WARNING in __vmalloc_node_range

14 views
Skip to first unread message

syzbot

unread,
Jun 8, 2019, 7:19:06 PM6/8/19
to syzkaller-a...@googlegroups.com
Hello,

syzbot found the following crash on:

HEAD commit: 62872f95 Merge 4.4.174 into android-4.4
git tree: android-4.4
console output: https://syzkaller.appspot.com/x/log.txt?x=1160152ea00000
kernel config: https://syzkaller.appspot.com/x/.config?x=47bc4dd423780c4a
dashboard link: https://syzkaller.appspot.com/bug?extid=760e37e069c1109d9983
compiler: gcc (GCC) 9.0.0 20181231 (experimental)

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+760e37...@syzkaller.appspotmail.com

------------[ cut here ]------------
syz-executor.3: page allocation failure: order:0, mode:0x24000c2
WARNING: CPU: 1 PID: 7911 at mm/page_alloc.c:3069 __alloc_pages_slowpath
mm/page_alloc.c:3069 [inline]()
WARNING: CPU: 1 PID: 7911 at mm/page_alloc.c:3069
__alloc_pages_nodemask+0x11d7/0x14b0 mm/page_alloc.c:3313()
CPU: 0 PID: 7906 Comm: syz-executor.3 Not tainted 4.4.174+ #4
0000000000000000 1f64757ddf3e8887 ffff8801d1c8f938 ffffffff81aad1a1
1ffff1003a391f2a ffff8801d1164740 00000000024000c2 0000000000000000
ffffffff82895080 ffff8801d1c8fa48 ffffffff8148c0cb 0000000100000001
Call Trace:
[<ffffffff81aad1a1>] __dump_stack lib/dump_stack.c:15 [inline]
[<ffffffff81aad1a1>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
[<ffffffff8148c0cb>] warn_alloc_failed.cold+0x78/0x99 mm/page_alloc.c:2757
[<ffffffff8145fb65>] __vmalloc_node_range mm/vmalloc.c:1693 [inline]
[<ffffffff8145fb65>] __vmalloc_node_range+0x365/0x650 mm/vmalloc.c:1654
[<ffffffff8146031c>] __vmalloc_node mm/vmalloc.c:1716 [inline]
[<ffffffff8146031c>] __vmalloc_node_flags mm/vmalloc.c:1730 [inline]
[<ffffffff8146031c>] vmalloc+0x5c/0x70 mm/vmalloc.c:1745
[<ffffffff8236da74>] xt_alloc_entry_offsets+0x44/0x60
net/netfilter/x_tables.c:757
[<ffffffff8268a4f5>] translate_table+0x215/0x1720
net/ipv6/netfilter/ip6_tables.c:835
[<ffffffff8268db63>] do_replace net/ipv6/netfilter/ip6_tables.c:1310
[inline]
[<ffffffff8268db63>] do_ip6t_set_ctl+0x2b3/0x450
net/ipv6/netfilter/ip6_tables.c:1863
[<ffffffff822fcfad>] nf_sockopt net/netfilter/nf_sockopt.c:105 [inline]
[<ffffffff822fcfad>] nf_setsockopt+0x6d/0xc0 net/netfilter/nf_sockopt.c:114
[<ffffffff826003eb>] ipv6_setsockopt net/ipv6/ipv6_sockglue.c:909 [inline]
[<ffffffff826003eb>] ipv6_setsockopt+0x10b/0x140
net/ipv6/ipv6_sockglue.c:893
[<ffffffff823f782a>] tcp_setsockopt net/ipv4/tcp.c:2643 [inline]
[<ffffffff823f782a>] tcp_setsockopt+0x8a/0xe0 net/ipv4/tcp.c:2637
[<ffffffff821def2a>] sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2663
[<ffffffff821dcb59>] SYSC_setsockopt net/socket.c:1780 [inline]
[<ffffffff821dcb59>] SyS_setsockopt+0x159/0x240 net/socket.c:1759
[<ffffffff82718ba1>] entry_SYSCALL_64_fastpath+0x1e/0x9a
Mem-Info:
active_anon:61927 inactive_anon:19899 isolated_anon:0
active_file:4714 inactive_file:13132 isolated_file:0
unevictable:0 dirty:244 writeback:0 unstable:0
slab_reclaimable:4813 slab_unreclaimable:63576
mapped:61857 shmem:25686 pagetables:2767 bounce:0
free:1412190 free_pcp:513 free_cma:0
DMA32 free:2581284kB min:4696kB low:5868kB high:7044kB active_anon:111968kB
inactive_anon:37036kB active_file:7748kB inactive_file:24328kB
unevictable:0kB isolated(anon):0kB isolated(file):0kB present:3145324kB
managed:3021976kB mlocked:0kB dirty:400kB writeback:0kB mapped:113828kB
shmem:47348kB slab_reclaimable:9228kB slab_unreclaimable:115244kB
kernel_stack:3008kB pagetables:5592kB unstable:0kB bounce:0kB
free_pcp:1072kB local_pcp:384kB free_cma:0kB writeback_tmp:0kB
pages_scanned:0 all_unreclaimable? no
lowmem_reserve[]: 0 3504 3504
Normal free:3067476kB min:5580kB low:6972kB high:8368kB
active_anon:135740kB inactive_anon:42560kB active_file:11108kB
inactive_file:28200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB
present:4718592kB managed:3588764kB mlocked:0kB dirty:576kB writeback:0kB
mapped:133600kB shmem:55396kB slab_reclaimable:10024kB
slab_unreclaimable:139060kB kernel_stack:4096kB pagetables:5476kB
unstable:0kB bounce:0kB free_pcp:980kB local_pcp:612kB free_cma:0kB
writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no
lowmem_reserve[]: 0 0 0
DMA32: 109*4kB (UME) 282*8kB (ME) 498*16kB (UME) 101*32kB (UME) 33*64kB
(UME) 57*128kB (UME) 30*256kB (UM) 23*512kB (M) 5*1024kB (ME) 3*2048kB (UM)
617*4096kB (M) = 2581252kB
Normal: 105*4kB (ME) 418*8kB (UME) 674*16kB (UME) 114*32kB (UME) 34*64kB
(UME) 58*128kB (UME) 48*256kB (UM) 29*512kB (UM) 6*1024kB (M) 6*2048kB (UM)
731*4096kB (M) = 3067540kB
43531 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
313294 pages reserved
audit: type=1401 audit(1560032323.354:37): op=setxattr
invalid_context="system_u:object_r:dri_device_t"
audit: type=1401 audit(1560032323.374:38): op=setxattr
invalid_context="system_u:object_r:dri_device_t"
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297
sclass=netlink_route_socket
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297
sclass=netlink_route_socket


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Mar 15, 2020, 1:57:11 PM3/15/20
to syzkaller-a...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages