lowmemorykiller: Killing 'syz-executor.4' (9165) (tgid 9165), adj 1000, to free 36004kB on behalf of 'kswapd0' (33) because cache 59540kB is below limit 65536kB for oom_score_adj 12 Free memory is -5040kB above reserved ================================= [ INFO: inconsistent lock state ] 4.9.194+ #0 Not tainted --------------------------------- inconsistent {RECLAIM_FS-ON-W} -> {IN-RECLAIM_FS-R} usage. kswapd0/33 [HC0[0]:SC0[0]:HE1:SE1] takes: (&mm->mmap_sem){+++++?}, at: [<000000003ae59019>] get_cmdline+0xa3/0x2d0 mm/util.c:641 mark_held_locks+0xb1/0x100 kernel/locking/lockdep.c:2660 __lockdep_trace_alloc kernel/locking/lockdep.c:2882 [inline] lockdep_trace_alloc+0x18c/0x2b0 kernel/locking/lockdep.c:2897 __alloc_pages_nodemask+0x143/0x1a80 mm/page_alloc.c:3803 __alloc_pages include/linux/gfp.h:433 [inline] __alloc_pages_node include/linux/gfp.h:446 [inline] alloc_pages_node include/linux/gfp.h:460 [inline] pmd_alloc_one arch/x86/include/asm/pgalloc.h:88 [inline] __pmd_alloc+0x4a/0x330 mm/memory.c:3742 pmd_alloc include/linux/mm.h:1625 [inline] alloc_new_pmd mm/mremap.c:64 [inline] move_page_tables+0xadb/0xd60 mm/mremap.c:212 shift_arg_pages+0x1ae/0x470 fs/exec.c:642 setup_arg_pages+0x60d/0x7c0 fs/exec.c:754 load_elf_binary+0xa84/0x4a90 fs/binfmt_elf.c:860 search_binary_handler fs/exec.c:1621 [inline] search_binary_handler+0x14f/0x700 fs/exec.c:1599 exec_binprm fs/exec.c:1663 [inline] do_execveat_common.isra.0+0xf81/0x1db0 fs/exec.c:1785 do_execve+0x3a/0x50 fs/exec.c:1829 run_init_process+0x33/0x37 init/main.c:904 try_to_run_init_process+0x18/0x48 init/main.c:913 kernel_init+0xf2/0x163 init/main.c:984 ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375 irq event stamp: 221727 hardirqs last enabled at (221727): [<00000000180cadb9>] vprintk_emit+0x25c/0x6f0 kernel/printk/printk.c:1897 hardirqs last disabled at (221726): [<00000000d011c133>] vprintk_emit+0x6d/0x6f0 kernel/printk/printk.c:1801 softirqs last enabled at (221682): [<00000000caee2b87>] __do_softirq+0x474/0x964 kernel/softirq.c:314 softirqs last disabled at (221535): [<00000000ddc397c8>] invoke_softirq kernel/softirq.c:368 [inline] softirqs last disabled at (221535): [<00000000ddc397c8>] irq_exit+0x119/0x160 kernel/softirq.c:409 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&mm->mmap_sem); lock(&mm->mmap_sem); *** DEADLOCK *** 1 lock held by kswapd0/33: #0: (shrinker_rwsem){++++..}, at: [<0000000028c255fb>] shrink_slab.part.0+0xb2/0xa20 mm/vmscan.c:472 stack backtrace: CPU: 1 PID: 33 Comm: kswapd0 Not tainted 4.9.194+ #0 ffff8801d8dff420 ffffffff81b67001 00000000000000f0 ffff8801d992c740 ffffffff83cb07e0 ffff8801d992d038 ffffffff84252000 ffff8801d8dff498 ffffffff81408710 0000000000000000 ffffffff00000001 0000000000000001 Call Trace: [<00000000a230d1d2>] __dump_stack lib/dump_stack.c:15 [inline] [<00000000a230d1d2>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000b9f6b9e5>] print_usage_bug kernel/locking/lockdep.c:2387 [inline] [<00000000b9f6b9e5>] print_usage_bug.cold+0x452/0x5a2 kernel/locking/lockdep.c:2354 [<000000008b6e3230>] valid_state kernel/locking/lockdep.c:2400 [inline] [<000000008b6e3230>] mark_lock_irq kernel/locking/lockdep.c:2602 [inline] [<000000008b6e3230>] mark_lock+0x6c7/0x12e0 kernel/locking/lockdep.c:3065 [<00000000bd0e70b7>] mark_irqflags kernel/locking/lockdep.c:2958 [inline] [<00000000bd0e70b7>] __lock_acquire+0x5be/0x4390 kernel/locking/lockdep.c:3302 [<00000000dc28dbb0>] lock_acquire+0x133/0x3d0 kernel/locking/lockdep.c:3756 [<00000000b7bc67ec>] down_read+0x44/0xb0 kernel/locking/rwsem.c:22 [<000000003ae59019>] get_cmdline+0xa3/0x2d0 mm/util.c:641 [<00000000955ccf87>] handle_lmk_event+0x169/0x920 drivers/staging/android/lowmemorykiller.c:116 [<000000003f7acb98>] lowmem_scan+0x6f3/0xb70 drivers/staging/android/lowmemorykiller.c:354 [<00000000c961ad7a>] do_shrink_slab mm/vmscan.c:399 [inline] [<00000000c961ad7a>] shrink_slab.part.0+0x3cf/0xa20 mm/vmscan.c:502 [<00000000f849383c>] shrink_slab mm/vmscan.c:466 [inline] [<00000000f849383c>] shrink_node+0x1ed/0x750 mm/vmscan.c:2604 [<000000005527119c>] kswapd_shrink_node mm/vmscan.c:3209 [inline] [<000000005527119c>] balance_pgdat mm/vmscan.c:3329 [inline] [<000000005527119c>] kswapd+0x7f8/0x13b0 mm/vmscan.c:3523 [<00000000f58570d6>] kthread+0x278/0x310 kernel/kthread.c:211 [<0000000090102418>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375 lowmemorykiller: Killing 'syz-executor.1' (28194) (tgid 28194), adj 1000, to free 35996kB on behalf of 'syz-executor.0' (2632) because cache 59140kB is below limit 65536kB for oom_score_adj 12 Free memory is -12972kB above reserved lowmemorykiller: Killing 'syz-executor.1' (24118) (tgid 24118), adj 1000, to free 35988kB on behalf of 'syz-executor.0' (2632) because cache 58240kB is below limit 65536kB for oom_score_adj 12 Free memory is -13044kB above reserved lowmemorykiller: Killing 'syz-executor.0' (2628) (tgid 2625), adj 1000, to free 35980kB on behalf of 'kswapd0' (33) because cache 56840kB is below limit 65536kB for oom_score_adj 12 Free memory is -11524kB above reserved lowmemorykiller: Killing 'syz-executor.0' (2628) (tgid 2625), adj 1000, to free 35008kB on behalf of 'syz-executor.0' (2632) because cache -11988kB is below limit 6144kB for oom_score_adj 0 Free memory is -13256kB above reserved lowmemorykiller: Killing 'syz-executor.0' (2628) (tgid 2625), adj 1000, to free 35008kB on behalf of 'syz-executor.5' (2678) because cache -11988kB is below limit 6144kB for oom_score_adj 0 Free memory is -13256kB above reserved lowmemorykiller: Killing 'syz-executor.0' (2628) (tgid 2625), adj 1000, to free 35008kB on behalf of 'init' (1) because cache -12060kB is below limit 6144kB for oom_score_adj 0 Free memory is -13028kB above reserved lowmemorykiller: Killing 'syz-executor.0' (2628) (tgid 2625), adj 1000, to free 35008kB on behalf of 'rsyslogd' (1899) because cache -12060kB is below limit 6144kB for oom_score_adj 0 Free memory is -13028kB above reserved lowmemorykiller: Killing 'syz-executor.0' (2628) (tgid 2625), adj 1000, to free 35008kB on behalf of 'syz-executor.0' (2628) because cache -12060kB is below limit 6144kB for oom_score_adj 0 Free memory is -12964kB above reserved lowmemorykiller: Killing 'syz-executor.0' (2628) (tgid 2625), adj 1000, to free 35008kB on behalf of 'syz-executor.0' (2632) because cache -12060kB is below limit 6144kB for oom_score_adj 0 Free memory is -12964kB above reserved lowmemorykiller: Killing 'syz-executor.0' (2628) (tgid 2625), adj 1000, to free 35008kB on behalf of 'init' (1) because cache -11920kB is below limit 6144kB for oom_score_adj 0 Free memory is -13264kB above reserved lowmemorykiller: Killing 'syz-executor.0' (2628) (tgid 2625), adj 1000, to free 35008kB on behalf of 'syz-executor.5' (2678) because cache -11920kB is below limit 6144kB for oom_score_adj 0 Free memory is -13264kB above reserved ip6_tunnel: å xmit: Local address not yet configured! rsyslogd invoked oom-killer: gfp_mask=0x24200ca(GFP_HIGHUSER_MOVABLE), nodemask=0, order=0, oom_score_adj=0 CPU: 0 PID: 1899 Comm: rsyslogd Not tainted 4.9.194+ #0 ffff8801d386f6f0 ffffffff81b67001 ffff8801d386fa48 ffffffff833f1c30 0000000000000000 ffff8801d386fa60 0000000000000000 ffff8801d386f770 ffffffff81506e44 0000000000000000 0000000000000000 ffffffff8282ac45 Call Trace: [<00000000a230d1d2>] __dump_stack lib/dump_stack.c:15 [inline] [<00000000a230d1d2>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000424cc606>] dump_header.isra.0+0x142/0x74c mm/oom_kill.c:417 [<0000000082f0000d>] oom_kill_process.cold+0xd/0xa74 mm/oom_kill.c:852 [<000000001b027ecc>] out_of_memory mm/oom_kill.c:1069 [inline] [<000000001b027ecc>] out_of_memory+0x29b/0xea0 mm/oom_kill.c:1009 [<00000000747cc28b>] __alloc_pages_may_oom mm/page_alloc.c:3136 [inline] [<00000000747cc28b>] __alloc_pages_slowpath mm/page_alloc.c:3750 [inline] [<00000000747cc28b>] __alloc_pages_nodemask+0x1730/0x1a80 mm/page_alloc.c:3861 [<00000000a97d9752>] __alloc_pages include/linux/gfp.h:433 [inline] [<00000000a97d9752>] __alloc_pages_node include/linux/gfp.h:446 [inline] [<00000000a97d9752>] alloc_pages_node include/linux/gfp.h:460 [inline] [<00000000a97d9752>] __page_cache_alloc include/linux/pagemap.h:208 [inline] [<00000000a97d9752>] pagecache_get_page+0x248/0x740 mm/filemap.c:1367 [<00000000e7d9eab9>] filemap_fault+0xb1f/0x1360 mm/filemap.c:2331 [<00000000d8b588b7>] ext4_filemap_fault+0x72/0xa0 fs/ext4/inode.c:5854 [<000000005d932ef4>] __do_fault+0x2a8/0x6c0 mm/memory.c:2855 [<0000000036cec681>] do_read_fault mm/memory.c:3202 [inline] [<0000000036cec681>] do_fault mm/memory.c:3338 [inline] [<0000000036cec681>] handle_pte_fault mm/memory.c:3547 [inline] [<0000000036cec681>] __handle_mm_fault mm/memory.c:3634 [inline] [<0000000036cec681>] handle_mm_fault+0x11bc/0x2420 mm/memory.c:3671 [<00000000125cdaab>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1401 [<00000000b2507684>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1464 [<000000006e2f41d6>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:956 Mem-Info: active_anon:124211 inactive_anon:48496 isolated_anon:0 active_file:29 inactive_file:66 isolated_file:0 unevictable:3070 dirty:0 writeback:0 unstable:0 slab_reclaimable:6865 slab_unreclaimable:64571 mapped:55330 shmem:4024 pagetables:7796 bounce:0 free:6060 free_pcp:0 free_cma:0 Node 0 active_anon:496844kB inactive_anon:193984kB active_file:116kB inactive_file:264kB unevictable:12280kB isolated(anon):0kB isolated(file):0kB mapped:221320kB dirty:0kB writeback:0kB shmem:16096kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no DMA32 free:18708kB min:4696kB low:7712kB high:10728kB active_anon:236kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020092kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1296kB kernel_stack:64kB pagetables:184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [22407] 0 22407 18113 8734 24 5 0 0 syz-executor.1 [22573] 0 22573 18212 8751 26 4 0 0 syz-executor.4 [23315] 0 23315 18245 8755 27 4 0 0 syz-executor.2 [23715] 0 23715 18212 8750 26 4 0 0 syz-executor.4 [23912] 0 23912 18146 8715 25 3 0 0 syz-executor.2 [23929] 0 23929 18179 8717 25 3 0 0 syz-executor.2 [24194] 0 24194 18179 8746 26 5 0 1000 syz-executor.1 [24196] 0 24196 18179 8746 26 5 0 1000 syz-executor.1 [24905] 0 24905 18146 8713 25 4 0 1000 syz-executor.1 [24911] 0 24911 18212 8717 26 4 0 1000 syz-executor.1 [25201] 0 25201 18212 8751 26 4 0 0 syz-executor.2 [25694] 0 25694 18146 8747 26 4 0 0 syz-executor.2 [25966] 0 25966 5562 371 16 3 0 -1000 udevd [26786] 0 26786 18179 8748 26 4 0 0 syz-executor.2 [26981] 0 26981 34630 8740 28 4 0 0 syz-executor.2 [27368] 0 27368 18146 8714 25 3 0 0 syz-executor.2 [27670] 0 27670 18146 8744 26 5 0 1000 syz-executor.1 [27750] 0 27750 18146 8711 24 4 0 1000 syz-executor.1 [27793] 0 27793 18213 8716 26 4 0 1000 syz-executor.1 [28791] 0 28791 18146 8749 27 4 0 0 syz-executor.4 [28815] 0 28815 34597 8737 28 4 0 0 syz-executor.4 [29021] 0 29021 18146 8747 26 4 0 0 syz-executor.4 [29136] 0 29136 18261 12847 34 4 0 0 syz-executor.4 [29409] 0 29409 18146 8715 25 3 0 0 syz-executor.4 [29413] 0 29413 18179 8717 25 3 0 0 syz-executor.4 [29624] 0 29624 18146 8746 26 4 0 0 syz-executor.4 [29890] 0 29890 18210 11603 33 4 0 0 syz-executor.4 [29947] 0 29947 18146 8713 24 3 0 0 syz-executor.4 [29950] 0 29950 18179 8717 25 3 0 0 syz-executor.4 [30044] 0 30044 34663 8739 29 5 0 0 syz-executor.1 [30079] 0 30079 34663 8739 29 5 0 0 syz-executor.1 [30439] 0 30439 18146 8746 26 4 0 0 syz-executor.2 [30462] 0 30462 18146 8747 26 4 0 0 syz-executor.2 [30465] 0 30465 18212 8750 26 4 0 0 syz-executor.2 [30668] 0 30668 18179 8748 26 4 0 0 syz-executor.2 [30889] 0 30889 18146 8713 24 4 0 0 syz-executor.1 [30900] 0 30900 18179 8719 26 4 0 0 syz-executor.1 [31743] 0 31743 18245 9017 26 4 0 0 syz-executor.1 [31910] 0 31910 18213 8751 27 5 0 0 syz-executor.1 [31920] 0 31920 18177 11322 33 5 0 0 syz-executor.1 [31970] 0 31970 18146 8715 25 4 0 0 syz-executor.1 [31977] 0 31977 18212 8721 26 4 0 0 syz-executor.1 [32521] 0 32521 5397 182 15 3 0 -1000 udevd [ 396] 0 396 18180 8717 26 3 0 0 syz-executor.4 [ 511] 0 511 18114 16 23 3 0 0 syz-executor.3 [ 512] 0 512 18113 8731 24 4 0 0 syz-executor.3 [ 952] 0 952 18114 16 23 3 0 0 syz-executor.0 [ 953] 0 953 18113 8732 24 4 0 0 syz-executor.0 [ 1573] 0 1573 18245 8752 27 4 0 0 syz-executor.4 [ 1627] 0 1627 18245 8752 27 4 0 0 syz-executor.4 [ 1718] 0 1718 5397 182 15 3 0 -1000 udevd [ 1733] 0 1733 5397 182 15 3 0 -1000 udevd [ 1734] 0 1734 5397 183 15 3 0 -1000 udevd [ 1756] 0 1756 18179 8748 26 4 0 0 syz-executor.4 [ 1826] 0 1826 18146 8748 26 4 0 0 syz-executor.2 [ 1870] 0 1870 18146 8747 26 4 0 0 syz-executor.4 [ 1891] 0 1891 18245 8954 27 4 0 0 syz-executor.4 [ 1932] 0 1932 18212 8751 26 4 0 0 syz-executor.4 [ 1941] 0 1941 18212 8751 26 4 0 0 syz-executor.4 [ 2021] 0 2021 18179 8748 26 4 0 0 syz-executor.2 [ 2113] 0 2113 18179 8714 25 3 0 1000 syz-executor.0 [ 2161] 0 2161 18245 9246 27 4 0 0 syz-executor.1 [ 2193] 0 2193 18345 12822 33 4 0 0 syz-executor.1 [ 2579] 0 2579 3648 44 13 3 0 0 getty [ 2628] 0 2625 18278 5 26 4 0 1000 syz-executor.0 [ 2638] 0 2638 3648 43 12 3 0 0 getty [ 2639] 0 2639 3648 44 13 3 0 0 getty [ 2640] 0 2640 3648 42 12 3 0 0 getty [ 2642] 0 2642 3648 42 13 3 0 0 getty [ 2643] 0 2643 3648 44 13 3 0 0 getty [ 2677] 0 2677 18114 15 23 3 0 0 syz-executor.5 [ 2678] 0 2678 18114 8497 23 3 0 0 syz-executor.5 Out of memory: Kill process 7642 (syz-executor.4) score 1004 or sacrifice child Killed process 7642 (syz-executor.4) total-vm:73112kB, anon-rss:184kB, file-rss:34816kB, shmem-rss:0kB