CPU: 1 PID: 5380 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #126 rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: rcu: (detected by 0, t=10577 jiffies, g=15137, q=5) __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 rcu: All QSes seen, last rcu_preempt kthread activity 10176 (4294979497-4294969321), jiffies_till_next_fqs=1, root ->qsmask 0x0 syz-executor4 R running task 20960 8883 5483 0x8010000c Call Trace: sched_show_task.cold.83+0x2b6/0x30a kernel/sched/core.c:5296 warn_alloc.cold.119+0xb7/0x1bd mm/page_alloc.c:3426 __alloc_pages_slowpath+0x2667/0x2d80 mm/page_alloc.c:4297 print_other_cpu_stall.cold.79+0xa83/0xba5 kernel/rcu/tree.c:1430 check_cpu_stall kernel/rcu/tree.c:1557 [inline] __rcu_pending kernel/rcu/tree.c:3276 [inline] rcu_pending kernel/rcu/tree.c:3319 [inline] rcu_check_callbacks+0xafc/0x1990 kernel/rcu/tree.c:2665 __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4390 __alloc_pages include/linux/gfp.h:473 [inline] __alloc_pages_node include/linux/gfp.h:486 [inline] kmem_getpages mm/slab.c:1409 [inline] cache_grow_begin+0x91/0x8c0 mm/slab.c:2677 fallback_alloc+0x203/0x2e0 mm/slab.c:3219 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287 slab_alloc_node mm/slab.c:3327 [inline] kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642 update_process_times+0x2d/0x70 kernel/time/timer.c:1636 tick_sched_handle+0x9f/0x180 kernel/time/tick-sched.c:164 __alloc_skb+0x119/0x770 net/core/skbuff.c:193 tick_sched_timer+0x45/0x130 kernel/time/tick-sched.c:1274 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0x41c/0x10d0 kernel/time/hrtimer.c:1460 alloc_skb include/linux/skbuff.h:997 [inline] ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3836 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326 hrtimer_interrupt+0x313/0x780 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1029 [inline] smp_apic_timer_interrupt+0x1a1/0x760 arch/x86/kernel/apic/apic.c:1054 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:864 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:788 [inline] RIP: 0010:slab_alloc_node mm/slab.c:3329 [inline] RIP: 0010:kmem_cache_alloc_node+0x247/0x730 mm/slab.c:3642 Code: 41 7e 0f 85 32 ff ff ff e8 45 ec 3f ff e9 28 ff ff ff e8 6c 53 c4 ff 48 83 3d fc 60 71 07 00 0f 84 33 01 00 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 bf fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 d2 38 expire_timers kernel/time/timer.c:1363 [inline] __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682 RSP: 0000:ffff8801dae07450 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: 0000000000480020 RCX: 1ffff1003291bd19 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8801dae074c0 R08: ffff8801948de8c8 R09: 0000000000000002 R10: 0000000000000000 R11: ffff8801948de000 R12: ffff8801d9a04040 R13: ffff8801d9a04040 R14: 0000000000000000 R15: 0000000000000286 __alloc_skb+0x119/0x770 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:997 [inline] ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3836 __do_softirq+0x30b/0xad8 kernel/softirq.c:292 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x17f/0x1c0 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1056 expire_timers kernel/time/timer.c:1363 [inline] __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:864 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:788 [inline] RIP: 0010:lock_acquire+0x268/0x520 kernel/locking/lockdep.c:3903 Code: 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 44 02 00 00 48 83 3d ff f4 d0 07 00 0f 84 c3 01 00 00 48 8b bd 20 ff ff ff 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 RSP: 0000:ffff8801c598e700 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: dffffc0000000000 RBX: 1ffff10038b31ce5 RCX: 0000000000000000 RDX: 1ffffffff1263e51 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8801c598e7f0 R08: ffff8801cd4aeac8 R09: 0000000000000001 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695 R10: ffff8801cd4aeaa8 R11: 1a086236527874b9 R12: ffff8801cd4ae200 R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 __do_softirq+0x30b/0xad8 kernel/softirq.c:292 rcu_lock_acquire include/linux/rcupdate.h:244 [inline] rcu_read_lock include/linux/rcupdate.h:629 [inline] lock_page_memcg+0x95/0x350 mm/memcontrol.c:1860 page_remove_file_rmap mm/rmap.c:1215 [inline] page_remove_rmap+0x855/0x1a30 mm/rmap.c:1300 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x17f/0x1c0 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1056 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:864 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:788 [inline] RIP: 0010:slab_alloc mm/slab.c:3385 [inline] RIP: 0010:kmem_cache_alloc+0x297/0x730 mm/slab.c:3552 Code: 7e 0f 85 cf fe ff ff e8 a6 cc 3f ff e9 c5 fe ff ff e8 cd 33 c4 ff 48 83 3d 5d 41 71 07 00 0f 84 3b 03 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 e9 54 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 d2 38 RSP: 0000:ffff880160c27748 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000 zap_pte_range mm/memory.c:1338 [inline] zap_pmd_range mm/memory.c:1440 [inline] zap_pud_range mm/memory.c:1469 [inline] zap_p4d_range mm/memory.c:1490 [inline] unmap_page_range+0xf14/0x2030 mm/memory.c:1511 RDX: 0000000000000000 RSI: ffff8801948de880 RDI: 0000000000000286 RBP: ffff880160c277b0 R08: ffff8801948de000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8801d9a04040 R14: ffff8801d9a04040 R15: 0000000000480020 skb_clone+0x1bb/0x500 net/core/skbuff.c:1280 ____bpf_clone_redirect net/core/filter.c:2080 [inline] bpf_clone_redirect+0xb9/0x490 net/core/filter.c:2067 bpf_prog_bebbfe2050753572+0xa64/0x1000 unmap_single_vma+0x19b/0x310 mm/memory.c:1556 unmap_vmas+0x125/0x200 mm/memory.c:1586 exit_mmap+0x2be/0x590 mm/mmap.c:3093 __mmput kernel/fork.c:1001 [inline] mmput+0x247/0x610 kernel/fork.c:1022 exit_mm kernel/exit.c:545 [inline] do_exit+0xe6f/0x2610 kernel/exit.c:854 rcu: rcu_preempt kthread starved for 10176 jiffies! g15137 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: RCU grace-period kthread stack dump: rcu_preempt R running task 23064 10 2 0x80000000 Call Trace: context_switch kernel/sched/core.c:2825 [inline] __schedule+0x86c/0x1ed0 kernel/sched/core.c:3473 do_group_exit+0x177/0x440 kernel/exit.c:970 schedule+0xfe/0x460 kernel/sched/core.c:3517 get_signal+0x8b0/0x1980 kernel/signal.c:2513 schedule_timeout+0x140/0x260 kernel/time/timer.c:1804 do_signal+0x9c/0x21e0 arch/x86/kernel/signal.c:816 rcu_gp_kthread+0x9d9/0x2310 kernel/rcu/tree.c:2194 exit_to_usermode_loop+0x2e5/0x380 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x6be/0x820 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x41124a Code: Bad RIP value. RSP: 002b:00007ffc5894ce48 EFLAGS: 00000246 ORIG_RAX: 000000000000003d RAX: fffffffffffffe00 RBX: 0000000000001507 RCX: 000000000041124a RDX: 0000000040000000 RSI: 00007ffc5894ce54 RDI: ffffffffffffffff RBP: 000000000072c988 R08: 0000000000001504 R09: 0000000002594940 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 R13: 0000000000412e50 R14: 0000000000000000 R15: 0000000000000000 warn_alloc_show_mem: 1 callbacks suppressed Mem-Info: active_anon:47381 inactive_anon:1264 isolated_anon:0 active_file:8 inactive_file:19 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:8896 slab_unreclaimable:1474771 mapped:40962 shmem:1272 pagetables:582 bounce:0 free:13709 free_pcp:257 free_cma:0 Node 0 active_anon:189524kB inactive_anon:5056kB active_file:32kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163848kB dirty:0kB writeback:0kB shmem:5088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2819 6323 6323 Node 0 DMA32 free:25056kB min:30060kB low:37572kB high:45084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2890740kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3503 3503 Node 0 Normal free:13872kB min:37352kB low:46688kB high:56024kB active_anon:189524kB inactive_anon:5056kB active_file:32kB inactive_file:76kB unevictable:0kB writepending:0kB present:4718592kB managed:3588044kB mlocked:0kB kernel_stack:5184kB pagetables:2328kB bounce:0kB free_pcp:780kB local_pcp:200kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB Node 0 kthread+0x35a/0x420 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413 DMA32: 4*4kB ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb (UM) 2*8kB syz-executor4: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) (UM) syz-executor4 cpuset= 2*16kB (M) syz4 3*32kB (UM) mems_allowed=0 5*64kB CPU: 0 PID: 8883 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #126 (UM) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 4*128kB Call Trace: (UM) 4*256kB (UM) __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 3*512kB (M) 3*1024kB warn_alloc.cold.119+0xb7/0x1bd mm/page_alloc.c:3426 (UM) 3*2048kB (M) 3*4096kB (M) = 25056kB __alloc_pages_slowpath+0x2667/0x2d80 mm/page_alloc.c:4297 Node 0 Normal: 798*4kB (ME) 471*8kB (UME) 208*16kB (UME) 76*32kB (UME) 4*64kB (M) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 13872kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 1299 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4390 0 pages HighMem/MovableOnly 342306 pages reserved 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb syz-executor1: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor1 cpuset= / __alloc_pages include/linux/gfp.h:473 [inline] __alloc_pages_node include/linux/gfp.h:486 [inline] kmem_getpages mm/slab.c:1409 [inline] cache_grow_begin+0x91/0x8c0 mm/slab.c:2677 mems_allowed=0 fallback_alloc+0x203/0x2e0 mm/slab.c:3219 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287 slab_alloc_node mm/slab.c:3327 [inline] kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642 __alloc_skb+0x119/0x770 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:997 [inline] ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3836 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326 expire_timers kernel/time/timer.c:1363 [inline] __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695 __do_softirq+0x30b/0xad8 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x17f/0x1c0 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1056 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:864 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:788 [inline] RIP: 0010:slab_alloc mm/slab.c:3385 [inline] RIP: 0010:kmem_cache_alloc+0x297/0x730 mm/slab.c:3552 Code: 7e 0f 85 cf fe ff ff e8 a6 cc 3f ff e9 c5 fe ff ff e8 cd 33 c4 ff 48 83 3d 5d 41 71 07 00 0f 84 3b 03 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 e9 54 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 d2 38 RSP: 0000:ffff880160c27748 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff8801948de880 RDI: 0000000000000286 RBP: ffff880160c277b0 R08: ffff8801948de000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8801d9a04040 R14: ffff8801d9a04040 R15: 0000000000480020 skb_clone+0x1bb/0x500 net/core/skbuff.c:1280 ____bpf_clone_redirect net/core/filter.c:2080 [inline] bpf_clone_redirect+0xb9/0x490 net/core/filter.c:2067 bpf_prog_bebbfe2050753572+0xa64/0x1000 CPU: 1 PID: 5380 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #126 Mem-Info: active_anon:47381 inactive_anon:1264 isolated_anon:0 active_file:8 inactive_file:19 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:8896 slab_unreclaimable:1474771 mapped:40962 shmem:1272 pagetables:582 bounce:0 free:13709 free_pcp:257 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Node 0 active_anon:189524kB inactive_anon:5056kB active_file:32kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163848kB dirty:0kB writeback:0kB shmem:5088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Call Trace: Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 lowmem_reserve[]: 0 2819 6323 warn_alloc.cold.119+0xb7/0x1bd mm/page_alloc.c:3426 6323 Node 0 DMA32 free:25056kB min:30060kB low:37572kB high:45084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2890740kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB lowmem_reserve[]: 0 0 __alloc_pages_slowpath+0x2667/0x2d80 mm/page_alloc.c:4297 3503 3503 Node 0 Normal free:13872kB min:37352kB low:46688kB high:56024kB active_anon:189524kB inactive_anon:5056kB active_file:32kB inactive_file:76kB unevictable:0kB writepending:0kB present:4718592kB managed:3588044kB mlocked:0kB kernel_stack:5184kB pagetables:2328kB bounce:0kB free_pcp:780kB local_pcp:580kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB Node 0 DMA32: 4*4kB (UM) 2*8kB (UM) 2*16kB (M) 3*32kB (UM) 5*64kB (UM) 4*128kB (UM) __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4390 4*256kB (UM) 3*512kB (M) 3*1024kB (UM) 3*2048kB (M) 3*4096kB (M) = 25056kB Node 0 __alloc_pages include/linux/gfp.h:473 [inline] __alloc_pages_node include/linux/gfp.h:486 [inline] kmem_getpages mm/slab.c:1409 [inline] cache_grow_begin+0x91/0x8c0 mm/slab.c:2677 Normal: 798*4kB (ME) fallback_alloc+0x203/0x2e0 mm/slab.c:3219 471*8kB (UME) ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287 208*16kB (UME) slab_alloc_node mm/slab.c:3327 [inline] kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642 76*32kB (UME) 4*64kB __alloc_skb+0x119/0x770 net/core/skbuff.c:193 (M) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 13872kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB alloc_skb include/linux/skbuff.h:997 [inline] ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403 1299 total pagecache pages ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669 0 pages in swap cache addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3836 Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB call_timer_fn+0x272/0x920 kernel/time/timer.c:1326 1965979 pages RAM 0 pages HighMem/MovableOnly 342306 pages reserved 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb syz-executor4: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor4 cpuset= syz4 mems_allowed=0 expire_timers kernel/time/timer.c:1363 [inline] __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695 __do_softirq+0x30b/0xad8 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x17f/0x1c0 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1056 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:864 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:788 [inline] RIP: 0010:lock_acquire+0x268/0x520 kernel/locking/lockdep.c:3903 Code: 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 44 02 00 00 48 83 3d ff f4 d0 07 00 0f 84 c3 01 00 00 48 8b bd 20 ff ff ff 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 RSP: 0000:ffff8801c598e700 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: dffffc0000000000 RBX: 1ffff10038b31ce5 RCX: 0000000000000000 RDX: 1ffffffff1263e51 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8801c598e7f0 R08: ffff8801cd4aeac8 R09: 0000000000000001 R10: ffff8801cd4aeaa8 R11: 1a086236527874b9 R12: ffff8801cd4ae200 R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:244 [inline] rcu_read_lock include/linux/rcupdate.h:629 [inline] lock_page_memcg+0x95/0x350 mm/memcontrol.c:1860 page_remove_file_rmap mm/rmap.c:1215 [inline] page_remove_rmap+0x855/0x1a30 mm/rmap.c:1300 zap_pte_range mm/memory.c:1338 [inline] zap_pmd_range mm/memory.c:1440 [inline] zap_pud_range mm/memory.c:1469 [inline] zap_p4d_range mm/memory.c:1490 [inline] unmap_page_range+0xf14/0x2030 mm/memory.c:1511 unmap_single_vma+0x19b/0x310 mm/memory.c:1556 unmap_vmas+0x125/0x200 mm/memory.c:1586 exit_mmap+0x2be/0x590 mm/mmap.c:3093 __mmput kernel/fork.c:1001 [inline] mmput+0x247/0x610 kernel/fork.c:1022 exit_mm kernel/exit.c:545 [inline] do_exit+0xe6f/0x2610 kernel/exit.c:854 do_group_exit+0x177/0x440 kernel/exit.c:970 get_signal+0x8b0/0x1980 kernel/signal.c:2513 do_signal+0x9c/0x21e0 arch/x86/kernel/signal.c:816 exit_to_usermode_loop+0x2e5/0x380 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x6be/0x820 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x41124a Code: Bad RIP value. RSP: 002b:00007ffc5894ce48 EFLAGS: 00000246 ORIG_RAX: 000000000000003d RAX: fffffffffffffe00 RBX: 0000000000001507 RCX: 000000000041124a RDX: 0000000040000000 RSI: 00007ffc5894ce54 RDI: ffffffffffffffff RBP: 000000000072c988 R08: 0000000000001504 R09: 0000000002594940 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 R13: 0000000000412e50 R14: 0000000000000000 R15: 0000000000000000 CPU: 0 PID: 8883 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #126 Mem-Info: active_anon:47381 inactive_anon:1264 isolated_anon:0 active_file:8 inactive_file:19 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:8896 slab_unreclaimable:1474771 mapped:40962 shmem:1272 pagetables:582 bounce:0 free:13709 free_pcp:257 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Node 0 active_anon:189524kB inactive_anon:5056kB active_file:32kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163848kB dirty:0kB writeback:0kB shmem:5088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 warn_alloc.cold.119+0xb7/0x1bd mm/page_alloc.c:3426 Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2819 __alloc_pages_slowpath+0x2667/0x2d80 mm/page_alloc.c:4297 6323 6323 Node 0 DMA32 free:25056kB min:30060kB low:37572kB high:45084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2890740kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3503 3503 Node 0 Normal free:13872kB min:37352kB low:46688kB high:56024kB active_anon:189524kB inactive_anon:5056kB active_file:32kB inactive_file:76kB unevictable:0kB writepending:0kB present:4718592kB managed:3588044kB mlocked:0kB kernel_stack:5184kB pagetables:2328kB bounce:0kB free_pcp:780kB local_pcp:200kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4390 (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB Node 0 __alloc_pages include/linux/gfp.h:473 [inline] __alloc_pages_node include/linux/gfp.h:486 [inline] kmem_getpages mm/slab.c:1409 [inline] cache_grow_begin+0x91/0x8c0 mm/slab.c:2677 DMA32: 4*4kB (UM) fallback_alloc+0x203/0x2e0 mm/slab.c:3219 2*8kB ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287 (UM) slab_alloc_node mm/slab.c:3327 [inline] kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642 2*16kB (M) 3*32kB __alloc_skb+0x119/0x770 net/core/skbuff.c:193 (UM) 5*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (M) alloc_skb include/linux/skbuff.h:997 [inline] ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403 3*1024kB ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669 (UM) addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3836 3*2048kB (M) call_timer_fn+0x272/0x920 kernel/time/timer.c:1326 3*4096kB (M) = 25056kB Node 0 Normal: 798*4kB (ME) 471*8kB (UME) 208*16kB (UME) 76*32kB (UME) 4*64kB (M) 1*128kB expire_timers kernel/time/timer.c:1363 [inline] __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682 (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 13872kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 1299 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695 342306 pages reserved 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb __do_softirq+0x30b/0xad8 kernel/softirq.c:292 syz-executor1: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor1 cpuset=/ mems_allowed=0 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x17f/0x1c0 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1056 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:864 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:788 [inline] RIP: 0010:slab_alloc mm/slab.c:3385 [inline] RIP: 0010:kmem_cache_alloc+0x297/0x730 mm/slab.c:3552 Code: 7e 0f 85 cf fe ff ff e8 a6 cc 3f ff e9 c5 fe ff ff e8 cd 33 c4 ff 48 83 3d 5d 41 71 07 00 0f 84 3b 03 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 e9 54 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 d2 38 RSP: 0000:ffff880160c27748 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff8801948de880 RDI: 0000000000000286 RBP: ffff880160c277b0 R08: ffff8801948de000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8801d9a04040 R14: ffff8801d9a04040 R15: 0000000000480020 skb_clone+0x1bb/0x500 net/core/skbuff.c:1280 ____bpf_clone_redirect net/core/filter.c:2080 [inline] bpf_clone_redirect+0xb9/0x490 net/core/filter.c:2067 bpf_prog_bebbfe2050753572+0xa64/0x1000 CPU: 1 PID: 5380 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #126 ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 syz-executor4: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) warn_alloc.cold.119+0xb7/0x1bd mm/page_alloc.c:3426 syz-executor4 cpuset= syz4 mems_allowed=0 __alloc_pages_slowpath+0x2667/0x2d80 mm/page_alloc.c:4297 __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4390 __alloc_pages include/linux/gfp.h:473 [inline] __alloc_pages_node include/linux/gfp.h:486 [inline] kmem_getpages mm/slab.c:1409 [inline] cache_grow_begin+0x91/0x8c0 mm/slab.c:2677 fallback_alloc+0x203/0x2e0 mm/slab.c:3219 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287 slab_alloc_node mm/slab.c:3327 [inline] kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642 __alloc_skb+0x119/0x770 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:997 [inline] ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3836 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326 expire_timers kernel/time/timer.c:1363 [inline] __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695 __do_softirq+0x30b/0xad8 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x17f/0x1c0 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1056 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:864 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:788 [inline] RIP: 0010:lock_acquire+0x268/0x520 kernel/locking/lockdep.c:3903 Code: 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 44 02 00 00 48 83 3d ff f4 d0 07 00 0f 84 c3 01 00 00 48 8b bd 20 ff ff ff 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 RSP: 0000:ffff8801c598e700 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: dffffc0000000000 RBX: 1ffff10038b31ce5 RCX: 0000000000000000 RDX: 1ffffffff1263e51 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8801c598e7f0 R08: ffff8801cd4aeac8 R09: 0000000000000001 R10: ffff8801cd4aeaa8 R11: 1a086236527874b9 R12: ffff8801cd4ae200 R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:244 [inline] rcu_read_lock include/linux/rcupdate.h:629 [inline] lock_page_memcg+0x95/0x350 mm/memcontrol.c:1860 page_remove_file_rmap mm/rmap.c:1215 [inline] page_remove_rmap+0x855/0x1a30 mm/rmap.c:1300 zap_pte_range mm/memory.c:1338 [inline] zap_pmd_range mm/memory.c:1440 [inline] zap_pud_range mm/memory.c:1469 [inline] zap_p4d_range mm/memory.c:1490 [inline] unmap_page_range+0xf14/0x2030 mm/memory.c:1511 unmap_single_vma+0x19b/0x310 mm/memory.c:1556 unmap_vmas+0x125/0x200 mm/memory.c:1586 exit_mmap+0x2be/0x590 mm/mmap.c:3093 __mmput kernel/fork.c:1001 [inline] mmput+0x247/0x610 kernel/fork.c:1022 exit_mm kernel/exit.c:545 [inline] do_exit+0xe6f/0x2610 kernel/exit.c:854 do_group_exit+0x177/0x440 kernel/exit.c:970 get_signal+0x8b0/0x1980 kernel/signal.c:2513 do_signal+0x9c/0x21e0 arch/x86/kernel/signal.c:816 exit_to_usermode_loop+0x2e5/0x380 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x6be/0x820 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x41124a Code: Bad RIP value. RSP: 002b:00007ffc5894ce48 EFLAGS: 00000246 ORIG_RAX: 000000000000003d RAX: fffffffffffffe00 RBX: 0000000000001507 RCX: 000000000041124a RDX: 0000000040000000 RSI: 00007ffc5894ce54 RDI: ffffffffffffffff RBP: 000000000072c988 R08: 0000000000001504 R09: 0000000002594940 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 R13: 0000000000412e50 R14: 0000000000000000 R15: 0000000000000000 CPU: 0 PID: 8883 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #126 warn_alloc_show_mem: 1 callbacks suppressed Mem-Info: Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 active_anon:47381 inactive_anon:1264 isolated_anon:0 active_file:8 inactive_file:19 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:8896 slab_unreclaimable:1474771 mapped:40962 shmem:1272 pagetables:582 bounce:0 free:13709 free_pcp:257 free_cma:0 Call Trace: Node 0 active_anon:189524kB inactive_anon:5056kB active_file:32kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163848kB dirty:0kB writeback:0kB shmem:5088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: warn_alloc.cold.119+0xb7/0x1bd mm/page_alloc.c:3426 0 2819 6323 6323 __alloc_pages_slowpath+0x2667/0x2d80 mm/page_alloc.c:4297 Node 0 DMA32 free:25056kB min:30060kB low:37572kB high:45084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2890740kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3503 3503 Node 0 Normal free:13872kB min:37352kB low:46688kB high:56024kB active_anon:189524kB inactive_anon:5056kB active_file:32kB inactive_file:76kB unevictable:0kB writepending:0kB present:4718592kB managed:3588044kB mlocked:0kB kernel_stack:5184kB pagetables:2328kB bounce:0kB free_pcp:780kB local_pcp:200kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4390 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB Node 0 __alloc_pages include/linux/gfp.h:473 [inline] __alloc_pages_node include/linux/gfp.h:486 [inline] kmem_getpages mm/slab.c:1409 [inline] cache_grow_begin+0x91/0x8c0 mm/slab.c:2677 DMA32: 4*4kB fallback_alloc+0x203/0x2e0 mm/slab.c:3219 (UM) ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287 2*8kB slab_alloc_node mm/slab.c:3327 [inline] kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642 (UM) 2*16kB __alloc_skb+0x119/0x770 net/core/skbuff.c:193 (M) 3*32kB (UM) 5*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB alloc_skb include/linux/skbuff.h:997 [inline] ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403 (M) ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669 3*1024kB addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3836 (UM) 3*2048kB call_timer_fn+0x272/0x920 kernel/time/timer.c:1326 (M) 3*4096kB (M) = 25056kB Node 0 Normal: 798*4kB (ME) 471*8kB (UME) 208*16kB (UME) 76*32kB (UME) 4*64kB (M) 1*128kB expire_timers kernel/time/timer.c:1363 [inline] __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682 (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 13872kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 1299 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695 0 pages HighMem/MovableOnly 342306 pages reserved __do_softirq+0x30b/0xad8 kernel/softirq.c:292 0 pages cma reserved ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb syz-executor1: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor1 cpuset= / mems_allowed=0 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x17f/0x1c0 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1056 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:864 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:788 [inline] RIP: 0010:slab_alloc mm/slab.c:3385 [inline] RIP: 0010:kmem_cache_alloc+0x297/0x730 mm/slab.c:3552 Code: 7e 0f 85 cf fe ff ff e8 a6 cc 3f ff e9 c5 fe ff ff e8 cd 33 c4 ff 48 83 3d 5d 41 71 07 00 0f 84 3b 03 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 e9 54 fe ff ff 31 d2 be a5 01 00 00 48 c7 c7 d2 38 RSP: 0000:ffff880160c27748 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: 0000000000480020 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff8801948de880 RDI: 0000000000000286 RBP: ffff880160c277b0 R08: ffff8801948de000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8801d9a04040 R14: ffff8801d9a04040 R15: 0000000000480020 skb_clone+0x1bb/0x500 net/core/skbuff.c:1280 ____bpf_clone_redirect net/core/filter.c:2080 [inline] bpf_clone_redirect+0xb9/0x490 net/core/filter.c:2067 bpf_prog_bebbfe2050753572+0xa64/0x1000 CPU: 1 PID: 5380 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #126 ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: syz-executor4: page allocation failure: order:0, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) syz-executor4 cpuset= __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 syz4 mems_allowed=0 warn_alloc.cold.119+0xb7/0x1bd mm/page_alloc.c:3426 __alloc_pages_slowpath+0x2667/0x2d80 mm/page_alloc.c:4297 __alloc_pages_nodemask+0xa80/0xde0 mm/page_alloc.c:4390 __alloc_pages include/linux/gfp.h:473 [inline] __alloc_pages_node include/linux/gfp.h:486 [inline] kmem_getpages mm/slab.c:1409 [inline] cache_grow_begin+0x91/0x8c0 mm/slab.c:2677 fallback_alloc+0x203/0x2e0 mm/slab.c:3219 ____cache_alloc_node+0x1c7/0x1e0 mm/slab.c:3287 slab_alloc_node mm/slab.c:3327 [inline] kmem_cache_alloc_node+0xe3/0x730 mm/slab.c:3642 __alloc_skb+0x119/0x770 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:997 [inline] ndisc_alloc_skb+0x144/0x340 net/ipv6/ndisc.c:403 ndisc_send_rs+0x331/0x6e0 net/ipv6/ndisc.c:669 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3836 call_timer_fn+0x272/0x920 kernel/time/timer.c:1326 expire_timers kernel/time/timer.c:1363 [inline] __run_timers+0x7e5/0xc70 kernel/time/timer.c:1682 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1695 __do_softirq+0x30b/0xad8 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x17f/0x1c0 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1056 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:864 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:788 [inline] RIP: 0010:lock_acquire+0x268/0x520 kernel/locking/lockdep.c:3903