kmem_cache_node 51KB 51KB kmem_cache 78KB 78KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=295,uid=0 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 295, name: syz-executor.7 preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 3 locks held by syz-executor.7/295: #0: ffff88801b9f7b40 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:832 [inline] #0: ffff88801b9f7b40 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_fault+0x151a/0x2130 mm/filemap.c:3137 #1: ffffffff852791a8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4279 [inline] #1: ffffffff852791a8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5061 #2: ffff888017e62360 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #2: ffff888017e62360 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:179 [inline] #2: ffff888017e62360 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 0 PID: 295 Comm: syz-executor.7 Not tainted 5.16.0-rc6-next-20211224 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9583 __mutex_lock_common kernel/locking/mutex.c:577 [inline] __mutex_lock+0x9e/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4330 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5061 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5392 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 filemap_alloc_folio mm/filemap.c:1000 [inline] __filemap_get_folio+0x65c/0xfd0 mm/filemap.c:2003 filemap_fault+0x155a/0x2130 mm/filemap.c:3140 __do_fault+0x113/0x5a0 mm/memory.c:3846 do_read_fault mm/memory.c:4161 [inline] do_fault mm/memory.c:4290 [inline] handle_pte_fault mm/memory.c:4548 [inline] __handle_mm_fault+0x1325/0x3570 mm/memory.c:4683 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4781 do_user_addr_fault+0x54a/0x12a0 arch/x86/mm/fault.c:1397 handle_page_fault arch/x86/mm/fault.c:1484 [inline] exc_page_fault+0xa2/0x1a0 arch/x86/mm/fault.c:1540 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:568 RIP: 0033:0x7f3384db0688 Code: Unable to access opcode bytes at RIP 0x7f3384db065e. RSP: 002b:00007ffe6311d240 EFLAGS: 00010212 RAX: 0000001b2d920000 RBX: 00000000000003b4 RCX: 0000000000229f48 RDX: 000000000022a1a1 RSI: 00007ffe6311d300 RDI: 0000000000000001 RBP: 00007ffe6311d29c R08: 00000000000008dd R09: 00007ffe6313f080 R10: 00007ffe6313f090 R11: 00000000004091e4 R12: 0000000000000032 R13: 0000000000229eb1 R14: 0000000000000002 R15: 00007ffe6311d300 ============================= [ BUG: Invalid wait context ] 5.16.0-rc6-next-20211224 #1 Tainted: G W ----------------------------- syz-executor.7/295 is trying to lock: ffff888017e62d70 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_cleanup_begin kernel/futex/core.c:1058 [inline] ffff888017e62d70 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 other info that might help us debug this: context-{4:4} 3 locks held by syz-executor.7/295: #0: ffff88801b9f7b40 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:832 [inline] #0: ffff88801b9f7b40 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_fault+0x151a/0x2130 mm/filemap.c:3137 #1: ffffffff852791a8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4279 [inline] #1: ffffffff852791a8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5061 #2: ffff888017e62360 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #2: ffff888017e62360 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:179 [inline] #2: ffff888017e62360 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 stack backtrace: CPU: 0 PID: 295 Comm: syz-executor.7 Tainted: G W 5.16.0-rc6-next-20211224 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 print_lock_invalid_wait_context kernel/locking/lockdep.c:4678 [inline] check_wait_context kernel/locking/lockdep.c:4739 [inline] __lock_acquire.cold+0xc8/0x3b4 kernel/locking/lockdep.c:4977 lock_acquire kernel/locking/lockdep.c:5639 [inline] lock_acquire+0x1a2/0x4d0 kernel/locking/lockdep.c:5604 __mutex_lock_common kernel/locking/mutex.c:600 [inline] __mutex_lock+0x136/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x1198/0x1460 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4330 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5061 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5392 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 filemap_alloc_folio mm/filemap.c:1000 [inline] __filemap_get_folio+0x65c/0xfd0 mm/filemap.c:2003 filemap_fault+0x155a/0x2130 mm/filemap.c:3140 __do_fault+0x113/0x5a0 mm/memory.c:3846 do_read_fault mm/memory.c:4161 [inline] do_fault mm/memory.c:4290 [inline] handle_pte_fault mm/memory.c:4548 [inline] __handle_mm_fault+0x1325/0x3570 mm/memory.c:4683 handle_mm_fault+0x2e6/0xa20 mm/memory.c:4781 do_user_addr_fault+0x54a/0x12a0 arch/x86/mm/fault.c:1397 handle_page_fault arch/x86/mm/fault.c:1484 [inline] exc_page_fault+0xa2/0x1a0 arch/x86/mm/fault.c:1540 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:568 RIP: 0033:0x7f3384db0688 Code: Unable to access opcode bytes at RIP 0x7f3384db065e. RSP: 002b:00007ffe6311d240 EFLAGS: 00010212 RAX: 0000001b2d920000 RBX: 00000000000003b4 RCX: 0000000000229f48 RDX: 000000000022a1a1 RSI: 00007ffe6311d300 RDI: 0000000000000001 RBP: 00007ffe6311d29c R08: 00000000000008dd R09: 00007ffe6313f080 R10: 00007ffe6313f090 R11: 00000000004091e4 R12: 0000000000000032 R13: 0000000000229eb1 R14: 0000000000000002 R15: 00007ffe6311d300 Out of memory (oom_kill_allocating_task): Killed process 295 (syz-executor.7) total-vm:93280kB, anon-rss:392kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 oom_reaper: reaped process 295 (syz-executor.7), now anon-rss:0kB, file-rss:34540kB, shmem-rss:0kB warn_alloc: 1 callbacks suppressed syz-executor.7: vmalloc error: size 869908480, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0 CPU: 0 PID: 13455 Comm: syz-executor.7 Tainted: G W 5.16.0-rc6-next-20211224 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 warn_alloc.cold+0x87/0x18d mm/page_alloc.c:4236 __vmalloc_area_node mm/vmalloc.c:2978 [inline] __vmalloc_node_range+0xd50/0xfd0 mm/vmalloc.c:3106 __vmalloc_node+0xb5/0x100 mm/vmalloc.c:3156 alloc_one_pg_vec_page net/packet/af_packet.c:4301 [inline] alloc_pg_vec net/packet/af_packet.c:4326 [inline] packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4411 packet_setsockopt+0x1b4f/0x3c40 net/packet/af_packet.c:3788 __sys_setsockopt+0x180/0x2a0 net/socket.c:2177 __do_sys_setsockopt net/socket.c:2188 [inline] __se_sys_setsockopt net/socket.c:2185 [inline] __x64_sys_setsockopt+0xba/0x150 net/socket.c:2185 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f3384e03b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3382379188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007f3384f16f60 RCX: 00007f3384e03b19 RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 RBP: 00007f3384e5df6d R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe6311cfef R14: 00007f3382379300 R15: 0000000000022000 Mem-Info: active_anon:10054 inactive_anon:36212 isolated_anon:0 active_file:347 inactive_file:351 isolated_file:0 unevictable:0 dirty:6 writeback:0 slab_reclaimable:8614 slab_unreclaimable:61653 mapped:69951 shmem:100 pagetables:4005 bounce:0 kernel_misc_reclaimable:0 free:3461 free_pcp:123 free_cma:0 Node 0 active_anon:40216kB inactive_anon:144848kB active_file:1388kB inactive_file:1488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:279804kB dirty:24kB writeback:0kB shmem:400kB writeback_tmp:0kB kernel_stack:7104kB pagetables:16020kB all_unreclaimable? yes Node 0 DMA free:6508kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:6784kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:2048KB active_anon:40216kB inactive_anon:144848kB active_file:1304kB inactive_file:1516kB unevictable:0kB writepending:24kB present:2080640kB managed:1660836kB mlocked:0kB bounce:0kB free_pcp:584kB local_pcp:248kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB Node 0 DMA32: 430*4kB (UMEH) 271*8kB (UMEH) 85*16kB (UMH) 6*32kB (UH) 3*64kB (H) 1*128kB (H) 1*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 7040kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 805 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105109 pages reserved