syzbot


INFO: rcu detected stall in kernfs_notify_workfn

Status: auto-closed as invalid on 2019/05/26 08:17
Subsystems: kernfs
[Documentation on labels]
First crash: 1976d, last: 1976d

Sample crash report:
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000014fbb78
RBP: 000000c420035ec8 R08: 0000000000000000 R09: 0000000000000000
R10: 000000c420035eb8 R11: 0000000000000246 R12: 0000000000430120
R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000
CPU: 0 PID: 2937 Comm: kworker/0:2 Not tainted 4.20.0-rc3+ #156
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events kernfs_notify_workfn
rcu: 	0-...!: (410 ticks this GP) idle=4f2/1/0x4000000000000002 softirq=11142/11143 fqs=9 
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
rcu: 	(detected by 1, t=10563 jiffies, g=14129, q=10)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 2937 Comm: kworker/0:2 Not tainted 4.20.0-rc3+ #156
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events kernfs_notify_workfn
RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x50 kernel/kcov.c:94
Code: dd 28 00 00 00 4d 39 d0 72 1b 49 83 c1 01 4a 89 7c 10 e0 4a 89 74 10 e8 4a 89 54 10 f0 4a 89 4c d8 20 4c 89 08 5d c3 66 90 55 <48> 89 e5 48 8b 75 08 65 48 8b 04 25 40 ee 01 00 65 8b 15 d8 62 82
RSP: 0000:ffff8881dae061a8 EFLAGS: 00000082
RAX: 0000000000000102 RBX: 00000000fffffffe RCX: ffffffff87d89d4b
RDX: 00000000fffffffe RSI: 0000000000000000 RDI: 0000000000000005
RBP: ffff8881dae062d8 R08: ffff8881cbf46240 R09: fffffbfff1616e6c
R10: fffffbfff1616e6c R11: ffffffff8b0b7360 R12: ffffffff8b0b7363
R13: 0000000000000020 R14: 0000000000000002 R15: ffffffff8b0b7363
FS:  0000000000000000(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5409fd6dd3 CR3: 00000001c4804000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 vsnprintf+0x13d0/0x1b60 lib/vsprintf.c:2362
 sprintf+0xb0/0xe0 lib/vsprintf.c:2498
 print_time kernel/printk/printk.c:1228 [inline]
 print_prefix+0x26a/0x3f0 kernel/printk/printk.c:1251
 msg_print_text+0xcc/0x1d0 kernel/printk/printk.c:1278
 console_unlock+0x4e6/0x1190 kernel/printk/printk.c:2388
 vprintk_emit+0x391/0x990 kernel/printk/printk.c:1922
 vprintk_default+0x28/0x30 kernel/printk/printk.c:1964
 vprintk_func+0x7e/0x181 kernel/printk/printk_safe.c:398
 printk+0xa7/0xcf kernel/printk/printk.c:1997
 printk_stack_address arch/x86/kernel/dumpstack.c:71 [inline]
 show_trace_log_lvl+0x23a/0x28c arch/x86/kernel/dumpstack.c:258
 show_stack+0x38/0x3a arch/x86/kernel/dumpstack.c:293
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:1005 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:__mutex_lock+0x8a4/0x16f0 kernel/locking/mutex.c:1071
Code: 03 bd b0 fc ff ff 31 c0 b9 08 00 00 00 48 c7 07 00 00 00 00 48 83 c7 18 48 c7 47 f0 00 00 00 00 c7 47 f8 00 00 00 00 f3 48 ab <89> d0 c7 07 00 00 00 00 48 8b 4d c8 65 48 33 0c 25 28 00 00 00 0f
RSP: 0000:ffff8881cbf4f320 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffed10397e9ec8
RBP: ffff8881cbf4f6b0 R08: fffffbfff12cfaf1 R09: fffffbfff12cfaf0
R10: fffffbfff12cfaf0 R11: ffffffff8967d787 R12: dffffc0000000000
R13: ffff8881cbf46240 R14: ffff8881cbf46240 R15: ffffffff8967d780
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
 kernfs_notify_workfn+0xf0/0x440 fs/kernfs/file.c:886
 process_one_work+0xc90/0x1c40 kernel/workqueue.c:2153
 ? zap_class+0x64
Lost 29 message(s)!
rcu: rcu_preempt kthread starved for 9886 jiffies! g14129 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: RCU grace-period kthread stack dump:
rcu_preempt     R  running task    23000    10      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2831 [inline]
 __schedule+0x8cf/0x21d0 kernel/sched/core.c:3472
 schedule+0xfe/0x460 kernel/sched/core.c:3516
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 schedule_timeout+0x140/0x260 kernel/time/timer.c:1804
 rcu_gp_fqs_loop+0x762/0xa80 kernel/rcu/tree.c:1934
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:1005 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 rcu_gp_kthread+0x341/0xc70 kernel/rcu/tree.c:2090
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 kthread+0x35a/0x440 kernel/kthread.c:246
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-fuzzer cpuset=/ mems_allowed=0
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:__mutex_lock+0x8a4/0x16f0 kernel/locking/mutex.c:1071
Code: 03 bd b0 fc ff ff 31 c0 b9 08 00 00 00 48 c7 07 00 00 00 00 48 83 c7 18 48 c7 47 f0 00 00 00 00 c7 47 f8 00 00 00 00 f3 48 ab <89> d0 c7 07 00 00 00 00 48 8b 4d c8 65 48 33 0c 25 28 00 00 00 0f
RSP: 0000:ffff8881cbf4f320 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffed10397e9ec8
RBP: ffff8881cbf4f6b0 R08: fffffbfff12cfaf1 R09: fffffbfff12cfaf0
R10: fffffbfff12cfaf0 R11: ffffffff8967d787 R12: dffffc0000000000
R13: ffff8881cbf46240 R14: ffff8881cbf46240 R15: ffffffff8967d780
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
 kernfs_notify_workfn+0xf0/0x440 fs/kernfs/file.c:886
 process_one_work+0xc90/0x1c40 kernel/workqueue.c:2153
 worker_thread+0x17f/0x1390 kernel/workqueue.c:2296
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
CPU: 1 PID: 6003 Comm: syz-fuzzer Not tainted 4.20.0-rc3+ #156
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
active_anon:55868 inactive_anon:1967 isolated_anon:0
 active_file:9 inactive_file:10 isolated_file:8
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9072 slab_unreclaimable:1451467
 mapped:40962 shmem:4339 pagetables:595 bounce:0
 free:13786 free_pcp:282 free_cma:0
Call Trace:
Node 0 active_anon:223472kB inactive_anon:7868kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:163848kB dirty:0kB writeback:0kB shmem:17356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 200704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
lowmem_reserve[]: 0 2818 6321 6321
Node 0 DMA32 free:25224kB min:30052kB low:37564kB high:45076kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888776kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
lowmem_reserve[]: 0 0 3503 3503
Node 0 Normal free:14012kB min:37364kB low:46704kB high:56044kB active_anon:223468kB inactive_anon:7868kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:6688kB pagetables:2380kB bounce:0kB free_pcp:880kB local_pcp:96kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 4*4kB (UM) 1*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 25224kB
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
Node 0 Normal: 671*4kB (UME) 306*8kB (UME) 185*16kB (ME) 72*32kB (UMEH) 21*64kB (UMH) 0*128kB 1*256kB (H) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 14044kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
4366 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342854 pages reserved
0 pages cma reserved
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.412 msecs
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
kworker/0:2: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
kworker/0:2 cpuset=/ mems_allowed=0
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:1005 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:dump_stack+0x358/0x39d lib/dump_stack.c:118
Code: 74 0c 48 c7 c7 70 fb 51 89 e8 a1 ab ed f9 48 83 3d 09 9c 7c 01 00 0f 84 63 fe ff ff e8 6e 2b aa f9 48 8b bd 70 ff ff ff 57 9d <0f> 1f 44 00 00 e8 5b 2b aa f9 48 8b 8d 68 ff ff ff b8 ff ff 37 00
RSP: 0000:ffff8881b96ae1e8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8881c1dbc5c0 RBX: 1ffffffff12a3f6e RCX: 1ffff110383b79d6
RDX: 0000000000000000 RSI: ffffffff87d55f72 RDI: 0000000000000293
RBP: ffff8881b96ae290 R08: ffff8881c1dbceb0 R09: 0000000000000006
R10: 0000000000000000 R11: ffff8881c1dbc5c0 R12: 1ffff110372d5c45
R13: 00000000ffffffff R14: 0000000000000200 R15: 0000000000000001
 dump_header+0x27b/0xf72 mm/oom_kill.c:441
 oom_kill_process.cold.27+0x10/0x903 mm/oom_kill.c:953
 out_of_memory+0xa84/0x1430 mm/oom_kill.c:1120
 __alloc_pages_may_oom mm/page_alloc.c:3519 [inline]
 __alloc_pages_slowpath+0x232c/0x2de0 mm/page_alloc.c:4229
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 alloc_pages_current+0x173/0x350 mm/mempolicy.c:2080
 alloc_pages include/linux/gfp.h:509 [inline]
 __page_cache_alloc+0x38c/0x5c0 mm/filemap.c:924
 page_cache_read mm/filemap.c:2312 [inline]
 filemap_fault+0x1595/0x25f0 mm/filemap.c:2496
 ext4_filemap_fault+0x82/0xad fs/ext4/inode.c:6292
 __do_fault+0x100/0x6b0 mm/memory.c:2996
 do_read_fault mm/memory.c:3408 [inline]
 do_fault mm/memory.c:3534 [inline]
 handle_pte_fault mm/memory.c:3765 [inline]
 __handle_mm_fault+0x3ea0/0x5be0 mm/memory.c:3889
 handle_mm_fault+0x54f/0xc70 mm/memory.c:3926
 do_user_addr_fault arch/x86/mm/fault.c:1423 [inline]
 __do_page_fault+0x5e8/0xe60 arch/x86/mm/fault.c:1489
 do_page_fault+0xf2/0x7e0 arch/x86/mm/fault.c:1520
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1139
RIP: 0033:0x45ddf3
Code: Bad RIP value.
RSP: 002b:000000c420035e80 EFLAGS: 00010246
RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000045ddf3
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000014fbb78
RBP: 000000c420035ec8 R08: 0000000000000000 R09: 0000000000000000
R10: 000000c420035eb8 R11: 0000000000000246 R12: 0000000000430120
R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000
CPU: 0 PID: 2937 Comm: kworker/0:2 Not tainted 4.20.0-rc3+ #156
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events kernfs_notify_workfn
syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
Call Trace:
syz-fuzzer cpuset=/ mems_allowed=0
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:1005 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:__mutex_lock+0x8a4/0x16f0 kernel/locking/mutex.c:1071
Code: 03 bd b0 fc ff ff 31 c0 b9 08 00 00 00 48 c7 07 00 00 00 00 48 83 c7 18 48 c7 47 f0 00 00 00 00 c7 47 f8 00 00 00 00 f3 48 ab <89> d0 c7 07 00 00 00 00 48 8b 4d c8 65 48 33 0c 25 28 00 00 00 0f
RSP: 0000:ffff8881cbf4f320 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffed10397e9ec8
RBP: ffff8881cbf4f6b0 R08: fffffbfff12cfaf1 R09: fffffbfff12cfaf0
R10: fffffbfff12cfaf0 R11: ffffffff8967d787 R12: dffffc0000000000
R13: ffff8881cbf46240 R14: ffff8881cbf46240 R15: ffffffff8967d780
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
 kernfs_notify_workfn+0xf0/0x440 fs/kernfs/file.c:886
 process_one_work+0xc90/0x1c40 kernel/workqueue.c:2153
 worker_thread+0x17f/0x1390 kernel/workqueue.c:2296
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
warn_alloc_show_mem: 1 callbacks suppressed
CPU: 1 PID: 6003 Comm: syz-fuzzer Not tainted 4.20.0-rc3+ #156
Mem-Info:
active_anon:55868 inactive_anon:1967 isolated_anon:0
 active_file:9 inactive_file:10 isolated_file:8
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9072 slab_unreclaimable:1451467
 mapped:40962 shmem:4339 pagetables:595 bounce:0
 free:13786 free_pcp:282 free_cma:0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Node 0 active_anon:223472kB inactive_anon:7868kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:163848kB dirty:0kB writeback:0kB shmem:17356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 200704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Call Trace:
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 <IRQ>
lowmem_reserve[]: 0 2818 6321 6321
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
Node 0 DMA32 free:25224kB min:30052kB low:37564kB high:45076kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888776kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 3503 3503
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
Node 0 Normal free:14012kB min:37364kB low:46704kB high:56044kB active_anon:223468kB inactive_anon:7868kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:6688kB pagetables:2380kB bounce:0kB free_pcp:880kB local_pcp:96kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 4*4kB (UM) 1*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 25224kB
Node 0 Normal: 671*4kB (UME) 306*8kB (UME) 185*16kB (ME) 72*32kB (UMEH) 21*64kB (UMH) 0*128kB 1*256kB (H) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 14044kB
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
4366 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342854 pages reserved
0 pages cma reserved
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
kworker/0:2: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
kworker/0:2 cpuset=/ mems_allowed=0
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:1005 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:dump_stack+0x358/0x39d lib/dump_stack.c:118
Code: 74 0c 48 c7 c7 70 fb 51 89 e8 a1 ab ed f9 48 83 3d 09 9c 7c 01 00 0f 84 63 fe ff ff e8 6e 2b aa f9 48 8b bd 70 ff ff ff 57 9d <0f> 1f 44 00 00 e8 5b 2b aa f9 48 8b 8d 68 ff ff ff b8 ff ff 37 00
RSP: 0000:ffff8881b96ae1e8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8881c1dbc5c0 RBX: 1ffffffff12a3f6e RCX: 1ffff110383b79d6
RDX: 0000000000000000 RSI: ffffffff87d55f72 RDI: 0000000000000293
RBP: ffff8881b96ae290 R08: ffff8881c1dbceb0 R09: 0000000000000006
R10: 0000000000000000 R11: ffff8881c1dbc5c0 R12: 1ffff110372d5c45
R13: 00000000ffffffff R14: 0000000000000200 R15: 0000000000000001
 dump_header+0x27b/0xf72 mm/oom_kill.c:441
 oom_kill_process.cold.27+0x10/0x903 mm/oom_kill.c:953
 out_of_memory+0xa84/0x1430 mm/oom_kill.c:1120
 __alloc_pages_may_oom mm/page_alloc.c:3519 [inline]
 __alloc_pages_slowpath+0x232c/0x2de0 mm/page_alloc.c:4229
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 alloc_pages_current+0x173/0x350 mm/mempolicy.c:2080
 alloc_pages include/linux/gfp.h:509 [inline]
 __page_cache_alloc+0x38c/0x5c0 mm/filemap.c:924
 page_cache_read mm/filemap.c:2312 [inline]
 filemap_fault+0x1595/0x25f0 mm/filemap.c:2496
 ext4_filemap_fault+0x82/0xad fs/ext4/inode.c:6292
 __do_fault+0x100/0x6b0 mm/memory.c:2996
 do_read_fault mm/memory.c:3408 [inline]
 do_fault mm/memory.c:3534 [inline]
 handle_pte_fault mm/memory.c:3765 [inline]
 __handle_mm_fault+0x3ea0/0x5be0 mm/memory.c:3889
 handle_mm_fault+0x54f/0xc70 mm/memory.c:3926
 do_user_addr_fault arch/x86/mm/fault.c:1423 [inline]
 __do_page_fault+0x5e8/0xe60 arch/x86/mm/fault.c:1489
 do_page_fault+0xf2/0x7e0 arch/x86/mm/fault.c:1520
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1139
RIP: 0033:0x45ddf3
Code: Bad RIP value.
RSP: 002b:000000c420035e80 EFLAGS: 00010246
RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000045ddf3
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000014fbb78
RBP: 000000c420035ec8 R08: 0000000000000000 R09: 0000000000000000
R10: 000000c420035eb8 R11: 0000000000000246 R12: 0000000000430120
R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000
CPU: 0 PID: 2937 Comm: kworker/0:2 Not tainted 4.20.0-rc3+ #156
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events kernfs_notify_workfn
Call Trace:
syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 <IRQ>
syz-fuzzer cpuset=/ mems_allowed=0
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:1005 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:__mutex_lock+0x8a4/0x16f0 kernel/locking/mutex.c:1071
Code: 03 bd b0 fc ff ff 31 c0 b9 08 00 00 00 48 c7 07 00 00 00 00 48 83 c7 18 48 c7 47 f0 00 00 00 00 c7 47 f8 00 00 00 00 f3 48 ab <89> d0 c7 07 00 00 00 00 48 8b 4d c8 65 48 33 0c 25 28 00 00 00 0f
RSP: 0000:ffff8881cbf4f320 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffed10397e9ec8
RBP: ffff8881cbf4f6b0 R08: fffffbfff12cfaf1 R09: fffffbfff12cfaf0
R10: fffffbfff12cfaf0 R11: ffffffff8967d787 R12: dffffc0000000000
R13: ffff8881cbf46240 R14: ffff8881cbf46240 R15: ffffffff8967d780
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
 kernfs_notify_workfn+0xf0/0x440 fs/kernfs/file.c:886
 process_one_work+0xc90/0x1c40 kernel/workqueue.c:2153
 worker_thread+0x17f/0x1390 kernel/workqueue.c:2296
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
CPU: 1 PID: 6003 Comm: syz-fuzzer Not tainted 4.20.0-rc3+ #156
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
active_anon:55868 inactive_anon:1967 isolated_anon:0
 active_file:9 inactive_file:10 isolated_file:8
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9072 slab_unreclaimable:1451467
 mapped:40962 shmem:4339 pagetables:595 bounce:0
 free:13786 free_pcp:282 free_cma:0
Call Trace:
Node 0 active_anon:223472kB inactive_anon:7868kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:163848kB dirty:0kB writeback:0kB shmem:17356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 200704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
lowmem_reserve[]: 0 2818 6321 6321
Node 0 DMA32 free:25224kB min:30052kB low:37564kB high:45076kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888776kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
lowmem_reserve[]: 0 0 3503 3503
Node 0 Normal free:14012kB min:37364kB low:46704kB high:56044kB active_anon:223468kB inactive_anon:7868kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:6688kB pagetables:2380kB bounce:0kB free_pcp:880kB local_pcp:96kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 4*4kB (UM) 1*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 25224kB
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
Node 0 Normal: 671*4kB (UME) 306*8kB (UME) 185*16kB (ME) 72*32kB (UMEH) 21*64kB (UMH) 0*128kB 1*256kB (H) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 14044kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
4366 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342854 pages reserved
0 pages cma reserved
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
kworker/0:2: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
kworker/0:2 cpuset=/ mems_allowed=0
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:1005 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:dump_stack+0x358/0x39d lib/dump_stack.c:118
Code: 74 0c 48 c7 c7 70 fb 51 89 e8 a1 ab ed f9 48 83 3d 09 9c 7c 01 00 0f 84 63 fe ff ff e8 6e 2b aa f9 48 8b bd 70 ff ff ff 57 9d <0f> 1f 44 00 00 e8 5b 2b aa f9 48 8b 8d 68 ff ff ff b8 ff ff 37 00
RSP: 0000:ffff8881b96ae1e8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8881c1dbc5c0 RBX: 1ffffffff12a3f6e RCX: 1ffff110383b79d6
RDX: 0000000000000000 RSI: ffffffff87d55f72 RDI: 0000000000000293
RBP: ffff8881b96ae290 R08: ffff8881c1dbceb0 R09: 0000000000000006
R10: 0000000000000000 R11: ffff8881c1dbc5c0 R12: 1ffff110372d5c45
R13: 00000000ffffffff R14: 0000000000000200 R15: 0000000000000001
 dump_header+0x27b/0xf72 mm/oom_kill.c:441
 oom_kill_process.cold.27+0x10/0x903 mm/oom_kill.c:953
 out_of_memory+0xa84/0x1430 mm/oom_kill.c:1120
 __alloc_pages_may_oom mm/page_alloc.c:3519 [inline]
 __alloc_pages_slowpath+0x232c/0x2de0 mm/page_alloc.c:4229
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 alloc_pages_current+0x173/0x350 mm/mempolicy.c:2080
 alloc_pages include/linux/gfp.h:509 [inline]
 __page_cache_alloc+0x38c/0x5c0 mm/filemap.c:924
 page_cache_read mm/filemap.c:2312 [inline]
 filemap_fault+0x1595/0x25f0 mm/filemap.c:2496
 ext4_filemap_fault+0x82/0xad fs/ext4/inode.c:6292
 __do_fault+0x100/0x6b0 mm/memory.c:2996
 do_read_fault mm/memory.c:3408 [inline]
 do_fault mm/memory.c:3534 [inline]
 handle_pte_fault mm/memory.c:3765 [inline]
 __handle_mm_fault+0x3ea0/0x5be0 mm/memory.c:3889
 handle_mm_fault+0x54f/0xc70 mm/memory.c:3926
 do_user_addr_fault arch/x86/mm/fault.c:1423 [inline]
 __do_page_fault+0x5e8/0xe60 arch/x86/mm/fault.c:1489
 do_page_fault+0xf2/0x7e0 arch/x86/mm/fault.c:1520
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1139
RIP: 0033:0x45ddf3
Code: Bad RIP value.
RSP: 002b:000000c420035e80 EFLAGS: 00010246
RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000045ddf3
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000014fbb78
RBP: 000000c420035ec8 R08: 0000000000000000 R09: 0000000000000000
R10: 000000c420035eb8 R11: 0000000000000246 R12: 0000000000430120
R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000
CPU: 0 PID: 2937 Comm: kworker/0:2 Not tainted 4.20.0-rc3+ #156
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events kernfs_notify_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-fuzzer cpuset=/ mems_allowed=0
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:1005 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:__mutex_lock+0x8a4/0x16f0 kernel/locking/mutex.c:1071
Code: 03 bd b0 fc ff ff 31 c0 b9 08 00 00 00 48 c7 07 00 00 00 00 48 83 c7 18 48 c7 47 f0 00 00 00 00 c7 47 f8 00 00 00 00 f3 48 ab <89> d0 c7 07 00 00 00 00 48 8b 4d c8 65 48 33 0c 25 28 00 00 00 0f
RSP: 0000:ffff8881cbf4f320 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffed10397e9ec8
RBP: ffff8881cbf4f6b0 R08: fffffbfff12cfaf1 R09: fffffbfff12cfaf0
R10: fffffbfff12cfaf0 R11: ffffffff8967d787 R12: dffffc0000000000
R13: ffff8881cbf46240 R14: ffff8881cbf46240 R15: ffffffff8967d780
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
 kernfs_notify_workfn+0xf0/0x440 fs/kernfs/file.c:886
 process_one_work+0xc90/0x1c40 kernel/workqueue.c:2153
 worker_thread+0x17f/0x1390 kernel/workqueue.c:2296

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/11/27 08:01 bpf-next d8f3e978bd30 ac912200 .config console log report ci-upstream-bpf-next-kasan-gce
* Struck through repros no longer work on HEAD.