syzbot


INFO: rcu detected stall in addrconf_rs_timer

Status: closed as dup on 2019/01/02 16:33
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+8910fedf18f0686a82e9@syzkaller.appspotmail.com
First crash: 2285d, last: 2185d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
INFO: rcu detected stall in ndisc_alloc_skb net 1 2254d 2174d
Similar bugs (12)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in addrconf_rs_timer (2) net 362 1898d 1921d 13/28 fixed on 2019/10/21 12:31
linux-4.14 INFO: rcu detected stall in addrconf_rs_timer C error 220 1562d 1925d 0/1 upstream: reported C repro on 2019/09/06 14:33
linux-4.19 INFO: rcu detected stall in addrconf_rs_timer 45 1913d 1925d 0/1 auto-closed as invalid on 2019/12/17 18:46
linux-4.19 BUG: soft lockup in addrconf_rs_timer syz error 24 683d 1365d 0/1 upstream: reported syz repro on 2021/03/19 06:05
linux-5.15 BUG: soft lockup in addrconf_rs_timer C error 36 548d 561d 0/3 auto-obsoleted due to no activity on 2023/08/23 09:06
upstream INFO: rcu detected stall in addrconf_rs_timer (3) net C inconclusive done 81 1820d 1816d 15/28 fixed on 2020/02/18 14:31
linux-4.19 INFO: rcu detected stall in addrconf_rs_timer (2) 5 1563d 1636d 0/1 auto-closed as invalid on 2020/12/31 12:17
upstream INFO: rcu detected stall in addrconf_rs_timer (5) kvm 4 963d 963d 0/28 auto-closed as invalid on 2022/06/24 22:41
upstream INFO: rcu detected stall in addrconf_rs_timer (4) net C error error 121 1139d 1593d 0/28 closed as invalid on 2022/02/08 10:39
linux-6.1 INFO: rcu detected stall in addrconf_rs_timer 56 4d11h 203d 0/3 upstream: reported on 2024/05/24 18:08
linux-5.15 INFO: rcu detected stall in addrconf_rs_timer origin:upstream C error 37 27d 369d 0/3 upstream: reported C repro on 2023/12/10 10:27
upstream INFO: rcu detected stall in addrconf_rs_timer (6) usb syz error 393 22d 195d 0/28 upstream: reported syz repro on 2024/06/01 13:51

Sample crash report:
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.20.0-rc6+ #106
rcu: INFO: rcu_preempt self-detected stall on CPU
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
rcu: 	1-...!: (222 ticks this GP) idle=7de/1/0x4000000000000004 softirq=26255/26365 fqs=0 
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
rcu: 	 (t=10619 jiffies g=33337 q=67)
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
rcu: rcu_preempt kthread starved for 10619 jiffies! g33337 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: RCU grace-period kthread stack dump:
rcu_preempt     R  running task    22568    10      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2831 [inline]
 __schedule+0x8cf/0x21d0 kernel/sched/core.c:3472
 schedule+0xfe/0x460 kernel/sched/core.c:3516
 schedule_timeout+0x140/0x260 kernel/time/timer.c:1804
 rcu_gp_fqs_loop+0x762/0xa80 kernel/rcu/tree.c:1934
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 nlmsg_new include/net/netlink.h:654 [inline]
 __br_mdb_notify+0x4ff/0x15d0 net/bridge/br_mdb.c:407
 rcu_gp_kthread+0x341/0xc70 kernel/rcu/tree.c:2090
 br_mdb_notify+0x310/0x410 net/bridge/br_mdb.c:440
 br_multicast_del_pg+0x3df/0x790 net/bridge/br_multicast.c:292
 br_multicast_port_group_expired+0x189/0x1e0 net/bridge/br_multicast.c:316
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.20.0-rc6+ #106
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:debug_spin_unlock kernel/locking/spinlock_debug.c:99 [inline]
RIP: 0010:do_raw_spin_unlock+0x132/0x330 kernel/locking/spinlock_debug.c:134
Code: 00 00 00 fc ff df 41 c6 04 04 f8 0f 84 86 01 00 00 4c 8d 73 10 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 <0f> 85 c6 01 00 00 65 48 8b 04 25 40 ee 01 00 48 39 43 10 0f 85 ef
RSP: 0000:ffff8881d9afe1c0 EFLAGS: 00000046
RAX: dffffc0000000000 RBX: ffffffff895918a0 RCX: ffffffff8162e577
RDX: 1ffffffff12b2316 RSI: 0000000000000004 RDI: ffffffff895918a0
RBP: ffff8881d9afe248 R08: fffffbfff12b2315 R09: fffffbfff12b2314
R10: fffffbfff12b2314 R11: ffffffff895918a3 R12: 1ffff1103b35fc3c
R13: 1ffff1103b35fc38 R14: ffffffff895918b0 R15: ffff8881d9afe220
FS:  0000000000000000(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6e41d7d1d3 CR3: 00000001bdfcb000 CR4: 00000000001406f0
DR0: c000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 __raw_spin_unlock include/linux/spinlock_api_smp.h:151 [inline]
 _raw_spin_unlock+0x22/0x50 kernel/locking/spinlock.c:176
 console_unlock+0x590/0x1190 kernel/printk/printk.c:2403
 vprintk_emit+0x391/0x990 kernel/printk/printk.c:1922
 vprintk_default+0x28/0x30 kernel/printk/printk.c:1964
 vprintk_func+0x7e/0x181 kernel/printk/printk_safe.c:398
 printk+0xa7/0xcf kernel/printk/printk.c:1997
 printk_stack_address arch/x86/kernel/dumpstack.c:71 [inline]
 show_trace_log_lvl+0x23a/0x28c arch/x86/kernel/dumpstack.c:258
 show_stack+0x38/0x3a arch/x86/kernel/dumpstack.c:293
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 nlmsg_new include/net/netlink.h:654 [inline]
 __br_mdb_notify+0x4ff/0x15d0 net/bridge/br_mdb.c:407
 br_mdb_notify+0x310/0x410 net/bridge/br_mdb.c:440
 br_multicast_del_pg+0x3df/0x790 net/bridge/br_multicast.c:292
 br_multicast_port_group_expired+0x189/0x1e0 net/bridge/br_multicast.c:316
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 run_ksoftirqd+0x5e/0x100 kernel/softirq.c:654
 smpboot_thread_fn+0x68b/0xa00 kernel/smpboot.c:164
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
NMI backtrace for cpu 1
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 run_ksoftirqd+0x5e/0x100 kernel/softirq.c:654
 smpboot_thread_fn+0x68b/0xa00 kernel/smpboot.c:164
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
CPU: 1 PID: 15827 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #106
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
active_anon:48727 inactive_anon:1570 isolated_anon:0
 active_file:17 inactive_file:17 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9367 slab_unreclaimable:1455578
 mapped:49154 shmem:1724 pagetables:624 bounce:0
 free:13768 free_pcp:279 free_cma:0
Call Trace:
Node 0 active_anon:194908kB inactive_anon:6280kB active_file:68kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:6896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
lowmem_reserve[]: 0 2818 6321 6321
Node 0 DMA32 free:25244kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888780kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:316kB local_pcp:68kB free_cma:0kB
lowmem_reserve[]: 0 0 3503 3503
Node 0 Normal free:13920kB min:37364kB low:46704kB high:56044kB active_anon:194908kB inactive_anon:6280kB active_file:68kB inactive_file:68kB unevictable:0kB writepending:0kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:6912kB pagetables:2496kB bounce:0kB free_pcp:800kB local_pcp:552kB free_cma:0kB
 nmi_cpu_backtrace.cold.2+0x5c/0xa1 lib/nmi_backtrace.c:101
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
 nmi_trigger_cpumask_backtrace+0x1e8/0x22a lib/nmi_backtrace.c:62
Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (UM) 4*32kB (M) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 25244kB
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
Node 0 Normal: 786*4kB (UME) 433*8kB (ME) 199*16kB (MEH) 83*32kB (UME) 11*64kB (M) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 13920kB
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x16f/0x1bc kernel/rcu/tree.c:1195
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
 print_cpu_stall.cold.67+0x1f3/0x3c7 kernel/rcu/tree.c:1334
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
1758 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342853 pages reserved
0 pages cma reserved
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.586 msecs
ksoftirqd/0: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
ksoftirqd/0 cpuset=/ mems_allowed=0
 check_cpu_stall kernel/rcu/tree.c:1408 [inline]
 rcu_pending kernel/rcu/tree.c:2961 [inline]
 rcu_check_callbacks+0xf3b/0x13f0 kernel/rcu/tree.c:2506
 update_process_times+0x2d/0x70 kernel/time/timer.c:1636
 tick_sched_handle+0x9f/0x180 kernel/time/tick-sched.c:164
 tick_sched_timer+0x45/0x130 kernel/time/tick-sched.c:1274
 __run_hrtimer kernel/time/hrtimer.c:1398 [inline]
 __hrtimer_run_queues+0x41c/0x10d0 kernel/time/hrtimer.c:1460
 hrtimer_interrupt+0x313/0x780 kernel/time/hrtimer.c:1518
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1034 [inline]
 smp_apic_timer_interrupt+0x1a1/0x760 arch/x86/kernel/apic/apic.c:1059
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc_node mm/slab.c:3329 [inline]
RIP: 0010:kmem_cache_alloc_node+0x247/0x730 mm/slab.c:3642
Code: 3f 7e 0f 85 32 ff ff ff e8 f5 0a 3e ff e9 28 ff ff ff e8 1c 3a c3 ff 48 83 3d b4 8e 8f 07 00 0f 84 33 01 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 bf fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 f2 c6
RSP: 0000:ffff8881daf07450 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 1ffff1103a9fcd59
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000286
RBP: ffff8881daf074c0 R08: ffff8881d4fe6ac8 R09: 0000000000000002
R10: 0000000000000000 R11: ffff8881d4fe6200 R12: ffff8881d9bee600
R13: ffff8881d9bee600 R14: 0000000000000000 R15: 0000000000000286
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc mm/slab.c:3385 [inline]
RIP: 0010:kmem_cache_alloc+0x297/0x730 mm/slab.c:3552
Code: 7e 0f 85 cf fe ff ff e8 46 eb 3d ff e9 c5 fe ff ff e8 6d 1a c3 ff 48 83 3d 05 6f 8f 07 00 0f 84 41 03 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 e9 54 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 f2 c6
RSP: 0000:ffff88818f82f6f8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8881d4fe6a80 RDI: 0000000000000286
RBP: ffff88818f82f760 R08: ffff8881d4fe6200 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8881d9bee600 R14: ffff8881d9bee600 R15: 0000000000480020
 skb_clone+0x1bb/0x500 net/core/skbuff.c:1280
 ____bpf_clone_redirect net/core/filter.c:2080 [inline]
 bpf_clone_redirect+0xb9/0x490 net/core/filter.c:2067
 bpf_prog_bebbfe2050753572+0x93d/0x1000
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.20.0-rc6+ #106
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
syz-executor5: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
syz-executor5 cpuset=syz5 mems_allowed=0
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 nlmsg_new include/net/netlink.h:654 [inline]
 __br_mdb_notify+0x4ff/0x15d0 net/bridge/br_mdb.c:407
 br_mdb_notify+0x310/0x410 net/bridge/br_mdb.c:440
 br_multicast_del_pg+0x3df/0x790 net/bridge/br_multicast.c:292
 br_multicast_port_group_expired+0x189/0x1e0 net/bridge/br_multicast.c:316
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 run_ksoftirqd+0x5e/0x100 kernel/softirq.c:654
 smpboot_thread_fn+0x68b/0xa00 kernel/smpboot.c:164
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
CPU: 1 PID: 15827 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #106
Mem-Info:
active_anon:48727 inactive_anon:1570 isolated_anon:0
 active_file:17 inactive_file:17 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9367 slab_unreclaimable:1455578
 mapped:49154 shmem:1724 pagetables:624 bounce:0
 free:13768 free_pcp:279 free_cma:0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
Node 0 active_anon:194908kB inactive_anon:6280kB active_file:68kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:6896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
lowmem_reserve[]: 0 2818 6321 6321
Node 0 DMA32 free:25244kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888780kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:316kB local_pcp:68kB free_cma:0kB
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
lowmem_reserve[]: 0 0 3503 3503
Node 0 Normal free:13920kB min:37364kB low:46704kB high:56044kB active_anon:194908kB inactive_anon:6280kB active_file:68kB inactive_file:68kB unevictable:0kB writepending:0kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:6912kB pagetables:2496kB bounce:0kB free_pcp:800kB local_pcp:552kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (UM) 4*32kB (M) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 25244kB
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
Node 0 Normal: 786*4kB (UME) 433*8kB (ME) 199*16kB (MEH) 83*32kB (UME) 11*64kB (M) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 13920kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
1758 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342853 pages reserved
0 pages cma reserved
ksoftirqd/0: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
ksoftirqd/0 cpuset=/ mems_allowed=0
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc mm/slab.c:3385 [inline]
RIP: 0010:kmem_cache_alloc+0x297/0x730 mm/slab.c:3552
Code: 7e 0f 85 cf fe ff ff e8 46 eb 3d ff e9 c5 fe ff ff e8 6d 1a c3 ff 48 83 3d 05 6f 8f 07 00 0f 84 41 03 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 e9 54 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 f2 c6
RSP: 0000:ffff88818f82f6f8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8881d4fe6a80 RDI: 0000000000000286
RBP: ffff88818f82f760 R08: ffff8881d4fe6200 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8881d9bee600 R14: ffff8881d9bee600 R15: 0000000000480020
 skb_clone+0x1bb/0x500 net/core/skbuff.c:1280
 ____bpf_clone_redirect net/core/filter.c:2080 [inline]
 bpf_clone_redirect+0xb9/0x490 net/core/filter.c:2067
 bpf_prog_bebbfe2050753572+0x93d/0x1000
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.20.0-rc6+ #106
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
syz-executor5: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
syz-executor5 cpuset=syz5 mems_allowed=0
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 nlmsg_new include/net/netlink.h:654 [inline]
 __br_mdb_notify+0x4ff/0x15d0 net/bridge/br_mdb.c:407
 br_mdb_notify+0x310/0x410 net/bridge/br_mdb.c:440
 br_multicast_del_pg+0x3df/0x790 net/bridge/br_multicast.c:292
 br_multicast_port_group_expired+0x189/0x1e0 net/bridge/br_multicast.c:316
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 run_ksoftirqd+0x5e/0x100 kernel/softirq.c:654
 smpboot_thread_fn+0x68b/0xa00 kernel/smpboot.c:164
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
warn_alloc_show_mem: 1 callbacks suppressed
CPU: 1 PID: 15827 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #106
Mem-Info:
active_anon:48727 inactive_anon:1570 isolated_anon:0
 active_file:17 inactive_file:17 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9367 slab_unreclaimable:1455578
 mapped:49154 shmem:1724 pagetables:624 bounce:0
 free:13768 free_pcp:279 free_cma:0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
Node 0 active_anon:194908kB inactive_anon:6280kB active_file:68kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:6896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
lowmem_reserve[]: 0 2818 6321 6321
Node 0 DMA32 free:25244kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888780kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:316kB local_pcp:68kB free_cma:0kB
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
lowmem_reserve[]: 0 0 3503 3503
Node 0 Normal free:13920kB min:37364kB low:46704kB high:56044kB active_anon:194908kB inactive_anon:6280kB active_file:68kB inactive_file:68kB unevictable:0kB writepending:0kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:6912kB pagetables:2496kB bounce:0kB free_pcp:800kB local_pcp:552kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (UM) 4*32kB (M) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 25244kB
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
Node 0 Normal: 786*4kB (UME) 433*8kB (ME) 199*16kB (MEH) 83*32kB (UME) 11*64kB (M) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 13920kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
1758 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342853 pages reserved
0 pages cma reserved
ksoftirqd/0: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
ksoftirqd/0 cpuset=/ mems_allowed=0
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc mm/slab.c:3385 [inline]
RIP: 0010:kmem_cache_alloc+0x297/0x730 mm/slab.c:3552
Code: 7e 0f 85 cf fe ff ff e8 46 eb 3d ff e9 c5 fe ff ff e8 6d 1a c3 ff 48 83 3d 05 6f 8f 07 00 0f 84 41 03 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 e9 54 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 f2 c6
RSP: 0000:ffff88818f82f6f8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8881d4fe6a80 RDI: 0000000000000286
RBP: ffff88818f82f760 R08: ffff8881d4fe6200 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8881d9bee600 R14: ffff8881d9bee600 R15: 0000000000480020
 skb_clone+0x1bb/0x500 net/core/skbuff.c:1280
 ____bpf_clone_redirect net/core/filter.c:2080 [inline]
 bpf_clone_redirect+0xb9/0x490 net/core/filter.c:2067
 bpf_prog_bebbfe2050753572+0x93d/0x1000
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.20.0-rc6+ #106
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
syz-executor5: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
syz-executor5 cpuset=syz5 mems_allowed=0
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 nlmsg_new include/net/netlink.h:654 [inline]
 __br_mdb_notify+0x4ff/0x15d0 net/bridge/br_mdb.c:407
 br_mdb_notify+0x310/0x410 net/bridge/br_mdb.c:440
 br_multicast_group_expired+0x1bc/0x610 net/bridge/br_multicast.c:253
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 run_ksoftirqd+0x5e/0x100 kernel/softirq.c:654
 smpboot_thread_fn+0x68b/0xa00 kernel/smpboot.c:164
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
CPU: 1 PID: 15827 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #106
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
active_anon:48727 inactive_anon:1570 isolated_anon:0
 active_file:17 inactive_file:17 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9367 slab_unreclaimable:1455578
 mapped:49154 shmem:1724 pagetables:624 bounce:0
 free:13768 free_pcp:279 free_cma:0
 <IRQ>
Node 0 active_anon:194908kB inactive_anon:6280kB active_file:68kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:6896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 2818 6321 6321
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
Node 0 DMA32 free:25244kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888780kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:316kB local_pcp:68kB free_cma:0kB
lowmem_reserve[]: 0 0 3503 3503
Node 0 Normal free:13920kB min:37364kB low:46704kB high:56044kB active_anon:194908kB inactive_anon:6280kB active_file:68kB inactive_file:68kB unevictable:0kB writepending:0kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:6912kB pagetables:2496kB bounce:0kB free_pcp:800kB local_pcp:552kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (UM) 4*32kB (M) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 25244kB
Node 0 Normal: 786*4kB (UME) 433*8kB (ME) 199*16kB (MEH) 83*32kB (UME) 11*64kB (M) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 13920kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
1758 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342853 pages reserved
0 pages cma reserved
ksoftirqd/0: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
ksoftirqd/0 cpuset=/ mems_allowed=0
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc mm/slab.c:3385 [inline]
RIP: 0010:kmem_cache_alloc+0x297/0x730 mm/slab.c:3552
Code: 7e 0f 85 cf fe ff ff e8 46 eb 3d ff e9 c5 fe ff ff e8 6d 1a c3 ff 48 83 3d 05 6f 8f 07 00 0f 84 41 03 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 e9 54 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 f2 c6
RSP: 0000:ffff88818f82f6f8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8881d4fe6a80 RDI: 0000000000000286
RBP: ffff88818f82f760 R08: ffff8881d4fe6200 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8881d9bee600 R14: ffff8881d9bee600 R15: 0000000000480020
 skb_clone+0x1bb/0x500 net/core/skbuff.c:1280
 ____bpf_clone_redirect net/core/filter.c:2080 [inline]
 bpf_clone_redirect+0xb9/0x490 net/core/filter.c:2067
 bpf_prog_bebbfe2050753572+0x93d/0x1000
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.20.0-rc6+ #106
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
syz-executor5: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
syz-executor5 cpuset=syz5 mems_allowed=0
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 nlmsg_new include/net/netlink.h:654 [inline]
 __br_mdb_notify+0x4ff/0x15d0 net/bridge/br_mdb.c:407
 br_mdb_notify+0x310/0x410 net/bridge/br_mdb.c:440
 br_multicast_group_expired+0x1bc/0x610 net/bridge/br_multicast.c:253
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 run_ksoftirqd+0x5e/0x100 kernel/softirq.c:654
 smpboot_thread_fn+0x68b/0xa00 kernel/smpboot.c:164
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
warn_alloc_show_mem: 1 callbacks suppressed
CPU: 1 PID: 15827 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #106
Mem-Info:
active_anon:48727 inactive_anon:1570 isolated_anon:0
 active_file:17 inactive_file:17 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9367 slab_unreclaimable:1455578
 mapped:49154 shmem:1724 pagetables:624 bounce:0
 free:13768 free_pcp:279 free_cma:0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
Node 0 active_anon:194908kB inactive_anon:6280kB active_file:68kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:6896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 <IRQ>
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
lowmem_reserve[]: 0 2818 6321 6321
Node 0 DMA32 free:25244kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888780kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:316kB local_pcp:68kB free_cma:0kB
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
lowmem_reserve[]: 0 0 3503 3503
Node 0 Normal free:13920kB min:37364kB low:46704kB high:56044kB active_anon:194908kB inactive_anon:6280kB active_file:68kB inactive_file:68kB unevictable:0kB writepending:0kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:6912kB pagetables:2496kB bounce:0kB free_pcp:800kB local_pcp:552kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (UM) 4*32kB (M) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 25244kB
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
Node 0 Normal: 786*4kB (UME) 433*8kB (ME) 199*16kB (MEH) 83*32kB (UME) 11*64kB (M) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 13920kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
1758 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342853 pages reserved
0 pages cma reserved
ksoftirqd/0: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
ksoftirqd/0 cpuset=/ mems_allowed=0
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc mm/slab.c:3385 [inline]
RIP: 0010:kmem_cache_alloc+0x297/0x730 mm/slab.c:3552
Code: 7e 0f 85 cf fe ff ff e8 46 eb 3d ff e9 c5 fe ff ff e8 6d 1a c3 ff 48 83 3d 05 6f 8f 07 00 0f 84 41 03 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 e9 54 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 f2 c6
RSP: 0000:ffff88818f82f6f8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8881d4fe6a80 RDI: 0000000000000286
RBP: ffff88818f82f760 R08: ffff8881d4fe6200 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8881d9bee600 R14: ffff8881d9bee600 R15: 0000000000480020
 skb_clone+0x1bb/0x500 net/core/skbuff.c:1280
 ____bpf_clone_redirect net/core/filter.c:2080 [inline]
 bpf_clone_redirect+0xb9/0x490 net/core/filter.c:2067
 bpf_prog_bebbfe2050753572+0x93d/0x1000
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.20.0-rc6+ #106
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
syz-executor5: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
Call Trace:
syz-executor5 cpuset=syz5 mems_allowed=0
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291

Crashes (38):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/20 10:06 bpf bcb671c2fa0e 02e69052 .config console log report ci-upstream-bpf-kasan-gce
2018/12/13 00:22 bpf fdadd04931c2 02613a41 .config console log report ci-upstream-bpf-kasan-gce
2018/11/27 04:42 bpf fdac315d705a ac912200 .config console log report ci-upstream-bpf-kasan-gce
2018/11/17 01:18 bpf da85d8bfd151 b08ee62a .config console log report ci-upstream-bpf-kasan-gce
2018/11/16 19:03 bpf da85d8bfd151 f5e275d1 .config console log report ci-upstream-bpf-kasan-gce
2018/11/05 03:06 bpf 28c2fae726bf 8bd6bd63 .config console log report ci-upstream-bpf-kasan-gce
2018/10/14 01:55 bpf cee271678d0e caf12900 .config console log report ci-upstream-bpf-kasan-gce
2018/10/13 11:23 bpf cee271678d0e caf12900 .config console log report ci-upstream-bpf-kasan-gce
2018/10/10 14:12 bpf 262f9d811c76 5b11ac2c .config console log report ci-upstream-bpf-kasan-gce
2018/10/04 13:48 bpf b0584ea66d73 8b311eaf .config console log report ci-upstream-bpf-kasan-gce
2018/10/01 05:39 bpf 4288ea006c73 41e4b329 .config console log report ci-upstream-bpf-kasan-gce
2018/09/29 20:22 bpf 4288ea006c73 41e4b329 .config console log report ci-upstream-bpf-kasan-gce
2018/09/21 00:24 bpf 080220b68714 6cee973c .config console log report ci-upstream-bpf-kasan-gce
2018/09/13 23:11 bpf 4c3d795cb012 19e9088b .config console log report ci-upstream-bpf-kasan-gce
2018/09/12 01:29 bpf 28619527b8a7 4ae17b1f .config console log report ci-upstream-bpf-kasan-gce
2018/09/11 20:03 bpf 28619527b8a7 4ae17b1f .config console log report ci-upstream-bpf-kasan-gce
2018/12/16 04:53 bpf-next 034565da0fe6 def91db3 .config console log report ci-upstream-bpf-next-kasan-gce
2018/12/02 01:04 bpf-next 71fc156ff536 5a581673 .config console log report ci-upstream-bpf-next-kasan-gce
2018/11/22 02:03 bpf-next 462c124c590f 9db828b5 .config console log report ci-upstream-bpf-next-kasan-gce
2018/11/20 19:10 net-next-old e432abfb99e5 9aca6b52 .config console log report ci-upstream-net-kasan-gce
2018/11/14 03:28 bpf-next 407be8d03e20 5f5f6d14 .config console log report ci-upstream-bpf-next-kasan-gce
2018/11/04 17:21 bpf-next 44adbac8f721 8bd6bd63 .config console log report ci-upstream-bpf-next-kasan-gce
2018/10/26 17:49 bpf-next 44adbac8f721 a8292de9 .config console log report ci-upstream-bpf-next-kasan-gce
2018/10/23 18:11 bpf-next 487e2e22ab79 24fa2ad8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/10/23 16:59 bpf-next 487e2e22ab79 24fa2ad8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/10/23 16:20 bpf-next 487e2e22ab79 24fa2ad8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/10/22 14:11 bpf-next fe8ecccc10b3 ecb386fe .config console log report ci-upstream-bpf-next-kasan-gce
2018/10/19 19:48 bpf-next 3ddeac6705ab ecb386fe .config console log report ci-upstream-bpf-next-kasan-gce
2018/10/16 03:10 bpf-next d04fb13c9fcd 8cd30605 .config console log report ci-upstream-bpf-next-kasan-gce
2018/10/13 04:33 bpf-next 1ae80cf31938 caf12900 .config console log report ci-upstream-bpf-next-kasan-gce
2018/10/11 20:04 bpf-next ef4ab8447aa2 ba6ddb43 .config console log report ci-upstream-bpf-next-kasan-gce
2018/10/06 07:00 bpf-next df1ea77bc51d 8b311eaf .config console log report ci-upstream-bpf-next-kasan-gce
2018/10/03 04:58 bpf-next 33d9a7fd6756 0f3e0261 .config console log report ci-upstream-bpf-next-kasan-gce
2018/09/16 10:51 bpf-next 70e88c758a6b a343a400 .config console log report ci-upstream-bpf-next-kasan-gce
2018/09/13 17:37 bpf-next 1edb6e035eb7 19e9088b .config console log report ci-upstream-bpf-next-kasan-gce
2018/09/13 16:49 bpf-next 1edb6e035eb7 19e9088b .config console log report ci-upstream-bpf-next-kasan-gce
2018/09/12 13:41 net-next-old aad06d1104e8 3c88136c .config console log report ci-upstream-net-kasan-gce
2018/09/11 23:24 bpf-next 2e2a0c961a87 4ae17b1f .config console log report ci-upstream-bpf-next-kasan-gce
* Struck through repros no longer work on HEAD.