Free memory is -13164kB above reserved lowmemorykiller: Killing 'syz-executor1' (32188) (tgid 32188), adj 1000, to free 32928kB on behalf of 'init' (1) because cache 216kB is below limit 6144kB for oom_score_adj 0 Free memory is -13164kB above reserved INFO: task syz-executor1:32294 blocked for more than 140 seconds. Not tainted 4.9.141+ #23 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor1 D30184 32294 2115 0x20020004 ffff880088d42f80 ffff8801d4718000 ffff880161728000 ffff880194b75f00 ffff8801db621018 ffff8800add77a88 ffffffff828075c2 ffff8800add77b08 ffff880088d42f80 ffffffff810efada 00fffc0000000000 ffff8801db6218f0 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3553 [] __lock_sock+0x13c/0x250 net/core/sock.c:2035 [] lock_sock_nested+0xf6/0x120 net/core/sock.c:2505 [] lock_sock include/net/sock.h:1404 [inline] [] packet_setsockopt+0x94a/0x2630 net/packet/af_packet.c:3758 [] compat_packet_setsockopt+0xe1/0x140 net/packet/af_packet.c:4016 [] C_SYSC_setsockopt net/compat.c:399 [inline] [] compat_SyS_setsockopt+0x169/0x550 net/compat.c:382 [] do_syscall_32_irqs_on arch/x86/entry/common.c:328 [inline] [] do_fast_syscall_32+0x2f1/0xa10 arch/x86/entry/common.c:390 [] entry_SYSENTER_compat+0x90/0xa2 arch/x86/entry/entry_64_compat.S:137 Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 2 locks held by getty/2050: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #23 ffff8801d9907d08 ffffffff81b42e79 0000000000000000 0000000000000001 0000000000000001 0000000000000001 ffffffff810983b0 ffff8801d9907d40 ffffffff81b4df89 0000000000000001 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.0+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12c/0x151 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6ad/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 32293 Comm: syz-executor1 Not tainted 4.9.141+ #23 task: ffff880088d45f00 task.stack: ffff8800b8570000 RIP: 0010:[] c [] __sanitizer_cov_trace_pc+0x4b/0x50 kernel/kcov.c:110 RSP: 0018:ffff8800b8577328 EFLAGS: 00000246 RAX: 0000000000040000 RBX: ffff8800a2495f00 RCX: ffffc9000274e000 RDX: 0000000000040000 RSI: ffffffff821f0174 RDI: ffffffff841eb840 RBP: ffff8800b8577328 R08: ffff880088d46848 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000001fff R14: ffff8800a2495f00 R15: 0000000000000600 FS: 0000000000000000(0000) GS:ffff8801db600000(0063) knlGS:00000000f570db40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 00007fafabb98830 CR3: 000000006979c000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8800b85773d8c ffffffff821f0174c ffffffff821efedec ffff8800b8577380c ffffffff81ba7d7bc 0000000000000246c ffff880088d45f00c ffffffff830cc2e0c ffff8800b85774b0c fffffbfff0601200c 0000200ab85773a0c ffff8800a24966c0c Call Trace: [] lowmem_scan+0x4e4/0xaf0 drivers/staging/android/lowmemorykiller.c:153 [] do_shrink_slab mm/vmscan.c:398 [inline] [] shrink_slab.part.8+0x3c6/0xa00 mm/vmscan.c:501 [] shrink_slab mm/vmscan.c:465 [inline] [] shrink_node+0x1ed/0x740 mm/vmscan.c:2602 [] shrink_zones mm/vmscan.c:2749 [inline] [] do_try_to_free_pages mm/vmscan.c:2791 [inline] [] try_to_free_pages+0x377/0xb80 mm/vmscan.c:3002 [] __perform_reclaim mm/page_alloc.c:3324 [inline] [] __alloc_pages_direct_reclaim mm/page_alloc.c:3345 [inline] [] __alloc_pages_slowpath mm/page_alloc.c:3697 [inline] [] __alloc_pages_nodemask+0x981/0x1bd0 mm/page_alloc.c:3862 [] __alloc_pages include/linux/gfp.h:433 [inline] [] __alloc_pages_node include/linux/gfp.h:446 [inline] [] alloc_pages_node include/linux/gfp.h:460 [inline] [] __vmalloc_area_node mm/vmalloc.c:1644 [inline] [] __vmalloc_node_range+0x25b/0x600 mm/vmalloc.c:1702 [] __vmalloc_node mm/vmalloc.c:1745 [inline] [] __vmalloc_node_flags mm/vmalloc.c:1759 [inline] [] vzalloc+0x5b/0x70 mm/vmalloc.c:1791 [] alloc_one_pg_vec_page net/packet/af_packet.c:4208 [inline] [] alloc_pg_vec net/packet/af_packet.c:4233 [inline] [] packet_set_ring+0x51e/0x1810 net/packet/af_packet.c:4323 [] packet_setsockopt+0xfa3/0x2630 net/packet/af_packet.c:3685 [] compat_packet_setsockopt+0xe1/0x140 net/packet/af_packet.c:4016 [] C_SYSC_setsockopt net/compat.c:399 [inline] [] compat_SyS_setsockopt+0x169/0x550 net/compat.c:382 [] do_syscall_32_irqs_on arch/x86/entry/common.c:328 [inline] [] do_fast_syscall_32+0x2f1/0xa10 arch/x86/entry/common.c:390 [] entry_SYSENTER_compat+0x90/0xa2 arch/x86/entry/entry_64_compat.S:137 Code: c8b c90 c38 c12 c00 c00 c83 cfa c02 c75 c20 c48 c8b c88 c40 c12 c00 c00 c8b c80 c3c c12 c00 c00 c48 c8b c11 c48 c83 cc2 c01 c48 c39 cd0 c76 c07 c48 c89 c34 cd1 c48 c89 c11 c<5d> cc3 c0f c1f c00 c55 cba c58 c00 c00 c00 c48 c89 ce5 c41 c55 c49 c89 cfd c48 c8b c