RDX: 00007f1b601b70f0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f1b61ca0ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ffe79d4674f R14: 00007f1b601b7300 R15: 0000000000022000 CPU: 1 PID: 6958 Comm: kworker/u4:5 Not tainted 4.19.211-syzkaller #0 rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 rcu: (detected by 0, t=10538 jiffies, g=255505, q=2597) Workqueue: phy15 ieee80211_iface_work rcu: All QSes seen, last rcu_preempt kthread activity 10526 (4295107845-4295097319), jiffies_till_next_fqs=1, root ->qsmask 0x0 Call Trace: syz-executor.1 R running task 27632 13104 8145 0x8000000a Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 sched_show_task.cold+0x332/0x396 kernel/sched/core.c:5337 print_other_cpu_stall kernel/rcu/tree.c:1430 [inline] check_cpu_stall kernel/rcu/tree.c:1557 [inline] __rcu_pending kernel/rcu/tree.c:3293 [inline] rcu_pending kernel/rcu/tree.c:3336 [inline] rcu_check_callbacks.cold+0xb37/0xe19 kernel/rcu/tree.c:2682 update_process_times+0x2a/0x70 kernel/time/timer.c:1650 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:168 tick_sched_timer+0xfc/0x290 kernel/time/tick-sched.c:1278 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __run_hrtimer kernel/time/hrtimer.c:1465 [inline] __hrtimer_run_queues+0x3f6/0xe60 kernel/time/hrtimer.c:1527 hrtimer_interrupt+0x326/0x9e0 kernel/time/hrtimer.c:1585 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1071 [inline] smp_apic_timer_interrupt+0x10c/0x550 arch/x86/kernel/apic/apic.c:1096 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:slab_alloc_node mm/slab.c:3334 [inline] RIP: 0010:kmem_cache_alloc_node+0x2ee/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 Code: fe ff ff 48 f7 04 24 00 02 00 00 0f 84 1f fe ff ff e8 86 9e cf ff 48 83 3d c6 77 59 08 00 0f 84 aa 00 00 00 48 8b 3c 24 57 9d <0f> 1f 44 00 00 e9 1a fe ff ff 65 ff 05 71 d4 69 7e 48 8b 05 e2 f0 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 RSP: 0018:ffff8880ba007b68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 RAX: 0000000000000007 RBX: 0000000000480020 RCX: 1ffff110142eb53d addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 RDX: 0000000000000000 RSI: ffff8880a175a9c8 RDI: 0000000000000286 RBP: ffff8880b5b8fd80 R08: 0000000000000000 R09: 0000000000000000 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff R13: 0000000000000000 R14: 0000000000480020 R15: ffff8880b5b8fd80 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 __do_softirq+0x265/0x980 kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1092 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 do_softirq.part.0+0x160/0x1c0 kernel/softirq.c:336 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 do_softirq kernel/softirq.c:328 [inline] __local_bh_enable_ip+0x20e/0x270 kernel/softirq.c:189 spin_unlock_bh include/linux/spinlock.h:374 [inline] cfg80211_put_bss net/wireless/scan.c:1331 [inline] cfg80211_put_bss+0x140/0x1e0 net/wireless/scan.c:1319 ieee80211_rx_bss_put net/mac80211/scan.c:39 [inline] ieee80211_rx_bss_put+0x3f/0x50 net/mac80211/scan.c:34 ieee80211_rx_bss_info net/mac80211/ibss.c:1198 [inline] ieee80211_rx_mgmt_probe_beacon+0xc5b/0x15c0 net/mac80211/ibss.c:1607 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:preempt_schedule_irq+0xa6/0x140 kernel/sched/core.c:3744 Code: 00 00 e8 3d 04 29 f9 e8 58 3f 4f f9 4c 89 e8 48 c1 e8 03 80 3c 18 00 75 69 48 83 3d 9b 18 d9 01 00 74 5b fb 66 0f 1f 44 00 00 01 00 00 00 e8 40 d1 ff ff 48 c7 c0 90 82 f1 89 48 c1 e8 03 80 RSP: 0018:ffff8880b0587640 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880a175a9c4 RBP: ffffed10142eb428 R08: 0000000000000000 R09: 0000000000000000 ieee80211_ibss_rx_queued_mgmt+0xe27/0x18b0 net/mac80211/ibss.c:1634 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a175a140 R13: ffffffff89f18298 R14: 0000000000000000 R15: 0000000000000000 retint_kernel+0x1b/0x2d RIP: 0010:lru_add_drain+0x0/0x50 mm/swap.c:647 Code: 00 e9 95 fb ff ff 48 89 df e8 5c 72 16 00 e9 27 fa ff ff 4c 89 e7 e8 4f 72 16 00 e9 0d fc ff ff e8 45 72 16 00 e9 e0 fb ff ff <53> e8 4a 95 e0 ff bf 01 00 00 00 e8 f0 7d bf ff e8 3b 30 f5 01 89 RSP: 0018:ffff8880b0587710 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880a175a140 RBX: ffff8880b05879e0 RCX: ffffffff818bae85 RDX: 0000000000000000 RSI: ffffffff8191ee3e RDI: ffff8880b05879f0 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000005 R11: dffffc0000000000 R12: ffff8880b05879e0 R13: ffff8880b05879f0 R14: dffffc0000000000 R15: 0000000000000008 ieee80211_iface_work+0x5c4/0x8a0 net/mac80211/iface.c:1341 free_pages_and_swap_cache+0x23/0x3a0 mm/swap_state.c:317 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 tlb_flush_mmu_free mm/memory.c:261 [inline] zap_pte_range mm/memory.c:1417 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x221f/0x2c50 mm/memory.c:1534 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 unmap_single_vma+0x198/0x300 mm/memory.c:1579 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 unmap_vmas+0xa9/0x180 mm/memory.c:1609 warn_alloc_show_mem: 1 callbacks suppressed Mem-Info: exit_mmap+0x2b9/0x530 mm/mmap.c:3093 active_anon:272560 inactive_anon:6873 isolated_anon:0 active_file:5895 inactive_file:11167 isolated_file:0 unevictable:0 dirty:15 writeback:2 unstable:0 slab_reclaimable:19955 slab_unreclaimable:1335944 mapped:13882 shmem:14654 pagetables:1011 bounce:0 free:11051 free_pcp:493 free_cma:0 Node 0 active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55528kB dirty:52kB writeback:8kB shmem:58616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2693 2695 2695 2695 Node 0 DMA32 free:13324kB min:35996kB low:44992kB high:53988kB active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44752kB unevictable:0kB writepending:60kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:8032kB pagetables:4044kB bounce:0kB free_pcp:1260kB local_pcp:908kB free_cma:0kB __mmput kernel/fork.c:1016 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1037 lowmem_reserve[]: 0 0 1 1 1 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20020kB min:53876kB low:67344kB high:80812kB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:712kB local_pcp:248kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB Node 0 DMA32: 2134*4kB (MEH) 342*8kB (ME) 54*16kB (MEH) 1*32kB (U) 4*64kB (U) 5*128kB (UH) 0*256kB 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 13576kB do_group_exit+0x125/0x310 kernel/exit.c:967 Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB get_signal+0x3f2/0x1f70 kernel/signal.c:2589 Node 1 Normal: 1*4kB (E) 2*8kB (UH) 6*16kB (UMEH) 2*32kB (UE) 4*64kB (UEH) 1*128kB (M) 4*256kB (UME) 4*512kB (MH) 2*1024kB (UM) 1*2048kB (U) 3*4096kB (M) = 20020kB do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 31639 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 2097051 pages RAM prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 0 pages HighMem/MovableOnly entry_SYSCALL_64_after_hwframe+0x49/0xbe 369649 pages reserved RIP: 0033:0x7f1b61c69e21 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb Code: Bad RIP value. RSP: 002b:00007f1b601b70b0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 kworker/u4:5: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) RAX: fffffffffffffdfc RBX: 00007f1b61d64f80 RCX: 00007f1b61c69e21 kworker/u4:5 cpuset=/ mems_allowed=0-1 RDX: 00007f1b601b70f0 RSI: 0000000000000000 RDI: 0000000000000000 CPU: 1 PID: 6958 Comm: kworker/u4:5 Not tainted 4.19.211-syzkaller #0 RBP: 00007f1b61ca0ae9 R08: 0000000000000000 R09: 0000000000000000 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Workqueue: phy15 ieee80211_iface_work R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 Call Trace: R13: 00007ffe79d4674f R14: 00007f1b601b7300 R15: 0000000000022000 rcu: rcu_preempt kthread starved for 10526 jiffies! g255505 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 rcu: RCU grace-period kthread stack dump: warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 rcu_preempt R running task 29208 10 2 0x80000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 schedule_timeout+0x4cf/0xfe0 kernel/time/timer.c:1818 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 rcu_gp_kthread+0xdad/0x21c0 kernel/rcu/tree.c:2202 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb syz-executor.1: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor.1 cpuset=/ mems_allowed=0-1 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1092 do_softirq.part.0+0x160/0x1c0 kernel/softirq.c:336 do_softirq kernel/softirq.c:328 [inline] __local_bh_enable_ip+0x20e/0x270 kernel/softirq.c:189 spin_unlock_bh include/linux/spinlock.h:374 [inline] cfg80211_put_bss net/wireless/scan.c:1331 [inline] cfg80211_put_bss+0x140/0x1e0 net/wireless/scan.c:1319 ieee80211_rx_bss_put net/mac80211/scan.c:39 [inline] ieee80211_rx_bss_put+0x3f/0x50 net/mac80211/scan.c:34 ieee80211_rx_bss_info net/mac80211/ibss.c:1198 [inline] ieee80211_rx_mgmt_probe_beacon+0xc5b/0x15c0 net/mac80211/ibss.c:1607 ieee80211_ibss_rx_queued_mgmt+0xe27/0x18b0 net/mac80211/ibss.c:1634 ieee80211_iface_work+0x5c4/0x8a0 net/mac80211/iface.c:1341 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 CPU: 0 PID: 13104 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Mem-Info: active_anon:272560 inactive_anon:6873 isolated_anon:0 active_file:5895 inactive_file:11167 isolated_file:0 unevictable:0 dirty:15 writeback:2 unstable:0 slab_reclaimable:19955 slab_unreclaimable:1335944 mapped:13882 shmem:14654 pagetables:1011 bounce:0 free:11051 free_pcp:493 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Node 0 active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55528kB dirty:52kB writeback:8kB shmem:58616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Call Trace: Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 lowmem_reserve[]: 0 2693 2695 2695 2695 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 Node 0 DMA32 free:13324kB min:35996kB low:44992kB high:53988kB active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44752kB unevictable:0kB writepending:60kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:8032kB pagetables:4044kB bounce:0kB free_pcp:1260kB local_pcp:908kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20020kB min:53876kB low:67344kB high:80812kB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:712kB local_pcp:248kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB Node 0 DMA32: 2134*4kB (MEH) 342*8kB (ME) 54*16kB (MEH) 1*32kB (U) 4*64kB (U) 5*128kB (UH) 0*256kB 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 13576kB Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 1*4kB (E) 2*8kB (UH) 6*16kB (UMEH) 2*32kB (UE) 4*64kB (UEH) 1*128kB (M) 4*256kB (UME) 4*512kB (MH) 2*1024kB (UM) 1*2048kB (U) 3*4096kB (M) = 20020kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB fallback_alloc+0x213/0x2e0 mm/slab.c:3224 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 31639 total pagecache pages __alloc_skb+0x71/0x560 net/core/skbuff.c:193 0 pages in swap cache alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 Swap cache stats: add 0, delete 0, find 0/0 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 Free swap = 0kB addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 Total swap = 0kB 2097051 pages RAM call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 0 pages HighMem/MovableOnly 369649 pages reserved 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb kworker/u4:5: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) kworker/u4:5 cpuset=/ mems_allowed=0-1 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:preempt_schedule_irq+0xa6/0x140 kernel/sched/core.c:3744 Code: 00 00 e8 3d 04 29 f9 e8 58 3f 4f f9 4c 89 e8 48 c1 e8 03 80 3c 18 00 75 69 48 83 3d 9b 18 d9 01 00 74 5b fb 66 0f 1f 44 00 00 01 00 00 00 e8 40 d1 ff ff 48 c7 c0 90 82 f1 89 48 c1 e8 03 80 RSP: 0018:ffff8880b0587640 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880a175a9c4 RBP: ffffed10142eb428 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a175a140 R13: ffffffff89f18298 R14: 0000000000000000 R15: 0000000000000000 retint_kernel+0x1b/0x2d RIP: 0010:lru_add_drain+0x0/0x50 mm/swap.c:647 Code: 00 e9 95 fb ff ff 48 89 df e8 5c 72 16 00 e9 27 fa ff ff 4c 89 e7 e8 4f 72 16 00 e9 0d fc ff ff e8 45 72 16 00 e9 e0 fb ff ff <53> e8 4a 95 e0 ff bf 01 00 00 00 e8 f0 7d bf ff e8 3b 30 f5 01 89 RSP: 0018:ffff8880b0587710 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880a175a140 RBX: ffff8880b05879e0 RCX: ffffffff818bae85 RDX: 0000000000000000 RSI: ffffffff8191ee3e RDI: ffff8880b05879f0 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000005 R11: dffffc0000000000 R12: ffff8880b05879e0 R13: ffff8880b05879f0 R14: dffffc0000000000 R15: 0000000000000008 free_pages_and_swap_cache+0x23/0x3a0 mm/swap_state.c:317 tlb_flush_mmu_free mm/memory.c:261 [inline] zap_pte_range mm/memory.c:1417 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x221f/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 exit_mmap+0x2b9/0x530 mm/mmap.c:3093 __mmput kernel/fork.c:1016 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1037 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f1b61c69e21 Code: Bad RIP value. RSP: 002b:00007f1b601b70b0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 RAX: fffffffffffffdfc RBX: 00007f1b61d64f80 RCX: 00007f1b61c69e21 RDX: 00007f1b601b70f0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f1b61ca0ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ffe79d4674f R14: 00007f1b601b7300 R15: 0000000000022000 CPU: 1 PID: 6958 Comm: kworker/u4:5 Not tainted 4.19.211-syzkaller #0 ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Workqueue: phy15 ieee80211_iface_work Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 syz-executor.1: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor.1 cpuset=/ mems_allowed=0-1 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1092 do_softirq.part.0+0x160/0x1c0 kernel/softirq.c:336 do_softirq kernel/softirq.c:328 [inline] __local_bh_enable_ip+0x20e/0x270 kernel/softirq.c:189 spin_unlock_bh include/linux/spinlock.h:374 [inline] cfg80211_put_bss net/wireless/scan.c:1331 [inline] cfg80211_put_bss+0x140/0x1e0 net/wireless/scan.c:1319 ieee80211_rx_bss_put net/mac80211/scan.c:39 [inline] ieee80211_rx_bss_put+0x3f/0x50 net/mac80211/scan.c:34 ieee80211_rx_bss_info net/mac80211/ibss.c:1198 [inline] ieee80211_rx_mgmt_probe_beacon+0xc5b/0x15c0 net/mac80211/ibss.c:1607 ieee80211_ibss_rx_queued_mgmt+0xe27/0x18b0 net/mac80211/ibss.c:1634 ieee80211_iface_work+0x5c4/0x8a0 net/mac80211/iface.c:1341 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 warn_alloc_show_mem: 1 callbacks suppressed CPU: 0 PID: 13104 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Mem-Info: active_anon:272560 inactive_anon:6873 isolated_anon:0 active_file:5895 inactive_file:11167 isolated_file:0 unevictable:0 dirty:15 writeback:2 unstable:0 slab_reclaimable:19955 slab_unreclaimable:1335944 mapped:13882 shmem:14654 pagetables:1011 bounce:0 free:11051 free_pcp:493 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Node 0 active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55528kB dirty:52kB writeback:8kB shmem:58616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Call Trace: Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 lowmem_reserve[]: 0 2693 2695 2695 2695 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 Node 0 DMA32 free:13324kB min:35996kB low:44992kB high:53988kB active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44752kB unevictable:0kB writepending:60kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:8032kB pagetables:4044kB bounce:0kB free_pcp:1260kB local_pcp:908kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20020kB min:53876kB low:67344kB high:80812kB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:712kB local_pcp:248kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 Node 0 DMA32: 2134*4kB (MEH) 342*8kB (ME) 54*16kB (MEH) 1*32kB (U) 4*64kB (U) 5*128kB (UH) 0*256kB 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 13576kB Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 1*4kB (E) 2*8kB (UH) 6*16kB (UMEH) 2*32kB (UE) 4*64kB (UEH) 1*128kB (M) 4*256kB (UME) 4*512kB (MH) 2*1024kB (UM) 1*2048kB (U) 3*4096kB (M) = 20020kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB fallback_alloc+0x213/0x2e0 mm/slab.c:3224 31639 total pagecache pages slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 0 pages in swap cache __alloc_skb+0x71/0x560 net/core/skbuff.c:193 Swap cache stats: add 0, delete 0, find 0/0 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 Free swap = 0kB ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 Total swap = 0kB addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 2097051 pages RAM 0 pages HighMem/MovableOnly call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 369649 pages reserved 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb kworker/u4:5: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) kworker/u4:5 cpuset=/ mems_allowed=0-1 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:preempt_schedule_irq+0xa6/0x140 kernel/sched/core.c:3744 Code: 00 00 e8 3d 04 29 f9 e8 58 3f 4f f9 4c 89 e8 48 c1 e8 03 80 3c 18 00 75 69 48 83 3d 9b 18 d9 01 00 74 5b fb 66 0f 1f 44 00 00 01 00 00 00 e8 40 d1 ff ff 48 c7 c0 90 82 f1 89 48 c1 e8 03 80 RSP: 0018:ffff8880b0587640 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880a175a9c4 RBP: ffffed10142eb428 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a175a140 R13: ffffffff89f18298 R14: 0000000000000000 R15: 0000000000000000 retint_kernel+0x1b/0x2d RIP: 0010:lru_add_drain+0x0/0x50 mm/swap.c:647 Code: 00 e9 95 fb ff ff 48 89 df e8 5c 72 16 00 e9 27 fa ff ff 4c 89 e7 e8 4f 72 16 00 e9 0d fc ff ff e8 45 72 16 00 e9 e0 fb ff ff <53> e8 4a 95 e0 ff bf 01 00 00 00 e8 f0 7d bf ff e8 3b 30 f5 01 89 RSP: 0018:ffff8880b0587710 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880a175a140 RBX: ffff8880b05879e0 RCX: ffffffff818bae85 RDX: 0000000000000000 RSI: ffffffff8191ee3e RDI: ffff8880b05879f0 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000005 R11: dffffc0000000000 R12: ffff8880b05879e0 R13: ffff8880b05879f0 R14: dffffc0000000000 R15: 0000000000000008 free_pages_and_swap_cache+0x23/0x3a0 mm/swap_state.c:317 tlb_flush_mmu_free mm/memory.c:261 [inline] zap_pte_range mm/memory.c:1417 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x221f/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 exit_mmap+0x2b9/0x530 mm/mmap.c:3093 __mmput kernel/fork.c:1016 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1037 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f1b61c69e21 Code: Bad RIP value. RSP: 002b:00007f1b601b70b0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 RAX: fffffffffffffdfc RBX: 00007f1b61d64f80 RCX: 00007f1b61c69e21 RDX: 00007f1b601b70f0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f1b61ca0ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ffe79d4674f R14: 00007f1b601b7300 R15: 0000000000022000 CPU: 1 PID: 6958 Comm: kworker/u4:5 Not tainted 4.19.211-syzkaller #0 ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Workqueue: phy15 ieee80211_iface_work Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 syz-executor.1: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 syz-executor.1 cpuset=/ mems_allowed=0-1 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1092 do_softirq.part.0+0x160/0x1c0 kernel/softirq.c:336 do_softirq kernel/softirq.c:328 [inline] __local_bh_enable_ip+0x20e/0x270 kernel/softirq.c:189 spin_unlock_bh include/linux/spinlock.h:374 [inline] cfg80211_put_bss net/wireless/scan.c:1331 [inline] cfg80211_put_bss+0x140/0x1e0 net/wireless/scan.c:1319 ieee80211_rx_bss_put net/mac80211/scan.c:39 [inline] ieee80211_rx_bss_put+0x3f/0x50 net/mac80211/scan.c:34 ieee80211_rx_bss_info net/mac80211/ibss.c:1198 [inline] ieee80211_rx_mgmt_probe_beacon+0xc5b/0x15c0 net/mac80211/ibss.c:1607 ieee80211_ibss_rx_queued_mgmt+0xe27/0x18b0 net/mac80211/ibss.c:1634 ieee80211_iface_work+0x5c4/0x8a0 net/mac80211/iface.c:1341 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 warn_alloc_show_mem: 1 callbacks suppressed CPU: 0 PID: 13104 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Mem-Info: active_anon:272560 inactive_anon:6873 isolated_anon:0 active_file:5895 inactive_file:11167 isolated_file:0 unevictable:0 dirty:15 writeback:2 unstable:0 slab_reclaimable:19955 slab_unreclaimable:1335944 mapped:13882 shmem:14654 pagetables:1011 bounce:0 free:11051 free_pcp:493 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Node 0 active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55528kB dirty:52kB writeback:8kB shmem:58616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Call Trace: Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 lowmem_reserve[]: 0 2693 2695 2695 2695 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 Node 0 DMA32 free:13324kB min:35996kB low:44992kB high:53988kB active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44752kB unevictable:0kB writepending:60kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:8032kB pagetables:4044kB bounce:0kB free_pcp:1260kB local_pcp:908kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20020kB min:53876kB low:67344kB high:80812kB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:712kB local_pcp:248kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 Node 0 DMA32: 2134*4kB (MEH) 342*8kB (ME) 54*16kB (MEH) 1*32kB (U) 4*64kB (U) 5*128kB (UH) 0*256kB 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 13576kB Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 1*4kB (E) 2*8kB (UH) 6*16kB (UMEH) 2*32kB (UE) 4*64kB (UEH) 1*128kB (M) 4*256kB (UME) 4*512kB (MH) 2*1024kB (UM) 1*2048kB (U) 3*4096kB (M) = 20020kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB fallback_alloc+0x213/0x2e0 mm/slab.c:3224 31639 total pagecache pages slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 0 pages in swap cache __alloc_skb+0x71/0x560 net/core/skbuff.c:193 Swap cache stats: add 0, delete 0, find 0/0 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 Free swap = 0kB ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 Total swap = 0kB addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 2097051 pages RAM 0 pages HighMem/MovableOnly call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 369649 pages reserved 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 kworker/u4:5: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 kworker/u4:5 cpuset=/ mems_allowed=0-1 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:preempt_schedule_irq+0xa6/0x140 kernel/sched/core.c:3744 Code: 00 00 e8 3d 04 29 f9 e8 58 3f 4f f9 4c 89 e8 48 c1 e8 03 80 3c 18 00 75 69 48 83 3d 9b 18 d9 01 00 74 5b fb 66 0f 1f 44 00 00 01 00 00 00 e8 40 d1 ff ff 48 c7 c0 90 82 f1 89 48 c1 e8 03 80 RSP: 0018:ffff8880b0587640 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880a175a9c4 RBP: ffffed10142eb428 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a175a140 R13: ffffffff89f18298 R14: 0000000000000000 R15: 0000000000000000 retint_kernel+0x1b/0x2d RIP: 0010:lru_add_drain+0x0/0x50 mm/swap.c:647 Code: 00 e9 95 fb ff ff 48 89 df e8 5c 72 16 00 e9 27 fa ff ff 4c 89 e7 e8 4f 72 16 00 e9 0d fc ff ff e8 45 72 16 00 e9 e0 fb ff ff <53> e8 4a 95 e0 ff bf 01 00 00 00 e8 f0 7d bf ff e8 3b 30 f5 01 89 RSP: 0018:ffff8880b0587710 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880a175a140 RBX: ffff8880b05879e0 RCX: ffffffff818bae85 RDX: 0000000000000000 RSI: ffffffff8191ee3e RDI: ffff8880b05879f0 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000005 R11: dffffc0000000000 R12: ffff8880b05879e0 R13: ffff8880b05879f0 R14: dffffc0000000000 R15: 0000000000000008 free_pages_and_swap_cache+0x23/0x3a0 mm/swap_state.c:317 tlb_flush_mmu_free mm/memory.c:261 [inline] zap_pte_range mm/memory.c:1417 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x221f/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 exit_mmap+0x2b9/0x530 mm/mmap.c:3093 __mmput kernel/fork.c:1016 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1037 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f1b61c69e21 Code: Bad RIP value. RSP: 002b:00007f1b601b70b0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 RAX: fffffffffffffdfc RBX: 00007f1b61d64f80 RCX: 00007f1b61c69e21 RDX: 00007f1b601b70f0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f1b61ca0ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ffe79d4674f R14: 00007f1b601b7300 R15: 0000000000022000 CPU: 1 PID: 6958 Comm: kworker/u4:5 Not tainted 4.19.211-syzkaller #0 ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Workqueue: phy15 ieee80211_iface_work Call Trace: syz-executor.1: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 syz-executor.1 cpuset=/ mems_allowed=0-1 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1092 do_softirq.part.0+0x160/0x1c0 kernel/softirq.c:336 do_softirq kernel/softirq.c:328 [inline] __local_bh_enable_ip+0x20e/0x270 kernel/softirq.c:189 spin_unlock_bh include/linux/spinlock.h:374 [inline] cfg80211_put_bss net/wireless/scan.c:1331 [inline] cfg80211_put_bss+0x140/0x1e0 net/wireless/scan.c:1319 ieee80211_rx_bss_put net/mac80211/scan.c:39 [inline] ieee80211_rx_bss_put+0x3f/0x50 net/mac80211/scan.c:34 ieee80211_rx_bss_info net/mac80211/ibss.c:1198 [inline] ieee80211_rx_mgmt_probe_beacon+0xc5b/0x15c0 net/mac80211/ibss.c:1607 ieee80211_ibss_rx_queued_mgmt+0xe27/0x18b0 net/mac80211/ibss.c:1634 ieee80211_iface_work+0x5c4/0x8a0 net/mac80211/iface.c:1341 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 warn_alloc_show_mem: 1 callbacks suppressed CPU: 0 PID: 13104 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Mem-Info: active_anon:272560 inactive_anon:6873 isolated_anon:0 active_file:5895 inactive_file:11167 isolated_file:0 unevictable:0 dirty:15 writeback:2 unstable:0 slab_reclaimable:19955 slab_unreclaimable:1335944 mapped:13882 shmem:14654 pagetables:1011 bounce:0 free:11051 free_pcp:493 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Node 0 active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55528kB dirty:52kB writeback:8kB shmem:58616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Call Trace: Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 lowmem_reserve[]: 0 2693 2695 2695 2695 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 Node 0 DMA32 free:13324kB min:35996kB low:44992kB high:53988kB active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44752kB unevictable:0kB writepending:60kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:8032kB pagetables:4044kB bounce:0kB free_pcp:1260kB local_pcp:908kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20020kB min:53876kB low:67344kB high:80812kB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:712kB local_pcp:248kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB Node 0 DMA32: 2134*4kB (MEH) 342*8kB (ME) 54*16kB (MEH) 1*32kB (U) 4*64kB (U) 5*128kB (UH) 0*256kB 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 13576kB Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 1*4kB (E) 2*8kB (UH) 6*16kB (UMEH) 2*32kB (UE) 4*64kB (UEH) 1*128kB (M) 4*256kB (UME) 4*512kB (MH) 2*1024kB (UM) 1*2048kB (U) 3*4096kB (M) = 20020kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 31639 total pagecache pages fallback_alloc+0x213/0x2e0 mm/slab.c:3224 0 pages in swap cache slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 Swap cache stats: add 0, delete 0, find 0/0 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 Free swap = 0kB alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 Total swap = 0kB ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 2097051 pages RAM addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 0 pages HighMem/MovableOnly 369649 pages reserved call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb kworker/u4:5: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 kworker/u4:5 cpuset=/ mems_allowed=0-1 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:preempt_schedule_irq+0xa6/0x140 kernel/sched/core.c:3744 Code: 00 00 e8 3d 04 29 f9 e8 58 3f 4f f9 4c 89 e8 48 c1 e8 03 80 3c 18 00 75 69 48 83 3d 9b 18 d9 01 00 74 5b fb 66 0f 1f 44 00 00 01 00 00 00 e8 40 d1 ff ff 48 c7 c0 90 82 f1 89 48 c1 e8 03 80 RSP: 0018:ffff8880b0587640 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880a175a9c4 RBP: ffffed10142eb428 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a175a140 R13: ffffffff89f18298 R14: 0000000000000000 R15: 0000000000000000 retint_kernel+0x1b/0x2d RIP: 0010:lru_add_drain+0x0/0x50 mm/swap.c:647 Code: 00 e9 95 fb ff ff 48 89 df e8 5c 72 16 00 e9 27 fa ff ff 4c 89 e7 e8 4f 72 16 00 e9 0d fc ff ff e8 45 72 16 00 e9 e0 fb ff ff <53> e8 4a 95 e0 ff bf 01 00 00 00 e8 f0 7d bf ff e8 3b 30 f5 01 89 RSP: 0018:ffff8880b0587710 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880a175a140 RBX: ffff8880b05879e0 RCX: ffffffff818bae85 RDX: 0000000000000000 RSI: ffffffff8191ee3e RDI: ffff8880b05879f0 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000005 R11: dffffc0000000000 R12: ffff8880b05879e0 R13: ffff8880b05879f0 R14: dffffc0000000000 R15: 0000000000000008 free_pages_and_swap_cache+0x23/0x3a0 mm/swap_state.c:317 tlb_flush_mmu_free mm/memory.c:261 [inline] zap_pte_range mm/memory.c:1417 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x221f/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 exit_mmap+0x2b9/0x530 mm/mmap.c:3093 __mmput kernel/fork.c:1016 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1037 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f1b61c69e21 Code: Bad RIP value. RSP: 002b:00007f1b601b70b0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 RAX: fffffffffffffdfc RBX: 00007f1b61d64f80 RCX: 00007f1b61c69e21 RDX: 00007f1b601b70f0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f1b61ca0ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ffe79d4674f R14: 00007f1b601b7300 R15: 0000000000022000 CPU: 1 PID: 6958 Comm: kworker/u4:5 Not tainted 4.19.211-syzkaller #0 ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Workqueue: phy15 ieee80211_iface_work Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 syz-executor.1: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor.1 cpuset=/ mems_allowed=0-1 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1092 do_softirq.part.0+0x160/0x1c0 kernel/softirq.c:336 do_softirq kernel/softirq.c:328 [inline] __local_bh_enable_ip+0x20e/0x270 kernel/softirq.c:189 spin_unlock_bh include/linux/spinlock.h:374 [inline] cfg80211_put_bss net/wireless/scan.c:1331 [inline] cfg80211_put_bss+0x140/0x1e0 net/wireless/scan.c:1319 ieee80211_rx_bss_put net/mac80211/scan.c:39 [inline] ieee80211_rx_bss_put+0x3f/0x50 net/mac80211/scan.c:34 ieee80211_rx_bss_info net/mac80211/ibss.c:1198 [inline] ieee80211_rx_mgmt_probe_beacon+0xc5b/0x15c0 net/mac80211/ibss.c:1607 ieee80211_ibss_rx_queued_mgmt+0xe27/0x18b0 net/mac80211/ibss.c:1634 ieee80211_iface_work+0x5c4/0x8a0 net/mac80211/iface.c:1341 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 warn_alloc_show_mem: 1 callbacks suppressed CPU: 0 PID: 13104 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Mem-Info: active_anon:272560 inactive_anon:6873 isolated_anon:0 active_file:5895 inactive_file:11167 isolated_file:0 unevictable:0 dirty:15 writeback:2 unstable:0 slab_reclaimable:19955 slab_unreclaimable:1335944 mapped:13882 shmem:14654 pagetables:1011 bounce:0 free:11051 free_pcp:493 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Node 0 active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55528kB dirty:52kB writeback:8kB shmem:58616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Call Trace: Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 lowmem_reserve[]: 0 2693 2695 2695 2695 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 Node 0 DMA32 free:13324kB min:35996kB low:44992kB high:53988kB active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44752kB unevictable:0kB writepending:60kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:8032kB pagetables:4044kB bounce:0kB free_pcp:1260kB local_pcp:908kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20020kB min:53876kB low:67344kB high:80812kB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:712kB local_pcp:248kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 Node 0 DMA32: 2134*4kB (MEH) 342*8kB (ME) 54*16kB (MEH) 1*32kB (U) 4*64kB (U) 5*128kB (UH) 0*256kB 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 13576kB Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 1*4kB (E) 2*8kB (UH) 6*16kB (UMEH) 2*32kB (UE) 4*64kB (UEH) 1*128kB (M) 4*256kB (UME) 4*512kB (MH) 2*1024kB (UM) 1*2048kB (U) 3*4096kB (M) = 20020kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 31639 total pagecache pages fallback_alloc+0x213/0x2e0 mm/slab.c:3224 0 pages in swap cache slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 Swap cache stats: add 0, delete 0, find 0/0 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 Free swap = 0kB alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 Total swap = 0kB 2097051 pages RAM ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 0 pages HighMem/MovableOnly addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 369649 pages reserved 0 pages cma reserved call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb kworker/u4:5: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) kworker/u4:5 cpuset=/ mems_allowed=0-1 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:preempt_schedule_irq+0xa6/0x140 kernel/sched/core.c:3744 Code: 00 00 e8 3d 04 29 f9 e8 58 3f 4f f9 4c 89 e8 48 c1 e8 03 80 3c 18 00 75 69 48 83 3d 9b 18 d9 01 00 74 5b fb 66 0f 1f 44 00 00 01 00 00 00 e8 40 d1 ff ff 48 c7 c0 90 82 f1 89 48 c1 e8 03 80 RSP: 0018:ffff8880b0587640 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880a175a9c4 RBP: ffffed10142eb428 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a175a140 R13: ffffffff89f18298 R14: 0000000000000000 R15: 0000000000000000 retint_kernel+0x1b/0x2d RIP: 0010:lru_add_drain+0x0/0x50 mm/swap.c:647 Code: 00 e9 95 fb ff ff 48 89 df e8 5c 72 16 00 e9 27 fa ff ff 4c 89 e7 e8 4f 72 16 00 e9 0d fc ff ff e8 45 72 16 00 e9 e0 fb ff ff <53> e8 4a 95 e0 ff bf 01 00 00 00 e8 f0 7d bf ff e8 3b 30 f5 01 89 RSP: 0018:ffff8880b0587710 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880a175a140 RBX: ffff8880b05879e0 RCX: ffffffff818bae85 RDX: 0000000000000000 RSI: ffffffff8191ee3e RDI: ffff8880b05879f0 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000005 R11: dffffc0000000000 R12: ffff8880b05879e0 R13: ffff8880b05879f0 R14: dffffc0000000000 R15: 0000000000000008 free_pages_and_swap_cache+0x23/0x3a0 mm/swap_state.c:317 tlb_flush_mmu_free mm/memory.c:261 [inline] zap_pte_range mm/memory.c:1417 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x221f/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 exit_mmap+0x2b9/0x530 mm/mmap.c:3093 __mmput kernel/fork.c:1016 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1037 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f1b61c69e21 Code: Bad RIP value. RSP: 002b:00007f1b601b70b0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 RAX: fffffffffffffdfc RBX: 00007f1b61d64f80 RCX: 00007f1b61c69e21 RDX: 00007f1b601b70f0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f1b61ca0ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ffe79d4674f R14: 00007f1b601b7300 R15: 0000000000022000 CPU: 1 PID: 6958 Comm: kworker/u4:5 Not tainted 4.19.211-syzkaller #0 ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Workqueue: phy15 ieee80211_iface_work Call Trace: syz-executor.1: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 syz-executor.1 cpuset=/ mems_allowed=0-1 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1092 do_softirq.part.0+0x160/0x1c0 kernel/softirq.c:336 do_softirq kernel/softirq.c:328 [inline] __local_bh_enable_ip+0x20e/0x270 kernel/softirq.c:189 spin_unlock_bh include/linux/spinlock.h:374 [inline] cfg80211_put_bss net/wireless/scan.c:1331 [inline] cfg80211_put_bss+0x140/0x1e0 net/wireless/scan.c:1319 ieee80211_rx_bss_put net/mac80211/scan.c:39 [inline] ieee80211_rx_bss_put+0x3f/0x50 net/mac80211/scan.c:34 ieee80211_rx_bss_info net/mac80211/ibss.c:1198 [inline] ieee80211_rx_mgmt_probe_beacon+0xc5b/0x15c0 net/mac80211/ibss.c:1607 ieee80211_ibss_rx_queued_mgmt+0xe27/0x18b0 net/mac80211/ibss.c:1634 ieee80211_iface_work+0x5c4/0x8a0 net/mac80211/iface.c:1341 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 CPU: 0 PID: 13104 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 warn_alloc_show_mem: 1 callbacks suppressed Mem-Info: Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 active_anon:272560 inactive_anon:6873 isolated_anon:0 active_file:5895 inactive_file:11167 isolated_file:0 unevictable:0 dirty:15 writeback:2 unstable:0 slab_reclaimable:19955 slab_unreclaimable:1335944 mapped:13882 shmem:14654 pagetables:1011 bounce:0 free:11051 free_pcp:493 free_cma:0 Call Trace: Node 0 active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55528kB dirty:52kB writeback:8kB shmem:58616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 lowmem_reserve[]: 0 2693 2695 2695 2695 Node 0 DMA32 free:13324kB min:35996kB low:44992kB high:53988kB active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44752kB unevictable:0kB writepending:60kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:8032kB pagetables:4044kB bounce:0kB free_pcp:1260kB local_pcp:908kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20020kB min:53876kB low:67344kB high:80812kB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:712kB local_pcp:248kB free_cma:0kB __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB Node 0 DMA32: 2134*4kB (MEH) 342*8kB (ME) 54*16kB (MEH) 1*32kB (U) 4*64kB (U) 5*128kB (UH) 0*256kB 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 13576kB Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 1*4kB (E) 2*8kB (UH) 6*16kB (UMEH) 2*32kB (UE) 4*64kB (UEH) 1*128kB (M) 4*256kB (UME) 4*512kB (MH) 2*1024kB (UM) 1*2048kB (U) 3*4096kB (M) = 20020kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB fallback_alloc+0x213/0x2e0 mm/slab.c:3224 31639 total pagecache pages slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 0 pages in swap cache __alloc_skb+0x71/0x560 net/core/skbuff.c:193 Swap cache stats: add 0, delete 0, find 0/0 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 Free swap = 0kB ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 Total swap = 0kB addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 2097051 pages RAM 0 pages HighMem/MovableOnly call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 369649 pages reserved 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb kworker/u4:5: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) kworker/u4:5 cpuset=/ mems_allowed=0-1 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:preempt_schedule_irq+0xa6/0x140 kernel/sched/core.c:3744 Code: 00 00 e8 3d 04 29 f9 e8 58 3f 4f f9 4c 89 e8 48 c1 e8 03 80 3c 18 00 75 69 48 83 3d 9b 18 d9 01 00 74 5b fb 66 0f 1f 44 00 00 01 00 00 00 e8 40 d1 ff ff 48 c7 c0 90 82 f1 89 48 c1 e8 03 80 RSP: 0018:ffff8880b0587640 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880a175a9c4 RBP: ffffed10142eb428 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a175a140 R13: ffffffff89f18298 R14: 0000000000000000 R15: 0000000000000000 retint_kernel+0x1b/0x2d RIP: 0010:lru_add_drain+0x0/0x50 mm/swap.c:647 Code: 00 e9 95 fb ff ff 48 89 df e8 5c 72 16 00 e9 27 fa ff ff 4c 89 e7 e8 4f 72 16 00 e9 0d fc ff ff e8 45 72 16 00 e9 e0 fb ff ff <53> e8 4a 95 e0 ff bf 01 00 00 00 e8 f0 7d bf ff e8 3b 30 f5 01 89 RSP: 0018:ffff8880b0587710 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880a175a140 RBX: ffff8880b05879e0 RCX: ffffffff818bae85 RDX: 0000000000000000 RSI: ffffffff8191ee3e RDI: ffff8880b05879f0 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000005 R11: dffffc0000000000 R12: ffff8880b05879e0 R13: ffff8880b05879f0 R14: dffffc0000000000 R15: 0000000000000008 free_pages_and_swap_cache+0x23/0x3a0 mm/swap_state.c:317 tlb_flush_mmu_free mm/memory.c:261 [inline] zap_pte_range mm/memory.c:1417 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x221f/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 exit_mmap+0x2b9/0x530 mm/mmap.c:3093 __mmput kernel/fork.c:1016 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1037 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f1b61c69e21 Code: Bad RIP value. RSP: 002b:00007f1b601b70b0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 RAX: fffffffffffffdfc RBX: 00007f1b61d64f80 RCX: 00007f1b61c69e21 RDX: 00007f1b601b70f0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f1b61ca0ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ffe79d4674f R14: 00007f1b601b7300 R15: 0000000000022000 CPU: 1 PID: 6958 Comm: kworker/u4:5 Not tainted 4.19.211-syzkaller #0 ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Workqueue: phy15 ieee80211_iface_work Call Trace: syz-executor.1: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor.1 cpuset=/ mems_allowed=0-1 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1092 do_softirq.part.0+0x160/0x1c0 kernel/softirq.c:336 do_softirq kernel/softirq.c:328 [inline] __local_bh_enable_ip+0x20e/0x270 kernel/softirq.c:189 spin_unlock_bh include/linux/spinlock.h:374 [inline] cfg80211_put_bss net/wireless/scan.c:1331 [inline] cfg80211_put_bss+0x140/0x1e0 net/wireless/scan.c:1319 ieee80211_rx_bss_put net/mac80211/scan.c:39 [inline] ieee80211_rx_bss_put+0x3f/0x50 net/mac80211/scan.c:34 ieee80211_rx_bss_info net/mac80211/ibss.c:1198 [inline] ieee80211_rx_mgmt_probe_beacon+0xc5b/0x15c0 net/mac80211/ibss.c:1607 ieee80211_ibss_rx_queued_mgmt+0xe27/0x18b0 net/mac80211/ibss.c:1634 ieee80211_iface_work+0x5c4/0x8a0 net/mac80211/iface.c:1341 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 warn_alloc_show_mem: 1 callbacks suppressed CPU: 0 PID: 13104 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Mem-Info: active_anon:272560 inactive_anon:6873 isolated_anon:0 active_file:5895 inactive_file:11167 isolated_file:0 unevictable:0 dirty:15 writeback:2 unstable:0 slab_reclaimable:19955 slab_unreclaimable:1335944 mapped:13882 shmem:14654 pagetables:1011 bounce:0 free:11051 free_pcp:493 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Node 0 active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55528kB dirty:52kB writeback:8kB shmem:58616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Call Trace: Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 lowmem_reserve[]: 0 2693 2695 2695 2695 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 Node 0 DMA32 free:13324kB min:35996kB low:44992kB high:53988kB active_anon:1090240kB inactive_anon:27492kB active_file:23568kB inactive_file:44752kB unevictable:0kB writepending:60kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:8032kB pagetables:4044kB bounce:0kB free_pcp:1260kB local_pcp:908kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20020kB min:53876kB low:67344kB high:80812kB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:712kB local_pcp:248kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB Node 0 DMA32: 2134*4kB (MEH) 342*8kB (ME) 54*16kB (MEH) 1*32kB (U) 4*64kB (U) 5*128kB (UH) 0*256kB 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 13576kB Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 1*4kB (E) 2*8kB (UH) 6*16kB (UMEH) 2*32kB (UE) 4*64kB (UEH) 1*128kB (M) 4*256kB (UME) 4*512kB (MH) 2*1024kB (UM) 1*2048kB (U) 3*4096kB (M) = 20020kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 31639 total pagecache pages fallback_alloc+0x213/0x2e0 mm/slab.c:3224 0 pages in swap cache slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 Swap cache stats: add 0, delete 0, find 0/0 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 Free swap = 0kB alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 Total swap = 0kB ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 2097051 pages RAM addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 0 pages HighMem/MovableOnly 369649 pages reserved call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb kworker/u4:5: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) kworker/u4:5 cpuset=/ mems_allowed=0-1 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:preempt_schedule_irq+0xa6/0x140 kernel/sched/core.c:3744 Code: 00 00 e8 3d 04 29 f9 e8 58 3f 4f f9 4c 89 e8 48 c1 e8 03 80 3c 18 00 75 69 48 83 3d 9b 18 d9 01 00 74 5b fb 66 0f 1f 44 00 00 01 00 00 00 e8 40 d1 ff ff 48 c7 c0 90 82 f1 89 48 c1 e8 03 80 RSP: 0018:ffff8880b0587640 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880a175a9c4 RBP: ffffed10142eb428 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a175a140 R13: ffffffff89f18298 R14: 0000000000000000 R15: 0000000000000000 retint_kernel+0x1b/0x2d RIP: 0010:lru_add_drain+0x0/0x50 mm/swap.c:647 Code: 00 e9 95 fb ff ff 48 89 df e8 5c 72 16 00 e9 27 fa ff ff 4c 89 e7 e8 4f 72 16 00 e9 0d fc ff ff e8 45 72 16 00 e9 e0 fb ff ff <53> e8 4a 95 e0 ff bf 01 00 00 00 e8 f0 7d bf ff e8 3b 30 f5 01 89 RSP: 0018:ffff8880b0587710 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880a175a140 RBX: ffff8880b05879e0 RCX: ffffffff818bae85