524158 pages RAM 0 pages HighMem/MovableOnly 105109 pages reserved oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=25333,uid=0 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 25333, name: syz-executor.3 preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 2 locks held by syz-executor.3/25333: #0: ffffffff852791a8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4279 [inline] #0: ffffffff852791a8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5061 #1: ffff8880337258e0 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #1: ffff8880337258e0 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:179 [inline] #1: ffff8880337258e0 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 0 PID: 25333 Comm: syz-executor.3 Not tainted 5.16.0-rc6-next-20211224 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9583 __mutex_lock_common kernel/locking/mutex.c:577 [inline] __mutex_lock+0x9e/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4330 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5061 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5392 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 alloc_slab_page mm/slub.c:1799 [inline] allocate_slab mm/slub.c:1952 [inline] new_slab+0x272/0x360 mm/slub.c:2004 ___slab_alloc+0x849/0xc60 mm/slub.c:3018 __slab_alloc.constprop.0+0x45/0x80 mm/slub.c:3105 slab_alloc_node mm/slub.c:3196 [inline] kmem_cache_alloc_node+0x370/0x490 mm/slub.c:3266 alloc_task_struct_node kernel/fork.c:171 [inline] dup_task_struct kernel/fork.c:885 [inline] copy_process+0x3011/0x6e20 kernel/fork.c:2006 kernel_clone+0xe7/0xa60 kernel/fork.c:2620 __do_sys_clone+0xc1/0x100 kernel/fork.c:2737 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fe056065f41 Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 RSP: 002b:00007ffe5f5d9e78 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fe0535b9700 RCX: 00007fe056065f41 RDX: 00007fe0535b99d0 RSI: 00007fe0535b92f0 RDI: 00000000003d0f00 RBP: 00007ffe5f5da0b0 R08: 00007fe0535b9700 R09: 00007fe0535b9700 R10: 00007fe0535b99d0 R11: 0000000000000206 R12: 00007ffe5f5d9f2e R13: 00007ffe5f5d9f2f R14: 00007fe0535b9300 R15: 00005555572b9d50 ============================= [ BUG: Invalid wait context ] 5.16.0-rc6-next-20211224 #1 Tainted: G W ----------------------------- syz-executor.3/25333 is trying to lock: ffff8880337262f0 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_cleanup_begin kernel/futex/core.c:1058 [inline] ffff8880337262f0 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 other info that might help us debug this: context-{4:4} 2 locks held by syz-executor.3/25333: #0: ffffffff852791a8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4279 [inline] #0: ffffffff852791a8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5061 #1: ffff8880337258e0 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #1: ffff8880337258e0 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:179 [inline] #1: ffff8880337258e0 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 stack backtrace: CPU: 0 PID: 25333 Comm: syz-executor.3 Tainted: G W 5.16.0-rc6-next-20211224 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 print_lock_invalid_wait_context kernel/locking/lockdep.c:4678 [inline] check_wait_context kernel/locking/lockdep.c:4739 [inline] __lock_acquire.cold+0xc8/0x3b4 kernel/locking/lockdep.c:4977 lock_acquire kernel/locking/lockdep.c:5639 [inline] lock_acquire+0x1a2/0x4d0 kernel/locking/lockdep.c:5604 __mutex_lock_common kernel/locking/mutex.c:600 [inline] __mutex_lock+0x136/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4330 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5061 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5392 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 alloc_slab_page mm/slub.c:1799 [inline] allocate_slab mm/slub.c:1952 [inline] new_slab+0x272/0x360 mm/slub.c:2004 ___slab_alloc+0x849/0xc60 mm/slub.c:3018 __slab_alloc.constprop.0+0x45/0x80 mm/slub.c:3105 slab_alloc_node mm/slub.c:3196 [inline] kmem_cache_alloc_node+0x370/0x490 mm/slub.c:3266 alloc_task_struct_node kernel/fork.c:171 [inline] dup_task_struct kernel/fork.c:885 [inline] copy_process+0x3011/0x6e20 kernel/fork.c:2006 kernel_clone+0xe7/0xa60 kernel/fork.c:2620 __do_sys_clone+0xc1/0x100 kernel/fork.c:2737 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fe056065f41 Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 RSP: 002b:00007ffe5f5d9e78 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fe0535b9700 RCX: 00007fe056065f41 RDX: 00007fe0535b99d0 RSI: 00007fe0535b92f0 RDI: 00000000003d0f00 RBP: 00007ffe5f5da0b0 R08: 00007fe0535b9700 R09: 00007fe0535b9700 R10: 00007fe0535b99d0 R11: 0000000000000206 R12: 00007ffe5f5d9f2e R13: 00007ffe5f5d9f2f R14: 00007fe0535b9300 R15: 00005555572b9d50 Out of memory (oom_kill_allocating_task): Killed process 25333 (syz-executor.3) total-vm:93544kB, anon-rss:12528kB, file-rss:34012kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 oom_reaper: reaped process 25333 (syz-executor.3), now anon-rss:12244kB, file-rss:33804kB, shmem-rss:0kB