kmem_cache_node 51KB 51KB kmem_cache 82KB 82KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0,global_oom,task_memcg=/syz4,task=syz-executor.4,pid=4606,uid=0 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4606, name: syz-executor.4 preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 2 locks held by syz-executor.4/4606: #0: ffffffff85278aa8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline] #0: ffffffff85278aa8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063 #1: ffff88805bdb2360 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #1: ffff88805bdb2360 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline] #1: ffff88805bdb2360 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 0 PID: 4606 Comm: syz-executor.4 Not tainted 5.16.0-next-20220118 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9583 __mutex_lock_common kernel/locking/mutex.c:577 [inline] __mutex_lock+0x9e/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x11e7/0x14b0 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 alloc_slab_page mm/slub.c:1799 [inline] allocate_slab mm/slub.c:1952 [inline] new_slab+0x272/0x360 mm/slub.c:2004 ___slab_alloc+0x849/0xc60 mm/slub.c:3018 __slab_alloc.constprop.0+0x45/0x80 mm/slub.c:3105 slab_alloc_node mm/slub.c:3196 [inline] kmem_cache_alloc_node+0x370/0x490 mm/slub.c:3266 alloc_task_struct_node kernel/fork.c:171 [inline] dup_task_struct kernel/fork.c:883 [inline] copy_process+0x2f73/0x6cb0 kernel/fork.c:1998 kernel_clone+0xe7/0xa60 kernel/fork.c:2555 __do_sys_clone+0xc8/0x110 kernel/fork.c:2672 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f7258475f41 Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 RSP: 002b:00007ffeb3e51508 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f7255987700 RCX: 00007f7258475f41 RDX: 00007f72559879d0 RSI: 00007f72559872f0 RDI: 00000000003d0f00 RBP: 00007ffeb3e51740 R08: 00007f7255987700 R09: 00007f7255987700 R10: 00007f72559879d0 R11: 0000000000000206 R12: 00007ffeb3e515be R13: 00007ffeb3e515bf R14: 00007f7255987300 R15: 0000000000022000 ============================= [ BUG: Invalid wait context ] 5.16.0-next-20220118 #1 Tainted: G W ----------------------------- syz-executor.4/4606 is trying to lock: ffff88805bdb2d70 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_cleanup_begin kernel/futex/core.c:1058 [inline] ffff88805bdb2d70 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 other info that might help us debug this: context-{4:4} 2 locks held by syz-executor.4/4606: #0: ffffffff85278aa8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline] #0: ffffffff85278aa8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063 #1: ffff88805bdb2360 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #1: ffff88805bdb2360 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline] #1: ffff88805bdb2360 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 stack backtrace: CPU: 0 PID: 4606 Comm: syz-executor.4 Tainted: G W 5.16.0-next-20220118 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 print_lock_invalid_wait_context kernel/locking/lockdep.c:4678 [inline] check_wait_context kernel/locking/lockdep.c:4739 [inline] __lock_acquire.cold+0xc8/0x3b4 kernel/locking/lockdep.c:4977 lock_acquire kernel/locking/lockdep.c:5639 [inline] lock_acquire+0x1a2/0x4d0 kernel/locking/lockdep.c:5604 __mutex_lock_common kernel/locking/mutex.c:600 [inline] __mutex_lock+0x136/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x11e7/0x14b0 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 alloc_slab_page mm/slub.c:1799 [inline] allocate_slab mm/slub.c:1952 [inline] new_slab+0x272/0x360 mm/slub.c:2004 ___slab_alloc+0x849/0xc60 mm/slub.c:3018 __slab_alloc.constprop.0+0x45/0x80 mm/slub.c:3105 slab_alloc_node mm/slub.c:3196 [inline] kmem_cache_alloc_node+0x370/0x490 mm/slub.c:3266 alloc_task_struct_node kernel/fork.c:171 [inline] dup_task_struct kernel/fork.c:883 [inline] copy_process+0x2f73/0x6cb0 kernel/fork.c:1998 kernel_clone+0xe7/0xa60 kernel/fork.c:2555 __do_sys_clone+0xc8/0x110 kernel/fork.c:2672 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f7258475f41 Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 RSP: 002b:00007ffeb3e51508 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f7255987700 RCX: 00007f7258475f41 RDX: 00007f72559879d0 RSI: 00007f72559872f0 RDI: 00000000003d0f00 RBP: 00007ffeb3e51740 R08: 00007f7255987700 R09: 00007f7255987700 R10: 00007f72559879d0 R11: 0000000000000206 R12: 00007ffeb3e515be R13: 00007ffeb3e515bf R14: 00007f7255987300 R15: 0000000000022000 Out of memory (oom_kill_allocating_task): Killed process 4606 (syz-executor.4) total-vm:93808kB, anon-rss:432kB, file-rss:35080kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 oom_reaper: reaped process 4606 (syz-executor.4), now anon-rss:0kB, file-rss:34408kB, shmem-rss:0kB EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) syz-executor.5 invoked oom-killer: gfp_mask=0x1141cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_WRITE), order=0, oom_score_adj=1000 CPU: 0 PID: 4626 Comm: syz-executor.5 Tainted: G W 5.16.0-next-20220118 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 dump_header+0x106/0x60f mm/oom_kill.c:464 oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994 out_of_memory+0x11e7/0x14b0 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 filemap_alloc_folio mm/filemap.c:987 [inline] __filemap_get_folio+0x65c/0xfd0 mm/filemap.c:1990 pagecache_get_page+0x2e/0x220 mm/folio-compat.c:125 ext4_da_write_begin+0x383/0xa30 fs/ext4/inode.c:2941 generic_perform_write+0x208/0x510 mm/filemap.c:3765 ext4_buffered_write_iter+0x1a2/0x390 fs/ext4/file.c:268 ext4_file_write_iter+0x4ee/0x1890 fs/ext4/file.c:677 call_write_iter include/linux/fs.h:2074 [inline] new_sync_write+0x437/0x660 fs/read_write.c:503 vfs_write+0x7d1/0xae0 fs/read_write.c:590 ksys_write+0x12d/0x250 fs/read_write.c:643 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7ff598b7bb19 Code: Unable to access opcode bytes at RIP 0x7ff598b7baef. RSP: 002b:00007ff5960f1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007ff598c8ef60 RCX: 00007ff598b7bb19 RDX: 0000000020000081 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 00007ff598bd5f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdd997842f R14: 00007ff5960f1300 R15: 0000000000022000 Mem-Info: active_anon:2666 inactive_anon:43258 isolated_anon:0 active_file:23 inactive_file:22 isolated_file:0 unevictable:0 dirty:1 writeback:0 slab_reclaimable:6970 slab_unreclaimable:59909 mapped:69634 shmem:113 pagetables:995 bounce:0 kernel_misc_reclaimable:0 free:3308 free_pcp:100 free_cma:0 Node 0 active_anon:10664kB inactive_anon:173032kB active_file:92kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:4kB writeback:0kB shmem:452kB writeback_tmp:0kB kernel_stack:4352kB pagetables:3980kB all_unreclaimable? yes Node 0 DMA free:6492kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:44kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:6740kB boost:8192kB min:13312kB low:14968kB high:16624kB reserved_highatomic:4096KB active_anon:10664kB inactive_anon:172988kB active_file:88kB inactive_file:100kB unevictable:0kB writepending:0kB present:2080640kB managed:1660804kB mlocked:0kB bounce:0kB free_pcp:400kB local_pcp:240kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (U) 3*8kB (ME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 6492kB Node 0 DMA32: 575*4kB (UMH) 175*8kB (UMEH) 66*16kB (UMEH) 6*32kB (MH) 2*64kB (H) 3*128kB (H) 1*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 6740kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 162 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105117 pages reserved Unreclaimable slab info: Name Used Total pid_4 7KB 7KB pid_3 7KB 7KB pid_2 37KB 37KB IEEE-802.15.4-MAC 63KB 63KB IEEE-802.15.4-RAW 63KB 63KB fib6_nodes 28KB 28KB ip6_dst_cache 45KB 45KB PINGv6 31KB 31KB RAWv6 157KB 157KB UDPLITEv6 31KB 31KB UDPv6 62KB 62KB TCPv6 62KB 62KB scsi_sense_cache 8KB 8KB sd_ext_cdb 3KB 3KB virtio_scsi_cmd 16KB 16KB bio-96 7KB 7KB sgpool-128 178KB 178KB sgpool-64 63KB 63KB sgpool-32 128KB 189KB sgpool-16 75KB 75KB sgpool-8 71KB 71KB bio-224 3KB 3KB mqueue_inode_cache 60KB 60KB nfs_commit_data 15KB 15KB nfs_write_data 47KB 47KB jbd2_inode 7KB 7KB ext4_system_zone 3KB 3KB ext4_io_end_vec 7KB 7KB ext4_bio_post_read_ctx 15KB 15KB io_kiocb 7KB 7KB kioctx 15KB 15KB dio 15KB 15KB pid_namespace 7KB 7KB rpc_buffers 31KB 31KB rpc_tasks 3KB 3KB UNIX-STREAM 199KB 372KB UNIX 201KB 279KB tcp_bind_bucket 8KB 8KB ip_fib_trie 8KB 8KB ip_fib_alias 11KB 11KB ip_dst_cache 8KB 8KB PING 62KB 62KB RAW 93KB 93KB UDP 141KB 220KB request_sock_TCP 7KB 7KB TCP 58KB 58KB hugetlbfs_inode_cache 31KB 31KB bio-216 11KB 11KB ep_head 8KB 8KB eventpoll_pwq 23KB 23KB eventpoll_epi 35KB 35KB inotify_inode_mark 35KB 35KB request_queue 62KB 62KB blkdev_ioc 8KB 8KB bio-160 32KB 32KB biovec-max 488KB 488KB biovec-64 236KB 299KB biovec-16 48KB 48KB user_namespace 15KB 15KB uid_cache 7KB 7KB dmaengine-unmap-2 4KB 4KB audit_buffer 7KB 7KB skbuff_fclone_cache 127KB 127KB skbuff_head_cache 937KB 937KB file_lock_cache 43KB 43KB file_lock_ctx 7KB 7KB fsnotify_mark_connector 24KB 24KB net_namespace 93KB 93KB taskstats 22KB 22KB proc_dir_entry 356KB 371KB pde_opener 11KB 27KB seq_file 75KB 78KB sigqueue 15KB 35KB shmem_inode_cache 1341KB 1400KB kernfs_iattrs_cache 223KB 223KB kernfs_node_cache 5207KB 5222KB mnt_cache 181KB 181KB filp 2242KB 2283KB names_cache 17416KB 17884KB hashtab_node 274KB 274KB ebitmap_node 1149KB 1149KB avtab_node 4976KB 4976KB avc_node 35KB 35KB lsm_inode_cache 2659KB 2937KB lsm_file_cache 117KB 148KB key_jar 31KB 31KB uts_namespace 15KB 15KB nsproxy 7KB 7KB vm_area_struct 965KB 1036KB mm_struct 260KB 409KB fs_cache 45KB 60KB files_cache 196KB 270KB signal_cache 325KB 516KB sighand_cache 330KB 330KB task_struct 1270KB 1317KB cred_jar 149KB 220KB anon_vma_chain 207KB 228KB anon_vma 189KB 200KB pid 63KB 93KB Acpi-Operand 87KB 142KB Acpi-ParseExt 31KB 31KB Acpi-Parse 43KB 59KB Acpi-State 35KB 51KB Acpi-Namespace 28KB 28KB numa_policy 3KB 3KB perf_event 31KB 31KB trace_event_file 175KB 175KB ftrace_event_field 296KB 296KB pool_workqueue 40KB 40KB task_group 16KB 16KB vmap_area 47KB 51KB page->ptl 161KB 161KB kmemleak_scan_area 19KB 19KB kmemleak_object 134513KB 142117KB kmalloc-cg-8k 64KB 64KB kmalloc-cg-4k 704KB 928KB kmalloc-cg-2k 688KB 704KB kmalloc-cg-1k 228KB 256KB kmalloc-cg-512 209KB 240KB kmalloc-cg-256 16KB 16KB kmalloc-cg-192 28KB 28KB kmalloc-cg-128 12KB 12KB kmalloc-cg-96 20KB 20KB kmalloc-cg-64 16KB 16KB kmalloc-cg-32 49KB 76KB kmalloc-cg-16 12KB 12KB kmalloc-cg-8 15KB 15KB kmalloc-8k 4864KB 4896KB kmalloc-4k 6032KB 7264KB kmalloc-2k 3832KB 4256KB kmalloc-1k 6916KB 6916KB kmalloc-512 4384KB 4384KB kmalloc-256 1025KB 1136KB kmalloc-192 338KB 436KB kmalloc-128 388KB 572KB kmalloc-96 439KB 472KB kmalloc-64 1232KB 1232KB kmalloc-32 684KB 736KB kmalloc-16 315KB 324KB kmalloc-8 259KB 262KB kmem_cache_node 51KB 51KB kmem_cache 82KB 82KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=4626,uid=0 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4626, name: syz-executor.5 preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 INFO: lockdep is turned off. Preemption disabled at: [<0000000000000000>] 0x0 CPU: 0 PID: 4626 Comm: syz-executor.5 Tainted: G W 5.16.0-next-20220118 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9583 __mutex_lock_common kernel/locking/mutex.c:577 [inline] __mutex_lock+0x9e/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x11e7/0x14b0 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 filemap_alloc_folio mm/filemap.c:987 [inline] __filemap_get_folio+0x65c/0xfd0 mm/filemap.c:1990 pagecache_get_page+0x2e/0x220 mm/folio-compat.c:125 ext4_da_write_begin+0x383/0xa30 fs/ext4/inode.c:2941 generic_perform_write+0x208/0x510 mm/filemap.c:3765 ext4_buffered_write_iter+0x1a2/0x390 fs/ext4/file.c:268 ext4_file_write_iter+0x4ee/0x1890 fs/ext4/file.c:677 call_write_iter include/linux/fs.h:2074 [inline] new_sync_write+0x437/0x660 fs/read_write.c:503 vfs_write+0x7d1/0xae0 fs/read_write.c:590 ksys_write+0x12d/0x250 fs/read_write.c:643 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7ff598b7bb19 Code: Unable to access opcode bytes at RIP 0x7ff598b7baef. RSP: 002b:00007ff5960f1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007ff598c8ef60 RCX: 00007ff598b7bb19 RDX: 0000000020000081 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 00007ff598bd5f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdd997842f R14: 00007ff5960f1300 R15: 0000000000022000 Out of memory (oom_kill_allocating_task): Killed process 4625 (syz-executor.5) total-vm:93676kB, anon-rss:400kB, file-rss:33960kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 oom_reaper: reaped process 4625 (syz-executor.5), now anon-rss:0kB, file-rss:33956kB, shmem-rss:0kB syz-executor.5 invoked oom-killer: gfp_mask=0x1140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 CPU: 0 PID: 4625 Comm: syz-executor.5 Tainted: G W 5.16.0-next-20220118 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 dump_header+0x106/0x60f mm/oom_kill.c:464 oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994 out_of_memory+0x11e7/0x14b0 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 filemap_alloc_folio mm/filemap.c:987 [inline] __filemap_get_folio+0x65c/0xfd0 mm/filemap.c:1990 filemap_fault+0x155a/0x2130 mm/filemap.c:3127 __do_fault+0x113/0x5a0 mm/memory.c:3868 do_read_fault mm/memory.c:4183 [inline] do_fault mm/memory.c:4312 [inline] handle_pte_fault mm/memory.c:4570 [inline] __handle_mm_fault+0x1325/0x3570 mm/memory.c:4705 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4803 do_user_addr_fault+0x54a/0x12a0 arch/x86/mm/fault.c:1397 handle_page_fault arch/x86/mm/fault.c:1484 [inline] exc_page_fault+0xa2/0x1a0 arch/x86/mm/fault.c:1540 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:568 RIP: 0033:0x7ff598b28069 Code: Unable to access opcode bytes at RIP 0x7ff598b2803f. RSP: 002b:00007ffdd99784b0 EFLAGS: 00010202 RAX: 0000000000000000 RBX: 0000000000044b73 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000001 R08: 0000000000000000 R09: 00007ffdd998d080 R10: 0000000000000000 R11: 0000000000000000 R12: 00007ff598c8ef60 R13: 00007ff598c8fb60 R14: 00007ff598c8ef60 R15: 0000000000043f10 Mem-Info: active_anon:2666 inactive_anon:43237 isolated_anon:0 active_file:23 inactive_file:37 isolated_file:0 unevictable:0 dirty:1 writeback:0 slab_reclaimable:6970 slab_unreclaimable:59856 mapped:69634 shmem:113 pagetables:995 bounce:0 kernel_misc_reclaimable:0 free:3350 free_pcp:132 free_cma:0 Node 0 active_anon:10664kB inactive_anon:172948kB active_file:92kB inactive_file:148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:4kB writeback:0kB shmem:452kB writeback_tmp:0kB kernel_stack:4352kB pagetables:3980kB all_unreclaimable? no Node 0 DMA free:6492kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:44kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:7396kB boost:8192kB min:13312kB low:14968kB high:16624kB reserved_highatomic:2048KB active_anon:10664kB inactive_anon:172904kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660804kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 6496kB Node 0 DMA32: 536*4kB (MH) 181*8kB (UME) 70*16kB (UME) 21*32kB (UM) 3*64kB (UM) 3*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 7240kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 162 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105117 pages reserved Unreclaimable slab info: Name Used Total pid_4 7KB 7KB pid_3 7KB 7KB pid_2 37KB 37KB IEEE-802.15.4-MAC 63KB 63KB IEEE-802.15.4-RAW 63KB 63KB fib6_nodes 28KB 28KB ip6_dst_cache 45KB 45KB PINGv6 31KB 31KB RAWv6 157KB 157KB UDPLITEv6 31KB 31KB UDPv6 62KB 62KB TCPv6 62KB 62KB scsi_sense_cache 8KB 8KB sd_ext_cdb 3KB 3KB virtio_scsi_cmd 16KB 16KB bio-96 7KB 7KB sgpool-128 178KB 178KB sgpool-64 63KB 63KB sgpool-32 128KB 189KB sgpool-16 75KB 75KB sgpool-8 46KB 56KB bio-224 3KB 3KB mqueue_inode_cache 60KB 60KB nfs_commit_data 15KB 15KB nfs_write_data 47KB 47KB jbd2_inode 7KB 7KB ext4_system_zone 3KB 3KB ext4_io_end_vec 7KB 7KB ext4_bio_post_read_ctx 15KB 15KB io_kiocb 7KB 7KB kioctx 15KB 15KB dio 15KB 15KB pid_namespace 7KB 7KB rpc_buffers 31KB 31KB rpc_tasks 3KB 3KB UNIX-STREAM 199KB 372KB UNIX 201KB 279KB tcp_bind_bucket 8KB 8KB ip_fib_trie 8KB 8KB ip_fib_alias 11KB 11KB ip_dst_cache 8KB 8KB PING 62KB 62KB RAW 93KB 93KB UDP 141KB 220KB request_sock_TCP 7KB 7KB TCP 58KB 58KB hugetlbfs_inode_cache 31KB 31KB bio-216 11KB 11KB ep_head 8KB 8KB eventpoll_pwq 23KB 23KB eventpoll_epi 35KB 35KB inotify_inode_mark 35KB 35KB request_queue 62KB 62KB blkdev_ioc 8KB 8KB bio-160 32KB 32KB biovec-max 488KB 488KB biovec-64 186KB 267KB biovec-16 48KB 48KB user_namespace 15KB 15KB uid_cache 7KB 7KB dmaengine-unmap-2 4KB 4KB audit_buffer 7KB 7KB skbuff_fclone_cache 127KB 127KB skbuff_head_cache 948KB 948KB file_lock_cache 43KB 43KB file_lock_ctx 7KB 7KB fsnotify_mark_connector 24KB 24KB net_namespace 93KB 93KB taskstats 22KB 22KB proc_dir_entry 356KB 371KB pde_opener 11KB 27KB seq_file 75KB 78KB sigqueue 15KB 35KB shmem_inode_cache 1341KB 1400KB kernfs_iattrs_cache 223KB 223KB kernfs_node_cache 5207KB 5222KB mnt_cache 181KB 181KB filp 2216KB 2283KB names_cache 17182KB 17675KB hashtab_node 274KB 274KB ebitmap_node 1149KB 1149KB avtab_node 4976KB 4976KB avc_node 35KB 35KB lsm_inode_cache 2659KB 2937KB lsm_file_cache 117KB 148KB key_jar 31KB 31KB uts_namespace 15KB 15KB nsproxy 7KB 7KB vm_area_struct 953KB 1036KB mm_struct 260KB 409KB fs_cache 45KB 60KB files_cache 196KB 270KB signal_cache 325KB 516KB sighand_cache 330KB 330KB task_struct 1270KB 1317KB cred_jar 149KB 220KB anon_vma_chain 205KB 228KB anon_vma 189KB 200KB pid 63KB 93KB Acpi-Operand 87KB 142KB Acpi-ParseExt 31KB 31KB Acpi-Parse 43KB 59KB Acpi-State 35KB 51KB Acpi-Namespace 28KB 28KB numa_policy 3KB 3KB perf_event 31KB 31KB trace_event_file 175KB 175KB ftrace_event_field 296KB 296KB pool_workqueue 40KB 40KB task_group 16KB 16KB vmap_area 47KB 51KB page->ptl 161KB 161KB kmemleak_scan_area 19KB 19KB kmemleak_object 134182KB 142117KB kmalloc-cg-8k 64KB 64KB kmalloc-cg-4k 704KB 928KB kmalloc-cg-2k 684KB 704KB kmalloc-cg-1k 228KB 256KB kmalloc-cg-512 209KB 240KB kmalloc-cg-256 16KB 16KB kmalloc-cg-192 28KB 28KB kmalloc-cg-128 12KB 12KB kmalloc-cg-96 20KB 20KB kmalloc-cg-64 16KB 16KB kmalloc-cg-32 48KB 76KB kmalloc-cg-16 12KB 12KB kmalloc-cg-8 15KB 15KB kmalloc-8k 4864KB 4896KB kmalloc-4k 5984KB 7264KB kmalloc-2k 3828KB 4256KB kmalloc-1k 6916KB 6916KB kmalloc-512 4384KB 4384KB kmalloc-256 1025KB 1136KB kmalloc-192 338KB 436KB kmalloc-128 387KB 572KB kmalloc-96 437KB 468KB kmalloc-64 1232KB 1232KB kmalloc-32 683KB 736KB kmalloc-16 315KB 324KB kmalloc-8 259KB 262KB kmem_cache_node 51KB 51KB kmem_cache 82KB 82KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=4625,uid=0 Out of memory (oom_kill_allocating_task): Killed process 4625 (syz-executor.5) total-vm:93676kB, anon-rss:0kB, file-rss:33956kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 systemd-udevd invoked oom-killer: gfp_mask=0x1100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000 CPU: 1 PID: 125 Comm: systemd-udevd Tainted: G W 5.16.0-next-20220118 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 dump_header+0x106/0x60f mm/oom_kill.c:464 oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994 out_of_memory+0x358/0x14b0 mm/oom_kill.c:1132 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages_vma+0xde/0x500 mm/mempolicy.c:2232 wp_page_copy+0x1b7/0x2720 mm/memory.c:3012 do_wp_page+0x285/0x1d50 mm/memory.c:3322 handle_pte_fault mm/memory.c:4588 [inline] __handle_mm_fault+0x1183/0x3570 mm/memory.c:4705 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4803