lowmemorykiller: Killing 'syz-executor.5' (27508) (tgid 27508), adj 1000, to free 52340kB on behalf of 'syz-executor.4' (12721) because cache 64236kB is below limit 65536kB for oom_score_adj 12 Free memory is -13344kB above reserved ================================= [ INFO: inconsistent lock state ] 4.9.194+ #0 Not tainted --------------------------------- inconsistent {RECLAIM_FS-ON-W} -> {IN-RECLAIM_FS-R} usage. syz-executor.4/12721 [HC0[0]:SC0[0]:HE1:SE1] takes: (&mm->mmap_sem){+++++?}, at: [<000000004194176d>] get_cmdline+0xa3/0x2d0 mm/util.c:641 mark_held_locks+0xb1/0x100 kernel/locking/lockdep.c:2660 __lockdep_trace_alloc kernel/locking/lockdep.c:2882 [inline] lockdep_trace_alloc+0x18c/0x2b0 kernel/locking/lockdep.c:2897 __alloc_pages_nodemask+0x143/0x1a80 mm/page_alloc.c:3803 __alloc_pages include/linux/gfp.h:433 [inline] __alloc_pages_node include/linux/gfp.h:446 [inline] alloc_pages_node include/linux/gfp.h:460 [inline] pmd_alloc_one arch/x86/include/asm/pgalloc.h:88 [inline] __pmd_alloc+0x4a/0x330 mm/memory.c:3742 pmd_alloc include/linux/mm.h:1625 [inline] alloc_new_pmd mm/mremap.c:64 [inline] move_page_tables+0xadb/0xd60 mm/mremap.c:212 shift_arg_pages+0x1ae/0x470 fs/exec.c:642 setup_arg_pages+0x60d/0x7c0 fs/exec.c:754 load_elf_binary+0xa84/0x4a90 fs/binfmt_elf.c:860 search_binary_handler fs/exec.c:1621 [inline] search_binary_handler+0x14f/0x700 fs/exec.c:1599 exec_binprm fs/exec.c:1663 [inline] do_execveat_common.isra.0+0xf81/0x1db0 fs/exec.c:1785 do_execve+0x3a/0x50 fs/exec.c:1829 run_init_process+0x33/0x37 init/main.c:904 try_to_run_init_process+0x18/0x48 init/main.c:913 kernel_init+0xf2/0x163 init/main.c:984 ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375 irq event stamp: 1704435 hardirqs last enabled at (1704435): [<000000002d8cdc11>] restore_regs_and_iret+0x0/0x1d hardirqs last disabled at (1704434): [<000000004f3ca465>] apic_timer_interrupt+0xa0/0xb0 arch/x86/entry/entry_64.S:653 softirqs last enabled at (1700970): [<00000000c96e0746>] __do_softirq+0x474/0x964 kernel/softirq.c:314 softirqs last disabled at (1700963): [<00000000344b2f17>] invoke_softirq kernel/softirq.c:368 [inline] softirqs last disabled at (1700963): [<00000000344b2f17>] irq_exit+0x119/0x160 kernel/softirq.c:409 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&mm->mmap_sem); lock(&mm->mmap_sem); *** DEADLOCK *** 1 lock held by syz-executor.4/12721: #0: (shrinker_rwsem){++++..}, at: [<00000000b97f5b61>] shrink_slab.part.0+0xb2/0xa20 mm/vmscan.c:472 stack backtrace: CPU: 0 PID: 12721 Comm: syz-executor.4 Not tainted 4.9.194+ #0 ffff8801ab187070 ffffffff81b67001 00000000000000f0 ffff8801ac8e17c0 ffffffff83cb0b40 ffff8801ac8e20b8 ffffffff84252000 ffff8801ab1870e8 ffffffff81408710 0000000000000000 ffffffff00000001 0000000000000001 Call Trace: [<000000009d731efd>] __dump_stack lib/dump_stack.c:15 [inline] [<000000009d731efd>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000965c5e1e>] print_usage_bug kernel/locking/lockdep.c:2387 [inline] [<00000000965c5e1e>] print_usage_bug.cold+0x452/0x5a2 kernel/locking/lockdep.c:2354 [<000000001c6ae79e>] valid_state kernel/locking/lockdep.c:2400 [inline] [<000000001c6ae79e>] mark_lock_irq kernel/locking/lockdep.c:2602 [inline] [<000000001c6ae79e>] mark_lock+0x6c7/0x12e0 kernel/locking/lockdep.c:3065 [<0000000093657e9b>] mark_irqflags kernel/locking/lockdep.c:2958 [inline] [<0000000093657e9b>] __lock_acquire+0x5be/0x4390 kernel/locking/lockdep.c:3302 [<000000000e0ed424>] lock_acquire+0x133/0x3d0 kernel/locking/lockdep.c:3756 [<00000000043c95e8>] down_read+0x44/0xb0 kernel/locking/rwsem.c:22 [<000000004194176d>] get_cmdline+0xa3/0x2d0 mm/util.c:641 [<000000006c56906c>] handle_lmk_event+0x169/0x920 drivers/staging/android/lowmemorykiller.c:116 [<000000006bc814e7>] lowmem_scan+0x6f3/0xb70 drivers/staging/android/lowmemorykiller.c:354 [<0000000054d4d1eb>] do_shrink_slab mm/vmscan.c:399 [inline] [<0000000054d4d1eb>] shrink_slab.part.0+0x3cf/0xa20 mm/vmscan.c:502 [<0000000011922c19>] shrink_slab mm/vmscan.c:466 [inline] [<0000000011922c19>] shrink_node+0x1ed/0x750 mm/vmscan.c:2604 [<000000009ab07daa>] shrink_zones mm/vmscan.c:2751 [inline] [<000000009ab07daa>] do_try_to_free_pages mm/vmscan.c:2793 [inline] [<000000009ab07daa>] try_to_free_pages+0x397/0xbd0 mm/vmscan.c:3004 [<00000000f2f5f742>] __perform_reclaim mm/page_alloc.c:3332 [inline] [<00000000f2f5f742>] __alloc_pages_direct_reclaim mm/page_alloc.c:3354 [inline] [<00000000f2f5f742>] __alloc_pages_slowpath mm/page_alloc.c:3704 [inline] [<00000000f2f5f742>] __alloc_pages_nodemask+0x930/0x1a80 mm/page_alloc.c:3861 [<00000000590cd953>] __alloc_pages include/linux/gfp.h:433 [inline] [<00000000590cd953>] __alloc_pages_node include/linux/gfp.h:446 [inline] [<00000000590cd953>] alloc_pages_node include/linux/gfp.h:460 [inline] [<00000000590cd953>] __vmalloc_area_node mm/vmalloc.c:1648 [inline] [<00000000590cd953>] __vmalloc_node_range+0x25b/0x610 mm/vmalloc.c:1706 [<00000000d780691b>] __vmalloc_node mm/vmalloc.c:1755 [inline] [<00000000d780691b>] __vmalloc_node_flags mm/vmalloc.c:1769 [inline] [<00000000d780691b>] vmalloc+0x5c/0x70 mm/vmalloc.c:1784 [<00000000e1d8ec79>] xt_alloc_table_info+0xc8/0x100 net/netfilter/x_tables.c:997 [<00000000836f50c9>] do_replace net/ipv6/netfilter/ip6_tables.c:1175 [inline] [<00000000836f50c9>] do_ip6t_set_ctl+0x231/0x480 net/ipv6/netfilter/ip6_tables.c:1712 [<0000000021486c7f>] nf_sockopt net/netfilter/nf_sockopt.c:105 [inline] [<0000000021486c7f>] nf_setsockopt+0x6d/0xc0 net/netfilter/nf_sockopt.c:114 [<0000000068bea75c>] ipv6_setsockopt net/ipv6/ipv6_sockglue.c:922 [inline] [<0000000068bea75c>] ipv6_setsockopt+0x10b/0x140 net/ipv6/ipv6_sockglue.c:906 [<000000003e0290ad>] udpv6_setsockopt+0x4e/0x90 net/ipv6/udp.c:1351 [<0000000079a69070>] sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2710 [<0000000060782a79>] SYSC_setsockopt net/socket.c:1786 [inline] [<0000000060782a79>] SyS_setsockopt+0x159/0x240 net/socket.c:1765 [<00000000f0e339a5>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288 [<0000000002d44519>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb lowmemorykiller: Killing 'syz-executor.3' (12584) (tgid 12584), adj 1000, to free 51384kB on behalf of 'syz-executor.4' (12721) because cache 62236kB is below limit 65536kB for oom_score_adj 12 Free memory is -13336kB above reserved lowmemorykiller: Killing 'syz-executor.5' (11758) (tgid 11758), adj 1000, to free 51376kB on behalf of 'syz-executor.4' (12721) because cache 55236kB is below limit 65536kB for oom_score_adj 12 Free memory is -13032kB above reserved lowmemorykiller: Killing 'syz-executor.5' (2359) (tgid 2359), adj 1000, to free 45948kB on behalf of 'kswapd0' (33) because cache 52836kB is below limit 65536kB for oom_score_adj 12 Free memory is 8424kB above reserved lowmemorykiller: Killing 'syz-executor.5' (27482) (tgid 27482), adj 1000, to free 45196kB on behalf of 'kswapd0' (33) because cache 52836kB is below limit 65536kB for oom_score_adj 12 Free memory is 8424kB above reserved lowmemorykiller: Killing 'syz-executor.5' (32039) (tgid 32039), adj 1000, to free 41104kB on behalf of 'syz-executor.4' (12721) because cache 48536kB is below limit 65536kB for oom_score_adj 12 Free memory is -12088kB above reserved lowmemorykiller: Killing 'syz-executor.5' (11755) (tgid 11755), adj 1000, to free 37384kB on behalf of 'syz-executor.4' (12721) because cache 38536kB is below limit 65536kB for oom_score_adj 12 Free memory is -13040kB above reserved lowmemorykiller: Killing 'syz-executor.3' (12545) (tgid 12545), adj 1000, to free 36744kB on behalf of 'kswapd0' (33) because cache 38236kB is below limit 65536kB for oom_score_adj 12 Free memory is -12164kB above reserved lowmemorykiller: Killing 'syz-executor.5' (10090) (tgid 10090), adj 1000, to free 35984kB on behalf of 'kswapd0' (33) because cache 38384kB is below limit 65536kB for oom_score_adj 12 Free memory is -10164kB above reserved lowmemorykiller: Killing 'syz-executor.5' (10137) (tgid 10137), adj 1000, to free 36068kB on behalf of 'kswapd0' (33) because cache 38384kB is below limit 65536kB for oom_score_adj 12 Free memory is -10164kB above reserved lowmemorykiller: Killing 'syz-executor.4' (12721) (tgid 12717), adj 1000, to free 35908kB on behalf of 'kswapd0' (33) because cache 38384kB is below limit 65536kB for oom_score_adj 12 Free memory is -10696kB above reserved lowmemorykiller: Killing 'syz-executor.4' (12721) (tgid 12717), adj 1000, to free 35024kB on behalf of 'syz-executor.4' (11434) because cache 316kB is below limit 6144kB for oom_score_adj 0 Free memory is -13372kB above reserved lowmemorykiller: Killing 'syz-executor.4' (12721) (tgid 12717), adj 1000, to free 35024kB on behalf of 'kswapd0' (33) because cache 316kB is below limit 6144kB for oom_score_adj 0 Free memory is -13372kB above reserved syz-executor.4 invoked oom-killer: gfp_mask=0x24200ca(GFP_HIGHUSER_MOVABLE), nodemask=0, order=0, oom_score_adj=0 CPU: 0 PID: 11434 Comm: syz-executor.4 Not tainted 4.9.194+ #0 ffff8801a3ba76f0 ffffffff81b67001 ffff8801a3ba7a48 ffffffff833f1c30 0000000000000000 ffff8801a3ba7a60 0000000000000000 ffff8801a3ba7770 ffffffff81506e44 0000000000000000 0000000000000000 ffffffff8282ac45 Call Trace: [<000000009d731efd>] __dump_stack lib/dump_stack.c:15 [inline] [<000000009d731efd>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000260b8905>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417 [<00000000adfae887>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852 [<00000000aff34208>] out_of_memory mm/oom_kill.c:1069 [inline] [<00000000aff34208>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009 [<000000004fca511d>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline] [<000000004fca511d>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline] [<000000004fca511d>] __alloc_pages_nodemask+0x1730/0x1a80 mm/page_alloc.c:3861 [<0000000006c298bb>] __alloc_pages include/linux/gfp.h:433 [inline] [<0000000006c298bb>] __alloc_pages_node include/linux/gfp.h:446 [inline] [<0000000006c298bb>] alloc_pages_node include/linux/gfp.h:460 [inline] [<0000000006c298bb>] __page_cache_alloc include/linux/pagemap.h:208 [inline] [<0000000006c298bb>] pagecache_get_page+0x248/0x740 mm/filemap.c:1367 [<000000001dda4729>] filemap_fault+0xb1f/0x1360 mm/filemap.c:2331 [<00000000b05061eb>] ext4_filemap_fault+0x72/0xa0 fs/ext4/inode.c:5854 [<0000000096174358>] __do_fault+0x2a8/0x6c0 mm/memory.c:2855 [<00000000e10aecb9>] do_read_fault mm/memory.c:3202 [inline] [<00000000e10aecb9>] do_fault mm/memory.c:3338 [inline] [<00000000e10aecb9>] handle_pte_fault mm/memory.c:3547 [inline] [<00000000e10aecb9>] __handle_mm_fault mm/memory.c:3634 [inline] [<00000000e10aecb9>] handle_mm_fault+0x11bc/0x2420 mm/memory.c:3671 [<00000000ef4a13d4>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1401 [<000000001838cdb5>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1464 [<00000000ee713068>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:956 Mem-Info: active_anon:83500 inactive_anon:44 isolated_anon:0 active_file:24 inactive_file:25 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:5976 slab_unreclaimable:61768 mapped:52226 shmem:179 pagetables:1662 bounce:0 free:6046 free_pcp:145 free_cma:0 Node 0 active_anon:334000kB inactive_anon:176kB active_file:96kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:716kB writeback_tmp:0kB unstable:0kB pages_scanned:17 all_unreclaimable? yes DMA32 free:18608kB min:4696kB low:7712kB high:10728kB active_anon:284kB inactive_anon:8kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3145324kB managed:3020092kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:328kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 Normal free:5576kB min:5580kB low:9168kB high:12756kB active_anon:333716kB inactive_anon:168kB active_file:96kB inactive_file:96kB unevictable:0kB writepending:0kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:23904kB slab_unreclaimable:246744kB kernel_stack:6368kB pagetables:6648kB bounce:0kB free_pcp:460kB local_pcp:200kB free_cma:0kB lowmem_reserve[]: 0 0 0 DMA32: 0*4kB 2*8kB (UM) 2*16kB (UM) 4*32kB (UM) 2*64kB (M) 1*128kB (M) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 3*4096kB (M) = 18608kB Normal: 738*4kB (M) 292*8kB (M) 0*16kB 9*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5576kB 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313628 pages reserved [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 470] 0 470 5365 168 15 3 0 -1000 udevd [ 1766] 0 1766 2492 573 8 3 0 0 dhclient [ 1897] 0 1897 30615 176 25 3 0 0 rsyslogd [ 1952] 0 1952 4724 50 14 3 0 0 cron [ 1970] 0 1970 3767 71 11 3 0 0 mcstransd lowmemorykiller: Killing 'syz-executor.4' (12721) (tgid 12717), adj 1000, to free 35008kB on behalf of 'rsyslogd' (1901) because cache 196kB is below limit 6144kB for oom_score_adj 0 Free memory is -13320kB above reserved lowmemorykiller: Killing 'syz-executor.4' (12721) (tgid 12717), adj 1000, to free 35008kB on behalf of 'syz-fuzzer' (12352) because cache 196kB is below limit 6144kB for oom_score_adj 0 Free memory is -13320kB above reserved [ 1972] 0 1972 12926 1232 27 3 0 0 restorecond [ 1998] 0 1998 12489 153 28 3 0 -1000 sshd [ 2028] 0 2028 3648 40 12 3 0 0 getty [ 2038] 0 2038 17855 216 39 4 0 0 sshd [ 2040] 0 2040 157163 78550 270 5 0 0 syz-fuzzer [27134] 0 27134 18114 15 23 3 0 0 syz-executor.5 [27135] 0 27135 18113 8731 24 4 0 0 syz-executor.5 [27754] 0 27754 18146 8742 26 4 0 1000 syz-executor.5 [27928] 0 27928 18245 8750 26 4 0 1000 syz-executor.5 [30071] 0 30071 18212 8747 26 4 0 1000 syz-executor.5 [30574] 0 30574 18212 8747 26 4 0 1000 syz-executor.5 [30576] 0 30576 18212 8747 26 4 0 1000 syz-executor.5 [31586] 0 31586 18146 8743 26 4 0 1000 syz-executor.5 [31985] 0 31985 18146 8714 26 3 0 1000 syz-executor.5 [32010] 0 32010 18212 8718 26 3 0 1000 syz-executor.5 [ 1039] 0 1039 18179 8745 26 4 0 1000 syz-executor.5 [ 2152] 0 2152 18212 8746 26 4 0 1000 syz-executor.5 [ 2191] 0 2191 18212 8746 26 4 0 1000 syz-executor.5 [ 2307] 0 2307 18146 8701 24 3 0 1000 syz-executor.5 [ 4212] 0 4212 18179 8745 26 4 0 1000 syz-executor.5 [ 4882] 0 4882 18162 8711 25 3 0 1000 syz-executor.5 [ 4887] 0 4887 18162 8712 25 3 0 1000 syz-executor.5 [ 5369] 0 5369 18114 15 23 3 0 0 syz-executor.2 [ 5370] 0 5370 18113 8731 24 4 0 0 syz-executor.2 [ 6145] 0 6145 18146 8710 25 3 0 1000 syz-executor.2 [ 6149] 0 6149 18179 8715 26 3 0 1000 syz-executor.2 [ 7273] 0 7273 18179 8743 26 4 0 1000 syz-executor.2 [ 7451] 0 7451 18146 8709 25 3 0 1000 syz-executor.2 [ 7456] 0 7456 18179 8712 25 3 0 1000 syz-executor.2 [ 7570] 0 7570 18146 8711 25 3 0 1000 syz-executor.2 [ 7575] 0 7575 18179 8745 26 4 0 1000 syz-executor.2 [ 8229] 0 8229 18212 8748 26 4 0 1000 syz-executor.2 [ 8347] 0 8347 18179 8744 26 4 0 1000 syz-executor.5 [ 8407] 0 8407 18114 17 23 3 0 0 syz-executor.0 [ 8408] 0 8408 18113 8732 24 4 0 0 syz-executor.0 [ 8711] 0 8711 18147 8742 26 4 0 1000 syz-executor.0 [ 8734] 0 8734 5592 371 14 3 0 -1000 udevd [ 8735] 0 8735 5397 178 14 3 0 -1000 udevd [ 9788] 0 9788 18212 8749 27 4 0 1000 syz-executor.2 [10466] 0 10466 5364 169 14 3 0 -1000 udevd [11019] 0 11019 18114 16 23 3 0 0 syz-executor.3 [11020] 0 11020 18113 8731 24 4 0 0 syz-executor.3 [11255] 0 11255 18144 8710 26 3 0 1000 syz-executor.3 [11259] 0 11259 16162 8713 25 3 0 1000 syz-executor.3 [11414] 0 11414 18212 8749 26 4 0 0 syz-executor.0 [11419] 0 11419 18212 8749 26 4 0 0 syz-executor.0 [11433] 0 11433 18114 15 23 3 0 0 syz-executor.4 [11434] 0 11434 18113 8711 24 4 0 0 syz-executor.4 [11724] 0 11724 18212 8748 26 4 0 1000 syz-executor.3 [11817] 0 11817 18130 8744 26 4 0 0 syz-executor.0 [12048] 0 12048 18179 8746 26 4 0 1000 syz-executor.5 [12094] 0 12094 18245 8749 27 4 0 1000 syz-executor.4 [12137] 0 12137 18146 8743 26 4 0 1000 syz-executor.3 [12282] 0 12282 18114 16 23 3 0 0 syz-executor.1 [12283] 0 12283 18113 8730 24 4 0 0 syz-executor.1 [12609] 0 12609 18212 8749 26 4 0 0 syz-executor.0 [12721] 0 12717 18212 8752 27 4 0 1000 syz-executor.4 Out of memory: Kill process 12717 (syz-executor.4) score 1004 or sacrifice child Killed process 12721 (syz-executor.4) total-vm:72848kB, anon-rss:192kB, file-rss:34816kB, shmem-rss:0kB oom_reaper: reaped process 12721 (syz-executor.4), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB syz-executor.4: vmalloc: allocation failure, allocated 3401031680 of 3938459648 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) CPU: 1 PID: 12721 Comm: syz-executor.4 Not tainted 4.9.194+ #0 ffff8801ab187a10 ffffffff81b67001 1ffff10035630f44 dffffc0000000000 ffffffff82aab480 0000000000000000 0000000000400000 ffff8801ab187b38 ffffffff815080fc 0000000041b58ab3 ffffffff82e3bc80 ffffffff81431d00 Call Trace: [<000000009d731efd>] __dump_stack lib/dump_stack.c:15 [inline] [<000000009d731efd>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<000000009a93f0ca>] warn_alloc.cold+0x76/0x93 mm/page_alloc.c:3069 [<00000000a51a7237>] __vmalloc_area_node mm/vmalloc.c:1665 [inline] [<00000000a51a7237>] __vmalloc_node_range+0x404/0x610 mm/vmalloc.c:1706 [<00000000d780691b>] __vmalloc_node mm/vmalloc.c:1755 [inline] [<00000000d780691b>] __vmalloc_node_flags mm/vmalloc.c:1769 [inline] [<00000000d780691b>] vmalloc+0x5c/0x70 mm/vmalloc.c:1784 [<00000000e1d8ec79>] xt_alloc_table_info+0xc8/0x100 net/netfilter/x_tables.c:997 [<00000000836f50c9>] do_replace net/ipv6/netfilter/ip6_tables.c:1175 [inline] [<00000000836f50c9>] do_ip6t_set_ctl+0x231/0x480 net/ipv6/netfilter/ip6_tables.c:1712 [<0000000021486c7f>] nf_sockopt net/netfilter/nf_sockopt.c:105 [inline] [<0000000021486c7f>] nf_setsockopt+0x6d/0xc0 net/netfilter/nf_sockopt.c:114 [<0000000068bea75c>] ipv6_setsockopt net/ipv6/ipv6_sockglue.c:922 [inline] [<0000000068bea75c>] ipv6_setsockopt+0x10b/0x140 net/ipv6/ipv6_sockglue.c:906 [<000000003e0290ad>] udpv6_setsockopt+0x4e/0x90 net/ipv6/udp.c:1351 [<0000000079a69070>] sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2710 [<0000000060782a79>] SYSC_setsockopt net/socket.c:1786 [inline] [<0000000060782a79>] SyS_setsockopt+0x159/0x240 net/socket.c:1765 [<00000000f0e339a5>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288 [<0000000002d44519>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Mem-Info: active_anon:83464 inactive_anon:44 isolated_anon:0 active_file:24 inactive_file:26 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:5976 slab_unreclaimable:61768 mapped:52237 shmem:179 pagetables:1662 bounce:0 free:2 free_pcp:151 free_cma:0 Node 0 active_anon:333856kB inactive_anon:176kB active_file:96kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208948kB dirty:0kB writeback:0kB shmem:716kB writeback_tmp:0kB unstable:0kB pages_scanned:17 all_unreclaimable? yes DMA32 free:8kB min:4696kB low:7712kB high:10728kB active_anon:284kB inactive_anon:8kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3145324kB managed:3020092kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:328kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB Normal free:0kB min:5580kB low:9168kB high:12756kB active_anon:333572kB inactive_anon:168kB active_file:96kB inactive_file:100kB unevictable:0kB writepending:0kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:23904kB slab_unreclaimable:246744kB kernel_stack:6368kB pagetables:6648kB bounce:0kB free_pcp:484kB local_pcp:140kB free_cma:0kB DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313628 pages reserved init invoked oom-killer: gfp_mask=0x24200ca(GFP_HIGHUSER_MOVABLE), nodemask=0, order=0, oom_score_adj=0 CPU: 0 PID: 1 Comm: init Not tainted 4.9.194+ #0 ffff8801da60f6f0 ffffffff81b67001 ffff8801da60fa48 ffffffff833f1c30 0000000000000000 ffff8801da60fa60 0000000000000000 ffff8801da60f770 ffffffff81506e44 0000000000000000 0000000000000000 ffffffff8282ac45 Call Trace: [<000000009d731efd>] __dump_stack lib/dump_stack.c:15 [inline] [<000000009d731efd>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000260b8905>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417 [<00000000adfae887>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852 [<00000000aff34208>] out_of_memory mm/oom_kill.c:1069 [inline] [<00000000aff34208>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009 [<000000004fca511d>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline] [<000000004fca511d>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline] [<000000004fca511d>] __alloc_pages_nodemask+0x1730/0x1a80 mm/page_alloc.c:3861 [<0000000006c298bb>] __alloc_pages include/linux/gfp.h:433 [inline] [<0000000006c298bb>] __alloc_pages_node include/linux/gfp.h:446 [inline] [<0000000006c298bb>] alloc_pages_node include/linux/gfp.h:460 [inline] [<0000000006c298bb>] __page_cache_alloc include/linux/pagemap.h:208 [inline] [<0000000006c298bb>] pagecache_get_page+0x248/0x740 mm/filemap.c:1367 [<000000001dda4729>] filemap_fault+0xb1f/0x1360 mm/filemap.c:2331 [<00000000b05061eb>] ext4_filemap_fault+0x72/0xa0 fs/ext4/inode.c:5854 [<0000000096174358>] __do_fault+0x2a8/0x6c0 mm/memory.c:2855 [<00000000e10aecb9>] do_read_fault mm/memory.c:3202 [inline] [<00000000e10aecb9>] do_fault mm/memory.c:3338 [inline] [<00000000e10aecb9>] handle_pte_fault mm/memory.c:3547 [inline] [<00000000e10aecb9>] __handle_mm_fault mm/memory.c:3634 [inline] [<00000000e10aecb9>] handle_mm_fault+0x11bc/0x2420 mm/memory.c:3671 [<00000000ef4a13d4>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1401 [<000000001838cdb5>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1464 [<00000000ee713068>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:956 Mem-Info: active_anon:83464 inactive_anon:44 isolated_anon:0 active_file:24 inactive_file:26 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:5976 slab_unreclaimable:61768 mapped:52237 shmem:179 pagetables:1662 bounce:0 free:2 free_pcp:151 free_cma:0 Node 0 active_anon:333856kB inactive_anon:176kB active_file:96kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208948kB dirty:0kB writeback:0kB shmem:716kB writeback_tmp:0kB unstable:0kB pages_scanned:17 all_unreclaimable? yes DMA32 free:8kB min:4696kB low:7712kB high:10728kB active_anon:284kB inactive_anon:8kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3145324kB managed:3020092kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:328kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB Normal free:0kB min:5580kB low:9168kB high:12756kB active_anon:333572kB inactive_anon:168kB active_file:96kB inactive_file:100kB unevictable:0kB writepending:0kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:23904kB slab_unreclaimable:246744kB kernel_stack:6368kB pagetables:6648kB bounce:0kB free_pcp:484kB local_pcp:344kB free_cma:0kB DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313628 pages reserved [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 470] 0 470 5365 168 15 3 0 -1000 udevd [ 1766] 0 1766 2492 573 8 3 0 0 dhclient [ 1897] 0 1897 30615 176 25 3 0 0 rsyslogd [ 1952] 0 1952 4724 50 14 3 0 0 cron [ 1970] 0 1970 3767 71 11 3 0 0 mcstransd [ 1972] 0 1972 12926 1232 27 3 0 0 restorecond [ 1998] 0 1998 12489 153 28 3 0 -1000 sshd [ 2028] 0 2028 3648 40 12 3 0 0 getty [ 2038] 0 2038 17855 216 39 4 0 0 sshd [ 2040] 0 2040 157163 78550 270 5 0 0 syz-fuzzer [27134] 0 27134 18114 15 23 3 0 0 syz-executor.5 [27135] 0 27135 18113 8731 24 4 0 0 syz-executor.5 [27754] 0 27754 18146 8742 26 4 0 1000 syz-executor.5 [27928] 0 27928 18245 8750 26 4 0 1000 syz-executor.5 [30071] 0 30071 18212 8747 26 4 0 1000 syz-executor.5 [30574] 0 30574 18212 8747 26 4 0 1000 syz-executor.5 [30576] 0 30576 18212 8747 26 4 0 1000 syz-executor.5 [31586] 0 31586 18146 8743 26 4 0 1000 syz-executor.5 [31985] 0 31985 18146 8714 26 3 0 1000 syz-executor.5 [32010] 0 32010 18212 8718 26 3 0 1000 syz-executor.5 [ 1039] 0 1039 18179 8745 26 4 0 1000 syz-executor.5 [ 2152] 0 2152 18212 8746 26 4 0 1000 syz-executor.5 [ 2191] 0 2191 18212 8746 26 4 0 1000 syz-executor.5 [ 2307] 0 2307 18146 8701 24 3 0 1000 syz-executor.5 [ 4212] 0 4212 18179 8745 26 4 0 1000 syz-executor.5 [ 4882] 0 4882 18162 8711 25 3 0 1000 syz-executor.5 [ 4887] 0 4887 18162 8712 25 3 0 1000 syz-executor.5 [ 5369] 0 5369 18114 15 23 3 0 0 syz-executor.2 [ 5370] 0 5370 18113 8731 24 4 0 0 syz-executor.2 [ 6145] 0 6145 18146 8710 25 3 0 1000 syz-executor.2 [ 6149] 0 6149 18179 8715 26 3 0 1000 syz-executor.2 [ 7273] 0 7273 18179 8743 26 4 0 1000 syz-executor.2 [ 7451] 0 7451 18146 8709 25 3 0 1000 syz-executor.2 [ 7456] 0 7456 18179 8712 25 3 0 1000 syz-executor.2 [ 7570] 0 7570 18146 8711 25 3 0 1000 syz-executor.2 [ 7575] 0 7575 18179 8745 26 4 0 1000 syz-executor.2 [ 8229] 0 8229 18212 8748 26 4 0 1000 syz-executor.2 [ 8347] 0 8347 18179 8744 26 4 0 1000 syz-executor.5 [ 8407] 0 8407 18114 17 23 3 0 0 syz-executor.0 [ 8408] 0 8408 18113 8732 24 4 0 0 syz-executor.0 [ 8711] 0 8711 18147 8742 26 4 0 1000 syz-executor.0 [ 8734] 0 8734 5592 371 14 3 0 -1000 udevd [ 8735] 0 8735 5397 178 14 3 0 -1000 udevd [ 9788] 0 9788 18212 8749 27 4 0 1000 syz-executor.2 [10466] 0 10466 5364 169 14 3 0 -1000 udevd [11019] 0 11019 18114 16 23 3 0 0 syz-executor.3 [11020] 0 11020 18113 8731 24 4 0 0 syz-executor.3 [11255] 0 11255 18144 8710 26 3 0 1000 syz-executor.3 [11259] 0 11259 16162 8713 25 3 0 1000 syz-executor.3 [11414] 0 11414 18212 8749 26 4 0 0 syz-executor.0 [11419] 0 11419 18212 8749 26 4 0 0 syz-executor.0 [11433] 0 11433 18114 15 23 3 0 0 syz-executor.4 [11434] 0 11434 18113 8711 24 4 0 0 syz-executor.4 [11724] 0 11724 18212 8748 26 4 0 1000 syz-executor.3 [11817] 0 11817 18130 8744 26 4 0 0 syz-executor.0 [12048] 0 12048 18179 8746 26 4 0 1000 syz-executor.5 [12094] 0 12094 18245 8749 27 4 0 1000 syz-executor.4 [12137] 0 12137 18146 8743 26 4 0 1000 syz-executor.3 [12282] 0 12282 18114 16 23 3 0 0 syz-executor.1 [12283] 0 12283 18113 8730 24 4 0 0 syz-executor.1 [12609] 0 12609 18212 8749 26 4 0 0 syz-executor.0 [12721] 0 12717 18212 3 27 4 0 1000 syz-executor.4 Out of memory: Kill process 27928 (syz-executor.5) score 1004 or sacrifice child Killed process 27928 (syz-executor.5) total-vm:72980kB, anon-rss:184kB, file-rss:34816kB, shmem-rss:0kB syz-executor.4 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000 CPU: 1 PID: 12760 Comm: syz-executor.4 Not tainted 4.9.194+ #0 ffff880171a27738 ffffffff81b67001 ffff880171a27a90 ffffffff833f1c30 00000000000003e8 ffff880171a27aa8 0000000000000000 ffff880171a277b8 ffffffff81506e44 0000000000000000 00000000000003e8 ffffffff8282ac45 Call Trace: [<000000009d731efd>] __dump_stack lib/dump_stack.c:15 [inline] [<000000009d731efd>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000260b8905>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417 [<00000000adfae887>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852 [<00000000aff34208>] out_of_memory mm/oom_kill.c:1069 [inline] [<00000000aff34208>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009 [<000000004fca511d>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline] [<000000004fca511d>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline] [<000000004fca511d>] __alloc_pages_nodemask+0x1730/0x1a80 mm/page_alloc.c:3861 [<00000000590cd953>] __alloc_pages include/linux/gfp.h:433 [inline] [<00000000590cd953>] __alloc_pages_node include/linux/gfp.h:446 [inline] [<00000000590cd953>] alloc_pages_node include/linux/gfp.h:460 [inline] [<00000000590cd953>] __vmalloc_area_node mm/vmalloc.c:1648 [inline] [<00000000590cd953>] __vmalloc_node_range+0x25b/0x610 mm/vmalloc.c:1706 [<00000000d780691b>] __vmalloc_node mm/vmalloc.c:1755 [inline] [<00000000d780691b>] __vmalloc_node_flags mm/vmalloc.c:1769 [inline] [<00000000d780691b>] vmalloc+0x5c/0x70 mm/vmalloc.c:1784 [<00000000e1d8ec79>] xt_alloc_table_info+0xc8/0x100 net/netfilter/x_tables.c:997 [<00000000836f50c9>] do_replace net/ipv6/netfilter/ip6_tables.c:1175 [inline] [<00000000836f50c9>] do_ip6t_set_ctl+0x231/0x480 net/ipv6/netfilter/ip6_tables.c:1712 [<0000000021486c7f>] nf_sockopt net/netfilter/nf_sockopt.c:105 [inline] [<0000000021486c7f>] nf_setsockopt+0x6d/0xc0 net/netfilter/nf_sockopt.c:114 [<0000000068bea75c>] ipv6_setsockopt net/ipv6/ipv6_sockglue.c:922 [inline] [<0000000068bea75c>] ipv6_setsockopt+0x10b/0x140 net/ipv6/ipv6_sockglue.c:906 [<000000003e0290ad>] udpv6_setsockopt+0x4e/0x90 net/ipv6/udp.c:1351 [<0000000079a69070>] sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2710 [<0000000060782a79>] SYSC_setsockopt net/socket.c:1786 [inline] [<0000000060782a79>] SyS_setsockopt+0x159/0x240 net/socket.c:1765 [<00000000f0e339a5>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288 [<0000000002d44519>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Mem-Info: active_anon:83439 inactive_anon:44 isolated_anon:0 active_file:24 inactive_file:26 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:5976 slab_unreclaimable:61768 mapped:52237 shmem:179 pagetables:1625 bounce:0 free:2 free_pcp:222 free_cma:0 Node 0 active_anon:333756kB inactive_anon:176kB active_file:96kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208948kB dirty:0kB writeback:0kB shmem:716kB writeback_tmp:0kB unstable:0kB pages_scanned:17 all_unreclaimable? yes DMA32 free:8kB min:4696kB low:7712kB high:10728kB active_anon:284kB inactive_anon:8kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3145324kB managed:3020092kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:328kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB Normal free:0kB min:5580kB low:9168kB high:12756kB active_anon:333472kB inactive_anon:168kB active_file:96kB inactive_file:100kB unevictable:0kB writepending:0kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:23904kB slab_unreclaimable:246744kB kernel_stack:6368kB pagetables:6500kB bounce:0kB free_pcp:768kB local_pcp:424kB free_cma:0kB DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313628 pages reserved [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 470] 0 470 5365 168 15 3 0 -1000 udevd [ 1766] 0 1766 2492 573 8 3 0 0 dhclient [ 1897] 0 1897 30615 176 25 3 0 0 rsyslogd [ 1952] 0 1952 4724 50 14 3 0 0 cron [ 1970] 0 1970 3767 71 11 3 0 0 mcstransd [ 1972] 0 1972 12926 1232 27 3 0 0 restorecond [ 1998] 0 1998 12489 153 28 3 0 -1000 sshd [ 2028] 0 2028 3648 40 12 3 0 0 getty [ 2038] 0 2038 17855 216 39 4 0 0 sshd [ 2040] 0 2040 157163 78550 270 5 0 0 syz-fuzzer [27134] 0 27134 18114 15 23 3 0 0 syz-executor.5 [27135] 0 27135 18113 8731 24 4 0 0 syz-executor.5 [27754] 0 27754 18146 8742 26 4 0 1000 syz-executor.5 [30071] 0 30071 18212 8747 26 4 0 1000 syz-executor.5 [30574] 0 30574 18212 8747 26 4 0 1000 syz-executor.5 [30576] 0 30576 18212 8747 26 4 0 1000 syz-executor.5 [31586] 0 31586 18146 8743 26 4 0 1000 syz-executor.5 [31985] 0 31985 18146 8714 26 3 0 1000 syz-executor.5 [32010] 0 32010 18212 8718 26 3 0 1000 syz-executor.5 [ 1039] 0 1039 18179 8745 26 4 0 1000 syz-executor.5 [ 2152] 0 2152 18212 8746 26 4 0 1000 syz-executor.5 [ 2191] 0 2191 18212 8746 26 4 0 1000 syz-executor.5 [ 2307] 0 2307 18146 8701 24 3 0 1000 syz-executor.5 [ 4212] 0 4212 18179 8745 26 4 0 1000 syz-executor.5 [ 4882] 0 4882 18162 8711 25 3 0 1000 syz-executor.5 [ 4887] 0 4887 18162 8712 25 3 0 1000 syz-executor.5 [ 5369] 0 5369 18114 15 23 3 0 0 syz-executor.2 [ 5370] 0 5370 18113 8731 24 4 0 0 syz-executor.2 [ 6145] 0 6145 18146 8710 25 3 0 1000 syz-executor.2 [ 6149] 0 6149 18179 8715 26 3 0 1000 syz-executor.2 [ 7273] 0 7273 18179 8743 26 4 0 1000 syz-executor.2 [ 7451] 0 7451 18146 8709 25 3 0 1000 syz-executor.2 [ 7456] 0 7456 18179 8712 25 3 0 1000 syz-executor.2 [ 7570] 0 7570 18146 8711 25 3 0 1000 syz-executor.2 [ 7575] 0 7575 18179 8745 26 4 0 1000 syz-executor.2 [ 8229] 0 8229 18212 8748 26 4 0 1000 syz-executor.2 [ 8347] 0 8347 18179 8744 26 4 0 1000 syz-executor.5 [ 8407] 0 8407 18114 17 23 3 0 0 syz-executor.0 [ 8408] 0 8408 18113 8732 24 4 0 0 syz-executor.0 [ 8711] 0 8711 18147 8742 26 4 0 1000 syz-executor.0 [ 8734] 0 8734 5592 371 14 3 0 -1000 udevd [ 8735] 0 8735 5397 178 14 3 0 -1000 udevd [ 9788] 0 9788 18212 8749 27 4 0 1000 syz-executor.2 [10466] 0 10466 5364 169 14 3 0 -1000 udevd [11019] 0 11019 18114 16 23 3 0 0 syz-executor.3 [11020] 0 11020 18113 8731 24 4 0 0 syz-executor.3 [11255] 0 11255 18144 8710 26 3 0 1000 syz-executor.3 [11259] 0 11259 16162 8713 25 3 0 1000 syz-executor.3 [11414] 0 11414 18212 8749 26 4 0 0 syz-executor.0 [11419] 0 11419 18212 8749 26 4 0 0 syz-executor.0 [11433] 0 11433 18114 15 23 3 0 0 syz-executor.4 [11434] 0 11434 18113 8711 24 4 0 0 syz-executor.4 [11724] 0 11724 18212 8748 26 4 0 1000 syz-executor.3 [11817] 0 11817 18130 8744 26 4 0 0 syz-executor.0 [12048] 0 12048 18179 8746 26 4 0 1000 syz-executor.5 [12094] 0 12094 18245 8749 27 4 0 1000 syz-executor.4 [12137] 0 12137 18146 8743 26 4 0 1000 syz-executor.3 [12282] 0 12282 18114 16 23 3 0 0 syz-executor.1 [12283] 0 12283 18113 8730 24 4 0 0 syz-executor.1 [12609] 0 12609 18212 8749 26 4 0 0 syz-executor.0 [12721] 0 12717 18212 3 27 4 0 1000 syz-executor.4 Out of memory: Kill process 9788 (syz-executor.2) score 1004 or sacrifice child Killed process 9788 (syz-executor.2) total-vm:72848kB, anon-rss:180kB, file-rss:34816kB, shmem-rss:0kB init invoked oom-killer: gfp_mask=0x24200ca(GFP_HIGHUSER_MOVABLE), nodemask=0, order=0, oom_score_adj=0 CPU: 0 PID: 1 Comm: init Not tainted 4.9.194+ #0 ffff8801da60f6f0 ffffffff81b67001 ffff8801da60fa48 ffffffff833f1c30 0000000000000000 ffff8801da60fa60 0000000000000000 ffff8801da60f770 ffffffff81506e44 0000000000000000 0000000000000000 ffffffff8282ac45 Call Trace: [<000000009d731efd>] __dump_stack lib/dump_stack.c:15 [inline] [<000000009d731efd>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000260b8905>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417 [<00000000adfae887>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852 [<00000000aff34208>] out_of_memory mm/oom_kill.c:1069 [inline] [<00000000aff34208>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009 [<000000004fca511d>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline] [<000000004fca511d>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline] [<000000004fca511d>] __alloc_pages_nodemask+0x1730/0x1a80 mm/page_alloc.c:3861 [<0000000006c298bb>] __alloc_pages include/linux/gfp.h:433 [inline] [<0000000006c298bb>] __alloc_pages_node include/linux/gfp.h:446 [inline] [<0000000006c298bb>] alloc_pages_node include/linux/gfp.h:460 [inline] [<0000000006c298bb>] __page_cache_alloc include/linux/pagemap.h:208 [inline] [<0000000006c298bb>] pagecache_get_page+0x248/0x740 mm/filemap.c:1367 [<000000001dda4729>] filemap_fault+0xb1f/0x1360 mm/filemap.c:2331 [<00000000b05061eb>] ext4_filemap_fault+0x72/0xa0 fs/ext4/inode.c:5854 [<0000000096174358>] __do_fault+0x2a8/0x6c0 mm/memory.c:2855 [<00000000e10aecb9>] do_read_fault mm/memory.c:3202 [inline] [<00000000e10aecb9>] do_fault mm/memory.c:3338 [inline] [<00000000e10aecb9>] handle_pte_fault mm/memory.c:3547 [inline] [<00000000e10aecb9>] __handle_mm_fault mm/memory.c:3634 [inline] [<00000000e10aecb9>] handle_mm_fault+0x11bc/0x2420 mm/memory.c:3671 [<00000000ef4a13d4>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1401 [<000000001838cdb5>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1464 [<00000000ee713068>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:956 Mem-Info: active_anon:83439 inactive_anon:44 isolated_anon:0 active_file:24 inactive_file:26 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:5976 slab_unreclaimable:61768 mapped:52237 shmem:179 pagetables:1625 bounce:0 free:2 free_pcp:216 free_cma:0 Node 0 active_anon:333756kB inactive_anon:176kB active_file:96kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208948kB dirty:0kB writeback:0kB shmem:716kB writeback_tmp:0kB unstable:0kB pages_scanned:17 all_unreclaimable? yes DMA32 free:8kB min:4696kB low:7712kB high:10728kB active_anon:284kB inactive_anon:8kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3145324kB managed:3020092kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:328kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB Normal free:0kB min:5580kB low:9168kB high:12756kB active_anon:333472kB inactive_anon:168kB active_file:96kB inactive_file:100kB unevictable:0kB writepending:0kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:23904kB slab_unreclaimable:246744kB kernel_stack:6368kB pagetables:6500kB bounce:0kB free_pcp:744kB local_pcp:320kB free_cma:0kB DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313628 pages reserved [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 470] 0 470 5365 168 15 3 0 -1000 udevd [ 1766] 0 1766 2492 573 8 3 0 0 dhclient [ 1897] 0 1897 30615 176 25 3 0 0 rsyslogd [ 1952] 0 1952 4724 50 14 3 0 0 cron [ 1970] 0 1970 3767 71 11 3 0 0 mcstransd [ 1972] 0 1972 12926 1232 27 3 0 0 restorecond [ 1998] 0 1998 12489 153 28 3 0 -1000 sshd [ 2028] 0 2028 3648 40 12 3 0 0 getty [ 2038] 0 2038 17855 216 39 4 0 0 sshd [ 2040] 0 2040 157163 78550 270 5 0 0 syz-fuzzer [27134] 0 27134 18114 15 23 3 0 0 syz-executor.5 [27135] 0 27135 18113 8731 24 4 0 0 syz-executor.5 [27754] 0 27754 18146 8742 26 4 0 1000 syz-executor.5 [30071] 0 30071 18212 8747 26 4 0 1000 syz-executor.5 [30574] 0 30574 18212 8747 26 4 0 1000 syz-executor.5 [30576] 0 30576 18212 8747 26 4 0 1000 syz-executor.5 [31586] 0 31586 18146 8743 26 4 0 1000 syz-executor.5 [31985] 0 31985 18146 8714 26 3 0 1000 syz-executor.5 [32010] 0 32010 18212 8718 26 3 0 1000 syz-executor.5 [ 1039] 0 1039 18179 8745 26 4 0 1000 syz-executor.5 [ 2152] 0 2152 18212 8746 26 4 0 1000 syz-executor.5 [ 2191] 0 2191 18212 8746 26 4 0 1000 syz-executor.5 [ 2307] 0 2307 18146 8701 24 3 0 1000 syz-executor.5 [ 4212] 0 4212 18179 8745 26 4 0 1000 syz-executor.5 [ 4882] 0 4882 18162 8711 25 3 0 1000 syz-executor.5 [ 4887] 0 4887 18162 8712 25 3 0 1000 syz-executor.5 [ 5369] 0 5369 18114 15 23 3 0 0 syz-executor.2 [ 5370] 0 5370 18113 8731 24 4 0 0 syz-executor.2 [ 6145] 0 6145 18146 8710 25 3 0 1000 syz-executor.2 [ 6149] 0 6149 18179 8715 26 3 0 1000 syz-executor.2 [ 7273] 0 7273 18179 8743 26 4 0 1000 syz-executor.2 [ 7451] 0 7451 18146 8709 25 3 0 1000 syz-executor.2 [ 7456] 0 7456 18179 8712 25 3 0 1000 syz-executor.2 [ 7570] 0 7570 18146 8711 25 3 0 1000 syz-executor.2 [ 7575] 0 7575 18179 8745 26 4 0 1000 syz-executor.2 [ 8229] 0 8229 18212 8748 26 4 0 1000 syz-executor.2 [ 8347] 0 8347 18179 8744 26 4 0 1000 syz-executor.5 [ 8407] 0 8407 18114 17 23 3 0 0 syz-executor.0 [ 8408] 0 8408 18113 8732 24 4 0 0 syz-executor.0 [ 8711] 0 8711 18147 8742 26 4 0 1000 syz-executor.0 [ 8734] 0 8734 5592 371 14 3 0 -1000 udevd [ 8735] 0 8735 5397 178 14 3 0 -1000 udevd [10466] 0 10466 5364 169 14 3 0 -1000 udevd [11019] 0 11019 18114 16 23 3 0 0 syz-executor.3 [11020] 0 11020 18113 8731 24 4 0 0 syz-executor.3 [11255] 0 11255 18144 8710 26 3 0 1000 syz-executor.3 [11259] 0 11259 16162 8713 25 3 0 1000 syz-executor.3 [11414] 0 11414 18212 8749 26 4 0 0 syz-executor.0 [11419] 0 11419 18212 8749 26 4 0 0 syz-executor.0 [11433] 0 11433 18114 15 23 3 0 0 syz-executor.4 [11434] 0 11434 18113 8711 24 4 0 0 syz-executor.4 [11724] 0 11724 18212 8748 26 4 0 1000 syz-executor.3 [11817] 0 11817 18130 8744 26 4 0 0 syz-executor.0 [12048] 0 12048 18179 8746 26 4 0 1000 syz-executor.5 [12094] 0 12094 18245 8749 27 4 0 1000 syz-executor.4 [12137] 0 12137 18146 8743 26 4 0 1000 syz-executor.3 [12282] 0 12282 18114 16 23 3 0 0 syz-executor.1 [12283] 0 12283 18113 8730 24 4 0 0 syz-executor.1 [12609] 0 12609 18212 8749 26 4 0 0 syz-executor.0 [12721] 0 12717 18212 3 27 4 0 1000 syz-executor.4 Out of memory: Kill process 12094 (syz-executor.4) score 1004 or sacrifice child Killed process 12094 (syz-executor.4) total-vm:72980kB, anon-rss:180kB, file-rss:34816kB, shmem-rss:0kB syz-executor.4 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000 CPU: 1 PID: 12760 Comm: syz-executor.4 Not tainted 4.9.194+ #0 ffff880171a27738 ffffffff81b67001 ffff880171a27a90 ffffffff833f1c30 00000000000003e8 ffff880171a27aa8 0000000000000000 ffff880171a277b8 ffffffff81506e44 0000000000000000 00000000000003e8 ffffffff8282ac45 Call Trace: [<000000009d731efd>] __dump_stack lib/dump_stack.c:15 [inline] [<000000009d731efd>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000260b8905>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417 [<00000000adfae887>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852 [<00000000aff34208>] out_of_memory mm/oom_kill.c:1069 [inline] [<00000000aff34208>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009 [<000000004fca511d>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline] [<000000004fca511d>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline] [<000000004fca511d>] __alloc_pages_nodemask+0x1730/0x1a80 mm/page_alloc.c:3861 [<00000000590cd953>] __alloc_pages include/linux/gfp.h:433 [inline] [<00000000590cd953>] __alloc_pages_node include/linux/gfp.h:446 [inline] [<00000000590cd953>] alloc_pages_node include/linux/gfp.h:460 [inline] [<00000000590cd953>] __vmalloc_area_node mm/vmalloc.c:1648 [inline] [<00000000590cd953>] __vmalloc_node_range+0x25b/0x610 mm/vmalloc.c:1706 [<00000000d780691b>] __vmalloc_node mm/vmalloc.c:1755 [inline] [<00000000d780691b>] __vmalloc_node_flags mm/vmalloc.c:1769 [inline] [<00000000d780691b>] vmalloc+0x5c/0x70 mm/vmalloc.c:1784 [<00000000e1d8ec79>] xt_alloc_table_info+0xc8/0x100 net/netfilter/x_tables.c:997 [<00000000836f50c9>] do_replace net/ipv6/netfilter/ip6_tables.c:1175 [inline] [<00000000836f50c9>] do_ip6t_set_ctl+0x231/0x480 net/ipv6/netfilter/ip6_tables.c:1712 [<0000000021486c7f>] nf_sockopt net/netfilter/nf_sockopt.c:105 [inline] [<0000000021486c7f>] nf_setsockopt+0x6d/0xc0 net/netfilter/nf_sockopt.c:114 [<0000000068bea75c>] ipv6_setsockopt net/ipv6/ipv6_sockglue.c:922 [inline] [<0000000068bea75c>] ipv6_setsockopt+0x10b/0x140 net/ipv6/ipv6_sockglue.c:906 [<000000003e0290ad>] udpv6_setsockopt+0x4e/0x90 net/ipv6/udp.c:1351 [<0000000079a69070>] sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2710 [<0000000060782a79>] SYSC_setsockopt net/socket.c:1786 [inline] [<0000000060782a79>] SyS_setsockopt+0x159/0x240 net/socket.c:1765 [<00000000f0e339a5>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288 [<0000000002d44519>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Mem-Info: active_anon:83414 inactive_anon:44 isolated_anon:0 active_file:24 inactive_file:26 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:5976 slab_unreclaimable:61768 mapped:52237 shmem:179 pagetables:1588 bounce:0 free:2 free_pcp:284 free_cma:0 Node 0 active_anon:333656kB inactive_anon:176kB active_file:96kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208948kB dirty:0kB writeback:0kB shmem:716kB writeback_tmp:0kB unstable:0kB pages_scanned:17 all_unreclaimable? yes DMA32 free:8kB min:4696kB low:7712kB high:10728kB active_anon:284kB inactive_anon:8kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3145324kB managed:3020092kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:328kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB Normal free:0kB min:5580kB low:9168kB high:12756kB active_anon:333372kB inactive_anon:168kB active_file:96kB inactive_file:100kB unevictable:0kB writepending:0kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:23904kB slab_unreclaimable:246744kB kernel_stack:6368kB pagetables:6352kB bounce:0kB free_pcp:1016kB local_pcp:424kB free_cma:0kB DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313628 pages reserved [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 470] 0 470 5365 168 15 3 0 -1000 udevd [ 1766] 0 1766 2492 573 8 3 0 0 dhclient [ 1897] 0 1897 30615 176 25 3 0 0 rsyslogd [ 1952] 0 1952 4724 50 14 3 0 0 cron [ 1970] 0 1970 3767 71 11 3 0 0 mcstransd [ 1972] 0 1972 12926 1232 27 3 0 0 restorecond [ 1998] 0 1998 12489 153 28 3 0 -1000 sshd [ 2028] 0 2028 3648 40 12 3 0 0 getty [ 2038] 0 2038 17855 216 39 4 0 0 sshd [ 2040] 0 2040 157163 78550 270 5 0 0 syz-fuzzer [27134] 0 27134 18114 15 23 3 0 0 syz-executor.5 [27135] 0 27135 18113 8731 24 4 0 0 syz-executor.5 [27754] 0 27754 18146 8742 26 4 0 1000 syz-executor.5 [30071] 0 30071 18212 8747 26 4 0 1000 syz-executor.5 [30574] 0 30574 18212 8747 26 4 0 1000 syz-executor.5 [30576] 0 30576 18212 8747 26 4 0 1000 syz-executor.5 [31586] 0 31586 18146 8743 26 4 0 1000 syz-executor.5 [31985] 0 31985 18146 8714 26 3 0 1000 syz-executor.5 [32010] 0 32010 18212 8718 26 3 0 1000 syz-executor.5 [ 1039] 0 1039 18179 8745 26 4 0 1000 syz-executor.5 [ 2152] 0 2152 18212 8746 26 4 0 1000 syz-executor.5 [ 2191] 0 2191 18212 8746 26 4 0 1000 syz-executor.5 [ 2307] 0 2307 18146 8701 24 3 0 1000 syz-executor.5 [ 4212] 0 4212 18179 8745 26 4 0 1000 syz-executor.5 [ 4882] 0 4882 18162 8711 25 3 0 1000 syz-executor.5 [ 4887] 0 4887 18162 8712 25 3 0 1000 syz-executor.5 [ 5369] 0 5369 18114 15 23 3 0 0 syz-executor.2 [ 5370] 0 5370 18113 8731 24 4 0 0 syz-executor.2 [ 6145] 0 6145 18146 8710 25 3 0 1000 syz-executor.2 [ 6149] 0 6149 18179 8715 26 3 0 1000 syz-executor.2 [ 7273] 0 7273 18179 8743 26 4 0 1000 syz-executor.2 [ 7451] 0 7451 18146 8709 25 3 0 1000 syz-executor.2 [ 7456] 0 7456 18179 8712 25 3 0 1000 syz-executor.2 [ 7570] 0 7570 18146 8711 25 3 0 1000 syz-executor.2 [ 7575] 0 7575 18179 8745 26 4 0 1000 syz-executor.2 [ 8229] 0 8229 18212 8748 26 4 0 1000 syz-executor.2 [ 8347] 0 8347 18179 8744 26 4 0 1000 syz-executor.5 [ 8407] 0 8407 18114 17 23 3 0 0 syz-executor.0 [ 8408] 0 8408 18113 8732 24 4 0 0 syz-executor.0 [ 8711] 0 8711 18147 8742 26 4 0 1000 syz-executor.0 [ 8734] 0 8734 5592 371 14 3 0 -1000 udevd [ 8735] 0 8735 5397 178 14 3 0 -1000 udevd [10466] 0 10466 5364 169 14 3 0 -1000 udevd [11019] 0 11019 18114 16 23 3 0 0 syz-executor.3 [11020] 0 11020 18113 8731 24 4 0 0 syz-executor.3 [11255] 0 11255 18144 8710 26 3 0 1000 syz-executor.3 [11259] 0 11259 16162 8713 25 3 0 1000 syz-executor.3 [11414] 0 11414 18212 8749 26 4 0 0 syz-executor.0 [11419] 0 11419 18212 8749 26 4 0 0 syz-executor.0 [11433] 0 11433 18114 15 23 3 0 0 syz-executor.4 [11434] 0 11434 18113 8711 24 4 0 0 syz-executor.4 [11724] 0 11724 18212 8748 26 4 0 1000 syz-executor.3 [11817] 0 11817 18130 8744 26 4 0 0 syz-executor.0 [12048] 0 12048 18179 8746 26 4 0 1000 syz-executor.5 [12137] 0 12137 18146 8743 26 4 0 1000 syz-executor.3 [12282] 0 12282 18114 16 23 3 0 0 syz-executor.1 [12283] 0 12283 18113 8730 24 4 0 0 syz-executor.1 [12609] 0 12609 18212 8749 26 4 0 0 syz-executor.0 [12721] 0 12717 18212 3 27 4 0 1000 syz-executor.4 Out of memory: Kill process 8229 (syz-executor.2) score 1004 or sacrifice child Killed process 8229 (syz-executor.2) total-vm:72848kB, anon-rss:176kB, file-rss:34816kB, shmem-rss:0kB udevd invoked oom-killer: gfp_mask=0x24200ca(GFP_HIGHUSER_MOVABLE), nodemask=0, order=0, oom_score_adj=-1000 CPU: 1 PID: 470 Comm: udevd Not tainted 4.9.194+ #0 ffff8801d304f6f0 ffffffff81b67001 ffff8801d304fa48 ffffffff833f1c30 00000000fffffc18 ffff8801d304fa60 0000000000000000 ffff8801d304f770 ffffffff81506e44 0000000000000000 00000000fffffc18 ffffffff8282ac45 Call Trace: [<000000009d731efd>] __dump_stack lib/dump_stack.c:15 [inline] [<000000009d731efd>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000260b8905>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417 [<00000000adfae887>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852 [<00000000aff34208>] out_of_memory mm/oom_kill.c:1069 [inline] [<00000000aff34208>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009 [<000000004fca511d>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline] [<000000004fca511d>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline] [<000000004fca511d>] __alloc_pages_nodemask+0x1730/0x1a80 mm/page_alloc.c:3861 [<0000000006c298bb>] __alloc_pages include/linux/gfp.h:433 [inline] [<0000000006c298bb>] __alloc_pages_node include/linux/gfp.h:446 [inline] [<0000000006c298bb>] alloc_pages_node include/linux/gfp.h:460 [inline] [<0000000006c298bb>] __page_cache_alloc include/linux/pagemap.h:208 [inline] [<0000000006c298bb>] pagecache_get_page+0x248/0x740 mm/filemap.c:1367 [<000000001dda4729>] filemap_fault+0xb1f/0x1360 mm/filemap.c:2331 [<00000000b05061eb>] ext4_filemap_fault+0x72/0xa0 fs/ext4/inode.c:5854 [<0000000096174358>] __do_fault+0x2a8/0x6c0 mm/memory.c:2855 [<00000000e10aecb9>] do_read_fault mm/memory.c:3202 [inline] [<00000000e10aecb9>] do_fault mm/memory.c:3338 [inline] [<00000000e10aecb9>] handle_pte_fault mm/memory.c:3547 [inline] [<00000000e10aecb9>] __handle_mm_fault mm/memory.c:3634 [inline] [<00000000e10aecb9>] handle_mm_fault+0x11bc/0x2420 mm/memory.c:3671 [<00000000ef4a13d4>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1401 [<000000001838cdb5>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1464 [<00000000ee713068>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:956 Mem-Info: active_anon:83364 inactive_anon:44 isolated_anon:0 active_file:24 inactive_file:26 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:5976 slab_unreclaimable:61593 mapped:52237 shmem:179 pagetables:1588 bounce:0 free:213 free_pcp:366 free_cma:0 Node 0 active_anon:333456kB inactive_anon:176kB active_file:96kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208948kB dirty:0kB writeback:0kB shmem:716kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? yes DMA32 free:8kB min:4696kB low:7712kB high:10728kB active_anon:284kB inactive_anon:8kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3145324kB managed:3020092kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:328kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB Normal free:844kB min:5580kB low:9168kB high:12756kB active_anon:333172kB inactive_anon:168kB active_file:96kB inactive_file:100kB unevictable:0kB writepending:0kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:23904kB slab_unreclaimable:246044kB kernel_stack:6368kB pagetables:6352kB bounce:0kB free_pcp:1344kB local_pcp:644kB free_cma:0kB DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313628 pages reserved [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 470] 0 470 5365 168 15 3 0 -1000 udevd [ 1766] 0 1766 2492 573 8 3 0 0 dhclient