BUG: stack guard page was hit at 00000000aa0766e2 (stack is 00000000f9f83088..000000009d250276) kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 28045 Comm: syz-executor.0 Not tainted 5.8.0-rc3-next-20200629-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:hlock_class kernel/locking/lockdep.c:174 [inline] RIP: 0010:mark_lock+0x71/0x1710 kernel/locking/lockdep.c:3937 Code: 85 c0 0f 84 cf 00 00 00 45 31 ff 48 83 c4 20 44 89 f8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 8d 46 20 41 89 d4 48 89 fd 48 89 c2 <48> 89 04 24 49 89 f6 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f RSP: 0018:ffffc90009497ff0 EFLAGS: 00010046 RAX: ffff888015e56de0 RBX: ffff888015e56d7c RCX: 0000000000000000 RDX: ffff888015e56de0 RSI: ffff888015e56dc0 RDI: ffff888015e564c0 RBP: ffff888015e564c0 R08: 0000000000000000 R09: ffffffff8c59da3f R10: fffffbfff18b3b47 R11: 0000000000000001 R12: 0000000000000008 R13: ffff888015e56de2 R14: 0000000000000000 R15: ffff888015e56d98 FS: 00007fea49b40700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90009497fe8 CR3: 0000000208c51000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: mark_usage kernel/locking/lockdep.c:3885 [inline] __lock_acquire+0x944/0x56e0 kernel/locking/lockdep.c:4334 lock_acquire+0x1f1/0xad0 kernel/locking/lockdep.c:4959 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x8c/0xc0 kernel/locking/spinlock.c:159 rmqueue mm/page_alloc.c:3376 [inline] get_page_from_freelist+0x16b6/0x3770 mm/page_alloc.c:3810 __alloc_pages_nodemask+0x291/0x700 mm/page_alloc.c:4863 __alloc_pages include/linux/gfp.h:509 [inline] __alloc_pages_node include/linux/gfp.h:522 [inline] kmem_getpages mm/slab.c:1376 [inline] cache_grow_begin+0x89/0x440 mm/slab.c:2594 cache_alloc_refill+0x27b/0x340 mm/slab.c:2966 ____cache_alloc mm/slab.c:3049 [inline] ____cache_alloc mm/slab.c:3032 [inline] slab_alloc_node mm/slab.c:3245 [inline] kmem_cache_alloc_node_trace+0x4fc/0x590 mm/slab.c:3596 __do_kmalloc_node mm/slab.c:3618 [inline] __kmalloc_node_track_caller+0x38/0x60 mm/slab.c:3633 __kmalloc_reserve net/core/skbuff.c:142 [inline] __alloc_skb+0xae/0x550 net/core/skbuff.c:210 alloc_skb include/linux/skbuff.h:1084 [inline] nlmsg_new include/net/netlink.h:940 [inline] rtmsg_ifinfo_build_skb+0x72/0x1a0 net/core/rtnetlink.c:3701 rtmsg_ifinfo_event net/core/rtnetlink.c:3737 [inline] rtmsg_ifinfo_event net/core/rtnetlink.c:3728 [inline] rtnetlink_event+0x123/0x1d0 net/core/rtnetlink.c:5511 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9065 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9196 netdev_change_features+0x61/0xb0 net/core/dev.c:9268 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9065 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9196 netdev_change_features+0x61/0xb0 net/core/dev.c:9268 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9065 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9196 netdev_change_features+0x61/0xb0 net/core/dev.c:9268 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9065 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9196 netdev_change_features+0x61/0xb0 net/core/dev.c:9268 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9065 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9196 netdev_change_features+0x61/0xb0 net/core/dev.c:9268 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9065 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9196 netdev_change_features+0x61/0xb0 net/core/dev.c:9268 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9065 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9196 netdev_change_features+0x61/0xb0 net/core/dev.c:9268 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1297 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3349 [inline] bond_netdev_event+0x81f/0xb30 drivers/net/bonding/bond_main.c:3389 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9065 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9196 Lost 484 message(s)! ---[ end trace c9538c09503093f3 ]--- RIP: 0010:hlock_class kernel/locking/lockdep.c:174 [inline] RIP: 0010:mark_lock+0x71/0x1710 kernel/locking/lockdep.c:3937 Code: 85 c0 0f 84 cf 00 00 00 45 31 ff 48 83 c4 20 44 89 f8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 8d 46 20 41 89 d4 48 89 fd 48 89 c2 <48> 89 04 24 49 89 f6 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f RSP: 0018:ffffc90009497ff0 EFLAGS: 00010046 RAX: ffff888015e56de0 RBX: ffff888015e56d7c RCX: 0000000000000000 RDX: ffff888015e56de0 RSI: ffff888015e56dc0 RDI: ffff888015e564c0 RBP: ffff888015e564c0 R08: 0000000000000000 R09: ffffffff8c59da3f R10: fffffbfff18b3b47 R11: 0000000000000001 R12: 0000000000000008 R13: ffff888015e56de2 R14: 0000000000000000 R15: ffff888015e56d98 FS: 00007fea49b40700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90009497fe8 CR3: 0000000208c51000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600