syzbot


kernel BUG in memory_bm_free

Status: fixed on 2021/03/15 15:03
Subsystems: pm
[Documentation on labels]
Reported-by: syzbot+5ecbe63baca437585bd4@syzkaller.appspotmail.com
Fix commit: 91cb2c8b072e arm64: Do not pass tagged addresses to __is_lm_address()
First crash: 1391d, last: 1386d
Discussions (1)
Title Replies (including bot) Last reply
kernel BUG in memory_bm_free 4 (5) 2021/03/15 12:26

Sample crash report:
------------[ cut here ]------------
kernel BUG at kernel/power/snapshot.c:257!
Internal error: Oops - BUG: 0 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 16405 Comm: syz-executor.1 Not tainted 5.11.0-rc6-syzkaller-00055-g3aaf0a27ffc2 #0
Hardware name: linux,dummy-virt (DT)
pstate: 20400009 (nzCv daif +PAN -UAO -TCO BTYPE=--)
pc : free_image_page kernel/power/snapshot.c:257 [inline]
pc : free_image_page kernel/power/snapshot.c:253 [inline]
pc : free_list_of_pages kernel/power/snapshot.c:274 [inline]
pc : memory_bm_free+0x260/0x320 kernel/power/snapshot.c:726
lr : free_basic_memory_bitmaps+0x3c/0x90 kernel/power/snapshot.c:1173
sp : ffff80001e56bc50
x29: ffff80001e56bc50 x28: f3ff00002917d070 
x27: ffff800012d4c000 x26: f3ff00002917d008 
x25: f9ff00000b5a7500 x24: ffff800012d4c000 
x23: 00007fffffffffff x22: f3ff00002917d018 
x21: 0000000000000001 x20: ffff800013b576d0 
x19: f9ff00000b5a7500 x18: 0000000000000000 
x17: 0000000000000000 x16: 0000000000000000 
x15: 0000000000000000 x14: 0000000000000000 
x13: 0000000000000000 x12: 0000000000000000 
x11: 0000000000000000 x10: 0000000000000000 
x9 : 0000000000000000 x8 : 0000000000000000 
x7 : 0000000000000000 x6 : 00000000000001ff 
x5 : 0000000000000000 x4 : 0000000000000000 
x3 : ffff800013b576d0 x2 : f2ff0000048fb000 
x1 : 0000000000000001 x0 : 0d000000048fb000 
Call trace:
 free_image_page kernel/power/snapshot.c:257 [inline]
 free_list_of_pages kernel/power/snapshot.c:274 [inline]
 memory_bm_free+0x260/0x320 kernel/power/snapshot.c:726
 free_basic_memory_bitmaps+0x3c/0x90 kernel/power/snapshot.c:1173
 snapshot_release+0x74/0x90 kernel/power/user.c:120
 __fput+0x78/0x230 fs/file_table.c:280
 ____fput+0x10/0x20 fs/file_table.c:313
 task_work_run+0x80/0x160 kernel/task_work.c:140
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 do_notify_resume+0x20c/0x13e0 arch/arm64/kernel/signal.c:939
 work_pending+0xc/0x3d4
Code: cb000260 d34cfc00 97fcf6fe 35fffc20 (d4210000) 
---[ end trace c9c3c2824d1298f0 ]---

Crashes (72):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/02/03 20:10 upstream 3aaf0a27ffc2 624dad51 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/03 18:45 upstream 3aaf0a27ffc2 624dad51 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/03 16:17 upstream 3aaf0a27ffc2 624dad51 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/03 15:05 upstream 3aaf0a27ffc2 624dad51 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/03 13:35 upstream 3aaf0a27ffc2 624dad51 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/03 12:31 upstream 3aaf0a27ffc2 624dad51 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/03 09:47 upstream 3aaf0a27ffc2 624dad51 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/03 09:14 upstream 3aaf0a27ffc2 624dad51 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/03 04:25 upstream 3aaf0a27ffc2 624dad51 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/03 02:18 upstream 3aaf0a27ffc2 624dad51 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/02 18:46 upstream 88bb507a74ea 19e09687 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/02 16:10 upstream 88bb507a74ea 19e09687 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/02 14:40 upstream 88bb507a74ea 19e09687 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/02 13:27 upstream 88bb507a74ea 19e09687 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/02 04:29 upstream 88bb507a74ea e6b95f32 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/02 02:58 upstream 88bb507a74ea e6b95f32 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/02 01:51 upstream 88bb507a74ea e6b95f32 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/01 17:44 upstream 1048ba83fb1c e6b95f32 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/01 17:15 upstream 1048ba83fb1c e6b95f32 .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/01 10:06 upstream 1048ba83fb1c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/01 09:35 upstream 1048ba83fb1c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/01 08:52 upstream 1048ba83fb1c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/01 07:11 upstream 1048ba83fb1c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/01 06:41 upstream 1048ba83fb1c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/01 04:28 upstream 1048ba83fb1c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/02/01 03:42 upstream 1048ba83fb1c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 22:31 upstream 6642d600b541 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 22:13 upstream 6642d600b541 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 19:48 upstream 6642d600b541 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 18:46 upstream 6642d600b541 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 17:17 upstream 6642d600b541 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 16:01 upstream 6642d600b541 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 13:23 upstream 6642d600b541 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 13:23 upstream 6642d600b541 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 09:30 upstream 8c947645151c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 06:41 upstream 8c947645151c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 05:47 upstream 8c947645151c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 04:27 upstream 8c947645151c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 03:58 upstream 8c947645151c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 02:20 upstream 8c947645151c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 02:19 upstream 8c947645151c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 02:09 upstream 8c947645151c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 01:54 upstream 8c947645151c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 01:11 upstream 8c947645151c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 00:20 upstream 8c947645151c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/31 00:06 upstream 8c947645151c fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/30 19:29 upstream 0e9bcda5d286 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/30 19:00 upstream 0e9bcda5d286 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/30 18:19 upstream 0e9bcda5d286 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/30 15:44 upstream 0e9bcda5d286 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/30 15:29 upstream 0e9bcda5d286 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/30 14:12 upstream 0e9bcda5d286 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/30 11:30 upstream 0e9bcda5d286 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/30 10:18 upstream 0e9bcda5d286 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/30 10:14 upstream 0e9bcda5d286 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/30 09:59 upstream 0e9bcda5d286 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/30 08:10 upstream 0e9bcda5d286 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
2021/01/30 05:56 upstream 0e9bcda5d286 fc9fd31e .config console log report info ci-qemu2-arm64-mte kernel BUG in memory_bm_free
* Struck through repros no longer work on HEAD.