kmem_cache_node 51KB 51KB kmem_cache 78KB 78KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=13033,uid=0 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 13033, name: syz-executor.2 preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 3 locks held by syz-executor.2/13033: #0: ffff88804199c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1668 [inline] #0: ffff88804199c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_setsockopt+0x151/0x3870 net/packet/af_packet.c:3763 #1: ffffffff85278ee8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline] #1: ffffffff85278ee8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063 #2: ffff88801790a360 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #2: ffff88801790a360 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline] #2: ffff88801790a360 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 PID: 13033 Comm: syz-executor.2 Not tainted 5.17.0-rc1-next-20220127 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9576 __mutex_lock_common kernel/locking/mutex.c:577 [inline] __mutex_lock+0x9e/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x11e7/0x14b0 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 vm_area_alloc_pages mm/vmalloc.c:2902 [inline] __vmalloc_area_node mm/vmalloc.c:2965 [inline] __vmalloc_node_range+0xc40/0x10b0 mm/vmalloc.c:3110 __vmalloc_node+0xb5/0x100 mm/vmalloc.c:3160 alloc_one_pg_vec_page net/packet/af_packet.c:4293 [inline] alloc_pg_vec net/packet/af_packet.c:4318 [inline] packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4403 packet_setsockopt+0x1991/0x3870 net/packet/af_packet.c:3780 __sys_setsockopt+0x180/0x2a0 net/socket.c:2180 __do_sys_setsockopt net/socket.c:2191 [inline] __se_sys_setsockopt net/socket.c:2188 [inline] __x64_sys_setsockopt+0xba/0x150 net/socket.c:2188 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f9eac84db19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9ea9dc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007f9eac960f60 RCX: 00007f9eac84db19 RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 RBP: 00007f9eac8a7f6d R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffee961e1df R14: 00007f9ea9dc3300 R15: 0000000000022000 ============================= [ BUG: Invalid wait context ] 5.17.0-rc1-next-20220127 #1 Tainted: G W ----------------------------- syz-executor.2/13033 is trying to lock: ffff88801790ad70 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_cleanup_begin kernel/futex/core.c:1058 [inline] ffff88801790ad70 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 other info that might help us debug this: context-{4:4} 3 locks held by syz-executor.2/13033: #0: ffff88804199c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1668 [inline] #0: ffff88804199c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_setsockopt+0x151/0x3870 net/packet/af_packet.c:3763 #1: ffffffff85278ee8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline] #1: ffffffff85278ee8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063 #2: ffff88801790a360 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #2: ffff88801790a360 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline] #2: ffff88801790a360 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 stack backtrace: CPU: 1 PID: 13033 Comm: syz-executor.2 Tainted: G W 5.17.0-rc1-next-20220127 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 print_lock_invalid_wait_context kernel/locking/lockdep.c:4678 [inline] check_wait_context kernel/locking/lockdep.c:4739 [inline] __lock_acquire.cold+0xc8/0x3b4 kernel/locking/lockdep.c:4977 lock_acquire kernel/locking/lockdep.c:5639 [inline] lock_acquire+0x1a2/0x4d0 kernel/locking/lockdep.c:5604 __mutex_lock_common kernel/locking/mutex.c:600 [inline] __mutex_lock+0x136/0x1480 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003 out_of_memory+0x11e7/0x14b0 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 vm_area_alloc_pages mm/vmalloc.c:2902 [inline] __vmalloc_area_node mm/vmalloc.c:2965 [inline] __vmalloc_node_range+0xc40/0x10b0 mm/vmalloc.c:3110 __vmalloc_node+0xb5/0x100 mm/vmalloc.c:3160 alloc_one_pg_vec_page net/packet/af_packet.c:4293 [inline] alloc_pg_vec net/packet/af_packet.c:4318 [inline] packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4403 packet_setsockopt+0x1991/0x3870 net/packet/af_packet.c:3780 __sys_setsockopt+0x180/0x2a0 net/socket.c:2180 __do_sys_setsockopt net/socket.c:2191 [inline] __se_sys_setsockopt net/socket.c:2188 [inline] __x64_sys_setsockopt+0xba/0x150 net/socket.c:2188 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f9eac84db19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9ea9dc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007f9eac960f60 RCX: 00007f9eac84db19 RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 RBP: 00007f9eac8a7f6d R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffee961e1df R14: 00007f9ea9dc3300 R15: 0000000000022000 Out of memory (oom_kill_allocating_task): Killed process 13032 (syz-executor.2) total-vm:93544kB, anon-rss:380kB, file-rss:33972kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 syz-executor.6 invoked oom-killer: gfp_mask=0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 oom_reaper: reaped process 13032 (syz-executor.2), now anon-rss:0kB, file-rss:33948kB, shmem-rss:0kB CPU: 0 PID: 13046 Comm: syz-executor.6 Tainted: G W 5.17.0-rc1-next-20220127 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 dump_header+0x106/0x60f mm/oom_kill.c:464 oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:994 out_of_memory+0x11e7/0x14b0 mm/oom_kill.c:1114 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline] __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271 vm_area_alloc_pages mm/vmalloc.c:2902 [inline] __vmalloc_area_node mm/vmalloc.c:2965 [inline] __vmalloc_node_range+0xc40/0x10b0 mm/vmalloc.c:3110 __vmalloc_node+0xb5/0x100 mm/vmalloc.c:3160 alloc_one_pg_vec_page net/packet/af_packet.c:4293 [inline] alloc_pg_vec net/packet/af_packet.c:4318 [inline] packet_set_ring+0xb60/0x1b20 net/packet/af_packet.c:4403 packet_setsockopt+0x1991/0x3870 net/packet/af_packet.c:3780 __sys_setsockopt+0x180/0x2a0 net/socket.c:2180 __do_sys_setsockopt net/socket.c:2191 [inline] __se_sys_setsockopt net/socket.c:2188 [inline] __x64_sys_setsockopt+0xba/0x150 net/socket.c:2188 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fc0d679db19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc0d3d13188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007fc0d68b0f60 RCX: 00007fc0d679db19 RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 RBP: 00007fc0d67f7f6d R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc8742d31f R14: 00007fc0d3d13300 R15: 0000000000022000 Mem-Info: active_anon:9695 inactive_anon:37709 isolated_anon:0 active_file:25 inactive_file:36 isolated_file:0 unevictable:0 dirty:0 writeback:0 slab_reclaimable:7365 slab_unreclaimable:60030 mapped:69640 shmem:125 pagetables:2341 bounce:0 kernel_misc_reclaimable:0 free:3938 free_pcp:188 free_cma:0 Node 0 active_anon:38780kB inactive_anon:150836kB active_file:184kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:278560kB dirty:0kB writeback:0kB shmem:500kB writeback_tmp:0kB kernel_stack:5760kB pagetables:9364kB all_unreclaimable? yes Node 0 DMA free:6488kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1617 1617 1617 Node 0 DMA32 free:51600kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:2048KB active_anon:38780kB inactive_anon:150828kB active_file:136kB inactive_file:172kB unevictable:0kB writepending:0kB present:2080640kB managed:1660812kB mlocked:0kB bounce:0kB free_pcp:3424kB local_pcp:448kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (M) 2*8kB (M) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6484kB Node 0 DMA32: 1016*4kB (UME) 447*8kB (UME) 287*16kB (UM) 224*32kB (U) 214*64kB (UH) 143*128kB (U) 41*256kB (U) 5*512kB (U) 2*1024kB (U) 4*2048kB (U) 0*4096kB = 74696kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 322 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105115 pages reserved Unreclaimable slab info: Name Used Total pid_4 7KB 7KB pid_3 7KB 7KB pid_2 63KB 63KB IEEE-802.15.4-MAC 63KB 63KB IEEE-802.15.4-RAW 63KB 63KB p9_req_t 8KB 8KB fib6_nodes 32KB 32KB ip6_dst_cache 33KB 33KB PINGv6 63KB 63KB RAWv6 120KB 189KB UDPLITEv6 62KB 62KB UDPv6 62KB 62KB tw_sock_TCPv6 15KB 15KB TCPv6 62KB 62KB scsi_sense_cache 8KB 8KB sd_ext_cdb 3KB 3KB virtio_scsi_cmd 16KB 16KB bio-96 7KB 7KB sgpool-128 157KB 297KB sgpool-64 63KB 63KB sgpool-32 189KB 189KB sgpool-16 142KB 142KB sgpool-8 86KB 86KB mqueue_inode_cache 60KB 60KB nfs_commit_data 15KB 15KB nfs_write_data 47KB 47KB jbd2_inode 7KB 7KB ext4_system_zone 7KB 7KB ext4_io_end_vec 15KB 15KB ext4_bio_post_read_ctx 15KB 15KB io_kiocb 22KB 37KB kioctx 31KB 31KB aio_kiocb 7KB 7KB dnotify_mark 3KB 3KB dnotify_struct 3KB 3KB dio 30KB 30KB fasync_cache 7KB 7KB pid_namespace 7KB 7KB posix_timers_cache 7KB 7KB rpc_buffers 31KB 31KB rpc_tasks 3KB 3KB UNIX-STREAM 153KB 279KB UNIX 156KB 310KB ip4-frags 15KB 15KB UDP-Lite 63KB 63KB tcp_bind_bucket 8KB 8KB inet_peer_cache 4KB 4KB ip_fib_trie 8KB 8KB ip_fib_alias 11KB 11KB ip_dst_cache 12KB 12KB PING 62KB 62KB RAW 62KB 62KB UDP 133KB 220KB request_sock_TCP 7KB 7KB TCP 58KB 58KB hugetlbfs_inode_cache 31KB 31KB bio-224 15KB 15KB ep_head 8KB 8KB eventpoll_pwq 19KB 19KB eventpoll_epi 35KB 35KB inotify_inode_mark 42KB 42KB request_queue 62KB 62KB blkdev_ioc 8KB 8KB bio-160 56KB 56KB biovec-max 1100KB 1100KB biovec-128 31KB 31KB biovec-64 362KB 362KB biovec-16 52KB 52KB user_namespace 30KB 30KB uid_cache 7KB 7KB dmaengine-unmap-2 4KB 4KB audit_buffer 7KB 7KB skbuff_fclone_cache 105KB 105KB skbuff_head_cache 1436KB 1436KB configfs_dir_cache 8KB 8KB file_lock_cache 35KB 35KB file_lock_ctx 7KB 7KB fsnotify_mark_connector 36KB 36KB net_namespace 124KB 124KB taskstats 45KB 45KB proc_dir_entry 340KB 356KB pde_opener 27KB 27KB seq_file 45KB 45KB sigqueue 39KB 55KB shmem_inode_cache 1485KB 1655KB kernfs_iattrs_cache 247KB 247KB kernfs_node_cache 5254KB 5265KB mnt_cache 198KB 204KB filp 1035KB 1455KB names_cache 6468KB 6634KB hashtab_node 274KB 274KB ebitmap_node 1149KB 1149KB avtab_node 4976KB 4976KB avc_node 35KB 35KB lsm_inode_cache 2615KB 3079KB lsm_file_cache 56KB 124KB key_jar 31KB 31KB uts_namespace 15KB 15KB nsproxy 15KB 15KB vm_area_struct 1449KB 1460KB mm_struct 295KB 378KB fs_cache 58KB 64KB files_cache 221KB 270KB signal_cache 347KB 546KB sighand_cache 423KB 450KB task_struct 1685KB 1685KB cred_jar 105KB 164KB anon_vma_chain 322KB 322KB anon_vma 334KB 348KB pid 60KB 86KB Acpi-Operand 83KB 138KB Acpi-ParseExt 31KB 31KB Acpi-Parse 47KB 63KB Acpi-State 31KB 47KB Acpi-Namespace 28KB 28KB shared_policy_node 8KB 8KB numa_policy 7KB 7KB perf_event 62KB 62KB trace_event_file 175KB 175KB ftrace_event_field 296KB 296KB pool_workqueue 48KB 48KB task_group 16KB 16KB vmap_area 48KB 51KB page->ptl 299KB 299KB kmemleak_scan_area 27KB 27KB kmemleak_object 138396KB 146642KB kmalloc-cg-8k 96KB 96KB kmalloc-cg-4k 400KB 736KB kmalloc-cg-2k 852KB 928KB kmalloc-cg-1k 206KB 256KB kmalloc-cg-512 222KB 272KB kmalloc-cg-256 16KB 16KB kmalloc-cg-192 36KB 36KB kmalloc-cg-128 12KB 12KB kmalloc-cg-96 32KB 32KB kmalloc-cg-64 28KB 28KB kmalloc-cg-32 40KB 80KB kmalloc-cg-16 8KB 8KB kmalloc-cg-8 15KB 15KB kmalloc-8k 4864KB 4864KB kmalloc-4k 5112KB 5856KB kmalloc-2k 4032KB 4544KB kmalloc-1k 9702KB 10112KB kmalloc-512 5905KB 6068KB kmalloc-256 1004KB 1080KB kmalloc-192 411KB 616KB kmalloc-128 407KB 604KB kmalloc-96 537KB 548KB kmalloc-64 1409KB 1428KB kmalloc-32 699KB 760KB kmalloc-16 313KB 328KB kmalloc-8 262KB 270KB kmem_cache_node 51KB 51KB kmem_cache 78KB 78KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz6,mems_allowed=0,global_oom,task_memcg=/syz6,task=syz-executor.6,pid=13046,uid=0 Out of memory (oom_kill_allocating_task): Killed process 13046 (syz-executor.6) total-vm:93544kB, anon-rss:452kB, file-rss:34952kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 oom_reaper: reaped process 13046 (syz-executor.6), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB