lowmemorykiller: Killing 'syz-executor.4' (8537) (tgid 8535), adj 1000, to free 62532kB on behalf of 'syz-executor.4' (8537) because cache 47948kB is below limit 65536kB for oom_score_adj 12 Free memory is -13260kB above reserved ================================= [ INFO: inconsistent lock state ] 4.9.194+ #0 Not tainted --------------------------------- inconsistent {RECLAIM_FS-ON-W} -> {IN-RECLAIM_FS-R} usage. syz-executor.4/8537 [HC0[0]:SC0[0]:HE1:SE1] takes: (&mm->mmap_sem){+++++?}, at: [<0000000002d20d4c>] get_cmdline+0xa3/0x2d0 mm/util.c:641 mark_held_locks+0xb1/0x100 kernel/locking/lockdep.c:2660 __lockdep_trace_alloc kernel/locking/lockdep.c:2882 [inline] lockdep_trace_alloc+0x18c/0x2b0 kernel/locking/lockdep.c:2897 __alloc_pages_nodemask+0x143/0x1a80 mm/page_alloc.c:3803 __alloc_pages include/linux/gfp.h:433 [inline] __alloc_pages_node include/linux/gfp.h:446 [inline] alloc_pages_node include/linux/gfp.h:460 [inline] pmd_alloc_one arch/x86/include/asm/pgalloc.h:88 [inline] __pmd_alloc+0x4a/0x330 mm/memory.c:3742 pmd_alloc include/linux/mm.h:1625 [inline] alloc_new_pmd mm/mremap.c:64 [inline] move_page_tables+0xadb/0xd60 mm/mremap.c:212 shift_arg_pages+0x1ae/0x470 fs/exec.c:642 setup_arg_pages+0x60d/0x7c0 fs/exec.c:754 load_elf_binary+0xa84/0x4a90 fs/binfmt_elf.c:860 search_binary_handler fs/exec.c:1621 [inline] search_binary_handler+0x14f/0x700 fs/exec.c:1599 exec_binprm fs/exec.c:1663 [inline] do_execveat_common.isra.0+0xf81/0x1db0 fs/exec.c:1785 do_execve+0x3a/0x50 fs/exec.c:1829 run_init_process+0x33/0x37 init/main.c:904 try_to_run_init_process+0x18/0x48 init/main.c:913 kernel_init+0xf2/0x163 init/main.c:984 ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375 irq event stamp: 28427 hardirqs last enabled at (28427): [<000000005168cdb9>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:162 [inline] hardirqs last enabled at (28427): [<000000005168cdb9>] _raw_spin_unlock_irqrestore+0x5a/0x70 kernel/locking/spinlock.c:191 hardirqs last disabled at (28426): [<000000005d2b8154>] rcu_read_unlock_special+0x3a/0xb30 kernel/rcu/tree_plugin.h:393 softirqs last enabled at (23694): [<00000000a0019430>] __do_softirq+0x474/0x964 kernel/softirq.c:314 softirqs last disabled at (23475): [<00000000b5d2e68d>] invoke_softirq kernel/softirq.c:368 [inline] softirqs last disabled at (23475): [<00000000b5d2e68d>] irq_exit+0x119/0x160 kernel/softirq.c:409 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&mm->mmap_sem); lock(&mm->mmap_sem); *** DEADLOCK *** 2 locks held by syz-executor.4/8537: #0: (&mm->mmap_sem){+++++?}, at: [<0000000074316a24>] __mm_populate+0x20c/0x300 mm/gup.c:1143 #1: (shrinker_rwsem){++++..}, at: [<00000000d641624c>] shrink_slab.part.0+0xb2/0xa20 mm/vmscan.c:472 stack backtrace: CPU: 1 PID: 8537 Comm: syz-executor.4 Not tainted 4.9.194+ #0 ffff88000a9f7080 ffffffff81b67001 00000000000000f0 ffff88001af54740 ffffffff83cb1200 ffff88001af55060 ffffffff84252000 ffff88000a9f70f8 ffffffff81408710 0000000000000000 ffffffff00000001 0000000000000001 Call Trace: [<000000004a4fbd34>] __dump_stack lib/dump_stack.c:15 [inline] [<000000004a4fbd34>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<0000000032f5cd4b>] print_usage_bug kernel/locking/lockdep.c:2387 [inline] [<0000000032f5cd4b>] print_usage_bug.cold+0x452/0x5a2 kernel/locking/lockdep.c:2354 [<0000000000a5eb15>] valid_state kernel/locking/lockdep.c:2400 [inline] [<0000000000a5eb15>] mark_lock_irq kernel/locking/lockdep.c:2602 [inline] [<0000000000a5eb15>] mark_lock+0x6c7/0x12e0 kernel/locking/lockdep.c:3065 [<0000000017516549>] mark_irqflags kernel/locking/lockdep.c:2958 [inline] [<0000000017516549>] __lock_acquire+0x5be/0x4390 kernel/locking/lockdep.c:3302 [<0000000015355866>] lock_acquire+0x133/0x3d0 kernel/locking/lockdep.c:3756 [<0000000068d3228b>] down_read+0x44/0xb0 kernel/locking/rwsem.c:22 [<0000000002d20d4c>] get_cmdline+0xa3/0x2d0 mm/util.c:641 [<00000000a0773c5c>] handle_lmk_event+0x169/0x920 drivers/staging/android/lowmemorykiller.c:116 [<00000000ca34f6d7>] lowmem_scan+0x6f3/0xb70 drivers/staging/android/lowmemorykiller.c:354 [<00000000a5516bc3>] do_shrink_slab mm/vmscan.c:399 [inline] [<00000000a5516bc3>] shrink_slab.part.0+0x3cf/0xa20 mm/vmscan.c:502 [<00000000d7aa2e11>] shrink_slab mm/vmscan.c:466 [inline] [<00000000d7aa2e11>] shrink_node+0x1ed/0x750 mm/vmscan.c:2604 [<0000000063770ee1>] shrink_zones mm/vmscan.c:2751 [inline] [<0000000063770ee1>] do_try_to_free_pages mm/vmscan.c:2793 [inline] [<0000000063770ee1>] try_to_free_pages+0x397/0xbd0 mm/vmscan.c:3004 [<0000000088b8971d>] __perform_reclaim mm/page_alloc.c:3332 [inline] [<0000000088b8971d>] __alloc_pages_direct_reclaim mm/page_alloc.c:3354 [inline] [<0000000088b8971d>] __alloc_pages_slowpath mm/page_alloc.c:3704 [inline] [<0000000088b8971d>] __alloc_pages_nodemask+0x930/0x1a80 mm/page_alloc.c:3861 [<00000000b9720a54>] __alloc_pages include/linux/gfp.h:433 [inline] [<00000000b9720a54>] __alloc_pages_node include/linux/gfp.h:446 [inline] [<00000000b9720a54>] alloc_pages_node include/linux/gfp.h:460 [inline] [<00000000b9720a54>] pte_alloc_one+0x23/0x110 arch/x86/mm/pgtable.c:29 [<0000000062ee5337>] do_fault_around mm/memory.c:3151 [inline] [<0000000062ee5337>] do_read_fault mm/memory.c:3197 [inline] [<0000000062ee5337>] do_fault mm/memory.c:3338 [inline] [<0000000062ee5337>] handle_pte_fault mm/memory.c:3547 [inline] [<0000000062ee5337>] __handle_mm_fault mm/memory.c:3634 [inline] [<0000000062ee5337>] handle_mm_fault+0x1d04/0x2420 mm/memory.c:3671 [<00000000042711e3>] faultin_page mm/gup.c:395 [inline] [<00000000042711e3>] __get_user_pages+0x3c7/0x10b0 mm/gup.c:597 [<0000000058072ddd>] populate_vma_page_range+0x19a/0x230 mm/gup.c:1115 [<000000006a6d8010>] __mm_populate+0x1b9/0x300 mm/gup.c:1163 [<00000000dae7818b>] mm_populate include/linux/mm.h:2080 [inline] [<00000000dae7818b>] SYSC_mlockall mm/mlock.c:817 [inline] [<00000000dae7818b>] SyS_mlockall+0x405/0x530 mm/mlock.c:791 [<0000000088a8d3ad>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288 [<000000007c50544c>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb lowmemorykiller: Killing 'syz-executor.4' (1876) (tgid 1876), adj 1000, to free 53048kB on behalf of 'syz-executor.1' (8542) because cache 62248kB is below limit 65536kB for oom_score_adj 12 Free memory is -13324kB above reserved lowmemorykiller: Killing 'syz-executor.5' (8550) (tgid 8548), adj 1000, to free 54772kB on behalf of 'syz-executor.4' (8555) because cache 28848kB is below limit 65536kB for oom_score_adj 12 Free memory is -13336kB above reserved lowmemorykiller: Killing 'syz-executor.5' (8548) (tgid 8548), adj 1000, to free 53796kB on behalf of 'syz-executor.5' (8550) because cache 28948kB is below limit 65536kB for oom_score_adj 12 Free memory is -13336kB above reserved lowmemorykiller: Killing 'syz-executor.4' (1924) (tgid 1924), adj 1000, to free 53048kB on behalf of 'syz-executor.4' (8555) because cache 25348kB is below limit 65536kB for oom_score_adj 12 Free memory is -13352kB above reserved lowmemorykiller: Killing 'syz-executor.4' (8551) (tgid 8551), adj 1000, to free 53532kB on behalf of 'syz-executor.4' (8555) because cache 28048kB is below limit 65536kB for oom_score_adj 12 Free memory is -6976kB above reserved lowmemorykiller: Killing 'syz-executor.4' (1924) (tgid 1924), adj 1000, to free 53048kB on behalf of 'syz-executor.2' (8546) because cache 25548kB is below limit 65536kB for oom_score_adj 12 Free memory is -13352kB above reserved lowmemorykiller: Killing 'syz-executor.4' (2198) (tgid 2198), adj 1000, to free 53048kB on behalf of 'syz-executor.3' (8521) because cache 28048kB is below limit 65536kB for oom_score_adj 12 Free memory is -7776kB above reserved lowmemorykiller: Killing 'syz-executor.4' (2242) (tgid 2242), adj 1000, to free 53048kB on behalf of 'syz-executor.3' (8521) because cache 52248kB is below limit 65536kB for oom_score_adj 12 Free memory is 33424kB above reserved lowmemorykiller: Killing 'syz-executor.5' (8560) (tgid 8560), adj 1000, to free 54852kB on behalf of 'syz-executor.3' (8521) because cache 15248kB is below limit 65536kB for oom_score_adj 12 Free memory is 38000kB above reserved lowmemorykiller: Killing 'syz-executor.4' (8563) (tgid 8563), adj 1000, to free 53796kB on behalf of 'syz-executor.3' (8521) because cache 14548kB is below limit 65536kB for oom_score_adj 12 Free memory is 36916kB above reserved lowmemorykiller: Killing 'syz-executor.4' (2524) (tgid 2524), adj 1000, to free 53048kB on behalf of 'syz-executor.3' (8521) because cache 14748kB is below limit 65536kB for oom_score_adj 12 Free memory is 36916kB above reserved lowmemorykiller: Killing 'syz-executor.4' (2563) (tgid 2563), adj 1000, to free 53048kB on behalf of 'syz-executor.3' (8521) because cache 21548kB is below limit 65536kB for oom_score_adj 12 Free memory is 48716kB above reserved lowmemorykiller: Killing 'syz-executor.4' (2829) (tgid 2829), adj 1000, to free 53048kB on behalf of 'syz-executor.3' (8521) because cache 27148kB is below limit 65536kB for oom_score_adj 12 Free memory is 64316kB above reserved lowmemorykiller: Killing 'syz-executor.5' (8594) (tgid 8592), adj 1000, to free 65448kB on behalf of 'syz-executor.4' (8606) because cache 21996kB is below limit 65536kB for oom_score_adj 12 Free memory is -13292kB above reserved lowmemorykiller: Killing 'syz-executor.5' (8592) (tgid 8592), adj 1000, to free 64456kB on behalf of 'syz-executor.1' (8607) because cache 22096kB is below limit 65536kB for oom_score_adj 12 Free memory is -13292kB above reserved lowmemorykiller: Killing 'syz-executor.4' (3157) (tgid 3157), adj 1000, to free 53048kB on behalf of 'syz-executor.1' (8607) because cache 14196kB is below limit 16384kB for oom_score_adj 6 Free memory is -12972kB above reserved lowmemorykiller: Killing 'syz-executor.4' (3183) (tgid 3183), adj 1000, to free 53048kB on behalf of 'syz-executor.1' (8607) because cache 14196kB is below limit 16384kB for oom_score_adj 6 Free memory is -11672kB above reserved lowmemorykiller: Killing 'syz-executor.4' (3223) (tgid 3223), adj 1000, to free 53048kB on behalf of 'syz-executor.0' (8589) because cache 10096kB is below limit 65536kB for oom_score_adj 12 Free memory is 19328kB above reserved lowmemorykiller: Killing 'syz-executor.4' (3509) (tgid 3509), adj 1000, to free 53048kB on behalf of 'syz-executor.0' (8589) because cache 8796kB is below limit 65536kB for oom_score_adj 12 Free memory is 22120kB above reserved lowmemorykiller: Killing 'syz-executor.4' (3541) (tgid 3541), adj 1000, to free 53048kB on behalf of 'syz-executor.0' (8589) because cache 8096kB is below limit 65536kB for oom_score_adj 12 Free memory is 64608kB above reserved lowmemorykiller: Killing 'syz-executor.4' (2856) (tgid 2856), adj 1000, to free 53048kB on behalf of 'syz-executor.4' (8606) because cache 14196kB is below limit 16384kB for oom_score_adj 6 Free memory is -12972kB above reserved lowmemorykiller: Killing 'syz-executor.4' (8632) (tgid 8632), adj 1000, to free 63404kB on behalf of 'syz-executor.5' (8647) because cache 8720kB is below limit 16384kB for oom_score_adj 6 Free memory is -13356kB above reserved lowmemorykiller: Killing 'syz-executor.4' (8633) (tgid 8632), adj 1000, to free 64388kB on behalf of 'syz-executor.5' (8647) because cache 7320kB is below limit 8192kB for oom_score_adj 1 Free memory is -11956kB above reserved lowmemorykiller: Killing 'syz-executor.4' (8635) (tgid 8632), adj 1000, to free 64388kB on behalf of 'syz-executor.4' (8635) because cache 7320kB is below limit 8192kB for oom_score_adj 1 Free memory is -11956kB above reserved lowmemorykiller: Killing 'syz-executor.4' (3571) (tgid 3571), adj 1000, to free 53048kB on behalf of 'syz-executor.0' (8641) because cache 6920kB is below limit 8192kB for oom_score_adj 1 Free memory is -11956kB above reserved lowmemorykiller: Killing 'syz-executor.4' (3875) (tgid 3875), adj 1000, to free 53048kB on behalf of 'syz-executor.0' (8641) because cache 6796kB is below limit 8192kB for oom_score_adj 1 Free memory is -11892kB above reserved lowmemorykiller: Killing 'syz-executor.4' (3571) (tgid 3571), adj 1000, to free 53048kB on behalf of 'syz-executor.2' (8620) because cache 7320kB is below limit 8192kB for oom_score_adj 1 Free memory is -11956kB above reserved lowmemorykiller: Killing 'syz-executor.4' (3949) (tgid 3949), adj 1000, to free 53048kB on behalf of 'syz-executor.5' (8647) because cache 6796kB is below limit 8192kB for oom_score_adj 1 Free memory is -11892kB above reserved lowmemorykiller: Killing 'syz-executor.4' (4000) (tgid 4000), adj 1000, to free 53048kB on behalf of 'syz-executor.5' (8647) because cache 2084kB is below limit 65536kB for oom_score_adj 12 Free memory is 19688kB above reserved lowmemorykiller: Killing 'syz-executor.4' (4045) (tgid 4045), adj 1000, to free 53048kB on behalf of 'syz-executor.5' (8647) because cache 7184kB is below limit 65536kB for oom_score_adj 12 Free memory is 53088kB above reserved lowmemorykiller: Killing 'syz-executor.4' (4045) (tgid 4045), adj 1000, to free 53048kB on behalf of 'syz-executor.3' (8618) because cache 6296kB is below limit 8192kB for oom_score_adj 1 Free memory is -11892kB above reserved lowmemorykiller: Killing 'syz-executor.4' (4084) (tgid 4084), adj 1000, to free 53048kB on behalf of 'syz-executor.5' (8647) because cache 7184kB is below limit 65536kB for oom_score_adj 12 Free memory is 57288kB above reserved lowmemorykiller: Killing 'syz-executor.5' (8645) (tgid 8645), adj 1000, to free 54852kB on behalf of 'syz-executor.2' (8620) because cache 1884kB is below limit 65536kB for oom_score_adj 12 Free memory is 53088kB above reserved lowmemorykiller: Killing 'syz-executor.4' (8675) (tgid 8675), adj 1000, to free 71540kB on behalf of 'syz-executor.2' (8620) because cache -23060kB is below limit 16384kB for oom_score_adj 6 Free memory is 11008kB above reserved lowmemorykiller: Killing 'syz-executor.4' (4130) (tgid 4130), adj 1000, to free 53048kB on behalf of 'syz-executor.2' (8620) because cache 60640kB is below limit 65536kB for oom_score_adj 12 Free memory is 25012kB above reserved lowmemorykiller: Killing 'syz-executor.4' (4427) (tgid 4427), adj 1000, to free 53048kB on behalf of 'kswapd0' (33) because cache 60416kB is below limit 65536kB for oom_score_adj 12 Free memory is 32804kB above reserved lowmemorykiller: Killing 'syz-executor.4' (8706) (tgid 8706), adj 1000, to free 54852kB on behalf of 'kswapd0' (33) because cache 62412kB is below limit 65536kB for oom_score_adj 12 Free memory is -6716kB above reserved lowmemorykiller: Killing 'syz-executor.4' (4464) (tgid 4464), adj 1000, to free 53048kB on behalf of 'kswapd0' (33) because cache 18612kB is below limit 65536kB for oom_score_adj 12 Free memory is -7752kB above reserved lowmemorykiller: Killing 'syz-executor.4' (8721) (tgid 8721), adj 1000, to free 71540kB on behalf of 'kswapd0' (33) because cache 18112kB is below limit 65536kB for oom_score_adj 12 Free memory is -7772kB above reserved lowmemorykiller: Killing 'syz-executor.4' (8723) (tgid 8721), adj 1000, to free 64388kB on behalf of 'kswapd0' (33) because cache 12112kB is below limit 16384kB for oom_score_adj 6 Free memory is -13000kB above reserved lowmemorykiller: Killing 'syz-executor.4' (4495) (tgid 4495), adj 1000, to free 53048kB on behalf of 'syz-executor.0' (8703) because cache 11512kB is below limit 16384kB for oom_score_adj 6 Free memory is -12836kB above reserved lowmemorykiller: Killing 'syz-executor.4' (4771) (tgid 4771), adj 1000, to free 53048kB on behalf of 'syz-executor.0' (8703) because cache 11012kB is below limit 16384kB for oom_score_adj 6 Free memory is -13388kB above reserved lowmemorykiller: Killing 'syz-executor.4' (4803) (tgid 4803), adj 1000, to free 53048kB on behalf of 'syz-executor.1' (8705) because cache 11012kB is below limit 16384kB for oom_score_adj 6 Free memory is -13264kB above reserved lowmemorykiller: Killing 'syz-executor.4' (4495) (tgid 4495), adj 1000, to free 53048kB on behalf of 'syz-executor.3' (8725) because cache 11012kB is below limit 16384kB for oom_score_adj 6 Free memory is -13264kB above reserved lowmemorykiller: Killing 'syz-executor.4' (5120) (tgid 5120), adj 1000, to free 53048kB on behalf of 'syz-executor.3' (8725) because cache 11012kB is below limit 65536kB for oom_score_adj 12 Free memory is 52192kB above reserved lowmemorykiller: Killing 'syz-executor.4' (5165) (tgid 5165), adj 1000, to free 53048kB on behalf of 'syz-executor.3' (8725) because cache 11012kB is below limit 65536kB for oom_score_adj 12 Free memory is 52192kB above reserved lowmemorykiller: Killing 'syz-executor.4' (4837) (tgid 4837), adj 1000, to free 53048kB on behalf of 'syz-executor.5' (8756) because cache 11012kB is below limit 16384kB for oom_score_adj 6 Free memory is 16212kB above reserved lowmemorykiller: Killing 'syz-executor.4' (5458) (tgid 5458), adj 1000, to free 53048kB on behalf of 'syz-executor.3' (8725) because cache 9912kB is below limit 65536kB for oom_score_adj 12 Free memory is 57204kB above reserved lowmemorykiller: Killing 'syz-executor.4' (5120) (tgid 5120), adj 1000, to free 53048kB on behalf of 'syz-executor.1' (8705) because cache 11012kB is below limit 65536kB for oom_score_adj 12 Free memory is 52192kB above reserved lowmemorykiller: Killing 'syz-executor.4' (8790) (tgid 8790), adj 1000, to free 61556kB on behalf of 'kswapd0' (33) because cache -5348kB is below limit 6144kB for oom_score_adj 0 Free memory is -9588kB above reserved lowmemorykiller: Killing 'syz-executor.4' (5512) (tgid 5512), adj 1000, to free 53048kB on behalf of 'kswapd0' (33) because cache 30740kB is below limit 65536kB for oom_score_adj 12 Free memory is -9588kB above reserved lowmemorykiller: Killing 'syz-executor.4' (8799) (tgid 8799), adj 1000, to free 71540kB on behalf of 'kswapd0' (33) because cache 3440kB is below limit 6144kB for oom_score_adj 0 Free memory is -9820kB above reserved lowmemorykiller: Killing 'syz-executor.5' (8803) (tgid 8803), adj 1000, to free 65972kB on behalf of 'syz-executor.0' (8773) because cache -17260kB is below limit 6144kB for oom_score_adj 0 Free memory is -13280kB above reserved lowmemorykiller: Killing 'syz-executor.5' (8808) (tgid 8803), adj 1000, to free 67024kB on behalf of 'syz-executor.5' (8808) because cache -23788kB is below limit 6144kB for oom_score_adj 0 Free memory is -13344kB above reserved lowmemorykiller: Killing 'syz-executor.4' (8800) (tgid 8799), adj 1000, to free 64388kB on behalf of 'syz-executor.1' (8811) because cache -24088kB is below limit 6144kB for oom_score_adj 0 Free memory is -13244kB above reserved lowmemorykiller: Killing 'syz-executor.4' (5787) (tgid 5787), adj 1000, to free 53048kB on behalf of 'kswapd0' (33) because cache -16988kB is below limit 6144kB for oom_score_adj 0 Free memory is -12928kB above reserved lowmemorykiller: Killing 'syz-executor.4' (5822) (tgid 5822), adj 1000, to free 53048kB on behalf of 'syz-executor.1' (8811) because cache -18688kB is below limit 6144kB for oom_score_adj 0 Free memory is -12928kB above reserved