syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0
======================================================
WARNING: possible circular locking dependency detected
5.0.0-rc8+ #89 Not tainted
------------------------------------------------------
syz-executor.1/27462 is trying to acquire lock:
000000003caee7db (&mm->mmap_sem){++++}, at: do_user_addr_fault arch/x86/mm/fault.c:1426 [inline]
000000003caee7db (&mm->mmap_sem){++++}, at: __do_page_fault+0x9c2/0xd60 arch/x86/mm/fault.c:1541

but task is already holding lock:
00000000bf945bb0 (&sb->s_type->i_mutex_key#12){+.+.}, at: inode_lock include/linux/fs.h:757 [inline]
00000000bf945bb0 (&sb->s_type->i_mutex_key#12){+.+.}, at: generic_file_write_iter+0xdf/0x610 mm/filemap.c:3358

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #2 (&sb->s_type->i_mutex_key#12){+.+.}:
       down_write+0x38/0x90 kernel/locking/rwsem.c:70
       inode_lock include/linux/fs.h:757 [inline]
       shmem_fallocate+0x15a/0xc60 mm/shmem.c:2633
       ashmem_shrink_scan drivers/staging/android/ashmem.c:455 [inline]
       ashmem_shrink_scan+0x1d7/0x4f0 drivers/staging/android/ashmem.c:439
       ashmem_ioctl+0x2f0/0x11a0 drivers/staging/android/ashmem.c:797
       vfs_ioctl fs/ioctl.c:46 [inline]
       file_ioctl fs/ioctl.c:509 [inline]
       do_vfs_ioctl+0xd6e/0x1390 fs/ioctl.c:696
       ksys_ioctl+0xab/0xd0 fs/ioctl.c:713
       __do_sys_ioctl fs/ioctl.c:720 [inline]
       __se_sys_ioctl fs/ioctl.c:718 [inline]
       __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718
       do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
       entry_SYSCALL_64_after_hwframe+0x49/0xbe

-> #1 (ashmem_mutex){+.+.}:
       __mutex_lock_common kernel/locking/mutex.c:925 [inline]
       __mutex_lock+0xf7/0x1310 kernel/locking/mutex.c:1072
       mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
       ashmem_mmap+0x55/0x520 drivers/staging/android/ashmem.c:361
       call_mmap include/linux/fs.h:1868 [inline]
       mmap_region+0xc37/0x1760 mm/mmap.c:1786
       do_mmap+0x8e2/0x1080 mm/mmap.c:1559
       do_mmap_pgoff include/linux/mm.h:2379 [inline]
       vm_mmap_pgoff+0x1c5/0x230 mm/util.c:350
       ksys_mmap_pgoff+0x4aa/0x630 mm/mmap.c:1609
       __do_sys_mmap arch/x86/kernel/sys_x86_64.c:100 [inline]
       __se_sys_mmap arch/x86/kernel/sys_x86_64.c:91 [inline]
       __x64_sys_mmap+0xe9/0x1b0 arch/x86/kernel/sys_x86_64.c:91
       do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
       entry_SYSCALL_64_after_hwframe+0x49/0xbe

-> #0 (&mm->mmap_sem){++++}:
       lock_acquire+0x16f/0x3f0 kernel/locking/lockdep.c:3841
       down_read+0x3b/0x90 kernel/locking/rwsem.c:24
       do_user_addr_fault arch/x86/mm/fault.c:1426 [inline]
       __do_page_fault+0x9c2/0xd60 arch/x86/mm/fault.c:1541
       do_page_fault+0x71/0x581 arch/x86/mm/fault.c:1572
       page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1143
       fault_in_pages_readable include/linux/pagemap.h:603 [inline]
       iov_iter_fault_in_readable+0x1ba/0x450 lib/iov_iter.c:425
       generic_perform_write+0x195/0x530 mm/filemap.c:3198
       __generic_file_write_iter+0x25e/0x630 mm/filemap.c:3333
       generic_file_write_iter+0x360/0x610 mm/filemap.c:3361
       call_write_iter include/linux/fs.h:1863 [inline]
       new_sync_write fs/read_write.c:474 [inline]
       __vfs_write+0x613/0x8e0 fs/read_write.c:487
       vfs_write+0x20c/0x580 fs/read_write.c:549
       ksys_write+0xea/0x1f0 fs/read_write.c:598
       __do_sys_write fs/read_write.c:610 [inline]
       __se_sys_write fs/read_write.c:607 [inline]
       __x64_sys_write+0x73/0xb0 fs/read_write.c:607
       do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
       entry_SYSCALL_64_after_hwframe+0x49/0xbe

other info that might help us debug this:

Chain exists of:
  &mm->mmap_sem --> ashmem_mutex --> &sb->s_type->i_mutex_key#12

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&sb->s_type->i_mutex_key#12);
                               lock(ashmem_mutex);
                               lock(&sb->s_type->i_mutex_key#12);
  lock(&mm->mmap_sem);

 *** DEADLOCK ***

2 locks held by syz-executor.1/27462:
 #0: 00000000932f15cb (sb_writers#5){.+.+}, at: file_start_write include/linux/fs.h:2816 [inline]
 #0: 00000000932f15cb (sb_writers#5){.+.+}, at: vfs_write+0x429/0x580 fs/read_write.c:548
 #1: 00000000bf945bb0 (&sb->s_type->i_mutex_key#12){+.+.}, at: inode_lock include/linux/fs.h:757 [inline]
 #1: 00000000bf945bb0 (&sb->s_type->i_mutex_key#12){+.+.}, at: generic_file_write_iter+0xdf/0x610 mm/filemap.c:3358

stack backtrace:
CPU: 1 PID: 27462 Comm: syz-executor.1 Not tainted 5.0.0-rc8+ #89
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 print_circular_bug.isra.0.cold+0x1cc/0x28f kernel/locking/lockdep.c:1224
 check_prev_add kernel/locking/lockdep.c:1866 [inline]
 check_prevs_add kernel/locking/lockdep.c:1979 [inline]
 validate_chain kernel/locking/lockdep.c:2350 [inline]
 __lock_acquire+0x2f00/0x4700 kernel/locking/lockdep.c:3338
 lock_acquire+0x16f/0x3f0 kernel/locking/lockdep.c:3841
 down_read+0x3b/0x90 kernel/locking/rwsem.c:24
 do_user_addr_fault arch/x86/mm/fault.c:1426 [inline]
 __do_page_fault+0x9c2/0xd60 arch/x86/mm/fault.c:1541
 do_page_fault+0x71/0x581 arch/x86/mm/fault.c:1572
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1143
RIP: 0010:fault_in_pages_readable include/linux/pagemap.h:603 [inline]
RIP: 0010:iov_iter_fault_in_readable+0x1ba/0x450 lib/iov_iter.c:425
Code: 4c 39 f3 76 17 eb 3b e8 d4 2e 47 fe 48 81 c3 00 10 00 00 48 39 9d 68 ff ff ff 72 2d e8 bf 2e 47 fe 0f 1f 00 0f ae e8 45 31 f6 <8a> 13 0f 1f 00 31 ff 44 89 f6 41 88 57 d0 e8 23 30 47 fe 45 85 f6
RSP: 0018:ffff8881f0ae79b8 EFLAGS: 00010246
RAX: 0000000000040000 RBX: 000000002009f000 RCX: ffffc90008008000
RDX: 000000000002c45a RSI: ffffffff8328b061 RDI: 0000000000000005
RBP: ffff8881f0ae7a58 R08: ffff8880528004c0 R09: fffff94000420947
R10: fffff94000420946 R11: ffffea0002104a37 R12: 0000000000001000
R13: 0000000000001000 R14: 0000000000000000 R15: ffff8881f0ae7a30
 generic_perform_write+0x195/0x530 mm/filemap.c:3198
 __generic_file_write_iter+0x25e/0x630 mm/filemap.c:3333
 generic_file_write_iter+0x360/0x610 mm/filemap.c:3361
 call_write_iter include/linux/fs.h:1863 [inline]
 new_sync_write fs/read_write.c:474 [inline]
 __vfs_write+0x613/0x8e0 fs/read_write.c:487
 vfs_write+0x20c/0x580 fs/read_write.c:549
 ksys_write+0xea/0x1f0 fs/read_write.c:598
 __do_sys_write fs/read_write.c:610 [inline]
 __se_sys_write fs/read_write.c:607 [inline]
 __x64_sys_write+0x73/0xb0 fs/read_write.c:607
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457e29
Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fec6600dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29
RDX: 00000000ffffff76 RSI: 0000000020000000 RDI: 0000000000000003
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec6600e6d4
R13: 00000000004c73d7 R14: 00000000004dcfe0 R15: 00000000ffffffff
CPU: 0 PID: 27453 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #89
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
 mem_cgroup_out_of_memory+0x99/0xe0 mm/memcontrol.c:1393
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
 mem_cgroup_oom mm/memcontrol.c:1721 [inline]
 try_charge+0xfec/0x1570 mm/memcontrol.c:2283
 mem_cgroup_try_charge+0x24d/0x5e0 mm/memcontrol.c:5913
 mem_cgroup_try_charge_delay+0x1f/0xa0 mm/memcontrol.c:5928
 wp_page_copy+0x408/0x1740 mm/memory.c:2269
 do_wp_page+0x2ed/0x1520 mm/memory.c:2550
 handle_pte_fault mm/memory.c:3803 [inline]
 __handle_mm_fault+0x22db/0x3f20 mm/memory.c:3911
 handle_mm_fault+0x43f/0xb30 mm/memory.c:3948
 do_user_addr_fault arch/x86/mm/fault.c:1475 [inline]
 __do_page_fault+0x5da/0xd60 arch/x86/mm/fault.c:1541
 do_page_fault+0x71/0x581 arch/x86/mm/fault.c:1572
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1143
RIP: 0033:0x42efb6
Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 ac 5f 62 00 85 c0 0f 84
RSP: 002b:00007ffc56cc4100 EFLAGS: 00010206
RAX: 00000000000205b1 RBX: 0000000000711640 RCX: 0000000000000121
RDX: 0000000002149930 RSI: 0000000002149a50 RDI: 0000000000000000
RBP: 0000000000000121 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698
R13: 0000000000711698 R14: 0000000000000003 R15: 0000000000002710
kobject: 'loop3' (00000000303ebc27): kobject_uevent_env
kobject: 'loop3' (00000000303ebc27): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'loop3' (00000000303ebc27): kobject_uevent_env
kobject: 'loop3' (00000000303ebc27): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
memory: usage 307200kB, limit 307200kB, failcnt 6534
memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
Memory cgroup stats for /syz0: cache:4832KB rss:108860KB rss_huge:12288KB shmem:160KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:109108KB inactive_file:4KB active_file:4KB unevictable:4780KB
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=27168,uid=0
Memory cgroup out of memory: Kill process 27168 (syz-executor.0) score 124 or sacrifice child
Killed process 27168 (syz-executor.0) total-vm:72576kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
syz-executor.3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0
CPU: 1 PID: 27498 Comm: syz-executor.3 Not tainted 5.0.0-rc8+ #89
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
 mem_cgroup_out_of_memory+0x99/0xe0 mm/memcontrol.c:1393
 mem_cgroup_oom mm/memcontrol.c:1721 [inline]
 try_charge+0xfec/0x1570 mm/memcontrol.c:2283
 mem_cgroup_try_charge+0x24d/0x5e0 mm/memcontrol.c:5913
 mem_cgroup_try_charge_delay+0x1f/0xa0 mm/memcontrol.c:5928
 wp_page_copy+0x408/0x1740 mm/memory.c:2269
 do_wp_page+0x2ed/0x1520 mm/memory.c:2550
 handle_pte_fault mm/memory.c:3803 [inline]
 __handle_mm_fault+0x22db/0x3f20 mm/memory.c:3911
 handle_mm_fault+0x43f/0xb30 mm/memory.c:3948
 do_user_addr_fault arch/x86/mm/fault.c:1475 [inline]
 __do_page_fault+0x5da/0xd60 arch/x86/mm/fault.c:1541
 do_page_fault+0x71/0x581 arch/x86/mm/fault.c:1572
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1143
RIP: 0033:0x45647b
Code: 25 20 06 00 00 b8 f0 2a 41 00 48 89 15 4e 03 60 00 48 85 c0 74 08 4c 89 cf e8 81 c6 fb ff 45 85 f6 0f 85 58 01 00 00 48 85 db <48> c7 05 0a bb 2b 00 00 00 00 00 48 c7 05 ef ba 2b 00 00 00 00 00
RSP: 002b:00007ffd944dfb30 EFLAGS: 00010206
RAX: 0000000000000000 RBX: 00007ffd944dfb30 RCX: 0000000000412b03
RDX: 0000053cee98a9da RSI: 0000000000000018 RDI: 0000000002439c20
RBP: 00007ffd944dfb70 R08: 0000000000000001 R09: 0000000002439940
R10: 0000000002439c10 R11: 0000000000000202 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003
net_ratelimit: 26 callbacks suppressed
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_1
memory: usage 307200kB, limit 307200kB, failcnt 6538
memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
Memory cgroup stats for /syz3: cache:0KB rss:103668KB rss_huge:8192KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:103756KB inactive_file:8KB active_file:12KB unevictable:0KB
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20366,uid=0
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
Memory cgroup out of memory: Kill process 20366 (syz-executor.3) score 1113 or sacrifice child
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
Killed process 20366 (syz-executor.3) total-vm:72708kB, anon-rss:2216kB, file-rss:35736kB, shmem-rss:0kB
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
kobject: 'loop3' (00000000303ebc27): kobject_uevent_env
kobject: 'loop3' (00000000303ebc27): fill_kobj_path: path = '/devices/virtual/block/loop3'
syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000
CPU: 0 PID: 27593 Comm: syz-executor.3 Not tainted 5.0.0-rc8+ #89
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
 mem_cgroup_out_of_memory+0x99/0xe0 mm/memcontrol.c:1393
 mem_cgroup_oom mm/memcontrol.c:1721 [inline]
 try_charge+0xfec/0x1570 mm/memcontrol.c:2283
 memcg_kmem_charge_memcg+0x7c/0x130 mm/memcontrol.c:2591
 memcg_kmem_charge+0x13b/0x340 mm/memcontrol.c:2624
 __alloc_pages_nodemask+0x437/0x710 mm/page_alloc.c:4571
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 alloc_pages_node include/linux/gfp.h:500 [inline]
 alloc_thread_stack_node kernel/fork.c:246 [inline]
 dup_task_struct kernel/fork.c:849 [inline]
 copy_process.part.0+0x3e0/0x79a0 kernel/fork.c:1753
 copy_process kernel/fork.c:1710 [inline]
 _do_fork+0x257/0xfe0 kernel/fork.c:2227
 __do_sys_clone kernel/fork.c:2334 [inline]
 __se_sys_clone kernel/fork.c:2328 [inline]
 __x64_sys_clone+0xbf/0x150 kernel/fork.c:2328
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45a7f9
Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
RSP: 002b:00007ffd944df8a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fed655cd700 RCX: 000000000045a7f9
RDX: 00007fed655cd9d0 RSI: 00007fed655ccdb0 RDI: 00000000003d0f00
RBP: 00007ffd944dfab0 R08: 00007fed655cd700 R09: 00007fed655cd700
R10: 00007fed655cd9d0 R11: 0000000000000202 R12: 0000000000000000
R13: 00007ffd944df95f R14: 00007fed655cd9c0 R15: 000000000073bf0c
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
memory: usage 307176kB, limit 307200kB, failcnt 6582
memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
Memory cgroup stats for /syz3: cache:0KB rss:103644KB rss_huge:8192KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:103756KB inactive_file:0KB active_file:4KB unevictable:0KB
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27578,uid=0
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
Memory cgroup out of memory: Kill process 27578 (syz-executor.3) score 1113 or sacrifice child
Killed process 27578 (syz-executor.3) total-vm:72576kB, anon-rss:2208kB, file-rss:35784kB, shmem-rss:0kB
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
CPU: 1 PID: 27682 Comm: syz-executor.2 Not tainted 5.0.0-rc8+ #89
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
 mem_cgroup_out_of_memory+0x99/0xe0 mm/memcontrol.c:1393
 mem_cgroup_oom mm/memcontrol.c:1721 [inline]
 try_charge+0xfec/0x1570 mm/memcontrol.c:2283
 memcg_kmem_charge_memcg+0x7c/0x130 mm/memcontrol.c:2591
 memcg_kmem_charge+0x13b/0x340 mm/memcontrol.c:2624
 __alloc_pages_nodemask+0x437/0x710 mm/page_alloc.c:4571
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 alloc_pages_node include/linux/gfp.h:500 [inline]
 alloc_thread_stack_node kernel/fork.c:246 [inline]
 dup_task_struct kernel/fork.c:849 [inline]
 copy_process.part.0+0x3e0/0x79a0 kernel/fork.c:1753
 copy_process kernel/fork.c:1710 [inline]
 _do_fork+0x257/0xfe0 kernel/fork.c:2227
 __do_sys_clone kernel/fork.c:2334 [inline]
 __se_sys_clone kernel/fork.c:2328 [inline]
 __x64_sys_clone+0xbf/0x150 kernel/fork.c:2328
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45a7f9
Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
RSP: 002b:00007fff025901d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fca94220700 RCX: 000000000045a7f9
RDX: 00007fca942209d0 RSI: 00007fca9421fdb0 RDI: 00000000003d0f00
RBP: 00007fff025903e0 R08: 00007fca94220700 R09: 00007fca94220700
R10: 00007fca942209d0 R11: 0000000000000202 R12: 0000000000000000
R13: 00007fff0259028f R14: 00007fca942209c0 R15: 000000000073bf0c
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
memory: usage 307200kB, limit 307200kB, failcnt 5865
memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
kobject: 'loop3' (00000000303ebc27): kobject_uevent_env
Memory cgroup stats for /syz2: cache:12KB rss:110348KB rss_huge:8192KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:110460KB inactive_file:4KB active_file:0KB unevictable:0KB
kobject: 'loop3' (00000000303ebc27): fill_kobj_path: path = '/devices/virtual/block/loop3'
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17972,uid=0
Memory cgroup out of memory: Kill process 17972 (syz-executor.2) score 124 or sacrifice child
Killed process 17972 (syz-executor.2) total-vm:72444kB, anon-rss:2204kB, file-rss:35780kB, shmem-rss:0kB
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000
oom_reaper: reaped process 17972 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
CPU: 0 PID: 27697 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #89
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
 mem_cgroup_out_of_memory+0x99/0xe0 mm/memcontrol.c:1393
 mem_cgroup_oom mm/memcontrol.c:1721 [inline]
 try_charge+0xfec/0x1570 mm/memcontrol.c:2283
 mem_cgroup_try_charge+0x24d/0x5e0 mm/memcontrol.c:5913
 mem_cgroup_try_charge_delay+0x1f/0xa0 mm/memcontrol.c:5928
 wp_page_copy+0x408/0x1740 mm/memory.c:2269
 do_wp_page+0x2ed/0x1520 mm/memory.c:2550
 handle_pte_fault mm/memory.c:3803 [inline]
 __handle_mm_fault+0x22db/0x3f20 mm/memory.c:3911
 handle_mm_fault+0x43f/0xb30 mm/memory.c:3948
 do_user_addr_fault arch/x86/mm/fault.c:1475 [inline]
 __do_page_fault+0x5da/0xd60 arch/x86/mm/fault.c:1541
 do_page_fault+0x71/0x581 arch/x86/mm/fault.c:1572
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1143
RIP: 0033:0x40d1e8
Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf bf d4 4b 00 31 c0 e8 43 47 ff ff 31 ff e8 8c 43 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 32 64 00
RSP: 002b:00007ffdc7152ed0 EFLAGS: 00010246
RAX: 000000005511976d RBX: 00000000727102e3 RCX: 0000001b30120000
RDX: 0000000000000000 RSI: 000000000000176d RDI: ffffffff5511976d
RBP: 000000000000000d R08: 000000005511976d R09: 0000000055119771
R10: 00007ffdc7153060 R11: 0000000000000246 R12: 000000000073bf88
R13: 0000000080000000 R14: 00007f753f618008 R15: 000000000000000d
memory: usage 307200kB, limit 307200kB, failcnt 4845
memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
Memory cgroup stats for /syz4: cache:24KB rss:115152KB rss_huge:22528KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:115120KB inactive_file:4KB active_file:0KB unevictable:0KB
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12808,uid=0
Memory cgroup out of memory: Kill process 12808 (syz-executor.4) score 1113 or sacrifice child
Killed process 12808 (syz-executor.4) total-vm:72444kB, anon-rss:2208kB, file-rss:35788kB, shmem-rss:0kB
syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000
CPU: 0 PID: 27699 Comm: syz-executor.3 Not tainted 5.0.0-rc8+ #89
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
 mem_cgroup_out_of_memory+0x99/0xe0 mm/memcontrol.c:1393
 mem_cgroup_oom mm/memcontrol.c:1721 [inline]
 try_charge+0xfec/0x1570 mm/memcontrol.c:2283
 memcg_kmem_charge_memcg+0x7c/0x130 mm/memcontrol.c:2591
 memcg_kmem_charge+0x13b/0x340 mm/memcontrol.c:2624
 __alloc_pages_nodemask+0x437/0x710 mm/page_alloc.c:4571
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 alloc_pages_node include/linux/gfp.h:500 [inline]
 alloc_thread_stack_node kernel/fork.c:246 [inline]
 dup_task_struct kernel/fork.c:849 [inline]
 copy_process.part.0+0x3e0/0x79a0 kernel/fork.c:1753
 copy_process kernel/fork.c:1710 [inline]
 _do_fork+0x257/0xfe0 kernel/fork.c:2227
 __do_sys_clone kernel/fork.c:2334 [inline]
 __se_sys_clone kernel/fork.c:2328 [inline]
 __x64_sys_clone+0xbf/0x150 kernel/fork.c:2328
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45a7f9
Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
RSP: 002b:00007ffd944df8a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fed655cd700 RCX: 000000000045a7f9
RDX: 00007fed655cd9d0 RSI: 00007fed655ccdb0 RDI: 00000000003d0f00
RBP: 00007ffd944dfab0 R08: 00007fed655cd700 R09: 00007fed655cd700
R10: 00007fed655cd9d0 R11: 0000000000000202 R12: 0000000000000000
R13: 00007ffd944df95f R14: 00007fed655cd9c0 R15: 000000000073bf0c
memory: usage 307188kB, limit 307200kB, failcnt 6641
memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
Memory cgroup stats for /syz3: cache:0KB rss:103600KB rss_huge:8192KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:103756KB inactive_file:4KB active_file:4KB unevictable:0KB
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27648,uid=0
Memory cgroup out of memory: Kill process 27648 (syz-executor.3) score 1113 or sacrifice child
Killed process 27648 (syz-executor.3) total-vm:72576kB, anon-rss:2208kB, file-rss:35784kB, shmem-rss:0kB
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop3' (00000000303ebc27): kobject_uevent_env
kobject: 'loop3' (00000000303ebc27): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'loop3' (00000000303ebc27): kobject_uevent_env
kobject: 'loop3' (00000000303ebc27): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop3' (00000000303ebc27): kobject_uevent_env
kobject: 'loop3' (00000000303ebc27): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop3' (00000000303ebc27): kobject_uevent_env
kobject: 'loop3' (00000000303ebc27): fill_kobj_path: path = '/devices/virtual/block/loop3'
syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
CPU: 0 PID: 7608 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #89
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
 mem_cgroup_out_of_memory+0x99/0xe0 mm/memcontrol.c:1393
 mem_cgroup_oom mm/memcontrol.c:1721 [inline]
 try_charge+0xfec/0x1570 mm/memcontrol.c:2283
 memcg_kmem_charge_memcg+0x7c/0x130 mm/memcontrol.c:2591
 memcg_kmem_charge+0x13b/0x340 mm/memcontrol.c:2624
 __alloc_pages_nodemask+0x437/0x710 mm/page_alloc.c:4571
 alloc_pages_current+0x107/0x210 mm/mempolicy.c:2106
 alloc_pages include/linux/gfp.h:509 [inline]
 __get_free_pages mm/page_alloc.c:4591 [inline]
 get_zeroed_page+0x14/0x50 mm/page_alloc.c:4600
 pud_alloc_one arch/x86/include/asm/pgalloc.h:169 [inline]
 __pud_alloc+0x3b/0x250 mm/memory.c:3996
 pud_alloc+0xde/0x150 include/linux/mm.h:1898
 copy_pud_range mm/memory.c:920 [inline]
 copy_p4d_range mm/memory.c:962 [inline]
 copy_page_range+0x375/0x1f90 mm/memory.c:1023
 dup_mmap kernel/fork.c:586 [inline]
 dup_mm kernel/fork.c:1320 [inline]
 copy_mm kernel/fork.c:1375 [inline]
 copy_process.part.0+0x56aa/0x79a0 kernel/fork.c:1917
 copy_process kernel/fork.c:1710 [inline]
 _do_fork+0x257/0xfe0 kernel/fork.c:2227
 __do_sys_clone kernel/fork.c:2334 [inline]
 __se_sys_clone kernel/fork.c:2328 [inline]
 __x64_sys_clone+0xbf/0x150 kernel/fork.c:2328
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4563fa
Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
RSP: 002b:00007ffdc71530f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
RAX: ffffffffffffffda RBX: 00007ffdc71530f0 RCX: 00000000004563fa
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 00007ffdc7153130 R08: 0000000000000001 R09: 000000000189b940
R10: 000000000189bc10 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004
memory: usage 307200kB, limit 307200kB, failcnt 4890
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
Memory cgroup stats for /syz4: cache:24KB rss:114956KB rss_huge:22528KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:115056KB inactive_file:0KB active_file:8KB unevictable:0KB
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27805,uid=0
kobject: 'loop3' (00000000303ebc27): kobject_uevent_env
Memory cgroup out of memory: Kill process 27805 (syz-executor.4) score 1113 or sacrifice child
Killed process 27805 (syz-executor.4) total-vm:72576kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB
kobject: 'loop3' (00000000303ebc27): fill_kobj_path: path = '/devices/virtual/block/loop3'
syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
CPU: 0 PID: 27859 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #89
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
kobject: 'loop3' (00000000303ebc27): kobject_uevent_env
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
kobject: 'loop3' (00000000303ebc27): fill_kobj_path: path = '/devices/virtual/block/loop3'
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
 mem_cgroup_out_of_memory+0x99/0xe0 mm/memcontrol.c:1393
 mem_cgroup_oom mm/memcontrol.c:1721 [inline]
 try_charge+0xfec/0x1570 mm/memcontrol.c:2283
 mem_cgroup_try_charge+0x24d/0x5e0 mm/memcontrol.c:5913
 mem_cgroup_try_charge_delay+0x1f/0xa0 mm/memcontrol.c:5928
 wp_page_copy+0x408/0x1740 mm/memory.c:2269
 do_wp_page+0x2ed/0x1520 mm/memory.c:2550
 handle_pte_fault mm/memory.c:3803 [inline]
 __handle_mm_fault+0x22db/0x3f20 mm/memory.c:3911
 handle_mm_fault+0x43f/0xb30 mm/memory.c:3948
 do_user_addr_fault arch/x86/mm/fault.c:1475 [inline]
 __do_page_fault+0x5da/0xd60 arch/x86/mm/fault.c:1541
 do_page_fault+0x71/0x581 arch/x86/mm/fault.c:1572
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1143
RIP: 0033:0x40d1e8
Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf bf d4 4b 00 31 c0 e8 43 47 ff ff 31 ff e8 8c 43 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 32 64 00
RSP: 002b:00007ffc56cc4240 EFLAGS: 00010246
RAX: 00000000f0870189 RBX: 0000000031530f3b RCX: 0000001b2f620000
RDX: 0000000000000000 RSI: 0000000000000189 RDI: fffffffff0870189
RBP: 0000000000000009 R08: 00000000f0870189 R09: 00000000f087018d
R10: 00007ffc56cc43d0 R11: 0000000000000246 R12: 000000000073bf88
R13: 0000000080000000 R14: 00007f028c93c008 R15: 0000000000000009
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
memory: usage 307192kB, limit 307200kB, failcnt 6573
memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
kobject: 'loop3' (00000000303ebc27): kobject_uevent_env
Memory cgroup stats for /syz0: cache:4832KB rss:107576KB rss_huge:10240KB shmem:160KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:107688KB inactive_file:0KB active_file:0KB unevictable:4780KB
kobject: 'loop3' (00000000303ebc27): fill_kobj_path: path = '/devices/virtual/block/loop3'
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=27246,uid=0
Memory cgroup out of memory: Kill process 27246 (syz-executor.0) score 124 or sacrifice child
Killed process 27246 (syz-executor.0) total-vm:72576kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB
syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
CPU: 1 PID: 27880 Comm: syz-executor.2 Not tainted 5.0.0-rc8+ #89
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
 mem_cgroup_out_of_memory+0x99/0xe0 mm/memcontrol.c:1393
 mem_cgroup_oom mm/memcontrol.c:1721 [inline]
 try_charge+0xfec/0x1570 mm/memcontrol.c:2283
 memcg_kmem_charge_memcg+0x7c/0x130 mm/memcontrol.c:2591
 memcg_kmem_charge+0x13b/0x340 mm/memcontrol.c:2624
 __alloc_pages_nodemask+0x437/0x710 mm/page_alloc.c:4571
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 alloc_pages_node include/linux/gfp.h:500 [inline]
 alloc_thread_stack_node kernel/fork.c:246 [inline]
 dup_task_struct kernel/fork.c:849 [inline]
 copy_process.part.0+0x3e0/0x79a0 kernel/fork.c:1753
 copy_process kernel/fork.c:1710 [inline]
 _do_fork+0x257/0xfe0 kernel/fork.c:2227
 __do_sys_clone kernel/fork.c:2334 [inline]
 __se_sys_clone kernel/fork.c:2328 [inline]
 __x64_sys_clone+0xbf/0x150 kernel/fork.c:2328
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45a7f9
Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
RSP: 002b:00007fff025901d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fca941de700 RCX: 000000000045a7f9
RDX: 00007fca941de9d0 RSI: 00007fca941dddb0 RDI: 00000000003d0f00
RBP: 00007fff025903e0 R08: 00007fca941de700 R09: 00007fca941de700
R10: 00007fca941de9d0 R11: 0000000000000202 R12: 0000000000000000
R13: 00007fff0259028f R14: 00007fca941de9c0 R15: 000000000073c04c
memory: usage 307152kB, limit 307200kB, failcnt 5888
memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
Memory cgroup stats for /syz2: cache:12KB rss:108988KB rss_huge:6144KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:109148KB inactive_file:4KB active_file:0KB unevictable:0KB
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=22490,uid=0
Memory cgroup out of memory: Kill process 22490 (syz-executor.2) score 124 or sacrifice child
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
Killed process 22490 (syz-executor.2) total-vm:72444kB, anon-rss:2204kB, file-rss:35780kB, shmem-rss:0kB
syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
net_ratelimit: 26 callbacks suppressed
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
CPU: 1 PID: 7608 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #89
protocol 88fb is buggy, dev hsr_slave_1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
protocol 88fb is buggy, dev hsr_slave_0
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
protocol 88fb is buggy, dev hsr_slave_1
 mem_cgroup_out_of_memory+0x99/0xe0 mm/memcontrol.c:1393
 mem_cgroup_oom mm/memcontrol.c:1721 [inline]
 try_charge+0xfec/0x1570 mm/memcontrol.c:2283
 memcg_kmem_charge_memcg+0x7c/0x130 mm/memcontrol.c:2591
 memcg_kmem_charge+0x13b/0x340 mm/memcontrol.c:2624
 __alloc_pages_nodemask+0x437/0x710 mm/page_alloc.c:4571
 alloc_pages_current+0x107/0x210 mm/mempolicy.c:2106
 alloc_pages include/linux/gfp.h:509 [inline]
 pte_alloc_one+0x1b/0x1a0 arch/x86/mm/pgtable.c:35
 __pte_alloc+0x20/0x310 mm/memory.c:406
 copy_pte_range mm/memory.c:830 [inline]
 copy_pmd_range mm/memory.c:906 [inline]
 copy_pud_range mm/memory.c:940 [inline]
 copy_p4d_range mm/memory.c:962 [inline]
 copy_page_range+0x1529/0x1f90 mm/memory.c:1023
 dup_mmap kernel/fork.c:586 [inline]
 dup_mm kernel/fork.c:1320 [inline]
 copy_mm kernel/fork.c:1375 [inline]
 copy_process.part.0+0x56aa/0x79a0 kernel/fork.c:1917
 copy_process kernel/fork.c:1710 [inline]
 _do_fork+0x257/0xfe0 kernel/fork.c:2227
 __do_sys_clone kernel/fork.c:2334 [inline]
 __se_sys_clone kernel/fork.c:2328 [inline]
 __x64_sys_clone+0xbf/0x150 kernel/fork.c:2328
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4563fa
Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
RSP: 002b:00007ffdc71530f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007ffdc71530f0 RCX: 00000000004563fa
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 00007ffdc7153130 R08: 0000000000000001 R09: 000000000189b940
R10: 000000000189bc10 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004
memory: usage 307200kB, limit 307200kB, failcnt 4906
memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
Memory cgroup stats for /syz4: cache:24KB rss:115028KB rss_huge:22528KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:115044KB inactive_file:4KB active_file:0KB unevictable:0KB
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14171,uid=0
Memory cgroup out of memory: Kill process 14171 (syz-executor.4) score 1113 or sacrifice child
Killed process 14171 (syz-executor.4) total-vm:72444kB, anon-rss:2208kB, file-rss:35788kB, shmem-rss:0kB
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
syz-executor.3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000
CPU: 1 PID: 27898 Comm: syz-executor.3 Not tainted 5.0.0-rc8+ #89
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
 mem_cgroup_out_of_memory+0x99/0xe0 mm/memcontrol.c:1393
 mem_cgroup_oom mm/memcontrol.c:1721 [inline]
 try_charge+0xfec/0x1570 mm/memcontrol.c:2283
 mem_cgroup_try_charge+0x24d/0x5e0 mm/memcontrol.c:5913
 mem_cgroup_try_charge_delay+0x1f/0xa0 mm/memcontrol.c:5928
 wp_page_copy+0x408/0x1740 mm/memory.c:2269
 do_wp_page+0x2ed/0x1520 mm/memory.c:2550
 handle_pte_fault mm/memory.c:3803 [inline]
 __handle_mm_fault+0x22db/0x3f20 mm/memory.c:3911
 handle_mm_fault+0x43f/0xb30 mm/memory.c:3948
 do_user_addr_fault arch/x86/mm/fault.c:1475 [inline]
 __do_page_fault+0x5da/0xd60 arch/x86/mm/fault.c:1541
 do_page_fault+0x71/0x581 arch/x86/mm/fault.c:1572
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1143
RIP: 0033:0x40d1e8
Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf bf d4 4b 00 31 c0 e8 43 47 ff ff 31 ff e8 8c 43 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 32 64 00
RSP: 002b:00007ffd944df910 EFLAGS: 00010246
RAX: 000000007f692c4e RBX: 00000000ed2e2057 RCX: 0000001b33b20000
RDX: 0000000000000000 RSI: 0000000000000c4e RDI: ffffffff7f692c4e
RBP: 0000000000000005 R08: 000000007f692c4e R09: 000000007f692c52
R10: 00007ffd944dfaa0 R11: 0000000000000246 R12: 000000000073bf88
R13: 0000000080000000 R14: 00007fed675ce008 R15: 0000000000000005
memory: usage 307200kB, limit 307200kB, failcnt 6680
memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
Memory cgroup stats for /syz3: cache:0KB rss:102220KB rss_huge:6144KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:102400KB inactive_file:12KB active_file:0KB unevictable:0KB
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18006,uid=0
Memory cgroup out of memory: Kill process 18006 (syz-executor.3) score 1110 or sacrifice child
kobject: 'loop4' (000000002602c32e): kobject_uevent_env
Killed process 18006 (syz-executor.3) total-vm:72576kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB
kobject: 'loop4' (000000002602c32e): fill_kobj_path: path = '/devices/virtual/block/loop4'
syz-executor.0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
CPU: 1 PID: 27945 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #89
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
 mem_cgroup_out_of_memory+0x99/0xe0 mm/memcontrol.c:1393
 mem_cgroup_oom mm/memcontrol.c:1721 [inline]
 try_charge+0xfec/0x1570 mm/memcontrol.c:2283
 memcg_kmem_charge_memcg+0x7c/0x130 mm/memcontrol.c:2591
 memcg_kmem_charge+0x13b/0x340 mm/memcontrol.c:2624
 __alloc_pages_nodemask+0x437/0x710 mm/page_alloc.c:4571
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 alloc_pages_node include/linux/gfp.h:500 [inline]
 alloc_thread_stack_node kernel/fork.c:246 [inline]
 dup_task_struct kernel/fork.c:849 [inline]
 copy_process.part.0+0x3e0/0x79a0 kernel/fork.c:1753
 copy_process kernel/fork.c:1710 [inline]
 _do_fork+0x257/0xfe0 kernel/fork.c:2227
 __do_sys_clone kernel/fork.c:2334 [inline]
 __se_sys_clone kernel/fork.c:2328 [inline]
 __x64_sys_clone+0xbf/0x150 kernel/fork.c:2328
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45a7f9
Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
RSP: 002b:00007ffc56cc41d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f028a93b700 RCX: 000000000045a7f9
RDX: 00007f028a93b9d0 RSI: 00007f028a93adb0 RDI: 00000000003d0f00
RBP: 00007ffc56cc43e0 R08: 00007f028a93b700 R09: 00007f028a93b700
R10: 00007f028a93b9d0 R11: 0000000000000202 R12: 0000000000000000
R13: 00007ffc56cc428f R14: 00007f028a93b9c0 R15: 000000000073bf0c
memory: usage 307176kB, limit 307200kB, failcnt 6605
memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
Memory cgroup stats for /syz0: cache:4832KB rss:107600KB rss_huge:10240KB shmem:160KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:107668KB inactive_file:0KB active_file:0KB unevictable:4780KB
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=27934,uid=0
kobject: 'loop5' (0000000014db84d1): kobject_uevent_env
Memory cgroup out of memory: Kill process 27934 (syz-executor.0) score 124 or sacrifice child
kobject: 'loop5' (0000000014db84d1): fill_kobj_path: path = '/devices/virtual/block/loop5'
Killed process 27934 (syz-executor.0) total-vm:72576kB, anon-rss:2216kB, file-rss:35788kB, shmem-rss:0kB
kobject: 'loop3' (00000000303ebc27): kobject_uevent_env
kobject: 'loop3' (00000000303ebc27): fill_kobj_path: path = '/devices/virtual/block/loop3'
syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
CPU: 1 PID: 27948 Comm: syz-executor.2 Not tainted 5.0.0-rc8+ #89
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 dump_header+0x10f/0xb6c mm/oom_kill.c:451
 oom_kill_process.cold+0x10/0x6f5 mm/oom_kill.c:966
 out_of_memory mm/oom_kill.c:1141 [inline]
 out_of_memory+0x79a/0x1280 mm/oom_kill.c:1074
 mem_cgroup_out_of_memory+0x99/0xe0 mm/memcontrol.c:1393
 mem_cgroup_oom mm/memcontrol.c:1721 [inline]
 try_charge+0xfec/0x1570 mm/memcontrol.c:2283
 memcg_kmem_charge_memcg+0x7c/0x130 mm/memcontrol.c:2591
 memcg_kmem_charge+0x13b/0x340 mm/memcontrol.c:2624
 __alloc_pages_nodemask+0x437/0x710 mm/page_alloc.c:4571
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 alloc_pages_node include/linux/gfp.h:500 [inline]
 alloc_thread_stack_node kernel/fork.c:246 [inline]
 dup_task_struct kernel/fork.c:849 [inline]
 copy_process.part.0+0x3e0/0x79a0 kernel/fork.c:1753
 copy_process kernel/fork.c:1710 [inline]
 _do_fork+0x257/0xfe0 kernel/fork.c:2227
 __do_sys_clone kernel/fork.c:2334 [inline]
 __se_sys_clone kernel/fork.c:2328 [inline]
 __x64_sys_clone+0xbf/0x150 kernel/fork.c:2328
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457e29
Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fca9421fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457e29
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000100
RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000