:0
 active_file:14317 inactive_file:7823 isolated_file:0
 unevictable:0 dirty:10 writeback:0 unstable:0
 slab_reclaimable:57454 slab_unreclaimable:206547
 mapped:62807 shmem:9977 pagetables:12991 bounce:0
 free:415167 free_pcp:367 free_cma:0
 0
Node 0 active_anon:1944176kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216600kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 0
Node 1 active_anon:1261404kB inactive_anon:15776kB active_file:57264kB inactive_file:31288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34628kB dirty:36kB writeback:0kB shmem:23152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
 0
Node 0 
 0
DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 0
lowmem_reserve[]:
 0
Node 0 DMA: 1*4kB (M) 10*8kB (UM) 4*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10324kB
 2557 2557 2557 2557
Node 0 DMA32 free:20656kB min:36272kB low:45340kB high:54408kB active_anon:1940012kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:196kB local_pcp:88kB free_cma:0kB
Node 0 DMA32: 290*4kB (ME) 166*8kB (UME) 37*16kB (UM) 514*32kB (UME) 1*64kB (U) 9*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20744kB
lowmem_reserve[]:
Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
 0 0 0 0 0
warn_alloc: 1 callbacks suppressed
syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:1648908kB min:53612kB low:67012kB high:80412kB active_anon:1244804kB inactive_anon:15776kB active_file:57264kB inactive_file:31288kB unevictable:0kB writepending:184kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8928kB pagetables:20732kB bounce:0kB free_pcp:1188kB local_pcp:564kB free_cma:0kB
Node 1 
lowmem_reserve[]:
syz-executor.1 cpuset=
 0
/ mems_allowed=0-1
CPU: 1 PID: 31696 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0
 0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
 0
 0
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
 0
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
Node 0 
DMA: 
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
1*4kB 
(M) 
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
10*8kB 
(UM) 
4*16kB 
(UM) 
2*32kB 
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
(UM) 
0*64kB 
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
1*128kB 
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
(M) 
RSP: 002b:00007fed312d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fed312da6d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009
1*256kB 
RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076c04c
Normal: 
(M) 
820*4kB 
1*512kB 
(UME) 
(M) 
195*8kB 
1*1024kB 
(UME) 
(M) 
118*16kB 
0*2048kB 
(UM) 
2*4096kB 
118*32kB 
(M) 
(UME) 
= 10324kB
56*64kB 
Node 0 
(UME) 37*128kB (UME) 20*256kB (UME) 5*512kB (UM) 7*1024kB (UM) 2*2048kB (UE) 393*4096kB (M) 
DMA32: 
= 1647496kB
290*4kB 
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
(ME) 
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
32121 total pagecache pages
170*8kB 
0 pages in swap cache
(UME) 
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
37*16kB 
1965979 pages RAM
0 pages HighMem/MovableOnly
339050 pages reserved
0 pages cma reserved
(UM) 514*32kB (UME) 1*64kB (U) 9*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20776kB
Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
Node 1 Normal: 671*4kB (UME) 279*8kB (UM) 106*16kB (UM) 112*32kB (UM) 55*64kB (UME) 39*128kB (UME) 21*256kB (UME) 5*512kB (UM) 7*1024kB (UM) 2*2048kB (UE) 393*4096kB (M) = 1647636kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
syz-executor.3 cpuset=/ mems_allowed=0-1
32137 total pagecache pages
CPU: 0 PID: 31745 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
RSP: 002b:00007f083e4e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f083e4e96d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
ieee80211 phy1858: Selected rate control algorithm 'minstrel_ht'
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c
syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
syz-executor.3 cpuset=/ mems_allowed=0-1
Free swap  = 0kB
Total swap = 0kB
CPU: 1 PID: 31759 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0
1965979 pages RAM
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
0 pages HighMem/MovableOnly
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
339050 pages reserved
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
0 pages cma reserved
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
active_anon:797303 inactive_anon:7965 isolated_anon:0
 active_file:14310 inactive_file:7836 isolated_file:0
 unevictable:0 dirty:11 writeback:0 unstable:0
 slab_reclaimable:57455 slab_unreclaimable:206641
 mapped:62820 shmem:9977 pagetables:13022 bounce:0
 free:419248 free_pcp:383 free_cma:0
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
Node 0 active_anon:1944176kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216612kB dirty:0kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
Node 1 active_anon:1245036kB inactive_anon:15780kB active_file:57236kB inactive_file:31340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34668kB dirty:44kB writeback:0kB shmem:23152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 0 
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]:
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 0
 2557
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 2557
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 2557
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
RSP: 002b:00007f083e4c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f083e4c86d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bfac
ieee80211 phy1858: hwaddr 02:00:00:07:42:00 registered
 2557
Node 0 DMA32 free:20528kB min:36272kB low:45340kB high:54408kB active_anon:1940012kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:356kB local_pcp:148kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:1630488kB min:53612kB low:67012kB high:80412kB active_anon:1261120kB inactive_anon:15788kB active_file:57236kB inactive_file:31368kB unevictable:0kB writepending:204kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8992kB pagetables:20676kB bounce:0kB free_pcp:1372kB local_pcp:624kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 0 DMA: 1*4kB (M) 10*8kB (UM) 4*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10324kB
ieee80211 phy1859: Selected rate control algorithm 'minstrel_ht'
Node 0 DMA32: 291*4kB (UME) 152*8kB (UME) 38*16kB (UME) 512*32kB (UME) 2*64kB (UE) 7*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20396kB
Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
ieee80211 phy1859: hwaddr 02:00:00:07:43:00 registered
Node 1 Normal: 704*4kB (UME) 384*8kB (UME) 142*16kB (UM) 86*32kB (UME) 45*64kB (M) 35*128kB (UM) 20*256kB (UME) 8*512kB (UM) 7*1024kB (UM) 2*2048kB (UE) 393*4096kB (M) = 1648480kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
32136 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
339050 pages reserved
0 pages cma reserved
IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001
syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
syz-executor.1 cpuset=/ mems_allowed=0-1
IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001
CPU: 0 PID: 31856 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
ieee80211 phy1860: Selected rate control algorithm 'minstrel_ht'
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095
 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198
 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113
ieee80211 phy1860: hwaddr 02:00:00:07:44:00 registered
 alloc_pages include/linux/gfp.h:520 [inline]
 alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline]
 kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160
 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306
 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320
 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline]
 kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c889
RSP: 002b:00007fed312fac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fed312fb6d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009
RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bfac
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
active_anon:797350 inactive_anon:7970 isolated_anon:0
 active_file:14310 inactive_file:8636 isolated_file:0
 unevictable:0 dirty:127 writeback:0 unstable:0
 slab_reclaimable:57564 slab_unreclaimable:206623
 mapped:63035 shmem:9984 pagetables:13058 bounce:0
 free:418147 free_pcp:257 free_cma:0
Node 0 active_anon:1944176kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216628kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Node 1 active_anon:1245324kB inactive_anon:15800kB active_file:57236kB inactive_file:34540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35512kB dirty:504kB writeback:0kB shmem:23180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
ieee80211 phy1861: Selected rate control algorithm 'minstrel_ht'
Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
ieee80211 phy1861: hwaddr 02:00:00:07:45:00 registered
lowmem_reserve[]: 0 2557 2557 2557 2557
Node 0 DMA32 free:20380kB min:36272kB low:45340kB high:54408kB active_anon:1940012kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:352kB local_pcp:160kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-14 2020/04/15 01:43 linux-4.14.y c10b57a567e4 3f3c5574 .config log report
ci2-linux-4-14 2020/04/12 13:46 linux-4.14.y 4520f06b03ae 36b0b050 .config log report
ci2-linux-4-14 2020/04/10 15:43 linux-4.14.y 4520f06b03ae a8c6a3f8 .config log report
ci2-linux-4-14 2020/04/01 00:59 linux-4.14.y 01364dad1d45 a34e2c33 .config log report