syzbot


INFO: task hung in __alloc_pages_nodemask

Status: auto-closed as invalid on 2019/08/12 10:57
Subsystems: net
[Documentation on labels]
First crash: 1898d, last: 1898d

Sample crash report:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 warn_alloc.cold+0x87/0x17f mm/page_alloc.c:3576
INFO: task kworker/u4:7:8261 blocked for more than 140 seconds.
      Not tainted 5.0.0-rc5+ #75
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
 __alloc_pages_slowpath+0x227e/0x2900 mm/page_alloc.c:4447
kworker/u4:7    D25456  8261      2 0x80000000
Workqueue: netns cleanup_net
Call Trace:
 __alloc_pages_nodemask+0x5ce/0x710 mm/page_alloc.c:4555
 context_switch kernel/sched/core.c:2844 [inline]
 __schedule+0x817/0x1cc0 kernel/sched/core.c:3485
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1398 [inline]
 cache_grow_begin+0x9c/0x8c0 mm/slab.c:2666
 schedule+0x92/0x180 kernel/sched/core.c:3529
 fallback_alloc+0x1fd/0x2d0 mm/slab.c:3208
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3587
 ____cache_alloc_node+0x1be/0x1e0 mm/slab.c:3276
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x726/0x1310 kernel/locking/mutex.c:1072
 slab_alloc_node mm/slab.c:3316 [inline]
 kmem_cache_alloc_node+0xe3/0x710 mm/slab.c:3631
 __alloc_skb+0xd5/0x5e0 net/core/skbuff.c:196
 alloc_skb include/linux/skbuff.h:1011 [inline]
 ndisc_alloc_skb+0x13c/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x32d/0x6d0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x30f/0x680 net/ipv6/addrconf.c:3841
 call_timer_fn+0x190/0x720 kernel/time/timer.c:1325
 expire_timers kernel/time/timer.c:1362 [inline]
 __run_timers kernel/time/timer.c:1681 [inline]
 __run_timers kernel/time/timer.c:1649 [inline]
 run_timer_softirq+0x652/0x1700 kernel/time/timer.c:1694
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
 rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77
 __do_softirq+0x266/0x95a kernel/softirq.c:292
 netdev_run_todo+0x565/0x7d0 net/core/dev.c:8893
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x180/0x1d0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x14a/0x570 arch/x86/kernel/apic/apic.c:1062
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:arch_local_irq_restore+0x4e/0x56 arch/x86/include/asm/paravirt.h:766
Code: 00 74 0c 48 c7 c7 f0 81 92 88 e8 63 7f aa fa 48 83 3d 8b 29 96 01 00 75 07 e8 b4 82 73 fa 0f 0b e8 ad 82 73 fa 48 89 df 57 9d <0f> 1f 44 00 00 5b 5d c3 e8 9b 82 73 fa 48 c7 c2 40 d7 0f 8b 4c 89
RSP: 0000:ffff888099fdf4a8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
 rtnl_unlock+0xe/0x10 net/core/rtnetlink.c:117
RAX: ffff88808814e080 RBX: 0000000000000293 RCX: 1ffff11011029d2e
 ip_tunnel_delete_nets+0x423/0x5f0 net/ipv4/ip_tunnel.c:1080
RDX: 0000000000000000 RSI: ffffffff86fc5873 RDI: 0000000000000293
RBP: ffff888099fdf4b0 R08: ffff88808814e080 R09: ffff88808814e970
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293
R13: 00000000ffffffff R14: 0000000000000200 R15: dffffc0000000000
 dump_stack+0x1d9/0x1f0 lib/dump_stack.c:118
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 vti_exit_batch_net+0x23/0x30 net/ipv4/ip_vti.c:495
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
 ops_exit_list.isra.0+0x105/0x160 net/core/net_namespace.c:156
 cleanup_net+0x3fb/0x960 net/core/net_namespace.c:551
 __alloc_pages_may_oom mm/page_alloc.c:3672 [inline]
 __alloc_pages_slowpath+0x2113/0x2900 mm/page_alloc.c:4385
 __alloc_pages_nodemask+0x5ce/0x710 mm/page_alloc.c:4555
 process_one_work+0x98e/0x1790 kernel/workqueue.c:2173
 alloc_pages_current+0x107/0x210 mm/mempolicy.c:2106
 alloc_pages include/linux/gfp.h:509 [inline]
 __page_cache_alloc mm/filemap.c:924 [inline]
 __page_cache_alloc+0x2bd/0x460 mm/filemap.c:909
 page_cache_read mm/filemap.c:2373 [inline]
 filemap_fault+0xff7/0x2400 mm/filemap.c:2557
 ext4_filemap_fault+0x83/0xaf fs/ext4/inode.c:6318
 worker_thread+0x98/0xe40 kernel/workqueue.c:2319
 __do_fault+0x116/0x4e0 mm/memory.c:3019
 do_read_fault mm/memory.c:3430 [inline]
 do_fault mm/memory.c:3556 [inline]
 handle_pte_fault mm/memory.c:3787 [inline]
 __handle_mm_fault+0x2cbd/0x3f20 mm/memory.c:3911
 kthread+0x357/0x430 kernel/kthread.c:246
 handle_mm_fault+0x43f/0xb30 mm/memory.c:3948
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
 do_user_addr_fault arch/x86/mm/fault.c:1475 [inline]
 __do_page_fault+0x5da/0xd60 arch/x86/mm/fault.c:1541
 do_page_fault+0x71/0x581 arch/x86/mm/fault.c:1572
INFO: task syz-executor.4:24570 blocked for more than 140 seconds.
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1143
RIP: 0033:0x7f045a631000
      Not tainted 5.0.0-rc5+ #75
Code: Bad RIP value.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
RSP: 002b:00007f04582d8cf8 EFLAGS: 00010206
syz-executor.4  D27744 24570   7593 0x00100004
RAX: 0000000001b14f00 RBX: 0000000001b15008 RCX: 0000000001b14ef0
RDX: 0000000001acce10 RSI: 0000000000000000 RDI: 00007f04582d8d00
Call Trace:
RBP: 0000000001b15000 R08: 0000000001b14ef0 R09: 00007f045a6cd100
R10: 6465766965636572 R11: 0000000000000000 R12: 0000000000000000
 context_switch kernel/sched/core.c:2844 [inline]
 __schedule+0x817/0x1cc0 kernel/sched/core.c:3485
R13: 00007f0459b0e5a3 R14: 0000000000000ba7 R15: 00007f0459b0d613
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
active_anon:46283 inactive_anon:191 isolated_anon:0
 active_file:9 inactive_file:5 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:10961 slab_unreclaimable:1456448
 mapped:43522 shmem:244 pagetables:646 bounce:0
 free:13864 free_pcp:422 free_cma:0
Node 0 active_anon:185132kB inactive_anon:764kB active_file:32kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Node 0 DMA free:10280kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 2553 2555 2555
Node 0 DMA32 free:25216kB min:56712kB low:65768kB high:74824kB active_anon:185132kB inactive_anon:764kB active_file:32kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2617972kB mlocked:0kB kernel_stack:6880kB pagetables:2584kB bounce:0kB free_pcp:1196kB local_pcp:416kB free_cma:0kB
lowmem_reserve[]: 0 0 2 2
 schedule+0x92/0x180 kernel/sched/core.c:3529
Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
 schedule_timeout+0x8ca/0xfd0 kernel/time/timer.c:1779
Node 1 Normal free:19952kB min:53624kB low:67028kB high:80432kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:492kB local_pcp:244kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10280kB
Node 0 DMA32: 1586*4kB (UME) 877*8kB (UME) 265*16kB (ME) 50*32kB (M) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 1*4096kB (U) = 25216kB
Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
Node 1 Normal: 4*4kB (ME) 2*8kB (E) 1*16kB (E) 42*32kB (UM) 14*64kB (UME) 2*128kB (ME) 2*256kB (ME) 3*512kB (ME) 3*1024kB (ME) 0*2048kB 3*4096kB (UM) = 19952kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
258 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
339412 pages reserved
0 pages cma reserved
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
 do_wait_for_common kernel/sched/completion.c:83 [inline]
 __wait_for_common kernel/sched/completion.c:104 [inline]
 wait_for_common kernel/sched/completion.c:115 [inline]
 wait_for_completion+0x29c/0x440 kernel/sched/completion.c:136
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
 __wait_rcu_gp+0x22a/0x2f0 kernel/rcu/update.c:360
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
 synchronize_rcu.part.0+0xcf/0xe0 kernel/rcu/tree_plugin.h:872
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
net_ratelimit: 906 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
 synchronize_rcu+0x27/0xa0 kernel/rcu/tree_plugin.h:873
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
 br_vlan_flush+0xc3/0x180 net/bridge/br_vlan.c:715
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
 br_dev_uninit+0x2e/0x80 net/bridge/br_device.c:167
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
 rollback_registered_many+0xac2/0xfd0 net/core/dev.c:8116
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
Mem-Info:
active_anon:46271 inactive_anon:191 isolated_anon:0
 active_file:9 inactive_file:5 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:10961 slab_unreclaimable:1457127
 mapped:43522 shmem:244 pagetables:646 bounce:0
 free:13242 free_pcp:359 free_cma:0
 rollback_registered+0x109/0x1d0 net/core/dev.c:8144
Node 0 active_anon:185084kB inactive_anon:764kB active_file:32kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 unregister_netdevice_queue net/core/dev.c:9191 [inline]
 unregister_netdevice_queue+0x1ee/0x2c0 net/core/dev.c:9184
Node 0 DMA free:10280kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 br_dev_delete+0x145/0x1a0 net/bridge/br_if.c:387
lowmem_reserve[]: 0 2553 2555 2555
Node 0 DMA32 free:21972kB min:56712kB low:65768kB high:74824kB active_anon:185084kB inactive_anon:764kB active_file:32kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2617972kB mlocked:0kB kernel_stack:6848kB pagetables:2584kB bounce:0kB free_pcp:1080kB local_pcp:300kB free_cma:0kB
 br_del_bridge+0xd7/0x120 net/bridge/br_if.c:487
lowmem_reserve[]: 0 0 2 2
 br_ioctl_deviceless_stub+0x2a4/0x7b0 net/bridge/br_ioctl.c:380
Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 sock_ioctl+0x2f2/0x610 net/socket.c:1040
lowmem_reserve[]: 0 0 0 0
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:509 [inline]
 do_vfs_ioctl+0xd6e/0x1390 fs/ioctl.c:696
Node 1 Normal free:20152kB min:53624kB low:67028kB high:80432kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
 ksys_ioctl+0xab/0xd0 fs/ioctl.c:713
 __do_sys_ioctl fs/ioctl.c:720 [inline]
 __se_sys_ioctl fs/ioctl.c:718 [inline]
 __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457e39
Code: Bad RIP value.
ksoftirqd/0: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1
RSP: 002b:00007f0924205c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.0.0-rc5+ #75
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 warn_alloc.cold+0x87/0x17f mm/page_alloc.c:3576
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e39
RDX: 0000000020000b00 RSI: 00000000000089a1 RDI: 000000000000000f
RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09242066d4
R13: 00000000004c3183 R14: 00000000004d5d30 R15: 00000000ffffffff
 __alloc_pages_slowpath+0x227e/0x2900 mm/page_alloc.c:4447

Showing all locks held in the system:
2 locks held by init/1:
 #0: 000000003be6663b (&mm->mmap_sem){++++}, at: do_user_addr_fault arch/x86/mm/fault.c:1416 [inline]
 #0: 000000003be6663b (&mm->mmap_sem){++++}, at: __do_page_fault+0x339/0xd60 arch/x86/mm/fault.c:1541
 #1: 000000008b5110b4 (&ei->i_mmap_sem){++++}, at: ext4_filemap_fault+0x7b/0xaf fs/ext4/inode.c:6317
 __alloc_pages_nodemask+0x5ce/0x710 mm/page_alloc.c:4555
5 locks held by ksoftirqd/0/9:
3 locks held by kworker/1:0/17:
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1398 [inline]
 cache_grow_begin+0x9c/0x8c0 mm/slab.c:2666
 #0: 0000000088e5b6da ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline]
 #0: 0000000088e5b6da ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: 0000000088e5b6da ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline]
 #0: 0000000088e5b6da ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline]
 #0: 0000000088e5b6da ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline]
 #0: 0000000088e5b6da ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
 #0: 0000000088e5b6da ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x87e/0x1790 kernel/workqueue.c:2144
 fallback_alloc+0x1fd/0x2d0 mm/slab.c:3208
 #1: 000000008bb67c6b ((addr_chk_work).work){+.+.}, at: process_one_work+0x8b4/0x1790 kernel/workqueue.c:2148
 ____cache_alloc_node+0x1be/0x1e0 mm/slab.c:3276
 #2: 00000000976e6f72 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77
 __do_cache_alloc mm/slab.c:3345 [inline]
 slab_alloc mm/slab.c:3373 [inline]
 kmem_cache_alloc+0x1f5/0x710 mm/slab.c:3541
 skb_clone+0x150/0x3b0 net/core/skbuff.c:1285
1 lock held by khungtaskd/1039:
 deliver_clone+0x46/0xc0 net/bridge/br_forward.c:123
 #0: 000000000a828fa3 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:4389
 br_flood+0x5fa/0x710 net/bridge/br_forward.c:238
3 locks held by rsyslogd/7452:
 br_handle_frame_finish+0xf4e/0x14c0 net/bridge/br_input.c:169
2 locks held by cron/7493:
 #0: 000000003a6b6b6f (&mm->mmap_sem){++++}, at: do_user_addr_fault arch/x86/mm/fault.c:1416 [inline]
 #0: 000000003a6b6b6f (&mm->mmap_sem){++++}, at: __do_page_fault+0x339/0xd60 arch/x86/mm/fault.c:1541
 #1: 000000008494ebcf (&ei->i_mmap_sem){++++}, at: ext4_filemap_fault+0x7b/0xaf fs/ext4/inode.c:6317
 br_nf_hook_thresh+0x2ec/0x380 net/bridge/br_netfilter_hooks.c:1009
2 locks held by getty/7543:
 #0: 00000000caa11f46 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 br_nf_pre_routing_finish_ipv6+0x708/0xdc0 net/bridge/br_netfilter_ipv6.c:210
 #1: 00000000480fc932 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154
 NF_HOOK include/linux/netfilter.h:289 [inline]
 br_nf_pre_routing_ipv6+0x3c4/0x740 net/bridge/br_netfilter_ipv6.c:238
2 locks held by getty/7544:
 #0: 00000000a389239f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 br_nf_pre_routing+0xe80/0x13a0 net/bridge/br_netfilter_hooks.c:482
 #1: 00000000d9b53863 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154
2 locks held by getty/7545:
 #0: 00000000d8a88c0c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 nf_hook_entry_hookfn include/linux/netfilter.h:119 [inline]
 nf_hook_slow+0xbf/0x1f0 net/netfilter/core.c:511
 nf_hook include/linux/netfilter.h:244 [inline]
 NF_HOOK include/linux/netfilter.h:287 [inline]
 br_handle_frame+0x95b/0x1450 net/bridge/br_input.c:305
 #1: 00000000da8bf348 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154
2 locks held by getty/7546:
 __netif_receive_skb_core+0xa96/0x3010 net/core/dev.c:4902
 #0: 0000000007e40ae8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000ea40b492 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154
 __netif_receive_skb_one_core+0xa8/0x1a0 net/core/dev.c:4971
2 locks held by getty/7547:
 #0: 00000000309ff74c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 __netif_receive_skb+0x2c/0x1c0 net/core/dev.c:5083
 #1: 0000000082d3ecf0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154
 process_backlog+0x206/0x750 net/core/dev.c:5923
2 locks held by getty/7548:
 #0: 000000004ab6c48e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000a21d1180 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154
 napi_poll net/core/dev.c:6346 [inline]
 net_rx_action+0x4fa/0x1070 net/core/dev.c:6412
2 locks held by getty/7549:
 #0: 00000000bfc5d4cb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 0000000094bc3c0a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154
 __do_softirq+0x266/0x95a kernel/softirq.c:292
2 locks held by syz-fuzzer/7564:
 run_ksoftirqd kernel/softirq.c:654 [inline]
 run_ksoftirqd+0x8e/0x110 kernel/softirq.c:646
 smpboot_thread_fn+0x6ab/0xa10 kernel/smpboot.c:164
2 locks held by syz-fuzzer/7568:
 kthread+0x357/0x430 kernel/kthread.c:246
 #0: 00000000f686f6e1 (&mm->mmap_sem){++++}, at: do_user_addr_fault arch/x86/mm/fault.c:1416 [inline]
 #0: 00000000f686f6e1 (&mm->mmap_sem){++++}, at: __do_page_fault+0x339/0xd60 arch/x86/mm/fault.c:1541
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Mem-Info:
 #1: 00000000972011c3 (&ei->i_mmap_sem){++++}, at: ext4_filemap_fault+0x7b/0xaf fs/ext4/inode.c:6317
active_anon:46271 inactive_anon:191 isolated_anon:0
 active_file:7 inactive_file:7 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:10961 slab_unreclaimable:1457483
 mapped:43522 shmem:244 pagetables:646 bounce:0
 free:12862 free_pcp:395 free_cma:0
Node 0 active_anon:185084kB inactive_anon:764kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
2 locks held by syz-fuzzer/7569:
Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Node 0 DMA free:10280kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 #0: 00000000f686f6e1 (&mm->mmap_sem){++++}, at: do_user_addr_fault arch/x86/mm/fault.c:1416 [inline]
 #0: 00000000f686f6e1 (&mm->mmap_sem){++++}, at: __do_page_fault+0x339/0xd60 arch/x86/mm/fault.c:1541
lowmem_reserve[]: 0 2553 2555 2555
Node 0 DMA32 free:21216kB min:56712kB low:65768kB high:74824kB active_anon:185084kB inactive_anon:764kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2617972kB mlocked:0kB kernel_stack:6848kB pagetables:2584kB bounce:0kB free_pcp:1084kB local_pcp:304kB free_cma:0kB
lowmem_reserve[]: 0 0 2 2
 #1: 00000000972011c3 (&ei->i_mmap_sem){++++}, at: ext4_filemap_fault+0x7b/0xaf fs/ext4/inode.c:6317
Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
2 locks held by syz-fuzzer/7577:
lowmem_reserve[]: 0 0 0 0
 #0: 00000000f686f6e1 (&mm->mmap_sem){++++}, at: do_user_addr_fault arch/x86/mm/fault.c:1416 [inline]
 #0: 00000000f686f6e1 (&mm->mmap_sem){++++}, at: __do_page_fault+0x339/0xd60 arch/x86/mm/fault.c:1541
Node 1 Normal free:19944kB min:53624kB low:67028kB high:80432kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB
 #1: 00000000972011c3 (&ei->i_mmap_sem){++++}, at: ext4_filemap_fault+0x7b/0xaf fs/ext4/inode.c:6317
lowmem_reserve[]: 0 0 0 0
4 locks held by kworker/u4:7/8261:
Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10280kB
 #0: 00000000f784ccfd ((wq_completion)"%s""netns"){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline]
 #0: 00000000f784ccfd ((wq_completion)"%s""netns"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: 00000000f784ccfd ((wq_completion)"%s""netns"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline]
 #0: 00000000f784ccfd ((wq_completion)"%s""netns"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline]
 #0: 00000000f784ccfd ((wq_completion)"%s""netns"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline]
 #0: 00000000f784ccfd ((wq_completion)"%s""netns"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
 #0: 00000000f784ccfd ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x87e/0x1790 kernel/workqueue.c:2144
Node 0 DMA32: 1586*4kB (UME) 875*8kB (UME) 266*16kB (UME) 50*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (U) 0*4096kB = 21248kB
 #1: 00000000cfe758f5 (net_cleanup_work){+.+.}, at: process_one_work+0x8b4/0x1790 kernel/workqueue.c:2148
Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
 #2: 00000000579785d7 (pernet_ops_rwsem){++++}, at: cleanup_net+0xae/0x960 net/core/net_namespace.c:518
Node 1 Normal: 4*4kB (ME) 3*8kB (UE) 2*16kB (UE) 41*32kB (UM) 14*64kB (UME) 2*128kB (ME) 2*256kB (ME) 3*512kB (ME) 3*1024kB (ME) 0*2048kB 3*4096kB (UM) = 19944kB
 #3: 00000000976e6f72 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
2 locks held by syz-executor.4/24570:
258 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
 #0: 00000000da7b745b (br_ioctl_mutex){+.+.}, at: sock_ioctl+0x2c9/0x610 net/socket.c:1038
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
339412 pages reserved
0 pages cma reserved
ksoftirqd/0: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1
 #1: 00000000976e6f72 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.0.0-rc5+ #75

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 warn_alloc.cold+0x87/0x17f mm/page_alloc.c:3576
=============================================

NMI backtrace for cpu 1
 __alloc_pages_slowpath+0x227e/0x2900 mm/page_alloc.c:4447
 __alloc_pages_nodemask+0x5ce/0x710 mm/page_alloc.c:4555
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1398 [inline]
 cache_grow_begin+0x9c/0x8c0 mm/slab.c:2666
 fallback_alloc+0x1fd/0x2d0 mm/slab.c:3208
 ____cache_alloc_node+0x1be/0x1e0 mm/slab.c:3276
 __do_cache_alloc mm/slab.c:3345 [inline]
 slab_alloc mm/slab.c:3373 [inline]
 kmem_cache_alloc+0x1f5/0x710 mm/slab.c:3541
 skb_clone+0x150/0x3b0 net/core/skbuff.c:1285
 deliver_clone+0x46/0xc0 net/bridge/br_forward.c:123
 maybe_deliver net/bridge/br_forward.c:184 [inline]
 maybe_deliver net/bridge/br_forward.c:172 [inline]
 br_flood+0x4da/0x710 net/bridge/br_forward.c:226
 br_handle_frame_finish+0xf4e/0x14c0 net/bridge/br_input.c:169
 br_nf_hook_thresh+0x2ec/0x380 net/bridge/br_netfilter_hooks.c:1009
 br_nf_pre_routing_finish_ipv6+0x708/0xdc0 net/bridge/br_netfilter_ipv6.c:210
 NF_HOOK include/linux/netfilter.h:289 [inline]
 br_nf_pre_routing_ipv6+0x3c4/0x740 net/bridge/br_netfilter_ipv6.c:238
 br_nf_pre_routing+0xe80/0x13a0 net/bridge/br_netfilter_hooks.c:482
 nf_hook_entry_hookfn include/linux/netfilter.h:119 [inline]
 nf_hook_slow+0xbf/0x1f0 net/netfilter/core.c:511
 nf_hook include/linux/netfilter.h:244 [inline]
 NF_HOOK include/linux/netfilter.h:287 [inline]
 br_handle_frame+0x95b/0x1450 net/bridge/br_input.c:305
 __netif_receive_skb_core+0xa96/0x3010 net/core/dev.c:4902
 __netif_receive_skb_one_core+0xa8/0x1a0 net/core/dev.c:4971
 __netif_receive_skb+0x2c/0x1c0 net/core/dev.c:5083
 process_backlog+0x206/0x750 net/core/dev.c:5923
 napi_poll net/core/dev.c:6346 [inline]
 net_rx_action+0x4fa/0x1070 net/core/dev.c:6412
 __do_softirq+0x266/0x95a kernel/softirq.c:292
 run_ksoftirqd kernel/softirq.c:654 [inline]
 run_ksoftirqd+0x8e/0x110 kernel/softirq.c:646
 smpboot_thread_fn+0x6ab/0xa10 kernel/smpboot.c:164
 kthread+0x357/0x430 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Mem-Info:
CPU: 1 PID: 1039 Comm: khungtaskd Not tainted 5.0.0-rc5+ #75
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
active_anon:46271 inactive_anon:191 isolated_anon:0
 active_file:7 inactive_file:7 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:10961 slab_unreclaimable:1457483
 mapped:43522 shmem:244 pagetables:646 bounce:0
 free:12862 free_pcp:395 free_cma:0
Call Trace:
Node 0 active_anon:185084kB inactive_anon:764kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101
Node 0 DMA free:10280kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 2553 2555 2555
 nmi_trigger_cpumask_backtrace+0x1be/0x236 lib/nmi_backtrace.c:62
Node 0 DMA32 free:21216kB min:56712kB low:65768kB high:74824kB active_anon:185084kB inactive_anon:764kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2617972kB mlocked:0kB kernel_stack:6848kB pagetables:2584kB bounce:0kB free_pcp:1084kB local_pcp:304kB free_cma:0kB
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
lowmem_reserve[]: 0 0 2 2
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
 watchdog+0x9df/0xee0 kernel/hung_task.c:287
Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 kthread+0x357/0x430 kernel/kthread.c:246
lowmem_reserve[]: 0 0 0 0
Node 1 Normal free:19944kB min:53624kB low:67028kB high:80432kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10280kB
Sending NMI from CPU 1 to CPUs 0:
Node 0 DMA32: 1586*4kB (UME) 875*8kB (UME) 266*16kB (UME) 50*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (U) 0*4096kB = 21248kB
NMI backtrace for cpu 0
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.0.0-rc5+ #75
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:io_serial_out+0x73/0x90 drivers/tty/serial/8250/8250_port.c:456
Code: 00 49 8d 7c 24 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 d3 e3 80 3c 02 00 75 19 41 03 5c 24 38 44 89 e8 89 da ee <5b> 41 5c 41 5d 5d c3 e8 d1 4e 33 fe eb c0 e8 2a 4f 33 fe eb e0 0f
RSP: 0000:ffff8880a9886720 EFLAGS: 00000002
RAX: 000000000000005b RBX: 00000000000003f8 RCX: 0000000000000000
RDX: 00000000000003f8 RSI: ffffffff83738826 RDI: ffffffff8af63818
RBP: ffff8880a9886738 R08: ffff8880a9878240 R09: ffffed1015310ce2
R10: ffffed1015310ce1 R11: 0000000000000003 R12: ffffffff8af637e0
R13: 000000000000005b R14: ffffffff8af637e0 R15: 000000000000005b
FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000045df89 CR3: 0000000097d14000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 serial_port_out include/linux/serial_core.h:278 [inline]
 serial8250_console_putchar+0x4e/0x60 drivers/tty/serial/8250/8250_port.c:3200
 uart_console_write+0x57/0x120 drivers/tty/serial/serial_core.c:1917
 serial8250_console_write+0x62b/0x9c0 drivers/tty/serial/8250/8250_port.c:3263
 univ8250_console_write+0x5f/0x70 drivers/tty/serial/8250/8250_core.c:586
 call_console_drivers kernel/printk/printk.c:1737 [inline]
 console_unlock+0xbc6/0x10a0 kernel/printk/printk.c:2408
 vprintk_emit+0x280/0x6d0 kernel/printk/printk.c:1931
 vprintk_default+0x28/0x30 kernel/printk/printk.c:1958
 vprintk_func+0x7e/0x189 kernel/printk/printk_safe.c:398
 printk+0xba/0xed kernel/printk/printk.c:1991
 show_free_areas.cold+0x2f1/0x93a mm/page_alloc.c:5190
 show_mem+0x39/0x19b lib/show_mem.c:18
 warn_alloc_show_mem mm/page_alloc.c:3553 [inline]
 warn_alloc.cold+0x11c/0x17f mm/page_alloc.c:3577
 __alloc_pages_slowpath+0x227e/0x2900 mm/page_alloc.c:4447
 __alloc_pages_nodemask+0x5ce/0x710 mm/page_alloc.c:4555
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1398 [inline]
 cache_grow_begin+0x9c/0x8c0 mm/slab.c:2666
 fallback_alloc+0x1fd/0x2d0 mm/slab.c:3208
 ____cache_alloc_node+0x1be/0x1e0 mm/slab.c:3276
 __do_cache_alloc mm/slab.c:3345 [inline]
 slab_alloc mm/slab.c:3373 [inline]
 kmem_cache_alloc+0x1f5/0x710 mm/slab.c:3541
 skb_clone+0x150/0x3b0 net/core/skbuff.c:1285
 deliver_clone+0x46/0xc0 net/bridge/br_forward.c:123
 maybe_deliver net/bridge/br_forward.c:184 [inline]
 maybe_deliver net/bridge/br_forward.c:172 [inline]
 br_flood+0x4da/0x710 net/bridge/br_forward.c:226
 br_handle_frame_finish+0xf4e/0x14c0 net/bridge/br_input.c:169
 br_nf_hook_thresh+0x2ec/0x380 net/bridge/br_netfilter_hooks.c:1009
 br_nf_pre_routing_finish_ipv6+0x708/0xdc0 net/bridge/br_netfilter_ipv6.c:210
 NF_HOOK include/linux/netfilter.h:289 [inline]
 br_nf_pre_routing_ipv6+0x3c4/0x740 net/bridge/br_netfilter_ipv6.c:238
 br_nf_pre_routing+0xe80/0x13a0 net/bridge/br_netfilter_hooks.c:482
 nf_hook_entry_hookfn include/linux/netfilter.h:119 [inline]
 nf_hook_slow+0xbf/0x1f0 net/netfilter/core.c:511
 nf_hook include/linux/netfilter.h:244 [inline]
 NF_HOOK include/linux/netfilter.h:287 [inline]
 br_handle_frame+0x95b/0x1450 net/bridge/br_input.c:305
 __netif_receive_skb_core+0xa96/0x3010 net/core/dev.c:4902
 __netif_receive_skb_one_core+0xa8/0x1a0 net/core/dev.c:4971
 __netif_receive_skb+0x2c/0x1c0 net/core/dev.c:5083
 process_backlog+0x206/0x750 net/core/dev.c:5923
 napi_poll net/core/dev.c:6346 [inline]
 net_rx_action+0x4fa/0x1070 net/core/dev.c:6412
 __do_softirq+0x266/0x95a kernel/softirq.c:292
 run_ksoftirqd kernel/softirq.c:654 [inline]
 run_ksoftirqd+0x8e/0x110 kernel/softirq.c:646
 smpboot_thread_fn+0x6ab/0xa10 kernel/smpboot.c:164
 kthread+0x357/0x430 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/02/13 10:48 net-old 2fdeee254923 1eedba36 .config console log report ci-upstream-net-this-kasan-gce
* Struck through repros no longer work on HEAD.