syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) ============================= syz-executor.4 cpuset=/ mems_allowed=0-1 WARNING: suspicious RCU usage CPU: 1 PID: 5361 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 4.14.176-syzkaller #0 Not tainted Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095 ----------------------------- __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113 alloc_pages include/linux/gfp.h:520 [inline] alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline] kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline] kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c889 RSP: 002b:00007f60c0e40c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f60c0e416d4 RCX: 000000000045c889 RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c net/sched/act_sample.c:95 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor.5/5367: #0: (rtnl_mutex){+.+.}, at: [] rtnl_lock net/core/rtnetlink.c:72 [inline] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x31d/0xb10 net/core/rtnetlink.c:4310 stack backtrace: CPU: 0 PID: 5367 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 tcf_sample_init+0x71c/0x8c0 net/sched/act_sample.c:95 tcf_action_init_1+0x51a/0x9f0 net/sched/act_api.c:682 tcf_action_init+0x26d/0x400 net/sched/act_api.c:751 tcf_action_add net/sched/act_api.c:1079 [inline] tc_ctl_action+0x2e3/0x513 net/sched/act_api.c:1131 rtnetlink_rcv_msg+0x3be/0xb10 net/core/rtnetlink.c:4315 netlink_rcv_skb+0x127/0x370 net/netlink/af_netlink.c:2433 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x437/0x620 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x733/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xc5/0x100 net/socket.c:656 ___sys_sendmsg+0x70a/0x840 net/socket.c:2062 warn_alloc_show_mem: 1 callbacks suppressed Mem-Info: __sys_sendmsg+0xa3/0x120 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0x27/0x40 net/socket.c:2103 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c889 RSP: 002b:00007fb619d80c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fb619d816d4 RCX: 000000000045c889 RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000009ff R14: 00000000004ccbb5 R15: 000000000076bf0c active_anon:912983 inactive_anon:215024 isolated_anon:0 active_file:13830 inactive_file:7221 isolated_file:0 unevictable:17168 dirty:28 writeback:9 unstable:0 slab_reclaimable:13841 slab_unreclaimable:116728 mapped:60981 shmem:4489 pagetables:34944 bounce:0 free:178933 free_pcp:454 free_cma:0 Node 0 active_anon:1278156kB inactive_anon:552724kB active_file:4kB inactive_file:0kB unevictable:67588kB isolated(anon):0kB isolated(file):0kB mapped:213640kB dirty:4kB writeback:0kB shmem:16884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 765952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 1 active_anon:2374776kB inactive_anon:307372kB active_file:55316kB inactive_file:29884kB unevictable:1084kB isolated(anon):0kB isolated(file):0kB mapped:29984kB dirty:208kB writeback:36kB shmem:1072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 0 DMA free:10300kB min:220kB low:272kB high:324kB active_anon:1220kB inactive_anon:3464kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2557 2557 2557 2557 Node 0 DMA32 free:25468kB min:36272kB low:45340kB high:54408kB active_anon:1276936kB inactive_anon:549260kB active_file:4kB inactive_file:0kB unevictable:67588kB writepending:4kB present:3129332kB managed:2621268kB mlocked:67588kB kernel_stack:12672kB pagetables:42404kB bounce:0kB free_pcp:716kB local_pcp:28kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:677116kB min:53612kB low:67012kB high:80412kB active_anon:2374176kB inactive_anon:307372kB active_file:55316kB inactive_file:29884kB unevictable:1084kB writepending:196kB present:3932160kB managed:3870192kB mlocked:1084kB kernel_stack:36544kB pagetables:97236kB bounce:0kB free_pcp:760kB local_pcp:540kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 23*4kB (UMEH) 24*8kB (UEH) 18*16kB (UMEH) 12*32kB (UMEH) 8*64kB (UH) 5*128kB (MEH) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10300kB Node 0 DMA32: 2849*4kB (UMEH) 320*8kB (UMEH) 254*16kB (UEH) 235*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25540kB Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 89*4kB (U) 42*8kB (UME) 20*16kB (UME) 138*32kB (UE) 47*64kB (UM) 2*128kB (M) 9*256kB (UM) 1*512kB (M) 2*1024kB (ME) 2*2048kB (ME) 161*4096kB (UM) = 677108kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 26041 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 339050 pages reserved 0 pages cma reserved syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) syz-executor.4 cpuset=/ mems_allowed=0-1 CPU: 1 PID: 5413 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113 alloc_pages include/linux/gfp.h:520 [inline] alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline] kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline] kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c889 RSP: 002b:00007f60c0e40c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f60c0e416d4 RCX: 000000000045c889 RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) syz-executor.4 cpuset=/ mems_allowed=0-1 CPU: 1 PID: 5430 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113 alloc_pages include/linux/gfp.h:520 [inline] alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline] kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline] kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c889 RSP: 002b:00007f60c0e40c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f60c0e416d4 RCX: 000000000045c889 RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) syz-executor.4 cpuset=/ mems_allowed=0-1 audit: type=1800 audit(1586857549.948:145): pid=5475 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=262152 res=0 CPU: 0 PID: 5463 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113 alloc_pages include/linux/gfp.h:520 [inline] alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline] kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline] kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684 audit: type=1800 audit(1586857550.138:146): pid=5475 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=294921 res=0 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c889 RSP: 002b:00007f60c0e40c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f60c0e416d4 RCX: 000000000045c889 RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c warn_alloc_show_mem: 2 callbacks suppressed Mem-Info: active_anon:915732 inactive_anon:215024 isolated_anon:0 active_file:13853 inactive_file:7465 isolated_file:0 unevictable:17168 dirty:72 writeback:0 unstable:0 slab_reclaimable:13867 slab_unreclaimable:118315 mapped:60911 shmem:4489 pagetables:35095 bounce:0 free:173930 free_pcp:618 free_cma:0 Node 0 active_anon:1278156kB inactive_anon:552724kB active_file:0kB inactive_file:4kB unevictable:67588kB isolated(anon):0kB isolated(file):0kB mapped:213752kB dirty:4kB writeback:0kB shmem:16884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 765952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 1 active_anon:2386372kB inactive_anon:307372kB active_file:55412kB inactive_file:29856kB unevictable:1084kB isolated(anon):0kB isolated(file):0kB mapped:29892kB dirty:284kB writeback:0kB shmem:1072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:1220kB inactive_anon:3464kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2557 2557 2557 2557 Node 0 DMA32 free:30364kB min:36272kB low:45340kB high:54408kB active_anon:1276936kB inactive_anon:549260kB active_file:0kB inactive_file:4kB unevictable:67588kB writepending:4kB present:3129332kB managed:2621268kB mlocked:67588kB kernel_stack:12672kB pagetables:42404kB bounce:0kB free_pcp:948kB local_pcp:680kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:655408kB min:53612kB low:67012kB high:80412kB active_anon:2384652kB inactive_anon:307372kB active_file:55416kB inactive_file:29912kB unevictable:1084kB writepending:304kB present:3932160kB managed:3870192kB mlocked:1084kB kernel_stack:36672kB pagetables:97532kB bounce:0kB free_pcp:1260kB local_pcp:636kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 32*4kB (UMEH) 24*8kB (UEH) 18*16kB (UMEH) 12*32kB (UMEH) 8*64kB (UH) 5*128kB (MEH) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10336kB Node 0 DMA32: 459*4kB (UMEH) 1813*8kB (UMEH) 385*16kB (UEH) 236*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30052kB Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 101*4kB (UME) 135*8kB (UME) 28*16kB (UME) 16*32kB (UME) 13*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 2*1024kB (ME) 1*2048kB (E) 158*4096kB (UM) = 655436kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 26064 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 339050 pages reserved 0 pages cma reserved syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) syz-executor.4 cpuset=/ mems_allowed=0-1 CPU: 1 PID: 5522 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113 alloc_pages include/linux/gfp.h:520 [inline] alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline] kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline] kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c889 RSP: 002b:00007f60c0e40c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f60c0e416d4 RCX: 000000000045c889 RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) syz-executor.4 cpuset=/ mems_allowed=0-1 CPU: 0 PID: 5540 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113 alloc_pages include/linux/gfp.h:520 [inline] alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline] kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline] kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c889 RSP: 002b:00007f60c0e40c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f60c0e416d4 RCX: 000000000045c889 RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c warn_alloc_show_mem: 1 callbacks suppressed Mem-Info: active_anon:915789 inactive_anon:215024 isolated_anon:0 active_file:13855 inactive_file:7259 isolated_file:0 unevictable:17168 dirty:97 writeback:0 unstable:0 slab_reclaimable:13846 slab_unreclaimable:118724 mapped:61025 shmem:4489 pagetables:35124 bounce:0 free:173833 free_pcp:516 free_cma:0 Node 0 active_anon:1278156kB inactive_anon:552724kB active_file:4kB inactive_file:0kB unevictable:67588kB isolated(anon):0kB isolated(file):0kB mapped:213808kB dirty:4kB writeback:0kB shmem:16884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 765952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 1 active_anon:2385000kB inactive_anon:307372kB active_file:55416kB inactive_file:29036kB unevictable:1084kB isolated(anon):0kB isolated(file):0kB mapped:30292kB dirty:384kB writeback:0kB shmem:1072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:1220kB inactive_anon:3464kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2557 2557 2557 2557 Node 0 DMA32 free:21872kB min:36272kB low:45340kB high:54408kB active_anon:1276936kB inactive_anon:549260kB active_file:4kB inactive_file:0kB unevictable:67588kB writepending:4kB present:3129332kB managed:2621268kB mlocked:67588kB kernel_stack:12672kB pagetables:42404kB bounce:0kB free_pcp:1384kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:663144kB min:53612kB low:67012kB high:80412kB active_anon:2385000kB inactive_anon:307372kB active_file:55416kB inactive_file:29036kB unevictable:1084kB writepending:384kB present:3932160kB managed:3870192kB mlocked:1084kB kernel_stack:36704kB pagetables:97956kB bounce:0kB free_pcp:680kB local_pcp:340kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 27*4kB (UMEH) 24*8kB (UEH) 18*16kB (UMEH) 12*32kB (UMEH) 8*64kB (UH) 5*128kB (MEH) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10316kB Node 0 DMA32: 402*4kB (UMEH) 691*8kB (UMEH) 451*16kB (UEH) 236*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21904kB Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 976*4kB (UME) 639*8kB (UE) 311*16kB (UE) 4*32kB (UME) 2*64kB (M) 3*128kB (M) 1*256kB (M) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 157*4096kB (M) = 663080kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 25820 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 339050 pages reserved 0 pages cma reserved syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) syz-executor.4 cpuset=/ mems_allowed=0-1 CPU: 1 PID: 5570 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248 __alloc_pages_slowpath+0x2114/0x26c0 mm/page_alloc.c:4095 __alloc_pages_nodemask+0x5d3/0x700 mm/page_alloc.c:4198 alloc_pages_current+0xe7/0x1e0 mm/mempolicy.c:2113 alloc_pages include/linux/gfp.h:520 [inline] alloc_mmu_pages arch/x86/kvm/mmu.c:5142 [inline] kvm_mmu_create+0xd1/0x1c0 arch/x86/kvm/mmu.c:5160 kvm_arch_vcpu_init+0x28b/0x8b0 arch/x86/kvm/x86.c:8306 kvm_vcpu_init+0x26d/0x360 arch/x86/kvm/../../../virt/kvm/kvm_main.c:320 vmx_create_vcpu+0xf3/0x2900 arch/x86/kvm/vmx.c:10072 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2549 [inline] kvm_vm_ioctl+0x49c/0x1430 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3057 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c889 RSP: 002b:00007f60c0e40c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f60c0e416d4 RCX: 000000000045c889 RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000