syzbot


INFO: rcu detected stall in br_multicast_port_group_expired (2)

Status: closed as dup on 2019/01/02 16:28
Reported-by: syzbot+850758ffbbdc44744fc4@syzkaller.appspotmail.com
First crash: 1535d, last: 1495d
Duplicate of (1):
Title Repro Cause bisect Fix bisect Count Last Reported
INFO: rcu detected stall in ndisc_alloc_skb 1 1514d 1434d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in br_multicast_port_group_expired 1 1540d 1540d 0/24 closed as invalid on 2018/09/17 08:22

Sample crash report:
RAX: 0000000000000000 RBX: 00007ffd369e9c10 RCX: 00007f103728edd3
RDX: 0000000000000000 RSI: 00007ffd369e9dc0 RDI: 000000000000000b
RBP: 00007ffd369e9dc0 R08: 00007ffd369e9e40 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00007ffd369ea1a0 R14: 0000000000000000 R15: 0000000000000000
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	(detected by 0, t=10541 jiffies, g=40661, q=39)
rcu: All QSes seen, last rcu_preempt kthread activity 10463 (4294985938-4294975475), jiffies_till_next_fqs=1, root ->qsmask 0x0
init            R  running task    12488     1      0 0x80000008
Call Trace:
 <IRQ>
 sched_show_task.cold.81+0x2b6/0x30a kernel/sched/core.c:5301
 print_other_cpu_stall.cold.66+0x7dd/0x8bb kernel/rcu/tree.c:1286
 check_cpu_stall kernel/rcu/tree.c:1415 [inline]
 rcu_pending kernel/rcu/tree.c:2961 [inline]
 rcu_check_callbacks+0xfd7/0x13f0 kernel/rcu/tree.c:2506
 update_process_times+0x2d/0x70 kernel/time/timer.c:1636
 tick_sched_handle+0x9f/0x180 kernel/time/tick-sched.c:164
 tick_sched_timer+0x45/0x130 kernel/time/tick-sched.c:1274
 __run_hrtimer kernel/time/hrtimer.c:1398 [inline]
 __hrtimer_run_queues+0x41c/0x10d0 kernel/time/hrtimer.c:1460
 hrtimer_interrupt+0x313/0x780 kernel/time/hrtimer.c:1518
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1034 [inline]
 smp_apic_timer_interrupt+0x1a1/0x760 arch/x86/kernel/apic/apic.c:1059
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:801
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc_node mm/slab.c:3329 [inline]
RIP: 0010:kmem_cache_alloc_node+0x247/0x730 mm/slab.c:3642
Code: 3f 7e 0f 85 32 ff ff ff e8 65 5d 3e ff e9 28 ff ff ff e8 9c 6c c3 ff 48 83 3d d4 db 8f 07 00 0f 84 33 01 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 bf fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 c2 14
RSP: 0000:ffff8801dae071d8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 1ffff1003b34dd30
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000286
RBP: ffff8801dae07248 R08: ffff8801d9a6e980 R09: 0000000000000002
R10: 0000000000000000 R11: ffff8801d9a6e040 R12: ffff8801d9bcc600
R13: ffff8801d9bcc600 R14: 0000000000000000 R15: 0000000000000286
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 nlmsg_new include/net/netlink.h:654 [inline]
 __br_mdb_notify+0x4ff/0x15d0 net/bridge/br_mdb.c:407
 br_mdb_notify+0x310/0x410 net/bridge/br_mdb.c:440
 br_multicast_del_pg+0x3df/0x790 net/bridge/br_multicast.c:292
 br_multicast_port_group_expired+0x189/0x1e0 net/bridge/br_multicast.c:316
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:801
 </IRQ>
RIP: 0010:arch_local_irq_enable arch/x86/include/asm/paravirt.h:771 [inline]
RIP: 0010:preempt_schedule_irq+0xaf/0x140 kernel/sched/core.c:3706
Code: 00 e8 b5 da 89 f9 e8 50 bb b9 f9 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 75 73 48 83 3d 8a 2a 86 01 00 74 61 fb 66 0f 1f 44 00 00 <bf> 01 00 00 00 e8 f7 cd ff ff 41 80 7d 00 00 75 6c 48 83 3d 60 2a
RSP: 0000:ffff8801d9a76100 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff12a3f48 RBX: 0000000000000000 RCX: 1ffff1003b34dd26
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801d9a6e8bc
RBP: ffff8801d9a76128 R08: ffff8801d9a6e930 R09: 0000000000000006
R10: 0000000000000000 R11: ffff8801d9a6e040 R12: dffffc0000000000
R13: fffffbfff12a3f47 R14: ffffffff8951fa40 R15: ffffffff8951fa38
 retint_kernel+0x1b/0x2d
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:dump_stack+0x358/0x39d lib/dump_stack.c:118
Code: 74 0c 48 c7 c7 30 fa 51 89 e8 a1 9c fd f9 48 83 3d 29 00 8d 01 00 0f 84 63 fe ff ff e8 ee 69 ba f9 48 8b bd 70 ff ff ff 57 9d <0f> 1f 44 00 00 e8 db 69 ba f9 48 8b 8d 68 ff ff ff b8 ff ff 37 00
RSP: 0000:ffff8801d9a761e8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff02
RAX: ffff8801d9a6e040 RBX: 1ffffffff12a3f46 RCX: 1ffff1003b34dd26
RDX: 0000000000000000 RSI: ffffffff87c4fa12 RDI: 0000000000000293
RBP: ffff8801d9a76290 R08: ffff8801d9a6e930 R09: 0000000000000006
R10: 0000000000000000 R11: ffff8801d9a6e040 R12: 1ffff1003b34ec45
R13: 00000000ffffffff R14: 0000000000000200 R15: 0000000000000000
 dump_header+0x27b/0xf72 mm/oom_kill.c:441
 oom_kill_process.cold.27+0x10/0x903 mm/oom_kill.c:953
 out_of_memory+0xa84/0x1430 mm/oom_kill.c:1120
 __alloc_pages_may_oom mm/page_alloc.c:3520 [inline]
 __alloc_pages_slowpath+0x2354/0x2e10 mm/page_alloc.c:4241
 __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4396
 alloc_pages_current+0x173/0x350 mm/mempolicy.c:2107
 alloc_pages include/linux/gfp.h:509 [inline]
 __page_cache_alloc+0x38c/0x5c0 mm/filemap.c:924
 page_cache_read mm/filemap.c:2312 [inline]
 filemap_fault+0x1595/0x25f0 mm/filemap.c:2496
 ext4_filemap_fault+0x82/0xad fs/ext4/inode.c:6291
 __do_fault+0x100/0x6b0 mm/memory.c:2991
 do_read_fault mm/memory.c:3403 [inline]
 do_fault mm/memory.c:3529 [inline]
 handle_pte_fault mm/memory.c:3760 [inline]
 __handle_mm_fault+0x3ea6/0x5be0 mm/memory.c:3884
 handle_mm_fault+0x54f/0xc70 mm/memory.c:3921
 do_user_addr_fault arch/x86/mm/fault.c:1423 [inline]
 __do_page_fault+0x5e8/0xe60 arch/x86/mm/fault.c:1489
 do_page_fault+0xf2/0x7e0 arch/x86/mm/fault.c:1520
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1136
RIP: 0033:0x7f103728edd3
Code: Bad RIP value.
RSP: 002b:00007ffd369e9a68 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 00007ffd369e9c10 RCX: 00007f103728edd3
RDX: 0000000000000000 RSI: 00007ffd369e9dc0 RDI: 000000000000000b
RBP: 00007ffd369e9dc0 R08: 00007ffd369e9e40 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00007ffd369ea1a0 R14: 0000000000000000 R15: 0000000000000000
rcu: rcu_preempt kthread starved for 10463 jiffies! g40661 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: RCU grace-period kthread stack dump:
rcu_preempt     R  running task    21384    10      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2831 [inline]
 __schedule+0x8cf/0x21d0 kernel/sched/core.c:3480
 schedule+0xfe/0x460 kernel/sched/core.c:3524
 schedule_timeout+0x140/0x260 kernel/time/timer.c:1804
 rcu_gp_fqs_loop+0x762/0xa80 kernel/rcu/tree.c:1934
 rcu_gp_kthread+0x341/0xc70 kernel/rcu/tree.c:2090
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:350
syz-executor2: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
init: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-executor2 cpuset=syz2 mems_allowed=0
init cpuset=/ mems_allowed=0
CPU: 1 PID: 17909 Comm: syz-executor2 Not tainted 4.19.0+ #73
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3424
 __alloc_pages_slowpath+0x26e8/0x2e10 mm/page_alloc.c:4303
 __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4396
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 nlmsg_new include/net/netlink.h:654 [inline]
 __br_mdb_notify+0x4ff/0x15d0 net/bridge/br_mdb.c:407
 br_mdb_notify+0x310/0x410 net/bridge/br_mdb.c:440
 br_multicast_group_expired+0x1bc/0x610 net/bridge/br_multicast.c:253
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:801
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc_node mm/slab.c:3329 [inline]
RIP: 0010:kmem_cache_alloc_node_trace+0x249/0x740 mm/slab.c:3661
Code: 3f 7e 0f 85 32 ff ff ff e8 f3 28 3e ff e9 28 ff ff ff e8 2a 38 c3 ff 48 83 3d 62 a7 8f 07 00 0f 84 33 01 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 c1 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 c2 14
RSP: 0000:ffff8801997c7498 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff880199902f80 RDI: 0000000000000286
RBP: ffff8801997c7510 R08: ffff880199902700 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801da800940
R13: ffff8801da800940 R14: 0000000000000000 R15: 0000000000000286
 __do_kmalloc_node mm/slab.c:3683 [inline]
 __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3698
 __kmalloc_reserve.isra.40+0xcc/0xe0 net/core/skbuff.c:145
 pskb_expand_head+0x230/0x10f0 net/core/skbuff.c:1460
 skb_ensure_writable+0x3dd/0x640 net/core/skbuff.c:5071
 __bpf_try_make_writable net/core/filter.c:1638 [inline]
 bpf_try_make_writable net/core/filter.c:1644 [inline]
 bpf_try_make_head_writable net/core/filter.c:1652 [inline]
 ____bpf_clone_redirect net/core/filter.c:2089 [inline]
 bpf_clone_redirect+0x14a/0x490 net/core/filter.c:2067
 bpf_prog_3aea14b1f6cd0d8b+0xdc4/0x1000
warn_alloc_show_mem: 1 callbacks suppressed
CPU: 0 PID: 1 Comm: init Not tainted 4.19.0+ #73
Mem-Info:
active_anon:54290 inactive_anon:131 isolated_anon:0
 active_file:14 inactive_file:15 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9370 slab_unreclaimable:1465411
 mapped:49154 shmem:138 pagetables:633 bounce:0
 free:13712 free_pcp:273 free_cma:0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Node 0 active_anon:217160kB inactive_anon:524kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 200704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Call Trace:
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 <IRQ>
lowmem_reserve[]: 0 2818 6321 6321
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
Node 0 DMA32 free:25092kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888756kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 3503 3503
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3424
Node 0 Normal free:13848kB min:37364kB low:46704kB high:56044kB active_anon:217160kB inactive_anon:524kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:4718592kB managed:3587820kB mlocked:0kB kernel_stack:5504kB pagetables:2532kB bounce:0kB free_pcp:844kB local_pcp:356kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (UM) 4*32kB (M) 3*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (M) 3*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 25092kB
Node 0 Normal: 736*4kB (UMEH) 435*8kB (MEH) 186*16kB (ME) 69*32kB (UME) 7*64kB (MH) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 13848kB
 __alloc_pages_slowpath+0x26e8/0x2e10 mm/page_alloc.c:4303
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
167 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342858 pages reserved
0 pages cma reserved
syz-executor2: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-executor2 cpuset=syz2 mems_allowed=0
 __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4396
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3836
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:801
 </IRQ>
RIP: 0010:arch_local_irq_enable arch/x86/include/asm/paravirt.h:771 [inline]
RIP: 0010:preempt_schedule_irq+0xaf/0x140 kernel/sched/core.c:3706
Code: 00 e8 b5 da 89 f9 e8 50 bb b9 f9 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 75 73 48 83 3d 8a 2a 86 01 00 74 61 fb 66 0f 1f 44 00 00 <bf> 01 00 00 00 e8 f7 cd ff ff 41 80 7d 00 00 75 6c 48 83 3d 60 2a
RSP: 0000:ffff8801d9a76100 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff12a3f48 RBX: 0000000000000000 RCX: 1ffff1003b34dd26
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801d9a6e8bc
RBP: ffff8801d9a76128 R08: ffff8801d9a6e930 R09: 0000000000000006
R10: 0000000000000000 R11: ffff8801d9a6e040 R12: dffffc0000000000
R13: fffffbfff12a3f47 R14: ffffffff8951fa40 R15: ffffffff8951fa38
 retint_kernel+0x1b/0x2d
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:dump_stack+0x358/0x39d lib/dump_stack.c:118
Code: 74 0c 48 c7 c7 30 fa 51 89 e8 a1 9c fd f9 48 83 3d 29 00 8d 01 00 0f 84 63 fe ff ff e8 ee 69 ba f9 48 8b bd 70 ff ff ff 57 9d <0f> 1f 44 00 00 e8 db 69 ba f9 48 8b 8d 68 ff ff ff b8 ff ff 37 00
RSP: 0000:ffff8801d9a761e8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff02
RAX: ffff8801d9a6e040 RBX: 1ffffffff12a3f46 RCX: 1ffff1003b34dd26
RDX: 0000000000000000 RSI: ffffffff87c4fa12 RDI: 0000000000000293
RBP: ffff8801d9a76290 R08: ffff8801d9a6e930 R09: 0000000000000006
R10: 0000000000000000 R11: ffff8801d9a6e040 R12: 1ffff1003b34ec45
R13: 00000000ffffffff R14: 0000000000000200 R15: 0000000000000000
 dump_header+0x27b/0xf72 mm/oom_kill.c:441
 oom_kill_process.cold.27+0x10/0x903 mm/oom_kill.c:953
 out_of_memory+0xa84/0x1430 mm/oom_kill.c:1120
 __alloc_pages_may_oom mm/page_alloc.c:3520 [inline]
 __alloc_pages_slowpath+0x2354/0x2e10 mm/page_alloc.c:4241
 __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4396
 alloc_pages_current+0x173/0x350 mm/mempolicy.c:2107
 alloc_pages include/linux/gfp.h:509 [inline]
 __page_cache_alloc+0x38c/0x5c0 mm/filemap.c:924
 page_cache_read mm/filemap.c:2312 [inline]
 filemap_fault+0x1595/0x25f0 mm/filemap.c:2496
 ext4_filemap_fault+0x82/0xad fs/ext4/inode.c:6291
 __do_fault+0x100/0x6b0 mm/memory.c:2991
 do_read_fault mm/memory.c:3403 [inline]
 do_fault mm/memory.c:3529 [inline]
 handle_pte_fault mm/memory.c:3760 [inline]
 __handle_mm_fault+0x3ea6/0x5be0 mm/memory.c:3884
 handle_mm_fault+0x54f/0xc70 mm/memory.c:3921
 do_user_addr_fault arch/x86/mm/fault.c:1423 [inline]
 __do_page_fault+0x5e8/0xe60 arch/x86/mm/fault.c:1489
 do_page_fault+0xf2/0x7e0 arch/x86/mm/fault.c:1520
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1136
RIP: 0033:0x7f103728edd3
Code: Bad RIP value.
RSP: 002b:00007ffd369e9a68 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 00007ffd369e9c10 RCX: 00007f103728edd3
RDX: 0000000000000000 RSI: 00007ffd369e9dc0 RDI: 000000000000000b
RBP: 00007ffd369e9dc0 R08: 00007ffd369e9e40 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00007ffd369ea1a0 R14: 0000000000000000 R15: 0000000000000000
CPU: 1 PID: 17909 Comm: syz-executor2 Not tainted 4.19.0+ #73
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
init: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3424
init cpuset=/ mems_allowed=0
 __alloc_pages_slowpath+0x26e8/0x2e10 mm/page_alloc.c:4303
 __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4396
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 nlmsg_new include/net/netlink.h:654 [inline]
 __br_mdb_notify+0x4ff/0x15d0 net/bridge/br_mdb.c:407
 br_mdb_notify+0x310/0x410 net/bridge/br_mdb.c:440
 br_multicast_group_expired+0x1bc/0x610 net/bridge/br_multicast.c:253
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:801
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc_node mm/slab.c:3329 [inline]
RIP: 0010:kmem_cache_alloc_node_trace+0x249/0x740 mm/slab.c:3661
Code: 3f 7e 0f 85 32 ff ff ff e8 f3 28 3e ff e9 28 ff ff ff e8 2a 38 c3 ff 48 83 3d 62 a7 8f 07 00 0f 84 33 01 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 c1 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 c2 14
RSP: 0000:ffff8801997c7498 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff880199902f80 RDI: 0000000000000286
RBP: ffff8801997c7510 R08: ffff880199902700 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801da800940
R13: ffff8801da800940 R14: 0000000000000000 R15: 0000000000000286
 __do_kmalloc_node mm/slab.c:3683 [inline]
 __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3698
 __kmalloc_reserve.isra.40+0xcc/0xe0 net/core/skbuff.c:145
 pskb_expand_head+0x230/0x10f0 net/core/skbuff.c:1460
 skb_ensure_writable+0x3dd/0x640 net/core/skbuff.c:5071
 __bpf_try_make_writable net/core/filter.c:1638 [inline]
 bpf_try_make_writable net/core/filter.c:1644 [inline]
 bpf_try_make_head_writable net/core/filter.c:1652 [inline]
 ____bpf_clone_redirect net/core/filter.c:2089 [inline]
 bpf_clone_redirect+0x14a/0x490 net/core/filter.c:2067
 bpf_prog_3aea14b1f6cd0d8b+0xdc4/0x1000
CPU: 0 PID: 1 Comm: init Not tainted 4.19.0+ #73
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
active_anon:54290 inactive_anon:131 isolated_anon:0
 active_file:14 inactive_file:15 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9370 slab_unreclaimable:1465411
 mapped:49154 shmem:138 pagetables:633 bounce:0
 free:13712 free_pcp:273 free_cma:0
Call Trace:
Node 0 active_anon:217160kB inactive_anon:524kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 200704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
lowmem_reserve[]: 0 2818 6321 6321
Node 0 DMA32 free:25092kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888756kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3424
lowmem_reserve[]: 0 0 3503 3503
Node 0 Normal free:13848kB min:37364kB low:46704kB high:56044kB active_anon:217160kB inactive_anon:524kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:4718592kB managed:3587820kB mlocked:0kB kernel_stack:5504kB pagetables:2532kB bounce:0kB free_pcp:844kB local_pcp:356kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (UM) 4*32kB (M) 3*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (M) 3*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 25092kB
 __alloc_pages_slowpath+0x26e8/0x2e10 mm/page_alloc.c:4303
Node 0 Normal: 736*4kB (UMEH) 435*8kB (MEH) 186*16kB (ME) 69*32kB (UME) 7*64kB (MH) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 13848kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
167 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342858 pages reserved
0 pages cma reserved
syz-executor2: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-executor2 cpuset=syz2 mems_allowed=0
 __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4396
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3836
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:801
 </IRQ>
RIP: 0010:arch_local_irq_enable arch/x86/include/asm/paravirt.h:771 [inline]
RIP: 0010:preempt_schedule_irq+0xaf/0x140 kernel/sched/core.c:3706
Code: 00 e8 b5 da 89 f9 e8 50 bb b9 f9 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 75 73 48 83 3d 8a 2a 86 01 00 74 61 fb 66 0f 1f 44 00 00 <bf> 01 00 00 00 e8 f7 cd ff ff 41 80 7d 00 00 75 6c 48 83 3d 60 2a
RSP: 0000:ffff8801d9a76100 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff12a3f48 RBX: 0000000000000000 RCX: 1ffff1003b34dd26
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801d9a6e8bc
RBP: ffff8801d9a76128 R08: ffff8801d9a6e930 R09: 0000000000000006
R10: 0000000000000000 R11: ffff8801d9a6e040 R12: dffffc0000000000
R13: fffffbfff12a3f47 R14: ffffffff8951fa40 R15: ffffffff8951fa38
 retint_kernel+0x1b/0x2d
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:dump_stack+0x358/0x39d lib/dump_stack.c:118
Code: 74 0c 48 c7 c7 30 fa 51 89 e8 a1 9c fd f9 48 83 3d 29 00 8d 01 00 0f 84 63 fe ff ff e8 ee 69 ba f9 48 8b bd 70 ff ff ff 57 9d <0f> 1f 44 00 00 e8 db 69 ba f9 48 8b 8d 68 ff ff ff b8 ff ff 37 00
RSP: 0000:ffff8801d9a761e8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff02
RAX: ffff8801d9a6e040 RBX: 1ffffffff12a3f46 RCX: 1ffff1003b34dd26
RDX: 0000000000000000 RSI: ffffffff87c4fa12 RDI: 0000000000000293
RBP: ffff8801d9a76290 R08: ffff8801d9a6e930 R09: 0000000000000006
R10: 0000000000000000 R11: ffff8801d9a6e040 R12: 1ffff1003b34ec45
R13: 00000000ffffffff R14: 0000000000000200 R15: 0000000000000000
 dump_header+0x27b/0xf72 mm/oom_kill.c:441
 oom_kill_process.cold.27+0x10/0x903 mm/oom_kill.c:953
 out_of_memory+0xa84/0x1430 mm/oom_kill.c:1120
 __alloc_pages_may_oom mm/page_alloc.c:3520 [inline]
 __alloc_pages_slowpath+0x2354/0x2e10 mm/page_alloc.c:4241
 __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4396
 alloc_pages_current+0x173/0x350 mm/mempolicy.c:2107
 alloc_pages include/linux/gfp.h:509 [inline]
 __page_cache_alloc+0x38c/0x5c0 mm/filemap.c:924
 page_cache_read mm/filemap.c:2312 [inline]
 filemap_fault+0x1595/0x25f0 mm/filemap.c:2496
 ext4_filemap_fault+0x82/0xad fs/ext4/inode.c:6291
 __do_fault+0x100/0x6b0 mm/memory.c:2991
 do_read_fault mm/memory.c:3403 [inline]
 do_fault mm/memory.c:3529 [inline]
 handle_pte_fault mm/memory.c:3760 [inline]
 __handle_mm_fault+0x3ea6/0x5be0 mm/memory.c:3884
 handle_mm_fault+0x54f/0xc70 mm/memory.c:3921
 do_user_addr_fault arch/x86/mm/fault.c:1423 [inline]
 __do_page_fault+0x5e8/0xe60 arch/x86/mm/fault.c:1489
 do_page_fault+0xf2/0x7e0 arch/x86/mm/fault.c:1520
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1136
RIP: 0033:0x7f103728edd3
Code: Bad RIP value.
RSP: 002b:00007ffd369e9a68 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 00007ffd369e9c10 RCX: 00007f103728edd3
RDX: 0000000000000000 RSI: 00007ffd369e9dc0 RDI: 000000000000000b
RBP: 00007ffd369e9dc0 R08: 00007ffd369e9e40 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00007ffd369ea1a0 R14: 0000000000000000 R15: 0000000000000000
CPU: 1 PID: 17909 Comm: syz-executor2 Not tainted 4.19.0+ #73
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
init: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3424
init cpuset=/ mems_allowed=0
 __alloc_pages_slowpath+0x26e8/0x2e10 mm/page_alloc.c:4303
 __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4396
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 nlmsg_new include/net/netlink.h:654 [inline]
 __br_mdb_notify+0x4ff/0x15d0 net/bridge/br_mdb.c:407
 br_mdb_notify+0x310/0x410 net/bridge/br_mdb.c:440
 br_multicast_group_expired+0x1bc/0x610 net/bridge/br_multicast.c:253
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:801
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc_node mm/slab.c:3329 [inline]
RIP: 0010:kmem_cache_alloc_node_trace+0x249/0x740 mm/slab.c:3661
Code: 3f 7e 0f 85 32 ff ff ff e8 f3 28 3e ff e9 28 ff ff ff e8 2a 38 c3 ff 48 83 3d 62 a7 8f 07 00 0f 84 33 01 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 c1 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 c2 14
RSP: 0000:ffff8801997c7498 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff880199902f80 RDI: 0000000000000286
RBP: ffff8801997c7510 R08: ffff880199902700 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801da800940
R13: ffff8801da800940 R14: 0000000000000000 R15: 0000000000000286
 __do_kmalloc_node mm/slab.c:3683 [inline]
 __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3698
 __kmalloc_reserve.isra.40+0xcc/0xe0 net/core/skbuff.c:145
 pskb_expand_head+0x230/0x10f0 net/core/skbuff.c:1460
 skb_ensure_writable+0x3dd/0x640 net/core/skbuff.c:5071
 __bpf_try_make_writable net/core/filter.c:1638 [inline]
 bpf_try_make_writable net/core/filter.c:1644 [inline]
 bpf_try_make_head_writable net/core/filter.c:1652 [inline]
 ____bpf_clone_redirect net/core/filter.c:2089 [inline]
 bpf_clone_redirect+0x14a/0x490 net/core/filter.c:2067
 bpf_prog_3aea14b1f6cd0d8b+0xdc4/0x1000
CPU: 0 PID: 1 Comm: init Not tainted 4.19.0+ #73
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
active_anon:54290 inactive_anon:131 isolated_anon:0
 active_file:14 inactive_file:15 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9370 slab_unreclaimable:1465411
 mapped:49154 shmem:138 pagetables:633 bounce:0
 free:13712 free_pcp:273 free_cma:0
Call Trace:
Node 0 active_anon:217160kB inactive_anon:524kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 200704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
lowmem_reserve[]: 0 2818 6321 6321
Node 0 DMA32 free:25092kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888756kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3424
lowmem_reserve[]: 0 0 3503 3503
Node 0 Normal free:13848kB min:37364kB low:46704kB high:56044kB active_anon:217160kB inactive_anon:524kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:4718592kB managed:3587820kB mlocked:0kB kernel_stack:5504kB pagetables:2532kB bounce:0kB free_pcp:844kB local_pcp:356kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (UM) 4*32kB (M) 3*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (M) 3*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 25092kB
 __alloc_pages_slowpath+0x26e8/0x2e10 mm/page_alloc.c:4303
Node 0 Normal: 736*4kB (UMEH) 435*8kB (MEH) 186*16kB (ME) 69*32kB (UME) 7*64kB (MH) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 13848kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
167 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342858 pages reserved
0 pages cma reserved
syz-executor2: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-executor2 cpuset=syz2 mems_allowed=0
 __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4396
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3836
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:801
 </IRQ>
RIP: 0010:arch_local_irq_enable arch/x86/include/asm/paravirt.h:771 [inline]
RIP: 0010:preempt_schedule_irq+0xaf/0x140 kernel/sched/core.c:3706
Code: 00 e8 b5 da 89 f9 e8 50 bb b9 f9 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 75 73 48 83 3d 8a 2a 86 01 00 74 61 fb 66 0f 1f 44 00 00 <bf> 01 00 00 00 e8 f7 cd ff ff 41 80 7d 00 00 75 6c 48 83 3d 60 2a
RSP: 0000:ffff8801d9a76100 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff12a3f48 RBX: 0000000000000000 RCX: 1ffff1003b34dd26
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801d9a6e8bc
RBP: ffff8801d9a76128 R08: ffff8801d9a6e930 R09: 0000000000000006
R10: 0000000000000000 R11: ffff8801d9a6e040 R12: dffffc0000000000
R13: fffffbfff12a3f47 R14: ffffffff8951fa40 R15: ffffffff8951fa38
 retint_kernel+0x1b/0x2d
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:dump_stack+0x358/0x39d lib/dump_stack.c:118
Code: 74 0c 48 c7 c7 30 fa 51 89 e8 a1 9c fd f9 48 83 3d 29 00 8d 01 00 0f 84 63 fe ff ff e8 ee 69 ba f9 48 8b bd 70 ff ff ff 57 9d <0f> 1f 44 00 00 e8 db 69 ba f9 48 8b 8d 68 ff ff ff b8 ff ff 37 00
RSP: 0000:ffff8801d9a761e8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff02
RAX: ffff8801d9a6e040 RBX: 1ffffffff12a3f46 RCX: 1ffff1003b34dd26
RDX: 0000000000000000 RSI: ffffffff87c4fa12 RDI: 0000000000000293
RBP: ffff8801d9a76290 R08: ffff8801d9a6e930 R09: 0000000000000006
R10: 0000000000000000 R11: ffff8801d9a6e040 R12: 1ffff1003b34ec45
R13: 00000000ffffffff R14: 0000000000000200 R15: 0000000000000000
 dump_header+0x27b/0xf72 mm/oom_kill.c:441
 oom_kill_process.cold.27+0x10/0x903 mm/oom_kill.c:953
 out_of_memory+0xa84/0x1430 mm/oom_kill.c:1120
 __alloc_pages_may_oom mm/page_alloc.c:3520 [inline]
 __alloc_pages_slowpath+0x2354/0x2e10 mm/page_alloc.c:4241
 __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4396
 alloc_pages_current+0x173/0x350 mm/mempolicy.c:2107
 alloc_pages include/linux/gfp.h:509 [inline]
 __page_cache_alloc+0x38c/0x5c0 mm/filemap.c:924
 page_cache_read mm/filemap.c:2312 [inline]
 filemap_fault+0x1595/0x25f0 mm/filemap.c:2496
 ext4_filemap_fault+0x82/0xad fs/ext4/inode.c:6291
 __do_fault+0x100/0x6b0 mm/memory.c:2991
 do_read_fault mm/memory.c:3403 [inline]
 do_fault mm/memory.c:3529 [inline]
 handle_pte_fault mm/memory.c:3760 [inline]
 __handle_mm_fault+0x3ea6/0x5be0 mm/memory.c:3884
 handle_mm_fault+0x54f/0xc70 mm/memory.c:3921
 do_user_addr_fault arch/x86/mm/fault.c:1423 [inline]
 __do_page_fault+0x5e8/0xe60 arch/x86/mm/fault.c:1489
 do_page_fault+0xf2/0x7e0 arch/x86/mm/fault.c:1520
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1136
RIP: 0033:0x7f103728edd3
Code: Bad RIP value.
RSP: 002b:00007ffd369e9a68 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 00007ffd369e9c10 RCX: 00007f103728edd3
RDX: 0000000000000000 RSI: 00007ffd369e9dc0 RDI: 000000000000000b
RBP: 00007ffd369e9dc0 R08: 00007ffd369e9e40 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00007ffd369ea1a0 R14: 0000000000000000 R15: 0000000000000000
CPU: 1 PID: 17909 Comm: syz-executor2 Not tainted 4.19.0+ #73
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
init: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3424
init cpuset=/ mems_allowed=0

Crashes (5):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-bpf-kasan-gce 2018/10/31 10:39 bpf 27b31e68bc9f 4ccf7bb4 .config log report
ci-upstream-bpf-next-kasan-gce 2018/10/21 10:55 bpf-next 2576b96757e4 ecb386fe .config log report
ci-upstream-bpf-next-kasan-gce 2018/10/20 15:51 bpf-next 5032d079909d ecb386fe .config log report
ci-upstream-bpf-next-kasan-gce 2018/09/21 09:17 bpf-next 2dfd184abd38 37079712 .config log report
ci-upstream-bpf-next-kasan-gce 2018/09/20 23:30 bpf-next 2dfd184abd38 6cee973c .config log report
* Struck through repros no longer work on HEAD.