CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 rcu: INFO: rcu_preempt self-detected stall on CPU Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: rcu: 1-...!: (276 ticks this GP) idle=162/1/0x4000000000000004 softirq=146475/146477 fqs=0 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 rcu: (t=10545 jiffies g=229925 q=4) rcu: rcu_preempt kthread starved for 10545 jiffies! g229925 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: RCU grace-period kthread stack dump: rcu_preempt R running task 29208 10 2 0x80000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 schedule_timeout+0x4cf/0xfe0 kernel/time/timer.c:1818 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 rcu_gp_kthread+0xdad/0x21c0 kernel/rcu/tree.c:2202 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 kthread+0x33f/0x460 kernel/kthread.c:259 __do_softirq+0x265/0x980 kernel/softirq.c:292 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 NMI backtrace for cpu 1 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123 Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8 RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1114 [inline] out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline] __alloc_pages_slowpath mm/page_alloc.c:4255 [inline] __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197 alloc_pages include/linux/gfp.h:532 [inline] __page_cache_alloc mm/filemap.c:969 [inline] page_cache_read mm/filemap.c:2408 [inline] filemap_fault+0x146e/0x2180 mm/filemap.c:2592 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379 __do_fault+0x10b/0x4b0 mm/memory.c:3403 do_read_fault mm/memory.c:3815 [inline] do_fault mm/memory.c:3944 [inline] handle_pte_fault mm/memory.c:4175 [inline] __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299 handle_mm_fault+0x436/0xb10 mm/memory.c:4336 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x466ae0 Code: Bad RIP value. RSP: 002b:00007ffc2137c080 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0 RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003 RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64 R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108 R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f warn_alloc_show_mem: 1 callbacks suppressed CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 Mem-Info: active_anon:137320 inactive_anon:6092 isolated_anon:0 active_file:14 inactive_file:14 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:11037 slab_unreclaimable:1497063 mapped:18311 shmem:7391 pagetables:765 bounce:0 free:11084 free_pcp:278 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Call Trace: Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 lowmem_reserve[]: 0 2693 2695 2695 2695 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101 Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 lib/nmi_backtrace.c:62 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline] rcu_dump_cpu_stacks+0x15f/0x19c kernel/rcu/tree.c:1340 lowmem_reserve[]: 0 0 0 0 0 print_cpu_stall kernel/rcu/tree.c:1478 [inline] check_cpu_stall kernel/rcu/tree.c:1550 [inline] __rcu_pending kernel/rcu/tree.c:3293 [inline] rcu_pending kernel/rcu/tree.c:3336 [inline] rcu_check_callbacks.cold+0x62d/0xe19 kernel/rcu/tree.c:2682 Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB update_process_times+0x2a/0x70 kernel/time/timer.c:1650 Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:168 Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB tick_sched_timer+0xfc/0x290 kernel/time/tick-sched.c:1278 Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB __run_hrtimer kernel/time/hrtimer.c:1465 [inline] __hrtimer_run_queues+0x3f6/0xe60 kernel/time/hrtimer.c:1527 Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 7419 total pagecache pages 0 pages in swap cache hrtimer_interrupt+0x326/0x9e0 kernel/time/hrtimer.c:1585 Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1071 [inline] smp_apic_timer_interrupt+0x10c/0x550 arch/x86/kernel/apic/apic.c:1096 Total swap = 0kB apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 2097051 pages RAM RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:slab_alloc_node mm/slab.c:3334 [inline] RIP: 0010:kmem_cache_alloc_node+0x2ee/0x3b0 mm/slab.c:3647 0 pages HighMem/MovableOnly Code: fe ff ff 48 f7 04 24 00 02 00 00 0f 84 1f fe ff ff e8 86 9e cf ff 48 83 3d c6 77 59 08 00 0f 84 aa 00 00 00 48 8b 3c 24 57 9d <0f> 1f 44 00 00 e9 1a fe ff ff 65 ff 05 71 d4 69 7e 48 8b 05 e2 f0 369649 pages reserved RSP: 0018:ffff8880ba107b70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 0 pages cma reserved RAX: 0000000000000007 RBX: 0000000000480020 RCX: 1ffff110129919e2 RDX: 0000000000000000 RSI: ffff888094c8cf18 RDI: 0000000000000286 ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb RBP: ffff88823b33a540 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff R13: 0000000000000000 R14: 0000000000480020 R15: ffff88823b33a540 syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) __alloc_skb+0x71/0x560 net/core/skbuff.c:193 syz-fuzzer cpuset=/ mems_allowed=0-1 alloc_skb include/linux/skbuff.h:995 [inline] new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline] aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:slab_alloc mm/slab.c:3390 [inline] RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557 Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5 RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286 RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293 ____bpf_clone_redirect net/core/filter.c:2079 [inline] bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184 CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 aoe: skb alloc failure Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor.3 cpuset=/ mems_allowed=0-1 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123 Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8 RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1114 [inline] out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline] __alloc_pages_slowpath mm/page_alloc.c:4255 [inline] __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197 alloc_pages include/linux/gfp.h:532 [inline] __page_cache_alloc mm/filemap.c:969 [inline] page_cache_read mm/filemap.c:2408 [inline] filemap_fault+0x146e/0x2180 mm/filemap.c:2592 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379 __do_fault+0x10b/0x4b0 mm/memory.c:3403 do_read_fault mm/memory.c:3815 [inline] do_fault mm/memory.c:3944 [inline] handle_pte_fault mm/memory.c:4175 [inline] __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299 handle_mm_fault+0x436/0xb10 mm/memory.c:4336 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x466ae0 Code: Bad RIP value. RSP: 002b:00007ffc2137c080 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0 RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003 RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64 R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108 R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f Mem-Info: CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 active_anon:137320 inactive_anon:6092 isolated_anon:0 active_file:14 inactive_file:14 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:11037 slab_unreclaimable:1497063 mapped:18311 shmem:7391 pagetables:765 bounce:0 free:11084 free_pcp:278 free_cma:0 Call Trace: Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 lowmem_reserve[]: 0 2693 2695 2695 2695 Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB fallback_alloc+0x213/0x2e0 mm/slab.c:3224 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 7419 total pagecache pages __alloc_skb+0x71/0x560 net/core/skbuff.c:193 0 pages in swap cache alloc_skb include/linux/skbuff.h:995 [inline] new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67 Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline] aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374 Total swap = 0kB 2097051 pages RAM 0 pages HighMem/MovableOnly call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 369649 pages reserved 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-fuzzer cpuset=/ mems_allowed=0-1 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:slab_alloc mm/slab.c:3390 [inline] RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557 Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5 RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286 RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293 ____bpf_clone_redirect net/core/filter.c:2079 [inline] bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184 CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 aoe: skb alloc failure Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor.3 cpuset=/ mems_allowed=0-1 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] __br_mdb_notify+0x25e/0xf50 net/bridge/br_mdb.c:377 br_mdb_notify+0x20d/0x2e0 net/bridge/br_mdb.c:410 br_multicast_del_pg+0x2b0/0x560 net/bridge/br_multicast.c:292 br_multicast_port_group_expired+0x17c/0x1d0 net/bridge/br_multicast.c:316 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123 Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8 RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1114 [inline] out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline] __alloc_pages_slowpath mm/page_alloc.c:4255 [inline] __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197 alloc_pages include/linux/gfp.h:532 [inline] __page_cache_alloc mm/filemap.c:969 [inline] page_cache_read mm/filemap.c:2408 [inline] filemap_fault+0x146e/0x2180 mm/filemap.c:2592 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379 __do_fault+0x10b/0x4b0 mm/memory.c:3403 do_read_fault mm/memory.c:3815 [inline] do_fault mm/memory.c:3944 [inline] handle_pte_fault mm/memory.c:4175 [inline] __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299 handle_mm_fault+0x436/0xb10 mm/memory.c:4336 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x466ae0 Code: Bad RIP value. RSP: 002b:00007ffc2137c080 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0 RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003 RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64 R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108 R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 warn_alloc_show_mem: 1 callbacks suppressed Mem-Info: Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: active_anon:137320 inactive_anon:6092 isolated_anon:0 active_file:14 inactive_file:14 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:11037 slab_unreclaimable:1497063 mapped:18311 shmem:7391 pagetables:765 bounce:0 free:11084 free_pcp:278 free_cma:0 Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2693 2695 2695 2695 Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB fallback_alloc+0x213/0x2e0 mm/slab.c:3224 7419 total pagecache pages slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 0 pages in swap cache __alloc_skb+0x71/0x560 net/core/skbuff.c:193 Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB alloc_skb include/linux/skbuff.h:995 [inline] new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67 Total swap = 0kB 2097051 pages RAM aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline] aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374 0 pages HighMem/MovableOnly 369649 pages reserved 0 pages cma reserved call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-fuzzer cpuset=/ mems_allowed=0-1 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:slab_alloc mm/slab.c:3390 [inline] RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557 Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5 RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286 RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293 ____bpf_clone_redirect net/core/filter.c:2079 [inline] bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184 CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 aoe: skb alloc failure Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor.3 cpuset=/ mems_allowed=0-1 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] __br_mdb_notify+0x25e/0xf50 net/bridge/br_mdb.c:377 br_mdb_notify+0x20d/0x2e0 net/bridge/br_mdb.c:410 br_multicast_del_pg+0x2b0/0x560 net/bridge/br_multicast.c:292 br_multicast_port_group_expired+0x17c/0x1d0 net/bridge/br_multicast.c:316 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123 Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8 RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1114 [inline] out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline] __alloc_pages_slowpath mm/page_alloc.c:4255 [inline] __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197 alloc_pages include/linux/gfp.h:532 [inline] __page_cache_alloc mm/filemap.c:969 [inline] page_cache_read mm/filemap.c:2408 [inline] filemap_fault+0x146e/0x2180 mm/filemap.c:2592 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379 __do_fault+0x10b/0x4b0 mm/memory.c:3403 do_read_fault mm/memory.c:3815 [inline] do_fault mm/memory.c:3944 [inline] handle_pte_fault mm/memory.c:4175 [inline] __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299 handle_mm_fault+0x436/0xb10 mm/memory.c:4336 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x466ae0 Code: Bad RIP value. RSP: 002b:00007ffc2137c080 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0 RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003 RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64 R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108 R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f warn_alloc_show_mem: 1 callbacks suppressed CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 Mem-Info: active_anon:137320 inactive_anon:6092 isolated_anon:0 active_file:14 inactive_file:14 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:11037 slab_unreclaimable:1497063 mapped:18311 shmem:7391 pagetables:765 bounce:0 free:11084 free_pcp:278 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Call Trace: Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 lowmem_reserve[]: 0 2693 2695 2695 2695 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 7419 total pagecache pages fallback_alloc+0x213/0x2e0 mm/slab.c:3224 0 pages in swap cache slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB __alloc_skb+0x71/0x560 net/core/skbuff.c:193 Total swap = 0kB alloc_skb include/linux/skbuff.h:995 [inline] new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67 2097051 pages RAM aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline] aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374 0 pages HighMem/MovableOnly 369649 pages reserved 0 pages cma reserved syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 syz-fuzzer cpuset=/ mems_allowed=0-1 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:slab_alloc mm/slab.c:3390 [inline] RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557 Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5 RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286 RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293 ____bpf_clone_redirect net/core/filter.c:2079 [inline] bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184 CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 aoe: skb alloc failure Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor.3 cpuset=/ mems_allowed=0-1 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123 Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8 RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1114 [inline] out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline] __alloc_pages_slowpath mm/page_alloc.c:4255 [inline] __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197 alloc_pages include/linux/gfp.h:532 [inline] __page_cache_alloc mm/filemap.c:969 [inline] page_cache_read mm/filemap.c:2408 [inline] filemap_fault+0x146e/0x2180 mm/filemap.c:2592 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379 __do_fault+0x10b/0x4b0 mm/memory.c:3403 do_read_fault mm/memory.c:3815 [inline] do_fault mm/memory.c:3944 [inline] handle_pte_fault mm/memory.c:4175 [inline] __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299 handle_mm_fault+0x436/0xb10 mm/memory.c:4336 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x466ae0 Code: Bad RIP value. RSP: 002b:00007ffc2137c080 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0 RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003 RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64 R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108 R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f warn_alloc_show_mem: 1 callbacks suppressed CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 Mem-Info: active_anon:137320 inactive_anon:6092 isolated_anon:0 active_file:14 inactive_file:14 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:11037 slab_unreclaimable:1497063 mapped:18311 shmem:7391 pagetables:765 bounce:0 free:11084 free_pcp:278 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 lowmem_reserve[]: 0 2693 2695 2695 2695 Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB fallback_alloc+0x213/0x2e0 mm/slab.c:3224 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 7419 total pagecache pages __alloc_skb+0x71/0x560 net/core/skbuff.c:193 0 pages in swap cache alloc_skb include/linux/skbuff.h:995 [inline] new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67 Swap cache stats: add 0, delete 0, find 0/0 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline] aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374 Free swap = 0kB Total swap = 0kB 2097051 pages RAM call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 0 pages HighMem/MovableOnly 369649 pages reserved 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 syz-fuzzer cpuset=/ mems_allowed=0-1 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:slab_alloc mm/slab.c:3390 [inline] RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557 Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5 RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286 RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293 ____bpf_clone_redirect net/core/filter.c:2079 [inline] bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184 CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 aoe: skb alloc failure Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor.3 cpuset=/ mems_allowed=0-1 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123 Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8 RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1114 [inline] out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline] __alloc_pages_slowpath mm/page_alloc.c:4255 [inline] __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197 alloc_pages include/linux/gfp.h:532 [inline] __page_cache_alloc mm/filemap.c:969 [inline] page_cache_read mm/filemap.c:2408 [inline] filemap_fault+0x146e/0x2180 mm/filemap.c:2592 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379 __do_fault+0x10b/0x4b0 mm/memory.c:3403 do_read_fault mm/memory.c:3815 [inline] do_fault mm/memory.c:3944 [inline] handle_pte_fault mm/memory.c:4175 [inline] __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299 handle_mm_fault+0x436/0xb10 mm/memory.c:4336 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x466ae0 Code: Bad RIP value. RSP: 002b:00007ffc2137c080 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0 RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003 RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64 R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108 R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f warn_alloc_show_mem: 1 callbacks suppressed CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 Mem-Info: active_anon:137320 inactive_anon:6092 isolated_anon:0 active_file:14 inactive_file:14 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:11037 slab_unreclaimable:1497063 mapped:18311 shmem:7391 pagetables:765 bounce:0 free:11084 free_pcp:278 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Call Trace: Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 lowmem_reserve[]: 0 2693 2695 2695 2695 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 7419 total pagecache pages __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 0 pages in swap cache fallback_alloc+0x213/0x2e0 mm/slab.c:3224 Swap cache stats: add 0, delete 0, find 0/0 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 Free swap = 0kB Total swap = 0kB __alloc_skb+0x71/0x560 net/core/skbuff.c:193 2097051 pages RAM alloc_skb include/linux/skbuff.h:995 [inline] new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67 0 pages HighMem/MovableOnly aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline] aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374 369649 pages reserved 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 syz-fuzzer cpuset=/ mems_allowed=0-1 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:slab_alloc mm/slab.c:3390 [inline] RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557 Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5 RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286 RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293 ____bpf_clone_redirect net/core/filter.c:2079 [inline] bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184 CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 aoe: skb alloc failure Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor.3 cpuset=/ mems_allowed=0-1 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123 Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8 RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1114 [inline] out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline] __alloc_pages_slowpath mm/page_alloc.c:4255 [inline] __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197 alloc_pages include/linux/gfp.h:532 [inline] __page_cache_alloc mm/filemap.c:969 [inline] page_cache_read mm/filemap.c:2408 [inline] filemap_fault+0x146e/0x2180 mm/filemap.c:2592 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379 __do_fault+0x10b/0x4b0 mm/memory.c:3403 do_read_fault mm/memory.c:3815 [inline] do_fault mm/memory.c:3944 [inline] handle_pte_fault mm/memory.c:4175 [inline] __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299 handle_mm_fault+0x436/0xb10 mm/memory.c:4336 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x466ae0 Code: Bad RIP value. RSP: 002b:00007ffc2137c080 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0 RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003 RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64 R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108 R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f warn_alloc_show_mem: 1 callbacks suppressed CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 Mem-Info: active_anon:137320 inactive_anon:6092 isolated_anon:0 active_file:14 inactive_file:14 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:11037 slab_unreclaimable:1497063 mapped:18311 shmem:7391 pagetables:765 bounce:0 free:11084 free_pcp:278 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Call Trace: Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 lowmem_reserve[]: 0 2693 2695 2695 2695 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 7419 total pagecache pages __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 0 pages in swap cache fallback_alloc+0x213/0x2e0 mm/slab.c:3224 Swap cache stats: add 0, delete 0, find 0/0 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 Free swap = 0kB __alloc_skb+0x71/0x560 net/core/skbuff.c:193 Total swap = 0kB 2097051 pages RAM alloc_skb include/linux/skbuff.h:995 [inline] new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67 0 pages HighMem/MovableOnly aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline] aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374 369649 pages reserved 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 syz-fuzzer cpuset=/ mems_allowed=0-1 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:slab_alloc mm/slab.c:3390 [inline] RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557 Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5 RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286 RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293 ____bpf_clone_redirect net/core/filter.c:2079 [inline] bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184 CPU: 0 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 aoe: skb alloc failure Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 syz-executor.3: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor.3 cpuset=/ mems_allowed=0-1 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] ndisc_alloc_skb+0x134/0x320 net/ipv6/ndisc.c:403 ndisc_send_rs+0x33a/0x690 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x384/0x6a0 net/ipv6/addrconf.c:3835 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:dump_stack+0x2da/0x2ef lib/dump_stack.c:123 Code: 00 74 0c 48 c7 c7 88 82 f1 89 e8 3f 0b 82 f9 48 83 3d 5f 2b db 01 00 75 07 e8 40 2e 4c f9 0f 0b e8 39 2e 4c f9 48 89 df 57 9d <0f> 1f 44 00 00 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 1f 2e 4c f9 e8 RSP: 0000:ffff888093d6f740 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8880b0c04600 RBX: 0000000000000293 RCX: 1ffff110161809df RDX: 0000000000000000 RSI: ffffffff88165737 RDI: 0000000000000293 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff R13: 0000000000000200 R14: dffffc0000000000 R15: 1ffffffff13e3052 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1114 [inline] out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline] __alloc_pages_slowpath mm/page_alloc.c:4255 [inline] __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197 alloc_pages include/linux/gfp.h:532 [inline] __page_cache_alloc mm/filemap.c:969 [inline] page_cache_read mm/filemap.c:2408 [inline] filemap_fault+0x146e/0x2180 mm/filemap.c:2592 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379 __do_fault+0x10b/0x4b0 mm/memory.c:3403 do_read_fault mm/memory.c:3815 [inline] do_fault mm/memory.c:3944 [inline] handle_pte_fault mm/memory.c:4175 [inline] __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299 handle_mm_fault+0x436/0xb10 mm/memory.c:4336 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x466ae0 Code: Bad RIP value. RSP: 002b:00007ffc2137c080 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0 RDX: 0000000000000080 RSI: 00007ffc2137c0d8 RDI: 0000000000000003 RBP: 00007ffc2137c6d8 R08: 0000000000000000 R09: 0000016f77cd3a64 R10: 00000000000003e6 R11: 0000000000000246 R12: 00007ffc2137c108 R13: 0000000000000000 R14: 000000000182a340 R15: 000000000000000f warn_alloc_show_mem: 1 callbacks suppressed CPU: 1 PID: 16492 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 Mem-Info: active_anon:137320 inactive_anon:6092 isolated_anon:0 active_file:14 inactive_file:14 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:11037 slab_unreclaimable:1497063 mapped:18311 shmem:7391 pagetables:765 bounce:0 free:11084 free_pcp:278 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Node 0 active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73244kB dirty:0kB writeback:0kB shmem:29564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Call Trace: Node 1 active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 lowmem_reserve[]: 0 2693 2695 2695 2695 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 Node 0 DMA32 free:13424kB min:35996kB low:44992kB high:53988kB active_anon:549012kB inactive_anon:24368kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:3060kB bounce:0kB free_pcp:864kB local_pcp:856kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:20044kB min:53876kB low:67344kB high:80812kB active_anon:268kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB Node 0 DMA32: 842*4kB (MH) 897*8kB (MH) 148*16kB (UMH) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13456kB Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB Node 1 Normal: 7*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (M) = 20044kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 7419 total pagecache pages fallback_alloc+0x213/0x2e0 mm/slab.c:3224 0 pages in swap cache slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647 Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB __alloc_skb+0x71/0x560 net/core/skbuff.c:193 Total swap = 0kB 2097051 pages RAM alloc_skb include/linux/skbuff.h:995 [inline] new_skb+0x24/0x1c0 drivers/block/aoe/aoecmd.c:67 0 pages HighMem/MovableOnly 369649 pages reserved aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline] aoecmd_cfg+0x191/0x5e0 drivers/block/aoe/aoecmd.c:1374 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb syz-fuzzer: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 syz-fuzzer cpuset=/ mems_allowed=0-1 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:slab_alloc mm/slab.c:3390 [inline] RIP: 0010:kmem_cache_alloc+0x2c4/0x370 mm/slab.c:3557 Code: 00 48 c7 c7 03 6c b8 89 e8 e9 5e a9 ff e9 b5 fd ff ff e8 ef 92 cf ff 48 83 3d 2f 6c 59 08 00 0f 84 ae 00 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 1c fe ff ff 65 ff 05 db c8 69 7e 48 8b 05 cc e5 RSP: 0018:ffff8880569ef810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000007 RBX: 0000000000480020 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff888094c8cec8 RDI: 0000000000000286 RBP: 0000000000480020 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff88823b33a540 R14: ffff88823b33a540 R15: 0000000000000286 skb_clone+0x151/0x3d0 net/core/skbuff.c:1293 ____bpf_clone_redirect net/core/filter.c:2079 [inline] bpf_clone_redirect+0xaf/0x430 net/core/filter.c:2066 ___bpf_prog_run+0x1bfa/0x4e80 kernel/bpf/core.c:1184 ---------------- Code disassembly (best guess): 0: 00 74 0c 48 add %dh,0x48(%rsp,%rcx,1) 4: c7 c7 88 82 f1 89 mov $0x89f18288,%edi a: e8 3f 0b 82 f9 callq 0xf9820b4e f: 48 83 3d 5f 2b db 01 cmpq $0x0,0x1db2b5f(%rip) # 0x1db2b76 16: 00 17: 75 07 jne 0x20 19: e8 40 2e 4c f9 callq 0xf94c2e5e 1e: 0f 0b ud2 20: e8 39 2e 4c f9 callq 0xf94c2e5e 25: 48 89 df mov %rbx,%rdi 28: 57 push %rdi 29: 9d popfq * 2a: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) <-- trapping instruction 2f: 58 pop %rax 30: 5b pop %rbx 31: 5d pop %rbp 32: 41 5c pop %r12 34: 41 5d pop %r13 36: 41 5e pop %r14 38: 41 5f pop %r15 3a: e9 1f 2e 4c f9 jmpq 0xf94c2e5e 3f: e8 .byte 0xe8