syzbot

 sign-in | mailing list | source | docs
🐞 Open [712]
🐞 Fixed [297]
🐞 Invalid [838]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

INFO: rcu detected stall in ext4_filemap_fault (3)

Status: auto-obsoleted due to no activity on 2022/09/09 17:56
Reported-by: syzbot+6a6eb922d9f094df2417@syzkaller.appspotmail.com
First crash: 954d, last: 924d
▶ ▼ Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: rcu detected stall in ext4_filemap_fault (2) 1 1579d 1579d 0/1 auto-closed as invalid on 2020/11/23 02:32
android-49 INFO: rcu detected stall in ext4_filemap_fault C 1 1898d 1898d 0/3 public: reported C repro on 2019/09/11 03:52
upstream INFO: rcu detected stall in ext4_filemap_fault mm 109 2089d 2260d 0/28 closed as dup on 2019/01/02 16:36
android-414 INFO: rcu detected stall in ext4_filemap_fault 1 2158d 2052d 0/1 auto-closed as invalid on 2019/06/22 22:11
linux-4.19 INFO: rcu detected stall in ext4_filemap_fault 4 1767d 1918d 0/1 auto-closed as invalid on 2020/05/18 19:50
linux-4.14 INFO: rcu detected stall in ext4_filemap_fault 1 1821d 1821d 0/1 auto-closed as invalid on 2020/03/25 22:24
upstream INFO: rcu detected stall in ext4_filemap_fault (2) cgroups 1 1864d 1863d 0/28 auto-closed as invalid on 2020/01/13 18:23
android-414 INFO: rcu detected stall in ext4_filemap_fault (2) 2 1817d 1862d 0/1 auto-closed as invalid on 2020/03/30 02:23

Sample crash report:
CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0
rcu: INFO: rcu_preempt self-detected stall on CPU
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
rcu: 	1-...!: (276 ticks this GP) idle=162/1/0x4000000000000004 softirq=146475/146477 fqs=0 
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
rcu: 	 (t=10545 jiffies g=229925 q=4)
rcu: rcu_preempt kthread starved for 10545 jiffies! g229925 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: RCU grace-period kthread stack dump:
rcu_preempt     R  running task    29208    10      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
 schedule_timeout+0x4cf/0xfe0 kernel/time/timer.c:1818
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:995 [inline]
 ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
 rcu_gp_kthread+0xdad/0x21c0 kernel/rcu/tree.c:2202
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 kthread+0x33f/0x460 kernel/kthread.c:259
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
NMI backtrace for cpu 1
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123
Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8
RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df
RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff
R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052
 dump_header+0x15d/0xc3f mm/oom_kill.c:443
 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
 out_of_memory mm/oom_kill.c:1114 [inline]
 out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4255 [inline]
 __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419
 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197
 alloc_pages include/linux/gfp.h:532 [inline]
 __page_cache_alloc mm/filemap.c:969 [inline]
 page_cache_read mm/filemap.c:2408 [inline]
 filemap_fault+0x146e/0x2180 mm/filemap.c:2592
 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379
 __do_fault+0x10b/0x4b0 mm/memory.c:3403
 do_read_fault mm/memory.c:3815 [inline]
 do_fault mm/memory.c:3944 [inline]
 handle_pte_fault mm/memory.c:4175 [inline]
 __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299
 handle_mm_fault+0x436/0xb10 mm/memory.c:4336
 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x466ae0
Code: Bad RIP value.
RSP: 002b:00007ffc2137c080 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0
RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003
RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64
R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108
R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f
warn_alloc_show_mem: 1 callbacks suppressed
CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
Mem-Info:
active_anon:137320 inactive_anon:6092 isolated_anon:0
 active_file:14 inactive_file:14 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:11037 slab_unreclaimable:1497063
 mapped:18311 shmem:7391 pagetables:765 bounce:0
 free:11084 free_pcp:278 free_cma:0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Call Trace:
Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
lowmem_reserve[]: 0 2693 2695 2695 2695
 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101
Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB
lowmem_reserve[]: 0 0 1 1 1
 nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 lib/nmi_backtrace.c:62
Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x15f/0x19c kernel/rcu/tree.c:1340
lowmem_reserve[]: 0 0 0 0 0
 print_cpu_stall kernel/rcu/tree.c:1478 [inline]
 check_cpu_stall kernel/rcu/tree.c:1550 [inline]
 __rcu_pending kernel/rcu/tree.c:3293 [inline]
 rcu_pending kernel/rcu/tree.c:3336 [inline]
 rcu_check_callbacks.cold+0x62d/0xe19 kernel/rcu/tree.c:2682
Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB
 update_process_times+0x2a/0x70 kernel/time/timer.c:1650
Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB
 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:168
Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
 tick_sched_timer+0xfc/0x290 kernel/time/tick-sched.c:1278
Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB
 __run_hrtimer kernel/time/hrtimer.c:1465 [inline]
 __hrtimer_run_queues+0x3f6/0xe60 kernel/time/hrtimer.c:1527
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
7419 total pagecache pages
0 pages in swap cache
 hrtimer_interrupt+0x326/0x9e0 kernel/time/hrtimer.c:1585
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1071 [inline]
 smp_apic_timer_interrupt+0x10c/0x550 arch/x86/kernel/apic/apic.c:1096
Total swap = 0kB
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
2097051 pages RAM
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:slab_alloc_node mm/slab.c:3334 [inline]
RIP: 0010:kmem_cache_alloc_node+0x2ee/0x3b0 mm/slab.c:3647
0 pages HighMem/MovableOnly
Code: fe ff ff 48 f7 04 24 00 02 00 00 0f 84 1f fe ff ff e8 86 9e cf ff 48 83 3d c6 77 59 08 00 0f 84 aa 00 00 00 48 8b 3c 24 57 9d <0f> 1f 44 00 00 e9 1a fe ff ff 65 ff 05 71 d4 69 7e 48 8b 05 e2 f0
369649 pages reserved
RSP: 0018:ffff8880ba107b70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
0 pages cma reserved
RAX: 0000000000000007 RBX: 0000000000480020 RCX: 1ffff110129919e2
RDX: 0000000000000000 RSI: ffff888094c8cf18 RDI: 0000000000000286
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
RBP: ffff88823b33a540 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff
R13: 0000000000000000 R14: 0000000000480020 R15: ffff88823b33a540
syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
syz-fuzzer cpuset=/ mems_allowed=0-1
 alloc_skb include/linux/skbuff.h:995 [inline]
 new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:slab_alloc mm/slab.c:3390 [inline]
RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557
Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5
RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286
RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286
 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293
 ____bpf_clone_redirect net/core/filter.c:2079 [inline]
 bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066
 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184
CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-executor.3 cpuset=/ mems_allowed=0-1
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:995 [inline]
 ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123
Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8
RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df
RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff
R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052
 dump_header+0x15d/0xc3f mm/oom_kill.c:443
 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
 out_of_memory mm/oom_kill.c:1114 [inline]
 out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4255 [inline]
 __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419
 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197
 alloc_pages include/linux/gfp.h:532 [inline]
 __page_cache_alloc mm/filemap.c:969 [inline]
 page_cache_read mm/filemap.c:2408 [inline]
 filemap_fault+0x146e/0x2180 mm/filemap.c:2592
 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379
 __do_fault+0x10b/0x4b0 mm/memory.c:3403
 do_read_fault mm/memory.c:3815 [inline]
 do_fault mm/memory.c:3944 [inline]
 handle_pte_fault mm/memory.c:4175 [inline]
 __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299
 handle_mm_fault+0x436/0xb10 mm/memory.c:4336
 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x466ae0
Code: Bad RIP value.
RSP: 002b:00007ffc2137c080 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0
RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003
RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64
R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108
R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f
Mem-Info:
CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
active_anon:137320 inactive_anon:6092 isolated_anon:0
 active_file:14 inactive_file:14 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:11037 slab_unreclaimable:1497063
 mapped:18311 shmem:7391 pagetables:765 bounce:0
 free:11084 free_pcp:278 free_cma:0
Call Trace:
Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
lowmem_reserve[]: 0 2693 2695 2695 2695
Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB
lowmem_reserve[]: 0 0 1 1 1
Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
lowmem_reserve[]: 0 0 0 0 0
Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB
Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB
Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
7419 total pagecache pages
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
0 pages in swap cache
 alloc_skb include/linux/skbuff.h:995 [inline]
 new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374
Total swap = 0kB
2097051 pages RAM
0 pages HighMem/MovableOnly
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
369649 pages reserved
0 pages cma reserved
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-fuzzer cpuset=/ mems_allowed=0-1
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:slab_alloc mm/slab.c:3390 [inline]
RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557
Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5
RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286
RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286
 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293
 ____bpf_clone_redirect net/core/filter.c:2079 [inline]
 bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066
 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184
CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 <IRQ>
syz-executor.3 cpuset=/ mems_allowed=0-1
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:995 [inline]
 nlmsg_new include/net/netlink.h:511 [inline]
 __br_mdb_notify+0x25e/0xf50 net/bridge/br_mdb.c:377
 br_mdb_notify+0x20d/0x2e0 net/bridge/br_mdb.c:410
 br_multicast_del_pg+0x2b0/0x560 net/bridge/br_multicast.c:292
 br_multicast_port_group_expired+0x17c/0x1d0 net/bridge/br_multicast.c:316
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123
Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8
RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df
RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff
R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052
 dump_header+0x15d/0xc3f mm/oom_kill.c:443
 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
 out_of_memory mm/oom_kill.c:1114 [inline]
 out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4255 [inline]
 __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419
 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197
 alloc_pages include/linux/gfp.h:532 [inline]
 __page_cache_alloc mm/filemap.c:969 [inline]
 page_cache_read mm/filemap.c:2408 [inline]
 filemap_fault+0x146e/0x2180 mm/filemap.c:2592
 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379
 __do_fault+0x10b/0x4b0 mm/memory.c:3403
 do_read_fault mm/memory.c:3815 [inline]
 do_fault mm/memory.c:3944 [inline]
 handle_pte_fault mm/memory.c:4175 [inline]
 __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299
 handle_mm_fault+0x436/0xb10 mm/memory.c:4336
 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x466ae0
Code: Bad RIP value.
RSP: 002b:00007ffc2137c080 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0
RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003
RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64
R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108
R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f
CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
active_anon:137320 inactive_anon:6092 isolated_anon:0
 active_file:14 inactive_file:14 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:11037 slab_unreclaimable:1497063
 mapped:18311 shmem:7391 pagetables:765 bounce:0
 free:11084 free_pcp:278 free_cma:0
 <IRQ>
Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 2693 2695 2695 2695
Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB
lowmem_reserve[]: 0 0 1 1 1
Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
lowmem_reserve[]: 0 0 0 0 0
Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB
Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB
Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
7419 total pagecache pages
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
0 pages in swap cache
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
 alloc_skb include/linux/skbuff.h:995 [inline]
 new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67
Total swap = 0kB
2097051 pages RAM
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374
0 pages HighMem/MovableOnly
369649 pages reserved
0 pages cma reserved
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-fuzzer cpuset=/ mems_allowed=0-1
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:slab_alloc mm/slab.c:3390 [inline]
RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557
Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5
RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286
RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286
 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293
 ____bpf_clone_redirect net/core/filter.c:2079 [inline]
 bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066
 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184
CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-executor.3 cpuset=/ mems_allowed=0-1
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:995 [inline]
 nlmsg_new include/net/netlink.h:511 [inline]
 __br_mdb_notify+0x25e/0xf50 net/bridge/br_mdb.c:377
 br_mdb_notify+0x20d/0x2e0 net/bridge/br_mdb.c:410
 br_multicast_del_pg+0x2b0/0x560 net/bridge/br_multicast.c:292
 br_multicast_port_group_expired+0x17c/0x1d0 net/bridge/br_multicast.c:316
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123
Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8
RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df
RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff
R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052
 dump_header+0x15d/0xc3f mm/oom_kill.c:443
 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
 out_of_memory mm/oom_kill.c:1114 [inline]
 out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4255 [inline]
 __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419
 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197
 alloc_pages include/linux/gfp.h:532 [inline]
 __page_cache_alloc mm/filemap.c:969 [inline]
 page_cache_read mm/filemap.c:2408 [inline]
 filemap_fault+0x146e/0x2180 mm/filemap.c:2592
 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379
 __do_fault+0x10b/0x4b0 mm/memory.c:3403
 do_read_fault mm/memory.c:3815 [inline]
 do_fault mm/memory.c:3944 [inline]
 handle_pte_fault mm/memory.c:4175 [inline]
 __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299
 handle_mm_fault+0x436/0xb10 mm/memory.c:4336
 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x466ae0
Code: Bad RIP value.
RSP: 002b:00007ffc2137c080 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0
RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003
RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64
R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108
R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f
warn_alloc_show_mem: 1 callbacks suppressed
CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
Mem-Info:
active_anon:137320 inactive_anon:6092 isolated_anon:0
 active_file:14 inactive_file:14 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:11037 slab_unreclaimable:1497063
 mapped:18311 shmem:7391 pagetables:765 bounce:0
 free:11084 free_pcp:278 free_cma:0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Call Trace:
Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
lowmem_reserve[]: 0 2693 2695 2695 2695
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB
lowmem_reserve[]: 0 0 1 1 1
Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB
Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB
Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
7419 total pagecache pages
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
0 pages in swap cache
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
Total swap = 0kB
 alloc_skb include/linux/skbuff.h:995 [inline]
 new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67
2097051 pages RAM
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374
0 pages HighMem/MovableOnly
369649 pages reserved
0 pages cma reserved
syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
syz-fuzzer cpuset=/ mems_allowed=0-1
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:slab_alloc mm/slab.c:3390 [inline]
RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557
Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5
RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286
RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286
 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293
 ____bpf_clone_redirect net/core/filter.c:2079 [inline]
 bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066
 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184
CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-executor.3 cpuset=/ mems_allowed=0-1
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:995 [inline]
 ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123
Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8
RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df
RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff
R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052
 dump_header+0x15d/0xc3f mm/oom_kill.c:443
 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
 out_of_memory mm/oom_kill.c:1114 [inline]
 out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4255 [inline]
 __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419
 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197
 alloc_pages include/linux/gfp.h:532 [inline]
 __page_cache_alloc mm/filemap.c:969 [inline]
 page_cache_read mm/filemap.c:2408 [inline]
 filemap_fault+0x146e/0x2180 mm/filemap.c:2592
 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379
 __do_fault+0x10b/0x4b0 mm/memory.c:3403
 do_read_fault mm/memory.c:3815 [inline]
 do_fault mm/memory.c:3944 [inline]
 handle_pte_fault mm/memory.c:4175 [inline]
 __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299
 handle_mm_fault+0x436/0xb10 mm/memory.c:4336
 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x466ae0
Code: Bad RIP value.
RSP: 002b:00007ffc2137c080 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0
RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003
RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64
R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108
R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f
warn_alloc_show_mem: 1 callbacks suppressed
CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
Mem-Info:
active_anon:137320 inactive_anon:6092 isolated_anon:0
 active_file:14 inactive_file:14 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:11037 slab_unreclaimable:1497063
 mapped:18311 shmem:7391 pagetables:765 bounce:0
 free:11084 free_pcp:278 free_cma:0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
lowmem_reserve[]: 0 2693 2695 2695 2695
Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB
lowmem_reserve[]: 0 0 1 1 1
Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
lowmem_reserve[]: 0 0 0 0 0
Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB
Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB
Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
7419 total pagecache pages
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
0 pages in swap cache
 alloc_skb include/linux/skbuff.h:995 [inline]
 new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67
Swap cache stats: add 0, delete 0, find 0/0
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374
Free swap  = 0kB
Total swap = 0kB
2097051 pages RAM
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
0 pages HighMem/MovableOnly
369649 pages reserved
0 pages cma reserved
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
syz-fuzzer cpuset=/ mems_allowed=0-1
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:slab_alloc mm/slab.c:3390 [inline]
RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557
Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5
RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286
RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286
 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293
 ____bpf_clone_redirect net/core/filter.c:2079 [inline]
 bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066
 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184
CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-executor.3 cpuset=/ mems_allowed=0-1
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:995 [inline]
 ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123
Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8
RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df
RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff
R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052
 dump_header+0x15d/0xc3f mm/oom_kill.c:443
 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
 out_of_memory mm/oom_kill.c:1114 [inline]
 out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4255 [inline]
 __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419
 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197
 alloc_pages include/linux/gfp.h:532 [inline]
 __page_cache_alloc mm/filemap.c:969 [inline]
 page_cache_read mm/filemap.c:2408 [inline]
 filemap_fault+0x146e/0x2180 mm/filemap.c:2592
 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379
 __do_fault+0x10b/0x4b0 mm/memory.c:3403
 do_read_fault mm/memory.c:3815 [inline]
 do_fault mm/memory.c:3944 [inline]
 handle_pte_fault mm/memory.c:4175 [inline]
 __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299
 handle_mm_fault+0x436/0xb10 mm/memory.c:4336
 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x466ae0
Code: Bad RIP value.
RSP: 002b:00007ffc2137c080 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0
RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003
RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64
R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108
R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f
warn_alloc_show_mem: 1 callbacks suppressed
CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
Mem-Info:
active_anon:137320 inactive_anon:6092 isolated_anon:0
 active_file:14 inactive_file:14 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:11037 slab_unreclaimable:1497063
 mapped:18311 shmem:7391 pagetables:765 bounce:0
 free:11084 free_pcp:278 free_cma:0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Call Trace:
Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
lowmem_reserve[]: 0 2693 2695 2695 2695
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB
lowmem_reserve[]: 0 0 1 1 1
Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB
Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB
Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
7419 total pagecache pages
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
0 pages in swap cache
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
Swap cache stats: add 0, delete 0, find 0/0
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
Free swap  = 0kB
Total swap = 0kB
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
2097051 pages RAM
 alloc_skb include/linux/skbuff.h:995 [inline]
 new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67
0 pages HighMem/MovableOnly
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374
369649 pages reserved
0 pages cma reserved
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
syz-fuzzer cpuset=/ mems_allowed=0-1
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:slab_alloc mm/slab.c:3390 [inline]
RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557
Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5
RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286
RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286
 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293
 ____bpf_clone_redirect net/core/filter.c:2079 [inline]
 bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066
 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184
CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-executor.3 cpuset=/ mems_allowed=0-1
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:995 [inline]
 ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123
Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8
RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df
RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff
R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052
 dump_header+0x15d/0xc3f mm/oom_kill.c:443
 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
 out_of_memory mm/oom_kill.c:1114 [inline]
 out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4255 [inline]
 __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419
 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197
 alloc_pages include/linux/gfp.h:532 [inline]
 __page_cache_alloc mm/filemap.c:969 [inline]
 page_cache_read mm/filemap.c:2408 [inline]
 filemap_fault+0x146e/0x2180 mm/filemap.c:2592
 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379
 __do_fault+0x10b/0x4b0 mm/memory.c:3403
 do_read_fault mm/memory.c:3815 [inline]
 do_fault mm/memory.c:3944 [inline]
 handle_pte_fault mm/memory.c:4175 [inline]
 __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299
 handle_mm_fault+0x436/0xb10 mm/memory.c:4336
 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x466ae0
Code: Bad RIP value.
RSP: 002b:00007ffc2137c080 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0
RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003
RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64
R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108
R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f
warn_alloc_show_mem: 1 callbacks suppressed
CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
Mem-Info:
active_anon:137320 inactive_anon:6092 isolated_anon:0
 active_file:14 inactive_file:14 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:11037 slab_unreclaimable:1497063
 mapped:18311 shmem:7391 pagetables:765 bounce:0
 free:11084 free_pcp:278 free_cma:0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Call Trace:
Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
lowmem_reserve[]: 0 2693 2695 2695 2695
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB
lowmem_reserve[]: 0 0 1 1 1
Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB
Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB
Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
7419 total pagecache pages
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
0 pages in swap cache
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
Swap cache stats: add 0, delete 0, find 0/0
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
Free swap  = 0kB
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
Total swap = 0kB
2097051 pages RAM
 alloc_skb include/linux/skbuff.h:995 [inline]
 new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67
0 pages HighMem/MovableOnly
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374
369649 pages reserved
0 pages cma reserved
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
syz-fuzzer cpuset=/ mems_allowed=0-1
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:slab_alloc mm/slab.c:3390 [inline]
RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557
Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5
RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286
RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286
 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293
 ____bpf_clone_redirect net/core/filter.c:2079 [inline]
 bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066
 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184
CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-executor.3 cpuset=/ mems_allowed=0-1
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:995 [inline]
 ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123
Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8
RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df
RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff
R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052
 dump_header+0x15d/0xc3f mm/oom_kill.c:443
 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
 out_of_memory mm/oom_kill.c:1114 [inline]
 out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4255 [inline]
 __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419
 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197
 alloc_pages include/linux/gfp.h:532 [inline]
 __page_cache_alloc mm/filemap.c:969 [inline]
 page_cache_read mm/filemap.c:2408 [inline]
 filemap_fault+0x146e/0x2180 mm/filemap.c:2592
 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379
 __do_fault+0x10b/0x4b0 mm/memory.c:3403
 do_read_fault mm/memory.c:3815 [inline]
 do_fault mm/memory.c:3944 [inline]
 handle_pte_fault mm/memory.c:4175 [inline]
 __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299
 handle_mm_fault+0x436/0xb10 mm/memory.c:4336
 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x466ae0
Code: Bad RIP value.
RSP: 002b:00007ffc2137c080 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0
RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003
RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64
R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108
R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f
warn_alloc_show_mem: 1 callbacks suppressed
CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
Mem-Info:
active_anon:137320 inactive_anon:6092 isolated_anon:0
 active_file:14 inactive_file:14 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:11037 slab_unreclaimable:1497063
 mapped:18311 shmem:7391 pagetables:765 bounce:0
 free:11084 free_pcp:278 free_cma:0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Call Trace:
Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
lowmem_reserve[]: 0 2693 2695 2695 2695
 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457
Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB
lowmem_reserve[]: 0 0 1 1 1
Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline]
 __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419
lowmem_reserve[]: 0 0 0 0 0
Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB
Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB
Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
7419 total pagecache pages
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
0 pages in swap cache
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
 __alloc_skb+0x71/0x560 net/core/skbuff.c:193
Total swap = 0kB
2097051 pages RAM
 alloc_skb include/linux/skbuff.h:995 [inline]
 new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67
0 pages HighMem/MovableOnly
369649 pages reserved
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374
0 pages cma reserved
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
syz-fuzzer cpuset=/ mems_allowed=0-1
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1696 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
 __do_softirq+0x265/0x980 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:slab_alloc mm/slab.c:3390 [inline]
RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557
Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5
RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286
RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286
 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293
 ____bpf_clone_redirect net/core/filter.c:2079 [inline]
 bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066
 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184
----------------
Code disassembly (best guess):
   0:	00 74 0c 48          	add    %dh,0x48(%rsp,%rcx,1)
   4:	c7 c7 88 82 f1 89    	mov    $0x89f18288,%edi
   a:	e8 3f 0b 82 f9       	callq  0xf9820b4e
   f:	48 83 3d 5f 2b db 01 	cmpq   $0x0,0x1db2b5f(%rip)        # 0x1db2b76
  16:	00
  17:	75 07                	jne    0x20
  19:	e8 40 2e 4c f9       	callq  0xf94c2e5e
  1e:	0f 0b                	ud2
  20:	e8 39 2e 4c f9       	callq  0xf94c2e5e
  25:	48 89 df             	mov    %rbx,%rdi
  28:	57                   	push   %rdi
  29:	9d                   	popfq
* 2a:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1) <-- trapping instruction
  2f:	58                   	pop    %rax
  30:	5b                   	pop    %rbx
  31:	5d                   	pop    %rbp
  32:	41 5c                	pop    %r12
  34:	41 5d                	pop    %r13
  36:	41 5e                	pop    %r14
  38:	41 5f                	pop    %r15
  3a:	e9 1f 2e 4c f9       	jmpq   0xf94c2e5e
  3f:	e8                   	.byte 0xe8

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/05/12 17:55 linux-4.19.y 3f8a27f9e27b 9ad6612a .config console log report info ci2-linux-4-19 INFO: rcu detected stall in ext4_filemap_fault
2022/04/12 12:43 linux-4.19.y 3f8a27f9e27b af01ee7d .config console log report info ci2-linux-4-19 INFO: rcu detected stall in ext4_filemap_fault
* Struck through repros no longer work on HEAD.