kmem_cache_node 51KB 51KB kmem_cache 82KB 82KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=14939,uid=0 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 14939, name: syz-executor.1 preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 3 locks held by syz-executor.1/14939: #0: ffff888017d54130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1668 [inline] #0: ffff888017d54130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_setsockopt+0x156/0x3c40 net/packet/af_packet.c:3761 #1: ffffffff85278968 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline] #1: ffffffff85278968 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063 #2: ffff88800f8f3e20 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #2: ffff88800f8f3e20 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline] #2: ffff88800f8f3e20 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 0 PID: 14939 Comm: syz-executor.1 Not tainted 5.16.0-next-20220113 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9583 __mutex_lock_common kernel/locking/mutex.c:577 [inline] __mutex_lock+0x9e/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 vm_area_alloc_pages mm/vmalloc.c:2904 [inline] __vmalloc_area_node mm/vmalloc.c:2967 [inline] __vmalloc_node_range+0xb2a/0xfd0 mm/vmalloc.c:3106 __vmalloc_node+0xb5/0x100 mm/vmalloc.c:3156 alloc_one_pg_vec_page net/packet/af_packet.c:4291 [inline] alloc_pg_vec net/packet/af_packet.c:4316 [inline] packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4401 packet_setsockopt+0x1b4f/0x3c40 net/packet/af_packet.c:3778 __sys_setsockopt+0x180/0x2a0 net/socket.c:2180 __do_sys_setsockopt net/socket.c:2191 [inline] __se_sys_setsockopt net/socket.c:2188 [inline] __x64_sys_setsockopt+0xba/0x150 net/socket.c:2188 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f3baa1e2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3ba7758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007f3baa2f5f60 RCX: 00007f3baa1e2b19 RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 RBP: 00007f3baa23cf6d R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe5b94febf R14: 00007f3ba7758300 R15: 0000000000022000 ============================= [ BUG: Invalid wait context ] 5.16.0-next-20220113 #1 Tainted: G W ----------------------------- syz-executor.1/14939 is trying to lock: ffff88800f8f4830 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_cleanup_begin kernel/futex/core.c:1058 [inline] ffff88800f8f4830 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 other info that might help us debug this: context-{4:4} 3 locks held by syz-executor.1/14939: #0: ffff888017d54130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1668 [inline] #0: ffff888017d54130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_setsockopt+0x156/0x3c40 net/packet/af_packet.c:3761 #1: ffffffff85278968 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline] #1: ffffffff85278968 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063 #2: ffff88800f8f3e20 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #2: ffff88800f8f3e20 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline] #2: ffff88800f8f3e20 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 stack backtrace: CPU: 0 PID: 14939 Comm: syz-executor.1 Tainted: G W 5.16.0-next-20220113 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 print_lock_invalid_wait_context kernel/locking/lockdep.c:4678 [inline] check_wait_context kernel/locking/lockdep.c:4739 [inline] __lock_acquire.cold+0xc8/0x3b4 kernel/locking/lockdep.c:4977 lock_acquire kernel/locking/lockdep.c:5639 [inline] lock_acquire+0x1a2/0x4d0 kernel/locking/lockdep.c:5604 __mutex_lock_common kernel/locking/mutex.c:600 [inline] __mutex_lock+0x136/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 vm_area_alloc_pages mm/vmalloc.c:2904 [inline] __vmalloc_area_node mm/vmalloc.c:2967 [inline] __vmalloc_node_range+0xb2a/0xfd0 mm/vmalloc.c:3106 __vmalloc_node+0xb5/0x100 mm/vmalloc.c:3156 alloc_one_pg_vec_page net/packet/af_packet.c:4291 [inline] alloc_pg_vec net/packet/af_packet.c:4316 [inline] packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4401 packet_setsockopt+0x1b4f/0x3c40 net/packet/af_packet.c:3778 __sys_setsockopt+0x180/0x2a0 net/socket.c:2180 __do_sys_setsockopt net/socket.c:2191 [inline] __se_sys_setsockopt net/socket.c:2188 [inline] __x64_sys_setsockopt+0xba/0x150 net/socket.c:2188 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f3baa1e2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3ba7758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007f3baa2f5f60 RCX: 00007f3baa1e2b19 RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 RBP: 00007f3baa23cf6d R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe5b94febf R14: 00007f3ba7758300 R15: 0000000000022000 Out of memory (oom_kill_allocating_task): Killed process 14937 (syz-executor.1) total-vm:93412kB, anon-rss:392kB, file-rss:34072kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 oom_reaper: reaped process 14937 (syz-executor.1), now anon-rss:0kB, file-rss:34040kB, shmem-rss:0kB syz-executor.4 invoked oom-killer: gfp_mask=0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 CPU: 0 PID: 14952 Comm: syz-executor.4 Tainted: G W 5.16.0-next-20220113 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 dump_header+0x106/0x60f mm/oom_kill.c:464 oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 vm_area_alloc_pages mm/vmalloc.c:2904 [inline] __vmalloc_area_node mm/vmalloc.c:2967 [inline] __vmalloc_node_range+0xb2a/0xfd0 mm/vmalloc.c:3106 __vmalloc_node+0xb5/0x100 mm/vmalloc.c:3156 alloc_one_pg_vec_page net/packet/af_packet.c:4291 [inline] alloc_pg_vec net/packet/af_packet.c:4316 [inline] packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4401 packet_setsockopt+0x1b4f/0x3c40 net/packet/af_packet.c:3778 __sys_setsockopt+0x180/0x2a0 net/socket.c:2180 __do_sys_setsockopt net/socket.c:2191 [inline] __se_sys_setsockopt net/socket.c:2188 [inline] __x64_sys_setsockopt+0xba/0x150 net/socket.c:2188 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fa791d25b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa78f29b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007fa791e38f60 RCX: 00007fa791d25b19 RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 RBP: 00007fa791d7ff6d R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcb1bf9d9f R14: 00007fa78f29b300 R15: 0000000000022000 Mem-Info: active_anon:3760 inactive_anon:39439 isolated_anon:0 active_file:35 inactive_file:6 isolated_file:0 unevictable:2 dirty:26 writeback:21 slab_reclaimable:7413 slab_unreclaimable:62060 mapped:69651 shmem:146 pagetables:2322 bounce:0 kernel_misc_reclaimable:0 free:3294 free_pcp:436 free_cma:0 Node 0 active_anon:15040kB inactive_anon:157756kB active_file:140kB inactive_file:24kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:278604kB dirty:104kB writeback:84kB shmem:584kB writeback_tmp:0kB kernel_stack:5600kB pagetables:9288kB all_unreclaimable? no Node 0 DMA free:6504kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:6672kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:4096KB active_anon:15124kB inactive_anon:157504kB active_file:448kB inactive_file:628kB unevictable:8kB writepending:356kB present:2080640kB managed:1660796kB mlocked:0kB bounce:0kB free_pcp:1744kB local_pcp:816kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6504kB Node 0 DMA32: 490*4kB (UME) 228*8kB (UME) 103*16kB (UME) 33*32kB (UME) 6*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7000kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 223 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105119 pages reserved Unreclaimable slab info: Name Used Total pid_4 7KB 7KB pid_3 7KB 7KB pid_2 43KB 60KB IEEE-802.15.4-MAC 63KB 63KB IEEE-802.15.4-RAW 63KB 63KB p9_req_t 8KB 8KB ip6-frags 7KB 7KB fib6_nodes 32KB 32KB ip6_dst_cache 35KB 45KB PINGv6 63KB 63KB RAWv6 220KB 220KB UDPLITEv6 62KB 62KB UDPv6 62KB 62KB tw_sock_TCPv6 15KB 15KB TCPv6 62KB 62KB scsi_sense_cache 8KB 8KB sd_ext_cdb 3KB 3KB virtio_scsi_cmd 16KB 16KB bio-96 11KB 11KB sgpool-128 127KB 297KB sgpool-64 63KB 63KB sgpool-32 126KB 126KB sgpool-16 67KB 105KB sgpool-8 60KB 75KB bio-224 7KB 7KB mqueue_inode_cache 60KB 60KB nfs_commit_data 15KB 15KB nfs_write_data 47KB 47KB jbd2_inode 11KB 11KB ext4_system_zone 7KB 7KB ext4_io_end_vec 19KB 19KB ext4_bio_post_read_ctx 15KB 15KB io_kiocb 30KB 45KB kioctx 31KB 31KB aio_kiocb 7KB 7KB dnotify_mark 3KB 3KB dnotify_struct 3KB 3KB dio 30KB 30KB fasync_cache 7KB 7KB pid_namespace 7KB 7KB posix_timers_cache 15KB 15KB rpc_buffers 31KB 31KB rpc_tasks 3KB 3KB UNIX-STREAM 164KB 279KB UNIX 147KB 279KB ip4-frags 7KB 7KB UDP-Lite 63KB 63KB tcp_bind_bucket 8KB 8KB inet_peer_cache 8KB 8KB ip_fib_trie 8KB 8KB ip_fib_alias 11KB 11KB ip_dst_cache 12KB 12KB PING 62KB 62KB RAW 125KB 125KB UDP 138KB 220KB request_sock_TCP 15KB 15KB TCP 58KB 58KB hugetlbfs_inode_cache 31KB 31KB bio-216 11KB 11KB ep_head 8KB 8KB eventpoll_pwq 19KB 19KB eventpoll_epi 43KB 43KB inotify_inode_mark 54KB 54KB request_queue 31KB 31KB blkdev_ioc 8KB 8KB bio-160 48KB 48KB biovec-max 688KB 688KB biovec-64 131KB 204KB biovec-16 41KB 41KB user_namespace 30KB 30KB uid_cache 7KB 7KB dmaengine-unmap-2 4KB 4KB audit_buffer 7KB 7KB skbuff_fclone_cache 30KB 67KB skbuff_head_cache 1370KB 1383KB file_lock_cache 39KB 39KB file_lock_ctx 7KB 7KB fsnotify_mark_connector 36KB 36KB net_namespace 93KB 93KB taskstats 30KB 30KB proc_dir_entry 345KB 345KB pde_opener 27KB 27KB seq_file 45KB 45KB sigqueue 51KB 51KB shmem_inode_cache 1527KB 1527KB kernfs_iattrs_cache 240KB 250KB kernfs_node_cache 5196KB 5234KB mnt_cache 201KB 204KB filp 1505KB 1905KB names_cache 12159KB 12359KB hashtab_node 278KB 278KB ebitmap_node 1149KB 1149KB avtab_node 4976KB 4976KB avc_node 39KB 39KB lsm_inode_cache 2639KB 3043KB lsm_file_cache 81KB 124KB key_jar 47KB 47KB uts_namespace 15KB 15KB nsproxy 15KB 15KB vm_area_struct 1265KB 1368KB mm_struct 332KB 535KB fs_cache 53KB 80KB files_cache 195KB 318KB signal_cache 374KB 637KB sighand_cache 427KB 450KB task_struct 1384KB 1551KB cred_jar 134KB 184KB anon_vma_chain 306KB 334KB anon_vma 336KB 352KB pid 51KB 78KB Acpi-Operand 80KB 138KB Acpi-ParseExt 35KB 35KB Acpi-Parse 39KB 55KB Acpi-State 43KB 59KB Acpi-Namespace 28KB 28KB shared_policy_node 4KB 4KB numa_policy 7KB 7KB perf_event 63KB 63KB trace_event_file 175KB 175KB ftrace_event_field 296KB 296KB pool_workqueue 48KB 48KB task_group 16KB 16KB vmap_area 47KB 47KB page->ptl 253KB 271KB kmemleak_scan_area 27KB 27KB kmemleak_object 136584KB 149665KB kmalloc-cg-8k 320KB 320KB kmalloc-cg-4k 704KB 928KB kmalloc-cg-2k 816KB 864KB kmalloc-cg-1k 208KB 288KB kmalloc-cg-512 266KB 336KB kmalloc-cg-256 16KB 16KB kmalloc-cg-192 32KB 32KB kmalloc-cg-128 12KB 12KB kmalloc-cg-96 28KB 28KB kmalloc-cg-64 24KB 24KB kmalloc-cg-32 49KB 80KB kmalloc-cg-16 8KB 8KB kmalloc-cg-8 15KB 15KB kmalloc-8k 4672KB 4832KB kmalloc-4k 6256KB 6752KB kmalloc-2k 3920KB 4416KB kmalloc-1k 9220KB 9220KB kmalloc-512 5764KB 5792KB kmalloc-256 970KB 1088KB kmalloc-192 365KB 604KB kmalloc-128 433KB 656KB kmalloc-96 502KB 532KB kmalloc-64 1357KB 1360KB kmalloc-32 713KB 756KB kmalloc-16 319KB 324KB kmalloc-8 263KB 270KB kmem_cache_node 51KB 51KB kmem_cache 82KB 82KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0,global_oom,task_memcg=/syz4,task=syz-executor.4,pid=14952,uid=0 Out of memory (oom_kill_allocating_task): Killed process 14948 (syz-executor.4) total-vm:93412kB, anon-rss:392kB, file-rss:33984kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 oom_reaper: reaped process 14948 (syz-executor.4), now anon-rss:0kB, file-rss:33980kB, shmem-rss:0kB syz-executor.2 invoked oom-killer: gfp_mask=0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 CPU: 1 PID: 14950 Comm: syz-executor.2 Tainted: G W 5.16.0-next-20220113 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 dump_header+0x106/0x60f mm/oom_kill.c:464 oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 vm_area_alloc_pages mm/vmalloc.c:2904 [inline] __vmalloc_area_node mm/vmalloc.c:2967 [inline] __vmalloc_node_range+0xb2a/0xfd0 mm/vmalloc.c:3106 __vmalloc_node+0xb5/0x100 mm/vmalloc.c:3156 alloc_one_pg_vec_page net/packet/af_packet.c:4291 [inline] alloc_pg_vec net/packet/af_packet.c:4316 [inline] packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4401 packet_setsockopt+0x1b4f/0x3c40 net/packet/af_packet.c:3778 __sys_setsockopt+0x180/0x2a0 net/socket.c:2180 __do_sys_setsockopt net/socket.c:2191 [inline] __se_sys_setsockopt net/socket.c:2188 [inline] __x64_sys_setsockopt+0xba/0x150 net/socket.c:2188 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f7dc656db19 Code: Unable to access opcode bytes at RIP 0x7f7dc656daef. RSP: 002b:00007f7dc3ae3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007f7dc6680f60 RCX: 00007f7dc656db19 RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 RBP: 00007f7dc65c7f6d R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffceb6ca5ef R14: 00007f7dc3ae3300 R15: 0000000000022000 Mem-Info: active_anon:3781 inactive_anon:39399 isolated_anon:0 active_file:19 inactive_file:11 isolated_file:0 unevictable:2 dirty:0 writeback:0 slab_reclaimable:7399 slab_unreclaimable:62061 mapped:69634 shmem:158 pagetables:2302 bounce:0 kernel_misc_reclaimable:0 free:3579 free_pcp:196 free_cma:0 Node 0 active_anon:15124kB inactive_anon:157596kB active_file:76kB inactive_file:44kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:632kB writeback_tmp:0kB kernel_stack:5600kB pagetables:9208kB all_unreclaimable? no Node 0 DMA free:6504kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:7812kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:4096KB active_anon:15124kB inactive_anon:157680kB active_file:168kB inactive_file:0kB unevictable:8kB writepending:0kB present:2080640kB managed:1660796kB mlocked:0kB bounce:0kB free_pcp:784kB local_pcp:784kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6504kB Node 0 DMA32: 572*4kB (UME) 230*8kB (UME) 116*16kB (UME) 39*32kB (UME) 9*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8064kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 190 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105119 pages reserved Unreclaimable slab info: Name Used Total pid_4 7KB 7KB pid_3 7KB 7KB pid_2 43KB 60KB IEEE-802.15.4-MAC 63KB 63KB IEEE-802.15.4-RAW 63KB 63KB p9_req_t 8KB 8KB ip6-frags 7KB 7KB fib6_nodes 32KB 32KB ip6_dst_cache 35KB 45KB PINGv6 63KB 63KB RAWv6 220KB 220KB UDPLITEv6 62KB 62KB UDPv6 62KB 62KB tw_sock_TCPv6 15KB 15KB TCPv6 62KB 62KB scsi_sense_cache 8KB 8KB sd_ext_cdb 3KB 3KB virtio_scsi_cmd 16KB 16KB bio-96 11KB 11KB sgpool-128 127KB 297KB sgpool-64 63KB 63KB sgpool-32 126KB 126KB sgpool-16 67KB 105KB sgpool-8 60KB 75KB bio-224 7KB 7KB mqueue_inode_cache 60KB 60KB nfs_commit_data 15KB 15KB nfs_write_data 47KB 47KB jbd2_inode 11KB 11KB ext4_system_zone 7KB 7KB ext4_io_end_vec 19KB 19KB ext4_bio_post_read_ctx 15KB 15KB io_kiocb 30KB 45KB kioctx 31KB 31KB aio_kiocb 7KB 7KB dnotify_mark 3KB 3KB dnotify_struct 3KB 3KB dio 30KB 30KB fasync_cache 7KB 7KB pid_namespace 7KB 7KB posix_timers_cache 15KB 15KB rpc_buffers 31KB 31KB rpc_tasks 3KB 3KB UNIX-STREAM 164KB 279KB UNIX 147KB 279KB ip4-frags 7KB 7KB UDP-Lite 63KB 63KB tcp_bind_bucket 8KB 8KB inet_peer_cache 8KB 8KB ip_fib_trie 8KB 8KB ip_fib_alias 11KB 11KB ip_dst_cache 12KB 12KB PING 62KB 62KB RAW 125KB 125KB UDP 138KB 220KB request_sock_TCP 15KB 15KB TCP 58KB 58KB hugetlbfs_inode_cache 31KB 31KB bio-216 11KB 11KB ep_head 8KB 8KB eventpoll_pwq 19KB 19KB eventpoll_epi 43KB 43KB inotify_inode_mark 54KB 54KB request_queue 31KB 31KB blkdev_ioc 8KB 8KB bio-160 48KB 48KB biovec-max 688KB 688KB biovec-64 131KB 204KB biovec-16 41KB 41KB user_namespace 30KB 30KB uid_cache 7KB 7KB dmaengine-unmap-2 4KB 4KB audit_buffer 7KB 7KB skbuff_fclone_cache 30KB 67KB skbuff_head_cache 1383KB 1383KB file_lock_cache 39KB 39KB file_lock_ctx 7KB 7KB fsnotify_mark_connector 36KB 36KB net_namespace 93KB 93KB taskstats 30KB 30KB proc_dir_entry 345KB 345KB pde_opener 27KB 27KB seq_file 45KB 45KB sigqueue 51KB 51KB shmem_inode_cache 1527KB 1527KB kernfs_iattrs_cache 240KB 250KB kernfs_node_cache 5196KB 5234KB mnt_cache 201KB 204KB filp 1505KB 1905KB names_cache 12159KB 12359KB hashtab_node 278KB 278KB ebitmap_node 1149KB 1149KB avtab_node 4976KB 4976KB avc_node 39KB 39KB lsm_inode_cache 2639KB 3043KB lsm_file_cache 81KB 124KB key_jar 47KB 47KB uts_namespace 15KB 15KB nsproxy 15KB 15KB vm_area_struct 1265KB 1368KB mm_struct 332KB 535KB fs_cache 53KB 80KB files_cache 195KB 318KB signal_cache 374KB 637KB sighand_cache 427KB 450KB task_struct 1384KB 1551KB cred_jar 134KB 184KB anon_vma_chain 306KB 334KB anon_vma 336KB 352KB pid 51KB 78KB Acpi-Operand 80KB 138KB Acpi-ParseExt 35KB 35KB Acpi-Parse 39KB 55KB Acpi-State 43KB 59KB Acpi-Namespace 28KB 28KB shared_policy_node 4KB 4KB numa_policy 7KB 7KB perf_event 63KB 63KB trace_event_file 175KB 175KB ftrace_event_field 296KB 296KB pool_workqueue 48KB 48KB task_group 16KB 16KB vmap_area 47KB 47KB page->ptl 253KB 271KB kmemleak_scan_area 27KB 27KB kmemleak_object 136631KB 149665KB kmalloc-cg-8k 320KB 320KB kmalloc-cg-4k 704KB 928KB kmalloc-cg-2k 816KB 864KB kmalloc-cg-1k 208KB 288KB kmalloc-cg-512 266KB 336KB kmalloc-cg-256 16KB 16KB kmalloc-cg-192 32KB 32KB kmalloc-cg-128 12KB 12KB kmalloc-cg-96 28KB 28KB kmalloc-cg-64 24KB 24KB kmalloc-cg-32 49KB 80KB kmalloc-cg-16 8KB 8KB kmalloc-cg-8 15KB 15KB kmalloc-8k 4672KB 4832KB kmalloc-4k 6256KB 6752KB kmalloc-2k 3920KB 4416KB kmalloc-1k 9252KB 9252KB kmalloc-512 5784KB 5792KB kmalloc-256 970KB 1088KB kmalloc-192 365KB 604KB kmalloc-128 433KB 656KB kmalloc-96 502KB 532KB kmalloc-64 1360KB 1360KB kmalloc-32 713KB 756KB kmalloc-16 319KB 324KB kmalloc-8 263KB 270KB kmem_cache_node 51KB 51KB kmem_cache 82KB 82KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=14950,uid=0 Out of memory (oom_kill_allocating_task): Killed process 14944 (syz-executor.2) total-vm:93412kB, anon-rss:392kB, file-rss:33956kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 oom_reaper: reaped process 14944 (syz-executor.2), now anon-rss:0kB, file-rss:33952kB, shmem-rss:0kB warn_alloc: 3 callbacks suppressed syz-executor.2: vmalloc error: size 347013120, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 CPU: 0 PID: 14950 Comm: syz-executor.2 Tainted: G W 5.16.0-next-20220113 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 warn_alloc.cold+0x95/0x18a mm/page_alloc.c:4238 __vmalloc_area_node mm/vmalloc.c:2978 [inline] __vmalloc_node_range+0xd50/0xfd0 mm/vmalloc.c:3106 __vmalloc_node+0xb5/0x100 mm/vmalloc.c:3156 alloc_one_pg_vec_page net/packet/af_packet.c:4291 [inline] alloc_pg_vec net/packet/af_packet.c:4316 [inline] packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4401 packet_setsockopt+0x1b4f/0x3c40 net/packet/af_packet.c:3778 __sys_setsockopt+0x180/0x2a0 net/socket.c:2180 __do_sys_setsockopt net/socket.c:2191 [inline] __se_sys_setsockopt net/socket.c:2188 [inline] __x64_sys_setsockopt+0xba/0x150 net/socket.c:2188 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f7dc656db19 Code: Unable to access opcode bytes at RIP 0x7f7dc656daef. RSP: 002b:00007f7dc3ae3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007f7dc6680f60 RCX: 00007f7dc656db19 RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 RBP: 00007f7dc65c7f6d R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffceb6ca5ef R14: 00007f7dc3ae3300 R15: 0000000000022000 Mem-Info: active_anon:3781 inactive_anon:39378 isolated_anon:0 active_file:84 inactive_file:187 isolated_file:26 unevictable:2 dirty:0 writeback:0 slab_reclaimable:7399 slab_unreclaimable:62082 mapped:69844 shmem:158 pagetables:2302 bounce:0 kernel_misc_reclaimable:0 free:1955 free_pcp:219 free_cma:0 Node 0 active_anon:15124kB inactive_anon:157512kB active_file:420kB inactive_file:664kB unevictable:8kB isolated(anon):0kB isolated(file):104kB mapped:279376kB dirty:0kB writeback:0kB shmem:632kB writeback_tmp:0kB kernel_stack:5568kB pagetables:9208kB all_unreclaimable? no Node 0 DMA free:6504kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:2324kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:10240KB active_anon:15124kB inactive_anon:157680kB active_file:168kB inactive_file:408kB unevictable:8kB writepending:0kB present:2080640kB managed:1660796kB mlocked:0kB bounce:0kB free_pcp:568kB local_pcp:316kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6500kB Node 0 DMA32: 1157*4kB (UMEH) 18*8kB (UMH) 4*16kB (UH) 2*32kB (H) 3*64kB (H) 2*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5348kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 442 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105119 pages reserved mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium loop5: detected capacity change from 0 to 2048 loop6: detected capacity change from 0 to 2048 EXT4-fs error (device loop5): __ext4_fill_super:5277: inode #2: comm syz-executor.5: iget: root inode unallocated EXT4-fs (loop5): get root inode failed EXT4-fs (loop5): mount failed EXT4-fs error (device loop6): __ext4_fill_super:5277: inode #2: comm syz-executor.6: iget: root inode unallocated EXT4-fs (loop6): get root inode failed EXT4-fs (loop6): mount failed mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium syz-executor.7 invoked oom-killer: gfp_mask=0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 CPU: 0 PID: 14968 Comm: syz-executor.7 Tainted: G W 5.16.0-next-20220113 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 dump_header+0x106/0x60f mm/oom_kill.c:464 oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 vm_area_alloc_pages mm/vmalloc.c:2904 [inline] __vmalloc_area_node mm/vmalloc.c:2967 [inline] __vmalloc_node_range+0xb2a/0xfd0 mm/vmalloc.c:3106 __vmalloc_node+0xb5/0x100 mm/vmalloc.c:3156 alloc_one_pg_vec_page net/packet/af_packet.c:4291 [inline] alloc_pg_vec net/packet/af_packet.c:4316 [inline] packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4401 packet_setsockopt+0x1b4f/0x3c40 net/packet/af_packet.c:3778 __sys_setsockopt+0x180/0x2a0 net/socket.c:2180 __do_sys_setsockopt net/socket.c:2191 [inline] __se_sys_setsockopt net/socket.c:2188 [inline] __x64_sys_setsockopt+0xba/0x150 net/socket.c:2188 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fb6f9ab8b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb6f702e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007fb6f9bcbf60 RCX: 00007fb6f9ab8b19 RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 RBP: 00007fb6f9b12f6d R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd929b05ef R14: 00007fb6f702e300 R15: 0000000000022000 Mem-Info: active_anon:3780 inactive_anon:39612 isolated_anon:0 active_file:27 inactive_file:86 isolated_file:1 unevictable:2 dirty:8 writeback:0 slab_reclaimable:7396 slab_unreclaimable:61401 mapped:69661 shmem:146 pagetables:2382 bounce:0 kernel_misc_reclaimable:0 free:3363 free_pcp:1 free_cma:0 Node 0 active_anon:15120kB inactive_anon:158448kB active_file:108kB inactive_file:344kB unevictable:8kB isolated(anon):0kB isolated(file):24kB mapped:278644kB dirty:32kB writeback:0kB shmem:584kB writeback_tmp:0kB kernel_stack:5760kB pagetables:9528kB all_unreclaimable? no Node 0 DMA free:6512kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:6940kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:2048KB active_anon:15120kB inactive_anon:158448kB active_file:0kB inactive_file:432kB unevictable:8kB writepending:32kB present:2080640kB managed:1660796kB mlocked:0kB bounce:0kB free_pcp:84kB local_pcp:4kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6512kB Node 0 DMA32: 446*4kB (UME) 223*8kB (UME) 150*16kB (UME) 37*32kB (UME) 5*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7472kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 251 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105119 pages reserved Unreclaimable slab info: Name Used Total pid_4 7KB 7KB pid_3 7KB 7KB pid_2 54KB 60KB IEEE-802.15.4-MAC 63KB 63KB IEEE-802.15.4-RAW 63KB 63KB p9_req_t 8KB 8KB ip6-frags 7KB 7KB fib6_nodes 32KB 32KB ip6_dst_cache 35KB 45KB PINGv6 63KB 63KB RAWv6 220KB 220KB UDPLITEv6 62KB 62KB UDPv6 62KB 62KB tw_sock_TCPv6 15KB 15KB TCPv6 62KB 62KB scsi_sense_cache 8KB 8KB sd_ext_cdb 3KB 3KB virtio_scsi_cmd 16KB 16KB bio-96 11KB 11KB sgpool-128 127KB 297KB sgpool-64 63KB 63KB sgpool-32 157KB 157KB sgpool-16 105KB 105KB sgpool-8 78KB 78KB bio-224 7KB 7KB mqueue_inode_cache 60KB 60KB nfs_commit_data 15KB 15KB nfs_write_data 47KB 47KB jbd2_inode 11KB 11KB ext4_system_zone 7KB 7KB ext4_io_end_vec 19KB 19KB ext4_bio_post_read_ctx 15KB 15KB io_kiocb 30KB 45KB kioctx 31KB 31KB aio_kiocb 7KB 7KB dnotify_mark 3KB 3KB dnotify_struct 3KB 3KB dio 30KB 30KB fasync_cache 7KB 7KB pid_namespace 7KB 7KB posix_timers_cache 15KB 15KB rpc_buffers 31KB 31KB rpc_tasks 3KB 3KB UNIX-STREAM 164KB 279KB UNIX 147KB 279KB ip4-frags 7KB 7KB UDP-Lite 63KB 63KB tcp_bind_bucket 8KB 8KB inet_peer_cache 8KB 8KB ip_fib_trie 8KB 8KB ip_fib_alias 11KB 11KB ip_dst_cache 12KB 12KB PING 62KB 62KB RAW 125KB 125KB UDP 138KB 220KB request_sock_TCP 15KB 15KB TCP 58KB 58KB hugetlbfs_inode_cache 31KB 31KB bio-216 11KB 11KB ep_head 8KB 8KB eventpoll_pwq 19KB 19KB eventpoll_epi 43KB 43KB inotify_inode_mark 54KB 54KB request_queue 31KB 31KB blkdev_ioc 8KB 8KB bio-160 48KB 48KB biovec-max 986KB 986KB biovec-64 346KB 346KB biovec-16 56KB 56KB user_namespace 30KB 30KB uid_cache 7KB 7KB dmaengine-unmap-2 4KB 4KB audit_buffer 7KB 7KB skbuff_fclone_cache 30KB 67KB skbuff_head_cache 1458KB 1458KB file_lock_cache 39KB 39KB file_lock_ctx 7KB 7KB fsnotify_mark_connector 36KB 36KB net_namespace 93KB 93KB taskstats 30KB 30KB proc_dir_entry 345KB 345KB pde_opener 27KB 27KB seq_file 45KB 45KB sigqueue 51KB 51KB shmem_inode_cache 1442KB 1527KB kernfs_iattrs_cache 240KB 250KB kernfs_node_cache 5196KB 5234KB mnt_cache 201KB 204KB filp 1298KB 1807KB names_cache 8848KB 8857KB hashtab_node 278KB 278KB ebitmap_node 1149KB 1149KB avtab_node 4976KB 4976KB avc_node 39KB 39KB lsm_inode_cache 2653KB 3043KB lsm_file_cache 68KB 124KB key_jar 47KB 47KB uts_namespace 15KB 15KB nsproxy 15KB 15KB vm_area_struct 1351KB 1368KB mm_struct 332KB 535KB fs_cache 53KB 80KB files_cache 195KB 318KB signal_cache 374KB 637KB sighand_cache 427KB 450KB task_struct 1511KB 1551KB cred_jar 112KB 184KB anon_vma_chain 318KB 334KB anon_vma 341KB 348KB pid 51KB 78KB Acpi-Operand 80KB 138KB Acpi-ParseExt 35KB 35KB Acpi-Parse 39KB 55KB Acpi-State 43KB 59KB Acpi-Namespace 28KB 28KB shared_policy_node 4KB 4KB numa_policy 7KB 7KB perf_event 63KB 63KB trace_event_file 175KB 175KB ftrace_event_field 296KB 296KB pool_workqueue 48KB 48KB task_group 16KB 16KB vmap_area 47KB 47KB page->ptl 271KB 271KB kmemleak_scan_area 27KB 27KB kmemleak_object 138472KB 149665KB kmalloc-cg-8k 320KB 320KB kmalloc-cg-4k 592KB 928KB kmalloc-cg-2k 840KB 864KB kmalloc-cg-1k 208KB 288KB kmalloc-cg-512 240KB 336KB kmalloc-cg-256 16KB 16KB kmalloc-cg-192 32KB 32KB kmalloc-cg-128 12KB 12KB kmalloc-cg-96 28KB 28KB kmalloc-cg-64 24KB 24KB kmalloc-cg-32 44KB 80KB kmalloc-cg-16 8KB 8KB kmalloc-cg-8 15KB 15KB kmalloc-8k 4800KB 4832KB kmalloc-4k 5936KB 6720KB kmalloc-2k 3968KB 4416KB kmalloc-1k 9732KB 9732KB kmalloc-512 6048KB 6048KB kmalloc-256 986KB 1088KB kmalloc-192 365KB 604KB kmalloc-128 423KB 656KB kmalloc-96 524KB 532KB kmalloc-64 1404KB 1404KB kmalloc-32 713KB 756KB kmalloc-16 316KB 324KB kmalloc-8 263KB 270KB kmem_cache_node 51KB 51KB kmem_cache 82KB 82KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=14968,uid=0 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 14968, name: syz-executor.7 preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 INFO: lockdep is turned off. Preemption disabled at: [<0000000000000000>] 0x0 CPU: 0 PID: 14968 Comm: syz-executor.7 Tainted: G W 5.16.0-next-20220113 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9583 __mutex_lock_common kernel/locking/mutex.c:577 [inline] __mutex_lock+0x9e/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 vm_area_alloc_pages mm/vmalloc.c:2904 [inline] __vmalloc_area_node mm/vmalloc.c:2967 [inline] __vmalloc_node_range+0xb2a/0xfd0 mm/vmalloc.c:3106 __vmalloc_node+0xb5/0x100 mm/vmalloc.c:3156 alloc_one_pg_vec_page net/packet/af_packet.c:4291 [inline] alloc_pg_vec net/packet/af_packet.c:4316 [inline] packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4401 packet_setsockopt+0x1b4f/0x3c40 net/packet/af_packet.c:3778 __sys_setsockopt+0x180/0x2a0 net/socket.c:2180 __do_sys_setsockopt net/socket.c:2191 [inline] __se_sys_setsockopt net/socket.c:2188 [inline] __x64_sys_setsockopt+0xba/0x150 net/socket.c:2188 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fb6f9ab8b19 Code: Unable to access opcode bytes at RIP 0x7fb6f9ab8aef. RSP: 002b:00007fb6f702e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007fb6f9bcbf60 RCX: 00007fb6f9ab8b19 RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 RBP: 00007fb6f9b12f6d R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd929b05ef R14: 00007fb6f702e300 R15: 0000000000022000 Out of memory (oom_kill_allocating_task): Killed process 14967 (syz-executor.7) total-vm:93412kB, anon-rss:396kB, file-rss:34040kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 oom_reaper: reaped process 14967 (syz-executor.7), now anon-rss:0kB, file-rss:34032kB, shmem-rss:0kB syz-executor.5 invoked oom-killer: gfp_mask=0x1100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 CPU: 1 PID: 14984 Comm: syz-executor.5 Tainted: G W 5.16.0-next-20220113 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 dump_header+0x106/0x60f mm/oom_kill.c:464 oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages_vma+0xde/0x500 mm/mempolicy.c:2232 wp_page_copy+0x1b7/0x2720 mm/memory.c:3012 do_wp_page+0x285/0x1d50 mm/memory.c:3322 handle_pte_fault mm/memory.c:4588 [inline] __handle_mm_fault+0x1183/0x3570 mm/memory.c:4705 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4803 do_user_addr_fault+0x54a/0x12a0 arch/x86/mm/fault.c:1397 handle_page_fault arch/x86/mm/fault.c:1484 [inline] exc_page_fault+0xa2/0x1a0 arch/x86/mm/fault.c:1540 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:568 RIP: 0033:0x7fcb151598f6 Code: Unable to access opcode bytes at RIP 0x7fcb151598cc. RSP: 002b:00007ffda482bba8 EFLAGS: 00010246 RAX: 0000555556f7a6c0 RBX: 0000000000000001 RCX: 00007fcb161f73c0 RDX: 00007fcb161f73c0 RSI: 00007fcb1528fef0 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fcb1528fef0 R10: 0000555556f7a400 R11: 0000000000000202 R12: 0000000000000001 R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffda482bcc0 Mem-Info: active_anon:3780 inactive_anon:39591 isolated_anon:0 active_file:53 inactive_file:20 isolated_file:26 unevictable:2 dirty:8 writeback:0 slab_reclaimable:7396 slab_unreclaimable:61298 mapped:69661 shmem:146 pagetables:2382 bounce:0 kernel_misc_reclaimable:0 free:43758 free_pcp:168 free_cma:0 Node 0 active_anon:15120kB inactive_anon:158364kB active_file:212kB inactive_file:80kB unevictable:8kB isolated(anon):0kB isolated(file):104kB mapped:278644kB dirty:32kB writeback:0kB shmem:584kB writeback_tmp:0kB kernel_stack:5728kB pagetables:9528kB all_unreclaimable? no Node 0 DMA free:9320kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:187168kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:4096KB active_anon:15120kB inactive_anon:158448kB active_file:268kB inactive_file:0kB unevictable:8kB writepending:32kB present:2080640kB managed:1660796kB mlocked:0kB bounce:0kB free_pcp:356kB local_pcp:36kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 642*4kB (U) 6*8kB (U) 3*16kB (U) 4*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 9320kB Node 0 DMA32: 943*4kB (UME) 1436*8kB (UME) 645*16kB (UMEH) 600*32kB (UMEH) 451*64kB (U) 329*128kB (UM) 84*256kB (U) 49*512kB (U) 23*1024kB (U) 1*2048kB (U) 0*4096kB = 187948kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 251 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105119 pages reserved Unreclaimable slab info: Name Used Total pid_4 7KB 7KB pid_3 7KB 7KB pid_2 54KB 60KB IEEE-802.15.4-MAC 63KB 63KB IEEE-802.15.4-RAW 63KB 63KB p9_req_t 8KB 8KB ip6-frags 7KB 7KB fib6_nodes 32KB 32KB ip6_dst_cache 35KB 45KB PINGv6 63KB 63KB RAWv6 220KB 220KB UDPLITEv6 62KB 62KB UDPv6 62KB 62KB tw_sock_TCPv6 15KB 15KB TCPv6 62KB 62KB scsi_sense_cache 8KB 8KB sd_ext_cdb 3KB 3KB virtio_scsi_cmd 16KB 16KB bio-96 11KB 11KB sgpool-128 127KB 297KB sgpool-64 63KB 63KB sgpool-32 157KB 157KB sgpool-16 105KB 105KB sgpool-8 78KB 78KB bio-224 7KB 7KB mqueue_inode_cache 60KB 60KB nfs_commit_data 15KB 15KB nfs_write_data 47KB 47KB jbd2_inode 11KB 11KB ext4_system_zone 7KB 7KB ext4_io_end_vec 19KB 19KB ext4_bio_post_read_ctx 15KB 15KB io_kiocb 30KB 45KB kioctx 31KB 31KB aio_kiocb 7KB 7KB dnotify_mark 3KB 3KB dnotify_struct 3KB 3KB dio 30KB 30KB fasync_cache 7KB 7KB pid_namespace 7KB 7KB posix_timers_cache 15KB 15KB rpc_buffers 31KB 31KB rpc_tasks 3KB 3KB UNIX-STREAM 164KB 279KB UNIX 147KB 279KB ip4-frags 7KB 7KB UDP-Lite 63KB 63KB tcp_bind_bucket 8KB 8KB inet_peer_cache 8KB 8KB ip_fib_trie 8KB 8KB ip_fib_alias 11KB 11KB ip_dst_cache 12KB 12KB PING 62KB 62KB RAW 125KB 125KB UDP 138KB 220KB request_sock_TCP 15KB 15KB TCP 58KB 58KB hugetlbfs_inode_cache 31KB 31KB bio-216 11KB 11KB ep_head 8KB 8KB eventpoll_pwq 19KB 19KB eventpoll_epi 43KB 43KB inotify_inode_mark 54KB 54KB request_queue 31KB 31KB blkdev_ioc 8KB 8KB bio-160 48KB 48KB biovec-max 986KB 986KB biovec-64 362KB 362KB biovec-16 56KB 56KB user_namespace 30KB 30KB uid_cache 7KB 7KB dmaengine-unmap-2 4KB 4KB audit_buffer 7KB 7KB skbuff_fclone_cache 30KB 67KB skbuff_head_cache 1481KB 1481KB file_lock_cache 39KB 39KB file_lock_ctx 7KB 7KB fsnotify_mark_connector 36KB 36KB net_namespace 93KB 93KB taskstats 30KB 30KB proc_dir_entry 345KB 345KB pde_opener 27KB 27KB seq_file 45KB 45KB sigqueue 51KB 51KB shmem_inode_cache 1442KB 1527KB kernfs_iattrs_cache 240KB 250KB kernfs_node_cache 5196KB 5234KB mnt_cache 201KB 204KB filp 1298KB 1807KB names_cache 8079KB 8232KB hashtab_node 278KB 278KB ebitmap_node 1149KB 1149KB avtab_node 4976KB 4976KB avc_node 39KB 39KB lsm_inode_cache 2653KB 3043KB lsm_file_cache 68KB 124KB key_jar 47KB 47KB uts_namespace 15KB 15KB nsproxy 15KB 15KB vm_area_struct 1351KB 1368KB mm_struct 332KB 535KB fs_cache 53KB 80KB files_cache 195KB 318KB signal_cache 374KB 637KB sighand_cache 427KB 450KB task_struct 1511KB 1551KB cred_jar 94KB 184KB anon_vma_chain 318KB 334KB anon_vma 340KB 348KB pid 51KB 78KB Acpi-Operand 80KB 138KB Acpi-ParseExt 35KB 35KB Acpi-Parse 39KB 55KB Acpi-State 43KB 59KB Acpi-Namespace 28KB 28KB shared_policy_node 4KB 4KB numa_policy 7KB 7KB perf_event 63KB 63KB trace_event_file 175KB 175KB ftrace_event_field 296KB 296KB pool_workqueue 48KB 48KB task_group 16KB 16KB vmap_area 47KB 47KB page->ptl 271KB 271KB kmemleak_scan_area 27KB 27KB kmemleak_object 138609KB 149665KB kmalloc-cg-8k 320KB 320KB kmalloc-cg-4k 504KB 896KB kmalloc-cg-2k 840KB 864KB kmalloc-cg-1k 208KB 288KB kmalloc-cg-512 240KB 336KB kmalloc-cg-256 16KB 16KB kmalloc-cg-192 32KB 32KB kmalloc-cg-128 12KB 12KB kmalloc-cg-96 28KB 28KB kmalloc-cg-64 24KB 24KB kmalloc-cg-32 44KB 80KB kmalloc-cg-16 8KB 8KB kmalloc-cg-8 15KB 15KB kmalloc-8k 4800KB 4832KB kmalloc-4k 5824KB 6720KB kmalloc-2k 3968KB 4416KB kmalloc-1k 9828KB 9828KB kmalloc-512 6112KB 6112KB kmalloc-256 986KB 1088KB kmalloc-192 365KB 604KB kmalloc-128 423KB 656KB kmalloc-96 523KB 532KB kmalloc-64 1412KB 1412KB kmalloc-32 713KB 756KB kmalloc-16 316KB 324KB kmalloc-8 263KB 270KB kmem_cache_node 51KB 51KB kmem_cache 82KB 82KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=14984,uid=0 Out of memory (oom_kill_allocating_task): Killed process 14984 (syz-executor.5) total-vm:93280kB, anon-rss:388kB, file-rss:34748kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:0 oom_reaper: reaped process 14984 (syz-executor.5), now anon-rss:0kB, file-rss:34748kB, shmem-rss:0kB loop6: detected capacity change from 0 to 2048 EXT4-fs error (device loop6): __ext4_fill_super:5277: inode #2: comm syz-executor.6: iget: root inode unallocated EXT4-fs (loop6): get root inode failed EXT4-fs (loop6): mount failed