syz-executor.4: vmalloc error: size 4416, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 CPU: 1 PID: 11695 Comm: syz-executor.4 Not tainted 6.0.0-rc1-next-20220818-syzkaller #0 BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1521 in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 11695, name: syz-executor.4 preempt_count: 0, expected: 0 RCU nest depth: 0, expected: 0 no locks held by syz-executor.4/11695. irq event stamp: 4820 hardirqs last enabled at (4819): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1352 [inline] hardirqs last enabled at (4819): [] finish_lock_switch kernel/sched/core.c:4956 [inline] hardirqs last enabled at (4819): [] finish_task_switch.isra.0+0x2b5/0xc70 kernel/sched/core.c:5074 hardirqs last disabled at (4820): [] dump_stack_lvl+0x2e/0x134 lib/dump_stack.c:139 softirqs last enabled at (4812): [] invoke_softirq kernel/softirq.c:445 [inline] softirqs last enabled at (4812): [] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650 softirqs last disabled at (4009): [] invoke_softirq kernel/softirq.c:445 [inline] softirqs last disabled at (4009): [] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650 CPU: 1 PID: 11695 Comm: syz-executor.4 Not tainted 6.0.0-rc1-next-20220818-syzkaller #0 syz-executor.4[11695] cmdline: /root/syz-executor.4 exec Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:122 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:140 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9896 down_read_killable+0x75/0x490 kernel/locking/rwsem.c:1521 mmap_read_lock_killable include/linux/mmap_lock.h:126 [inline] __access_remote_vm+0xac/0x6f0 mm/memory.c:5461 get_mm_cmdline.part.0+0x217/0x620 fs/proc/base.c:299 get_mm_cmdline fs/proc/base.c:367 [inline] get_task_cmdline_kernel+0x1d9/0x220 fs/proc/base.c:367 dump_stack_print_cmdline.part.0+0x82/0x150 lib/dump_stack.c:61 dump_stack_print_cmdline lib/dump_stack.c:89 [inline] dump_stack_print_info+0x185/0x190 lib/dump_stack.c:97 __dump_stack lib/dump_stack.c:121 [inline] dump_stack_lvl+0xc1/0x134 lib/dump_stack.c:140 warn_alloc.cold+0x9b/0x189 mm/page_alloc.c:4356 __vmalloc_node_range+0xdf5/0x13a0 mm/vmalloc.c:3161 __vmalloc_node mm/vmalloc.c:3261 [inline] vmalloc+0x67/0x80 mm/vmalloc.c:3294 netlink_alloc_large_skb net/netlink/af_netlink.c:1196 [inline] netlink_sendmsg+0x690/0xe10 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:734 sock_no_sendpage+0x108/0x150 net/core/sock.c:3163 kernel_sendpage.part.0+0x1d5/0x700 net/socket.c:3561 kernel_sendpage net/socket.c:3558 [inline] sock_sendpage+0xdf/0x140 net/socket.c:1054 pipe_to_sendpage+0x2ad/0x380 fs/splice.c:361 splice_from_pipe_feed fs/splice.c:415 [inline] __splice_from_pipe+0x445/0x8a0 fs/splice.c:559 splice_from_pipe fs/splice.c:594 [inline] generic_splice_sendpage+0xd4/0x140 fs/splice.c:743 do_splice_from fs/splice.c:764 [inline] direct_splice_actor+0x110/0x180 fs/splice.c:931 splice_direct_to_actor+0x331/0x8a0 fs/splice.c:886 do_splice_direct+0x1a7/0x270 fs/splice.c:974 do_sendfile+0xb19/0x1270 fs/read_write.c:1249 __do_sys_sendfile64 fs/read_write.c:1317 [inline] __se_sys_sendfile64 fs/read_write.c:1303 [inline] __x64_sys_sendfile64+0x1cc/0x210 fs/read_write.c:1303 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f05e0489279 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f05e1534168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007f05e059bf80 RCX: 00007f05e0489279 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 RBP: 00007f05e15341d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000100000c1d R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffefef6decf R14: 00007f05e1534300 R15: 0000000000022000 syz-executor.4[11695] cmdline: /root/syz-executor.4 exec Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:122 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:140 warn_alloc.cold+0x9b/0x189 mm/page_alloc.c:4356 __vmalloc_node_range+0xdf5/0x13a0 mm/vmalloc.c:3161 __vmalloc_node mm/vmalloc.c:3261 [inline] vmalloc+0x67/0x80 mm/vmalloc.c:3294 netlink_alloc_large_skb net/netlink/af_netlink.c:1196 [inline] netlink_sendmsg+0x690/0xe10 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:734 sock_no_sendpage+0x108/0x150 net/core/sock.c:3163 kernel_sendpage.part.0+0x1d5/0x700 net/socket.c:3561 kernel_sendpage net/socket.c:3558 [inline] sock_sendpage+0xdf/0x140 net/socket.c:1054 pipe_to_sendpage+0x2ad/0x380 fs/splice.c:361 splice_from_pipe_feed fs/splice.c:415 [inline] __splice_from_pipe+0x445/0x8a0 fs/splice.c:559 splice_from_pipe fs/splice.c:594 [inline] generic_splice_sendpage+0xd4/0x140 fs/splice.c:743 do_splice_from fs/splice.c:764 [inline] direct_splice_actor+0x110/0x180 fs/splice.c:931 splice_direct_to_actor+0x331/0x8a0 fs/splice.c:886 do_splice_direct+0x1a7/0x270 fs/splice.c:974 do_sendfile+0xb19/0x1270 fs/read_write.c:1249 __do_sys_sendfile64 fs/read_write.c:1317 [inline] __se_sys_sendfile64 fs/read_write.c:1303 [inline] __x64_sys_sendfile64+0x1cc/0x210 fs/read_write.c:1303 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f05e0489279 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f05e1534168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007f05e059bf80 RCX: 00007f05e0489279 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 RBP: 00007f05e15341d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000100000c1d R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffefef6decf R14: 00007f05e1534300 R15: 0000000000022000 Mem-Info: active_anon:696 inactive_anon:245055 isolated_anon:0 active_file:11202 inactive_file:958 isolated_file:0 unevictable:768 dirty:232 writeback:0 slab_reclaimable:20225 slab_unreclaimable:95831 mapped:18625 shmem:1761 pagetables:971 bounce:0 kernel_misc_reclaimable:0 free:1193872 free_pcp:9998 free_cma:0 Node 0 active_anon:2784kB inactive_anon:980220kB active_file:44728kB inactive_file:3832kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:74500kB dirty:924kB writeback:0kB shmem:5508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 49152kB writeback_tmp:0kB kernel_stack:10412kB pagetables:3880kB all_unreclaimable? no Node 1 active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2631 2632 2632 2632 Node 0 DMA32 free:826288kB boost:0kB min:35556kB low:44444kB high:53332kB reserved_highatomic:0KB active_anon:2780kB inactive_anon:979988kB active_file:43968kB inactive_file:3432kB unevictable:1536kB writepending:688kB present:3129332kB managed:2699792kB mlocked:0kB bounce:0kB free_pcp:21160kB local_pcp:13092kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:860kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:912kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:3933836kB boost:0kB min:54336kB low:67920kB high:81504kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19552kB local_pcp:9504kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB Node 0 DMA32: 481*4kB (UE) 1159*8kB (UE) 1437*16kB (UE) 250*32kB (UE) 34*64kB (UE) 47*128kB (UE) 7*256kB (UME) 2*512kB (U) 4*1024kB (UME) 3*2048kB (UME) 186*4096kB (M) = 825292kB Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB Node 1 Normal: 211*4kB (UME) 34*8kB (UME) 23*16kB (UME) 32*32kB (UME) 21*64kB (UME) 19*128kB (UME) 8*256kB (UME) 3*512kB (UM) 0*1024kB 0*2048kB 958*4096kB (ME) = 3933836kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB 13963 total pagecache pages 0 pages in swap cache Free swap = 0kB Total swap = 0kB 2097051 pages RAM 0 pages HighMem/MovableOnly 388630 pages reserved 0 pages cma reserved