Free memory is -9552kB above reserved lowmemorykiller: Killing 'syz-executor404' (3028) (tgid 3028), adj 1000, to free 17092kB on behalf of 'syz-executor404' (4931) because cache 31596kB is below limit 65536kB for oom_score_adj 12 Free memory is -13296kB above reserved BUG: sleeping function called from invalid context at kernel/fork.c:903 in_atomic(): 0, irqs_disabled(): 0, pid: 4931, name: syz-executor404 4 locks held by syz-executor404/4931: #0: (&pipe->mutex/1){+.+.+.}, at: [<00000000dcb5c5f0>] pipe_lock_nested fs/pipe.c:66 [inline] #0: (&pipe->mutex/1){+.+.+.}, at: [<00000000dcb5c5f0>] pipe_lock fs/pipe.c:74 [inline] #0: (&pipe->mutex/1){+.+.+.}, at: [<00000000dcb5c5f0>] pipe_wait+0x1b8/0x1e0 fs/pipe.c:122 #1: (&mm->mmap_sem){++++++}, at: [<00000000178eff79>] __do_page_fault+0x25e/0xa60 arch/x86/mm/fault.c:1333 #2: (shrinker_rwsem){++++..}, at: [<000000000d071f80>] shrink_slab.part.0+0xb2/0xa20 mm/vmscan.c:472 #3: (rcu_read_lock){......}, at: [<00000000346428e5>] lowmem_scan+0x242/0xb50 drivers/staging/android/lowmemorykiller.c:272 Preemption disabled at: [<00000000b6d207d9>] spin_lock include/linux/spinlock.h:302 [inline] [<00000000b6d207d9>] task_lock include/linux/sched.h:3217 [inline] [<00000000b6d207d9>] get_task_mm+0x20/0xc0 kernel/fork.c:1010 CPU: 1 PID: 4931 Comm: syz-executor404 Not tainted 4.9.186+ #10 ffff88012e79ef38 ffffffff81b5a0b1 0000000000000000 0000000000000001 ffff88012e725f00 ffffffff810d0cc0 ffff88012e725f00 ffff88012e79ef70 ffffffff8140032c ffff88012e725f00 ffffffff82a39940 0000000000000387 Call Trace: [<0000000053431408>] __dump_stack lib/dump_stack.c:15 [inline] [<0000000053431408>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000d1a5587d>] ___might_sleep.cold+0x1c1/0x1fa kernel/sched/core.c:8004 [<00000000fa4029f3>] __might_sleep+0x95/0x1a0 kernel/sched/core.c:7961 [<000000008a96dd7f>] mmput+0x28/0x370 kernel/fork.c:903 [<000000004434f919>] handle_lmk_event+0xea/0x8a0 drivers/staging/android/lowmemorykiller.c:111 [<00000000c0468711>] lowmem_scan+0x695/0xb50 drivers/staging/android/lowmemorykiller.c:345 [<00000000995750c2>] do_shrink_slab mm/vmscan.c:399 [inline] [<00000000995750c2>] shrink_slab.part.0+0x3cf/0xa20 mm/vmscan.c:502 [<000000001c22468c>] shrink_slab mm/vmscan.c:466 [inline] [<000000001c22468c>] shrink_node+0x1ed/0x750 mm/vmscan.c:2604 [<00000000970a5a9a>] shrink_zones mm/vmscan.c:2751 [inline] [<00000000970a5a9a>] do_try_to_free_pages mm/vmscan.c:2793 [inline] [<00000000970a5a9a>] try_to_free_pages+0x397/0xbd0 mm/vmscan.c:3004 [<0000000060ba7fbb>] __perform_reclaim mm/page_alloc.c:3332 [inline] [<0000000060ba7fbb>] __alloc_pages_direct_reclaim mm/page_alloc.c:3354 [inline] [<0000000060ba7fbb>] __alloc_pages_slowpath mm/page_alloc.c:3704 [inline] [<0000000060ba7fbb>] __alloc_pages_nodemask+0x930/0x1a80 mm/page_alloc.c:3861 [<0000000080e5d6a4>] __alloc_pages include/linux/gfp.h:433 [inline] [<0000000080e5d6a4>] __alloc_pages_node include/linux/gfp.h:446 [inline] [<0000000080e5d6a4>] alloc_pages_node include/linux/gfp.h:460 [inline] [<0000000080e5d6a4>] alloc_zeroed_user_highpage_movable include/linux/highmem.h:183 [inline] [<0000000080e5d6a4>] wp_page_copy+0xb9e/0x1470 mm/memory.c:2165 [<0000000069c4ce2e>] do_wp_page+0x546/0x20a0 mm/memory.c:2390 [<00000000d4a5fa07>] handle_pte_fault mm/memory.c:3562 [inline] [<00000000d4a5fa07>] __handle_mm_fault mm/memory.c:3634 [inline] [<00000000d4a5fa07>] handle_mm_fault+0xeff/0x2420 mm/memory.c:3671 [<0000000075dbd2dd>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1404 [<00000000193ed778>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1467 [<00000000f8b3c1e5>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:953 [<00000000c483b143>] pipe_read+0x25d/0x820 fs/pipe.c:298 [<0000000063683ee6>] new_sync_read fs/read_write.c:441 [inline] [<0000000063683ee6>] __vfs_read+0x3be/0x550 fs/read_write.c:453 [<00000000725eaedf>] vfs_read+0x137/0x380 fs/read_write.c:474 [<00000000f5b2ab53>] SYSC_read fs/read_write.c:591 [inline] [<00000000f5b2ab53>] SyS_read+0x121/0x270 fs/read_write.c:584 [<000000008e651c5c>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288 [<00000000a425f1b5>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb ================================= [ INFO: inconsistent lock state ] 4.9.186+ #10 Tainted: G W --------------------------------- inconsistent {RECLAIM_FS-ON-W} -> {IN-RECLAIM_FS-R} usage. syz-executor404/4931 [HC0[0]:SC0[0]:HE1:SE1] takes: (&mm->mmap_sem){+++++?}, at: [<0000000091a50f4e>] get_cmdline+0xa3/0x2d0 mm/util.c:641 mark_held_locks+0xb1/0x100 kernel/locking/lockdep.c:2660 __lockdep_trace_alloc kernel/locking/lockdep.c:2882 [inline] lockdep_trace_alloc+0x18c/0x2b0 kernel/locking/lockdep.c:2897 __alloc_pages_nodemask+0x143/0x1a80 mm/page_alloc.c:3803 __alloc_pages include/linux/gfp.h:433 [inline] __alloc_pages_node include/linux/gfp.h:446 [inline] alloc_pages_node include/linux/gfp.h:460 [inline] pmd_alloc_one arch/x86/include/asm/pgalloc.h:88 [inline] __pmd_alloc+0x4a/0x330 mm/memory.c:3742 pmd_alloc include/linux/mm.h:1601 [inline] alloc_new_pmd mm/mremap.c:64 [inline] move_page_tables+0xadb/0xd60 mm/mremap.c:212 shift_arg_pages+0x1ae/0x470 fs/exec.c:642 setup_arg_pages+0x60d/0x7c0 fs/exec.c:754 load_elf_binary+0xa84/0x4a90 fs/binfmt_elf.c:860 search_binary_handler fs/exec.c:1621 [inline] search_binary_handler+0x14f/0x700 fs/exec.c:1599 exec_binprm fs/exec.c:1663 [inline] do_execveat_common.isra.0+0xf81/0x1db0 fs/exec.c:1785 do_execve+0x3a/0x50 fs/exec.c:1829 run_init_process+0x33/0x37 init/main.c:904 try_to_run_init_process+0x18/0x48 init/main.c:913 kernel_init+0xf2/0x163 init/main.c:984 ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375 irq event stamp: 26871 hardirqs last enabled at (26871): [<000000007d607b8b>] dump_stack+0x100/0x120 lib/dump_stack.c:56 hardirqs last disabled at (26870): [<00000000a62ed32c>] dump_stack+0x2c/0x120 lib/dump_stack.c:38 softirqs last enabled at (25002): [<00000000cc4a4527>] __do_softirq+0x474/0x964 kernel/softirq.c:314 softirqs last disabled at (24995): [<000000002bf4c14a>] invoke_softirq kernel/softirq.c:368 [inline] softirqs last disabled at (24995): [<000000002bf4c14a>] irq_exit+0x119/0x160 kernel/softirq.c:409 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&mm->mmap_sem); lock(&mm->mmap_sem); *** DEADLOCK *** 5 locks held by syz-executor404/4931: #0: (&pipe->mutex/1){+.+.+.}, at: [<00000000dcb5c5f0>] pipe_lock_nested fs/pipe.c:66 [inline] #0: (&pipe->mutex/1){+.+.+.}, at: [<00000000dcb5c5f0>] pipe_lock fs/pipe.c:74 [inline] #0: (&pipe->mutex/1){+.+.+.}, at: [<00000000dcb5c5f0>] pipe_wait+0x1b8/0x1e0 fs/pipe.c:122 #1: (&mm->mmap_sem){+++++?}, at: [<00000000178eff79>] __do_page_fault+0x25e/0xa60 arch/x86/mm/fault.c:1333 #2: (shrinker_rwsem){++++..}, at: [<000000000d071f80>] shrink_slab.part.0+0xb2/0xa20 mm/vmscan.c:472 #3: (rcu_read_lock){......}, at: [<00000000346428e5>] lowmem_scan+0x242/0xb50 drivers/staging/android/lowmemorykiller.c:272 #4: (lmk_event_lock){+.+.-.}, at: [<0000000020f50dc5>] spin_lock include/linux/spinlock.h:302 [inline] #4: (lmk_event_lock){+.+.-.}, at: [<0000000020f50dc5>] handle_lmk_event+0xfb/0x8a0 drivers/staging/android/lowmemorykiller.c:114 stack backtrace: CPU: 1 PID: 4931 Comm: syz-executor404 Tainted: G W 4.9.186+ #10 ffff88012e79ec80 ffffffff81b5a0b1 00000000000000f0 ffff88012e725f00 ffffffff83caf760 ffff88012e726898 ffffffff84250ec0 ffff88012e79ecf8 ffffffff81406d69 0000000000000000 ffffffff00000001 0000000000000001 Call Trace: [<0000000053431408>] __dump_stack lib/dump_stack.c:15 [inline] [<0000000053431408>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000318ce979>] print_usage_bug kernel/locking/lockdep.c:2387 [inline] [<00000000318ce979>] print_usage_bug.cold+0x452/0x5a2 kernel/locking/lockdep.c:2354 [<00000000b41ecce3>] valid_state kernel/locking/lockdep.c:2400 [inline] [<00000000b41ecce3>] mark_lock_irq kernel/locking/lockdep.c:2602 [inline] [<00000000b41ecce3>] mark_lock+0x6c7/0x12e0 kernel/locking/lockdep.c:3065 [<000000004f21268e>] mark_irqflags kernel/locking/lockdep.c:2958 [inline] [<000000004f21268e>] __lock_acquire+0x5c3/0x4350 kernel/locking/lockdep.c:3302 [<00000000aa85c33f>] lock_acquire+0x133/0x3d0 kernel/locking/lockdep.c:3756 [<00000000081fe695>] down_read+0x44/0xb0 kernel/locking/rwsem.c:22 [<0000000091a50f4e>] get_cmdline+0xa3/0x2d0 mm/util.c:641 [<00000000755cdf82>] handle_lmk_event+0x13c/0x8a0 drivers/staging/android/lowmemorykiller.c:128 [<00000000c0468711>] lowmem_scan+0x695/0xb50 drivers/staging/android/lowmemorykiller.c:345 [<00000000995750c2>] do_shrink_slab mm/vmscan.c:399 [inline] [<00000000995750c2>] shrink_slab.part.0+0x3cf/0xa20 mm/vmscan.c:502 [<000000001c22468c>] shrink_slab mm/vmscan.c:466 [inline] [<000000001c22468c>] shrink_node+0x1ed/0x750 mm/vmscan.c:2604 [<00000000970a5a9a>] shrink_zones mm/vmscan.c:2751 [inline] [<00000000970a5a9a>] do_try_to_free_pages mm/vmscan.c:2793 [inline] [<00000000970a5a9a>] try_to_free_pages+0x397/0xbd0 mm/vmscan.c:3004 [<0000000060ba7fbb>] __perform_reclaim mm/page_alloc.c:3332 [inline] [<0000000060ba7fbb>] __alloc_pages_direct_reclaim mm/page_alloc.c:3354 [inline] [<0000000060ba7fbb>] __alloc_pages_slowpath mm/page_alloc.c:3704 [inline] [<0000000060ba7fbb>] __alloc_pages_nodemask+0x930/0x1a80 mm/page_alloc.c:3861 [<0000000080e5d6a4>] __alloc_pages include/linux/gfp.h:433 [inline] [<0000000080e5d6a4>] __alloc_pages_node include/linux/gfp.h:446 [inline] [<0000000080e5d6a4>] alloc_pages_node include/linux/gfp.h:460 [inline] [<0000000080e5d6a4>] alloc_zeroed_user_highpage_movable include/linux/highmem.h:183 [inline] [<0000000080e5d6a4>] wp_page_copy+0xb9e/0x1470 mm/memory.c:2165 [<0000000069c4ce2e>] do_wp_page+0x546/0x20a0 mm/memory.c:2390 [<00000000d4a5fa07>] handle_pte_fault mm/memory.c:3562 [inline] [<00000000d4a5fa07>] __handle_mm_fault mm/memory.c:3634 [inline] [<00000000d4a5fa07>] handle_mm_fault+0xeff/0x2420 mm/memory.c:3671 [<0000000075dbd2dd>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1404 [<00000000193ed778>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1467 [<00000000f8b3c1e5>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:953 [<00000000c483b143>] pipe_read+0x25d/0x820 fs/pipe.c:298 [<0000000063683ee6>] new_sync_read fs/read_write.c:441 [inline] [<0000000063683ee6>] __vfs_read+0x3be/0x550 fs/read_write.c:453 [<00000000725eaedf>] vfs_read+0x137/0x380 fs/read_write.c:474 [<00000000f5b2ab53>] SYSC_read fs/read_write.c:591 [inline] [<00000000f5b2ab53>] SyS_read+0x121/0x270 fs/read_write.c:584 [<000000008e651c5c>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288 [<00000000a425f1b5>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb lowmemorykiller: Killing 'syz-executor404' (3033) (tgid 3033), adj 1000, to free 17092kB on behalf of 'syz-executor404' (4941) because cache 31564kB is below limit 65536kB for oom_score_adj 12 Free memory is -13344kB above reserved lowmemorykiller: Killing 'syz-executor404' (3038) (tgid 3038), adj 1000, to free 17092kB on behalf of 'syz-executor404' (4941) because cache 31564kB is below limit 65536kB for oom_score_adj 12 Free memory is 2856kB above reserved lowmemorykiller: Killing 'syz-executor404' (3043) (tgid 3043), adj 1000, to free 17092kB on behalf of 'syz-executor404' (4951) because cache 31312kB is below limit 65536kB for oom_score_adj 12 Free memory is -13424kB above reserved lowmemorykiller: Killing 'syz-executor404' (3048) (tgid 3048), adj 1000, to free 17092kB on behalf of 'syz-executor404' (4951) because cache 31312kB is below limit 65536kB for oom_score_adj 12 Free memory is 876kB above reserved lowmemorykiller: Killing 'syz-executor404' (3053) (tgid 3053), adj 1000, to free 17092kB on behalf of 'syz-executor404' (4951) because cache 31212kB is below limit 65536kB for oom_score_adj 12 Free memory is 19276kB above reserved lowmemorykiller: Killing 'syz-executor404' (3058) (tgid 3058), adj 1000, to free 17092kB on behalf of 'syz-executor404' (4951) because cache 31212kB is below limit 65536kB for oom_score_adj 12 Free memory is 35776kB above reserved lowmemorykiller: Killing 'syz-executor404' (3063) (tgid 3063), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31000kB is below limit 65536kB for oom_score_adj 12 Free memory is 844kB above reserved lowmemorykiller: Killing 'syz-executor404' (3068) (tgid 3068), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31060kB is below limit 65536kB for oom_score_adj 12 Free memory is -9724kB above reserved lowmemorykiller: Killing 'syz-executor404' (3073) (tgid 3073), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31060kB is below limit 65536kB for oom_score_adj 12 Free memory is 3908kB above reserved lowmemorykiller: Killing 'syz-executor404' (3078) (tgid 3078), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31060kB is below limit 65536kB for oom_score_adj 12 Free memory is 12228kB above reserved lowmemorykiller: Killing 'syz-executor404' (3083) (tgid 3083), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31064kB is below limit 65536kB for oom_score_adj 12 Free memory is 28616kB above reserved lowmemorykiller: Killing 'syz-executor404' (3088) (tgid 3088), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31064kB is below limit 65536kB for oom_score_adj 12 Free memory is 45680kB above reserved lowmemorykiller: Killing 'syz-executor404' (3093) (tgid 3093), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31064kB is below limit 65536kB for oom_score_adj 12 Free memory is 54516kB above reserved lowmemorykiller: Killing 'syz-executor404' (3098) (tgid 3098), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31068kB is below limit 65536kB for oom_score_adj 12 Free memory is -9848kB above reserved lowmemorykiller: Killing 'syz-executor404' (3103) (tgid 3103), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31068kB is below limit 65536kB for oom_score_adj 12 Free memory is 7036kB above reserved lowmemorykiller: Killing 'syz-executor404' (3108) (tgid 3108), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31068kB is below limit 65536kB for oom_score_adj 12 Free memory is 18776kB above reserved lowmemorykiller: Killing 'syz-executor404' (3113) (tgid 3113), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31068kB is below limit 65536kB for oom_score_adj 12 Free memory is 30564kB above reserved lowmemorykiller: Killing 'syz-executor404' (3118) (tgid 3118), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31068kB is below limit 65536kB for oom_score_adj 12 Free memory is 45672kB above reserved lowmemorykiller: Killing 'syz-executor404' (3123) (tgid 3123), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31068kB is below limit 65536kB for oom_score_adj 12 Free memory is 62172kB above reserved lowmemorykiller: Killing 'syz-executor404' (3128) (tgid 3128), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31076kB is below limit 65536kB for oom_score_adj 12 Free memory is -6804kB above reserved lowmemorykiller: Killing 'syz-executor404' (3133) (tgid 3133), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31076kB is below limit 65536kB for oom_score_adj 12 Free memory is 9100kB above reserved lowmemorykiller: Killing 'syz-executor404' (3138) (tgid 3138), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31076kB is below limit 65536kB for oom_score_adj 12 Free memory is 20880kB above reserved lowmemorykiller: Killing 'syz-executor404' (3143) (tgid 3143), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31076kB is below limit 65536kB for oom_score_adj 12 Free memory is 29600kB above reserved lowmemorykiller: Killing 'syz-executor404' (3148) (tgid 3148), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31076kB is below limit 65536kB for oom_score_adj 12 Free memory is 45684kB above reserved lowmemorykiller: Killing 'syz-executor404' (3153) (tgid 3153), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31076kB is below limit 65536kB for oom_score_adj 12 Free memory is 62208kB above reserved lowmemorykiller: Killing 'syz-executor404' (3158) (tgid 3158), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31084kB is below limit 65536kB for oom_score_adj 12 Free memory is -6748kB above reserved lowmemorykiller: Killing 'syz-executor404' (3163) (tgid 3163), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31084kB is below limit 65536kB for oom_score_adj 12 Free memory is 9528kB above reserved lowmemorykiller: Killing 'syz-executor404' (3168) (tgid 3168), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31084kB is below limit 65536kB for oom_score_adj 12 Free memory is 23940kB above reserved lowmemorykiller: Killing 'syz-executor404' (3173) (tgid 3173), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31084kB is below limit 65536kB for oom_score_adj 12 Free memory is 39948kB above reserved lowmemorykiller: Killing 'syz-executor404' (3178) (tgid 3178), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31084kB is below limit 65536kB for oom_score_adj 12 Free memory is 51592kB above reserved lowmemorykiller: Killing 'syz-executor404' (3183) (tgid 3183), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31084kB is below limit 65536kB for oom_score_adj 12 Free memory is 62668kB above reserved lowmemorykiller: Killing 'syz-executor404' (3188) (tgid 3188), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31092kB is below limit 65536kB for oom_score_adj 12 Free memory is -6704kB above reserved lowmemorykiller: Killing 'syz-executor404' (3193) (tgid 3193), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31092kB is below limit 65536kB for oom_score_adj 12 Free memory is 9324kB above reserved lowmemorykiller: Killing 'syz-executor404' (3198) (tgid 3198), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31092kB is below limit 65536kB for oom_score_adj 12 Free memory is 22220kB above reserved lowmemorykiller: Killing 'syz-executor404' (3203) (tgid 3203), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31092kB is below limit 65536kB for oom_score_adj 12 Free memory is 30560kB above reserved lowmemorykiller: Killing 'syz-executor404' (3208) (tgid 3208), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31096kB is below limit 65536kB for oom_score_adj 12 Free memory is 46092kB above reserved lowmemorykiller: Killing 'syz-executor404' (3213) (tgid 3213), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31096kB is below limit 65536kB for oom_score_adj 12 Free memory is 62428kB above reserved lowmemorykiller: Killing 'syz-executor404' (3218) (tgid 3218), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31100kB is below limit 65536kB for oom_score_adj 12 Free memory is -6780kB above reserved lowmemorykiller: Killing 'syz-executor404' (3223) (tgid 3223), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31100kB is below limit 65536kB for oom_score_adj 12 Free memory is 9248kB above reserved lowmemorykiller: Killing 'syz-executor404' (3228) (tgid 3228), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31100kB is below limit 65536kB for oom_score_adj 12 Free memory is 21804kB above reserved lowmemorykiller: Killing 'syz-executor404' (3233) (tgid 3233), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31100kB is below limit 65536kB for oom_score_adj 12 Free memory is 33552kB above reserved lowmemorykiller: Killing 'syz-executor404' (3238) (tgid 3238), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31100kB is below limit 65536kB for oom_score_adj 12 Free memory is 47868kB above reserved lowmemorykiller: Killing 'syz-executor404' (3243) (tgid 3243), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31100kB is below limit 65536kB for oom_score_adj 12 Free memory is 62092kB above reserved lowmemorykiller: Killing 'syz-executor404' (3248) (tgid 3248), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31104kB is below limit 65536kB for oom_score_adj 12 Free memory is -6664kB above reserved lowmemorykiller: Killing 'syz-executor404' (3253) (tgid 3253), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31104kB is below limit 65536kB for oom_score_adj 12 Free memory is 9364kB above reserved lowmemorykiller: Killing 'syz-executor404' (3258) (tgid 3258), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31104kB is below limit 65536kB for oom_score_adj 12 Free memory is 21548kB above reserved lowmemorykiller: Killing 'syz-executor404' (3263) (tgid 3263), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31104kB is below limit 65536kB for oom_score_adj 12 Free memory is 32740kB above reserved lowmemorykiller: Killing 'syz-executor404' (3268) (tgid 3268), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31104kB is below limit 65536kB for oom_score_adj 12 Free memory is 45236kB above reserved lowmemorykiller: Killing 'syz-executor404' (3273) (tgid 3273), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31104kB is below limit 65536kB for oom_score_adj 12 Free memory is 61840kB above reserved lowmemorykiller: Killing 'syz-executor404' (3278) (tgid 3278), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31104kB is below limit 65536kB for oom_score_adj 12 Free memory is -6724kB above reserved lowmemorykiller: Killing 'syz-executor404' (3283) (tgid 3283), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31112kB is below limit 65536kB for oom_score_adj 12 Free memory is 6732kB above reserved lowmemorykiller: Killing 'syz-executor404' (3288) (tgid 3288), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31112kB is below limit 65536kB for oom_score_adj 12 Free memory is 12732kB above reserved lowmemorykiller: Killing 'syz-executor404' (3293) (tgid 3293), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31112kB is below limit 65536kB for oom_score_adj 12 Free memory is 28512kB above reserved lowmemorykiller: Killing 'syz-executor404' (3298) (tgid 3298), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31112kB is below limit 65536kB for oom_score_adj 12 Free memory is 44788kB above reserved lowmemorykiller: Killing 'syz-executor404' (3303) (tgid 3303), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31112kB is below limit 65536kB for oom_score_adj 12 Free memory is 61296kB above reserved lowmemorykiller: Killing 'syz-executor404' (3308) (tgid 3308), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31120kB is below limit 65536kB for oom_score_adj 12 Free memory is -6824kB above reserved lowmemorykiller: Killing 'syz-executor404' (3313) (tgid 3313), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31120kB is below limit 65536kB for oom_score_adj 12 Free memory is 9328kB above reserved lowmemorykiller: Killing 'syz-executor404' (3318) (tgid 3318), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31064kB is below limit 65536kB for oom_score_adj 12 Free memory is -6704kB above reserved lowmemorykiller: Killing 'syz-executor404' (3323) (tgid 3323), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31064kB is below limit 65536kB for oom_score_adj 12 Free memory is 9448kB above reserved lowmemorykiller: Killing 'syz-executor404' (3328) (tgid 3328), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31064kB is below limit 65536kB for oom_score_adj 12 Free memory is 22468kB above reserved lowmemorykiller: Killing 'syz-executor404' (3333) (tgid 3333), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31068kB is below limit 65536kB for oom_score_adj 12 Free memory is 33720kB above reserved lowmemorykiller: Killing 'syz-executor404' (3338) (tgid 3338), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31068kB is below limit 65536kB for oom_score_adj 12 Free memory is 44412kB above reserved lowmemorykiller: Killing 'syz-executor404' (3343) (tgid 3343), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31068kB is below limit 65536kB for oom_score_adj 12 Free memory is 60968kB above reserved lowmemorykiller: Killing 'syz-executor404' (3348) (tgid 3348), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31072kB is below limit 65536kB for oom_score_adj 12 Free memory is -6644kB above reserved lowmemorykiller: Killing 'syz-executor404' (3358) (tgid 3358), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 31072kB is below limit 65536kB for oom_score_adj 12 Free memory is 14212kB above reserved lowmemorykiller: Killing 'syz-executor404' (3353) (tgid 3353), adj 1000, to free 17092kB on behalf of 'syz-executor404' (5255) because cache 31072kB is below limit 65536kB for oom_score_adj 12 Free memory is -13316kB above reserved lowmemorykiller: Killing 'syz-executor404' (3363) (tgid 3363), adj 1000, to free 17092kB on behalf of 'syz-executor404' (5255) because cache 31072kB is below limit 65536kB for oom_score_adj 12 Free memory is 36184kB above reserved BUG: sleeping function called from invalid context at kernel/fork.c:903 in_atomic(): 0, irqs_disabled(): 0, pid: 5255, name: syz-executor404 INFO: lockdep is turned off. Preemption disabled at: [<00000000b6d207d9>] spin_lock include/linux/spinlock.h:302 [inline] [<00000000b6d207d9>] task_lock include/linux/sched.h:3217 [inline] [<00000000b6d207d9>] get_task_mm+0x20/0xc0 kernel/fork.c:1010 CPU: 0 PID: 5255 Comm: syz-executor404 Tainted: G W 4.9.186+ #10 ffff8801c99fef38 ffffffff81b5a0b1 0000000000000000 0000000000000001 ffff88000d2dc740 ffffffff810d0cc0 ffff88000d2dc740 ffff8801c99fef70 ffffffff8140032c ffff88000d2dc740 ffffffff82a39940 0000000000000387 Call Trace: [<0000000053431408>] __dump_stack lib/dump_stack.c:15 [inline] [<0000000053431408>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000d1a5587d>] ___might_sleep.cold+0x1c1/0x1fa kernel/sched/core.c:8004 [<00000000fa4029f3>] __might_sleep+0x95/0x1a0 kernel/sched/core.c:7961 [<000000008a96dd7f>] mmput+0x28/0x370 kernel/fork.c:903 [<000000004434f919>] handle_lmk_event+0xea/0x8a0 drivers/staging/android/lowmemorykiller.c:111 [<00000000c0468711>] lowmem_scan+0x695/0xb50 drivers/staging/android/lowmemorykiller.c:345 [<00000000995750c2>] do_shrink_slab mm/vmscan.c:399 [inline] [<00000000995750c2>] shrink_slab.part.0+0x3cf/0xa20 mm/vmscan.c:502 [<000000001c22468c>] shrink_slab mm/vmscan.c:466 [inline] [<000000001c22468c>] shrink_node+0x1ed/0x750 mm/vmscan.c:2604 [<00000000970a5a9a>] shrink_zones mm/vmscan.c:2751 [inline] [<00000000970a5a9a>] do_try_to_free_pages mm/vmscan.c:2793 [inline] [<00000000970a5a9a>] try_to_free_pages+0x397/0xbd0 mm/vmscan.c:3004 [<0000000060ba7fbb>] __perform_reclaim mm/page_alloc.c:3332 [inline] [<0000000060ba7fbb>] __alloc_pages_direct_reclaim mm/page_alloc.c:3354 [inline] [<0000000060ba7fbb>] __alloc_pages_slowpath mm/page_alloc.c:3704 [inline] [<0000000060ba7fbb>] __alloc_pages_nodemask+0x930/0x1a80 mm/page_alloc.c:3861 [<0000000080e5d6a4>] __alloc_pages include/linux/gfp.h:433 [inline] [<0000000080e5d6a4>] __alloc_pages_node include/linux/gfp.h:446 [inline] [<0000000080e5d6a4>] alloc_pages_node include/linux/gfp.h:460 [inline] [<0000000080e5d6a4>] alloc_zeroed_user_highpage_movable include/linux/highmem.h:183 [inline] [<0000000080e5d6a4>] wp_page_copy+0xb9e/0x1470 mm/memory.c:2165 [<0000000069c4ce2e>] do_wp_page+0x546/0x20a0 mm/memory.c:2390 [<00000000d4a5fa07>] handle_pte_fault mm/memory.c:3562 [inline] [<00000000d4a5fa07>] __handle_mm_fault mm/memory.c:3634 [inline] [<00000000d4a5fa07>] handle_mm_fault+0xeff/0x2420 mm/memory.c:3671 [<0000000075dbd2dd>] __do_page_fault+0x3f0/0xa60 arch/x86/mm/fault.c:1404 [<00000000193ed778>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1467 [<00000000f8b3c1e5>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:953 [<00000000c483b143>] pipe_read+0x25d/0x820 fs/pipe.c:298 [<0000000063683ee6>] new_sync_read fs/read_write.c:441 [inline] [<0000000063683ee6>] __vfs_read+0x3be/0x550 fs/read_write.c:453 [<00000000725eaedf>] vfs_read+0x137/0x380 fs/read_write.c:474 [<00000000f5b2ab53>] SYSC_read fs/read_write.c:591 [inline] [<00000000f5b2ab53>] SyS_read+0x121/0x270 fs/read_write.c:584 [<000000008e651c5c>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288 [<00000000a425f1b5>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb lowmemorykiller: Killing 'syz-executor404' (3368) (tgid 3368), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 30864kB is below limit 65536kB for oom_score_adj 12 Free memory is 14664kB above reserved lowmemorykiller: Killing 'syz-executor404' (3373) (tgid 3373), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 30864kB is below limit 65536kB for oom_score_adj 12 Free memory is 29700kB above reserved lowmemorykiller: Killing 'syz-executor404' (3378) (tgid 3378), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 30864kB is below limit 65536kB for oom_score_adj 12 Free memory is 45760kB above reserved lowmemorykiller: Killing 'syz-executor404' (3383) (tgid 3383), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 30864kB is below limit 65536kB for oom_score_adj 12 Free memory is 62376kB above reserved lowmemorykiller: Killing 'syz-executor404' (3388) (tgid 3388), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 30872kB is below limit 65536kB for oom_score_adj 12 Free memory is -8684kB above reserved lowmemorykiller: Killing 'syz-executor404' (3393) (tgid 3393), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 30872kB is below limit 65536kB for oom_score_adj 12 Free memory is 7344kB above reserved lowmemorykiller: Killing 'syz-executor404' (3398) (tgid 3398), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 30872kB is below limit 65536kB for oom_score_adj 12 Free memory is 20024kB above reserved lowmemorykiller: Killing 'syz-executor404' (3403) (tgid 3403), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 30872kB is below limit 65536kB for oom_score_adj 12 Free memory is 32332kB above reserved lowmemorykiller: Killing 'syz-executor404' (3408) (tgid 3408), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 30872kB is below limit 65536kB for oom_score_adj 12 Free memory is 45632kB above reserved lowmemorykiller: Killing 'syz-executor404' (3413) (tgid 3413), adj 1000, to free 17092kB on behalf of 'kswapd0' (33) because cache 30872kB is below limit 65536kB for oom_score_adj 12 Free memory is 62132kB above reserved