524158 pages RAM 0 pages HighMem/MovableOnly 105108 pages reserved oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=7803,uid=0 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7803, name: syz-executor.7 preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 3 locks held by syz-executor.7/7803: #0: ffff8880173d8828 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:117 [inline] #0: ffff8880173d8828 (&mm->mmap_lock#2){++++}-{3:3}, at: __mm_populate+0x264/0x3e0 mm/gup.c:1586 #1: ffffffff852791e8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline] #1: ffffffff852791e8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063 #2: ffff888044fdd8e0 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #2: ffff888044fdd8e0 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:179 [inline] #2: ffff888044fdd8e0 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 PID: 7803 Comm: syz-executor.7 Not tainted 5.16.0-rc8-next-20220105 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9583 __mutex_lock_common kernel/locking/mutex.c:577 [inline] __mutex_lock+0x9e/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages_vma+0xde/0x500 mm/mempolicy.c:2232 do_anonymous_page mm/memory.c:3757 [inline] handle_pte_fault mm/memory.c:4546 [inline] __handle_mm_fault+0xfb3/0x3570 mm/memory.c:4683 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4781 faultin_page mm/gup.c:944 [inline] __get_user_pages+0x522/0x1120 mm/gup.c:1165 populate_vma_page_range+0x24d/0x330 mm/gup.c:1497 __mm_populate+0x1ea/0x3e0 mm/gup.c:1606 do_mlock+0x291/0x6b0 mm/mlock.c:689 __do_sys_mlock mm/mlock.c:697 [inline] __se_sys_mlock mm/mlock.c:695 [inline] __x64_sys_mlock+0x55/0x80 mm/mlock.c:695 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fa17b3cbb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa178941188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 RAX: ffffffffffffffda RBX: 00007fa17b4def60 RCX: 00007fa17b3cbb19 RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020400000 RBP: 00007fa17b425f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdbc9df5ff R14: 00007fa178941300 R15: 0000000000022000 ============================= [ BUG: Invalid wait context ] 5.16.0-rc8-next-20220105 #1 Tainted: G W ----------------------------- syz-executor.7/7803 is trying to lock: ffff888044fde2f0 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_cleanup_begin kernel/futex/core.c:1058 [inline] ffff888044fde2f0 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 other info that might help us debug this: context-{4:4} 3 locks held by syz-executor.7/7803: #0: ffff8880173d8828 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:117 [inline] #0: ffff8880173d8828 (&mm->mmap_lock#2){++++}-{3:3}, at: __mm_populate+0x264/0x3e0 mm/gup.c:1586 #1: ffffffff852791e8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline] #1: ffffffff852791e8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063 #2: ffff888044fdd8e0 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #2: ffff888044fdd8e0 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:179 [inline] #2: ffff888044fdd8e0 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 stack backtrace: CPU: 1 PID: 7803 Comm: syz-executor.7 Tainted: G W 5.16.0-rc8-next-20220105 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 print_lock_invalid_wait_context kernel/locking/lockdep.c:4678 [inline] check_wait_context kernel/locking/lockdep.c:4739 [inline] __lock_acquire.cold+0xc8/0x3b4 kernel/locking/lockdep.c:4977 lock_acquire kernel/locking/lockdep.c:5639 [inline] lock_acquire+0x1a2/0x4d0 kernel/locking/lockdep.c:5604 __mutex_lock_common kernel/locking/mutex.c:600 [inline] __mutex_lock+0x136/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages_vma+0xde/0x500 mm/mempolicy.c:2232 do_anonymous_page mm/memory.c:3757 [inline] handle_pte_fault mm/memory.c:4546 [inline] __handle_mm_fault+0xfb3/0x3570 mm/memory.c:4683 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4781 faultin_page mm/gup.c:944 [inline] __get_user_pages+0x522/0x1120 mm/gup.c:1165 populate_vma_page_range+0x24d/0x330 mm/gup.c:1497 __mm_populate+0x1ea/0x3e0 mm/gup.c:1606 do_mlock+0x291/0x6b0 mm/mlock.c:689 __do_sys_mlock mm/mlock.c:697 [inline] __se_sys_mlock mm/mlock.c:695 [inline] __x64_sys_mlock+0x55/0x80 mm/mlock.c:695 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fa17b3cbb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa178941188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 RAX: ffffffffffffffda RBX: 00007fa17b4def60 RCX: 00007fa17b3cbb19 RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020400000 RBP: 00007fa17b425f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdbc9df5ff R14: 00007fa178941300 R15: 0000000000022000 Out of memory (oom_kill_allocating_task): Killed process 7802 (syz-executor.7) total-vm:93412kB, anon-rss:4876kB, file-rss:34196kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 syz-executor.5 invoked oom-killer: gfp_mask=0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=1000 CPU: 0 PID: 7811 Comm: syz-executor.5 Tainted: G W 5.16.0-rc8-next-20220105 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 dump_header+0x106/0x60f mm/oom_kill.c:464 oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages_vma+0xde/0x500 mm/mempolicy.c:2232 do_anonymous_page mm/memory.c:3757 [inline] handle_pte_fault mm/memory.c:4546 [inline] __handle_mm_fault+0xfb3/0x3570 mm/memory.c:4683 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4781 faultin_page mm/gup.c:944 [inline] __get_user_pages+0x522/0x1120 mm/gup.c:1165 populate_vma_page_range+0x24d/0x330 mm/gup.c:1497 __mm_populate+0x1ea/0x3e0 mm/gup.c:1606 do_mlock+0x291/0x6b0 mm/mlock.c:689 __do_sys_mlock mm/mlock.c:697 [inline] __se_sys_mlock mm/mlock.c:695 [inline] __x64_sys_mlock+0x55/0x80 mm/mlock.c:695 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f5e9d50eb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5e9aa84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 RAX: ffffffffffffffda RBX: 00007f5e9d621f60 RCX: 00007f5e9d50eb19 RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020400000 RBP: 00007f5e9d568f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc4f2d002f R14: 00007f5e9aa84300 R15: 0000000000022000 Mem-Info: active_anon:6809 inactive_anon:251478 isolated_anon:0 active_file:36 inactive_file:54 isolated_file:29 unevictable:3293 dirty:0 writeback:0 slab_reclaimable:9710 slab_unreclaimable:60072 mapped:69663 shmem:98 pagetables:4258 bounce:0 kernel_misc_reclaimable:0 free:3415 free_pcp:813 free_cma:0 Node 0 active_anon:27236kB inactive_anon:1005912kB active_file:144kB inactive_file:92kB unevictable:13172kB isolated(anon):0kB isolated(file):116kB mapped:278652kB dirty:0kB writeback:0kB shmem:392kB writeback_tmp:0kB kernel_stack:6912kB pagetables:17032kB all_unreclaimable? no Node 0 DMA free:6508kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8292kB active_file:0kB inactive_file:0kB unevictable:8kB writepending:0kB present:15992kB managed:15360kB mlocked:8kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:7152kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:0KB active_anon:27236kB inactive_anon:997620kB active_file:320kB inactive_file:320kB unevictable:13172kB writepending:0kB present:2080640kB managed:1660840kB mlocked:13436kB bounce:0kB free_pcp:3140kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 4*4kB (UE) 5*8kB (UE) 1*16kB (M) 5*32kB (U) 2*64kB (UE) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 6504kB Node 0 DMA32: 57*4kB (UME) 9*8kB (U) 19*16kB (UM) 199*32kB (UME) 5*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7292kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 340 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105108 pages reserved oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=7811,uid=0 Out of memory (oom_kill_allocating_task): Killed process 7809 (syz-executor.5) total-vm:93412kB, anon-rss:908kB, file-rss:33992kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 oom_reaper: reaped process 7809 (syz-executor.5), now anon-rss:768kB, file-rss:34816kB, shmem-rss:0kB syz-executor.1 invoked oom-killer: gfp_mask=0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=0 CPU: 1 PID: 7807 Comm: syz-executor.1 Tainted: G W 5.16.0-rc8-next-20220105 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 dump_header+0x106/0x60f mm/oom_kill.c:464 oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages_vma+0xde/0x500 mm/mempolicy.c:2232 do_anonymous_page mm/memory.c:3757 [inline] handle_pte_fault mm/memory.c:4546 [inline] __handle_mm_fault+0xfb3/0x3570 mm/memory.c:4683 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4781 faultin_page mm/gup.c:944 [inline] __get_user_pages+0x522/0x1120 mm/gup.c:1165 populate_vma_page_range+0x24d/0x330 mm/gup.c:1497 __mm_populate+0x1ea/0x3e0 mm/gup.c:1606 do_mlock+0x291/0x6b0 mm/mlock.c:689 __do_sys_mlock mm/mlock.c:697 [inline] __se_sys_mlock mm/mlock.c:695 [inline] __x64_sys_mlock+0x55/0x80 mm/mlock.c:695 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f2c83d62b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f2c812d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 RAX: ffffffffffffffda RBX: 00007f2c83e75f60 RCX: 00007f2c83d62b19 RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020400000 RBP: 00007f2c83dbcf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcdd5ac82f R14: 00007f2c812d8300 R15: 0000000000022000 Mem-Info: active_anon:6809 inactive_anon:251457 isolated_anon:0 active_file:34 inactive_file:93 isolated_file:21 unevictable:3734 dirty:0 writeback:0 slab_reclaimable:9710 slab_unreclaimable:60072 mapped:69705 shmem:98 pagetables:4258 bounce:0 kernel_misc_reclaimable:0 free:3892 free_pcp:71 free_cma:0 Node 0 active_anon:27236kB inactive_anon:1005828kB active_file:136kB inactive_file:356kB unevictable:14936kB isolated(anon):0kB isolated(file):84kB mapped:278820kB dirty:0kB writeback:0kB shmem:392kB writeback_tmp:0kB kernel_stack:6880kB pagetables:17032kB all_unreclaimable? no Node 0 DMA free:6508kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8292kB active_file:0kB inactive_file:0kB unevictable:8kB writepending:0kB present:15992kB managed:15360kB mlocked:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:9060kB boost:4096kB min:9216kB low:10872kB high:12528kB reserved_highatomic:0KB active_anon:27236kB inactive_anon:997620kB active_file:320kB inactive_file:824kB unevictable:15188kB writepending:0kB present:2080640kB managed:1660840kB mlocked:14912kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 5*4kB (UME) 5*8kB (UE) 1*16kB (M) 5*32kB (U) 2*64kB (UE) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 6508kB Node 0 DMA32: 195*4kB (UME) 40*8kB (UM) 31*16kB (UM) 216*32kB (UME) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9276kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 214 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105108 pages reserved oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=7807,uid=0 Out of memory (oom_kill_allocating_task): Killed process 7805 (syz-executor.1) total-vm:93412kB, anon-rss:4080kB, file-rss:34068kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:0 oom_reaper: reaped process 7805 (syz-executor.1), now anon-rss:3688kB, file-rss:34816kB, shmem-rss:0kB syz-executor.4 invoked oom-killer: gfp_mask=0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=1000 CPU: 1 PID: 7806 Comm: syz-executor.4 Tainted: G W 5.16.0-rc8-next-20220105 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 dump_header+0x106/0x60f mm/oom_kill.c:464 oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages_vma+0xde/0x500 mm/mempolicy.c:2232 do_anonymous_page mm/memory.c:3757 [inline] handle_pte_fault mm/memory.c:4546 [inline] __handle_mm_fault+0xfb3/0x3570 mm/memory.c:4683 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4781 faultin_page mm/gup.c:944 [inline] __get_user_pages+0x522/0x1120 mm/gup.c:1165 populate_vma_page_range+0x24d/0x330 mm/gup.c:1497 __mm_populate+0x1ea/0x3e0 mm/gup.c:1606 do_mlock+0x291/0x6b0 mm/mlock.c:689 __do_sys_mlock mm/mlock.c:697 [inline] __se_sys_mlock mm/mlock.c:695 [inline] __x64_sys_mlock+0x55/0x80 mm/mlock.c:695 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f8d82f06b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8d8047c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 RAX: ffffffffffffffda RBX: 00007f8d83019f60 RCX: 00007f8d82f06b19 RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020400000 RBP: 00007f8d82f60f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffd503432f R14: 00007f8d8047c300 R15: 0000000000022000 Mem-Info: active_anon:6809 inactive_anon:251457 isolated_anon:0 active_file:52 inactive_file:138 isolated_file:0 unevictable:3944 dirty:0 writeback:0 slab_reclaimable:9710 slab_unreclaimable:60072 mapped:69705 shmem:98 pagetables:4237 bounce:0 kernel_misc_reclaimable:0 free:3475 free_pcp:154 free_cma:0 Node 0 active_anon:27236kB inactive_anon:1005828kB active_file:208kB inactive_file:424kB unevictable:15776kB isolated(anon):0kB isolated(file):0kB mapped:278820kB dirty:0kB writeback:0kB shmem:392kB writeback_tmp:0kB kernel_stack:6816kB pagetables:16948kB all_unreclaimable? no Node 0 DMA free:6508kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8292kB active_file:0kB inactive_file:0kB unevictable:8kB writepending:0kB present:15992kB managed:15360kB mlocked:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:7392kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:0KB active_anon:27236kB inactive_anon:997620kB active_file:320kB inactive_file:824kB unevictable:15692kB writepending:0kB present:2080640kB managed:1660840kB mlocked:15920kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 5*4kB (UME) 5*8kB (UE) 1*16kB (M) 5*32kB (U) 2*64kB (UE) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 6508kB Node 0 DMA32: 66*4kB (UE) 22*8kB (UM) 25*16kB (U) 198*32kB (UE) 5*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7496kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 319 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105108 pages reserved oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0,global_oom,task_memcg=/syz4,task=syz-executor.4,pid=7806,uid=0 Out of memory (oom_kill_allocating_task): Killed process 7800 (syz-executor.4) total-vm:93412kB, anon-rss:7516kB, file-rss:34088kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 syz-executor.6 invoked oom-killer: gfp_mask=0x1140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 CPU: 1 PID: 2493 Comm: syz-executor.6 Tainted: G W 5.16.0-rc8-next-20220105 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 dump_header+0x106/0x60f mm/oom_kill.c:464 oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 filemap_alloc_folio mm/filemap.c:989 [inline] __filemap_get_folio+0x65c/0xfd0 mm/filemap.c:1992 filemap_fault+0x155a/0x2130 mm/filemap.c:3129 __do_fault+0x113/0x5a0 mm/memory.c:3846 do_read_fault mm/memory.c:4161 [inline] do_fault mm/memory.c:4290 [inline] handle_pte_fault mm/memory.c:4548 [inline] __handle_mm_fault+0x1325/0x3570 mm/memory.c:4683 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4781 do_user_addr_fault+0x54a/0x12a0 arch/x86/mm/fault.c:1397 handle_page_fault arch/x86/mm/fault.c:1484 [inline] exc_page_fault+0xa2/0x1a0 arch/x86/mm/fault.c:1540 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:568 RIP: 0033:0x7f4f823b6f9b Code: Unable to access opcode bytes at RIP 0x7f4f823b6f71. RSP: 002b:00007ffee4e9c120 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 000000000000016a RCX: 0000000000000000 RDX: 0000000040000001 RSI: 00007ffee4e9c1ac RDI: 00000000ffffffff RBP: 00007ffee4e9c1ac R08: 00000000000003c7 R09: 00007ffee4fa5080 R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000032 R13: 00000000000ec12f R14: 0000000000000000 R15: 00007ffee4e9c210 Mem-Info: active_anon:6810 inactive_anon:254520 isolated_anon:0 active_file:17 inactive_file:5 isolated_file:0 unevictable:1712 dirty:1 writeback:0 slab_reclaimable:9586 slab_unreclaimable:60263 mapped:69648 shmem:98 pagetables:4184 bounce:0 kernel_misc_reclaimable:0 free:2822 free_pcp:0 free_cma:0 Node 0 active_anon:27240kB inactive_anon:1018080kB active_file:68kB inactive_file:20kB unevictable:6848kB isolated(anon):0kB isolated(file):0kB mapped:278592kB dirty:4kB writeback:0kB shmem:392kB writeback_tmp:0kB kernel_stack:6752kB pagetables:16736kB all_unreclaimable? yes Node 0 DMA free:6512kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8308kB active_file:20kB inactive_file:0kB unevictable:84kB writepending:0kB present:15992kB managed:15360kB mlocked:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:4776kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:0KB active_anon:27240kB inactive_anon:1009772kB active_file:124kB inactive_file:80kB unevictable:6520kB writepending:4kB present:2080640kB managed:1660840kB mlocked:6520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 2*4kB (UE) 9*8kB (UE) 2*16kB (UM) 8*32kB (UM) 2*64kB (UE) 1*128kB (E) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 6512kB Node 0 DMA32: 10*4kB (U) 4*8kB (U) 5*16kB (U) 170*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5592kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 153 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105108 pages reserved oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz6,mems_allowed=0,global_oom,task_memcg=/syz6,task=syz-executor.6,pid=2493,uid=0 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 2493, name: syz-executor.6 preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 INFO: lockdep is turned off. Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 PID: 2493 Comm: syz-executor.6 Tainted: G W 5.16.0-rc8-next-20220105 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9583 __mutex_lock_common kernel/locking/mutex.c:577 [inline] __mutex_lock+0x9e/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 filemap_alloc_folio mm/filemap.c:989 [inline] __filemap_get_folio+0x65c/0xfd0 mm/filemap.c:1992 filemap_fault+0x155a/0x2130 mm/filemap.c:3129 __do_fault+0x113/0x5a0 mm/memory.c:3846 do_read_fault mm/memory.c:4161 [inline] do_fault mm/memory.c:4290 [inline] handle_pte_fault mm/memory.c:4548 [inline] __handle_mm_fault+0x1325/0x3570 mm/memory.c:4683 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4781 do_user_addr_fault+0x54a/0x12a0 arch/x86/mm/fault.c:1397 handle_page_fault arch/x86/mm/fault.c:1484 [inline] exc_page_fault+0xa2/0x1a0 arch/x86/mm/fault.c:1540 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:568 RIP: 0033:0x7f4f823b6f9b Code: Unable to access opcode bytes at RIP 0x7f4f823b6f71. RSP: 002b:00007ffee4e9c120 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 000000000000016a RCX: 0000000000000000 RDX: 0000000040000001 RSI: 00007ffee4e9c1ac RDI: 00000000ffffffff RBP: 00007ffee4e9c1ac R08: 00000000000003c7 R09: 00007ffee4fa5080 R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000032 R13: 00000000000ec12f R14: 0000000000000000 R15: 00007ffee4e9c210 Out of memory (oom_kill_allocating_task): Killed process 2493 (syz-executor.6) total-vm:93280kB, anon-rss:384kB, file-rss:34436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 oom_reaper: reaped process 2493 (syz-executor.6), now anon-rss:0kB, file-rss:34432kB, shmem-rss:0kB syz-executor.6 invoked oom-killer: gfp_mask=0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=1000 CPU: 1 PID: 7815 Comm: syz-executor.6 Tainted: G W 5.16.0-rc8-next-20220105 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 dump_header+0x106/0x60f mm/oom_kill.c:464 oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages_vma+0xde/0x500 mm/mempolicy.c:2232 do_anonymous_page mm/memory.c:3757 [inline] handle_pte_fault mm/memory.c:4546 [inline] __handle_mm_fault+0xfb3/0x3570 mm/memory.c:4683 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4781 faultin_page mm/gup.c:944 [inline] __get_user_pages+0x522/0x1120 mm/gup.c:1165 populate_vma_page_range+0x24d/0x330 mm/gup.c:1497 __mm_populate+0x1ea/0x3e0 mm/gup.c:1606 do_mlock+0x291/0x6b0 mm/mlock.c:689 __do_sys_mlock mm/mlock.c:697 [inline] __se_sys_mlock mm/mlock.c:695 [inline] __x64_sys_mlock+0x55/0x80 mm/mlock.c:695 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f4f823b8b19 Code: Unable to access opcode bytes at RIP 0x7f4f823b8aef. RSP: 002b:00007f4f7f92e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 RAX: ffffffffffffffda RBX: 00007f4f824cbf60 RCX: 00007f4f823b8b19 RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020400000 RBP: 00007f4f82412f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffee4e9beff R14: 00007f4f7f92e300 R15: 0000000000022000 Mem-Info: active_anon:6810 inactive_anon:254520 isolated_anon:0 active_file:4 inactive_file:32 isolated_file:0 unevictable:1712 dirty:1 writeback:0 slab_reclaimable:9586 slab_unreclaimable:60263 mapped:69648 shmem:98 pagetables:4184 bounce:0 kernel_misc_reclaimable:0 free:2883 free_pcp:71 free_cma:0 Node 0 active_anon:27240kB inactive_anon:1018080kB active_file:100kB inactive_file:128kB unevictable:6848kB isolated(anon):0kB isolated(file):0kB mapped:278592kB dirty:4kB writeback:0kB shmem:392kB writeback_tmp:0kB kernel_stack:6752kB pagetables:16736kB all_unreclaimable? yes Node 0 DMA free:6512kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8308kB active_file:0kB inactive_file:8kB unevictable:84kB writepending:0kB present:15992kB managed:15360kB mlocked:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:5020kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:0KB active_anon:27240kB inactive_anon:1009772kB active_file:84kB inactive_file:4kB unevictable:6520kB writepending:4kB present:2080640kB managed:1660840kB mlocked:6520kB bounce:0kB free_pcp:284kB local_pcp:284kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 2*4kB (UE) 9*8kB (UE) 2*16kB (UM) 8*32kB (UM) 2*64kB (UE) 1*128kB (E) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 6512kB Node 0 DMA32: 11*4kB (UM) 4*8kB (U) 5*16kB (U) 162*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5340kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 153 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105108 pages reserved oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz6,mems_allowed=0,global_oom,task_memcg=/syz6,task=syz-executor.6,pid=7815,uid=0 Out of memory (oom_kill_allocating_task): Killed process 7814 (syz-executor.6) total-vm:93412kB, anon-rss:7240kB, file-rss:34084kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 oom_reaper: reaped process 7814 (syz-executor.6), now anon-rss:6856kB, file-rss:34816kB, shmem-rss:0kB cgroup: fork rejected by pids controller in /syz1