syzbot


WARNING: suspicious RCU usage in sel_write_load

Status: auto-closed as invalid on 2020/02/22 18:16
Reported-by: syzbot+b30e61a29842745bf62a@syzkaller.appspotmail.com
First crash: 1939d, last: 1846d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-414 WARNING: suspicious RCU usage in sel_write_load 2 1828d 1831d 0/1 auto-closed as invalid on 2020/03/11 00:03

Sample crash report:
333229 pages reserved
0 pages cma reserved
=============================
syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
WARNING: suspicious RCU usage
syz-executor.4 cpuset=syz4 mems_allowed=0-1
CPU: 0 PID: 11200 Comm: syz-executor.4 Not tainted 4.14.150 #0
4.14.150 #0 Not tainted
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x197 lib/dump_stack.c:53
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
-----------------------------
 __vmalloc_node_range mm/vmalloc.c:1786 [inline]
 __vmalloc_node_range+0x3c3/0x6a0 mm/vmalloc.c:1746
 __vmalloc_node mm/vmalloc.c:1815 [inline]
 __vmalloc_node_flags mm/vmalloc.c:1829 [inline]
 vmalloc+0x46/0x50 mm/vmalloc.c:1851
net/tipc/bearer.c:177 suspicious rcu_dereference_protected() usage!
 sel_write_load+0x1a0/0x1050 security/selinux/selinuxfs.c:495

other info that might help us debug this:

 __vfs_write+0x105/0x6b0 fs/read_write.c:480

rcu_scheduler_active = 2, debug_locks = 1
 vfs_write+0x198/0x500 fs/read_write.c:544
 SYSC_write fs/read_write.c:590 [inline]
 SyS_write+0xfd/0x230 fs/read_write.c:582
2 locks held by syz-executor.5/11193:
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459f39
 #0: 
RSP: 002b:00007fe964496c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9644976d4
R13: 00000000004ca6ca R14: 00000000004e26a0 R15: 00000000ffffffff
syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
syz-executor.4 cpuset=syz4 mems_allowed=0-1
CPU: 1 PID: 11214 Comm: syz-executor.4 Not tainted 4.14.150 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x197 lib/dump_stack.c:53
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
 __vmalloc_node_range mm/vmalloc.c:1786 [inline]
 __vmalloc_node_range+0x3c3/0x6a0 mm/vmalloc.c:1746
 __vmalloc_node mm/vmalloc.c:1815 [inline]
 __vmalloc_node_flags mm/vmalloc.c:1829 [inline]
 vmalloc+0x46/0x50 mm/vmalloc.c:1851
 sel_write_load+0x1a0/0x1050 security/selinux/selinuxfs.c:495
 __vfs_write+0x105/0x6b0 fs/read_write.c:480
 vfs_write+0x198/0x500 fs/read_write.c:544
 SYSC_write fs/read_write.c:590 [inline]
 SyS_write+0xfd/0x230 fs/read_write.c:582
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459f39
RSP: 002b:00007fe964496c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39
RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9644976d4
R13: 00000000004ca6ca R14: 00000000004e26a0 R15: 00000000ffffffff
 (cb_lock){++++}, at: [<ffffffff84f5546a>] genl_rcv+0x1a/0x40 net/netlink/genetlink.c:635
 #1:  (genl_mutex){+.+.}, at: [<ffffffff84f58cb9>] genl_lock net/netlink/genetlink.c:33 [inline]
 #1:  (genl_mutex){+.+.}, at: [<ffffffff84f58cb9>] genl_rcv_msg+0x119/0x150 net/netlink/genetlink.c:623

stack backtrace:
CPU: 1 PID: 11193 Comm: syz-executor.5 Not tainted 4.14.150 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x197 lib/dump_stack.c:53
 lockdep_rcu_suspicious+0x153/0x15d kernel/locking/lockdep.c:4665
 tipc_bearer_find+0x20a/0x300 net/tipc/bearer.c:177
 tipc_nl_compat_link_set+0x433/0xbf0 net/tipc/netlink_compat.c:797
 __tipc_nl_compat_doit net/tipc/netlink_compat.c:306 [inline]
 tipc_nl_compat_doit+0x1a2/0x550 net/tipc/netlink_compat.c:354
 tipc_nl_compat_handle net/tipc/netlink_compat.c:1198 [inline]
 tipc_nl_compat_recv+0x9ec/0xb20 net/tipc/netlink_compat.c:1280
 genl_family_rcv_msg+0x614/0xc30 net/netlink/genetlink.c:600
 genl_rcv_msg+0xb4/0x150 net/netlink/genetlink.c:625
 netlink_rcv_skb+0x14f/0x3c0 net/netlink/af_netlink.c:2432
 genl_rcv+0x29/0x40 net/netlink/genetlink.c:636
 netlink_unicast_kernel net/netlink/af_netlink.c:1286 [inline]
 netlink_unicast+0x45d/0x640 net/netlink/af_netlink.c:1312
 netlink_sendmsg+0x7c4/0xc60 net/netlink/af_netlink.c:1877
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xce/0x110 net/socket.c:656
 ___sys_sendmsg+0x70a/0x840 net/socket.c:2062
 __sys_sendmsg+0xb9/0x140 net/socket.c:2096
 SYSC_sendmsg net/socket.c:2107 [inline]
 SyS_sendmsg+0x2d/0x50 net/socket.c:2103
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459f39
RSP: 002b:00007f6af9e17c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39
RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6af9e186d4
R13: 00000000004c7fae R14: 00000000004ddf60 R15: 00000000ffffffff
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
active_anon:173710 inactive_anon:195 isolated_anon:0
 active_file:8362 inactive_file:11497 isolated_file:0
 unevictable:0 dirty:268 writeback:0 unstable:0
 slab_reclaimable:11019 slab_unreclaimable:120659
 mapped:59243 shmem:258 pagetables:1666 bounce:0
 free:1210633 free_pcp:366 free_cma:0
Node 0 active_anon:694840kB inactive_anon:780kB active_file:33300kB inactive_file:45488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236972kB dirty:1060kB writeback:0kB shmem:1032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 356352kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 1 active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 2580 2580 2580
Node 0 DMA32 free:1040808kB min:36468kB low:45584kB high:54700kB active_anon:694840kB inactive_anon:780kB active_file:33300kB inactive_file:45488kB unevictable:0kB writepending:1060kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:8064kB pagetables:6664kB bounce:0kB free_pcp:1404kB local_pcp:716kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 1 Normal free:3785596kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:12kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 6764*4kB (UME) 1916*8kB (UME) 817*16kB (UME) 740*32kB (UME) 111*64kB (UME) 10*128kB (UME) 1*256kB (U) 2*512kB (UE) 2*1024kB (UM) 2*2048kB (M) 231*4096kB (M) = 1041120kB
Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
Node 1 Normal: 59*4kB (UME) 348*8kB (UME) 275*16kB (UME) 58*32kB (UM) 11*64kB (U) 9*128kB (U) 10*256kB (UME) 1*512kB (E) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785596kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
19928 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
333229 pages reserved
0 pages cma reserved
syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
syz-executor.4 cpuset=syz4 mems_allowed=0-1
CPU: 1 PID: 11278 Comm: syz-executor.4 Not tainted 4.14.150 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x197 lib/dump_stack.c:53
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
 __vmalloc_node_range mm/vmalloc.c:1786 [inline]
 __vmalloc_node_range+0x3c3/0x6a0 mm/vmalloc.c:1746
 __vmalloc_node mm/vmalloc.c:1815 [inline]
 __vmalloc_node_flags mm/vmalloc.c:1829 [inline]
 vmalloc+0x46/0x50 mm/vmalloc.c:1851
 sel_write_load+0x1a0/0x1050 security/selinux/selinuxfs.c:495
 __vfs_write+0x105/0x6b0 fs/read_write.c:480
 vfs_write+0x198/0x500 fs/read_write.c:544
 SYSC_write fs/read_write.c:590 [inline]
 SyS_write+0xfd/0x230 fs/read_write.c:582
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459f39
RSP: 002b:00007fe964496c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39
RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9644976d4
R13: 00000000004ca6ca R14: 00000000004e26a0 R15: 00000000ffffffff
syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
syz-executor.4 cpuset=syz4 mems_allowed=0-1
CPU: 1 PID: 11303 Comm: syz-executor.4 Not tainted 4.14.150 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x197 lib/dump_stack.c:53
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
 __vmalloc_node_range mm/vmalloc.c:1786 [inline]
 __vmalloc_node_range+0x3c3/0x6a0 mm/vmalloc.c:1746
 __vmalloc_node mm/vmalloc.c:1815 [inline]
 __vmalloc_node_flags mm/vmalloc.c:1829 [inline]
 vmalloc+0x46/0x50 mm/vmalloc.c:1851
 sel_write_load+0x1a0/0x1050 security/selinux/selinuxfs.c:495
 __vfs_write+0x105/0x6b0 fs/read_write.c:480
 vfs_write+0x198/0x500 fs/read_write.c:544
 SYSC_write fs/read_write.c:590 [inline]
 SyS_write+0xfd/0x230 fs/read_write.c:582
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459f39
RSP: 002b:00007fe964496c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39
RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9644976d4
R13: 00000000004ca6ca R14: 00000000004e26a0 R15: 00000000ffffffff
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
active_anon:175361 inactive_anon:191 isolated_anon:0
 active_file:8364 inactive_file:11648 isolated_file:0
 unevictable:0 dirty:292 writeback:0 unstable:0
 slab_reclaimable:10988 slab_unreclaimable:120385
 mapped:59293 shmem:258 pagetables:1807 bounce:0
 free:1208970 free_pcp:258 free_cma:0
Node 0 active_anon:705484kB inactive_anon:764kB active_file:33308kB inactive_file:48292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:237072kB dirty:1156kB writeback:0kB shmem:1032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 346112kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 1 active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 2580 2580 2580
Node 0 DMA32 free:1025396kB min:36468kB low:45584kB high:54700kB active_anon:699004kB inactive_anon:764kB active_file:33308kB inactive_file:49592kB unevictable:0kB writepending:1156kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:8064kB pagetables:6932kB bounce:0kB free_pcp:1268kB local_pcp:628kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 1 Normal free:3785596kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:12kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 6820*4kB (UME) 1464*8kB (UME) 512*16kB (UME) 643*32kB (UME) 152*64kB (UME) 28*128kB (UME) 10*256kB (U) 9*512kB (UME) 1*1024kB (M) 4*2048kB (UM) 230*4096kB (M) = 1039536kB
Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 
0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
Node 1 Normal: 59*4kB (UME) 348*8kB (UME) 275*16kB (UME) 58*32kB (UM) 11*64kB (U) 9*128kB (U) 10*256kB (UME) 1*512kB (E) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785596kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
19738 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
333229 pages reserved
0 pages cma reserved
syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
syz-executor.4 cpuset=syz4 mems_allowed=0-1
CPU: 1 PID: 11347 Comm: syz-executor.4 Not tainted 4.14.150 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x197 lib/dump_stack.c:53
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
 __vmalloc_node_range mm/vmalloc.c:1786 [inline]
 __vmalloc_node_range+0x3c3/0x6a0 mm/vmalloc.c:1746
 __vmalloc_node mm/vmalloc.c:1815 [inline]
 __vmalloc_node_flags mm/vmalloc.c:1829 [inline]
 vmalloc+0x46/0x50 mm/vmalloc.c:1851
 sel_write_load+0x1a0/0x1050 security/selinux/selinuxfs.c:495
 __vfs_write+0x105/0x6b0 fs/read_write.c:480
 vfs_write+0x198/0x500 fs/read_write.c:544
 SYSC_write fs/read_write.c:590 [inline]
 SyS_write+0xfd/0x230 fs/read_write.c:582
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459f39
RSP: 002b:00007fe964496c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39
RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9644976d4
R13: 00000000004ca6ca R14: 00000000004e26a0 R15: 00000000ffffffff
syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
syz-executor.4 cpuset=syz4 mems_allowed=0-1
CPU: 0 PID: 11367 Comm: syz-executor.4 Not tainted 4.14.150 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x197 lib/dump_stack.c:53
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
 __vmalloc_node_range mm/vmalloc.c:1786 [inline]
 __vmalloc_node_range+0x3c3/0x6a0 mm/vmalloc.c:1746
 __vmalloc_node mm/vmalloc.c:1815 [inline]
 __vmalloc_node_flags mm/vmalloc.c:1829 [inline]
 vmalloc+0x46/0x50 mm/vmalloc.c:1851
 sel_write_load+0x1a0/0x1050 security/selinux/selinuxfs.c:495
 __vfs_write+0x105/0x6b0 fs/read_write.c:480
 vfs_write+0x198/0x500 fs/read_write.c:544
 SYSC_write fs/read_write.c:590 [inline]
 SyS_write+0xfd/0x230 fs/read_write.c:582
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459f39
RSP: 002b:00007fe964496c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39
RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9644976d4
R13: 00000000004ca6ca R14: 00000000004e26a0 R15: 00000000ffffffff
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
active_anon:176906 inactive_anon:193 isolated_anon:0
 active_file:8366 inactive_file:12201 isolated_file:0
 unevictable:0 dirty:303 writeback:0 unstable:0
 slab_reclaimable:10988 slab_unreclaimable:122187
 mapped:59257 shmem:258 pagetables:1782 bounce:0
 free:1205168 free_pcp:119 free_cma:0
Node 0 active_anon:705948kB inactive_anon:772kB active_file:33316kB inactive_file:47204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236928kB dirty:1200kB writeback:0kB shmem:1032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 1 active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 2580 2580 2580
Node 0 DMA32 free:1020340kB min:36468kB low:45584kB high:54700kB active_anon:704016kB inactive_anon:772kB active_file:33316kB inactive_file:47604kB unevictable:0kB writepending:1200kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:8288kB pagetables:7128kB bounce:0kB free_pcp:976kB local_pcp:664kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 1 Normal free:3785596kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:12kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 6677*4kB (UME) 1414*8kB (UME) 837*16kB (UME) 467*32kB (UME) 156*64kB (UME) 25*128kB (UE) 10*256kB (U) 10*512kB (UME) 1*1024kB (M) 2*2048kB (UM) 230*4096kB (M) = 1034420kB
Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
Node 1 Normal: 59*4kB (UME) 348*8kB (UME) 275*16kB (UME) 58*32kB (UM) 11*64kB (U) 9*128kB (U) 10*256kB (UME) 1*512kB (E) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785596kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
19789 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
333229 pages reserved
0 pages cma reserved
syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
syz-executor.4 cpuset=syz4 mems_allowed=0-1
CPU: 1 PID: 11412 Comm: syz-executor.4 Not tainted 4.14.150 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x197 lib/dump_stack.c:53
 warn_alloc.cold+0x96/0x1af mm/page_alloc.c:3248
 __vmalloc_node_range mm/vmalloc.c:1786 [inline]
 __vmalloc_node_range+0x3c3/0x6a0 mm/vmalloc.c:1746
 __vmalloc_node mm/vmalloc.c:1815 [inline]
 __vmalloc_node_flags mm/vmalloc.c:1829 [inline]
 vmalloc+0x46/0x50 mm/vmalloc.c:1851
 sel_write_load+0x1a0/0x1050 security/selinux/selinuxfs.c:495
 __vfs_write+0x105/0x6b0 fs/read_write.c:480
 vfs_write+0x198/0x500 fs/read_write.c:544
 SYSC_write fs/read_write.c:590 [inline]
 SyS_write+0xfd/0x230 fs/read_write.c:582
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459f39
RSP: 002b:00007fe964496c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39
RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9644976d4
R13: 00000000004ca6ca R14: 00000000004e26a0 R15: 00000000ffffffff
Mem-Info:
active_anon:177423 inactive_anon:195 isolated_anon:0
 active_file:8367 inactive_file:12024 isolated_file:0
 unevictable:0 dirty:315 writeback:0 unstable:0
 slab_reclaimable:10988 slab_unreclaimable:121813
 mapped:59229 shmem:258 pagetables:1837 bounce:0
 free:1205133 free_pcp:200 free_cma:0
Node 0 active_anon:709692kB inactive_anon:780kB active_file:33320kB inactive_file:48396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236916kB dirty:1248kB writeback:0kB shmem:1032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 352256kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 1 active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 2580 2580 2580
Node 0 DMA32 free:1017420kB min:36468kB low:45584kB high:54700kB active_anon:709692kB inactive_anon:780kB active_file:33320kB inactive_file:49196kB unevictable:0kB writepending:1248kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:8192kB pagetables:7200kB bounce:0kB free_pcp:1244kB local_pcp:720kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 1 Normal free:3785596kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:12kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
Node 0 DMA32: 6553*4kB (UME) 825*8kB (UME) 398*16kB (UME) 572*32kB (UME) 160*64kB (UME) 26*128kB (UME) 10*256kB (U) 8*512kB (UE) 1*1024kB (M) 3*2048kB (UM) 228*4096kB (M) = 1018764kB
Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
Node 1 Normal: 59*4kB (UME) 348*8kB (UME) 275*16kB (UME) 58*32kB (UM) 11*64kB (U) 9*128kB (U) 10*256kB (UME) 1*512kB (E) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785596kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
19799 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
333229 pages reserved
0 pages cma reserved
sel_write_load: 2 callbacks suppressed
SELinux: failed to load policy
SELinux: failed to load policy
SELinux: failed to load policy
SELinux: failed to load policy
SELinux: failed to load policy
SELinux: failed to load policy
SELinux: failed to load policy
SELinux: failed to load policy
SELinux: failed to load policy
SELinux: failed to load policy

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/25 18:15 linux-4.14.y b98aebd29824 04ca72cd .config console log report ci2-linux-4-14
2019/10/14 12:47 linux-4.14.y e132c8d7b58d a6aef847 .config console log report ci2-linux-4-14
2019/10/03 12:30 linux-4.14.y f6e27dbb1afa fc17ba49 .config console log report ci2-linux-4-14
2019/08/31 12:57 linux-4.14.y 01fd1694b93c bcd7bcc2 .config console log report ci2-linux-4-14
2019/08/23 22:12 linux-4.14.y 45f092f9e9cb 78ded196 .config console log report ci2-linux-4-14
2019/07/24 15:58 linux-4.14.y ff33472c282e 32329ceb .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.