workingset_refault_anon 0 workingset_refault_file 0 oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3636,uid=0 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8241, name: syz-executor.1 preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 4 locks held by syz-executor.1/8241: #0: ffff8880225d4e28 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline] #0: ffff8880225d4e28 (&mm->mmap_lock#2){++++}-{3:3}, at: do_user_addr_fault+0x285/0x11c0 arch/x86/mm/fault.c:1338 #1: ffffffff8bce3b60 (memcg_oom_lock#2){+.+.}-{0:0}, at: mem_cgroup_oom mm/memcontrol.c:1846 [inline] #1: ffffffff8bce3b60 (memcg_oom_lock#2){+.+.}-{0:0}, at: try_charge_memcg+0xb96/0x1130 mm/memcontrol.c:2647 #2: ffffffff8bc65e68 (oom_lock){+.+.}-{3:3}, at: mem_cgroup_out_of_memory+0x8d/0x270 mm/memcontrol.c:1607 #3: ffff888075af8960 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #3: ffff888075af8960 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline] #3: ffff888075af8960 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 PID: 8241 Comm: syz-executor.1 Not tainted 5.17.0-rc1-next-20220127-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9576 __mutex_lock_common kernel/locking/mutex.c:577 [inline] __mutex_lock+0x9f/0x12f0 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x26/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5b0 mm/oom_kill.c:1003 out_of_memory+0x358/0x14b0 mm/oom_kill.c:1132 mem_cgroup_out_of_memory+0x206/0x270 mm/memcontrol.c:1617 mem_cgroup_oom mm/memcontrol.c:1852 [inline] try_charge_memcg+0xe03/0x1130 mm/memcontrol.c:2647 obj_cgroup_charge_pages+0x1e/0x90 mm/memcontrol.c:3017 __memcg_kmem_charge_page+0x368/0x5a0 mm/memcontrol.c:3044 __alloc_pages+0x1da/0x500 mm/page_alloc.c:5398 alloc_pages+0x1aa/0x310 mm/mempolicy.c:2271 __get_free_pages mm/page_alloc.c:5430 [inline] get_zeroed_page+0x10/0x40 mm/page_alloc.c:5439 __pud_alloc_one include/asm-generic/pgalloc.h:156 [inline] pud_alloc_one include/asm-generic/pgalloc.h:171 [inline] __pud_alloc+0x37/0x170 mm/memory.c:4853 pud_alloc include/linux/mm.h:2237 [inline] __handle_mm_fault+0x603/0x4150 mm/memory.c:4640 handle_mm_fault+0x1c8/0x790 mm/memory.c:4803 do_user_addr_fault+0x489/0x11c0 arch/x86/mm/fault.c:1397 handle_page_fault arch/x86/mm/fault.c:1484 [inline] exc_page_fault+0x9e/0x180 arch/x86/mm/fault.c:1540 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:568 RIP: 0033:0x7f4e93100676 Code: 1f 44 00 00 48 8b 0d 61 ed 0a 01 4c 63 05 4a ed 0a 01 48 8b 05 4b ed 0a 01 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 31 ed 0a 01 c3 52 48 8d 35 2c b8 0b 00 48 89 c2 48 RSP: 002b:00007ffc37455628 EFLAGS: 00010287 RAX: 0000001b2ea20000 RBX: 0000000000000003 RCX: 0000001b2ea20000 RDX: 0000001b2ea20004 RSI: 00000000003c0000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2ee20000 R09: 0000000000040000 R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc374558d0 ============================= [ BUG: Invalid wait context ] 5.17.0-rc1-next-20220127-syzkaller #0 Tainted: G W ----------------------------- syz-executor.1/8241 is trying to lock: ffff888075af9380 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_cleanup_begin kernel/futex/core.c:1058 [inline] ffff888075af9380 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x26/0x220 kernel/futex/core.c:1110 other info that might help us debug this: context-{4:4} 4 locks held by syz-executor.1/8241: #0: ffff8880225d4e28 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline] #0: ffff8880225d4e28 (&mm->mmap_lock#2){++++}-{3:3}, at: do_user_addr_fault+0x285/0x11c0 arch/x86/mm/fault.c:1338 #1: ffffffff8bce3b60 (memcg_oom_lock#2){+.+.}-{0:0}, at: mem_cgroup_oom mm/memcontrol.c:1846 [inline] #1: ffffffff8bce3b60 (memcg_oom_lock#2){+.+.}-{0:0}, at: try_charge_memcg+0xb96/0x1130 mm/memcontrol.c:2647 #2: ffffffff8bc65e68 (oom_lock){+.+.}-{3:3}, at: mem_cgroup_out_of_memory+0x8d/0x270 mm/memcontrol.c:1607 #3: ffff888075af8960 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline] #3: ffff888075af8960 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline] #3: ffff888075af8960 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144 stack backtrace: CPU: 1 PID: 8241 Comm: syz-executor.1 Tainted: G W 5.17.0-rc1-next-20220127-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_lock_invalid_wait_context kernel/locking/lockdep.c:4678 [inline] check_wait_context kernel/locking/lockdep.c:4739 [inline] __lock_acquire.cold+0x213/0x3ab kernel/locking/lockdep.c:4977 lock_acquire kernel/locking/lockdep.c:5639 [inline] lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5604 __mutex_lock_common kernel/locking/mutex.c:600 [inline] __mutex_lock+0x12f/0x12f0 kernel/locking/mutex.c:733 futex_cleanup_begin kernel/futex/core.c:1058 [inline] futex_exit_release+0x26/0x220 kernel/futex/core.c:1110 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893 oom_kill_process+0xd7/0x5b0 mm/oom_kill.c:1003 out_of_memory+0x358/0x14b0 mm/oom_kill.c:1132 mem_cgroup_out_of_memory+0x206/0x270 mm/memcontrol.c:1617 mem_cgroup_oom mm/memcontrol.c:1852 [inline] try_charge_memcg+0xe03/0x1130 mm/memcontrol.c:2647 obj_cgroup_charge_pages+0x1e/0x90 mm/memcontrol.c:3017 __memcg_kmem_charge_page+0x368/0x5a0 mm/memcontrol.c:3044 __alloc_pages+0x1da/0x500 mm/page_alloc.c:5398 alloc_pages+0x1aa/0x310 mm/mempolicy.c:2271 __get_free_pages mm/page_alloc.c:5430 [inline] get_zeroed_page+0x10/0x40 mm/page_alloc.c:5439 __pud_alloc_one include/asm-generic/pgalloc.h:156 [inline] pud_alloc_one include/asm-generic/pgalloc.h:171 [inline] __pud_alloc+0x37/0x170 mm/memory.c:4853 pud_alloc include/linux/mm.h:2237 [inline] __handle_mm_fault+0x603/0x4150 mm/memory.c:4640 handle_mm_fault+0x1c8/0x790 mm/memory.c:4803 do_user_addr_fault+0x489/0x11c0 arch/x86/mm/fault.c:1397 handle_page_fault arch/x86/mm/fault.c:1484 [inline] exc_page_fault+0x9e/0x180 arch/x86/mm/fault.c:1540 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:568 RIP: 0033:0x7f4e93100676 Code: 1f 44 00 00 48 8b 0d 61 ed 0a 01 4c 63 05 4a ed 0a 01 48 8b 05 4b ed 0a 01 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 31 ed 0a 01 c3 52 48 8d 35 2c b8 0b 00 48 89 c2 48 RSP: 002b:00007ffc37455628 EFLAGS: 00010287 RAX: 0000001b2ea20000 RBX: 0000000000000003 RCX: 0000001b2ea20000 RDX: 0000001b2ea20004 RSI: 00000000003c0000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2ee20000 R09: 0000000000040000 R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc374558d0 Memory cgroup out of memory: Killed process 3636 (syz-executor.1) total-vm:56676kB, anon-rss:392kB, file-rss:15200kB, shmem-rss:4kB, UID:0 pgtables:84kB oom_score_adj:0