syzbot

 sign-in | mailing list | source | docs
🐞 Open [1646]
≡ Subsystems
🐞 Fixed [6009]
🐞 Invalid [14804]
⬇ Missing Backports [135]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

kernel BUG in __page_table_check_zero

Status: fixed on 2024/10/22 13:24
Subsystems: usb
[Documentation on labels]
Reported-by: syzbot+7a9bbb158a7a1071eb27@syzkaller.appspotmail.com
Fix commit: 79a61cc3fc04 mm: avoid leaving partial pfn mappings around in error case
First crash: 621d, last: 130d
Cause bisection: failed (error log, bisect log)
  
Fix bisection: fixed by (bisect log) :
commit 79a61cc3fc0466ad2b7b89618a6157785f0293b3
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date: Thu Sep 12 00:11:23 2024 +0000

  mm: avoid leaving partial pfn mappings around in error case

  
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [mm?] kernel BUG in __page_table_check_zero 2 (7) 2024/10/21 14:17
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in __page_table_check_zero (2) mm C error done 32 79d 89d 0/28 auto-obsoleted due to no activity on 2025/01/19 02:16
linux-6.1 kernel BUG in __page_table_check_zero origin:lts-only C inconclusive 3 129d 590d 0/3 upstream: reported C repro on 2023/06/18 21:38
▶ ▼ Last patch testing requests (13)
Created Duration User Patch Repo Result
2024/09/20 02:37 19m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
2024/09/20 01:14 21m retest repro upstream OK log
2024/09/20 01:14 23m retest repro upstream OK log
2024/09/20 01:14 30m retest repro linux-next OK log
2024/08/26 03:38 23m retest repro upstream report log
2024/08/26 03:38 23m retest repro upstream report log
2024/08/26 03:38 15m retest repro upstream report log
2024/07/03 11:03 2h10m retest repro upstream report log
2024/07/03 11:03 22m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
2024/06/16 17:24 16m retest repro upstream report log
2023/11/10 18:06 20m yuran.pereira@hotmail.com patch https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux.git master error
2023/11/10 17:28 21m yuran.pereira@hotmail.com patch https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux.git master error
2023/11/10 15:22 14m yuran.pereira@hotmail.com patch https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux.git master report log
▶ ▼ Fix bisection attempts (2)
Created Duration User Patch Repo Result
2024/10/20 12:04 6h06m bisect fix upstream OK (1) job log
2024/01/03 10:15 1h52m bisect fix upstream OK (0) job log log
▶ ▼ Cause bisection attempts (2)
Created Duration User Patch Repo Result
2023/11/25 11:59 12h09m bisect upstream error job log
2023/05/18 06:36 12h04m bisect upstream error job log
marked invalid by nogikh@google.com

Sample crash report:
------------[ cut here ]------------
kernel BUG at mm/page_table_check.c:157!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 1 PID: 5095 Comm: syz-executor223 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:__page_table_check_zero+0x274/0x350 mm/page_table_check.c:157
Code: c1 0f 8c 39 fe ff ff 48 89 df e8 97 41 f4 ff e9 2c fe ff ff e8 5d 8c 8e ff 90 0f 0b e8 55 8c 8e ff 90 0f 0b e8 4d 8c 8e ff 90 <0f> 0b f3 0f 1e fa 4c 89 f6 48 81 e6 ff 0f 00 00 31 ff e8 15 91 8e
RSP: 0018:ffffc9000356f938 EFLAGS: 00010293
RAX: ffffffff82079b03 RBX: dffffc0000000000 RCX: ffff8880201f9e00
RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801901936c
RBP: ffff88801901936c R08: ffff88801901936f R09: 1ffff1100320326d
R10: dffffc0000000000 R11: ffffed100320326e R12: ffff888019019320
R13: 1ffffffff2901988 R14: 0000000000000000 R15: 0000000000000000
FS:  000055557ccec380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f53c45260f0 CR3: 000000001ec26000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 page_table_check_free include/linux/page_table_check.h:41 [inline]
 free_pages_prepare mm/page_alloc.c:1094 [inline]
 free_unref_page+0xd36/0xea0 mm/page_alloc.c:2588
 dec_usb_memory_use_count+0x259/0x350 drivers/usb/core/devio.c:198
 mmap_region+0x13b4/0x2090 mm/mmap.c:3005
 do_mmap+0x8ad/0xfa0 mm/mmap.c:1397
 vm_mmap_pgoff+0x1dd/0x3d0 mm/util.c:573
 ksys_mmap_pgoff+0x4f1/0x720 mm/mmap.c:1443
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f53c44af879
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffeb7440f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f53c44af879
RDX: 0000000001000006 RSI: 0000000000001000 RDI: 0000000020527000
RBP: 00007f53c45225f0 R08: 0000000000000003 R09: 0000000000000000
R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__page_table_check_zero+0x274/0x350 mm/page_table_check.c:157
Code: c1 0f 8c 39 fe ff ff 48 89 df e8 97 41 f4 ff e9 2c fe ff ff e8 5d 8c 8e ff 90 0f 0b e8 55 8c 8e ff 90 0f 0b e8 4d 8c 8e ff 90 <0f> 0b f3 0f 1e fa 4c 89 f6 48 81 e6 ff 0f 00 00 31 ff e8 15 91 8e
RSP: 0018:ffffc9000356f938 EFLAGS: 00010293
RAX: ffffffff82079b03 RBX: dffffc0000000000 RCX: ffff8880201f9e00
RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801901936c
RBP: ffff88801901936c R08: ffff88801901936f R09: 1ffff1100320326d
R10: dffffc0000000000 R11: ffffed100320326e R12: ffff888019019320
R13: 1ffffffff2901988 R14: 0000000000000000 R15: 0000000000000000
FS:  000055557ccec380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f53c45260f0 CR3: 000000001ec26000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (213):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/05 02:16 upstream 795c58e4c7fc dc6bbff0 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in __page_table_check_zero
2024/02/12 05:13 upstream 841c35169323 77b23aa1 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in __page_table_check_zero
2023/05/18 06:32 upstream 1b66c114d161 3bb7af1d .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in __page_table_check_zero
2024/02/26 19:06 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 9abbc24128bc edd6a5e9 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in __page_table_check_zero
2024/09/06 01:09 upstream c763c4339688 464ac2ed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in __page_table_check_zero
2024/08/28 14:22 upstream 86987d84b968 940f38c1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in __page_table_check_zero
2024/08/07 08:03 upstream eb5e56d14912 e1bdb00a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in __page_table_check_zero
2024/07/27 07:23 upstream 2f8c4f506285 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in __page_table_check_zero
2024/07/27 07:12 upstream 2f8c4f506285 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root kernel BUG in __page_table_check_zero
2024/07/26 17:23 upstream 1722389b0d86 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in __page_table_check_zero
2024/07/22 18:26 upstream 933069701c1b f063dfd9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in __page_table_check_zero
2024/07/21 13:41 upstream 2c9b3512402e b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root kernel BUG in __page_table_check_zero
2024/07/21 08:54 upstream 2c9b3512402e b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in __page_table_check_zero
2024/07/21 07:10 upstream 2c9b3512402e b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in __page_table_check_zero
2024/07/09 00:05 upstream 256abd8e550c cde64f7d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in __page_table_check_zero
2024/07/05 01:19 upstream 795c58e4c7fc dc6bbff0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in __page_table_check_zero
2024/05/31 20:58 upstream 4a4be1ad3a6e 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in __page_table_check_zero
2024/05/31 19:32 upstream 4a4be1ad3a6e 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in __page_table_check_zero
2024/05/29 02:13 upstream e0cce98fe279 34889ee3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root kernel BUG in __page_table_check_zero
2024/05/28 23:40 upstream e0cce98fe279 34889ee3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in __page_table_check_zero
2024/05/28 22:20 upstream e0cce98fe279 34889ee3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in __page_table_check_zero
2024/05/19 12:18 upstream 0450d2083be6 c0f1611a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root kernel BUG in __page_table_check_zero
2024/05/19 10:37 upstream 0450d2083be6 c0f1611a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in __page_table_check_zero
2024/05/12 01:59 upstream cf87f46fd34d 9026e142 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in __page_table_check_zero
2024/04/26 05:52 upstream e33c4963bf53 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in __page_table_check_zero
2024/04/25 09:41 upstream e88c4cfcb7b8 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in __page_table_check_zero
2024/04/25 09:41 upstream e88c4cfcb7b8 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in __page_table_check_zero
2024/04/25 09:39 upstream e88c4cfcb7b8 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in __page_table_check_zero
2024/04/05 21:31 upstream fe46a7dd189e 18ea8213 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in __page_table_check_zero
2024/04/05 19:16 upstream fe46a7dd189e 18ea8213 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in __page_table_check_zero
2023/10/04 05:45 upstream cbf3a2cb156a 65faba36 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in __page_table_check_zero
2023/09/24 17:39 upstream 3aba70aed91f 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in __page_table_check_zero
2023/06/23 15:07 upstream 8a28a0b6f1a1 09ffe269 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in __page_table_check_zero
2024/07/26 13:19 upstream 1722389b0d86 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 kernel BUG in __page_table_check_zero
2024/06/01 20:45 upstream cc8ed4d0a848 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 kernel BUG in __page_table_check_zero
2024/06/01 03:23 upstream d8ec19857b09 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 kernel BUG in __page_table_check_zero
2024/05/25 13:16 upstream 0b32d436c015 a10a183e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 kernel BUG in __page_table_check_zero
2024/04/05 20:03 upstream fe46a7dd189e 18ea8213 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 kernel BUG in __page_table_check_zero
2024/07/29 00:52 upstream 5437f30d3458 46eb10b7 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in __page_table_check_zero
2024/08/12 03:30 upstream cb2e5ee8e7a0 6f4edef4 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in __page_table_check_zero
2024/08/06 06:50 upstream c813111d19e6 e1bdb00a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in __page_table_check_zero
2024/07/21 17:48 upstream 2c9b3512402e b88348e9 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-compat kernel BUG in __page_table_check_zero
2024/04/27 18:47 upstream 5eb4573ea63d 07b455f9 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in __page_table_check_zero
2024/04/25 09:39 upstream e88c4cfcb7b8 21339d7b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64 kernel BUG in __page_table_check_zero
2024/04/17 12:51 upstream 96fca68c4fbf 18f6e127 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-compat kernel BUG in __page_table_check_zero
2024/07/27 08:54 linux-next 668d33c9ff92 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __page_table_check_zero
2024/07/26 15:33 linux-next 668d33c9ff92 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __page_table_check_zero
2024/07/21 05:54 linux-next 41c196e567fb b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __page_table_check_zero
2024/06/01 20:42 linux-next 0e1980c40b6e 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __page_table_check_zero
2024/05/28 20:37 linux-next 6dc544b66971 34889ee3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __page_table_check_zero
2024/05/25 11:44 linux-next 3689b0ef08b7 a10a183e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __page_table_check_zero
2024/05/19 10:39 linux-next c75962170e49 c0f1611a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __page_table_check_zero
2024/04/26 18:22 linux-next bb7a2467e6be 059e9963 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __page_table_check_zero
2024/04/05 18:56 linux-next 8568bb2ccc27 18ea8213 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __page_table_check_zero
2023/08/03 02:58 linux-next 626c67169f99 39a91c18 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __page_table_check_zero
2024/07/27 05:55 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci c912bf709078 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in __page_table_check_zero
2024/07/26 13:04 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci c912bf709078 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in __page_table_check_zero
2024/07/21 05:10 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci c912bf709078 b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in __page_table_check_zero
2024/05/25 10:40 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci fda5695d692c a10a183e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in __page_table_check_zero
2024/05/15 07:54 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci fda5695d692c fdb4c10c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in __page_table_check_zero
2024/04/27 18:38 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 6a71d2909427 07b455f9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in __page_table_check_zero
2024/04/17 05:20 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci b5d2afe8745b 18f6e127 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in __page_table_check_zero
* Struck through repros no longer work on HEAD.