kmem_cache_node 51KB 51KB
kmem_cache 82KB 82KB
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=11038,uid=0
BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11038, name: syz-executor.1
preempt_count: 1, expected: 0
RCU nest depth: 0, expected: 0
3 locks held by syz-executor.1/11038:
#0: ffff88804156e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1668 [inline]
#0: ffff88804156e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_setsockopt+0x156/0x3c40 net/packet/af_packet.c:3761
#1: ffffffff85278968 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline]
#1: ffffffff85278968 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063
#2: ffff88804423d8e0 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline]
#2: ffff88804423d8e0 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline]
#2: ffff88804423d8e0 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 0 PID: 11038 Comm: syz-executor.1 Not tainted 5.16.0-next-20220113 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
__might_resched.cold+0x222/0x26b kernel/sched/core.c:9583
__mutex_lock_common kernel/locking/mutex.c:577 [inline]
__mutex_lock+0x9e/0x1480 kernel/locking/mutex.c:733
futex_cleanup_begin kernel/futex/core.c:1058 [inline]
futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110
__oom_kill_process+0x373/0xf90 mm/oom_kill.c:893
oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003
out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114
__alloc_pages_may_oom mm/page_alloc.c:4332 [inline]
__alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063
__alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394
alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271
vm_area_alloc_pages mm/vmalloc.c:2904 [inline]
__vmalloc_area_node mm/vmalloc.c:2967 [inline]
__vmalloc_node_range+0xb2a/0xfd0 mm/vmalloc.c:3106
__vmalloc_node+0xb5/0x100 mm/vmalloc.c:3156
alloc_one_pg_vec_page net/packet/af_packet.c:4291 [inline]
alloc_pg_vec net/packet/af_packet.c:4316 [inline]
packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4401
packet_setsockopt+0x1b4f/0x3c40 net/packet/af_packet.c:3778
__sys_setsockopt+0x180/0x2a0 net/socket.c:2180
__do_sys_setsockopt net/socket.c:2191 [inline]
__se_sys_setsockopt net/socket.c:2188 [inline]
__x64_sys_setsockopt+0xba/0x150 net/socket.c:2188
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f3e76c80b19
Code: Unable to access opcode bytes at RIP 0x7f3e76c80aef.
RSP: 002b:00007f3e741f6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007f3e76d93f60 RCX: 00007f3e76c80b19
RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003
RBP: 00007f3e76cdaf6d R08: 0000000000000010 R09: 0000000000000000
R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd8623bdcf R14: 00007f3e741f6300 R15: 0000000000022000
=============================
[ BUG: Invalid wait context ]
5.16.0-next-20220113 #1 Tainted: G W
-----------------------------
syz-executor.1/11038 is trying to lock:
ffff88804423e2f0 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_cleanup_begin kernel/futex/core.c:1058 [inline]
ffff88804423e2f0 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110
other info that might help us debug this:
context-{4:4}
3 locks held by syz-executor.1/11038:
#0: ffff88804156e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1668 [inline]
#0: ffff88804156e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_setsockopt+0x156/0x3c40 net/packet/af_packet.c:3761
#1: ffffffff85278968 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline]
#1: ffffffff85278968 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063
#2: ffff88804423d8e0 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline]
#2: ffff88804423d8e0 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline]
#2: ffff88804423d8e0 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144
stack backtrace:
CPU: 0 PID: 11038 Comm: syz-executor.1 Tainted: G W 5.16.0-next-20220113 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
print_lock_invalid_wait_context kernel/locking/lockdep.c:4678 [inline]
check_wait_context kernel/locking/lockdep.c:4739 [inline]
__lock_acquire.cold+0xc8/0x3b4 kernel/locking/lockdep.c:4977
lock_acquire kernel/locking/lockdep.c:5639 [inline]
lock_acquire+0x1a2/0x4d0 kernel/locking/lockdep.c:5604
__mutex_lock_common kernel/locking/mutex.c:600 [inline]
__mutex_lock+0x136/0x1480 kernel/locking/mutex.c:733
futex_cleanup_begin kernel/futex/core.c:1058 [inline]
futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110
__oom_kill_process+0x373/0xf90 mm/oom_kill.c:893
oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003
out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114
__alloc_pages_may_oom mm/page_alloc.c:4332 [inline]
__alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063
__alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394
alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271
vm_area_alloc_pages mm/vmalloc.c:2904 [inline]
__vmalloc_area_node mm/vmalloc.c:2967 [inline]
__vmalloc_node_range+0xb2a/0xfd0 mm/vmalloc.c:3106
__vmalloc_node+0xb5/0x100 mm/vmalloc.c:3156
alloc_one_pg_vec_page net/packet/af_packet.c:4291 [inline]
alloc_pg_vec net/packet/af_packet.c:4316 [inline]
packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4401
packet_setsockopt+0x1b4f/0x3c40 net/packet/af_packet.c:3778
__sys_setsockopt+0x180/0x2a0 net/socket.c:2180
__do_sys_setsockopt net/socket.c:2191 [inline]
__se_sys_setsockopt net/socket.c:2188 [inline]
__x64_sys_setsockopt+0xba/0x150 net/socket.c:2188
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f3e76c80b19
Code: Unable to access opcode bytes at RIP 0x7f3e76c80aef.
RSP: 002b:00007f3e741f6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007f3e76d93f60 RCX: 00007f3e76c80b19
RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003
RBP: 00007f3e76cdaf6d R08: 0000000000000010 R09: 0000000000000000
R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd8623bdcf R14: 00007f3e741f6300 R15: 0000000000022000
Out of memory (oom_kill_allocating_task): Killed process 11036 (syz-executor.1) total-vm:93412kB, anon-rss:376kB, file-rss:34180kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
oom_reaper: reaped process 11036 (syz-executor.1), now anon-rss:0kB, file-rss:34176kB, shmem-rss:0kB
syz-executor.5 invoked oom-killer: gfp_mask=0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
CPU: 1 PID: 11039 Comm: syz-executor.5 Tainted: G W 5.16.0-next-20220113 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
dump_header+0x106/0x60f mm/oom_kill.c:464
oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994
out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114
__alloc_pages_may_oom mm/page_alloc.c:4332 [inline]
__alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063
__alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394
alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271
vm_area_alloc_pages mm/vmalloc.c:2904 [inline]
__vmalloc_area_node mm/vmalloc.c:2967 [inline]
__vmalloc_node_range+0xb2a/0xfd0 mm/vmalloc.c:3106
__vmalloc_node+0xb5/0x100 mm/vmalloc.c:3156
alloc_one_pg_vec_page net/packet/af_packet.c:4291 [inline]
alloc_pg_vec net/packet/af_packet.c:4316 [inline]
packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4401
packet_setsockopt+0x1b4f/0x3c40 net/packet/af_packet.c:3778
__sys_setsockopt+0x180/0x2a0 net/socket.c:2180
__do_sys_setsockopt net/socket.c:2191 [inline]
__se_sys_setsockopt net/socket.c:2188 [inline]
__x64_sys_setsockopt+0xba/0x150 net/socket.c:2188
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fa6ae478b19
Code: Unable to access opcode bytes at RIP 0x7fa6ae478aef.
RSP: 002b:00007fa6ab9ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007fa6ae58bf60 RCX: 00007fa6ae478b19
RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003
RBP: 00007fa6ae4d2f6d R08: 0000000000000010 R09: 0000000000000000
R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc5a1eedef R14: 00007fa6ab9ee300 R15: 0000000000022000
Mem-Info:
active_anon:3828 inactive_anon:50849 isolated_anon:0
active_file:0 inactive_file:46 isolated_file:0
unevictable:0 dirty:0 writeback:0
slab_reclaimable:7318 slab_unreclaimable:61482
mapped:69639 shmem:124 pagetables:2487 bounce:0
kernel_misc_reclaimable:0
free:3625 free_pcp:267 free_cma:0
Node 0 active_anon:15312kB inactive_anon:203396kB active_file:0kB inactive_file:520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278724kB dirty:0kB writeback:0kB shmem:496kB writeback_tmp:0kB kernel_stack:5664kB pagetables:9948kB all_unreclaimable? no
Node 0 DMA free:6492kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 1617 1617 1617
Node 0 DMA32 free:79592kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:4096KB active_anon:15312kB inactive_anon:203480kB active_file:184kB inactive_file:764kB unevictable:0kB writepending:0kB present:2080640kB managed:1660796kB mlocked:0kB bounce:0kB free_pcp:1120kB local_pcp:528kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6492kB
Node 0 DMA32: 2069*4kB (UMEH) 162*8kB (UMEH) 672*16kB (UMEH) 501*32kB (UMH) 376*64kB (UH) 247*128kB (UH) 126*256kB (UH) 2*512kB (UH) 1*1024kB (H) 0*2048kB 0*4096kB = 126340kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
277 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
524158 pages RAM
0 pages HighMem/MovableOnly
105119 pages reserved
Unreclaimable slab info:
Name Used Total
pid_4 7KB 7KB
pid_3 7KB 7KB
pid_2 57KB 78KB
IEEE-802.15.4-MAC 63KB 63KB
IEEE-802.15.4-RAW 63KB 63KB
p9_req_t 8KB 8KB
fib6_nodes 32KB 32KB
ip6_dst_cache 23KB 45KB
PINGv6 63KB 63KB
RAWv6 189KB 189KB
UDPLITEv6 62KB 62KB
UDPv6 62KB 62KB
tw_sock_TCPv6 7KB 7KB
TCPv6 62KB 62KB
scsi_sense_cache 8KB 8KB
sd_ext_cdb 3KB 3KB
virtio_scsi_cmd 16KB 16KB
bio-96 7KB 7KB
sgpool-128 119KB 267KB
sgpool-64 63KB 63KB
sgpool-32 159KB 220KB
sgpool-16 82KB 82KB
sgpool-8 78KB 78KB
bio-224 7KB 7KB
mqueue_inode_cache 60KB 60KB
nfs_commit_data 15KB 15KB
nfs_write_data 47KB 47KB
jbd2_inode 7KB 7KB
ext4_system_zone 7KB 7KB
ext4_io_end_vec 15KB 15KB
ext4_bio_post_read_ctx 15KB 15KB
io_kiocb 45KB 60KB
kioctx 31KB 31KB
aio_kiocb 7KB 7KB
dio 30KB 30KB
fasync_cache 7KB 7KB
pid_namespace 7KB 7KB
rpc_buffers 31KB 31KB
rpc_tasks 3KB 3KB
UNIX-STREAM 139KB 279KB
UNIX 242KB 310KB
ip4-frags 15KB 15KB
UDP-Lite 63KB 63KB
tcp_bind_bucket 8KB 8KB
inet_peer_cache 4KB 4KB
ip_fib_trie 8KB 8KB
ip_fib_alias 15KB 15KB
ip_dst_cache 8KB 8KB
PING 31KB 31KB
RAW 93KB 93KB
UDP 220KB 220KB
request_sock_TCP 7KB 7KB
TCP 58KB 58KB
hugetlbfs_inode_cache 31KB 31KB
bio-216 11KB 11KB
ep_head 8KB 8KB
eventpoll_pwq 19KB 19KB
eventpoll_epi 39KB 39KB
inotify_inode_mark 50KB 50KB
request_queue 62KB 62KB
blkdev_ioc 8KB 8KB
bio-160 44KB 44KB
biovec-max 573KB 573KB
biovec-64 315KB 330KB
biovec-16 41KB 41KB
user_namespace 15KB 15KB
uid_cache 7KB 7KB
dmaengine-unmap-2 4KB 4KB
audit_buffer 7KB 7KB
skbuff_fclone_cache 111KB 120KB
skbuff_head_cache 1897KB 1897KB
file_lock_cache 35KB 35KB
file_lock_ctx 7KB 7KB
fsnotify_mark_connector 32KB 32KB
net_namespace 124KB 124KB
taskstats 53KB 53KB
proc_dir_entry 362KB 363KB
pde_opener 27KB 27KB
seq_file 46KB 60KB
sigqueue 23KB 43KB
shmem_inode_cache 1424KB 1591KB
kernfs_iattrs_cache 230KB 231KB
kernfs_node_cache 5249KB 5249KB
mnt_cache 173KB 173KB
filp 983KB 1305KB
names_cache 5180KB 5367KB
hashtab_node 278KB 278KB
ebitmap_node 1149KB 1149KB
avtab_node 4980KB 4980KB
avc_node 35KB 35KB
lsm_inode_cache 2642KB 3083KB
lsm_file_cache 52KB 136KB
key_jar 47KB 47KB
uts_namespace 15KB 15KB
nsproxy 7KB 7KB
vm_area_struct 1297KB 1444KB
mm_struct 283KB 504KB
fs_cache 42KB 72KB
files_cache 200KB 255KB
signal_cache 374KB 577KB
sighand_cache 420KB 420KB
task_struct 1444KB 1712KB
cred_jar 113KB 204KB
anon_vma_chain 307KB 350KB
anon_vma 361KB 380KB
pid 75KB 97KB
Acpi-Operand 68KB 126KB
Acpi-ParseExt 35KB 35KB
Acpi-Parse 47KB 63KB
Acpi-State 31KB 47KB
Acpi-Namespace 28KB 28KB
shared_policy_node 4KB 4KB
numa_policy 7KB 7KB
perf_event 63KB 63KB
trace_event_file 175KB 175KB
ftrace_event_field 296KB 296KB
pool_workqueue 48KB 48KB
task_group 16KB 16KB
vmap_area 42KB 55KB
page->ptl 285KB 346KB
kmemleak_scan_area 26KB 35KB
kmemleak_object 138652KB 149118KB
kmalloc-cg-8k 96KB 96KB
kmalloc-cg-4k 592KB 704KB
kmalloc-cg-2k 844KB 992KB
kmalloc-cg-1k 210KB 256KB
kmalloc-cg-512 234KB 288KB
kmalloc-cg-256 16KB 16KB
kmalloc-cg-192 32KB 32KB
kmalloc-cg-128 16KB 16KB
kmalloc-cg-96 32KB 32KB
kmalloc-cg-64 24KB 24KB
kmalloc-cg-32 32KB 88KB
kmalloc-cg-16 8KB 8KB
kmalloc-cg-8 15KB 15KB
kmalloc-8k 4768KB 4768KB
kmalloc-4k 5328KB 6144KB
kmalloc-2k 4180KB 4448KB
kmalloc-1k 13152KB 13152KB
kmalloc-512 7520KB 7520KB
kmalloc-256 978KB 1112KB
kmalloc-192 428KB 628KB
kmalloc-128 420KB 656KB
kmalloc-96 612KB 612KB
kmalloc-64 1616KB 1616KB
kmalloc-32 685KB 780KB
kmalloc-16 318KB 340KB
kmalloc-8 267KB 282KB
kmem_cache_node 51KB 51KB
kmem_cache 82KB 82KB
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=11039,uid=0
Out of memory (oom_kill_allocating_task): Killed process 11039 (syz-executor.5) total-vm:93412kB, anon-rss:436kB, file-rss:34956kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
oom_reaper: reaped process 11039 (syz-executor.5), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB
Bluetooth: hci0: command 0x0406 tx timeout