active_file:222 inactive_file:196 isolated_file:0 unevictable:0 dirty:397 writeback:0 unstable:0 slab_reclaimable:14712 slab_unreclaimable:115555 mapped:52226 shmem:536 pagetables:3075 bounce:0 free:13798 free_pcp:90 free_cma:0 INFO: task syz-executor.0:4513 blocked for more than 140 seconds. Node 0 active_anon:544204kB inactive_anon:1924kB active_file:684kB inactive_file:704kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:208904kB dirty:1556kB writeback:0kB shmem:2136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 106496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Not tainted 4.14.167-syzkaller #0 Node 1 active_anon:72828kB inactive_anon:8kB active_file:0kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:32kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Node 0 syz-executor.0 D28768 4513 11876 0x10100004 DMA free:10384kB min:216kB low:268kB high:320kB active_anon:48kB inactive_anon:0kB active_file:36kB inactive_file:24kB unevictable:0kB writepending:60kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB Call Trace: lowmem_reserve[]: 0 2569 2569 2569 2569 Node 0 DMA32 free:18136kB min:36380kB low:45472kB high:54564kB active_anon:544156kB inactive_anon:1924kB active_file:868kB inactive_file:664kB unevictable:0kB writepending:1496kB present:3129332kB managed:2634340kB mlocked:0kB kernel_stack:8416kB pagetables:10660kB bounce:0kB free_pcp:184kB local_pcp:184kB free_cma:0kB context_switch kernel/sched/core.c:2808 [inline] __schedule+0x7b8/0x1cd0 kernel/sched/core.c:3384 lowmem_reserve[]: 0 0 0 0 0 schedule+0x92/0x1c0 kernel/sched/core.c:3428 Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x73c/0x1470 kernel/locking/mutex.c:893 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908 lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:26684kB min:53508kB low:66884kB high:80260kB active_anon:72828kB inactive_anon:8kB active_file:0kB inactive_file:56kB unevictable:0kB writepending:32kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:2656kB pagetables:1640kB bounce:0kB free_pcp:176kB local_pcp:176kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 hashlimit_mt_check_common.isra.0+0x2b8/0x11b0 net/netfilter/xt_hashlimit.c:896 Node 0 DMA: 18*4kB (UM) 17*8kB (UM) 14*16kB (UM) 15*32kB (M) 10*64kB (UM) 3*128kB (UM) 3*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 10384kB hashlimit_mt_check_v1+0x302/0x389 net/netfilter/xt_hashlimit.c:925 Node 0 DMA32: 2627*4kB (UME) 799*8kB (UME) 39*16kB (UM) 4*32kB (U) 6*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18164kB xt_check_match+0x254/0x530 net/netfilter/x_tables.c:501 Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 365*4kB (ME) 191*8kB (UME) 151*16kB (M) 185*32kB (UME) 110*64kB (UME) 35*128kB (ME) 7*256kB (UM) 2*512kB (U) 1*1024kB (E) 0*2048kB 0*4096kB = 26684kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB syz-executor.3: page allocation failure: order:0, mode:0x1404040(GFP_NOFS|__GFP_COMP), nodemask=(null) check_match net/ipv4/netfilter/ip_tables.c:485 [inline] find_check_match net/ipv4/netfilter/ip_tables.c:501 [inline] find_check_entry.isra.0+0x2f9/0x920 net/ipv4/netfilter/ip_tables.c:551 Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB syz-executor.3 cpuset=syz3 mems_allowed=0-1 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB CPU: 1 PID: 21911 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x142/0x197 lib/dump_stack.c:58 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248 __alloc_pages_slowpath+0x23c6/0x2930 mm/page_alloc.c:4095 960 total pagecache pages __alloc_pages_nodemask+0x62c/0x7a0 mm/page_alloc.c:4198 __alloc_pages include/linux/gfp.h:484 [inline] __alloc_pages_node include/linux/gfp.h:497 [inline] kmem_getpages mm/slab.c:1419 [inline] cache_grow_begin+0x80/0x400 mm/slab.c:2676 fallback_alloc+0x1fd/0x2c0 mm/slab.c:3217 ____cache_alloc_node+0x1be/0x1d0 mm/slab.c:3285 __do_cache_alloc mm/slab.c:3354 [inline] slab_alloc mm/slab.c:3382 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x21a/0x7a0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] kzalloc include/linux/slab.h:661 [inline] ext4_ext_remove_space+0x17c5/0x3b10 fs/ext4/extents.c:2955 0 pages in swap cache ext4_ext_truncate+0x19e/0x1f0 fs/ext4/extents.c:4669 ext4_truncate+0xbab/0x11f0 fs/ext4/inode.c:4447 Swap cache stats: add 0, delete 0, find 0/0 ext4_evict_inode+0x8c1/0x15d0 fs/ext4/inode.c:297 evict+0x2e6/0x630 fs/inode.c:554 iput_final fs/inode.c:1523 [inline] iput fs/inode.c:1550 [inline] iput+0x471/0x900 fs/inode.c:1535 Free swap = 0kB dentry_unlink_inode+0x286/0x340 fs/dcache.c:387 __dentry_kill+0x32e/0x580 fs/dcache.c:591 dentry_kill fs/dcache.c:632 [inline] dput.part.0+0x4e3/0x750 fs/dcache.c:847 dput+0x20/0x30 fs/dcache.c:811 path_put+0x31/0x70 fs/namei.c:501 free_fs_struct+0x25/0x70 fs/fs_struct.c:90 exit_fs+0xe7/0x120 fs/fs_struct.c:107 do_exit+0x9f4/0x2cd0 kernel/exit.c:854 do_group_exit+0x111/0x330 kernel/exit.c:955 get_signal+0x381/0x1cd0 kernel/signal.c:2413 do_signal+0x86/0x19a0 arch/x86/kernel/signal.c:814 Total swap = 0kB 1965979 pages RAM exit_to_usermode_loop+0x15c/0x220 arch/x86/entry/common.c:160 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] do_syscall_64+0x4bc/0x640 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45b349 RSP: 002b:00007f7534e65cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 000000000075c078 RCX: 000000000045b349 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075c078 RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075c07c R13: 00007ffefb9954ef R14: 00007f7534e669c0 R15: 000000000075c07c 0 pages HighMem/MovableOnly 335869 pages reserved translate_table+0xb3f/0x15a0 net/ipv4/netfilter/ip_tables.c:737 do_replace net/ipv4/netfilter/ip_tables.c:1138 [inline] do_ipt_set_ctl+0x268/0x3ee net/ipv4/netfilter/ip_tables.c:1674 0 pages cma reserved Out of memory: Kill process 30628 (syz-executor.3) score 1005 or sacrifice child nf_sockopt net/netfilter/nf_sockopt.c:106 [inline] nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:115 ip_setsockopt net/ipv4/ip_sockglue.c:1255 [inline] ip_setsockopt+0x9b/0xb0 net/ipv4/ip_sockglue.c:1240 Killed process 30628 (syz-executor.3) total-vm:72588kB, anon-rss:168kB, file-rss:34688kB, shmem-rss:0kB udp_setsockopt+0x4e/0x90 net/ipv4/udp.c:2451 ipv6_setsockopt+0x9e/0x130 net/ipv6/ipv6_sockglue.c:920 tcp_setsockopt net/ipv4/tcp.c:2820 [inline] tcp_setsockopt+0x84/0xd0 net/ipv4/tcp.c:2814 sock_common_setsockopt+0x94/0xd0 net/core/sock.c:2968 SYSC_setsockopt net/socket.c:1865 [inline] SyS_setsockopt+0x13c/0x210 net/socket.c:1844 oom_reaper: reaped process 30628 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292 syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45b349 syz-executor.2 cpuset=syz2 mems_allowed=0-1 Mem-Info: CPU: 1 PID: 9599 Comm: syz-executor.2 Not tainted 4.14.167-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x142/0x197 lib/dump_stack.c:58 dump_header+0x177/0x6cd mm/oom_kill.c:422 oom_kill_process.cold+0x10/0xadd mm/oom_kill.c:861 out_of_memory mm/oom_kill.c:1084 [inline] out_of_memory+0x2ee/0x1180 mm/oom_kill.c:1023 __alloc_pages_may_oom mm/page_alloc.c:3344 [inline] __alloc_pages_slowpath+0x2251/0x2930 mm/page_alloc.c:4033 __alloc_pages_nodemask+0x62c/0x7a0 mm/page_alloc.c:4198 alloc_pages_current+0xec/0x1e0 mm/mempolicy.c:2113 active_anon:154233 inactive_anon:483 isolated_anon:0 active_file:231 inactive_file:176 isolated_file:5 unevictable:0 dirty:397 writeback:0 unstable:0 slab_reclaimable:14712 slab_unreclaimable:115569 mapped:52226 shmem:536 pagetables:3050 bounce:0 free:13817 free_pcp:110 free_cma:0 alloc_pages include/linux/gfp.h:520 [inline] __page_cache_alloc mm/filemap.c:871 [inline] __page_cache_alloc+0x248/0x3e0 mm/filemap.c:856 page_cache_read mm/filemap.c:2296 [inline] filemap_fault+0xcef/0x1de0 mm/filemap.c:2480 ext4_filemap_fault+0x83/0xb0 fs/ext4/inode.c:6198 __do_fault+0x104/0x390 mm/memory.c:3223 do_read_fault mm/memory.c:3633 [inline] do_fault mm/memory.c:3759 [inline] handle_pte_fault mm/memory.c:3989 [inline] __handle_mm_fault+0x23bd/0x33d0 mm/memory.c:4113 handle_mm_fault+0x293/0x7c0 mm/memory.c:4150 __do_page_fault+0x4c1/0xb80 arch/x86/mm/fault.c:1420 do_page_fault+0x71/0x511 arch/x86/mm/fault.c:1495 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1122 RIP: 0033:0x41518a RSP: 002b:00007fffe00b9d98 EFLAGS: 00010246 RAX: 000000000000020d RBX: 0000000000000000 RCX: 000000000041518a RDX: 0000000040000000 RSI: 00007fffe00b9dd0 RDI: ffffffffffffffff RBP: 0000000000000c7e R08: 0000000000000001 R09: 0000000001020940 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffe00b9dd0 R14: 00000000000efd73 R15: 00007fffe00b9de0 RSP: 002b:00007f328d4ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007f328d4ed6d4 RCX: 000000000045b349 RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 RBP: 000000000075bf20 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000020000580 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000009d9 R14: 00000000004cb40c R15: 000000000075bf2c INFO: task syz-executor.0:4520 blocked for more than 140 seconds. Not tainted 4.14.167-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.0 D28864 4520 11876 0x10000004 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x7b8/0x1cd0 kernel/sched/core.c:3384 schedule+0x92/0x1c0 kernel/sched/core.c:3428 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x73c/0x1470 kernel/locking/mutex.c:893 Node 0 active_anon:544104kB inactive_anon:1924kB active_file:848kB inactive_file:780kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:208904kB dirty:1556kB writeback:0kB shmem:2136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 106496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908 hashlimit_mt_check_common.isra.0+0x2b8/0x11b0 net/netfilter/xt_hashlimit.c:896 Node 1 active_anon:72828kB inactive_anon:8kB active_file:12kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:32kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes hashlimit_mt_check_v1+0x302/0x389 net/netfilter/xt_hashlimit.c:925 Node 0 DMA free:10384kB min:216kB low:268kB high:320kB active_anon:48kB inactive_anon:0kB active_file:40kB inactive_file:24kB unevictable:0kB writepending:60kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB xt_check_match+0x254/0x530 net/netfilter/x_tables.c:501 lowmem_reserve[]: 0 2569 2569 2569 2569 Node 0 DMA32 free:18060kB min:36380kB low:45472kB high:54564kB active_anon:544036kB inactive_anon:1924kB active_file:756kB inactive_file:748kB unevictable:0kB writepending:1496kB present:3129332kB managed:2634340kB mlocked:0kB kernel_stack:8416kB pagetables:10552kB bounce:0kB free_pcp:256kB local_pcp:244kB free_cma:0kB check_match net/ipv4/netfilter/ip_tables.c:485 [inline] find_check_match net/ipv4/netfilter/ip_tables.c:501 [inline] find_check_entry.isra.0+0x2f9/0x920 net/ipv4/netfilter/ip_tables.c:551 lowmem_reserve[]: 0 0 0 0 0 Node 0 Mem-Info: active_anon:154228 inactive_anon:483 isolated_anon:0 active_file:250 inactive_file:163 isolated_file:32 unevictable:0 dirty:397 writeback:0 unstable:0 slab_reclaimable:14713 slab_unreclaimable:115569 mapped:52226 shmem:536 pagetables:3026 bounce:0 free:13783 free_pcp:88 free_cma:0 translate_table+0xb3f/0x15a0 net/ipv4/netfilter/ip_tables.c:737 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:26676kB min:53508kB low:66884kB high:80260kB active_anon:72828kB inactive_anon:8kB active_file:72kB inactive_file:0kB unevictable:0kB writepending:32kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:2656kB pagetables:1552kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 active_anon:544084kB inactive_anon:1924kB active_file:948kB inactive_file:792kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:1556kB writeback:0kB shmem:2136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 106496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 0 do_replace net/ipv4/netfilter/ip_tables.c:1138 [inline] do_ipt_set_ctl+0x268/0x3ee net/ipv4/netfilter/ip_tables.c:1674 DMA: 18*4kB (UM) 17*8kB Node 1 active_anon:72828kB inactive_anon:8kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:32kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes (UM) nf_sockopt net/netfilter/nf_sockopt.c:106 [inline] nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:115 ip_setsockopt net/ipv4/ip_sockglue.c:1255 [inline] ip_setsockopt+0x9b/0xb0 net/ipv4/ip_sockglue.c:1240 14*16kB (UM) 15*32kB (M) 10*64kB (UM) 3*128kB (UM) 3*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 10384kB udp_setsockopt+0x4e/0x90 net/ipv4/udp.c:2451 ipv6_setsockopt+0x9e/0x130 net/ipv6/ipv6_sockglue.c:920 tcp_setsockopt net/ipv4/tcp.c:2820 [inline] tcp_setsockopt+0x84/0xd0 net/ipv4/tcp.c:2814 Node 0 DMA free:10384kB min:216kB low:268kB high:320kB active_anon:48kB inactive_anon:0kB active_file:12kB inactive_file:52kB unevictable:0kB writepending:60kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB Node 0 DMA32: 2625*4kB (UME) 797*8kB (ME) 38*16kB (M) 2*32kB (U) 6*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18060kB sock_common_setsockopt+0x94/0xd0 net/core/sock.c:2968 SYSC_setsockopt net/socket.c:1865 [inline] SyS_setsockopt+0x13c/0x210 net/socket.c:1844 Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 358*4kB (UME) 190*8kB (UME) 151*16kB (M) 186*32kB (UME) 110*64kB (UME) 35*128kB (ME) 7*256kB (UM) 2*512kB (U) 1*1024kB (E) 0*2048kB 0*4096kB = 26680kB lowmem_reserve[]: Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 0 2569 2569 2569 2569 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 DMA32 free:18120kB min:36380kB low:45472kB high:54564kB active_anon:544036kB inactive_anon:1924kB active_file:776kB inactive_file:784kB unevictable:0kB writepending:1496kB present:3129332kB managed:2634340kB mlocked:0kB kernel_stack:8416kB pagetables:10552kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB RIP: 0033:0x45b349 964 total pagecache pages RSP: 002b:00007f328d4cbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 0 pages in swap cache RAX: ffffffffffffffda RBX: 00007f328d4cc6d4 RCX: 000000000045b349 Swap cache stats: add 0, delete 0, find 0/0 RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 lowmem_reserve[]: 0 0 0 0 0 Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB Free swap = 0kB RBP: 000000000075bfc8 R08: 0000000000000001 R09: 0000000000000000 Total swap = 0kB 1965979 pages RAM R10: 0000000020000580 R11: 0000000000000246 R12: 00000000ffffffff 0 pages HighMem/MovableOnly lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:26756kB min:53508kB low:66884kB high:80260kB active_anon:72828kB inactive_anon:8kB active_file:72kB inactive_file:0kB unevictable:0kB writepending:32kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:2656kB pagetables:1552kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 335869 pages reserved R13: 00000000000009d9 R14: 00000000004cb40c R15: 000000000075bfd4 lowmem_reserve[]: 0 0 0 0 0 Showing all locks held in the system: Node 0 2 locks held by init/1: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x2ca/0xb80 arch/x86/mm/fault.c:1349 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x7b/0xb0 fs/ext4/inode.c:6197 DMA: 1 lock held by khungtaskd/1059: #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4544 3 locks held by kworker/0:2/2866: #0: ("md_misc"){+.+.}, at: [] work_static include/linux/workqueue.h:199 [inline] #0: ("md_misc"){+.+.}, at: [] set_work_data kernel/workqueue.c:619 [inline] #0: ("md_misc"){+.+.}, at: [] set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: ("md_misc"){+.+.}, at: [] process_one_work+0x76e/0x1600 kernel/workqueue.c:2085 #1: ((&mddev->del_work)){+.+.}, at: [] process_one_work+0x7ab/0x1600 kernel/workqueue.c:2089 #2: (uevent_sock_mutex){+.+.}, at: [] kobject_uevent_env+0x5b3/0xc80 lib/kobject_uevent.c:459 2 locks held by udevd/3719: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x2ca/0xb80 arch/x86/mm/fault.c:1349 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x7b/0xb0 fs/ext4/inode.c:6197 2 locks held by rsyslogd/7104: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x2ca/0xb80 arch/x86/mm/fault.c:1349 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x7b/0xb0 fs/ext4/inode.c:6197 2 locks held by cron/7155: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x2ca/0xb80 arch/x86/mm/fault.c:1349 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x7b/0xb0 fs/ext4/inode.c:6197 2 locks held by getty/7227: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:376 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 drivers/tty/n_tty.c:2156 2 locks held by getty/7228: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:376 18*4kB #1: (UM) ( 17*8kB &ldata->atomic_read_lock (UM) ){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 drivers/tty/n_tty.c:2156 2 locks held by getty/7229: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:376 #1: 14*16kB (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 drivers/tty/n_tty.c:2156 0 pages cma reserved 2 locks held by getty/7230: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:376 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 drivers/tty/n_tty.c:2156 (UM) 2 locks held by getty/7231: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:376 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 drivers/tty/n_tty.c:2156 2 locks held by getty/7232: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:376 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 drivers/tty/n_tty.c:2156 15*32kB 2 locks held by getty/7233: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:376 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 drivers/tty/n_tty.c:2156 2 locks held by syz-fuzzer/7248: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x2ca/0xb80 arch/x86/mm/fault.c:1349 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x7b/0xb0 fs/ext4/inode.c:6197 (M) 10*64kB (UM) 3*128kB (UM) 3*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 1*4096kB 2 locks held by syz-fuzzer/7249: (M) = 10384kB #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x2ca/0xb80 arch/x86/mm/fault.c:1349 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x7b/0xb0 fs/ext4/inode.c:6197 2 locks held by syz-fuzzer/7251: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x2ca/0xb80 arch/x86/mm/fault.c:1349 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x7b/0xb0 fs/ext4/inode.c:6197 2 locks held by syz-fuzzer/7252: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x2ca/0xb80 arch/x86/mm/fault.c:1349 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x7b/0xb0 fs/ext4/inode.c:6197 4 locks held by kworker/u4:6/8805: #0: ("%s""netns"){+.+.}, at: [] work_static include/linux/workqueue.h:199 [inline] #0: ("%s""netns"){+.+.}, at: [] set_work_data kernel/workqueue.c:619 [inline] #0: ("%s""netns"){+.+.}, at: [] set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: ("%s""netns"){+.+.}, at: [] process_one_work+0x76e/0x1600 kernel/workqueue.c:2085 #1: (net_cleanup_work){+.+.}, at: [] process_one_work+0x7ab/0x1600 kernel/workqueue.c:2089 #2: ( Node 0 net_mutex){+.+.}, at: [] cleanup_net+0x11c/0x870 net/core/net_namespace.c:450 #3: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:72 2 locks held by syz-executor.0/11876: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x2ca/0xb80 arch/x86/mm/fault.c:1349 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x7b/0xb0 fs/ext4/inode.c:6197 2 locks held by syz-executor.1/15759: #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] inode_lock include/linux/fs.h:718 [inline] #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] __sock_release+0x89/0x2b0 net/socket.c:601 #1: DMA32: 2631*4kB (UME) 797*8kB (ME) 38*16kB (M) 1*32kB (U) 6*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18052kB Node 0 Normal: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:72 1 lock held by syz-executor.4/19964: #0: (sb_internal){.+.+}, at: [] sb_start_intwrite include/linux/fs.h:1595 [inline] #0: (sb_internal){.+.+}, at: [] ext4_evict_inode+0x4db/0x15d0 fs/ext4/inode.c:254 1 lock held by syz-executor.3/21911: #0: (sb_internal){.+.+}, at: [] sb_start_intwrite include/linux/fs.h:1595 [inline] #0: (sb_internal){.+.+}, at: [] ext4_evict_inode+0x4db/0x15d0 fs/ext4/inode.c:254 1 lock held by syz-executor.3/21955: #0: (sb_internal){.+.+}, at: [] sb_start_intwrite include/linux/fs.h:1595 [inline] #0: (sb_internal){.+.+}, at: [] ext4_evict_inode+0x4db/0x15d0 fs/ext4/inode.c:254 1 lock held by syz-executor.3/21975: #0: (sb_internal){.+.+}, at: [] sb_start_intwrite include/linux/fs.h:1595 [inline] #0: (sb_internal){.+.+}, at: [] ext4_evict_inode+0x4db/0x15d0 fs/ext4/inode.c:254 4 locks held by syz-executor.3/23317: #0: ( 0*4kB &bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xa6/0x7f0 fs/block_dev.c:1778 #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x20/0x1b0 drivers/block/loop.c:1677 #2: (&lo->lo_ctl_mutex#2){+.+.}, at: [] __lo_release drivers/block/loop.c:1654 [inline] #2: (&lo->lo_ctl_mutex#2){+.+.}, at: [] lo_release+0x8c/0x1b0 drivers/block/loop.c:1678 #3: (uevent_sock_mutex){+.+.}, at: [] kobject_uevent_env+0x5b3/0xc80 lib/kobject_uevent.c:459 3 locks held by kworker/1:0/24807: 0*8kB #0: ("%s"("ipv6_addrconf")){+.+.}, at: [] work_static include/linux/workqueue.h:199 [inline] #0: ("%s"("ipv6_addrconf")){+.+.}, at: [] set_work_data kernel/workqueue.c:619 [inline] #0: ("%s"("ipv6_addrconf")){+.+.}, at: [] set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: ("%s"("ipv6_addrconf")){+.+.}, at: [] process_one_work+0x76e/0x1600 kernel/workqueue.c:2085 #1: ((addr_chk_work).work){+.+.}, at: [] process_one_work+0x7ab/0x1600 kernel/workqueue.c:2089 #2: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:72 2 locks held by syz-executor.5/25171: 0*16kB #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] inode_lock include/linux/fs.h:718 [inline] #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] __sock_release+0x89/0x2b0 net/socket.c:601 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB #1: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:72 2 locks held by syz-executor.5/25193: #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] inode_lock include/linux/fs.h:718 [inline] #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] __sock_release+0x89/0x2b0 net/socket.c:601 #1: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:72 Node 1 2 locks held by syz-executor.5/25203: #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] inode_lock include/linux/fs.h:718 [inline] #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] __sock_release+0x89/0x2b0 net/socket.c:601 Normal: 377*4kB (UME) 195*8kB (UME) 151*16kB (M) 186*32kB (UME) 110*64kB (UME) 35*128kB (ME) 7*256kB #1: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:72 2 locks held by syz-executor.5/25221: #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] inode_lock include/linux/fs.h:718 [inline] #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] __sock_release+0x89/0x2b0 net/socket.c:601 #1: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:72 2 locks held by syz-executor.3/27215: (UM) #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] inode_lock include/linux/fs.h:718 [inline] #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] __sock_release+0x89/0x2b0 net/socket.c:601 #1: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:72 1 lock held by syz-executor.2/28047: #0: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:72 2 locks held by syz-executor.4/29581: #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] inode_lock include/linux/fs.h:718 [inline] #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] __sock_release+0x89/0x2b0 net/socket.c:601 #1: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:72 2*512kB 1 lock held by syz-executor.2/30569: #0: (sb_internal){.+.+}, at: [] sb_start_intwrite include/linux/fs.h:1595 [inline] #0: (sb_internal){.+.+}, at: [] ext4_evict_inode+0x4db/0x15d0 fs/ext4/inode.c:254 1 lock held by syz-executor.3/30597: #0: (sb_internal){.+.+}, at: [] sb_start_intwrite include/linux/fs.h:1595 [inline] #0: (sb_internal){.+.+}, at: [] ext4_evict_inode+0x4db/0x15d0 fs/ext4/inode.c:254 1 lock held by syz-executor.1/30601: (U) #0: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:72 1 lock held by syz-executor.3/30628: #0: (sb_internal){.+.+}, at: [] sb_start_intwrite include/linux/fs.h:1595 [inline] #0: (sb_internal){.+.+}, at: [] ext4_evict_inode+0x4db/0x15d0 fs/ext4/inode.c:254 1 lock held by syz-executor.5/30659: #0: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:72 2 locks held by syz-executor.4/32601: #0: (sb_internal){.+.+}, at: [] sb_start_intwrite include/linux/fs.h:1595 [inline] #0: (sb_internal){.+.+}, at: [] ext4_evict_inode+0x4db/0x15d0 fs/ext4/inode.c:254 #1: (&ei->i_data_sem){++++}, at: [] ext4_truncate+0x4b9/0x11f0 fs/ext4/inode.c:4442 2 locks held by syz-executor.4/920: 1*1024kB #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] inode_lock include/linux/fs.h:718 [inline] #0: (&sb->s_type->i_mutex_key#11){+.+.}, at: [] __sock_release+0x89/0x2b0 net/socket.c:601 #1: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:72 1 lock held by syz-executor.2/4496: #0: (hashlimit_mutex){+.+.}, at: [] hashlimit_mt_check_common.isra.0+0x2b8/0x11b0 net/netfilter/xt_hashlimit.c:896 1 lock held by syz-executor.0/4513: #0: (hashlimit_mutex){+.+.}, at: [] hashlimit_mt_check_common.isra.0+0x2b8/0x11b0 net/netfilter/xt_hashlimit.c:896 1 lock held by syz-executor.0/4520: #0: (hashlimit_mutex){+.+.}, at: [] hashlimit_mt_check_common.isra.0+0x2b8/0x11b0 net/netfilter/xt_hashlimit.c:896 (E) ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1059 Comm: khungtaskd Not tainted 4.14.167-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x142/0x197 lib/dump_stack.c:58 nmi_cpu_backtrace.cold+0x57/0x94 lib/nmi_backtrace.c:101 0*2048kB 0*4096kB = 26796kB nmi_trigger_cpumask_backtrace+0x141/0x189 lib/nmi_backtrace.c:62 Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline] watchdog+0x5e7/0xb90 kernel/hung_task.c:274 kthread+0x319/0x430 kernel/kthread.c:232 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Sending NMI from CPU 0 to CPUs 1: Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB NMI backtrace for cpu 1 CPU: 1 PID: 9599 Comm: syz-executor.2 Not tainted 4.14.167-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8880598223c0 task.stack: ffff88807e348000 RIP: 0010:__sanitizer_cov_trace_pc+0x9/0x60 kernel/kcov.c:65 RSP: 0000:ffff88807e34eef0 EFLAGS: 00000016 RAX: ffff8880598223c0 RBX: ffffffff86cb20a4 RCX: 0000000000000004 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff86cb20a2 RBP: ffff88807e34ef80 R08: ffffffff86cb20a4 R09: ffffffff8959ba78 R10: ffff888059822ce0 R11: ffff8880598223c0 R12: ffff88807e34f000 R13: ffff88807e34ef58 R14: 000000000000006c R15: ffffffff86cb20a3 FS: 0000000001020940(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000130 CR3: 000000005f687000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: vsnprintf+0x145/0x1560 lib/vsprintf.c:2133 snprintf+0xa5/0xd0 lib/vsprintf.c:2314 print_time kernel/printk/printk.c:1228 [inline] print_prefix+0x23c/0x3a0 kernel/printk/printk.c:1253 msg_print_text+0x83/0x1b0 kernel/printk/printk.c:1276 console_unlock+0x302/0xed0 kernel/printk/printk.c:2374 vprintk_emit kernel/printk/printk.c:1923 [inline] vprintk_emit+0x1f9/0x600 kernel/printk/printk.c:1888 vprintk_default+0x28/0x30 kernel/printk/printk.c:1963 vprintk_func+0x5d/0x159 kernel/printk/printk_safe.c:401 printk+0x9e/0xbc kernel/printk/printk.c:1996 hugetlb_show_meminfo.cold+0xe8/0x138 mm/hugetlb.c:3030 show_free_areas.cold+0x8c5/0x1379 mm/page_alloc.c:4848 show_mem+0x39/0x18b lib/show_mem.c:18 dump_header+0x1e1/0x6cd mm/oom_kill.c:426 oom_kill_process.cold+0x10/0xadd mm/oom_kill.c:861 out_of_memory mm/oom_kill.c:1084 [inline] out_of_memory+0x2ee/0x1180 mm/oom_kill.c:1023 __alloc_pages_may_oom mm/page_alloc.c:3344 [inline] __alloc_pages_slowpath+0x2251/0x2930 mm/page_alloc.c:4033 __alloc_pages_nodemask+0x62c/0x7a0 mm/page_alloc.c:4198 alloc_pages_current+0xec/0x1e0 mm/mempolicy.c:2113 alloc_pages include/linux/gfp.h:520 [inline] __page_cache_alloc mm/filemap.c:871 [inline] __page_cache_alloc+0x248/0x3e0 mm/filemap.c:856 page_cache_read mm/filemap.c:2296 [inline] filemap_fault+0xcef/0x1de0 mm/filemap.c:2480 ext4_filemap_fault+0x83/0xb0 fs/ext4/inode.c:6198 __do_fault+0x104/0x390 mm/memory.c:3223 do_read_fault mm/memory.c:3633 [inline] do_fault mm/memory.c:3759 [inline] handle_pte_fault mm/memory.c:3989 [inline] __handle_mm_fault+0x23bd/0x33d0 mm/memory.c:4113 handle_mm_fault+0x293/0x7c0 mm/memory.c:4150 __do_page_fault+0x4c1/0xb80 arch/x86/mm/fault.c:1420 do_page_fault+0x71/0x511 arch/x86/mm/fault.c:1495 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1122 RIP: 0033:0x41518a RSP: 002b:00007fffe00b9d98 EFLAGS: 00010246 RAX: 000000000000020d RBX: 0000000000000000 RCX: 000000000041518a RDX: 0000000040000000 RSI: 00007fffe00b9dd0 RDI: ffffffffffffffff RBP: 0000000000000c7e R08: 0000000000000001 R09: 0000000001020940 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffe00b9dd0 R14: 00000000000efd73 R15: 00007fffe00b9de0 Code: 4c 89 35 2b c4 4c 08 41 be f4 ff ff ff e8 23 33 ee ff 48 c7 05 15 c4 4c 08 00 00 00 00 e9 14 ec ff ff 65 48 8b 04 25 40 ee 01 00 <48> 85 c0 74 1a 65 8b 15 4b ca a4 7e 81 e2 00 01 1f 00 75 0b 8b