BUG: stack guard page was hit at 00000000c5541180 (stack is 00000000bf9be235..00000000cd15142e) kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 20151 Comm: syz-executor.5 Not tainted 5.8.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:hlock_class kernel/locking/lockdep.c:174 [inline] RIP: 0010:mark_lock+0x71/0x1710 kernel/locking/lockdep.c:3937 Code: 85 c0 0f 84 cf 00 00 00 45 31 ff 48 83 c4 20 44 89 f8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 8d 46 20 41 89 d4 48 89 fd 48 89 c2 <48> 89 04 24 49 89 f6 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f RSP: 0018:ffffc9000801ffe8 EFLAGS: 00010046 RAX: ffff8880395cae18 RBX: ffff8880395cadb4 RCX: 0000000000000000 RDX: ffff8880395cae18 RSI: ffff8880395cadf8 RDI: ffff8880395ca500 RBP: ffff8880395ca500 R08: 0000000000000000 R09: ffffffff8c58ca3f R10: fffffbfff18b1947 R11: 0000000000000001 R12: 0000000000000008 R13: ffff8880395cae1a R14: 0000000000000000 R15: ffff8880395cadd0 FS: 00007fa3c199a700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000801ffd8 CR3: 000000002af3f000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: mark_usage kernel/locking/lockdep.c:3885 [inline] __lock_acquire+0x944/0x56e0 kernel/locking/lockdep.c:4334 lock_acquire+0x1f1/0xad0 kernel/locking/lockdep.c:4959 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x8c/0xc0 kernel/locking/spinlock.c:159 rmqueue mm/page_alloc.c:3379 [inline] get_page_from_freelist+0x145a/0x36b0 mm/page_alloc.c:3791 __alloc_pages_nodemask+0x2cd/0x930 mm/page_alloc.c:4844 __alloc_pages include/linux/gfp.h:509 [inline] __alloc_pages_node include/linux/gfp.h:522 [inline] kmem_getpages mm/slab.c:1367 [inline] cache_grow_begin+0x8c/0xb20 mm/slab.c:2600 cache_alloc_refill+0x27b/0x340 mm/slab.c:2972 ____cache_alloc mm/slab.c:3055 [inline] ____cache_alloc mm/slab.c:3038 [inline] slab_alloc_node mm/slab.c:3250 [inline] kmem_cache_alloc_node_trace+0x3ea/0x400 mm/slab.c:3593 __do_kmalloc_node mm/slab.c:3615 [inline] __kmalloc_node_track_caller+0x38/0x60 mm/slab.c:3630 __kmalloc_reserve net/core/skbuff.c:142 [inline] __alloc_skb+0xae/0x550 net/core/skbuff.c:210 alloc_skb include/linux/skbuff.h:1083 [inline] nlmsg_new include/net/netlink.h:940 [inline] rtmsg_ifinfo_build_skb+0x72/0x1a0 net/core/rtnetlink.c:3701 rtmsg_ifinfo_event net/core/rtnetlink.c:3737 [inline] rtmsg_ifinfo_event net/core/rtnetlink.c:3728 [inline] rtnetlink_event+0x123/0x1d0 net/core/rtnetlink.c:5511 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9064 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9195 netdev_change_features+0x61/0xb0 net/core/dev.c:9267 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9064 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9195 netdev_change_features+0x61/0xb0 net/core/dev.c:9267 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9064 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9195 netdev_change_features+0x61/0xb0 net/core/dev.c:9267 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9064 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9195 netdev_change_features+0x61/0xb0 net/core/dev.c:9267 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9064 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9195 netdev_change_features+0x61/0xb0 net/core/dev.c:9267 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9064 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9195 netdev_change_features+0x61/0xb0 net/core/dev.c:9267 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9064 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9195 netdev_change_features+0x61/0xb0 net/core/dev.c:9267 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9064 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9195 netdev_change_features+0x61/0xb0 net/core/dev.c:9267 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9064 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9195 netdev_change_features+0x61/0xb0 net/core/dev.c:9267 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x Lost 370 message(s)! ---[ end trace 16263900fc2523ac ]--- RIP: 0010:hlock_class kernel/locking/lockdep.c:174 [inline] RIP: 0010:mark_lock+0x71/0x1710 kernel/locking/lockdep.c:3937 Code: 85 c0 0f 84 cf 00 00 00 45 31 ff 48 83 c4 20 44 89 f8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 8d 46 20 41 89 d4 48 89 fd 48 89 c2 <48> 89 04 24 49 89 f6 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f RSP: 0018:ffffc9000801ffe8 EFLAGS: 00010046 RAX: ffff8880395cae18 RBX: ffff8880395cadb4 RCX: 0000000000000000 RDX: ffff8880395cae18 RSI: ffff8880395cadf8 RDI: ffff8880395ca500 RBP: ffff8880395ca500 R08: 0000000000000000 R09: ffffffff8c58ca3f R10: fffffbfff18b1947 R11: 0000000000000001 R12: 0000000000000008 R13: ffff8880395cae1a R14: 0000000000000000 R15: ffff8880395cadd0 FS: 00007fa3c199a700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000801ffd8 CR3: 000000002af3f000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400