inconsistent lock state in get_cmdline

14 views

Skip to first unread message

syzbot

unread,

Aug 16, 2019, 3:57:08 PM8/16/19

to syzkaller-a...@googlegroups.com

Hello,

syzbot found the following crash on:

HEAD commit: 10c44c01 f2fs: fix build error on android tracepoints
git tree: android-4.9
console output: https://syzkaller.appspot.com/x/log.txt?x=16d2709c600000
kernel config: https://syzkaller.appspot.com/x/.config?x=5944ab99bb3d7b7c
dashboard link: https://syzkaller.appspot.com/bug?extid=304321c8095cbd4c9d64
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1270189c600000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+304321...@syzkaller.appspotmail.com

lowmemorykiller: Killing 'syz-executor.3' (2973) (tgid 2973), adj 1000,
to free 1088kB on behalf of 'udevd' (584) because
cache 51852kB is below limit 65536kB for oom_score_adj 12
Free memory is -13376kB above reserved
=================================
[ INFO: inconsistent lock state ]
4.9.189+ #2 Not tainted
---------------------------------
inconsistent {RECLAIM_FS-ON-W} -> {IN-RECLAIM_FS-R} usage.
udevd/584 [HC0[0]:SC0[0]:HE1:SE1] takes:
(&mm->mmap_sem){+++++?}, at: [<00000000917b6f34>] get_cmdline+0xa3/0x2d0
mm/util.c:641
mark_held_locks+0xb1/0x100 kernel/locking/lockdep.c:2660
__lockdep_trace_alloc kernel/locking/lockdep.c:2882 [inline]
lockdep_trace_alloc+0x18c/0x2b0 kernel/locking/lockdep.c:2897
__alloc_pages_nodemask+0x143/0x1a80 mm/page_alloc.c:3803
__alloc_pages include/linux/gfp.h:433 [inline]
__alloc_pages_node include/linux/gfp.h:446 [inline]
alloc_pages_node include/linux/gfp.h:460 [inline]
pmd_alloc_one arch/x86/include/asm/pgalloc.h:88 [inline]
__pmd_alloc+0x4a/0x330 mm/memory.c:3742
pmd_alloc include/linux/mm.h:1625 [inline]
alloc_new_pmd mm/mremap.c:64 [inline]
move_page_tables+0xadb/0xd60 mm/mremap.c:212
shift_arg_pages+0x1ae/0x470 fs/exec.c:642
setup_arg_pages+0x60d/0x7c0 fs/exec.c:754
load_elf_binary+0xa84/0x4a90 fs/binfmt_elf.c:860
search_binary_handler fs/exec.c:1621 [inline]
search_binary_handler+0x14f/0x700 fs/exec.c:1599
exec_binprm fs/exec.c:1663 [inline]
do_execveat_common.isra.0+0xf81/0x1db0 fs/exec.c:1785
do_execve+0x3a/0x50 fs/exec.c:1829
run_init_process+0x33/0x37 init/main.c:904
try_to_run_init_process+0x18/0x48 init/main.c:913
kernel_init+0xf2/0x163 init/main.c:984
ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375
irq event stamp: 16245
hardirqs last enabled at (16245): [<00000000b5658542>]
vprintk_emit+0x25c/0x6f0 kernel/printk/printk.c:1897
hardirqs last disabled at (16244): [<00000000c4798d58>]
vprintk_emit+0x6d/0x6f0 kernel/printk/printk.c:1801
softirqs last enabled at (16230): [<0000000036cbecd2>] spin_unlock_bh
include/linux/spinlock.h:352 [inline]
softirqs last enabled at (16230): [<0000000036cbecd2>]
wb_queue_work+0x1ed/0x450 fs/fs-writeback.c:203
softirqs last disabled at (16226): [<00000000d184a423>] spin_lock_bh
include/linux/spinlock.h:307 [inline]
softirqs last disabled at (16226): [<00000000d184a423>]
wb_queue_work+0x90/0x450 fs/fs-writeback.c:195

other info that might help us debug this:
Possible unsafe locking scenario:

CPU0
----
lock(&mm->mmap_sem);
<Interrupt>
lock(&mm->mmap_sem);

*** DEADLOCK ***

1 lock held by udevd/584:
#0: (shrinker_rwsem){++++..}, at: [<000000005956605f>]
shrink_slab.part.0+0xb2/0xa20 mm/vmscan.c:472

stack backtrace:
CPU: 0 PID: 584 Comm: udevd Not tainted 4.9.189+ #2
ffff8801cfa07040 ffffffff81b65c01 00000000000000f0 ffff8801d053af80
ffffffff83caf950 ffff8801d053b878 ffffffff84250fc0 ffff8801cfa070b8
ffffffff81408330 0000000000000000 ffffffff00000001 0000000000000001
Call Trace:
[<00000000f222e4f7>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000f222e4f7>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<000000006c20f969>] print_usage_bug kernel/locking/lockdep.c:2387 [inline]
[<000000006c20f969>] print_usage_bug.cold+0x452/0x5a2
kernel/locking/lockdep.c:2354
[<0000000082672cb9>] valid_state kernel/locking/lockdep.c:2400 [inline]
[<0000000082672cb9>] mark_lock_irq kernel/locking/lockdep.c:2602 [inline]
[<0000000082672cb9>] mark_lock+0x6c7/0x12e0 kernel/locking/lockdep.c:3065
[<00000000b5dea4ae>] mark_irqflags kernel/locking/lockdep.c:2958 [inline]
[<00000000b5dea4ae>] __lock_acquire+0x5be/0x4390
kernel/locking/lockdep.c:3302
[<0000000000afa68c>] lock_acquire+0x133/0x3d0 kernel/locking/lockdep.c:3756
[<0000000012011007>] down_read+0x44/0xb0 kernel/locking/rwsem.c:22
[<00000000917b6f34>] get_cmdline+0xa3/0x2d0 mm/util.c:641
[<00000000bb3b98f8>] handle_lmk_event+0x169/0x920
drivers/staging/android/lowmemorykiller.c:115
[<00000000b421e1ed>] lowmem_scan+0x6f3/0xb70
drivers/staging/android/lowmemorykiller.c:353
[<00000000e80ab9f5>] do_shrink_slab mm/vmscan.c:399 [inline]
[<00000000e80ab9f5>] shrink_slab.part.0+0x3cf/0xa20 mm/vmscan.c:502
[<000000005ca407e7>] shrink_slab mm/vmscan.c:466 [inline]
[<000000005ca407e7>] shrink_node+0x1ed/0x750 mm/vmscan.c:2604
[<00000000fd4dcf5d>] shrink_zones mm/vmscan.c:2751 [inline]
[<00000000fd4dcf5d>] do_try_to_free_pages mm/vmscan.c:2793 [inline]
[<00000000fd4dcf5d>] try_to_free_pages+0x397/0xbd0 mm/vmscan.c:3004
[<00000000eca2f2e3>] __perform_reclaim mm/page_alloc.c:3332 [inline]
[<00000000eca2f2e3>] __alloc_pages_direct_reclaim mm/page_alloc.c:3354
[inline]
[<00000000eca2f2e3>] __alloc_pages_slowpath mm/page_alloc.c:3704 [inline]
[<00000000eca2f2e3>] __alloc_pages_nodemask+0x930/0x1a80
mm/page_alloc.c:3861
[<000000003d16454e>] __alloc_pages include/linux/gfp.h:433 [inline]
[<000000003d16454e>] __alloc_pages_node include/linux/gfp.h:446 [inline]
[<000000003d16454e>] alloc_slab_page mm/slub.c:1408 [inline]
[<000000003d16454e>] allocate_slab mm/slub.c:1557 [inline]
[<000000003d16454e>] new_slab+0x33b/0x3e0 mm/slub.c:1635
[<00000000a7a25258>] new_slab_objects mm/slub.c:2419 [inline]
[<00000000a7a25258>] ___slab_alloc.constprop.0+0x361/0x470 mm/slub.c:2576
[<000000000501cfd6>] __slab_alloc.isra.0.constprop.0+0x50/0xa0
mm/slub.c:2618
[<00000000ef3238a6>] slab_alloc_node mm/slub.c:2681 [inline]
[<00000000ef3238a6>] slab_alloc mm/slub.c:2723 [inline]
[<00000000ef3238a6>] kmem_cache_alloc+0x212/0x2b0 mm/slub.c:2728
[<0000000064fdeadf>] getname_flags+0xcc/0x550 fs/namei.c:137
[<00000000f32379ba>] user_path_at_empty+0x2f/0x50 fs/namei.c:2619
[<00000000da144d0a>] user_path_at include/linux/namei.h:55 [inline]
[<00000000da144d0a>] vfs_fstatat+0xc6/0x170 fs/stat.c:106
[<000000009cd80c2a>] vfs_stat fs/stat.c:123 [inline]
[<000000009cd80c2a>] SYSC_newstat fs/stat.c:270 [inline]
[<000000009cd80c2a>] SyS_newstat+0x94/0x100 fs/stat.c:266
[<0000000040583b25>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288
[<00000000ee450a1f>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
blkid invoked oom-killer: gfp_mask=0x24200ca(GFP_HIGHUSER_MOVABLE),
nodemask=0, order=0, oom_score_adj=-1000
CPU: 1 PID: 3039 Comm: blkid Not tainted 4.9.189+ #2
ffff8801cfee76f0 ffffffff81b65c01 ffff8801cfee7a48 ffffffff833f14f0
00000000fffffc18 ffff8801cfee7a60 0000000000000000 ffff8801cfee7770
ffffffff81506abb 0000000000000000 00000000fffffc18 ffffffff828289d5
Call Trace:
[<00000000f222e4f7>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000f222e4f7>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<00000000206f6772>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417
[<00000000fc142377>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852
[<00000000fb08c296>] out_of_memory mm/oom_kill.c:1069 [inline]
[<00000000fb08c296>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009
[<00000000e81393be>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline]
[<00000000e81393be>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline]
[<00000000e81393be>] __alloc_pages_nodemask+0x1730/0x1a80
mm/page_alloc.c:3861
[<000000001794940d>] __alloc_pages include/linux/gfp.h:433 [inline]
[<000000001794940d>] __alloc_pages_node include/linux/gfp.h:446 [inline]
[<000000001794940d>] alloc_pages_node include/linux/gfp.h:460 [inline]
[<000000001794940d>] __page_cache_alloc include/linux/pagemap.h:208
[inline]
[<000000001794940d>] pagecache_get_page+0x248/0x740 mm/filemap.c:1367
[<000000002c40e698>] filemap_fault+0xb1f/0x1360 mm/filemap.c:2331
[<000000007ef0db34>] ext4_filemap_fault+0x72/0xa0 fs/ext4/inode.c:5854
[<0000000035220a45>] __do_fault+0x2a8/0x6c0 mm/memory.c:2855
[<00000000d8f03312>] do_read_fault mm/memory.c:3202 [inline]
[<00000000d8f03312>] do_fault mm/memory.c:3338 [inline]
[<00000000d8f03312>] handle_pte_fault mm/memory.c:3547 [inline]
[<00000000d8f03312>] __handle_mm_fault mm/memory.c:3634 [inline]
[<00000000d8f03312>] handle_mm_fault+0x11bc/0x2420 mm/memory.c:3671
[<0000000079fbdebe>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1404
[<000000004144604c>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1467
[<00000000ea946d72>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:956
Mem-Info:
active_anon:5349 inactive_anon:39 isolated_anon:0
active_file:18 inactive_file:18 isolated_file:0
unevictable:0 dirty:0 writeback:1 unstable:0
slab_reclaimable:3861 slab_unreclaimable:58849
mapped:33 shmem:48 pagetables:452 bounce:0
free:6073 free_pcp:0 free_cma:0
Node 0 active_anon:21396kB inactive_anon:156kB active_file:72kB
inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB
mapped:132kB dirty:0kB writeback:4kB shmem:192kB writeback_tmp:0kB
unstable:0kB pages_scanned:0 all_unreclaimable? no
DMA32 free:18716kB min:4696kB low:7712kB high:10728kB active_anon:4kB
inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB
writepending:0kB present:3145324kB managed:3020100kB mlocked:0kB
slab_reclaimable:0kB slab_unreclaimable:4kB kernel_stack:0kB pagetables:0kB
bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
Normal free:5576kB min:5580kB low:9168kB high:12756kB active_anon:21392kB
inactive_anon:156kB active_file:72kB inactive_file:72kB unevictable:0kB
writepending:4kB present:4718592kB managed:3589316kB mlocked:0kB
slab_reclaimable:15444kB slab_unreclaimable:235392kB kernel_stack:4128kB
pagetables:1808kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
DMA32: 1*4kB (M) 4*8kB (UM) 5*16kB (UM) 4*32kB (UM) 1*64kB (M) 4*128kB (UM)
4*256kB (UM) 1*512kB (M) 2*1024kB (M) 1*2048kB (M) 3*4096kB (M) = 18740kB
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
313625 pages reserved
[ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents
oom_score_adj name
[ 470] 0 470 5383 185 15 3 0
-1000 udevd
[ 584] 0 584 5383 185 14 3 0
-1000 udevd
[ 585] 0 585 5383 185 14 3 0
-1000 udevd
[ 1761] 0 1761 2492 574 8 3 0
0 dhclient
[ 1902] 0 1902 14264 110 23 3 0
0 rsyslogd
[ 1957] 0 1957 3735 44 11 3 0
0 mcstransd
[ 1959] 0 1959 12926 1233 28 3 0
0 restorecond
[ 1966] 0 1966 4724 52 15 3 0
0 cron
[ 2003] 0 2003 12489 153 28 3 0
-1000 sshd
[ 2033] 0 2033 3648 37 13 3 0
0 getty
[ 2070] 0 2070 17820 196 40 3 0
0 sshd
[ 2072] 0 2072 33844 1810 30 5 0
0 syz-execprog
[ 2085] 0 2085 3648 43 12 3 0
0 getty
[ 2086] 0 2086 3648 43 12 3 0
0 getty
[ 2087] 0 2087 3648 43 13 3 0
0 getty
[ 2088] 0 2088 3648 42 13 3 0
0 getty
[ 2089] 0 2089 3648 42 13 3 0
0 getty
[ 2090] 0 2090 3648 43 13 3 0
0 getty
[ 2092] 0 2092 9408 16 5 2 0
0 syz-executor.3
[ 2096] 0 2096 9408 16 6 3 0
0 syz-executor.3
[ 2097] 0 2097 9408 16 5 2 0
0 syz-executor.2
[ 2098] 0 2098 9408 15 5 2 0
0 syz-executor.0
[ 2099] 0 2099 9408 16 6 3 0
0 syz-executor.2
[ 2100] 0 2100 9408 16 5 2 0
0 syz-executor.4
[ 2102] 0 2102 9407 29 6 3 0
0 syz-executor.0
[ 2103] 0 2103 9408 16 5 2 0
0 syz-executor.5
[ 2105] 0 2105 9408 16 6 3 0
0 syz-executor.4
[ 2107] 0 2107 9408 16 5 2 0
0 syz-executor.1
[ 2108] 0 2108 9408 16 6 3 0
0 syz-executor.5
[ 2111] 0 2111 9408 16 6 3 0
0 syz-executor.1
[ 2973] 0 2973 9507 37 9 4 0
1000 syz-executor.3
[ 2993] 0 2993 9507 37 9 4 0
1000 syz-executor.2
[ 2994] 0 2994 9507 37 9 4 0
1000 syz-executor.5
[ 3017] 0 3017 9507 38 9 4 0
1000 syz-executor.1
[ 3026] 0 3026 9507 38 9 4 0
1000 syz-executor.4
[ 3039] 0 3039 2067 15 8 3 0
-1000 blkid
[ 3041] 0 3041 9506 39 9 4 0
1000 syz-executor.0
Out of memory: Kill process 3041 (syz-executor.0) score 999 or sacrifice
child
Killed process 3041 (syz-executor.0) total-vm:38024kB, anon-rss:128kB,
file-rss:28kB, shmem-rss:0kB
oom_reaper: reaped process 3041 (syz-executor.0), now anon-rss:0kB,
file-rss:4kB, shmem-rss:0kB
oom_reaper: reaped process 2973 (syz-executor.3), now anon-rss:0kB,
file-rss:0kB, shmem-rss:0kB
lowmemorykiller: Killing 'syz-executor.0' (3047) (tgid 3047), adj 1000,
to free 1068kB on behalf of 'syz-executor.0' (3047) because
cache 6760kB is below limit 8192kB for oom_score_adj 1
Free memory is -13292kB above reserved
oom_reaper: reaped process 3047 (syz-executor.0), now anon-rss:0kB,
file-rss:4kB, shmem-rss:0kB
syz-executor.1 invoked oom-killer:
gfp_mask=0x24200ca(GFP_HIGHUSER_MOVABLE), nodemask=0, order=0,
oom_score_adj=0
CPU: 0 PID: 2111 Comm: syz-executor.1 Not tainted 4.9.189+ #2
ffff8801ce3376f0 ffffffff81b65c01 ffff8801ce337a48 ffffffff833f14f0
0000000000000000 ffff8801ce337a60 0000000000000000 ffff8801ce337770
ffffffff81506abb 0000000000000000 0000000000000000 ffffffff828289d5
Call Trace:
[<00000000f222e4f7>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000f222e4f7>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<00000000206f6772>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417
[<00000000fc142377>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852
[<00000000fb08c296>] out_of_memory mm/oom_kill.c:1069 [inline]
[<00000000fb08c296>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009
[<00000000e81393be>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline]
[<00000000e81393be>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline]
[<00000000e81393be>] __alloc_pages_nodemask+0x1730/0x1a80
mm/page_alloc.c:3861
[<000000001794940d>] __alloc_pages include/linux/gfp.h:433 [inline]
[<000000001794940d>] __alloc_pages_node include/linux/gfp.h:446 [inline]
[<000000001794940d>] alloc_pages_node include/linux/gfp.h:460 [inline]
[<000000001794940d>] __page_cache_alloc include/linux/pagemap.h:208
[inline]
[<000000001794940d>] pagecache_get_page+0x248/0x740 mm/filemap.c:1367
[<000000002c40e698>] filemap_fault+0xb1f/0x1360 mm/filemap.c:2331
[<000000007ef0db34>] ext4_filemap_fault+0x72/0xa0 fs/ext4/inode.c:5854
[<0000000035220a45>] __do_fault+0x2a8/0x6c0 mm/memory.c:2855
[<00000000d8f03312>] do_read_fault mm/memory.c:3202 [inline]
[<00000000d8f03312>] do_fault mm/memory.c:3338 [inline]
[<00000000d8f03312>] handle_pte_fault mm/memory.c:3547 [inline]
[<00000000d8f03312>] __handle_mm_fault mm/memory.c:3634 [inline]
[<00000000d8f03312>] handle_mm_fault+0x11bc/0x2420 mm/memory.c:3671
[<0000000079fbdebe>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1404
[<000000004144604c>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1467
[<00000000ea946d72>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:956
Mem-Info:
active_anon:5318 inactive_anon:39 isolated_anon:0
active_file:25 inactive_file:0 isolated_file:0
unevictable:0 dirty:10 writeback:0 unstable:0
slab_reclaimable:3875 slab_unreclaimable:58891
mapped:4 shmem:48 pagetables:436 bounce:0
free:4437 free_pcp:34 free_cma:0
Node 0 active_anon:21272kB inactive_anon:156kB active_file:100kB
inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB
mapped:16kB dirty:40kB writeback:0kB shmem:192kB writeback_tmp:0kB
unstable:0kB pages_scanned:32 all_unreclaimable? no
DMA32 free:17620kB min:4696kB low:7712kB high:10728kB active_anon:0kB
inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB
writepending:0kB present:3145324kB managed:3020100kB mlocked:0kB
slab_reclaimable:0kB slab_unreclaimable:4kB kernel_stack:0kB pagetables:0kB
bounce:0kB free_pcp:52kB local_pcp:52kB free_cma:0kB
Normal free:128kB min:5580kB low:9168kB high:12756kB active_anon:21272kB
inactive_anon:156kB active_file:100kB inactive_file:0kB unevictable:0kB
writepending:40kB present:4718592kB managed:3589316kB mlocked:0kB
slab_reclaimable:15500kB slab_unreclaimable:235560kB kernel_stack:4096kB
pagetables:1744kB bounce:0kB free_pcp:84kB local_pcp:84kB free_cma:0kB
DMA32: 1*4kB (M) 4*8kB (UM) 1*16kB (M) 1*32kB (M) 0*64kB 3*128kB (UM)
3*256kB (UM) 0*512kB 2*1024kB (UM) 1*2048kB (U) 3*4096kB (U) = 17620kB
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
313625 pages reserved
[ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents
oom_score_adj name
[ 470] 0 470 5383 185 15 3 0
-1000 udevd
[ 584] 0 584 5383 185 14 3 0
-1000 udevd
[ 585] 0 585 5383 185 14 3 0
-1000 udevd
[ 1761] 0 1761 2492 574 8 3 0
0 dhclient
[ 1902] 0 1902 14264 110 23 3 0
0 rsyslogd
[ 1957] 0 1957 3735 44 11 3 0
0 mcstransd
[ 1959] 0 1959 12926 1233 28 3 0
0 restorecond
[ 1966] 0 1966 4724 52 15 3 0
0 cron
[ 2003] 0 2003 12489 153 28 3 0
-1000 sshd
[ 2033] 0 2033 3648 37 13 3 0
0 getty
[ 2070] 0 2070 17820 196 40 3 0
0 sshd
[ 2072] 0 2072 33844 1810 30 5 0
0 syz-execprog
[ 2085] 0 2085 3648 43 12 3 0
0 getty
[ 2086] 0 2086 3648 43 12 3 0
0 getty
[ 2087] 0 2087 3648 43 13 3 0
0 getty
[ 2088] 0 2088 3648 42 13 3 0
0 getty
[ 2089] 0 2089 3648 42 13 3 0
0 getty
[ 2090] 0 2090 3648 43 13 3 0
0 getty
[ 2092] 0 2092 9408 16 5 2 0
0 syz-executor.3
[ 2096] 0 2096 9408 16 6 3 0
0 syz-executor.3
[ 2097] 0 2097 9408 16 5 2 0
0 syz-executor.2
[ 2098] 0 2098 9408 15 5 2 0
0 syz-executor.0
[ 2099] 0 2099 9408 16 6 3 0
0 syz-executor.2
[ 2100] 0 2100 9408 16 5 2 0
0 syz-executor.4
[ 2102] 0 2102 9407 22 6 3 0
0 syz-executor.0
[ 2103] 0 2103 9408 16 5 2 0
0 syz-executor.5
[ 2105] 0 2105 9408 16 6 3 0
0 syz-executor.4
[ 2107] 0 2107 9408 16 5 2 0
0 syz-executor.1
[ 2108] 0 2108 9408 16 6 3 0
0 syz-executor.5
[ 2111] 0 2111 9408 16 6 3 0
0 syz-executor.1
[ 2993] 0 2993 9507 37 9 4 0
1000 syz-executor.2
[ 2994] 0 2994 9507 37 9 4 0
1000 syz-executor.5
[ 3017] 0 3017 9507 38 9 4 0
1000 syz-executor.1
[ 3026] 0 3026 9507 37 9 4 0
1000 syz-executor.4
[ 3039] 0 3039 2067 15 8 3 0
-1000 blkid
[ 3047] 0 3047 9506 1 9 4 0
1000 syz-executor.0
Out of memory: Kill process 3017 (syz-executor.1) score 999 or sacrifice
child
Killed process 3017 (syz-executor.1) total-vm:38028kB, anon-rss:124kB,
file-rss:28kB, shmem-rss:0kB
oom_reaper: reaped process 3017 (syz-executor.1), now anon-rss:0kB,
file-rss:4kB, shmem-rss:0kB
syz-executor.1: page allocation failure: order:0, mode:0x2280020(GFP_ATOMIC|
__GFP_NOTRACK)
CPU: 1 PID: 3017 Comm: syz-executor.1 Not tainted 4.9.189+ #2
ffff8801db7074b0 ffffffff81b65c01 1ffff1003b6e0e98 dffffc0000000000
ffffffff82a999a0 0000000000000000 0000000002280020 ffff8801db7075d8
ffffffff81507d73 0000000041b58ab3 ffffffff82e3b338 ffffffff81431920
Call Trace:
<IRQ>
[<00000000f222e4f7>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000f222e4f7>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<0000000067d735b2>] warn_alloc.cold+0x76/0x93 mm/page_alloc.c:3069
[<00000000c7e8c7cf>] __alloc_pages_slowpath mm/page_alloc.c:3771 [inline]
[<00000000c7e8c7cf>] __alloc_pages_nodemask+0x5e8/0x1a80
mm/page_alloc.c:3861
[<000000003d16454e>] __alloc_pages include/linux/gfp.h:433 [inline]
[<000000003d16454e>] __alloc_pages_node include/linux/gfp.h:446 [inline]
[<000000003d16454e>] alloc_slab_page mm/slub.c:1408 [inline]
[<000000003d16454e>] allocate_slab mm/slub.c:1557 [inline]
[<000000003d16454e>] new_slab+0x33b/0x3e0 mm/slub.c:1635
[<00000000a7a25258>] new_slab_objects mm/slub.c:2419 [inline]
[<00000000a7a25258>] ___slab_alloc.constprop.0+0x361/0x470 mm/slub.c:2576
[<000000000501cfd6>] __slab_alloc.isra.0.constprop.0+0x50/0xa0
mm/slub.c:2618
[<00000000fad950ad>] slab_alloc_node mm/slub.c:2681 [inline]
[<00000000fad950ad>] slab_alloc mm/slub.c:2723 [inline]
[<00000000fad950ad>] kmem_cache_alloc_trace+0x22b/0x2d0 mm/slub.c:2740
[<0000000047d8cfa8>] kmalloc include/linux/slab.h:490 [inline]
[<0000000047d8cfa8>] dst_cow_metrics_generic+0x4d/0x130 net/core/dst.c:318
[<000000000b003fdd>] ipv6_cow_metrics+0x78/0x190 net/ipv6/route.c:190
[<00000000ffb0e345>] dst_metrics_write_ptr include/net/dst.h:146 [inline]
[<00000000ffb0e345>] dst_metric_set include/net/dst.h:207 [inline]
[<00000000ffb0e345>] icmp6_dst_alloc+0x487/0x620 net/ipv6/route.c:1669
[<00000000a9908d13>] ndisc_send_skb+0xcfe/0x1300 net/ipv6/ndisc.c:463
[<000000003badcbf5>] ndisc_send_rs+0x12b/0x670 net/ipv6/ndisc.c:662
[<000000002e28c81b>] addrconf_rs_timer+0x290/0x5c0 net/ipv6/addrconf.c:3754
[<0000000088939bed>] call_timer_fn+0x167/0x6d0 kernel/time/timer.c:1319
[<0000000031060b11>] expire_timers+0x25b/0x5c0 kernel/time/timer.c:1359
[<00000000a61ddbed>] __run_timers kernel/time/timer.c:1674 [inline]
[<00000000a61ddbed>] run_timer_softirq+0x1ff/0x620 kernel/time/timer.c:1687
[<000000008e736c4e>] __do_softirq+0x22d/0x964 kernel/softirq.c:288
[<000000001aeb0afb>] invoke_softirq kernel/softirq.c:368 [inline]
[<000000001aeb0afb>] irq_exit+0x119/0x160 kernel/softirq.c:409
[<000000006e15e01e>] exiting_irq arch/x86/include/asm/apic.h:669 [inline]
[<000000006e15e01e>] smp_apic_timer_interrupt+0x7e/0xb0
arch/x86/kernel/apic/apic.c:962
[<000000004287a593>] apic_timer_interrupt+0xa5/0xb0
arch/x86/entry/entry_64.S:653
<EOI>
[<00000000da2776b3>] __debug_check_no_obj_freed lib/debugobjects.c:733
[inline]
[<00000000da2776b3>] debug_check_no_obj_freed+0x2b9/0x6d0
lib/debugobjects.c:749
[<0000000026a83c3b>] __vunmap+0x13b/0x3a0 mm/vmalloc.c:1509
[<0000000000efa077>] vfree+0x50/0x110 mm/vmalloc.c:1556
[<000000007c115276>] __vmalloc_area_node mm/vmalloc.c:1668 [inline]
[<000000007c115276>] __vmalloc_node_range+0x42c/0x610 mm/vmalloc.c:1706
[<000000002aa5309c>] __vmalloc_node mm/vmalloc.c:1749 [inline]
[<000000002aa5309c>] __vmalloc+0x5a/0x70 mm/vmalloc.c:1755
[<000000008b2454e4>] copy_module_from_user kernel/module.c:2864 [inline]
[<000000008b2454e4>] SYSC_init_module kernel/module.c:3807 [inline]
[<000000008b2454e4>] SyS_init_module+0x137/0x210 kernel/module.c:3794
[<000000006bf2c5bd>] do_syscall_32_irqs_on arch/x86/entry/common.c:331
[inline]
[<000000006bf2c5bd>] do_int80_syscall_32+0x1db/0x600
arch/x86/entry/common.c:345
[<00000000ec4c0979>] entry_INT80_compat+0x74/0xa0
arch/x86/entry/entry_64_compat.S:371
Mem-Info:
active_anon:5318 inactive_anon:39 isolated_anon:0
active_file:25 inactive_file:0 isolated_file:0
unevictable:0 dirty:10 writeback:0 unstable:0
slab_reclaimable:3875 slab_unreclaimable:58891
mapped:4 shmem:48 pagetables:436 bounce:0
free:35 free_pcp:21 free_cma:0
Node 0 active_anon:21272kB inactive_anon:156kB active_file:100kB
inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB
mapped:16kB dirty:40kB writeback:0kB shmem:192kB writeback_tmp:0kB
unstable:0kB pages_scanned:0 all_unreclaimable? no
DMA32 free:12kB min:4696kB low:7712kB high:10728kB active_anon:0kB
inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB
writepending:0kB present:3145324kB managed:3020100kB mlocked:0kB
slab_reclaimable:0kB slab_unreclaimable:4kB kernel_stack:0kB pagetables:0kB
bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
Normal free:128kB min:5580kB low:9168kB high:12756kB active_anon:21272kB
inactive_anon:156kB active_file:100kB inactive_file:0kB unevictable:0kB
writepending:40kB present:4718592kB managed:3589316kB mlocked:0kB
slab_reclaimable:15500kB slab_unreclaimable:235560kB kernel_stack:4096kB
pagetables:1744kB bounce:0kB free_pcp:84kB local_pcp:0kB free_cma:0kB
DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB
0*2048kB 0*4096kB = 0kB
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
313625 pages reserved
SLUB: Unable to allocate memory on node -1, gfp=0x2080020(GFP_ATOMIC)
cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0,
min order: 0
node 0: slabs: 116, objs: 3712, free: 0
lowmemorykiller: Killing 'syz-executor.0' (3053) (tgid 3053), adj 1000,
to free 1068kB on behalf of 'syz-executor.0' (3053) because
cache 7664kB is below limit 8192kB for oom_score_adj 1
Free memory is -13376kB above reserved
oom_reaper: reaped process 3053 (syz-executor.0), now anon-rss:0kB,
file-rss:4kB, shmem-rss:0kB
rsyslogd invoked oom-killer: gfp_mask=0x24200ca(GFP_HIGHUSER_MOVABLE),
nodemask=0, order=0, oom_score_adj=0
CPU: 0 PID: 1906 Comm: rsyslogd Not tainted 4.9.189+ #2
ffff8801d3b2f6f0 ffffffff81b65c01 ffff8801d3b2fa48 ffffffff833f14f0
0000000000000000 ffff8801d3b2fa60 0000000000000000 ffff8801d3b2f770
ffffffff81506abb 0000000000000000 0000000000000000 ffffffff828289d5
Call Trace:
[<00000000f222e4f7>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000f222e4f7>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<00000000206f6772>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417
[<00000000fc142377>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852
[<00000000fb08c296>] out_of_memory mm/oom_kill.c:1069 [inline]
[<00000000fb08c296>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009
[<00000000e81393be>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline]
[<00000000e81393be>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline]
[<00000000e81393be>] __alloc_pages_nodemask+0x1730/0x1a80
mm/page_alloc.c:3861
[<000000001794940d>] __alloc_pages include/linux/gfp.h:433 [inline]
[<000000001794940d>] __alloc_pages_node include/linux/gfp.h:446 [inline]
[<000000001794940d>] alloc_pages_node include/linux/gfp.h:460 [inline]
[<000000001794940d>] __page_cache_alloc include/linux/pagemap.h:208
[inline]
[<000000001794940d>] pagecache_get_page+0x248/0x740 mm/filemap.c:1367
[<000000002c40e698>] filemap_fault+0xb1f/0x1360 mm/filemap.c:2331
[<000000007ef0db34>] ext4_filemap_fault+0x72/0xa0 fs/ext4/inode.c:5854
[<0000000035220a45>] __do_fault+0x2a8/0x6c0 mm/memory.c:2855
[<00000000d8f03312>] do_read_fault mm/memory.c:3202 [inline]
[<00000000d8f03312>] do_fault mm/memory.c:3338 [inline]
[<00000000d8f03312>] handle_pte_fault mm/memory.c:3547 [inline]
[<00000000d8f03312>] __handle_mm_fault mm/memory.c:3634 [inline]
[<00000000d8f03312>] handle_mm_fault+0x11bc/0x2420 mm/memory.c:3671
[<0000000079fbdebe>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1404
[<000000004144604c>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1467
[<00000000ea946d72>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:956
Mem-Info:
active_anon:5314 inactive_anon:39 isolated_anon:0
active_file:130 inactive_file:102 isolated_file:0
unevictable:0 dirty:13 writeback:0 unstable:0
slab_reclaimable:3902 slab_unreclaimable:58230
mapped:191 shmem:48 pagetables:436 bounce:0
free:11352 free_pcp:329 free_cma:0
Node 0 active_anon:21256kB inactive_anon:156kB active_file:520kB
inactive_file:508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB
mapped:764kB dirty:52kB writeback:0kB shmem:192kB writeback_tmp:0kB
unstable:0kB pages_scanned:0 all_unreclaimable? no
DMA32 free:279144kB min:4696kB low:7712kB high:10728kB active_anon:40kB
inactive_anon:0kB active_file:252kB inactive_file:492kB unevictable:0kB
writepending:0kB present:3145324kB managed:3020100kB mlocked:0kB
slab_reclaimable:32kB slab_unreclaimable:104kB kernel_stack:0kB
pagetables:0kB bounce:0kB free_pcp:1132kB local_pcp:488kB free_cma:0kB
lowmem_reserve[]: 0 3505 3505
Normal free:5516kB min:5580kB low:9168kB high:12756kB active_anon:21216kB
inactive_anon:156kB active_file:200kB inactive_file:156kB unevictable:0kB
writepending:36kB present:4718592kB managed:3589316kB mlocked:0kB
slab_reclaimable:15576kB slab_unreclaimable:232816kB kernel_stack:4032kB
pagetables:1744kB bounce:0kB free_pcp:192kB local_pcp:36kB free_cma:0kB
lowmem_reserve[]: 0 0 0
DMA32: 5*4kB (UM) 3*8kB (UM) 4*16kB (UM) 5*32kB (UM) 3*64kB (UE) 3*128kB
(UE) 4*256kB (UE) 3*512kB (UE) 23*1024kB (UE) 2*2048kB (U) 0*4096kB =
31052kB
Normal: 102*4kB (MEH) 44*8kB (UMEH) 66*16kB (UMEH) 39*32kB (UMEH) 24*64kB
[ 69.920246] lowmemorykiller: Killing 'syz-executor.2' (2993) (tgid
2993), adj 1000,
to free 124kB on behalf of 'syz-executor.2' (2993) because
cache 728kB is below limit 6144kB for oom_score_adj 0
Free memory is -7704kB above reserved
(UMH) 7*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5496kB
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
313625 pages reserved
[ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents
oom_score_adj name
[ 470] 0 470 5383 184 15 3 0
-1000 udevd
[ 584] 0 584 5383 184 14 3 0
-1000 udevd
[ 585] 0 585 5383 184 14 3 0
-1000 udevd
[ 1761] 0 1761 2492 574 8 3 0
0 dhclient
[ 1902] 0 1902 14264 110 23 3 0
0 rsyslogd
[ 1957] 0 1957 3735 44 11 3 0
0 mcstransd
[ 1959] 0 1959 12926 1233 28 3 0
0 restorecond
[ 1966] 0 1966 4724 52 15 3 0
0 cron
[ 2003] 0 2003 12489 153 28 3 0
-1000 sshd
[ 2033] 0 2033 3648 37 13 3 0
0 getty
[ 2070] 0 2070 17820 196 40 3 0
0 sshd
[ 2072] 0 2072 33844 1832 30 5 0
0 syz-execprog
[ 2085] 0 2085 3648 43 12 3 0
0 getty
[ 2086] 0 2086 3648 43 12 3 0
0 getty
[ 2087] 0 2087 3648 43 13 3 0
0 getty
[ 2088] 0 2088 3648 42 13 3 0
0 getty
[ 2089] 0 2089 3648 42 13 3 0
0 getty
[ 2090] 0 2090 3648 43 13 3 0
0 getty
[ 2092] 0 2092 9408 16 5 2 0
0 syz-executor.3
[ 2096] 0 2096 9407 23 6 3 0
0 syz-executor.3
[ 2097] 0 2097 9408 16 5 2 0
0 syz-executor.2
[ 2098] 0 2098 9408 15 5 2 0
0 syz-executor.0
[ 2099] 0 2099 9407 22 6 3 0
0 syz-executor.2
[ 2100] 0 2100 9408 16 5 2 0
0 syz-executor.4
[ 2102] 0 2102 9407 22 6 3 0
0 syz-executor.0
[ 2103] 0 2103 9408 16 5 2 0
0 syz-executor.5
lowmemorykiller: Killing 'syz-executor.2' (2993) (tgid 2993), adj 1000,
to free 124kB on behalf of 'syz-execprog' (2094) because
cache 232kB is below limit 6144kB for oom_score_adj 0
Free memory is -13296kB above reserved
lowmemorykiller: Killing 'syz-executor.2' (2993) (tgid 2993), adj 1000,
to free 124kB on behalf of 'udevd' (585) because
cache 232kB is below limit 6144kB for oom_score_adj 0
Free memory is -13296kB above reserved
[ 2105] 0 2105 9407 22 6 3 0
0 syz-executor.4
[ 2107] 0 2107 9408 16 5 2 0
0 syz-executor.1
[ 2108] 0 2108 9407 22 6 3 0
0 syz-executor.5
[ 2111] 0 2111 9407 23 6 3 0
0 syz-executor.1
[ 2993] 0 2993 9507 31 9 4 0
1000 syz-executor.2
[ 2994] 0 2994 9507 31 9 4 0
1000 syz-executor.5
[ 3026] 0 3026 9507 31 9 4 0
1000 syz-executor.4
[ 3057] 0 3057 5383 185 14 3 0
-1000 udevd
[ 3058] 0 3058 5383 184 12 3 0
-1000 udevd
Out of memory: Kill process 2993 (syz-executor.2) score 999 or sacrifice
child
Killed process 2993 (syz-executor.2) total-vm:38028kB, anon-rss:124kB,
file-rss:0kB, shmem-rss:0kB
oom_reaper: reaped process 2993 (syz-executor.2), now anon-rss:0kB,
file-rss:0kB, shmem-rss:0kB
oom_reaper: reaped process 2994 (syz-executor.5), now anon-rss:0kB,
file-rss:0kB, shmem-rss:0kB
oom_reaper: reaped process 3026 (syz-executor.4), now anon-rss:0kB,
file-rss:0kB, shmem-rss:0kB
udevd invoked oom-killer: gfp_mask=0x24200ca(GFP_HIGHUSER_MOVABLE),
nodemask=0, order=0, oom_score_adj=-1000
CPU: 1 PID: 585 Comm: udevd Not tainted 4.9.189+ #2
ffff8801cfa376f0 ffffffff81b65c01 ffff8801cfa37a48 ffffffff833f14f0
00000000fffffc18 ffff8801cfa37a60 0000000000000000 ffff8801cfa37770
ffffffff81506abb 0000000000000000 00000000fffffc18 ffffffff828289d5
Call Trace:
[<00000000f222e4f7>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000f222e4f7>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<00000000206f6772>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417
[<00000000fc142377>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852
[<00000000fb08c296>] out_of_memory mm/oom_kill.c:1069 [inline]
[<00000000fb08c296>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009
[<00000000e81393be>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline]
[<00000000e81393be>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline]
[<00000000e81393be>] __alloc_pages_nodemask+0x1730/0x1a80
mm/page_alloc.c:3861
[<000000001794940d>] __alloc_pages include/linux/gfp.h:433 [inline]
[<000000001794940d>] __alloc_pages_node include/linux/gfp.h:446 [inline]
[<000000001794940d>] alloc_pages_node include/linux/gfp.h:460 [inline]
[<000000001794940d>] __page_cache_alloc include/linux/pagemap.h:208
[inline]
[<000000001794940d>] pagecache_get_page+0x248/0x740 mm/filemap.c:1367
[<000000002c40e698>] filemap_fault+0xb1f/0x1360 mm/filemap.c:2331
[<000000007ef0db34>] ext4_filemap_fault+0x72/0xa0 fs/ext4/inode.c:5854
[<0000000035220a45>] __do_fault+0x2a8/0x6c0 mm/memory.c:2855
[<00000000d8f03312>] do_read_fault mm/memory.c:3202 [inline]
[<00000000d8f03312>] do_fault mm/memory.c:3338 [inline]
[<00000000d8f03312>] handle_pte_fault mm/memory.c:3547 [inline]
[<00000000d8f03312>] __handle_mm_fault mm/memory.c:3634 [inline]
[<00000000d8f03312>] handle_mm_fault+0x11bc/0x2420 mm/memory.c:3671
[<0000000079fbdebe>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1404
[<000000004144604c>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1467
[<00000000ea946d72>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:956
Mem-Info:
active_anon:5254 inactive_anon:38 isolated_anon:0
active_file:13 inactive_file:45 isolated_file:0
unevictable:0 dirty:1 writeback:0 unstable:0
slab_reclaimable:3915 slab_unreclaimable:58204
mapped:12 shmem:48 pagetables:446 bounce:0
free:255 free_pcp:64 free_cma:0
Node 0 active_anon:21016kB inactive_anon:152kB active_file:52kB
inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB
mapped:48kB dirty:4kB writeback:0kB shmem:192kB writeback_tmp:0kB
unstable:0kB pages_scanned:1 all_unreclaimable? yes
DMA32 free:40kB min:4696kB low:7712kB high:10728kB active_anon:88kB
inactive_anon:4kB active_file:36kB inactive_file:108kB unevictable:0kB
writepending:0kB present:3145324kB managed:3020100kB mlocked:0kB
slab_reclaimable:48kB slab_unreclaimable:676kB kernel_stack:64kB
pagetables:108kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB
Normal free:980kB min:5580kB low:9168kB high:12756kB active_anon:20928kB
inactive_anon:148kB active_file:16kB inactive_file:72kB unevictable:0kB
writepending:4kB present:4718592kB managed:3589316kB mlocked:0kB
slab_reclaimable:15612kB slab_unreclaimable:232140kB kernel_stack:4000kB
pagetables:1676kB bounce:0kB free_pcp:136kB local_pcp:0kB free_cma:0kB
DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB
0*2048kB 0*4096kB = 0kB
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
313625 pages reserved
[ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents
oom_score_adj name
[ 470] 0 470 5383 184 15 3 0
-1000 udevd
[ 584] 0 584 5383 184 14 3 0
-1000 udevd
[ 585] 0 585 5383 184 14 3 0
-1000 udevd
[ 1761] 0 1761 2492 574 8 3 0
0 dhclient
[ 1902] 0 1902 14264 110 23 3 0
0 rsyslogd
[ 1957] 0 1957 3735 44 11 3 0
0 mcstransd
[ 1959] 0 1959 12926 1233 28 3 0
0 restorecond
[ 1966] 0 1966 4724 52 15 3 0
0 cron
[ 2003] 0 2003 12489 153 28 3 0
-1000 sshd
[ 2033] 0 2033 3648 37 13 3 0
0 getty
[ 2070] 0 2070 17820 196 40 3 0
0 sshd
[ 2072] 0 2072 33844 1832 30 5 0
0 syz-execprog
[ 2085] 0 2085 3648 43 12 3 0
0 getty
[ 2086] 0 2086 3648 43 12 3 0
0 getty
[ 2087] 0 2087 3648 43 13 3 0
0 getty
[ 2088] 0 2088 3648 42 13 3 0
0 getty
[ 2089] 0 2089 3648 42 13 3 0
0 getty
[ 2090] 0 2090 3648 43 13 3 0
0 getty
[ 2092] 0 2092 9408 16 5 2 0
0 syz-executor.3
[ 2096] 0 2096 9407 23 6 3 0
0 syz-executor.3
[ 2097] 0 2097 9408 16 5 2 0
0 syz-executor.2
[ 2098] 0 2098 9408 15 5 2 0
0 syz-executor.0
[ 2099] 0 2099 9407 22 6 3 0
0 syz-executor.2
[ 2100] 0 2100 9408 16 5 2 0
0 syz-executor.4
[ 2102] 0 2102 9407 22 6 3 0
0 syz-executor.0
[ 2103] 0 2103 9408 16 5 2 0
0 syz-executor.5
[ 2105] 0 2105 9407 22 6 3 0
0 syz-executor.4
[ 2107] 0 2107 9408 16 5 2 0
0 syz-executor.1
[ 2108] 0 2108 9407 22 6 3 0
0 syz-executor.5
[ 2111] 0 2111 9407 23 6 3 0
0 syz-executor.1
[ 2993] 0 2993 9507 0 9 4 0
1000 syz-executor.2
[ 2994] 0 2994 9507 0 9 4 0
1000 syz-executor.5
[ 3026] 0 3026 9507 0 9 4 0
1000 syz-executor.4
[ 3057] 0 3057 5383 185 14 3 0
-1000 udevd
[ 3058] 0 3058 5383 184 12 3 0
-1000 udevd
Out of memory: Kill process 2072 (syz-execprog) score 1 or sacrifice child
Killed process 2092 (syz-executor.3) total-vm:37632kB, anon-rss:64kB,
file-rss:0kB, shmem-rss:0kB
udevd invoked oom-killer: gfp_mask=0x24200ca(GFP_HIGHUSER_MOVABLE),
nodemask=0, order=0, oom_score_adj=-1000
CPU: 1 PID: 585 Comm: udevd Not tainted 4.9.189+ #2
ffff8801cfa376f0 ffffffff81b65c01 ffff8801cfa37a48 ffffffff833f14f0
00000000fffffc18 ffff8801cfa37a60 0000000000000000 ffff8801cfa37770
ffffffff81506abb 0000000000000000 00000000fffffc18 ffffffff828289d5
Call Trace:
[<00000000f222e4f7>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000f222e4f7>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<00000000206f6772>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417
[<00000000fc142377>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852
[<00000000fb08c296>] out_of_memory mm/oom_kill.c:1069 [inline]
[<00000000fb08c296>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009
[<00000000e81393be>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline]
[<00000000e81393be>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline]
[<00000000e81393be>] __alloc_pages_nodemask+0x1730/0x1a80
mm/page_alloc.c:3861
[<000000001794940d>] __alloc_pages include/linux/gfp.h:433 [inline]
[<000000001794940d>] __alloc_pages_node include/linux/gfp.h:446 [inline]
[<000000001794940d>] alloc_pages_node include/linux/gfp.h:460 [inline]
[<000000001794940d>] __page_cache_alloc include/linux/pagemap.h:208
[inline]
[<000000001794940d>] pagecache_get_page+0x248/0x740 mm/filemap.c:1367
[<000000002c40e698>] filemap_fault+0xb1f/0x1360 mm/filemap.c:2331
[<000000007ef0db34>] ext4_filemap_fault+0x72/0xa0 fs/ext4/inode.c:5854
[<0000000035220a45>] __do_fault+0x2a8/0x6c0 mm/memory.c:2855
[<00000000d8f03312>] do_read_fault mm/memory.c:3202 [inline]
[<00000000d8f03312>] do_fault mm/memory.c:3338 [inline]
[<00000000d8f03312>] handle_pte_fault mm/memory.c:3547 [inline]
[<00000000d8f03312>] __handle_mm_fault mm/memory.c:3634 [inline]
[<00000000d8f03312>] handle_mm_fault+0x11bc/0x2420 mm/memory.c:3671
[<0000000079fbdebe>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1404
[<000000004144604c>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1467
[<00000000ea946d72>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:956
Mem-Info:
active_anon:5229 inactive_anon:38 isolated_anon:0
active_file:13 inactive_file:45 isolated_file:0
unevictable:0 dirty:1 writeback:0 unstable:0
slab_reclaimable:3915 slab_unreclaimable:58204
mapped:12 shmem:48 pagetables:446 bounce:0
free:255 free_pcp:120 free_cma:0
Node 0 active_anon:20916kB inactive_anon:152kB active_file:52kB
inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB
mapped:48kB dirty:4kB writeback:0kB shmem:192kB writeback_tmp:0kB
unstable:0kB pages_scanned:1 all_unreclaimable? yes
DMA32 free:40kB min:4696kB low:7712kB high:10728kB active_anon:88kB
inactive_anon:4kB active_file:36kB inactive_file:108kB unevictable:0kB
writepending:0kB present:3145324kB managed:3020100kB mlocked:0kB
slab_reclaimable:48kB slab_unreclaimable:676kB kernel_stack:64kB
pagetables:108kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB
Normal free:980kB min:5580kB low:9168kB high:12756kB active_anon:20828kB
inactive_anon:148kB active_file:16kB inactive_file:72kB unevictable:0kB
writepending:4kB present:4718592kB managed:3589316kB mlocked:0kB
slab_reclaimable:15612kB slab_unreclaimable:232140kB kernel_stack:3968kB
pagetables:1676kB bounce:0kB free_pcp:360kB local_pcp:224kB free_cma:0kB
DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB
0*2048kB 0*4096kB = 0kB
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
313625 pages reserved
[ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents
oom_score_adj name
[ 470] 0 470 5383 184 15 3 0
-1000 udevd
[ 584] 0 584 5383 184 14 3 0
-1000 udevd
[ 585] 0 585 5383 184 14 3 0
-1000 udevd
[ 1761] 0 1761 2492 574 8 3 0
0 dhclient
[ 1902] 0 1902 14264 110 23 3 0
0 rsyslogd
[ 1957] 0 1957 3735 44 11 3 0
0 mcstransd
[ 1959] 0 1959 12926 1233 28 3 0
0 restorecond
[ 1966] 0 1966 4724 52 15 3 0
0 cron
[ 2003] 0 2003 12489 153 28 3 0
-1000 sshd
[ 2033] 0 2033 3648 37 13 3 0
0 getty
[ 2070] 0 2070 17820 196 40 3 0
0 sshd
[ 2072] 0 2072 33844 1832 30 5 0
0 syz-execprog
[ 2085] 0 2085 3648 43 12 3 0
0 getty
[ 2086] 0 2086 3648 43 12 3 0
0 getty
[ 2087] 0 2087 3648 43 13 3 0
0 getty
[ 2088] 0 2088 3648 42 13 3 0
0 getty
[ 2089] 0 2089 3648 42 13 3 0
0 getty
[ 2090] 0 2090 3648 43 13 3 0
0 getty
[ 2097] 0 2097 9408 16 5 2 0
0 syz-executor.2
[ 2098] 0 2098 9408 15 5 2 0
0 syz-executor.0
[ 2099] 0 2099 9407 22 6 3 0
0 syz-executor.2
[ 2100] 0 2100 9408 16 5 2 0
0 syz-executor.4
[ 2102] 0 2102 9407 22 6 3 0
0 syz-executor.0
[ 2103] 0 2103 9408 16 5 2 0
0 syz-executor.5
[ 2105] 0 2105 9407 22 6 3 0
0 syz-executor.4
[ 2107] 0 2107 9408 16 5 2 0
0 syz-executor.1
[ 2108] 0 2108 9407 22 6 3 0
0 syz-executor.5
[ 2111] 0 2111 9407 23 6 3 0
0 syz-executor.1
[ 2993] 0 2993 9507 0 9 4 0
1000 syz-executor.2
[ 2994] 0 2994 9507 0 9 4 0
1000 syz-executor.5
[ 3026] 0 3026 9507 0 9 4 0
1000 syz-executor.4
[ 3057] 0 3057 5383 185 14 3 0
-1000 udevd
[ 3058] 0 3058 5383 184 12 3 0
-1000 udevd
Out of memory: Kill process 2072 (syz-execprog) score 1 or sacrifice child
Killed process 2097 (syz-executor.2) total-vm:37632kB, anon-rss:64kB,
file-rss:0kB, shmem-rss:0kB
udevd invoked oom-killer: gfp_mask=0x24200ca(GFP_HIGHUSER_MOVABLE),
nodemask=0, order=0, oom_score_adj=-1000
CPU: 1 PID: 585 Comm: udevd Not tainted 4.9.189+ #2
ffff8801cfa376f0 ffffffff81b65c01 ffff8801cfa37a48 ffffffff833f14f0
00000000fffffc18 ffff8801cfa37a60 0000000000000000 ffff8801cfa37770
ffffffff81506abb 0000000000000000 00000000fffffc18 ffffffff828289d5
Call Trace:
[<00000000f222e4f7>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000f222e4f7>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<00000000206f6772>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417
[<00000000fc142377>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852
[<00000000fb08c296>] out_of_memory mm/oom_kill.c:1069 [inline]
[<00000000fb08c296>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009
[<00000000e81393be>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline]
[<00000000e81393be>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline]
[<00000000e81393be>] __alloc_pages_nodemask+0x1730/0x1a80
mm/page_alloc.c:3861
[<000000001794940d>] __alloc_pages include/linux/gfp.h:433 [inline]
[<000000001794940d>] __alloc_pages_node include/linux/gfp.h:446 [inline]
[<000000001794940d>] alloc_pages_node include/linux/gfp.h:460 [inline]
[<000000001794940d>] __page_cache_alloc include/linux/pagemap.h:208
[inline]
[<000000001794940d>] pagecache_get_page+0x248/0x740 mm/filemap.c:1367
[<000000002c40e698>] filemap_fault+0xb1f/0x1360 mm/filemap.c:2331
[<000000007ef0db34>] ext4_filemap_fault+0x72/0xa0 fs/ext4/inode.c:5854
[<0000000035220a45>] __do_fault+0x2a8/0x6c0 mm/memory.c:2855
[<00000000d8f03312>] do_read_fault mm/memory.c:3202 [inline]
[<00000000d8f03312>] do_fault mm/memory.c:3338 [inline]
[<00000000d8f03312>] handle_pte_fault mm/memory.c:3547 [inline]
[<00000000d8f03312>] __handle_mm_fault mm/memory.c:3634 [inline]
[<00000000d8f03312>] handle_mm_fault+0x11bc/0x2420 mm/memory.c:3671
[<0000000079fbdebe>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1404
[<000000004144604c>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1467
[<00000000ea946d72>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:956
Mem-Info:
active_anon:5204 inactive_anon:38 isolated_anon:0
active_file:13 inactive_file:45 isolated_file:0
unevictable:0 dirty:1 writeback:0 unstable:0
slab_reclaimable:3915 slab_unreclaimable:58204
mapped:12 shmem:48 pagetables:446 bounce:0
free:255 free_pcp:175 free_cma:0
Node 0 active_anon:20816kB inactive_anon:152kB active_file:52kB
inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB
mapped:48kB dirty:4kB writeback:0kB shmem:192kB writeback_tmp:0kB
unstable:0kB pages_scanned:1 all_unreclaimable? yes
DMA32 free:40kB min:4696kB low:7712kB high:10728kB active_anon:88kB
inactive_anon:4kB active_file:36kB inactive_file:108kB unevictable:0kB
writepending:0kB present:3145324kB managed:3020100kB mlocked:0kB
slab_reclaimable:48kB slab_unreclaimable:676kB kernel_stack:64kB
pagetables:108kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB
Normal free:980kB min:5580kB low:9168kB high:12756kB active_anon:20728kB
inactive_anon:148kB active_file:16kB inactive_file:72kB unevictable:0kB
writepending:4kB present:4718592kB managed:3589316kB mlocked:0kB
slab_reclaimable:15612kB slab_unreclaimable:232140kB kernel_stack:3936kB
pagetables:1676kB bounce:0kB free_pcp:568kB local_pcp:308kB free_cma:0kB
DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB
0*2048kB 0*4096kB = 0kB
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
313625 pages reserved
[ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents
oom_score_adj name
[ 470] 0 470 5383 184 15 3 0
-1000 udevd
[ 584] 0 584 5383 184 14 3 0
-1000 udevd
[ 585] 0 585 5383 184 14 3 0
-1000 udevd
[ 1761] 0 1761 2492 574 8 3 0
0 dhclient
[ 1902] 0 1902 14264 110 23 3 0
0 rsyslogd
[ 1957] 0 1957 3735 44 11 3 0
0 mcstransd
[ 1959] 0 1959 12926 1233 28 3 0
0 restorecond
[ 1966] 0 1966 4724 52 15 3 0
0 cron
[ 2003] 0 2003 12489 153 28 3 0
-1000 sshd
[ 2033] 0 2033 3648 37 13 3 0
0 getty
[ 2070] 0 2070 17820 196 40 3 0
0 sshd
[ 2072] 0 2072 33844 1832 30 5 0
0 syz-execprog
[ 2085] 0 2085 3648 43 12 3 0
0 getty
[ 2086] 0 2086 3648 43 12 3 0
0 getty
[ 2087] 0 2087 3648 43 13 3 0
0 getty
[ 2088] 0 2088 3648 42 13 3 0
0 getty
[ 2089] 0 2089 3648 42 13 3 0
0 getty
[ 2090] 0 2090 3648 43 13 3 0
0 getty
[ 2098] 0 2098 9408 15 5 2 0
0 syz-executor.0
[ 2100] 0 2100 9408 16 5 2 0
0 syz-executor.4
[ 2102] 0 2102 9407 22 6 3 0
0 syz-executor.0
[ 2103] 0 2103 9408 16 5 2 0
0 syz-executor.5
[ 2105] 0 2105 9407 22 6 3 0
0 syz-executor.4
[ 2107] 0 2107 9408 16 5 2 0
0 syz-executor.1
[ 2108] 0 2108 9407 22 6 3 0
0 syz-executor.5
[ 2111] 0 2111 9407 23 6 3 0
0 syz-executor.1
[ 2993] 0 2993 9507 0 9 4 0
1000 syz-executor.2
[ 2994] 0 2994 9507 0 9 4 0
1000 syz-executor.5
[ 3026] 0 3026 9507 0 9 4 0
1000 syz-executor.4
[ 3057] 0 3057 5383 185 14 3 0
-1000 udevd
[ 3058] 0 3058 5383 184 12 3 0
-1000 udevd
Out of memory: Kill process 2072 (syz-execprog) score 1 or sacrifice child
Killed process 2103 (syz-executor.5) total-vm:37632kB, anon-rss:64kB,
file-rss:0kB, shmem-rss:0kB
udevd invoked oom-killer: gfp_mask=0x24200ca(GFP_HIGHUSER_MOVABLE),
nodemask=0, order=0, oom_score_adj=-1000
CPU: 1 PID: 585 Comm: udevd Not tainted 4.9.189+ #2
ffff8801cfa376f0 ffffffff81b65c01 ffff8801cfa37a48 ffffffff833f14f0
00000000fffffc18 ffff8801cfa37a60 0000000000000000 ffff8801cfa37770
ffffffff81506abb 0000000000000000 00000000fffffc18 ffffffff828289d5
Call Trace:
[<00000000f222e4f7>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000f222e4f7>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<00000000206f6772>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417
[<00000000fc142377>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852
[<00000000fb08c296>] out_of_memory mm/oom_kill.c:1069 [inline]
[<00000000fb08c296>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009
[<00000000e81393be>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline]
[<00000000e81393be>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline]
[<00000000e81393be>] __alloc_pages_nodemask+0x1730/0x1a80
mm/page_alloc.c:3861
[<000000001794940d>] __alloc_pages include/linux/gfp.h:433 [inline]
[<000000001794940d>] __alloc_pages_node include/linux/gfp.h:446 [inline]
[<000000001794940d>] alloc_pages_node include/linux/gfp.h:460 [inline]
[<000000001794940d>] __page_cache_alloc include/linux/pagemap.h:208
[inline]
[<000000001794940d>] pagecache_get_page+0x248/0x740 mm/filemap.c:1367
[<000000002c40e698>] filemap_fault+0xb1f/0x1360 mm/filemap.c:2331
[<000000007ef0db34>] ext4_filemap_fault+0x72/0xa0 fs/ext4/inode.c:5854
[<0000000035220a45>] __do_fault+0x2a8/0x6c0 mm/memory.c:2855
[<00000000d8f03312>] do_read_fault mm/memory.c:3202 [inline]
[<00000000d8f03312>] do_fault mm/memory.c:3338 [inline]
[<00000000d8f03312>] handle_pte_fault mm/memory.c:3547 [inline]
[<00000000d8f03312>] __handle_mm_fault mm/memory.c:3634 [inline]
[<00000000d8f03312>] handle_mm_fault+0x11bc/0x2420 mm/memory.c:3671
[<0000000079fbdebe>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1404
[<000000004144604c>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1467
[<00000000ea946d72>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:956
Mem-Info:
active_anon:5154 inactive_anon:38 isolated_anon:0
active_file:13 inactive_file:45 isolated_file:0
unevictable:0 dirty:1 writeback:0 unstable:0
slab_reclaimable:3915 slab_unreclaimable:58204
mapped:12 shmem:48 pagetables:446 bounce:0
free:255 free_pcp:230 free_cma:0
Node 0 active_anon:20616kB inactive_anon:152kB active_file:52kB
inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB
mapped:48kB dirty:4kB writeback:0kB shmem:192kB writeback_tmp:0kB
unstable:0kB pages_scanned:1 all_unreclaimable? yes
DMA32 free:40kB min:4696kB low:7712kB high:10728kB active_anon:88kB
inactive_anon:4kB active_file:36kB inactive_file:108kB unevictable:0kB
writepending:0kB present:3145324kB managed:3020100kB mlocked:0kB
slab_reclaimable:48kB slab_unreclaimable:676kB kernel_stack:64kB
pagetables:108kB bounce:0kB free_pcp:144kB local_pcp:0kB free_cma:0kB
Normal free:980kB min:5580kB low:9168kB high:12756kB active_anon:20528kB
inactive_anon:148kB active_file:16kB inactive_file:72kB unevictable:0kB
writepending:4kB present:4718592kB managed:3589316kB mlocked:0kB
slab_reclaimable:15612kB slab_unreclaimable:232140kB kernel_stack:3904kB
pagetables:1676kB bounce:0kB free_pcp:776kB local_pcp:392kB free_cma:0kB
DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB
0*2048kB 0*4096kB = 0kB
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
313625 pages reserved
[ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents
oom_score_adj name
[ 470] 0 470 5383 184 15 3 0
-1000 udevd
[ 584] 0 584 5383 184 14 3 0
-1000 udevd
[ 585] 0 585 5383 184 14 3 0
-1000 udevd
[ 1761] 0 1761 2492 574 8 3 0
0 dhclient
[ 1902] 0 1902 14264 110 23 3 0
0 rsyslogd
[ 1957] 0 1957 3735 44 11 3 0
0 mcstransd
[ 1959] 0 1959 12926 1233 28 3 0
0 restorecond
[ 1966] 0 1966 4724 52 15 3 0
0 cron
[ 2003] 0 2003 12489 153 28 3 0
-1000 sshd
[ 2033] 0 2033 3648 37 13 3 0
0 getty
[ 2070] 0 2070 17820 196 40 3 0
0 sshd
[ 2072] 0 2072 33844 1832 30 5 0
0 syz-execprog
[ 2085] 0 2085 3648 43 12 3 0
0 getty
[ 2086] 0 2086 3648 43 12 3 0
0 getty
[ 2087] 0 2087 3648 43 13 3 0
0 getty
[ 2088] 0 2088 3648 42 13 3 0
0 getty
[ 2089] 0 2089 3648 42 13 3 0
0 getty
[ 2090] 0 2090 3648 43 13 3 0
0 getty
[ 2098] 0 2098 9408 15 5 2 0
0 syz-executor.0
[ 2100] 0 2100 9408 16 5 2 0
0 syz-executor.4
[ 2102] 0 2102 9407 22 6 3 0
0 syz-executor.0
[ 2105] 0 2105 9407 22 6 3 0
0 syz-executor.4
[ 2107] 0 2107 9408 16 5 2 0
0 syz-executor.1
[ 2111] 0 2111 9407 23 6 3 0
0 syz-executor.1
[ 2993] 0 2993 9507 0 9 4 0
1000 syz-executor.2
[ 2994] 0 2994 9507 0 9 4 0
1000 syz-executor.5
[ 3026] 0 3026 9507 0 9 4 0
1000 syz-executor.4
[ 3057] 0 3057 5383 185 14 3 0
-1000 udevd
[ 3058] 0 3058 5383 184 12 3 0
-1000 udevd
Out of memory: Kill process 2072 (syz-execprog) score 1 or sacrifice child
Killed process 2107 (syz-executor.1) total-vm:37632kB, anon-rss:64kB,
file-rss:0kB, shmem-rss:0kB
syz-executor.0 invoked oom-killer:
gfp_mask=0x24200ca(GFP_HIGHUSER_MOVABLE), nodemask=0, order=0,
oom_score_adj=0
CPU: 0 PID: 2102 Comm: syz-executor.0 Not tainted 4.9.189+ #2
ffff8801ce24f6f0 ffffffff81b65c01 ffff8801ce24fa48 ffffffff833f14f0
0000000000000000 ffff8801ce24fa60 0000000000000000 ffff8801ce24f770
ffffffff81506abb 0000000000000000 0000000000000000 ffffffff828289d5
Call Trace:
[<00000000f222e4f7>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000f222e4f7>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<00000000206f6772>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417
[<00000000fc142377>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852
[<00000000fb08c296>] out_of_memory mm/oom_kill.c:1069 [inline]
[<00000000fb08c296>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009
[<00000000e81393be>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline]
[<00000000e81393be>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline]
[<00000000e81393be>] __alloc_pages_nodemask+0x1730/0x1a80
mm/page_alloc.c:3861
[<000000001794940d>] __alloc_pages include/linux/gfp.h:433 [inline]
[<000000001794940d>] __alloc_pages_node include/linux/gfp.h:446 [inline]
[<000000001794940d>] alloc_pages_node include/linux/gfp.h:460 [inline]
[<000000001794940d>] __page_cache_alloc include/linux/pagemap.h:208
[inline]
[<000000001794940d>] pagecache_get_page+0x248/0x740 mm/filemap.c:1367
[<000000002c40e698>] filemap_fault+0xb1f/0x1360 mm/filemap.c:2331
[<000000007ef0db34>] ext4_filemap_fault+0x72/0xa0 fs/ext4/inode.c:5854
[<0000000035220a45>] __do_fault+0x2a8/0x6c0 mm/memory.c:2855
[<00000000d8f03312>] do_read_fault mm/memory.c:3202 [inline]
[<00000000d8f03312>] do_fault mm/memory.c:3338 [inline]
[<00000000d8f03312>] handle_pte_fault mm/memory.c:3547 [inline]
[<00000000d8f03312>] __handle_mm_fault mm/memory.c:3634 [inline]
[<00000000d8f03312>] handle_mm_fault+0x11bc/0x2420 mm/memory.c:3671
[<0000000079fbdebe>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1404
[<000000004144604c>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1467
[<00000000ea946d72>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:956
Mem-Info:
active_anon:5129 inactive_anon:38 isolated_anon:0
active_file:13 inactive_file:45 isolated_file:0
unevictable:0 dirty:1 writeback:0 unstable:0
slab_reclaimable:3915 slab_unreclaimable:58204
mapped:12 shmem:48 pagetables:409 bounce:0
free:255 free_pcp:286 free_cma:0

---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this bug, for details see:
https://goo.gl/tpsmEJ#testing-patches

syzbot

unread,

Aug 16, 2019, 5:06:07 PM8/16/19

to syzkaller-a...@googlegroups.com

syzbot has found a reproducer for the following crash on:

HEAD commit: 10c44c01 f2fs: fix build error on android tracepoints
git tree: android-4.9

console output: https://syzkaller.appspot.com/x/log.txt?x=113e0c4c600000

kernel config: https://syzkaller.appspot.com/x/.config?x=5944ab99bb3d7b7c
dashboard link: https://syzkaller.appspot.com/bug?extid=304321c8095cbd4c9d64
compiler: gcc (GCC) 9.0.0 20181231 (experimental)

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=14ff69e2600000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10ba11e2600000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+304321...@syzkaller.appspotmail.com

lowmemorykiller: Killing 'syz-executor594' (2069) (tgid 2069), adj 1000,
to free 48kB on behalf of 'syz-executor594' (2077) because
cache 33812kB is below limit 65536kB for oom_score_adj 12
Free memory is -13460kB above reserved

=================================
[ INFO: inconsistent lock state ]
4.9.189+ #2 Not tainted
---------------------------------
inconsistent {RECLAIM_FS-ON-W} -> {IN-RECLAIM_FS-R} usage.

syz-executor594/2077 [HC0[0]:SC0[0]:HE1:SE1] takes:
(&mm->mmap_sem){+++++?}, at: [<000000004098cf50>] get_cmdline+0xa3/0x2d0

irq event stamp: 483977
hardirqs last enabled at (483977): [<000000009650113e>]
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:162 [inline]
hardirqs last enabled at (483977): [<000000009650113e>]
_raw_spin_unlock_irqrestore+0x5a/0x70 kernel/locking/spinlock.c:191
hardirqs last disabled at (483976): [<00000000e4e82e53>]
rcu_read_unlock_special+0x3a/0xb30 kernel/rcu/tree_plugin.h:393
softirqs last enabled at (483658): [<00000000a6d523d5>]
__do_softirq+0x474/0x964 kernel/softirq.c:314
softirqs last disabled at (483641): [<00000000a6a2c035>] invoke_softirq
kernel/softirq.c:368 [inline]
softirqs last disabled at (483641): [<00000000a6a2c035>]
irq_exit+0x119/0x160 kernel/softirq.c:409

other info that might help us debug this:
Possible unsafe locking scenario:

CPU0
----
lock(&mm->mmap_sem);
<Interrupt>
lock(&mm->mmap_sem);

*** DEADLOCK ***

1 lock held by syz-executor594/2077:
#0: (shrinker_rwsem){++++..}, at: [<0000000062989abd>]

shrink_slab.part.0+0xb2/0xa20 mm/vmscan.c:472

stack backtrace:

CPU: 1 PID: 2077 Comm: syz-executor594 Not tainted 4.9.189+ #2
ffff8801c5126f20 ffffffff81b65c01 00000000000000f0 ffff8801d16697c0
ffffffff83caf950 ffff8801d166a0b8 ffffffff84250fc0 ffff8801c5126f98

ffffffff81408330 0000000000000000 ffffffff00000001 0000000000000001
Call Trace:

[<00000000ca5ed811>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000ca5ed811>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<000000005d7167ae>] print_usage_bug kernel/locking/lockdep.c:2387 [inline]
[<000000005d7167ae>] print_usage_bug.cold+0x452/0x5a2
kernel/locking/lockdep.c:2354
[<00000000d65f76b4>] valid_state kernel/locking/lockdep.c:2400 [inline]
[<00000000d65f76b4>] mark_lock_irq kernel/locking/lockdep.c:2602 [inline]
[<00000000d65f76b4>] mark_lock+0x6c7/0x12e0 kernel/locking/lockdep.c:3065
[<000000002c64459b>] mark_irqflags kernel/locking/lockdep.c:2958 [inline]
[<000000002c64459b>] __lock_acquire+0x5be/0x4390
kernel/locking/lockdep.c:3302
[<00000000a4a91845>] lock_acquire+0x133/0x3d0 kernel/locking/lockdep.c:3756
[<000000009cda98fe>] down_read+0x44/0xb0 kernel/locking/rwsem.c:22
[<000000004098cf50>] get_cmdline+0xa3/0x2d0 mm/util.c:641
[<00000000a2352b19>] handle_lmk_event+0x169/0x920
drivers/staging/android/lowmemorykiller.c:115
[<000000003befc2a5>] lowmem_scan+0x6f3/0xb70
drivers/staging/android/lowmemorykiller.c:353
[<000000005d98afbf>] do_shrink_slab mm/vmscan.c:399 [inline]
[<000000005d98afbf>] shrink_slab.part.0+0x3cf/0xa20 mm/vmscan.c:502
[<00000000a6f1bc0e>] shrink_slab mm/vmscan.c:466 [inline]
[<00000000a6f1bc0e>] shrink_node+0x1ed/0x750 mm/vmscan.c:2604
[<000000003d20561e>] shrink_zones mm/vmscan.c:2751 [inline]
[<000000003d20561e>] do_try_to_free_pages mm/vmscan.c:2793 [inline]
[<000000003d20561e>] try_to_free_pages+0x397/0xbd0 mm/vmscan.c:3004
[<000000008a0013d3>] __perform_reclaim mm/page_alloc.c:3332 [inline]
[<000000008a0013d3>] __alloc_pages_direct_reclaim mm/page_alloc.c:3354
[inline]
[<000000008a0013d3>] __alloc_pages_slowpath mm/page_alloc.c:3704 [inline]
[<000000008a0013d3>] __alloc_pages_nodemask+0x930/0x1a80
mm/page_alloc.c:3861
[<000000009d48102f>] __alloc_pages include/linux/gfp.h:433 [inline]
[<000000009d48102f>] __alloc_pages_node include/linux/gfp.h:446 [inline]
[<000000009d48102f>] alloc_pages_node include/linux/gfp.h:460 [inline]
[<000000009d48102f>] __vmalloc_area_node mm/vmalloc.c:1648 [inline]
[<000000009d48102f>] __vmalloc_node_range+0x25b/0x610 mm/vmalloc.c:1706
[<0000000002363bce>] __vmalloc_node mm/vmalloc.c:1749 [inline]
[<0000000002363bce>] __vmalloc_node_flags mm/vmalloc.c:1763 [inline]
[<0000000002363bce>] vmalloc+0x5c/0x70 mm/vmalloc.c:1778
[<0000000015f6080a>] xt_alloc_entry_offsets+0x44/0x50
net/netfilter/x_tables.c:758
[<000000005ef36fa6>] translate_table+0x215/0x16c0
net/ipv6/netfilter/ip6_tables.c:733
[<000000008aba3a9f>] do_replace net/ipv6/netfilter/ip6_tables.c:1186
[inline]
[<000000008aba3a9f>] do_ip6t_set_ctl+0x2d4/0x480
net/ipv6/netfilter/ip6_tables.c:1712
[<00000000c9895ab8>] nf_sockopt net/netfilter/nf_sockopt.c:105 [inline]
[<00000000c9895ab8>] nf_setsockopt+0x6d/0xc0 net/netfilter/nf_sockopt.c:114
[<00000000e1619653>] ipv6_setsockopt net/ipv6/ipv6_sockglue.c:922 [inline]
[<00000000e1619653>] ipv6_setsockopt+0x10b/0x140
net/ipv6/ipv6_sockglue.c:906
[<000000002929940c>] tcp_setsockopt net/ipv4/tcp.c:2759 [inline]
[<000000002929940c>] tcp_setsockopt+0x8a/0xe0 net/ipv4/tcp.c:2753
[<0000000093511008>] sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2710
[<00000000f714b864>] SYSC_setsockopt net/socket.c:1786 [inline]
[<00000000f714b864>] SyS_setsockopt+0x159/0x240 net/socket.c:1765
[<0000000042e91b4e>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288
[<00000000c709da1d>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
oom_reaper: reaped process 2069 (syz-executor594), now anon-rss:0kB,
file-rss:0kB, shmem-rss:0kB
syz-executor594 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|
__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000
CPU: 0 PID: 2078 Comm: syz-executor594 Not tainted 4.9.189+ #2
ffff8801c53475f0 ffffffff81b65c01 ffff8801c5347948 ffffffff833f14f0
00000000000003e8 ffff8801c5347960 0000000000000000 ffff8801c5347670
ffffffff81506abb 0000000000000000 00000000000003e8 ffffffff828289d5
Call Trace:
[<00000000ca5ed811>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000ca5ed811>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<00000000aeeea1c6>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417
[<00000000d91020f8>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852
[<000000000194c5e6>] out_of_memory mm/oom_kill.c:1069 [inline]
[<000000000194c5e6>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009
[<000000000ac0ac73>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline]
[<000000000ac0ac73>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline]
[<000000000ac0ac73>] __alloc_pages_nodemask+0x1730/0x1a80
mm/page_alloc.c:3861
[<000000009d48102f>] __alloc_pages include/linux/gfp.h:433 [inline]
[<000000009d48102f>] __alloc_pages_node include/linux/gfp.h:446 [inline]
[<000000009d48102f>] alloc_pages_node include/linux/gfp.h:460 [inline]
[<000000009d48102f>] __vmalloc_area_node mm/vmalloc.c:1648 [inline]
[<000000009d48102f>] __vmalloc_node_range+0x25b/0x610 mm/vmalloc.c:1706
[<0000000002363bce>] __vmalloc_node mm/vmalloc.c:1749 [inline]
[<0000000002363bce>] __vmalloc_node_flags mm/vmalloc.c:1763 [inline]
[<0000000002363bce>] vmalloc+0x5c/0x70 mm/vmalloc.c:1778
[<0000000015f6080a>] xt_alloc_entry_offsets+0x44/0x50
net/netfilter/x_tables.c:758
[<000000005ef36fa6>] translate_table+0x215/0x16c0
net/ipv6/netfilter/ip6_tables.c:733
[<000000008aba3a9f>] do_replace net/ipv6/netfilter/ip6_tables.c:1186
[inline]
[<000000008aba3a9f>] do_ip6t_set_ctl+0x2d4/0x480
net/ipv6/netfilter/ip6_tables.c:1712
[<00000000c9895ab8>] nf_sockopt net/netfilter/nf_sockopt.c:105 [inline]
[<00000000c9895ab8>] nf_setsockopt+0x6d/0xc0 net/netfilter/nf_sockopt.c:114
[<00000000e1619653>] ipv6_setsockopt net/ipv6/ipv6_sockglue.c:922 [inline]
[<00000000e1619653>] ipv6_setsockopt+0x10b/0x140
net/ipv6/ipv6_sockglue.c:906
[<000000002929940c>] tcp_setsockopt net/ipv4/tcp.c:2759 [inline]
[<000000002929940c>] tcp_setsockopt+0x8a/0xe0 net/ipv4/tcp.c:2753
[<0000000093511008>] sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2710
[<00000000f714b864>] SYSC_setsockopt net/socket.c:1786 [inline]
[<00000000f714b864>] SyS_setsockopt+0x159/0x240 net/socket.c:1765
[<0000000042e91b4e>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288
[<00000000c709da1d>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Mem-Info:
active_anon:3240 inactive_anon:40 isolated_anon:0
active_file:19 inactive_file:20 isolated_file:0
unevictable:0 dirty:0 writeback:0 unstable:0
slab_reclaimable:4252 slab_unreclaimable:56860
mapped:14 shmem:48 pagetables:355 bounce:0
free:6018 free_pcp:67 free_cma:0
Node 0 active_anon:12960kB inactive_anon:160kB active_file:76kB
inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB
mapped:56kB dirty:0kB writeback:0kB shmem:192kB writeback_tmp:0kB

unstable:0kB pages_scanned:0 all_unreclaimable? no

DMA32 free:18612kB min:4696kB low:7712kB high:10728kB active_anon:0kB

inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB
writepending:0kB present:3145324kB managed:3020100kB mlocked:0kB

slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB
bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB
Normal free:5460kB min:5580kB low:9168kB high:12756kB active_anon:12960kB
inactive_anon:160kB active_file:76kB inactive_file:80kB unevictable:0kB
writepending:0kB present:4718592kB managed:3589316kB mlocked:0kB
slab_reclaimable:17008kB slab_unreclaimable:227440kB kernel_stack:3456kB
pagetables:1420kB bounce:0kB free_pcp:148kB local_pcp:148kB free_cma:0kB
DMA32: 3*4kB (UM) 3*8kB (M) 3*16kB (UM) 1*32kB (M) 1*64kB (M) 4*128kB (UM)
4*256kB (UM) 1*512kB (M) 2*1024kB (M) 1*2048kB (M) 3*4096kB (M) = 18612kB

0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
313625 pages reserved
[ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents
oom_score_adj name

[ 470] 0 470 5384 182 15 3 0
-1000 udevd
[ 585] 0 585 5383 182 14 3 0
-1000 udevd
[ 586] 0 586 5383 182 14 3 0
-1000 udevd
[ 1767] 0 1767 2492 572 8 3 0
0 dhclient
[ 1908] 0 1908 30615 110 24 3 0
0 rsyslogd
[ 1963] 0 1963 4724 51 15 3 0
0 cron
[ 1981] 0 1981 3735 45 11 3 0
0 mcstransd
[ 1983] 0 1983 12926 1228 27 4 0
0 restorecond
[ 2009] 0 2009 12489 152 28 3 0
-1000 sshd
[ 2039] 0 2039 3648 40 13 3 0
0 getty
[ 2058] 0 2058 3648 42 13 3 0
0 getty
[ 2059] 0 2059 3648 43 13 3 0
0 getty
[ 2060] 0 2060 3648 44 13 3 0
0 getty
[ 2061] 0 2061 3648 43 12 3 0
0 getty
[ 2062] 0 2062 3648 42 13 3 0
0 getty
[ 2063] 0 2063 3648 43 13 3 0
0 getty
[ 2064] 0 2064 17820 196 40 3 0
0 sshd
[ 2066] 0 2066 4380 1 4 2 0
0 syz-executor594
[ 2067] 0 2067 4380 12 4 2 0
0 syz-executor594
[ 2068] 0 2068 4380 12 4 2 0
0 syz-executor594
[ 2069] 0 2069 4380 0 5 2 0
1000 syz-executor594
[ 2070] 0 2070 4380 12 4 2 0
0 syz-executor594
[ 2071] 0 2071 4380 12 4 2 0
0 syz-executor594
[ 2072] 0 2072 4380 12 4 2 0
0 syz-executor594
[ 2073] 0 2073 4380 12 4 2 0
0 syz-executor594
[ 2074] 0 2074 4380 12 5 2 0
1000 syz-executor594
[ 2075] 0 2075 4380 12 5 2 0
1000 syz-executor594
[ 2076] 0 2076 4380 12 5 2 0
1000 syz-executor594
[ 2077] 0 2077 4380 12 5 2 0
1000 syz-executor594
[ 2078] 0 2078 4380 12 5 2 0
1000 syz-executor594
Out of memory: Kill process 2074 (syz-executor594) score 999 or sacrifice
child
Killed process 2074 (syz-executor594) total-vm:17520kB, anon-rss:48kB,
file-rss:0kB, shmem-rss:0kB
syz-executor594: vmalloc: allocation failure, allocated 1157779456 of
3758100480 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM)
CPU: 0 PID: 2069 Comm: syz-executor594 Not tainted 4.9.189+ #2
ffff8801ce6378c8 ffffffff81b65c01 1ffff10039cc6f1b dffffc0000000000
ffffffff82aab240 0000000000000000 0000000000400000 ffff8801ce6379f0

ffffffff81507d73 0000000041b58ab3 ffffffff82e3b338 ffffffff81431920
Call Trace:

unstable:0kB pages_scanned:0 all_unreclaimable? no

DMA32 free:20kB min:4696kB low:7712kB high:10728kB active_anon:0kB

inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB
writepending:0kB present:3145324kB managed:3020100kB mlocked:0kB

slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB

bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB

Normal free:0kB min:5580kB low:9168kB high:12756kB active_anon:12932kB
inactive_anon:160kB active_file:76kB inactive_file:80kB unevictable:0kB
writepending:0kB present:4718592kB managed:3589316kB mlocked:0kB
slab_reclaimable:17008kB slab_unreclaimable:227440kB kernel_stack:3456kB
pagetables:1420kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB

DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB
0*2048kB 0*4096kB = 0kB
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
313625 pages reserved

oom_reaper: reaped process 2074 (syz-executor594), now anon-rss:0kB,
file-rss:0kB, shmem-rss:0kB
syz-executor594 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|
__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000
CPU: 1 PID: 2074 Comm: syz-executor594 Not tainted 4.9.189+ #2
ffff8801ce5a75f0 ffffffff81b65c01 ffff8801ce5a7948 ffffffff833f14f0
00000000000003e8 ffff8801ce5a7960 0000000000000000 ffff8801ce5a7670
ffffffff81506abb 0000000000000000 00000000000003e8 ffffffff828289d5
Call Trace:
[<00000000ca5ed811>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000ca5ed811>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<00000000aeeea1c6>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417
[<00000000d91020f8>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852
[<000000000194c5e6>] out_of_memory mm/oom_kill.c:1069 [inline]
[<000000000194c5e6>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009
[<000000000ac0ac73>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline]
[<000000000ac0ac73>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline]
[<000000000ac0ac73>] __alloc_pages_nodemask+0x1730/0x1a80
mm/page_alloc.c:3861
[<000000009d48102f>] __alloc_pages include/linux/gfp.h:433 [inline]
[<000000009d48102f>] __alloc_pages_node include/linux/gfp.h:446 [inline]
[<000000009d48102f>] alloc_pages_node include/linux/gfp.h:460 [inline]
[<000000009d48102f>] __vmalloc_area_node mm/vmalloc.c:1648 [inline]
[<000000009d48102f>] __vmalloc_node_range+0x25b/0x610 mm/vmalloc.c:1706
[<0000000002363bce>] __vmalloc_node mm/vmalloc.c:1749 [inline]
[<0000000002363bce>] __vmalloc_node_flags mm/vmalloc.c:1763 [inline]
[<0000000002363bce>] vmalloc+0x5c/0x70 mm/vmalloc.c:1778
[<0000000015f6080a>] xt_alloc_entry_offsets+0x44/0x50
net/netfilter/x_tables.c:758
[<000000005ef36fa6>] translate_table+0x215/0x16c0
net/ipv6/netfilter/ip6_tables.c:733
[<000000008aba3a9f>] do_replace net/ipv6/netfilter/ip6_tables.c:1186
[inline]
[<000000008aba3a9f>] do_ip6t_set_ctl+0x2d4/0x480
net/ipv6/netfilter/ip6_tables.c:1712
[<00000000c9895ab8>] nf_sockopt net/netfilter/nf_sockopt.c:105 [inline]
[<00000000c9895ab8>] nf_setsockopt+0x6d/0xc0 net/netfilter/nf_sockopt.c:114
[<00000000e1619653>] ipv6_setsockopt net/ipv6/ipv6_sockglue.c:922 [inline]
[<00000000e1619653>] ipv6_setsockopt+0x10b/0x140
net/ipv6/ipv6_sockglue.c:906
[<000000002929940c>] tcp_setsockopt net/ipv4/tcp.c:2759 [inline]
[<000000002929940c>] tcp_setsockopt+0x8a/0xe0 net/ipv4/tcp.c:2753
[<0000000093511008>] sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2710
[<00000000f714b864>] SYSC_setsockopt net/socket.c:1786 [inline]
[<00000000f714b864>] SyS_setsockopt+0x159/0x240 net/socket.c:1765
[<0000000042e91b4e>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288
[<00000000c709da1d>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Mem-Info:
active_anon:3233 inactive_anon:40 isolated_anon:0
active_file:19 inactive_file:20 isolated_file:0
unevictable:0 dirty:0 writeback:0 unstable:0
slab_reclaimable:4252 slab_unreclaimable:56860
mapped:14 shmem:48 pagetables:355 bounce:0
free:0 free_pcp:0 free_cma:0
Node 0 active_anon:12932kB inactive_anon:160kB active_file:76kB
inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB
mapped:56kB dirty:0kB writeback:0kB shmem:192kB writeback_tmp:0kB

unstable:0kB pages_scanned:0 all_unreclaimable? no

DMA32 free:20kB min:4696kB low:7712kB high:10728kB active_anon:0kB

inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB
writepending:0kB present:3145324kB managed:3020100kB mlocked:0kB

slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB

bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB

[ 470] 0 470 5384 182 15 3 0
-1000 udevd
[ 585] 0 585 5383 182 14 3 0
-1000 udevd
[ 586] 0 586 5383 182 14 3 0
-1000 udevd
[ 1767] 0 1767 2492 572 8 3 0
0 dhclient
[ 1908] 0 1908 30615 110 24 3 0
0 rsyslogd
[ 1963] 0 1963 4724 51 15 3 0
0 cron
[ 1981] 0 1981 3735 45 11 3 0
0 mcstransd
[ 1983] 0 1983 12926 1228 27 4 0
0 restorecond
[ 2009] 0 2009 12489 152 28 3 0
-1000 sshd
[ 2039] 0 2039 3648 40 13 3 0
0 getty
[ 2058] 0 2058 3648 42 13 3 0
0 getty
[ 2059] 0 2059 3648 43 13 3 0
0 getty
[ 2060] 0 2060 3648 44 13 3 0
0 getty
[ 2061] 0 2061 3648 43 12 3 0
0 getty
[ 2062] 0 2062 3648 42 13 3 0
0 getty
[ 2063] 0 2063 3648 43 13 3 0
0 getty
[ 2064] 0 2064 17820 196 40 3 0
0 sshd
[ 2066] 0 2066 4380 1 4 2 0
0 syz-executor594
[ 2067] 0 2067 4380 12 4 2 0
0 syz-executor594
[ 2068] 0 2068 4380 12 4 2 0
0 syz-executor594
[ 2069] 0 2069 4380 0 5 2 0
1000 syz-executor594
[ 2070] 0 2070 4380 12 4 2 0
0 syz-executor594
[ 2071] 0 2071 4380 12 4 2 0
0 syz-executor594
[ 2072] 0 2072 4380 12 4 2 0
0 syz-executor594
[ 2073] 0 2073 4380 12 4 2 0
0 syz-executor594
[ 2074] 0 2074 4380 0 5 2 0
1000 syz-executor594
[ 2075] 0 2075 4380 12 5 2 0
1000 syz-executor594
[ 2076] 0 2076 4380 12 5 2 0
1000 syz-executor594
[ 2077] 0 2077 4380 12 5 2 0
1000 syz-executor594
[ 2078] 0 2078 4380 12 5 2 0
1000 syz-executor594
Out of memory: Kill process 2075 (syz-executor594) score 999 or sacrifice
child
Killed process 2075 (syz-executor594) total-vm:17520kB, anon-rss:48kB,
file-rss:0kB, shmem-rss:0kB
oom_reaper: reaped process 2075 (syz-executor594), now anon-rss:0kB,
file-rss:0kB, shmem-rss:0kB
syz-executor594: vmalloc: allocation failure, allocated 1155166208 of
3758100480 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM)
CPU: 1 PID: 2074 Comm: syz-executor594 Not tainted 4.9.189+ #2
ffff8801ce5a78c8 ffffffff81b65c01 1ffff10039cb4f1b dffffc0000000000
ffffffff82aab240 0000000000000000 0000000000400000 ffff8801ce5a79f0

ffffffff81507d73 0000000041b58ab3 ffffffff82e3b338 ffffffff81431920
Call Trace:

[<00000000ca5ed811>] __dump_stack lib/dump_stack.c:15 [inline]
[<00000000ca5ed811>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<00000000075a7651>] warn_alloc.cold+0x76/0x93 mm/page_alloc.c:3069
[<000000005df81305>] __vmalloc_area_node mm/vmalloc.c:1665 [inline]
[<000000005df81305>] __vmalloc_node_range+0x3ff/0x610 mm/vmalloc.c:1706
[<0000000002363bce>] __vmalloc_node mm/vmalloc.c:1749 [inline]
[<0000000002363bce>] __vmalloc_node_flags mm/vmalloc.c:1763 [inline]
[<0000000002363bce>] vmalloc+0x5c/0x70 mm/vmalloc.c:1778
[<0000000015f6080a>] xt_alloc_entry_offsets+0x44/0x50
net/netfilter/x_tables.c:758
[<000000005ef36fa6>] translate_table+0x215/0x16c0
net/ipv6/netfilter/ip6_tables.c:733
[<000000008aba3a9f>] do_replace net/ipv6/netfilter/ip6_tables.c:1186
[inline]
[<000000008aba3a9f>] do_ip6t_set_ctl+0x2d4/0x480
net/ipv6/netfilter/ip6_tables.c:1712
[<00000000c9895ab8>] nf_sockopt net/netfilter/nf_sockopt.c:105 [inline]
[<00000000c9895ab8>] nf_setsockopt+0x6d/0xc0 net/netfilter/nf_sockopt.c:114
[ 2060] 0 2060 3648 44 13 3 0
0 getty
[ 2061] 0 2061 3648 43 12 3 0
0 getty
[ 2062] 0 2062 3648 42 13 3 0
0 getty
[ 2063] 0 2063 3648 43 13 3 0
0 getty
[ 2064] 0 2064 17820 196 40 3 0
0 sshd
[ 2066] 0 2066 4380 1 4 2 0
0 syz-executor594
[ 2067] 0 2067 4380 12 4 2 0
0 syz-executor594
[ 2068] 0 2068 4380 12 4 2 0
0 syz-executor594
[ 2070] 0 2070 4380 12 4 2 0
0 syz-executor594
[ 2071] 0 2071 4380 12 4 2 0
0 syz-executor594
[ 2072] 0 2072 4380 12 4 2 0
0 syz-executor594
[ 2073] 0 2073 4380 12 4 2 0
0 syz-executor594
[ 2076] 0 2076 4380 0 5 2 0
1000 syz-executor594
[ 2077] 0 2077 4380 12 5 2 0
1000 syz-executor594
[ 2078] 0 2078 4380 12 5 2 0
1000 syz-executor594
[ 2080] 0 2080 4380 12 5 2 0
1000 syz-executor594
[ 2081] 0 2081 4380 12 5 2 0
1000 syz-executor594
[ 2082] 0 2082 4380 12 5 2 0
1000 syz-executor594
Out of memory: Kill process 2077 (syz-executor594) score 999 or sacrifice
child
Killed process 2077 (syz-executor594) total-vm:17520kB, anon-rss:48kB,
file-rss:0kB, shmem-rss:0kB
syz-executor594: vmalloc: allocation failure, allocated 1007820800 of
3758100480 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM)
CPU: 0 PID: 2077 Comm: syz-executor594 Not tainted 4.9.189+ #2
ffff8801c51278c8 ffffffff81b65c01 1ffff10038a24f1b dffffc0000000000
ffffffff82aab240 0000000000000000 0000000000400000 ffff8801c51279f0
[<000000008aba3a9f>] do_replace net/ipv6/netfilter/ip6_tables.c:1186
[inline]
[<000000008aba3a9f>] do_ip6t_set_ctl+0x2d4/0x480
net/ipv6/netfilter/ip6_tables.c:1712
[ 585] 0 585 5383 182 14 3 0
-1000 udevd
[ 586] 0 586 5383 182 14 3 0
-1000 udevd
[ 1767] 0 1767 2492 572 8 3 0
0 dhclient
[ 1908] 0 1908 30615 110 24 3 0
0 rsyslogd
[ 1963] 0 1963 4724 51 15 3 0
0 cron
[ 1981] 0 1981 3735 45 11 3 0
0 mcstransd
[ 1983] 0 1983 12926 1228 27 4 0
0 restorecond
[ 2009] 0 2009 12489 152 28 3 0
-1000 sshd
[ 2039] 0 2039 3648 40 13 3 0
0 getty
[ 2058] 0 2058 3648 42 13 3 0
0 getty
[ 2059] 0 2059 3648 43 13 3 0
0 getty
[ 2060] 0 2060 3648 44 13 3 0
0 getty
[ 2061] 0 2061 3648 43 12 3 0
0 getty
[ 2062] 0 2062 3648 42 13 3 0
0 getty
[ 2063] 0 2063 3648 43 13 3 0
0 getty
[ 2064] 0 2064 17820 197 40 3 0
0 sshd
[ 2066] 0 2066 4380 1 4 2 0
0 syz-executor594
[ 2067] 0 2067 4380 12 4 2 0
0 syz-executor594
[ 2068] 0 2068 4380 12 4 2 0
0 syz-executor594
[ 2070] 0 2070 4380 12 4 2 0
0 syz-executor594
[ 2071] 0 2071 4380 12 4 2 0
0 syz-executor594
[ 2072] 0 2072 4380 12 4 2 0
0 syz-executor594
[ 2073] 0 2073 4380 12 4 2 0
0 syz-executor594
[ 2080] 0 2080 4380 0 5 2 0
1000 syz-executor594
[ 2081] 0 2081 4380 12 5 2 0
1000 syz-executor594
[ 2082] 0 2082 4380 12 5 2 0
1000 syz-executor594
[ 2083] 0 2083 4380 12 5 2 0
1000 syz-executor594
[ 2084] 0 2084 4380 12 5 2 0
1000 syz-executor594
[ 2085] 0 2085 4380 12 5 2 0
1000 syz-executor594
Out of memory: Kill process 2081 (syz-executor594) score 999 or sacrifice
child
Killed process 2081 (syz-executor594) total-vm:17520kB, anon-rss:48kB,
file-rss:0kB, shmem-rss:0kB
oom_reaper: reaped process 2081 (syz-executor594), now anon-rss:0kB,
file-rss:0kB, shmem-rss:0kB
syz-executor594 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|
__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000
CPU: 0 PID: 2085 Comm: syz-executor594 Not tainted 4.9.189+ #2
ffff88017db0f5f0 ffffffff81b65c01 ffff88017db0f948 ffffffff833f14f0
00000000000003e8 ffff88017db0f960 0000000000000000 ffff88017db0f670
ffffffff81506abb 0000000000000000 00000000000003e8 ffffffff828289d5
[ 1963] 0 1963 4724 51 15 3 0
0 cron
[ 1981] 0 1981 3735 45 11 3 0
0 mcstransd
[ 1983] 0 1983 12926 1228 27 4 0
0 restorecond
[ 2009] 0 2009 12489 152 28 3 0
-1000 sshd
[ 2039] 0 2039 3648 40 13 3 0
0 getty
[ 2058] 0 2058 3648 42 13 3 0
0 getty
[ 2059] 0 2059 3648 43 13 3 0
0 getty
[ 2060] 0 2060 3648 44 13 3 0
0 getty
[ 2061] 0 2061 3648 43 12 3 0
0 getty
[ 2062] 0 2062 3648 42 13 3 0
0 getty
[ 2063] 0 2063 3648 43 13 3 0
0 getty
[ 2064] 0 2064 17820 197 40 3 0
0 sshd
[ 2066] 0 2066 4380 1 4 2 0
0 syz-executor594
[ 2067] 0 2067 4380 12 4 2 0
0 syz-executor594
[ 2068] 0 2068 4380 12 4 2 0
0 syz-executor594
[<000000005ef36fa6>] translate_table+0x215/0x16c0
net/ipv6/netfilter/ip6_tables.c:733
lowmem_reserve[]: 0 0 0
DMA32: 20*4kB (M) 21*8kB (M) 15*16kB (M) 13*32kB (M) 195*64kB (UM) 33*128kB
(U) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18632kB

Reply all

Reply to author

Forward

0 new messages