audit: type=1400 audit(1664607222.797:9): avc: denied { create } for pid=3975 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 ------------[ cut here ]------------ ====================================================== WARNING: possible circular locking dependency detected 6.0.0-rc7-next-20220930 #1 Not tainted ------------------------------------------------------ syz-executor.1/3983 is trying to acquire lock: ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 but task is already holding lock: ffff88800f859020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #3 (&ctx->lock){....}-{2:2}: _raw_spin_lock+0x2a/0x40 __perf_event_task_sched_out+0x53b/0x18d0 __schedule+0xedd/0x2470 schedule+0xda/0x1b0 exit_to_user_mode_prepare+0x114/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd -> #2 (&rq->__lock){-.-.}-{2:2}: _raw_spin_lock_nested+0x30/0x40 raw_spin_rq_lock_nested+0x1e/0x30 task_fork_fair+0x63/0x4d0 sched_cgroup_fork+0x3d0/0x540 copy_process+0x4183/0x6e20 kernel_clone+0xe7/0x890 user_mode_thread+0xad/0xf0 rest_init+0x24/0x250 arch_call_rest_init+0xf/0x14 start_kernel+0x4c6/0x4eb secondary_startup_64_no_verify+0xe0/0xeb -> #1 (&p->pi_lock){-.-.}-{2:2}: _raw_spin_lock_irqsave+0x39/0x60 try_to_wake_up+0xab/0x1930 up+0x75/0xb0 __up_console_sem+0x6e/0x80 console_unlock+0x46a/0x590 vprintk_emit+0x1bd/0x560 vprintk+0x84/0xa0 _printk+0xba/0xf1 kauditd_hold_skb.cold+0x3f/0x4e kauditd_send_queue+0x233/0x290 kauditd_thread+0x5f9/0x9c0 kthread+0x2ed/0x3a0 ret_from_fork+0x22/0x30 -> #0 ((console_sem).lock){....}-{2:2}: __lock_acquire+0x2a02/0x5e70 lock_acquire+0x1a2/0x530 _raw_spin_lock_irqsave+0x39/0x60 down_trylock+0xe/0x70 __down_trylock_console_sem+0x3b/0xd0 vprintk_emit+0x16b/0x560 vprintk+0x84/0xa0 _printk+0xba/0xf1 report_bug.cold+0x72/0xab handle_bug+0x3c/0x70 exc_invalid_op+0x14/0x50 asm_exc_invalid_op+0x16/0x20 group_sched_out.part.0+0x2c7/0x460 ctx_sched_out+0x8f1/0xc10 __perf_event_task_sched_out+0x6d0/0x18d0 __schedule+0xedd/0x2470 schedule+0xda/0x1b0 exit_to_user_mode_prepare+0x114/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd other info that might help us debug this: Chain exists of: (console_sem).lock --> &rq->__lock --> &ctx->lock Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&ctx->lock); lock(&rq->__lock); lock(&ctx->lock); lock((console_sem).lock); *** DEADLOCK *** 2 locks held by syz-executor.1/3983: #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 #1: ffff88800f859020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 stack backtrace: CPU: 0 PID: 3983 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 check_noncircular+0x263/0x2e0 __lock_acquire+0x2a02/0x5e70 lock_acquire+0x1a2/0x530 _raw_spin_lock_irqsave+0x39/0x60 down_trylock+0xe/0x70 __down_trylock_console_sem+0x3b/0xd0 vprintk_emit+0x16b/0x560 vprintk+0x84/0xa0 _printk+0xba/0xf1 report_bug.cold+0x72/0xab handle_bug+0x3c/0x70 exc_invalid_op+0x14/0x50 asm_exc_invalid_op+0x16/0x20 RIP: 0010:group_sched_out.part.0+0x2c7/0x460 Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 RSP: 0018:ffff88801e3f7c48 EFLAGS: 00010006 RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff888018a7b580 RSI: ffffffff81565dc7 RDI: 0000000000000005 RBP: ffff888008660b90 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800f859000 R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 ctx_sched_out+0x8f1/0xc10 __perf_event_task_sched_out+0x6d0/0x18d0 __schedule+0xedd/0x2470 schedule+0xda/0x1b0 exit_to_user_mode_prepare+0x114/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f211f94eb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f211cec4218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000001 RBX: 00007f211fa61f68 RCX: 00007f211f94eb19 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f211fa61f6c RBP: 00007f211fa61f60 R08: 000000000000000e R09: 0000000000000000 R10: 0000000000000003 R11: 0000000000000246 R12: 00007f211fa61f6c R13: 00007ffc52aea57f R14: 00007f211cec4300 R15: 0000000000022000 WARNING: CPU: 0 PID: 3983 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 Modules linked in: CPU: 0 PID: 3983 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:group_sched_out.part.0+0x2c7/0x460 Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 RSP: 0018:ffff88801e3f7c48 EFLAGS: 00010006 RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff888018a7b580 RSI: ffffffff81565dc7 RDI: 0000000000000005 RBP: ffff888008660b90 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800f859000 R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 FS: 00007f211cec4700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f936e7fd540 CR3: 000000001b66a000 CR4: 0000000000350ef0 Call Trace: ctx_sched_out+0x8f1/0xc10 __perf_event_task_sched_out+0x6d0/0x18d0 __schedule+0xedd/0x2470 schedule+0xda/0x1b0 exit_to_user_mode_prepare+0x114/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f211f94eb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f211cec4218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000001 RBX: 00007f211fa61f68 RCX: 00007f211f94eb19 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f211fa61f6c RBP: 00007f211fa61f60 R08: 000000000000000e R09: 0000000000000000 R10: 0000000000000003 R11: 0000000000000246 R12: 00007f211fa61f6c R13: 00007ffc52aea57f R14: 00007f211cec4300 R15: 0000000000022000 irq event stamp: 272 hardirqs last enabled at (271): [] exit_to_user_mode_prepare+0x109/0x1a0 hardirqs last disabled at (272): [] __schedule+0x1225/0x2470 softirqs last enabled at (0): [] copy_process+0x1e15/0x6e20 softirqs last disabled at (0): [<0000000000000000>] 0x0 ---[ end trace 0000000000000000 ]--- loop6: detected capacity change from 0 to 512 loop4: detected capacity change from 0 to 2560 EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. ext4 filesystem being mounted at /syzkaller-testdir838936589/syzkaller.nFLE2K/1/file0 supports timestamps until 2038 (0x7fffffff) EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. ext4 filesystem being mounted at /syzkaller-testdir115000910/syzkaller.ZOs6ES/1/file0 supports timestamps until 2038 (0x7fffffff) loop3: detected capacity change from 0 to 2048 EXT4-fs (loop3): VFS: Can't find ext4 filesystem loop3: detected capacity change from 0 to 2048 EXT4-fs (loop3): VFS: Can't find ext4 filesystem EXT4-fs (loop6): unmounting filesystem. EXT4-fs (loop4): unmounting filesystem. syz-executor.7 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 CPU: 0 PID: 310 Comm: syz-executor.7 Tainted: G W 6.0.0-rc7-next-20220930 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 dump_header+0x10b/0x84a oom_kill_process.cold+0x10/0x15 out_of_memory+0x11ee/0x14b0 __alloc_pages_slowpath.constprop.0+0x1982/0x1fd0 __alloc_pages+0x428/0x500 alloc_pages+0x19c/0x250 filemap_alloc_folio+0x2d2/0x370 __filemap_get_folio+0x328/0xc90 filemap_fault+0x1492/0x20d0 __do_fault+0x10d/0x590 __handle_mm_fault+0x138a/0x35e0 handle_mm_fault+0x2e6/0xa20 do_user_addr_fault+0x536/0x1300 exc_page_fault+0x98/0x1a0 asm_exc_page_fault+0x22/0x30 RIP: 0033:0x7f4e310600d0 Code: Unable to access opcode bytes at 0x7f4e310600a6. RSP: 002b:00007ffd7368bbd8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007f4e310618e1 RDX: 00007ffd7368bc20 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007ffd7368bcac R08: 0000000000000000 R09: 00007ffd73735080 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 R13: 0000000000023d0c R14: 000000000000000d R15: 00007ffd7368bd10 Mem-Info: active_anon:285 inactive_anon:37880 isolated_anon:0 active_file:6 inactive_file:16 isolated_file:0 unevictable:0 dirty:0 writeback:0 slab_reclaimable:8595 slab_unreclaimable:57589 mapped:69644 shmem:96 pagetables:1008 sec_pagetables:0 bounce:0 kernel_misc_reclaimable:0 free:2993 free_pcp:62 free_cma:0 Node 0 active_anon:1140kB inactive_anon:151520kB active_file:24kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278576kB dirty:0kB writeback:0kB shmem:384kB writeback_tmp:0kB kernel_stack:4480kB pagetables:4032kB sec_pagetables:0kB all_unreclaimable? yes Node 0 DMA free:6488kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1613 1613 1613 Node 0 DMA32 free:5484kB boost:2048kB min:7164kB low:8812kB high:10460kB reserved_highatomic:0KB active_anon:1140kB inactive_anon:151512kB active_file:100kB inactive_file:80kB unevictable:0kB writepending:0kB present:2080640kB managed:1656480kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 0*4kB 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6488kB Node 0 DMA32: 381*4kB (UME) 189*8kB (UM) 77*16kB (UM) 30*32kB (UM) 2*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5484kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 118 total pagecache pages 0 pages in swap cache Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 106198 pages reserved Unreclaimable slab info: Name Used Total pid_2 22KB 22KB IEEE-802.15.4-MAC 31KB 31KB fib6_nodes 24KB 24KB ip6_dst_cache 15KB 15KB RAWv6 92KB 92KB UDPv6 64KB 64KB TCPv6 62KB 62KB scsi_sense_cache 8KB 8KB virtio_scsi_cmd 16KB 16KB bio-120 7KB 7KB mqueue_inode_cache 60KB 60KB nfs_commit_data 15KB 15KB nfs_write_data 47KB 47KB jbd2_inode 7KB 7KB ext4_system_zone 7KB 7KB ext4_io_end_vec 7KB 7KB ext4_bio_post_read_ctx 15KB 15KB pid_namespace 7KB 7KB posix_timers_cache 7KB 7KB rpc_buffers 31KB 31KB rpc_tasks 3KB 3KB UNIX-STREAM 168KB 288KB UNIX 172KB 256KB tcp_bind2_bucket 8KB 8KB tcp_bind_bucket 8KB 8KB ip_fib_trie 8KB 8KB ip_fib_alias 11KB 11KB ip_dst_cache 28KB 28KB RAW 30KB 30KB UDP 184KB 184KB request_sock_TCP 15KB 15KB TCP 60KB 60KB hugetlbfs_inode_cache 31KB 31KB bio-248 11KB 11KB ep_head 8KB 8KB eventpoll_pwq 19KB 19KB eventpoll_epi 35KB 35KB inotify_inode_mark 23KB 23KB sgpool-128 59KB 59KB sgpool-64 63KB 63KB sgpool-32 47KB 47KB sgpool-16 22KB 22KB sgpool-8 18KB 37KB request_queue 60KB 60KB blkdev_ioc 8KB 8KB bio-184 36KB 36KB biovec-max 535KB 535KB biovec-64 141KB 157KB biovec-16 18KB 18KB uid_cache 7KB 7KB dmaengine-unmap-2 4KB 4KB audit_buffer 7KB 7KB skbuff_fclone_cache 30KB 60KB skbuff_head_cache 124KB 161KB file_lock_cache 43KB 63KB file_lock_ctx 7KB 7KB fsnotify_mark_connector 16KB 16KB taskstats 15KB 15KB proc_dir_entry 303KB 303KB pde_opener 7KB 7KB seq_file 56KB 56KB sigqueue 27KB 43KB shmem_inode_cache 1399KB 1399KB kernfs_iattrs_cache 250KB 250KB kernfs_node_cache 4664KB 4664KB mnt_cache 133KB 133KB filp 2055KB 2407KB names_cache 16077KB 18096KB net_namespace 55KB 55KB hashtab_node 274KB 274KB ebitmap_node 1149KB 1149KB avtab_node 4976KB 4976KB avc_node 31KB 31KB lsm_inode_cache 3286KB 3296KB lsm_file_cache 103KB 128KB key_jar 31KB 31KB uts_namespace 15KB 15KB nsproxy 7KB 7KB vm_area_struct 711KB 1177KB mm_struct 196KB 283KB fs_cache 44KB 44KB files_cache 175KB 175KB signal_cache 334KB 394KB sighand_cache 330KB 330KB task_struct 1230KB 1310KB cred_jar 132KB 156KB anon_vma_chain 172KB 224KB anon_vma 223KB 223KB pid 73KB 75KB Acpi-Operand 76KB 142KB Acpi-ParseExt 31KB 31KB Acpi-Parse 31KB 47KB Acpi-State 27KB 43KB Acpi-Namespace 24KB 24KB numa_policy 3KB 3KB perf_event 31KB 31KB trace_event_file 179KB 179KB ftrace_event_field 312KB 312KB pool_workqueue 32KB 32KB maple_node 1213KB 3208KB task_group 16KB 16KB vmap_area 35KB 35KB page->ptl 134KB 161KB kmemleak_scan_area 19KB 19KB kmemleak_object 133678KB 146225KB kmalloc-cg-8k 64KB 64KB kmalloc-cg-4k 1952KB 2144KB kmalloc-cg-2k 1344KB 1344KB kmalloc-cg-1k 352KB 352KB kmalloc-cg-512 242KB 272KB kmalloc-cg-256 40KB 40KB kmalloc-cg-192 32KB 32KB kmalloc-cg-128 36KB 36KB kmalloc-cg-96 16KB 16KB kmalloc-cg-64 16KB 16KB kmalloc-cg-32 40KB 56KB kmalloc-cg-16 8KB 8KB kmalloc-cg-8 11KB 11KB kmalloc-8k 1440KB 1440KB kmalloc-4k 4568KB 4776KB kmalloc-2k 2880KB 3168KB kmalloc-1k 1514KB 1728KB kmalloc-512 1460KB 1728KB kmalloc-256 916KB 928KB kmalloc-192 460KB 472KB kmalloc-128 245KB 316KB kmalloc-96 239KB 244KB kmalloc-64 965KB 1004KB kmalloc-32 461KB 500KB kmalloc-16 323KB 324KB kmalloc-8 245KB 247KB kmem_cache_node 47KB 47KB kmem_cache 78KB 78KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=310,uid=0 Out of memory (oom_kill_allocating_task): Killed process 310 (syz-executor.7) total-vm:93280kB, anon-rss:360kB, file-rss:33720kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 systemd-timesyn invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 CPU: 1 PID: 128 Comm: systemd-timesyn Tainted: G W 6.0.0-rc7-next-20220930 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 dump_header+0x10b/0x84a oom_kill_process.cold+0x10/0x15 out_of_memory+0x11ee/0x14b0 __alloc_pages_slowpath.constprop.0+0x1982/0x1fd0 __alloc_pages+0x428/0x500 alloc_pages+0x19c/0x250 filemap_alloc_folio+0x2d2/0x370 __filemap_get_folio+0x328/0xc90 filemap_fault+0x1492/0x20d0 __do_fault+0x10d/0x590 __handle_mm_fault+0x138a/0x35e0 handle_mm_fault+0x2e6/0xa20 do_user_addr_fault+0x536/0x1300 exc_page_fault+0x98/0x1a0 asm_exc_page_fault+0x22/0x30 RIP: 0033:0x7f619dce4116 Code: Unable to access opcode bytes at 0x7f619dce40ec. RSP: 002b:00007ffc0617ccc0 EFLAGS: 00010293 RAX: 0000000000000001 RBX: 000055ad184d1310 RCX: 00007f619dce4116 RDX: 0000000000000008 RSI: 000055ad184d6e90 RDI: 0000000000000004 RBP: ffffffffffffffff R08: 0000000000000000 R09: 000055ad184d0b60 R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001 R13: 0000000000000008 R14: 0000000000000065 R15: 0000000000000000 Mem-Info: active_anon:285 inactive_anon:37880 isolated_anon:0 active_file:27 inactive_file:0 isolated_file:0 unevictable:0 dirty:0 writeback:0 slab_reclaimable:8595 slab_unreclaimable:57589 mapped:69634 shmem:96 pagetables:987 sec_pagetables:0 bounce:0 kernel_misc_reclaimable:0 free:2608 free_pcp:148 free_cma:0 Node 0 active_anon:1140kB inactive_anon:151520kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:384kB writeback_tmp:0kB kernel_stack:4480kB pagetables:3948kB sec_pagetables:0kB all_unreclaimable? yes Node 0 DMA free:6472kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1613 1613 1613 Node 0 DMA32 free:3456kB boost:6144kB min:11260kB low:12908kB high:14556kB reserved_highatomic:0KB active_anon:1140kB inactive_anon:151512kB active_file:24kB inactive_file:52kB unevictable:0kB writepending:0kB present:2080640kB managed:1656480kB mlocked:0kB bounce:0kB free_pcp:592kB local_pcp:344kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 0*4kB 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6472kB Node 0 DMA32: 285*4kB (UME) 116*8kB (UM) 49*16kB (UM) 11*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3204kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 116 total pagecache pages 0 pages in swap cache Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 106198 pages reserved Unreclaimable slab info: Name Used Total syz-executor.7: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz7 pid_2 22KB 22KB ,mems_allowed=0 IEEE-802.15.4-MAC 31KB 31KB fib6_nodes 24KB 24KB CPU: 0 PID: 3984 Comm: syz-executor.7 Tainted: G W 6.0.0-rc7-next-20220930 #1 ip6_dst_cache 15KB 15KB Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: RAWv6 92KB 92KB dump_stack_lvl+0x8b/0xb3 UDPv6 64KB 64KB warn_alloc.cold+0x95/0x1a7 TCPv6 62KB 62KB scsi_sense_cache 8KB 8KB virtio_scsi_cmd 16KB 16KB bio-120 7KB 7KB mqueue_inode_cache 60KB 60KB nfs_commit_data 15KB 15KB __alloc_pages_slowpath.constprop.0+0x1b73/0x1fd0 nfs_write_data 47KB 47KB jbd2_inode 7KB 7KB ext4_system_zone 7KB 7KB ext4_io_end_vec 7KB 7KB __alloc_pages+0x428/0x500 ext4_bio_post_read_ctx 15KB 15KB pid_namespace 7KB 7KB posix_timers_cache 7KB 7KB rpc_buffers 31KB 31KB alloc_pages+0x19c/0x250 rpc_tasks 3KB 3KB relay_open_buf.part.0+0x285/0xbc0 UNIX-STREAM 168KB 288KB UNIX 172KB 256KB relay_open+0x504/0x9e0 tcp_bind2_bucket 8KB 8KB do_blk_trace_setup+0x4bc/0xb60 tcp_bind_bucket 8KB 8KB __blk_trace_setup+0xca/0x180 ip_fib_trie 8KB 8KB ip_fib_alias 11KB 11KB ip_dst_cache 28KB 28KB blk_trace_setup+0x43/0x60 RAW 30KB 30KB sg_ioctl+0x6a1/0x2690 UDP 184KB 184KB request_sock_TCP 15KB 15KB TCP 60KB 60KB hugetlbfs_inode_cache 31KB 31KB bio-248 11KB 11KB ep_head 8KB 8KB __x64_sys_ioctl+0x19a/0x210 eventpoll_pwq 19KB 19KB do_syscall_64+0x3b/0x90 eventpoll_epi 35KB 35KB entry_SYSCALL_64_after_hwframe+0x63/0xcd inotify_inode_mark 23KB 23KB RIP: 0033:0x7f4e3103cb19 sgpool-128 59KB 59KB Code: Unable to access opcode bytes at 0x7f4e3103caef. sgpool-64 63KB 63KB RSP: 002b:00007f4e2e5b2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 sgpool-32 47KB 47KB RAX: ffffffffffffffda RBX: 00007f4e3114ff60 RCX: 00007f4e3103cb19 sgpool-16 22KB 22KB RDX: 0000000020000080 RSI: 00000000c0481273 RDI: 0000000000000003 RBP: 00007f4e31096f6d R08: 0000000000000000 R09: 0000000000000000 sgpool-8 18KB 37KB R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 request_queue 60KB 60KB R13: 00007ffd7368b9ff R14: 00007f4e2e5b2300 R15: 0000000000022000 blkdev_ioc 8KB 8KB Mem-Info: bio-184 36KB 36KB active_anon:285 inactive_anon:37880 isolated_anon:0 active_file:27 inactive_file:0 isolated_file:0 unevictable:0 dirty:0 writeback:0 slab_reclaimable:8595 slab_unreclaimable:57589 mapped:69634 shmem:96 pagetables:987 sec_pagetables:0 bounce:0 kernel_misc_reclaimable:0 free:2482 free_pcp:148 free_cma:0 biovec-max 535KB 535KB Node 0 active_anon:1140kB inactive_anon:151520kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:384kB writeback_tmp:0kB kernel_stack:4480kB pagetables:3948kB sec_pagetables:0kB all_unreclaimable? yes biovec-64 141KB 157KB Node 0 biovec-16 18KB 18KB DMA free:6472kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB uid_cache 7KB 7KB lowmem_reserve[]: 0 dmaengine-unmap-2 4KB 4KB 1613 audit_buffer 7KB 7KB 1613 skbuff_fclone_cache 30KB 60KB 1613 skbuff_head_cache 124KB 161KB file_lock_cache 43KB 63KB Node 0 file_lock_ctx 7KB 7KB DMA32 free:3456kB boost:6144kB min:11260kB low:12908kB high:14556kB reserved_highatomic:0KB active_anon:1140kB inactive_anon:151512kB active_file:24kB inactive_file:52kB unevictable:0kB writepending:0kB present:2080640kB managed:1656480kB mlocked:0kB bounce:0kB free_pcp:592kB local_pcp:248kB free_cma:0kB fsnotify_mark_connector 16KB 16KB lowmem_reserve[]: 0 taskstats 15KB 15KB 0 proc_dir_entry 303KB 303KB 0 pde_opener 7KB 7KB 0 seq_file 56KB 56KB Node 0 sigqueue 27KB 43KB DMA: shmem_inode_cache 1399KB 1399KB 0*4kB kernfs_iattrs_cache 250KB 250KB 1*8kB kernfs_node_cache 4664KB 4664KB (M) mnt_cache 133KB 133KB 2*16kB filp 2055KB 2407KB (UM) names_cache 16077KB 18096KB 1*32kB net_namespace 55KB 55KB (M) hashtab_node 274KB 274KB 2*64kB ebitmap_node 1149KB 1149KB (UM) avtab_node 4976KB 4976KB 1*128kB avc_node 31KB 31KB (M) lsm_inode_cache 3286KB 3296KB 2*256kB lsm_file_cache 103KB 128KB (UM) key_jar 31KB 31KB 1*512kB uts_namespace 15KB 15KB (M) nsproxy 7KB 7KB 1*1024kB vm_area_struct 711KB 1177KB (M) mm_struct 196KB 283KB 0*2048kB fs_cache 44KB 44KB 1*4096kB files_cache 175KB 175KB (M) signal_cache 334KB 394KB = 6472kB sighand_cache 330KB 330KB Node 0 task_struct 1230KB 1310KB DMA32: cred_jar 132KB 156KB 285*4kB anon_vma_chain 172KB 224KB (UME) anon_vma 223KB 223KB 116*8kB pid 73KB 75KB (UM) Acpi-Operand 76KB 142KB 49*16kB Acpi-ParseExt 31KB 31KB (UM) Acpi-Parse 31KB 47KB 11*32kB Acpi-State 27KB 43KB (UM) Acpi-Namespace 24KB 24KB 0*64kB numa_policy 3KB 3KB 0*128kB perf_event 31KB 31KB 0*256kB trace_event_file 179KB 179KB 0*512kB ftrace_event_field 312KB 312KB 0*1024kB pool_workqueue 32KB 32KB 0*2048kB maple_node 1213KB 3208KB 0*4096kB task_group 16KB 16KB = 3204kB vmap_area 35KB 35KB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB page->ptl 134KB 161KB 116 total pagecache pages kmemleak_scan_area 19KB 19KB 0 pages in swap cache kmemleak_object 133678KB 146225KB Free swap = 0kB kmalloc-cg-8k 64KB 64KB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly kmalloc-cg-4k 1952KB 2144KB 106198 pages reserved kmalloc-cg-2k 1344KB 1344KB kmalloc-cg-1k 352KB 352KB kmalloc-cg-512 242KB 272KB kmalloc-cg-256 40KB 40KB kmalloc-cg-192 32KB 32KB kmalloc-cg-128 36KB 36KB kmalloc-cg-96 16KB 16KB kmalloc-cg-64 16KB 16KB kmalloc-cg-32 40KB 56KB kmalloc-cg-16 8KB 8KB kmalloc-cg-8 11KB 11KB kmalloc-8k 1440KB 1440KB kmalloc-4k 4568KB 4776KB kmalloc-2k 2880KB 3168KB kmalloc-1k 1514KB 1728KB kmalloc-512 1460KB 1728KB kmalloc-256 916KB 928KB kmalloc-192 460KB 472KB kmalloc-128 245KB 316KB kmalloc-96 239KB 244KB kmalloc-64 965KB 1004KB kmalloc-32 461KB 500KB kmalloc-16 323KB 324KB kmalloc-8 245KB 247KB kmem_cache_node 47KB 47KB kmem_cache 78KB 78KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-timesyncd.service,task=systemd-timesyn,pid=128,uid=101 Out of memory (oom_kill_allocating_task): Killed process 128 (systemd-timesyn) total-vm:88376kB, anon-rss:692kB, file-rss:0kB, shmem-rss:0kB, UID:101 pgtables:76kB oom_score_adj:0 (imesyncd) invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 CPU: 0 PID: 4026 Comm: (imesyncd) Tainted: G W 6.0.0-rc7-next-20220930 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 dump_header+0x10b/0x84a oom_kill_process.cold+0x10/0x15 out_of_memory+0x11ee/0x14b0 __alloc_pages_slowpath.constprop.0+0x1982/0x1fd0 __alloc_pages+0x428/0x500 alloc_pages+0x19c/0x250 allocate_slab+0x20d/0x290 ___slab_alloc+0x8f5/0x1080 __slab_alloc.constprop.0+0x4d/0x90 kmem_cache_alloc+0x2ed/0x3e0 getname_flags.part.0+0x50/0x4f0 getname_flags+0x9a/0xe0 vfs_fstatat+0x73/0xb0 __do_sys_newlstat+0x8e/0x110 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f1e5bd04446 Code: fa 0c 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 41 89 f8 48 89 f7 48 89 d6 41 83 f8 01 77 29 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 c3 90 48 8b 15 19 fa 0c 00 f7 d8 64 89 02 RSP: 002b:00007ffc3d8db4c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 RAX: ffffffffffffffda RBX: 000055ece89a1980 RCX: 00007f1e5bd04446 RDX: 00007ffc3d8db510 RSI: 00007ffc3d8db510 RDI: 000055ece89a0980 RBP: 00007ffc3d8db5e0 R08: 0000000000000001 R09: 00007f1e5c104870 R10: 0000000000000002 R11: 0000000000000246 R12: 000055ece89a0980 R13: 00007f1e5c104873 R14: 000055ece89a098a R15: 00007f1e5c104874 Mem-Info: active_anon:284 inactive_anon:38071 isolated_anon:16 active_file:805 inactive_file:674 isolated_file:37 unevictable:0 dirty:7 writeback:0 slab_reclaimable:8667 slab_unreclaimable:56569 mapped:71005 shmem:95 pagetables:987 sec_pagetables:0 bounce:0 kernel_misc_reclaimable:0 free:3904 free_pcp:0 free_cma:0 Node 0 active_anon:1136kB inactive_anon:152284kB active_file:3220kB inactive_file:2696kB unevictable:0kB isolated(anon):64kB isolated(file):148kB mapped:284020kB dirty:28kB writeback:0kB shmem:380kB writeback_tmp:0kB kernel_stack:4352kB pagetables:3948kB sec_pagetables:0kB all_unreclaimable? no Node 0 DMA free:6476kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1613 1613 1613 Node 0 DMA32 free:9140kB boost:12616kB min:17732kB low:19380kB high:21028kB reserved_highatomic:0KB active_anon:1136kB inactive_anon:152108kB active_file:2896kB inactive_file:3164kB unevictable:0kB writepending:320kB present:2080640kB managed:1656480kB mlocked:0kB bounce:0kB free_pcp:412kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6476kB Node 0 DMA32: 643*4kB (UME) 189*8kB (UM) 82*16kB (ME) 19*32kB (UME) 9*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 9012kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 1388 total pagecache pages 0 pages in swap cache Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 106198 pages reserved Unreclaimable slab info: Name Used Total pid_2 22KB 22KB IEEE-802.15.4-MAC 31KB 31KB fib6_nodes 24KB 24KB ip6_dst_cache 15KB 15KB RAWv6 92KB 92KB UDPv6 64KB 64KB TCPv6 62KB 62KB scsi_sense_cache 8KB 8KB virtio_scsi_cmd 16KB 16KB bio-120 7KB 7KB mqueue_inode_cache 60KB 60KB nfs_commit_data 15KB 15KB nfs_write_data 47KB 47KB jbd2_inode 7KB 7KB ext4_system_zone 7KB 7KB ext4_io_end_vec 7KB 7KB ext4_bio_post_read_ctx 15KB 15KB pid_namespace 7KB 7KB posix_timers_cache 7KB 7KB rpc_buffers 31KB 31KB rpc_tasks 3KB 3KB UNIX-STREAM 168KB 288KB UNIX 172KB 256KB tcp_bind2_bucket 8KB 8KB tcp_bind_bucket 8KB 8KB ip_fib_trie 8KB 8KB ip_fib_alias 11KB 11KB ip_dst_cache 28KB 28KB RAW 30KB 30KB UDP 184KB 184KB request_sock_TCP 15KB 15KB TCP 60KB 60KB hugetlbfs_inode_cache 31KB 31KB bio-248 11KB 11KB ep_head 8KB 8KB eventpoll_pwq 19KB 19KB eventpoll_epi 35KB 35KB inotify_inode_mark 23KB 23KB sgpool-128 59KB 59KB sgpool-64 63KB 63KB sgpool-32 63KB 63KB sgpool-16 30KB 30KB sgpool-8 41KB 41KB request_queue 60KB 60KB blkdev_ioc 8KB 8KB bio-184 36KB 36KB biovec-max 535KB 535KB biovec-64 189KB 189KB biovec-16 18KB 18KB uid_cache 7KB 7KB dmaengine-unmap-2 4KB 4KB audit_buffer 7KB 7KB skbuff_fclone_cache 30KB 60KB skbuff_head_cache 94KB 161KB file_lock_cache 43KB 63KB file_lock_ctx 7KB 7KB fsnotify_mark_connector 16KB 16KB taskstats 15KB 15KB proc_dir_entry 303KB 303KB pde_opener 7KB 7KB seq_file 56KB 56KB sigqueue 27KB 43KB shmem_inode_cache 1399KB 1399KB kernfs_iattrs_cache 258KB 258KB kernfs_node_cache 4668KB 4668KB mnt_cache 157KB 157KB filp 1796KB 2010KB names_cache 15091KB 15091KB net_namespace 55KB 55KB hashtab_node 274KB 274KB ebitmap_node 1149KB 1149KB avtab_node 4976KB 4976KB avc_node 31KB 31KB lsm_inode_cache 3287KB 3296KB lsm_file_cache 97KB 128KB key_jar 31KB 31KB uts_namespace 15KB 15KB nsproxy 7KB 7KB vm_area_struct 633KB 1069KB mm_struct 194KB 283KB fs_cache 44KB 44KB files_cache 175KB 175KB signal_cache 261KB 394KB sighand_cache 330KB 330KB task_struct 1049KB 1257KB cred_jar 113KB 156KB anon_vma_chain 154KB 224KB anon_vma 227KB 227KB pid 73KB 75KB Acpi-Operand 76KB 142KB Acpi-ParseExt 31KB 31KB Acpi-Parse 31KB 47KB Acpi-State 27KB 43KB Acpi-Namespace 24KB 24KB numa_policy 3KB 3KB perf_event 31KB 31KB trace_event_file 179KB 179KB ftrace_event_field 312KB 312KB pool_workqueue 32KB 32KB maple_node 581KB 1392KB task_group 16KB 16KB vmap_area 35KB 35KB page->ptl 124KB 161KB kmemleak_scan_area 19KB 19KB kmemleak_object 133509KB 145746KB kmalloc-cg-8k 64KB 64KB kmalloc-cg-4k 2056KB 2112KB kmalloc-cg-2k 1344KB 1344KB kmalloc-cg-1k 352KB 352KB kmalloc-cg-512 272KB 272KB kmalloc-cg-256 40KB 40KB kmalloc-cg-192 32KB 32KB kmalloc-cg-128 36KB 36KB kmalloc-cg-96 16KB 16KB kmalloc-cg-64 16KB 16KB kmalloc-cg-32 37KB 56KB kmalloc-cg-16 8KB 8KB kmalloc-cg-8 11KB 11KB kmalloc-8k 1440KB 1440KB kmalloc-4k 6864KB 6920KB kmalloc-2k 2700KB 3072KB kmalloc-1k 1508KB 1728KB kmalloc-512 1434KB 1728KB kmalloc-256 944KB 944KB kmalloc-192 475KB 476KB kmalloc-128 245KB 316KB kmalloc-96 244KB 244KB kmalloc-64 964KB 1004KB kmalloc-32 483KB 500KB kmalloc-16 320KB 324KB kmalloc-8 244KB 247KB kmem_cache_node 47KB 47KB kmem_cache 78KB 78KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-timesyncd.service,task=(imesyncd),pid=4026,uid=0 Out of memory (oom_kill_allocating_task): Killed process 4026 ((imesyncd)) total-vm:180072kB, anon-rss:11144kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:0