mip6: mip6_rthdr_init_state: spi is not 0: 3942907904 ====================================================== WARNING: possible circular locking dependency detected 4.15.0+ #220 Not tainted ------------------------------------------------------ syz-executor5/5904 is trying to acquire lock: (sk_lock-AF_INET6){+.+.}, at: [<00000000c777e0c4>] lock_sock include/net/sock.h:1461 [inline] (sk_lock-AF_INET6){+.+.}, at: [<00000000c777e0c4>] do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 net/ipv6/ipv6_sockglue.c:167 but task is already holding lock: (rtnl_mutex){+.+.}, at: [<00000000d44b7b48>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:74 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (rtnl_mutex){+.+.}: __mutex_lock_common kernel/locking/mutex.c:756 [inline] __mutex_lock+0x16f/0x1a80 kernel/locking/mutex.c:893 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908 rtnl_lock+0x17/0x20 net/core/rtnetlink.c:74 register_netdevice_notifier+0xad/0x860 net/core/dev.c:1607 tee_tg_check+0x1a0/0x280 net/netfilter/xt_TEE.c:106 xt_check_target+0x22c/0x7d0 net/netfilter/x_tables.c:845 check_target net/ipv6/netfilter/ip6_tables.c:533 [inline] find_check_entry.isra.7+0x935/0xcf0 net/ipv6/netfilter/ip6_tables.c:575 translate_table+0xf52/0x1690 net/ipv6/netfilter/ip6_tables.c:744 do_replace net/ipv6/netfilter/ip6_tables.c:1160 [inline] do_ip6t_set_ctl+0x370/0x5f0 net/ipv6/netfilter/ip6_tables.c:1686 nf_sockopt net/netfilter/nf_sockopt.c:106 [inline] nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:115 ipv6_setsockopt+0x115/0x150 net/ipv6/ipv6_sockglue.c:928 rawv6_setsockopt+0x4a/0xf0 net/ipv6/raw.c:1060 sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2978 SYSC_setsockopt net/socket.c:1849 [inline] SyS_setsockopt+0x189/0x360 net/socket.c:1828 entry_SYSCALL_64_fastpath+0x29/0xa0 -> #0 (sk_lock-AF_INET6){+.+.}: lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:3920 lock_sock_nested+0xc2/0x110 net/core/sock.c:2780 lock_sock include/net/sock.h:1461 [inline] do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 net/ipv6/ipv6_sockglue.c:167 ipv6_setsockopt+0xd7/0x150 net/ipv6/ipv6_sockglue.c:922 sctp_setsockopt+0x2b6/0x61d0 net/sctp/socket.c:4104 sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2978 SYSC_setsockopt net/socket.c:1849 [inline] SyS_setsockopt+0x189/0x360 net/socket.c:1828 entry_SYSCALL_64_fastpath+0x29/0xa0 other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(rtnl_mutex); lock(sk_lock-AF_INET6); lock(rtnl_mutex); lock(sk_lock-AF_INET6); *** DEADLOCK *** 1 lock held by syz-executor5/5904: #0: (rtnl_mutex){+.+.}, at: [<00000000d44b7b48>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:74 stack backtrace: CPU: 0 PID: 5904 Comm: syz-executor5 Not tainted 4.15.0+ #220 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 print_circular_bug.isra.38+0x2cd/0x2dc kernel/locking/lockdep.c:1223 check_prev_add kernel/locking/lockdep.c:1863 [inline] check_prevs_add kernel/locking/lockdep.c:1976 [inline] validate_chain kernel/locking/lockdep.c:2417 [inline] __lock_acquire+0x30a8/0x3e00 kernel/locking/lockdep.c:3431 lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:3920 lock_sock_nested+0xc2/0x110 net/core/sock.c:2780 lock_sock include/net/sock.h:1461 [inline] do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 net/ipv6/ipv6_sockglue.c:167 ipv6_setsockopt+0xd7/0x150 net/ipv6/ipv6_sockglue.c:922 sctp_setsockopt+0x2b6/0x61d0 net/sctp/socket.c:4104 sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2978 SYSC_setsockopt net/socket.c:1849 [inline] SyS_setsockopt+0x189/0x360 net/socket.c:1828 entry_SYSCALL_64_fastpath+0x29/0xa0 RIP: 0033:0x453299 RSP: 002b:00007f31a4e3cc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007f31a4e3d700 RCX: 0000000000453299 RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000013 RBP: 0000000000000000 R08: 0000000000000108 R09: 0000000000000000 R10: 0000000020b17ef8 R11: 0000000000000212 R12: 0000000000000000 R13: 0000000000a2f33f R14: 00007f31a4e3d9c0 R15: 0000000000000000 netlink: 'syz-executor1': attribute type 16 has an invalid length. netlink: 'syz-executor1': attribute type 16 has an invalid length. dccp_close: ABORT with 1 bytes unread netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. TCP: request_sock_TCPv6: Possible SYN flooding on port 20026. Sending cookies. Check SNMP counters. netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. netlink: 'syz-executor5': attribute type 1 has an invalid length. netlink: 'syz-executor5': attribute type 1 has an invalid length. xt_ipcomp: unknown flags FE xt_ipcomp: unknown flags FE oom_reaper: reaped process 6233 (syz-executor1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB rsyslogd invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 syz-executor1: vmalloc: allocation failure, allocated 2920665088 of 4294971392 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) syz-executor1 cpuset=/ mems_allowed=0 CPU: 0 PID: 6233 Comm: syz-executor1 Not tainted 4.15.0+ #220 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 warn_alloc+0x19a/0x2b0 mm/page_alloc.c:3306 __vmalloc_area_node mm/vmalloc.c:1718 [inline] __vmalloc_node_range+0x482/0x650 mm/vmalloc.c:1759 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc_node_flags_caller+0x50/0x60 mm/vmalloc.c:1826 kvmalloc_node+0x82/0xd0 mm/util.c:428 kvmalloc include/linux/mm.h:541 [inline] xt_alloc_table_info+0x64/0xe0 net/netfilter/x_tables.c:1006 do_replace net/ipv6/netfilter/ip6_tables.c:1149 [inline] do_ip6t_set_ctl+0x29b/0x5f0 net/ipv6/netfilter/ip6_tables.c:1686 nf_sockopt net/netfilter/nf_sockopt.c:106 [inline] nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:115 ipv6_setsockopt+0x115/0x150 net/ipv6/ipv6_sockglue.c:928 udpv6_setsockopt+0x45/0x80 net/ipv6/udp.c:1422 sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2978 SYSC_setsockopt net/socket.c:1849 [inline] SyS_setsockopt+0x189/0x360 net/socket.c:1828 entry_SYSCALL_64_fastpath+0x29/0xa0 RIP: 0033:0x453299 RSP: 002b:00007fef4f896c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000453299 RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000016 RBP: 00000000000005be R08: 0000000000000430 R09: 0000000000000000 R10: 00000000206f2bd0 R11: 0000000000000212 R12: 00000000006f7a70 R13: 00000000ffffffff R14: 00007fef4f8976d4 R15: 0000000000000000 Mem-Info: active_anon:49202 inactive_anon:63 isolated_anon:0 active_file:11 inactive_file:11 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:7006 slab_unreclaimable:90748 mapped:16553 shmem:70 pagetables:629 bounce:0 free:15734 free_pcp:92 free_cma:0 Node 0 active_anon:196808kB inactive_anon:252kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:66212kB dirty:0kB writeback:0kB shmem:280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 88064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2868 6378 6378 Node 0 DMA32 free:28780kB min:30316kB low:37892kB high:45468kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2939968kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB lowmem_reserve[]: 0 0 3510 3510 Node 0 Normal free:18248kB min:37100kB low:46372kB high:55644kB active_anon:196808kB inactive_anon:252kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:4718592kB managed:3594332kB mlocked:0kB kernel_stack:3712kB pagetables:2516kB bounce:0kB free_pcp:248kB local_pcp:120kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB Node 0 DMA32: 3*4kB (UM) 2*8kB (UM) 3*16kB (M) 3*32kB (UM) 1*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 4*1024kB (UM) 1*2048kB (M) 5*4096kB (M) = 28780kB Node 0 Normal: 668*4kB (ME) 405*8kB (UME) 213*16kB (UME) 71*32kB (ME) 22*64kB (UME) 41*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18248kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 119 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965969 pages RAM 0 pages HighMem/MovableOnly 328417 pages reserved syz-executor1: vmalloc: allocation failure, allocated 2963005440 of 4294971392 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) syz-executor1 cpuset=/ mems_allowed=0 CPU: 0 PID: 6246 Comm: syz-executor1 Not tainted 4.15.0+ #220 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 warn_alloc+0x19a/0x2b0 mm/page_alloc.c:3306 __vmalloc_area_node mm/vmalloc.c:1718 [inline] __vmalloc_node_range+0x482/0x650 mm/vmalloc.c:1759 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc_node_flags_caller+0x50/0x60 mm/vmalloc.c:1826 kvmalloc_node+0x82/0xd0 mm/util.c:428 kvmalloc include/linux/mm.h:541 [inline] xt_alloc_table_info+0x64/0xe0 net/netfilter/x_tables.c:1006 do_replace net/ipv6/netfilter/ip6_tables.c:1149 [inline] do_ip6t_set_ctl+0x29b/0x5f0 net/ipv6/netfilter/ip6_tables.c:1686 nf_sockopt net/netfilter/nf_sockopt.c:106 [inline] nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:115 ipv6_setsockopt+0x115/0x150 net/ipv6/ipv6_sockglue.c:928 udpv6_setsockopt+0x45/0x80 net/ipv6/udp.c:1422 sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2978 SYSC_setsockopt net/socket.c:1849 [inline] SyS_setsockopt+0x189/0x360 net/socket.c:1828 entry_SYSCALL_64_fastpath+0x29/0xa0 RIP: 0033:0x453299 RSP: 002b:00007fef4f875c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000453299 RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 RBP: 00000000000005d0 R08: 0000000000000430 R09: 0000000000000000 R10: 00000000206f2bd0 R11: 0000000000000212 R12: 00000000006f7c20 R13: 00000000ffffffff R14: 00007fef4f8766d4 R15: 0000000000000003 rsyslogd cpuset=/ mems_allowed=0 CPU: 0 PID: 4021 Comm: rsyslogd Not tainted 4.15.0+ #220 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 dump_header+0x28c/0xe1e mm/oom_kill.c:437 oom_kill_process+0x8b9/0x1550 mm/oom_kill.c:866 out_of_memory+0x86d/0x1220 mm/oom_kill.c:1080 __alloc_pages_may_oom mm/page_alloc.c:3402 [inline] __alloc_pages_slowpath+0x1d1b/0x2d00 mm/page_alloc.c:4103 __alloc_pages_nodemask+0x9fb/0xd80 mm/page_alloc.c:4259 alloc_pages_current+0xb6/0x1e0 mm/mempolicy.c:2055 alloc_pages include/linux/gfp.h:492 [inline] __page_cache_alloc+0x334/0x500 mm/filemap.c:945 page_cache_read mm/filemap.c:2387 [inline] filemap_fault+0xf34/0x1ca0 mm/filemap.c:2571 ext4_filemap_fault+0x82/0xad fs/ext4/inode.c:6169 __do_fault+0xeb/0x315 mm/memory.c:3228 do_read_fault mm/memory.c:3638 [inline] do_fault mm/memory.c:3738 [inline] handle_pte_fault mm/memory.c:3969 [inline] __handle_mm_fault+0x1d8f/0x3ce0 mm/memory.c:4093 handle_mm_fault+0x38f/0x930 mm/memory.c:4130 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1426 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1501 page_fault+0x4c/0x60 arch/x86/entry/entry_64.S:1261 RIP: 0033:0x7f56524581fd RSP: 002b:00007f564f9f7e30 EFLAGS: 00010293 RAX: 0000000000000071 RBX: 00000000025f54b0 RCX: 00007f56524581fd RDX: 0000000000000fff RSI: 00007f565122c5a0 RDI: 0000000000000004 RBP: 0000000000000000 R08: 00000000025e0260 R09: 0000000004000001 R10: 0000000000000001 R11: 0000000000000293 R12: 000000000065e420 R13: 00007f564f9f89c0 R14: 00007f5652a9d040 R15: 0000000000000003 Mem-Info: active_anon:49196 inactive_anon:63 isolated_anon:0 active_file:13 inactive_file:803 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:7007 slab_unreclaimable:90742 mapped:17012 shmem:70 pagetables:612 bounce:0 free:1454898 free_pcp:714 free_cma:0 Node 0 active_anon:196784kB inactive_anon:252kB active_file:52kB inactive_file:4132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68648kB dirty:0kB writeback:0kB shmem:280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 77824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2868 6378 6378 Node 0 DMA32 free:2938688kB min:30316kB low:37892kB high:45468kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2939968kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1280kB local_pcp:628kB free_cma:0kB lowmem_reserve[]: 0 0 3510 3510 Node 0 Normal free:2862476kB min:37100kB low:46372kB high:55644kB active_anon:196784kB inactive_anon:252kB active_file:52kB inactive_file:5632kB unevictable:0kB writepending:0kB present:4718592kB managed:3594332kB mlocked:0kB kernel_stack:3648kB pagetables:2448kB bounce:0kB free_pcp:1596kB local_pcp:724kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB Node 0 DMA32: 10*4kB (UM) 9*8kB (UM) 9*16kB (UM) 10*32kB (UM) 8*64kB (UM) 6*128kB (UM) 2*256kB (M) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 714*4096kB (UM) = 2938688kB Node 0 Normal: 1075*4kB (UE) 1478*8kB (UME) 2050*16kB (UME) 446*32kB (UME) 125*64kB (UME) 179*128kB (UME) 12*256kB (UE) 27*512kB (U) 80*1024kB (U) 7*2048kB (U) 648*4096kB (U) = 2861468kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 1952 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965969 pages RAM 0 pages HighMem/MovableOnly 328417 pages reserved Unreclaimable slab info: Name Used Total pid_2 239KB 240KB hashtab_node 118KB 119KB ebitmap_node 1575KB 1575KB avtab_node 1012KB 1013KB TIPC 48KB 50KB RDS 29KB 31KB rds_connection 2KB 4KB SCTPv6 148KB 148KB SCTP 88KB 90KB sctp_chunk 55KB 56KB sctp_bind_bucket 2KB 3KB tw_sock_DCCPv6 3KB 3KB request_sock_DCCPv6 3KB 3KB DCCPv6 39KB 51KB tw_sock_DCCP 6KB 7KB DCCP 29KB 40KB ccid2_hc_tx_sock 13KB 13KB ccid2_hc_rx_sock 0KB 3KB dccp_ackvec_record 1KB 3KB dccp_ackvec 7KB 7KB dccp_bind_bucket 3KB 4KB KCM 15KB 15KB kcm_mux_cache 12KB 15KB can_receiver 2KB 3KB bridge_fdb_cache 5KB 7KB fib6_nodes 33KB 36KB ip6_dst_cache 442KB 442KB PINGv6 14KB 19KB RAWv6 141KB 143KB UDPv6 94KB 94KB request_sock_TCPv6 3KB 7KB openvswitch: netlink: Message has 4 unknown bytes. TCPv6 19KB 33KB ashmem_area_cache 0KB 3KB AF_VSOCK 38KB 40KB sd_ext_cdb 0KB 3KB scsi_sense_cache 50KB 96KB virtio_scsi_cmd 16KB 16KB sgpool-128 8KB 8KB sgpool-64 4KB 6KB sgpool-32 55KB 55KB sgpool-16 41KB 41KB sgpool-8 84KB 138KB cfq_io_cq 19KB 19KB cfq_queue 19KB 27KB mqueue_inode_cache 1KB 7KB fuse_request 0KB 4KB nfs_commit_data 3KB 7KB nfs_write_data 34KB 37KB jbd2_inode 2KB 3KB ext4_system_zone 0KB 3KB bio-1 1KB 3KB fasync_cache 3KB 4KB pid_namespace 2KB 7KB rpc_buffers 17KB 19KB rpc_tasks 2KB 3KB UNIX 292KB 357KB ip4-frags 2KB 3KB tcp_bind_bucket 6KB 8KB inet_peer_cache 4KB 8KB ip_fib_trie 4KB 7KB ip_fib_alias 49KB 51KB ip_dst_cache 32KB 32KB PING 11KB 14KB RAW 86KB 86KB UDP 62KB 70KB tw_sock_TCP 3KB 3KB request_sock_TCP 2KB 7KB TCP 63KB 63KB hugetlbfs_inode_cache 10KB 15KB eventpoll_pwq 28KB 59KB eventpoll_epi 49KB 98KB inotify_inode_mark 3KB 7KB request_queue 31KB 39KB blkdev_ioc 23KB 23KB bio-0 126KB 187KB biovec-(1<<(21-12)) 437KB 437KB biovec-64 133KB 133KB biovec-16 11KB 11KB bio_integrity_payload 0KB 4KB khugepaged_mm_slot 13KB 15KB user_namespace 5KB 11KB uid_cache 0KB 3KB dmaengine-unmap-2 0KB 3KB audit_buffer 3KB 3KB skbuff_fclone_cache 308KB 315KB skbuff_head_cache 2533KB 2711KB configfs_dir_cache 0KB 4KB file_lock_cache 62KB 87KB file_lock_ctx 0KB 3KB fsnotify_mark_connector 2KB 3KB net_namespace 54KB 54KB shmem_inode_cache 1470KB 1470KB task_delay_info 399KB 399KB taskstats 126KB 126KB sigqueue 488KB 488KB kernfs_node_cache 5211KB 5213KB mnt_cache 83KB 88KB filp 5860KB 8733KB names_cache 68365KB 68365KB avc_node 50KB 51KB selinux_file_security 305KB 620KB selinux_inode_security 1761KB 1952KB key_jar 3KB 7KB nsproxy 6KB 7KB vm_area_struct 17386KB 17410KB mm_struct 3856KB 4710KB fs_cache 468KB 480KB files_cache 1417KB 1717KB signal_cache 2255KB 2573KB sighand_cache 314KB 339KB task_struct 13456KB 13456KB cred_jar 1986KB 2368KB anon_vma_chain 4568KB 6426KB anon_vma 217KB 327KB pid 99KB 220KB Acpi-Operand 312KB 792KB Acpi-Namespace 102KB 104KB numa_policy 0KB 3KB debug_objects_cache 464KB 663KB trace_event_file 149KB 151KB ftrace_event_field 261KB 263KB pool_workqueue 40KB 44KB page->ptl 3018KB 3368KB kmalloc-262144 1032KB 1032KB kmalloc-131072 2470KB 2470KB kmalloc-65536 528KB 528KB kmalloc-32768 37620KB 37620KB kmalloc-16384 4488KB 4488KB kmalloc-8192 1815KB 1864KB kmalloc-4096 8155KB 8194KB kmalloc-2048 9562KB 9562KB kmalloc-1024 5402KB 5402KB kmalloc-512 4894KB 4901KB kmalloc-256 2363KB 2692KB kmalloc-128 889KB 889KB kmalloc-96 1012KB 1012KB kmalloc-64 1572KB 1572KB kmalloc-32 2261KB 2791KB kmalloc-192 435KB 436KB kmem_cache 105KB 108KB [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2098] 0 2098 5517 314 86016 0 -1000 udevd [ 3874] 0 3874 2493 573 65536 0 0 dhclient [ 4018] 0 4018 14298 174 126976 0 0 rsyslogd [ 4073] 0 4073 4725 52 86016 0 0 cron [ 4080] 0 4080 3736 44 77824 0 0 mcstransd [ 4093] 0 4093 12927 1231 139264 0 0 restorecond [ 4119] 0 4119 12490 152 135168 0 -1000 sshd [ 4143] 0 4143 3694 42 77824 0 0 getty [ 4144] 0 4144 3694 41 73728 0 0 getty [ 4145] 0 4145 3694 41 77824 0 0 getty kauditd_printk_skb: 6 callbacks suppressed audit: type=1400 audit(1517693242.539:35): avc: denied { relabelto } for pid=6334 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:systemd_unit_file_t:s0 tclass=packet permissive=1 xt_CONNSECMARK: invalid mode: 0 [ 4146] 0 4146 3694 41 77824 0 0 getty [ 4147] 0 4147 3694 41 73728 0 0 getty [ 4148] 0 4148 3694 42 73728 0 0 getty [ 4149] 0 4149 3649 40 73728 0 0 getty [ 4153] 0 4153 5681 455 86016 0 -1000 udevd [ 4154] 0 4154 5681 455 86016 0 -1000 udevd [ 4170] 0 4170 17821 366 184320 0 0 sshd [ 4172] 0 4172 92006 46685 532480 0 0 syz-fuzzer [ 4214] 0 4214 7297 16 69632 0 0 syz-executor0 [ 4215] 0 4215 7297 15 65536 0 0 syz-executor7 [ 4216] 0 4216 7297 16 65536 0 0 syz-executor1 [ 4217] 0 4217 7297 17 69632 0 0 syz-executor2 [ 4218] 0 4218 7296 2219 73728 0 0 syz-executor1 [ 4219] 0 4219 7296 2245 77824 0 0 syz-executor0 [ 4220] 0 4220 7297 15 69632 0 0 syz-executor3 [ 4221] 0 4221 7297 15 69632 0 0 syz-executor4 [ 4222] 0 4222 7296 2150 73728 0 0 syz-executor7 [ 4223] 0 4223 7297 15 69632 0 0 syz-executor5 [ 4224] 0 4224 7297 16 69632 0 0 syz-executor6 [ 4225] 0 4225 7296 2246 77824 0 0 syz-executor2 [ 4226] 0 4226 7296 2259 77824 0 0 syz-executor3 [ 4227] 0 4227 7296 2244 77824 0 0 syz-executor4 [ 4228] 0 4228 7296 2245 77824 0 0 syz-executor6 [ 4229] 0 4229 7296 2244 77824 0 0 syz-executor5 Out of memory: Kill process 4172 (syz-fuzzer) score 26 or sacrifice child Killed process 4217 (syz-executor2) total-vm:29188kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. syz-executor6 (6385) used greatest stack depth: 15648 bytes left IPVS: ftp: loaded support on port[0] = 21 IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RDS: rds_bind could not find a transport for 224.0.0.1, load rds_tcp or rds_rdma? RDS: rds_bind could not find a transport for 224.0.0.1, load rds_tcp or rds_rdma? audit: type=1400 audit(1517693245.553:36): avc: denied { setopt } for pid=6715 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app audit: type=1400 audit(1517693245.624:37): avc: denied { create } for pid=6744 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' audit: type=1400 audit(1517693245.625:38): avc: denied { write } for pid=6744 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' sctp: [Deprecated]: syz-executor3 (pid 6843) Use of int in maxseg socket option. Use struct sctp_assoc_value instead tc_dump_action: action bad kind sctp: [Deprecated]: syz-executor3 (pid 6856) Use of int in maxseg socket option. Use struct sctp_assoc_value instead