syzbot


general protection fault in unlink_anon_vmas

Status: auto-closed as invalid on 2020/12/19 02:16
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+f86b1549602d33194e84@syzkaller.appspotmail.com
First crash: 1369d, last: 1312d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in unlink_anon_vmas (2) mm 6 885d 977d 0/26 auto-closed as invalid on 2022/03/21 03:47
linux-4.19 general protection fault in unlink_anon_vmas 1 1113d 1113d 0/1 auto-closed as invalid on 2021/08/05 10:09
linux-4.14 general protection fault in unlink_anon_vmas 1 1094d 1094d 0/1 auto-closed as invalid on 2021/08/23 18:22

Sample crash report:
general protection fault, probably for non-canonical address 0xe000ea0000ee0023: 0000 [#1] PREEMPT SMP KASAN
KASAN: maybe wild-memory-access in range [0x0007700007700118-0x000770000770011f]
CPU: 1 PID: 18036 Comm: systemd-udevd Not tainted 5.9.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:unlink_anon_vmas+0x272/0x830 mm/rmap.c:409
Code: 00 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 5b 05 00 00 49 8b ac 24 a8 00 00 00 48 8d bd a4 00 00 00 48 89 f8 48 c1 e8 03 <0f> b6 14 18 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 36
RSP: 0018:ffffc90018227bd0 EFLAGS: 00010202
RAX: 0000ee0000ee0023 RBX: dffffc0000000000 RCX: ffffffff81a4b70b
RDX: ffff888208ee8180 RSI: ffffffff81abe0f3 RDI: 000770000770011b
RBP: 0007700007700077 R08: ffff88800010f7b0 R09: ffff888096e6fb17
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88800010f700
R13: ffff88802d5aecb0 R14: ffff888096e6fb00 R15: ffff88802d5aee80
FS:  0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055aa6cd41160 CR3: 0000000212370000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 free_pgtables+0x1ab/0x2f0 mm/memory.c:416
 exit_mmap+0x2c0/0x530 mm/mmap.c:3184
 __mmput+0x122/0x470 kernel/fork.c:1076
 mmput+0x53/0x60 kernel/fork.c:1097
 exit_mm kernel/exit.c:483 [inline]
 do_exit+0xa8b/0x29f0 kernel/exit.c:793
 do_group_exit+0x125/0x310 kernel/exit.c:903
 __do_sys_exit_group kernel/exit.c:914 [inline]
 __se_sys_exit_group kernel/exit.c:912 [inline]
 __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:912
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7fcfe52ed618
Code: Bad RIP value.
RSP: 002b:00007ffdc7b05698 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007ffdc7b05760 RCX: 00007fcfe52ed618
RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000
RBP: 00007ffdc7b05810 R08: 00000000000000e7 R09: fffffffffffffe50
R10: 00000000ffffffff R11: 0000000000000202 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000003 R15: 000000000000000e
Modules linked in:
---[ end trace 948a317a278843a0 ]---
RIP: 0010:unlink_anon_vmas+0x272/0x830 mm/rmap.c:409
Code: 00 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 5b 05 00 00 49 8b ac 24 a8 00 00 00 48 8d bd a4 00 00 00 48 89 f8 48 c1 e8 03 <0f> b6 14 18 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 36
RSP: 0018:ffffc90018227bd0 EFLAGS: 00010202
RAX: 0000ee0000ee0023 RBX: dffffc0000000000 RCX: ffffffff81a4b70b
RDX: ffff888208ee8180 RSI: ffffffff81abe0f3 RDI: 000770000770011b
RBP: 0007700007700077 R08: ffff88800010f7b0 R09: ffff888096e6fb17
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88800010f700
R13: ffff88802d5aecb0 R14: ffff888096e6fb00 R15: ffff88802d5aee80
FS:  0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055aa6cd41160 CR3: 0000000212370000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/09/20 02:15 upstream eb5f95f1593f 53ce8104 .config console log report info ci-upstream-kasan-gce
2020/09/03 15:40 upstream fc3abb53250a abf9ba4f .config console log report ci-upstream-kasan-gce
2020/08/03 11:47 upstream bcf876870b95 196277c4 .config console log report ci-upstream-kasan-gce-root
2020/07/24 19:46 upstream f37e99aca03f 554af388 .config console log report ci-upstream-kasan-gce-selinux-root
* Struck through repros no longer work on HEAD.