BUG: stack guard page was hit at 00000000af19da38 (stack is 00000000fa097fab..0000000079993d64) kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 28643 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:test_bit include/asm-generic/bitops/instrumented-non-atomic.h:110 [inline] RIP: 0010:hlock_class kernel/locking/lockdep.c:179 [inline] RIP: 0010:mark_lock+0x116/0xf10 kernel/locking/lockdep.c:3893 Code: 89 f8 48 c1 e8 03 0f b6 04 10 84 c0 74 08 3c 03 0f 8e e3 0b 00 00 0f b7 55 20 66 81 e2 ff 1f 0f b7 d2 be 08 00 00 00 48 89 d0 <48> 89 14 24 48 c1 f8 06 48 8d 3c c5 60 c9 2f 8c e8 45 14 58 00 48 RSP: 0018:ffffc900168cffd0 EFLAGS: 00010006 RAX: 000000000000001e RBX: 1ffff92002d1a000 RCX: ffff8880397dc9ac RDX: 000000000000001e RSI: 0000000000000008 RDI: ffff8880397dc100 RBP: ffff8880397dc9f0 R08: 1ffff110072fb93d R09: fffffbfff185f92d R10: ffffffff8c2fc967 R11: fffffbfff185f92c R12: 0000000000000008 R13: ffff8880397dc100 R14: ffff8880397dca12 R15: ffff8880397dca10 FS: 00007fcf1c7d3700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc900168cffc8 CR3: 00000000a3047000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: mark_usage kernel/locking/lockdep.c:3841 [inline] __lock_acquire+0x9a4/0x4c50 kernel/locking/lockdep.c:4290 lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4915 seqcount_lockdep_reader_access include/linux/seqlock.h:81 [inline] read_seqcount_begin include/linux/seqlock.h:164 [inline] read_seqbegin include/linux/seqlock.h:433 [inline] zone_span_seqbegin include/linux/memory_hotplug.h:80 [inline] page_outside_zone_boundaries mm/page_alloc.c:569 [inline] bad_range+0xc0/0x3c0 mm/page_alloc.c:598 rmqueue mm/page_alloc.c:3378 [inline] get_page_from_freelist+0x1515/0x3580 mm/page_alloc.c:3759 __alloc_pages_nodemask+0x29f/0x810 mm/page_alloc.c:4812 __alloc_pages include/linux/gfp.h:504 [inline] __alloc_pages_node include/linux/gfp.h:517 [inline] kmem_getpages mm/slab.c:1367 [inline] cache_grow_begin+0x8c/0xc10 mm/slab.c:2600 cache_alloc_refill mm/slab.c:2972 [inline] ____cache_alloc mm/slab.c:3055 [inline] ____cache_alloc mm/slab.c:3038 [inline] slab_alloc_node mm/slab.c:3250 [inline] kmem_cache_alloc_node_trace+0x6c3/0x790 mm/slab.c:3593 __do_kmalloc_node mm/slab.c:3615 [inline] __kmalloc_node_track_caller+0x38/0x60 mm/slab.c:3630 __kmalloc_reserve.isra.0+0x39/0xe0 net/core/skbuff.c:142 pskb_expand_head+0x148/0x1020 net/core/skbuff.c:1627 netlink_trim+0x1ea/0x240 net/netlink/af_netlink.c:1285 netlink_broadcast_filtered+0x5f/0xd40 net/netlink/af_netlink.c:1490 netlink_broadcast net/netlink/af_netlink.c:1535 [inline] nlmsg_multicast include/net/netlink.h:968 [inline] nlmsg_notify+0x90/0x250 net/netlink/af_netlink.c:2512 rtnl_notify net/core/rtnetlink.c:737 [inline] rtmsg_ifinfo_send net/core/rtnetlink.c:3719 [inline] rtmsg_ifinfo_event.part.0+0xb6/0xe0 net/core/rtnetlink.c:3734 rtmsg_ifinfo_event net/core/rtnetlink.c:5512 [inline] rtnetlink_event+0x11e/0x150 net/core/rtnetlink.c:5505 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:1948 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1933 call_netdevice_notifiers_extack net/core/dev.c:1960 [inline] call_netdevice_notifiers net/core/dev.c:1974 [inline] netdev_features_change net/core/dev.c:1364 [inline] netdev_sync_lower_features net/core/dev.c:8926 [inline] __netdev_update_features+0x877/0x1320 net/core/dev.c:9057 netdev_change_features+0x61/0xb0 net/core/dev.c:9129 bond_compute_features.isra.0+0x521/0xa40 drivers/net/bonding/bond_main.c:1188 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3237 [inline] bond_netdev_event+0x6ee/0x930 drivers/net/bonding/bond_main.c:3277 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:1948 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1933 call_netdevice_notifiers_extack net/core/dev.c:1960 [inline] call_netdevice_notifiers net/core/dev.c:1974 [inline] netdev_features_change net/core/dev.c:1364 [inline] netdev_sync_lower_features net/core/dev.c:8926 [inline] __netdev_update_features+0x877/0x1320 net/core/dev.c:9057 netdev_change_features+0x61/0xb0 net/core/dev.c:9129 bond_compute_features.isra.0+0x521/0xa40 drivers/net/bonding/bond_main.c:1188 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3237 [inline] bond_netdev_event+0x6ee/0x930 drivers/net/bonding/bond_main.c:3277 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:1948 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1933 call_netdevice_notifiers_extack net/core/dev.c:1960 [inline] call_netdevice_notifiers net/core/dev.c:1974 [inline] netdev_features_change net/core/dev.c:1364 [inline] netdev_sync_lower_features net/core/dev.c:8926 [inline] __netdev_update_features+0x877/0x1320 net/core/dev.c:9057 netdev_change_features+0x61/0xb0 net/core/dev.c:9129 bond_compute_features.isra.0+0x521/0xa40 drivers/net/bonding/bond_main.c:1188 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3237 [inline] bond_netdev_event+0x6ee/0x930 drivers/net/bonding/bond_main.c:3277 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:1948 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1933 call_netdevice_notifiers_extack net/core/dev.c:1960 [inline] call_netdevice_notifiers net/core/dev.c:1974 [inline] netdev_features_change net/core/dev.c:1364 [inline] netdev_sync_lower_features net/core/dev.c:8926 [inline] __netdev_update_features+0x877/0x1320 net/core/dev.c:9057 netdev_change_features+0x61/0xb0 net/core/dev.c:9129 bond_compute_features.isra.0+0x521/0xa40 drivers/net/bonding/bond_main.c:1188 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3237 [inline] bond_netdev_event+0x6ee/0x930 drivers/net/bonding/bond_main.c:3277 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:1948 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1933 call_netdevice_notifiers_extack net/core/dev.c:1960 [inline] call_netdevice_notifiers net/core/dev.c:1974 [inline] netdev_features_change net/core/dev.c:1364 [inline] netdev_sync_lower_features net/core/dev.c:8926 [inline] __netdev_update_features+0x877/0x1320 net/core/dev.c:9057 netdev_change_features+0x61/0xb0 net/core/dev.c:9129 bond_compute_features.isra.0+0x521/0xa40 drivers/net/bonding/bond_main.c:1188 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3237 [inline] bond_netdev_event+0x6ee/0x930 drivers/net/bonding/bond_main.c:3277 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:1948 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1933 call_netdevice_notifiers_extack net/core/dev.c:1960 [inline] call_netdevice_notifiers net/core/dev.c:1974 [inline] netdev_features_change net/core/dev.c:1364 [inline] netdev_sync_lower_features net/core/dev.c:8926 [inline] __netdev_update_features+0x877/0x1320 net/core/dev.c:9057 netdev_change_features+0x61/0xb0 net/core/dev.c:9129 bond_compute_features.isra.0+0x521/0xa40 drivers/net/bonding/bond_main.c:1188 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3237 [inline] bond_netdev_event+0x6ee/0x930 drivers/net/bonding/bond_main.c:3277 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:1948 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1933 call_netdevice_notifiers_extack net/core/dev.c:1960 [inline] call_netdevice_notifiers net/core/dev.c:1974 [inline] netdev_features_change net/core/dev.c:1364 [inline] netdev_sync_lower_features net/core/dev.c:8926 [inline] __netdev_update_features+0x877/0x1320 net/core/dev.c:9057 netdev_change_features+0x61/0xb0 net/core/dev.c:9129 bond_compute_features.isra.0+0x521/0xa40 drivers/net/bonding/bond_main.c:1188 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3237 [inline] bond_netdev_event+0x6ee/0x930 drivers/net/bonding/bond_main.c:3277 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:1948 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1933 call_netdevice_notifiers_extack net/core/dev.c:1960 [inline] call_netdevice_notifiers net/core/dev.c:1974 [inline] netdev_features_change net/core/dev.c:1364 [inline] netdev_sync_lower_features net/core/dev.c:8926 [inline] __netdev_update_features+0x877/0x1320 net/core/dev.c:9057 netdev_change_features+0x61/0xb0 net/core/dev.c:9129 bond_compute_features.isra.0+0x521/0xa40 drivers/net/bonding/bond_main.c:1188 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3237 [inline] bond_netdev_event+0x6ee/0x930 drivers/net/bonding/bond_main.c:3277 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:1948 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1933 call_netdevice_notifiers_extack net/core/dev.c:1960 [inline] call_netdevice_notifiers net/core/dev.c:1974 [inline] netdev_features_change net/core/dev.c:1364 [inline] netdev_sync_lower_features net/core/dev.c:8926 [inline] __netdev_update_features+0x877/0x1320 net/core/dev.c:9057 netdev_change_features+0x61/0xb0 net/core/dev.c:9129 bond_compute_features.isra.0+0x521/0xa40 drivers/net/bonding/bond_main.c:1188 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3237 [inline] bond_netdev_event+0x6ee/0x930 drivers/net/bonding/bond_main.c:3277 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:1948 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1933 call_netdevice_notifiers_extack net/core/dev.c:1960 [inline] call_netdevice_notifiers net/core/dev.c:1974 [inline] netdev_features_change net/core/dev.c:1364 [inline] netdev_sync_lower_features net/core/dev.c:8926 [inline] __netdev_update_features+0x877/0x1320 net/core/dev.c:9057 netdev_change_features+0x61/0xb0 net/core/dev.c:9129 bond_compute_features.isra.0+0x521/0xa40 drivers/net/bonding/bond_main.c:1188 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3237 [inline] bond_netdev_event+0x6ee/0x930 drivers/net/bonding/bond_main.c:3277 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:1948 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1933 call_netdevice_notifiers_extack net/core/dev.c:1960 [inline] call_netdevice_notifiers net/core/dev.c:1974 [inline] netdev_features_change net/core/dev.c:1364 [inline] netdev_sync_lower_features net/core/dev.c:8926 [inline] __netdev_update_features+0x877/0x1320 net/core/dev.c:9057 Lost 367 message(s)! ---[ end trace 333669d759f06eb6 ]--- RIP: 0010:test_bit include/asm-generic/bitops/instrumented-non-atomic.h:110 [inline] RIP: 0010:hlock_class kernel/locking/lockdep.c:179 [inline] RIP: 0010:mark_lock+0x116/0xf10 kernel/locking/lockdep.c:3893 Code: 89 f8 48 c1 e8 03 0f b6 04 10 84 c0 74 08 3c 03 0f 8e e3 0b 00 00 0f b7 55 20 66 81 e2 ff 1f 0f b7 d2 be 08 00 00 00 48 89 d0 <48> 89 14 24 48 c1 f8 06 48 8d 3c c5 60 c9 2f 8c e8 45 14 58 00 48 RSP: 0018:ffffc900168cffd0 EFLAGS: 00010006 RAX: 000000000000001e RBX: 1ffff92002d1a000 RCX: ffff8880397dc9ac RDX: 000000000000001e RSI: 0000000000000008 RDI: ffff8880397dc100 RBP: ffff8880397dc9f0 R08: 1ffff110072fb93d R09: fffffbfff185f92d R10: ffffffff8c2fc967 R11: fffffbfff185f92c R12: 0000000000000008 R13: ffff8880397dc100 R14: ffff8880397dca12 R15: ffff8880397dca10 FS: 00007fcf1c7d3700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc900168cffc8 CR3: 00000000a3047000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400