kmem_cache_node 51KB 51KB kmem_cache 82KB 82KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0,global_oom,task_memcg=/syz4,task=syz-executor.4,pid=32957,uid=0 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 32957, name: syz-executor.4 preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 4 locks held by syz-executor.4/32957: #0: ffff88800bce82d0 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xa9/0x270 kernel/trace/blktrace.c:725 #1: ffffffff85246ae8 (relay_channels_mutex){+.+.}-{3:3}, at: relay_open kernel/relay.c:518 [inline] #1: ffffffff85246ae8 (relay_channels_mutex){+.+.}-{3:3}, at: relay_open+0x39c/0x970 kernel/relay.c:477 #2: ffffffff852793e8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline] #2: ffffffff852793e8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063 #3: ffff88804497a360 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #3: ffff88804497a360 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline] #3: ffff88804497a360 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 PID: 32957 Comm: syz-executor.4 Not tainted 5.17.0-rc1-next-20220124 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9576 __mutex_lock_common kernel/locking/mutex.c:577 [inline] __mutex_lock+0x9e/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x11e7/0x14b0 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 relay_alloc_buf kernel/relay.c:124 [inline] relay_create_buf kernel/relay.c:165 [inline] relay_open_buf.part.0+0x2a4/0xc00 kernel/relay.c:387 relay_open_buf kernel/relay.c:384 [inline] relay_open kernel/relay.c:520 [inline] relay_open+0x4ec/0x970 kernel/relay.c:477 do_blk_trace_setup+0x4c3/0xc80 kernel/trace/blktrace.c:549 __blk_trace_setup+0xca/0x180 kernel/trace/blktrace.c:589 blk_trace_ioctl+0x13b/0x270 kernel/trace/blktrace.c:730 blkdev_ioctl+0x18d/0x7f0 block/ioctl.c:577 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x196/0x210 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f544adecb19 Code: Unable to access opcode bytes at RIP 0x7f544adecaef. RSP: 002b:00007f5448362188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f544aefff60 RCX: 00007f544adecb19 RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000004 RBP: 00007f544ae46f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffda7a4458f R14: 00007f5448362300 R15: 0000000000022000 ============================= [ BUG: Invalid wait context ] 5.17.0-rc1-next-20220124 #1 Tainted: G W ----------------------------- syz-executor.4/32957 is trying to lock: ffff88804497ad70 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_cleanup_begin kernel/futex/core.c:1058 [inline] ffff88804497ad70 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 other info that might help us debug this: context-{4:4} 4 locks held by syz-executor.4/32957: #0: ffff88800bce82d0 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xa9/0x270 kernel/trace/blktrace.c:725 #1: ffffffff85246ae8 (relay_channels_mutex){+.+.}-{3:3}, at: relay_open kernel/relay.c:518 [inline] #1: ffffffff85246ae8 (relay_channels_mutex){+.+.}-{3:3}, at: relay_open+0x39c/0x970 kernel/relay.c:477 #2: ffffffff852793e8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline] #2: ffffffff852793e8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063 #3: ffff88804497a360 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #3: ffff88804497a360 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline] #3: ffff88804497a360 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 stack backtrace: CPU: 1 PID: 32957 Comm: syz-executor.4 Tainted: G W 5.17.0-rc1-next-20220124 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 print_lock_invalid_wait_context kernel/locking/lockdep.c:4678 [inline] check_wait_context kernel/locking/lockdep.c:4739 [inline] __lock_acquire.cold+0xc8/0x3b4 kernel/locking/lockdep.c:4977 lock_acquire kernel/locking/lockdep.c:5639 [inline] lock_acquire+0x1a2/0x4d0 kernel/locking/lockdep.c:5604 __mutex_lock_common kernel/locking/mutex.c:600 [inline] __mutex_lock+0x136/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x11e7/0x14b0 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 relay_alloc_buf kernel/relay.c:124 [inline] relay_create_buf kernel/relay.c:165 [inline] relay_open_buf.part.0+0x2a4/0xc00 kernel/relay.c:387 relay_open_buf kernel/relay.c:384 [inline] relay_open kernel/relay.c:520 [inline] relay_open+0x4ec/0x970 kernel/relay.c:477 do_blk_trace_setup+0x4c3/0xc80 kernel/trace/blktrace.c:549 __blk_trace_setup+0xca/0x180 kernel/trace/blktrace.c:589 blk_trace_ioctl+0x13b/0x270 kernel/trace/blktrace.c:730 blkdev_ioctl+0x18d/0x7f0 block/ioctl.c:577 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x196/0x210 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f544adecb19 Code: Unable to access opcode bytes at RIP 0x7f544adecaef. RSP: 002b:00007f5448362188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f544aefff60 RCX: 00007f544adecb19 RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000004 RBP: 00007f544ae46f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffda7a4458f R14: 00007f5448362300 R15: 0000000000022000 Out of memory (oom_kill_allocating_task): Killed process 32957 (syz-executor.4) total-vm:93676kB, anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 syz-executor.4: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0 CPU: 1 PID: 32957 Comm: syz-executor.4 Tainted: G W 5.17.0-rc1-next-20220124 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 warn_alloc.cold+0x95/0x18a mm/page_alloc.c:4238 __alloc_pages_slowpath.constprop.0+0x1a21/0x1f10 mm/page_alloc.c:5125 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 relay_alloc_buf kernel/relay.c:124 [inline] relay_create_buf kernel/relay.c:165 [inline] relay_open_buf.part.0+0x2a4/0xc00 kernel/relay.c:387 relay_open_buf kernel/relay.c:384 [inline] relay_open kernel/relay.c:520 [inline] relay_open+0x4ec/0x970 kernel/relay.c:477 do_blk_trace_setup+0x4c3/0xc80 kernel/trace/blktrace.c:549 __blk_trace_setup+0xca/0x180 kernel/trace/blktrace.c:589 blk_trace_ioctl+0x13b/0x270 kernel/trace/blktrace.c:730 blkdev_ioctl+0x18d/0x7f0 block/ioctl.c:577 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x196/0x210 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f544adecb19 Code: Unable to access opcode bytes at RIP 0x7f544adecaef. RSP: 002b:00007f5448362188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f544aefff60 RCX: 00007f544adecb19 RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000004 RBP: 00007f544ae46f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffda7a4458f R14: 00007f5448362300 R15: 0000000000022000 Mem-Info: active_anon:7950 inactive_anon:39014 isolated_anon:0 active_file:49 inactive_file:0 isolated_file:1 unevictable:0 dirty:0 writeback:0 slab_reclaimable:9292 slab_unreclaimable:64421 mapped:69634 shmem:129 pagetables:6113 bounce:0 kernel_misc_reclaimable:0 free:2711 free_pcp:88 free_cma:0 Node 0 active_anon:31800kB inactive_anon:156056kB active_file:196kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:278536kB dirty:0kB writeback:0kB shmem:516kB writeback_tmp:0kB kernel_stack:9600kB pagetables:24452kB all_unreclaimable? yes Node 0 DMA free:6488kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:4356kB boost:6144kB min:11264kB low:12920kB high:14576kB reserved_highatomic:0KB active_anon:31800kB inactive_anon:156056kB active_file:196kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660796kB mlocked:0kB bounce:0kB free_pcp:352kB local_pcp:352kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB Node 0 DMA32: 667*4kB (UME) 135*8kB (UME) 38*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4356kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 172 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105119 pages reserved debugfs: File 'dropped' in directory 'loop0' already present! debugfs: File 'msg' in directory 'loop0' already present!