syzbot


INFO: rcu detected stall in kthread (2)

Status: closed as dup on 2019/01/02 16:35
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+8ba575c21765414c9e17@syzkaller.appspotmail.com
First crash: 2025d, last: 1932d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
INFO: rcu detected stall in ndisc_alloc_skb net 1 1995d 1915d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in kthread mm 1 2026d 2026d 0/26 closed as invalid on 2018/09/10 16:00
linux-4.19 INFO: rcu detected stall in kthread 2 908d 941d 0/1 auto-closed as invalid on 2022/01/30 14:43

Sample crash report:
CPU: 0 PID: 1022 Comm: oom_reaper Not tainted 4.20.0-rc4+ #103
rcu: INFO: rcu_preempt self-detected stall on CPU
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
rcu: 	1-...!: (109 ticks this GP) idle=f02/1/0x4000000000000004 softirq=57244/57244 fqs=0 
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
rcu: 	 (t=10596 jiffies g=80401 q=31)
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
rcu: rcu_preempt kthread starved for 10596 jiffies! g80401 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: RCU grace-period kthread stack dump:
rcu_preempt     R  running task    22568    10      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2831 [inline]
 __schedule+0x8cf/0x21d0 kernel/sched/core.c:3472
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 schedule+0xfe/0x460 kernel/sched/core.c:3516
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 schedule_timeout+0x140/0x260 kernel/time/timer.c:1804
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 rcu_gp_fqs_loop+0x762/0xa80 kernel/rcu/tree.c:1934
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 rcu_gp_kthread+0x341/0xc70 kernel/rcu/tree.c:2090
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 1022 Comm: oom_reaper Not tainted 4.20.0-rc4+ #103
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 kernel/kcov.c:183
Code: a6 fe ff ff 5d c3 0f 1f 40 00 55 0f b7 d6 0f b7 f7 bf 03 00 00 00 48 89 e5 48 8b 4d 08 e8 88 fe ff ff 5d c3 66 0f 1f 44 00 00 <55> 89 f2 89 fe bf 05 00 00 00 48 89 e5 48 8b 4d 08 e8 6a fe ff ff
RSP: 0018:ffff8881dae061b0 EFLAGS: 00000046
RAX: ffff8881d7b4e200 RBX: ffffffffffffffff RCX: 0000000000000003
RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff8881dae062d8 R08: ffff8881d7b4e200 R09: fffffbfff1616c6c
R10: fffffbfff1616c6c R11: ffffffff8b0b6360 R12: ffffffff8b0b6364
R13: ffff8881dae06271 R14: 0000000000000001 R15: ffffffff8b0b6363
FS:  0000000000000000(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffff600400 CR3: 00000001c2c3e000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 vsnprintf+0x13d0/0x1b60 lib/vsprintf.c:2362
 sprintf+0xb0/0xe0 lib/vsprintf.c:2498
 print_time kernel/printk/printk.c:1228 [inline]
 print_prefix+0x26a/0x3f0 kernel/printk/printk.c:1251
 msg_print_text+0xcc/0x1d0 kernel/printk/printk.c:1278
 console_unlock+0x4e6/0x1190 kernel/printk/printk.c:2388
 vprintk_emit+0x391/0x990 kernel/printk/printk.c:1922
 vprintk_default+0x28/0x30 kernel/printk/printk.c:1964
 vprintk_func+0x7e/0x181 kernel/printk/printk_safe.c:398
 printk+0xa7/0xcf kernel/printk/printk.c:1997
 printk_stack_address arch/x86/kernel/dumpstack.c:71 [inline]
 show_trace_log_lvl+0x23a/0x28c arch/x86/kernel/dumpstack.c:258
 show_stack+0x38/0x3a arch/x86/kernel/dumpstack.c:293
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:csd_lock_wait kernel/smp.c:108 [inline]
RIP: 0010:smp_call_function_single+0x30a/0x660 kernel/smp.c:302
Code: 48 89 44 24 28 e8 f6 78 0c 00 45 85 e4 74 67 48 8b 44 24 28 48 83 c3 18 49 89 c4 e8 d0 77 0c 00 f3 90 48 89 d8 41 c6 04 24 04 <48> c1 e8 03 42 0f b6 04 30 84 c0 74 08 3c 03 0f 8e a1 02 00 00 41
RSP: 0018:ffff8881d7b0ef40 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8881d7b0efb8 RBX: ffff8881d7b0efb8 RCX: ffffffff81731381
RDX: 0000000000000000 RSI: ffffffff81731330 RDI: 0000000000000005
RBP: ffff8881d7b0f090 R08: ffff8881d7b4e200 R09: ffffed103b5e5b80
R10: ffffed103b5e5b80 R11: ffff8881daf2dc07 R12: ffffed103af61e04
R13: 1ffff1103af61df0 R14: dffffc0000000000 R15: 0000000000000001
 smp_call_function_many+0x911/0xae0 kernel/smp.c:434
 on_each_cpu_mask+0x41/0x240 kernel/smp.c:634
 on_e
Lost 65 message(s)!
NMI backtrace for cpu 1
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:csd_lock_wait kernel/smp.c:108 [inline]
RIP: 0010:smp_call_function_single+0x30a/0x660 kernel/smp.c:302
Code: 48 89 44 24 28 e8 f6 78 0c 00 45 85 e4 74 67 48 8b 44 24 28 48 83 c3 18 49 89 c4 e8 d0 77 0c 00 f3 90 48 89 d8 41 c6 04 24 04 <48> c1 e8 03 42 0f b6 04 30 84 c0 74 08 3c 03 0f 8e a1 02 00 00 41
RSP: 0018:ffff8881d7b0ef40 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8881d7b0efb8 RBX: ffff8881d7b0efb8 RCX: ffffffff81731381
RDX: 0000000000000000 RSI: ffffffff81731330 RDI: 0000000000000005
RBP: ffff8881d7b0f090 R08: ffff8881d7b4e200 R09: ffffed103b5e5b80
R10: ffffed103b5e5b80 R11: ffff8881daf2dc07 R12: ffffed103af61e04
R13: 1ffff1103af61df0 R14: dffffc0000000000 R15: 0000000000000001
 smp_call_function_many+0x911/0xae0 kernel/smp.c:434
 on_each_cpu_mask+0x41/0x240 kernel/smp.c:634
 on_each_cpu_cond_mask+0x171/0x210 kernel/smp.c:686
 native_flush_tlb_others+0x2ea/0x690 arch/x86/mm/tlb.c:653
 flush_tlb_others arch/x86/include/asm/paravirt.h:63 [inline]
 flush_tlb_mm_range+0x2fe/0x5d0 arch/x86/mm/tlb.c:704
 tlb_flush arch/x86/include/asm/tlb.h:23 [inline]
 tlb_flush_mmu_tlbonly include/asm-generic/tlb.h:173 [inline]
 zap_pte_range mm/memory.c:1147 [inline]
 zap_pmd_range mm/memory.c:1193 [inline]
 zap_pud_range mm/memory.c:1222 [inline]
 zap_p4d_range mm/memory.c:1243 [inline]
 unmap_page_range+0x1eef/0x2930 mm/memory.c:1264
 __oom_reap_task_mm+0xf7/0x410 mm/oom_kill.c:529
 oom_reap_task_mm mm/oom_kill.c:567 [inline]
 oom_reap_task mm/oom_kill.c:591 [inline]
 oom_reaper+0x2b7/0x11e0 mm/oom_kill.c:629
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
CPU: 1 PID: 31959 Comm: syz-executor0 Not tainted 4.20.0-rc4+ #103
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
active_anon:44214 inactive_anon:199 isolated_anon:0
 active_file:6 inactive_file:21 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9254 slab_unreclaimable:1461523
 mapped:49154 shmem:244 pagetables:666 bounce:0
 free:13686 free_pcp:384 free_cma:0
Call Trace:
Node 0 active_anon:176856kB inactive_anon:796kB active_file:24kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
 <IRQ>
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
lowmem_reserve[]: 0 2818 6321 6321
Node 0 DMA32 free:25200kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888776kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:44kB local_pcp:44kB free_cma:0kB
lowmem_reserve[]: 0 0 3503 3503
Node 0 Normal free:13636kB min:37364kB low:46704kB high:56044kB active_anon:176856kB inactive_anon:796kB active_file:24kB inactive_file:84kB unevictable:0kB writepending:0kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:7040kB pagetables:2664kB bounce:0kB free_pcp:1492kB local_pcp:248kB free_cma:0kB
 nmi_cpu_backtrace.cold.2+0x5c/0xa1 lib/nmi_backtrace.c:101
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
 nmi_trigger_cpumask_backtrace+0x1e8/0x22a lib/nmi_backtrace.c:62
Node 0 DMA32: 3*4kB (UM) 1*8kB (U) 2*16kB (M) 4*32kB (UM) 3*64kB (M) 2*128kB (M) 3*256kB (UM) 2*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 24948kB
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
Node 0 Normal: 601*4kB (MEH) 486*8kB (UME) 237*16kB (UME) 111*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13636kB
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x16f/0x1bc kernel/rcu/tree.c:1195
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
 print_cpu_stall.cold.67+0x1f3/0x3c7 kernel/rcu/tree.c:1334
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
271 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342854 pages reserved
0 pages cma reserved
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.071 msecs
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
oom_reaper: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
 check_cpu_stall kernel/rcu/tree.c:1408 [inline]
 rcu_pending kernel/rcu/tree.c:2961 [inline]
 rcu_check_callbacks+0xf3b/0x13f0 kernel/rcu/tree.c:2506
oom_reaper cpuset=/ mems_allowed=0
 update_process_times+0x2d/0x70 kernel/time/timer.c:1636
 tick_sched_handle+0x9f/0x180 kernel/time/tick-sched.c:164
 tick_sched_timer+0x45/0x130 kernel/time/tick-sched.c:1274
 __run_hrtimer kernel/time/hrtimer.c:1398 [inline]
 __hrtimer_run_queues+0x41c/0x10d0 kernel/time/hrtimer.c:1460
 hrtimer_interrupt+0x313/0x780 kernel/time/hrtimer.c:1518
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1034 [inline]
 smp_apic_timer_interrupt+0x1a1/0x760 arch/x86/kernel/apic/apic.c:1059
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc_node mm/slab.c:3329 [inline]
RIP: 0010:kmem_cache_alloc_node+0x247/0x730 mm/slab.c:3642
Code: 3f 7e 0f 85 32 ff ff ff e8 35 0d 3e ff e9 28 ff ff ff e8 ec 42 c3 ff 48 83 3d 74 8b 8f 07 00 0f 84 33 01 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 bf fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 1a c2
RSP: 0000:ffff8881daf073d8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 1ffff11039b2cda1
RDX: 0000000000000000 RSI: ffff8881cd966d10 RDI: 0000000000000282
RBP: ffff8881daf07448 R08: ffff8881cd966d08 R09: 0000000000000002
R10: 0000000000000000 R11: ffff8881cd966440 R12: ffff8881d9beec00
R13: ffff8881d9beec00 R14: 0000000000000000 R15: 0000000000000282
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 new_skb+0x26/0x1c0 drivers/block/aoe/aoecmd.c:67
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x279/0x7f0 drivers/block/aoe/aoecmd.c:1381
 discover_timer+0x50/0x60 drivers/block/aoe/aoemain.c:24
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc mm/slab.c:3385 [inline]
RIP: 0010:kmem_cache_alloc+0x297/0x730 mm/slab.c:3552
Code: 7e 0f 85 cf fe ff ff e8 86 ed 3d ff e9 c5 fe ff ff e8 3d 23 c3 ff 48 83 3d c5 6b 8f 07 00 0f 84 41 03 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 e9 54 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 1a c2
RSP: 0000:ffff888197a576f8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8881cd966cc0 RDI: 0000000000000282
RBP: ffff888197a57760 R08: ffff8881cd966440 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8881d9beec00 R14: ffff8881d9beec00 R15: 0000000000480020
 skb_clone+0x1bb/0x500 net/core/skbuff.c:1280
 ____bpf_clone_redirect net/core/filter.c:2080 [inline]
 bpf_clone_redirect+0xb9/0x490 net/core/filter.c:2067
 bpf_prog_bebbfe2050753572+0xc5c/0x1000
CPU: 0 PID: 1022 Comm: oom_reaper Not tainted 4.20.0-rc4+ #103
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
aoe: skb alloc failure
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
syz-executor0: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-executor0 cpuset=syz0 mems_allowed=0
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:csd_lock_wait kernel/smp.c:108 [inline]
RIP: 0010:smp_call_function_single+0x30a/0x660 kernel/smp.c:302
Code: 48 89 44 24 28 e8 f6 78 0c 00 45 85 e4 74 67 48 8b 44 24 28 48 83 c3 18 49 89 c4 e8 d0 77 0c 00 f3 90 48 89 d8 41 c6 04 24 04 <48> c1 e8 03 42 0f b6 04 30 84 c0 74 08 3c 03 0f 8e a1 02 00 00 41
RSP: 0018:ffff8881d7b0ef40 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8881d7b0efb8 RBX: ffff8881d7b0efb8 RCX: ffffffff81731381
RDX: 0000000000000000 RSI: ffffffff81731330 RDI: 0000000000000005
RBP: ffff8881d7b0f090 R08: ffff8881d7b4e200 R09: ffffed103b5e5b80
R10: ffffed103b5e5b80 R11: ffff8881daf2dc07 R12: ffffed103af61e04
R13: 1ffff1103af61df0 R14: dffffc0000000000 R15: 0000000000000001
 smp_call_function_many+0x911/0xae0 kernel/smp.c:434
 on_each_cpu_mask+0x41/0x240 kernel/smp.c:634
 on_each_cpu_cond_mask+0x171/0x210 kernel/smp.c:686
 native_flush_tlb_others+0x2ea/0x690 arch/x86/mm/tlb.c:653
 flush_tlb_others arch/x86/include/asm/paravirt.h:63 [inline]
 flush_tlb_mm_range+0x2fe/0x5d0 arch/x86/mm/tlb.c:704
 tlb_flush arch/x86/include/asm/tlb.h:23 [inline]
 tlb_flush_mmu_tlbonly include/asm-generic/tlb.h:173 [inline]
 zap_pte_range mm/memory.c:1147 [inline]
 zap_pmd_range mm/memory.c:1193 [inline]
 zap_pud_range mm/memory.c:1222 [inline]
 zap_p4d_range mm/memory.c:1243 [inline]
 unmap_page_range+0x1eef/0x2930 mm/memory.c:1264
 __oom_reap_task_mm+0xf7/0x410 mm/oom_kill.c:529
 oom_reap_task_mm mm/oom_kill.c:567 [inline]
 oom_reap_task mm/oom_kill.c:591 [inline]
 oom_reaper+0x2b7/0x11e0 mm/oom_kill.c:629
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Mem-Info:
CPU: 1 PID: 31959 Comm: syz-executor0 Not tainted 4.20.0-rc4+ #103
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
active_anon:44214 inactive_anon:199 isolated_anon:0
 active_file:6 inactive_file:21 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9254 slab_unreclaimable:1461523
 mapped:49154 shmem:244 pagetables:666 bounce:0
 free:13686 free_pcp:384 free_cma:0
Call Trace:
Node 0 active_anon:176856kB inactive_anon:796kB active_file:24kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
 <IRQ>
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
lowmem_reserve[]: 0 2818 6321 6321
Node 0 DMA32 free:25200kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888776kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:44kB local_pcp:44kB free_cma:0kB
lowmem_reserve[]: 0 0 3503 3503
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
Node 0 Normal free:13636kB min:37364kB low:46704kB high:56044kB active_anon:176856kB inactive_anon:796kB active_file:24kB inactive_file:84kB unevictable:0kB writepending:0kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:7040kB pagetables:2664kB bounce:0kB free_pcp:1492kB local_pcp:248kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 3*4kB (UM) 1*8kB (U) 2*16kB (M) 4*32kB (UM) 3*64kB (M) 2*128kB (M) 3*256kB (UM) 2*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 24948kB
Node 0 Normal: 601*4kB (MEH) 486*8kB (UME) 237*16kB (UME) 111*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13636kB
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
271 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342854 pages reserved
0 pages cma reserved
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
oom_reaper: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
oom_reaper cpuset=/ mems_allowed=0
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 new_skb+0x26/0x1c0 drivers/block/aoe/aoecmd.c:67
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x279/0x7f0 drivers/block/aoe/aoecmd.c:1381
 discover_timer+0x50/0x60 drivers/block/aoe/aoemain.c:24
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc mm/slab.c:3385 [inline]
RIP: 0010:kmem_cache_alloc+0x297/0x730 mm/slab.c:3552
Code: 7e 0f 85 cf fe ff ff e8 86 ed 3d ff e9 c5 fe ff ff e8 3d 23 c3 ff 48 83 3d c5 6b 8f 07 00 0f 84 41 03 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 e9 54 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 1a c2
RSP: 0000:ffff888197a576f8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8881cd966cc0 RDI: 0000000000000282
RBP: ffff888197a57760 R08: ffff8881cd966440 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8881d9beec00 R14: ffff8881d9beec00 R15: 0000000000480020
 skb_clone+0x1bb/0x500 net/core/skbuff.c:1280
 ____bpf_clone_redirect net/core/filter.c:2080 [inline]
 bpf_clone_redirect+0xb9/0x490 net/core/filter.c:2067
 bpf_prog_bebbfe2050753572+0xc5c/0x1000
CPU: 0 PID: 1022 Comm: oom_reaper Not tainted 4.20.0-rc4+ #103
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
syz-executor0: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-executor0 cpuset=syz0 mems_allowed=0
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:csd_lock_wait kernel/smp.c:108 [inline]
RIP: 0010:smp_call_function_single+0x30a/0x660 kernel/smp.c:302
Code: 48 89 44 24 28 e8 f6 78 0c 00 45 85 e4 74 67 48 8b 44 24 28 48 83 c3 18 49 89 c4 e8 d0 77 0c 00 f3 90 48 89 d8 41 c6 04 24 04 <48> c1 e8 03 42 0f b6 04 30 84 c0 74 08 3c 03 0f 8e a1 02 00 00 41
RSP: 0018:ffff8881d7b0ef40 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8881d7b0efb8 RBX: ffff8881d7b0efb8 RCX: ffffffff81731381
RDX: 0000000000000000 RSI: ffffffff81731330 RDI: 0000000000000005
RBP: ffff8881d7b0f090 R08: ffff8881d7b4e200 R09: ffffed103b5e5b80
R10: ffffed103b5e5b80 R11: ffff8881daf2dc07 R12: ffffed103af61e04
R13: 1ffff1103af61df0 R14: dffffc0000000000 R15: 0000000000000001
 smp_call_function_many+0x911/0xae0 kernel/smp.c:434
 on_each_cpu_mask+0x41/0x240 kernel/smp.c:634
 on_each_cpu_cond_mask+0x171/0x210 kernel/smp.c:686
 native_flush_tlb_others+0x2ea/0x690 arch/x86/mm/tlb.c:653
 flush_tlb_others arch/x86/include/asm/paravirt.h:63 [inline]
 flush_tlb_mm_range+0x2fe/0x5d0 arch/x86/mm/tlb.c:704
 tlb_flush arch/x86/include/asm/tlb.h:23 [inline]
 tlb_flush_mmu_tlbonly include/asm-generic/tlb.h:173 [inline]
 zap_pte_range mm/memory.c:1147 [inline]
 zap_pmd_range mm/memory.c:1193 [inline]
 zap_pud_range mm/memory.c:1222 [inline]
 zap_p4d_range mm/memory.c:1243 [inline]
 unmap_page_range+0x1eef/0x2930 mm/memory.c:1264
 __oom_reap_task_mm+0xf7/0x410 mm/oom_kill.c:529
 oom_reap_task_mm mm/oom_kill.c:567 [inline]
 oom_reap_task mm/oom_kill.c:591 [inline]
 oom_reaper+0x2b7/0x11e0 mm/oom_kill.c:629
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
CPU: 1 PID: 31959 Comm: syz-executor0 Not tainted 4.20.0-rc4+ #103
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
active_anon:44214 inactive_anon:199 isolated_anon:0
 active_file:6 inactive_file:21 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9254 slab_unreclaimable:1461523
 mapped:49154 shmem:244 pagetables:666 bounce:0
 free:13686 free_pcp:384 free_cma:0
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
Node 0 active_anon:176856kB inactive_anon:796kB active_file:24kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 2818 6321 6321
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
Node 0 DMA32 free:25200kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888776kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:44kB local_pcp:44kB free_cma:0kB
lowmem_reserve[]: 0 0 3503 3503
Node 0 Normal free:13636kB min:37364kB low:46704kB high:56044kB active_anon:176856kB inactive_anon:796kB active_file:24kB inactive_file:84kB unevictable:0kB writepending:0kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:7040kB pagetables:2664kB bounce:0kB free_pcp:1492kB local_pcp:248kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
Node 0 DMA32: 3*4kB (UM) 1*8kB (U) 2*16kB (M) 4*32kB (UM) 3*64kB (M) 2*128kB (M) 3*256kB (UM) 2*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 24948kB
Node 0 Normal: 601*4kB (MEH) 486*8kB (UME) 237*16kB (UME) 111*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13636kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
271 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342854 pages reserved
0 pages cma reserved
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
oom_reaper: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
oom_reaper cpuset=/ mems_allowed=0
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 new_skb+0x26/0x1c0 drivers/block/aoe/aoecmd.c:67
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x279/0x7f0 drivers/block/aoe/aoecmd.c:1381
 discover_timer+0x50/0x60 drivers/block/aoe/aoemain.c:24
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:slab_alloc mm/slab.c:3385 [inline]
RIP: 0010:kmem_cache_alloc+0x297/0x730 mm/slab.c:3552
Code: 7e 0f 85 cf fe ff ff e8 86 ed 3d ff e9 c5 fe ff ff e8 3d 23 c3 ff 48 83 3d c5 6b 8f 07 00 0f 84 41 03 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 e9 54 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 1a c2
RSP: 0000:ffff888197a576f8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8881cd966cc0 RDI: 0000000000000282
RBP: ffff888197a57760 R08: ffff8881cd966440 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8881d9beec00 R14: ffff8881d9beec00 R15: 0000000000480020
 skb_clone+0x1bb/0x500 net/core/skbuff.c:1280
 ____bpf_clone_redirect net/core/filter.c:2080 [inline]
 bpf_clone_redirect+0xb9/0x490 net/core/filter.c:2067
 bpf_prog_bebbfe2050753572+0xc5c/0x1000
CPU: 0 PID: 1022 Comm: oom_reaper Not tainted 4.20.0-rc4+ #103
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
syz-executor0: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
syz-executor0 cpuset=syz0 mems_allowed=0
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403
 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:csd_lock_wait kernel/smp.c:108 [inline]
RIP: 0010:smp_call_function_single+0x30a/0x660 kernel/smp.c:302
Code: 48 89 44 24 28 e8 f6 78 0c 00 45 85 e4 74 67 48 8b 44 24 28 48 83 c3 18 49 89 c4 e8 d0 77 0c 00 f3 90 48 89 d8 41 c6 04 24 04 <48> c1 e8 03 42 0f b6 04 30 84 c0 74 08 3c 03 0f 8e a1 02 00 00 41
RSP: 0018:ffff8881d7b0ef40 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8881d7b0efb8 RBX: ffff8881d7b0efb8 RCX: ffffffff81731381
RDX: 0000000000000000 RSI: ffffffff81731330 RDI: 0000000000000005
RBP: ffff8881d7b0f090 R08: ffff8881d7b4e200 R09: ffffed103b5e5b80
R10: ffffed103b5e5b80 R11: ffff8881daf2dc07 R12: ffffed103af61e04
R13: 1ffff1103af61df0 R14: dffffc0000000000 R15: 0000000000000001
 smp_call_function_many+0x911/0xae0 kernel/smp.c:434
 on_each_cpu_mask+0x41/0x240 kernel/smp.c:634
 on_each_cpu_cond_mask+0x171/0x210 kernel/smp.c:686
 native_flush_tlb_others+0x2ea/0x690 arch/x86/mm/tlb.c:653
 flush_tlb_others arch/x86/include/asm/paravirt.h:63 [inline]
 flush_tlb_mm_range+0x2fe/0x5d0 arch/x86/mm/tlb.c:704
 tlb_flush arch/x86/include/asm/tlb.h:23 [inline]
 tlb_flush_mmu_tlbonly include/asm-generic/tlb.h:173 [inline]
 zap_pte_range mm/memory.c:1147 [inline]
 zap_pmd_range mm/memory.c:1193 [inline]
 zap_pud_range mm/memory.c:1222 [inline]
 zap_p4d_range mm/memory.c:1243 [inline]
 unmap_page_range+0x1eef/0x2930 mm/memory.c:1264
 __oom_reap_task_mm+0xf7/0x410 mm/oom_kill.c:529
 oom_reap_task_mm mm/oom_kill.c:567 [inline]
 oom_reap_task mm/oom_kill.c:591 [inline]
 oom_reaper+0x2b7/0x11e0 mm/oom_kill.c:629
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
warn_alloc_show_mem: 1 callbacks suppressed
CPU: 1 PID: 31959 Comm: syz-executor0 Not tainted 4.20.0-rc4+ #103
Mem-Info:
active_anon:44214 inactive_anon:199 isolated_anon:0
 active_file:6 inactive_file:21 isolated_file:0
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:9254 slab_unreclaimable:1461523
 mapped:49154 shmem:244 pagetables:666 bounce:0
 free:13686 free_pcp:384 free_cma:0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
Node 0 active_anon:176856kB inactive_anon:796kB active_file:24kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
 <IRQ>
Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
lowmem_reserve[]: 0 2818 6321 6321
Node 0 DMA32 free:25200kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888776kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:44kB local_pcp:44kB free_cma:0kB
lowmem_reserve[]: 0 0 3503 3503
 warn_alloc.cold.116+0xb7/0x1bd mm/page_alloc.c:3423
Node 0 Normal free:13636kB min:37364kB low:46704kB high:56044kB active_anon:176856kB inactive_anon:796kB active_file:24kB inactive_file:84kB unevictable:0kB writepending:0kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:7040kB pagetables:2664kB bounce:0kB free_pcp:1492kB local_pcp:248kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 3*4kB (UM) 1*8kB (U) 2*16kB (M) 4*32kB (UM) 3*64kB (M) 2*128kB (M) 3*256kB (UM) 2*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 3*4096kB (M) = 24948kB
Node 0 Normal: 601*4kB (MEH) 486*8kB (UME) 237*16kB (UME) 111*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13636kB
 __alloc_pages_slowpath+0x2651/0x2de0 mm/page_alloc.c:4291
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
271 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
342854 pages reserved
0 pages cma reserved
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
oom_reaper: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
oom_reaper cpuset=/ mems_allowed=0
 __alloc_pages_nodemask+0xad8/0xea0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1409 [inline]
 cache_grow_begin+0xa5/0x8c0 mm/slab.c:2677
 fallback_alloc+0x204/0x2e0 mm/slab.c:3219
 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287
 slab_alloc_node mm/slab.c:3327 [inline]
 kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642
 __alloc_skb+0x119/0x770 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:997 [inline]
 new_skb+0x26/0x1c0 drivers/block/aoe/aoecmd.c:67
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x279/0x7f0 drivers/block/aoe/aoecmd.c:1381
 discover_timer+0x50/0x60 drivers/block/aoe/aoemain.c:24
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/13 09:08 bpf fdadd04931c2 02613a41 .config console log report ci-upstream-bpf-kasan-gce
2018/11/08 15:35 bpf ea53abfab960 e85d2a61 .config console log report ci-upstream-bpf-kasan-gce
2018/10/17 01:00 bpf bd8be2cf8b69 1ba7fd7e .config console log report ci-upstream-bpf-kasan-gce
2018/10/16 15:32 bpf bd8be2cf8b69 1ba7fd7e .config console log report ci-upstream-bpf-kasan-gce
2018/09/17 23:44 bpf 4c3d795cb012 7f125108 .config console log report ci-upstream-bpf-kasan-gce
2018/09/14 06:56 bpf 4c3d795cb012 19e9088b .config console log report ci-upstream-bpf-kasan-gce
2018/10/20 08:35 bpf-next 78de35460a5c ecb386fe .config console log report ci-upstream-bpf-next-kasan-gce
2018/09/26 00:26 bpf-next d0e13a1488ad b7e11289 .config console log report ci-upstream-bpf-next-kasan-gce
2018/09/17 15:04 bpf-next 70e88c758a6b 7f125108 .config console log report ci-upstream-bpf-next-kasan-gce
2018/09/12 02:18 bpf-next 2e2a0c961a87 4ae17b1f .config console log report ci-upstream-bpf-next-kasan-gce
2018/09/11 16:52 net-next-old 11957be20ff6 4ae17b1f .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.