kmem_cache_node           51KB         51KB
kmem_cache                78KB         78KB
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=37181,uid=0
BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 37181, name: syz-executor.5
preempt_count: 1, expected: 0
RCU nest depth: 0, expected: 0
3 locks held by syz-executor.5/37181:
 #0: ffff8880486aa428 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline]
 #0: ffff8880486aa428 (&mm->mmap_lock#2){++++}-{3:3}, at: do_user_addr_fault+0x346/0x12a0 arch/x86/mm/fault.c:1338
 #1: ffffffff85278828 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline]
 #1: ffffffff85278828 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063
 #2: ffff88800cdc88a0 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline]
 #2: ffff88800cdc88a0 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline]
 #2: ffff88800cdc88a0 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 0 PID: 37181 Comm: syz-executor.5 Not tainted 5.16.0-next-20220111 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9583
 __mutex_lock_common kernel/locking/mutex.c:577 [inline]
 __mutex_lock+0x9e/0x1480 kernel/locking/mutex.c:733
 futex_cleanup_begin kernel/futex/core.c:1058 [inline]
 futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110
 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893
 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003
 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114
 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline]
 __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063
 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394
 alloc_pages_vma+0xde/0x500 mm/mempolicy.c:2232
 do_anonymous_page mm/memory.c:3779 [inline]
 handle_pte_fault mm/memory.c:4568 [inline]
 __handle_mm_fault+0xfb3/0x3570 mm/memory.c:4705
 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4803
 do_user_addr_fault+0x54a/0x12a0 arch/x86/mm/fault.c:1397
 handle_page_fault arch/x86/mm/fault.c:1484 [inline]
 exc_page_fault+0xa2/0x1a0 arch/x86/mm/fault.c:1540
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:568
RIP: 0033:0x7fe53d96207f
Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 b0 fb 04 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50
RSP: 002b:00007ffe8418b240 EFLAGS: 00010246
RAX: 00007fe53aee6000 RBX: 0000000000021000 RCX: 00007fe53d9b1c27
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe53aee7000
RBP: 00007ffe8418b310 R08: 00000000ffffffff R09: 00007fe53af06700
R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffe8418b420
R13: 00007fe53af06700 R14: 0000000000000000 R15: 0000000000022000
 </TASK>

=============================
[ BUG: Invalid wait context ]
5.16.0-next-20220111 #1 Tainted: G        W        
-----------------------------
syz-executor.5/37181 is trying to lock:
ffff88800cdc92b0 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_cleanup_begin kernel/futex/core.c:1058 [inline]
ffff88800cdc92b0 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110
other info that might help us debug this:
context-{4:4}
3 locks held by syz-executor.5/37181:
 #0: ffff8880486aa428 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline]
 #0: ffff8880486aa428 (&mm->mmap_lock#2){++++}-{3:3}, at: do_user_addr_fault+0x346/0x12a0 arch/x86/mm/fault.c:1338
 #1: ffffffff85278828 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline]
 #1: ffffffff85278828 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063
 #2: ffff88800cdc88a0 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline]
 #2: ffff88800cdc88a0 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline]
 #2: ffff88800cdc88a0 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144
stack backtrace:
CPU: 0 PID: 37181 Comm: syz-executor.5 Tainted: G        W         5.16.0-next-20220111 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
 print_lock_invalid_wait_context kernel/locking/lockdep.c:4678 [inline]
 check_wait_context kernel/locking/lockdep.c:4739 [inline]
 __lock_acquire.cold+0xc8/0x3b4 kernel/locking/lockdep.c:4977
 lock_acquire kernel/locking/lockdep.c:5639 [inline]
 lock_acquire+0x1a2/0x4d0 kernel/locking/lockdep.c:5604
 __mutex_lock_common kernel/locking/mutex.c:600 [inline]
 __mutex_lock+0x136/0x1480 kernel/locking/mutex.c:733
 futex_cleanup_begin kernel/futex/core.c:1058 [inline]
 futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110
 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893
 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003
 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114
 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline]
 __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063
 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394
 alloc_pages_vma+0xde/0x500 mm/mempolicy.c:2232
 do_anonymous_page mm/memory.c:3779 [inline]
 handle_pte_fault mm/memory.c:4568 [inline]
 __handle_mm_fault+0xfb3/0x3570 mm/memory.c:4705
 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4803
 do_user_addr_fault+0x54a/0x12a0 arch/x86/mm/fault.c:1397
 handle_page_fault arch/x86/mm/fault.c:1484 [inline]
 exc_page_fault+0xa2/0x1a0 arch/x86/mm/fault.c:1540
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:568
RIP: 0033:0x7fe53d96207f
Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 b0 fb 04 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50
RSP: 002b:00007ffe8418b240 EFLAGS: 00010246
RAX: 00007fe53aee6000 RBX: 0000000000021000 RCX: 00007fe53d9b1c27
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe53aee7000
RBP: 00007ffe8418b310 R08: 00000000ffffffff R09: 00007fe53af06700
R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffe8418b420
R13: 00007fe53af06700 R14: 0000000000000000 R15: 0000000000022000
 </TASK>
Out of memory (oom_kill_allocating_task): Killed process 37181 (syz-executor.5) total-vm:93544kB, anon-rss:388kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
oom_reaper: reaped process 37181 (syz-executor.5), now anon-rss:0kB, file-rss:34064kB, shmem-rss:0kB
warn_alloc: 2 callbacks suppressed
syz-executor.5: vmalloc error: size 776892416, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0
CPU: 0 PID: 37182 Comm: syz-executor.5 Tainted: G        W         5.16.0-next-20220111 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
 warn_alloc.cold+0x95/0x18a mm/page_alloc.c:4238
 __vmalloc_area_node mm/vmalloc.c:2978 [inline]
 __vmalloc_node_range+0xd50/0xfd0 mm/vmalloc.c:3106
 __vmalloc_node+0xb5/0x100 mm/vmalloc.c:3156
 alloc_one_pg_vec_page net/packet/af_packet.c:4291 [inline]
 alloc_pg_vec net/packet/af_packet.c:4316 [inline]
 packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4401
 packet_setsockopt+0x1b4f/0x3c40 net/packet/af_packet.c:3778
 __sys_setsockopt+0x180/0x2a0 net/socket.c:2180
 __do_sys_setsockopt net/socket.c:2191 [inline]
 __se_sys_setsockopt net/socket.c:2188 [inline]
 __x64_sys_setsockopt+0xba/0x150 net/socket.c:2188
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fe53d9b1b19
Code: Unable to access opcode bytes at RIP 0x7fe53d9b1aef.
RSP: 002b:00007fe53af27188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007fe53dac4f60 RCX: 00007fe53d9b1b19
RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003
RBP: 00007fe53da0bf6d R08: 0000000000000010 R09: 0000000000000000
R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe8418b29f R14: 00007fe53af27300 R15: 0000000000022000
 </TASK>
Mem-Info:
active_anon:5877 inactive_anon:56513 isolated_anon:0
 active_file:389 inactive_file:331 isolated_file:4
 unevictable:0 dirty:0 writeback:0
 slab_reclaimable:8182 slab_unreclaimable:67815
 mapped:69955 shmem:163 pagetables:5914 bounce:0
 kernel_misc_reclaimable:0
 free:4041 free_pcp:192 free_cma:0
Node 0 active_anon:23508kB inactive_anon:226052kB active_file:1640kB inactive_file:1324kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:279820kB dirty:0kB writeback:0kB shmem:652kB writeback_tmp:0kB kernel_stack:9216kB pagetables:23656kB all_unreclaimable? no
Node 0 DMA free:6508kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 1617 1617 1617
Node 0 DMA32 free:9656kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:2048KB active_anon:23508kB inactive_anon:226220kB active_file:1856kB inactive_file:1896kB unevictable:0kB writepending:0kB present:2080640kB managed:1660796kB mlocked:0kB bounce:0kB free_pcp:476kB local_pcp:216kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 6508kB
Node 0 DMA32: 944*4kB (UMH) 279*8kB (UMH) 104*16kB (UMH) 17*32kB (UMH) 7*64kB (UH) 5*128kB (UH) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10072kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
940 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
524158 pages RAM
0 pages HighMem/MovableOnly
105119 pages reserved