Page Allocation Failure with kcs-term

Solution Verified - Updated -

Issue

  • Despite the presence of available order:0 pages as reported in /proc/buddyinfo, the kcs-term (CrowdStrike) process is encountering frequent page allocation failures with the message:
    kernel: kcs-term: page allocation failure: order:0, mode:0xc0(__GFP_IO|__GFP_FS), nodemask=(null),cpuset=/,mems_allowed=0-1
    kernel: CPU: 43 PID: 2577 Comm: kcs-term Kdump: loaded Tainted: P            E     -------  ---  5.14.0-427.37.1.el9_4.x86_64 #1
    kernel: Hardware name: Cisco Systems Inc UCSC-C240-M5L/UCSC-C240-M5L, BIOS C240M5.4.3.2a.0.0613231011 06/13/2023
    kernel: Call Trace:
    kernel: <TASK>
    kernel: dump_stack_lvl+0x34/0x48
    kernel: warn_alloc+0x138/0x160
    kernel: __alloc_pages_slowpath.constprop.0+0x8ac/0x960
    kernel: ? get_page_from_freelist+0x24d/0x530
    kernel: __alloc_pages+0x21d/0x250
    kernel: allocate_slab+0x352/0x490
    kernel: ? get_any_partial+0x6c/0x190
    kernel: ___slab_alloc+0x35d/0x7c0
    kernel: ? cshook_systemcalltable_pre_compat_sys_ioctl+0x715b/0x3dc70 [falcon_lsm_serviceable]
    kernel: ? kmem_cache_free+0x15/0x360
    kernel: ? cshook_security_inode_free_security+0x7d2d/0x13450 [falcon_lsm_serviceable]
    kernel: ? cshook_systemcalltable_pre_compat_sys_ioctl+0x715b/0x3dc70 [falcon_lsm_serviceable]
    kernel: kmem_cache_alloc+0x2d4/0x340
    kernel: cshook_systemcalltable_pre_compat_sys_ioctl+0x715b/0x3dc70 [falcon_lsm_serviceable]
    kernel: _ZdlPvmSt11align_val_t+0x743c4/0x8aa40 [falcon_lsm_serviceable]
    kernel: ? _ZdlPvmSt11align_val_t+0x74056/0x8aa40 [falcon_lsm_serviceable]
    kernel: _ZdlPvmSt11align_val_t+0x749ca/0x8aa40 [falcon_lsm_serviceable]
    kernel: _ZdlPvmSt11align_val_t+0x74bd7/0x8aa40 [falcon_lsm_serviceable]
    kernel: cshook_systemcalltable_pre_compat_sys_ioctl+0x138c7/0x3dc70 [falcon_lsm_serviceable]
    kernel: cshook_systemcalltable_pre_compat_sys_ioctl+0x144bc/0x3dc70 [falcon_lsm_serviceable]
    kernel: ? cshook_systemcalltable_pre_compat_sys_ioctl+0x35320/0x3dc70 [falcon_lsm_serviceable]
    kernel: cshook_security_sb_free_security+0x1d74/0x4cc0 [falcon_lsm_serviceable]
    kernel: ? __wait_for_common+0x19a/0x1d0
    kernel: ? __pfx_schedule_timeout+0x10/0x10
    kernel: cshook_security_sb_free_security+0x1eb0/0x4cc0 [falcon_lsm_serviceable]
    kernel: cshook_network_ops_inet6_sockraw_release+0x17739/0x21160 [falcon_lsm_serviceable]
    kernel: ? cshook_network_ops_inet6_sockraw_release+0x17720/0x21160 [falcon_lsm_serviceable]
    kernel: cshook_systemcalltable_pre_compat_sys_ioctl+0x35350/0x3dc70 [falcon_lsm_serviceable]
    kernel: kthread+0xdd/0x100
    kernel: ? __pfx_kthread+0x10/0x10
    kernel: ret_from_fork+0x29/0x50

Environment

  • Red Hat Enterprise Linux (RHEL) 9.4 x86_64
  • falcon_lsm_serviceable

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content