syzbot


kernel BUG in __tlb_remove_page_size (2)

Status: auto-obsoleted due to no activity on 2023/07/25 18:17
Subsystems: mm arch
[Documentation on labels]
Reported-by: syzbot+d87dd8e018fd2cc2528b@syzkaller.appspotmail.com
First crash: 473d, last: 459d
Cause bisection: failed (error log, bisect log)
  
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] kernel BUG in __tlb_remove_page_size (2) 1 (3) 2023/02/07 14:31
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in __tlb_remove_page_size mm syz unreliable done 4 1045d 1045d 0/26 auto-obsoleted due to no activity on 2022/09/10 08:50
Last patch testing requests (8)
Created Duration User Patch Repo Result
2023/07/25 17:31 22m retest repro linux-next OK log
2023/07/25 17:31 22m retest repro linux-next OK log
2023/05/16 06:30 20m retest repro linux-next error OK
2023/05/16 06:30 20m retest repro linux-next error OK
2023/02/07 14:16 14m dhowells@redhat.com https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git/ iov-fixes report log
2023/02/05 09:44 22m hdanton@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master report log
2023/02/05 08:25 13m hdanton@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 4fafd96910ad report log
2023/02/05 07:25 14m hdanton@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 4fafd96910ad report log

Sample crash report:
 release_pages+0xcb1/0x1330 mm/swap.c:1072
 tlb_batch_pages_flush+0xa8/0x1a0 mm/mmu_gather.c:97
 tlb_flush_mmu_free mm/mmu_gather.c:292 [inline]
 tlb_flush_mmu mm/mmu_gather.c:299 [inline]
 tlb_finish_mmu+0x14b/0x7e0 mm/mmu_gather.c:391
 unmap_region+0x23d/0x2d0 mm/mmap.c:2146
 do_vmi_align_munmap+0x9ca/0xf60 mm/mmap.c:2395
 do_vmi_munmap+0x26e/0x2c0 mm/mmap.c:2452
 __vm_munmap+0x136/0x280 mm/mmap.c:2731
 __do_sys_munmap mm/mmap.c:2756 [inline]
 __se_sys_munmap mm/mmap.c:2753 [inline]
 __x64_sys_munmap+0x59/0x80 mm/mmap.c:2753
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
------------[ cut here ]------------
kernel BUG at mm/mmu_gather.c:139!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 5122 Comm: syz-executor458 Not tainted 6.2.0-rc7-next-20230208-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
RIP: 0010:__tlb_remove_page_size+0x24c/0x480 mm/mmu_gather.c:139
Code: 01 00 00 8b 6d 0c e9 e1 fe ff ff e8 ae 4e c1 ff 0f 0b e8 a7 4e c1 ff 4c 89 f7 48 c7 c6 00 7b 58 8a 48 83 e7 fc e8 04 f6 f9 ff <0f> 0b e8 8d 4e c1 ff 4c 8d 6b 24 48 b8 00 00 00 00 00 fc ff df 4c
RSP: 0018:ffffc90003c7f8d8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffffc90003c7fcd8 RCX: 0000000000000000
RDX: ffff88801dda3a80 RSI: ffffffff81c31f4c RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff8e75bd17
R10: fffffbfff1ceb7a2 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000001 R14: ffffea0001cbbd40 R15: ffffc90003c7fd00
FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8701e621d0 CR3: 0000000072aa7000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __tlb_remove_page include/asm-generic/tlb.h:472 [inline]
 zap_pte_range mm/memory.c:1416 [inline]
 zap_pmd_range mm/memory.c:1536 [inline]
 zap_pud_range mm/memory.c:1565 [inline]
 zap_p4d_range mm/memory.c:1586 [inline]
 unmap_page_range+0x1226/0x3ce0 mm/memory.c:1607
 unmap_single_vma+0x194/0x2a0 mm/memory.c:1653
 unmap_vmas+0x234/0x380 mm/memory.c:1692
 exit_mmap+0x190/0x7d0 mm/mmap.c:3036
 __mmput+0x128/0x4c0 kernel/fork.c:1209
 mmput+0x60/0x70 kernel/fork.c:1231
 exit_mm kernel/exit.c:563 [inline]
 do_exit+0x9d7/0x2b60 kernel/exit.c:856
 do_group_exit+0xd4/0x2a0 kernel/exit.c:1019
 __do_sys_exit_group kernel/exit.c:1030 [inline]
 __se_sys_exit_group kernel/exit.c:1028 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1028
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f8701decc09
Code: Unable to access opcode bytes at 0x7f8701decbdf.
RSP: 002b:00007ffdfa7ac068 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f8701e61330 RCX: 00007f8701decc09
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000000
R10: 000000000001dd00 R11: 0000000000000246 R12: 00007f8701e61330
R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__tlb_remove_page_size+0x24c/0x480 mm/mmu_gather.c:139
Code: 01 00 00 8b 6d 0c e9 e1 fe ff ff e8 ae 4e c1 ff 0f 0b e8 a7 4e c1 ff 4c 89 f7 48 c7 c6 00 7b 58 8a 48 83 e7 fc e8 04 f6 f9 ff <0f> 0b e8 8d 4e c1 ff 4c 8d 6b 24 48 b8 00 00 00 00 00 fc ff df 4c
RSP: 0018:ffffc90003c7f8d8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffffc90003c7fcd8 RCX: 0000000000000000
RDX: ffff88801dda3a80 RSI: ffffffff81c31f4c RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff8e75bd17
R10: fffffbfff1ceb7a2 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000001 R14: ffffea0001cbbd40 R15: ffffc90003c7fd00
FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8701e621d0 CR3: 0000000072aa7000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (42):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/02/10 04:47 linux-next 38d2b86a665b 07980f9d .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/04 03:19 linux-next 4fafd96910ad 1b2f701a .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/14 07:27 linux-next 38d2b86a665b 93ae7e0a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/13 16:44 linux-next 38d2b86a665b 4d66ad72 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/12 16:17 linux-next 38d2b86a665b 93e26d60 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/11 04:12 linux-next 38d2b86a665b 93e26d60 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/10 19:46 linux-next 38d2b86a665b 95871dcc .config console log report info ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/09 12:52 linux-next 38d2b86a665b 14a312c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/09 10:04 linux-next 38d2b86a665b 14a312c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/08 15:49 linux-next 38d2b86a665b fc9c934e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/06 22:05 linux-next 129af7708234 0a9c11b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/06 20:22 linux-next 129af7708234 0a9c11b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/06 18:59 linux-next 129af7708234 0a9c11b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/06 18:21 linux-next 129af7708234 0a9c11b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/06 18:13 linux-next 129af7708234 0a9c11b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/06 17:56 linux-next 129af7708234 0a9c11b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/06 17:29 linux-next 129af7708234 0a9c11b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/05 00:12 linux-next 4fafd96910ad be607b78 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/04 20:08 linux-next 4fafd96910ad be607b78 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/04 19:23 linux-next 4fafd96910ad be607b78 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/04 13:19 linux-next 4fafd96910ad be607b78 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/04 07:59 linux-next 4fafd96910ad 1b2f701a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/04 02:09 linux-next 4fafd96910ad 1b2f701a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/03 16:39 linux-next 4fafd96910ad 1b2f701a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/03 13:03 linux-next 4fafd96910ad 16d19e30 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/03 09:14 linux-next 4fafd96910ad 16d19e30 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/02 23:19 linux-next ea4dabbb4ad7 16d19e30 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/02 20:25 linux-next ea4dabbb4ad7 16d19e30 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/02 17:38 linux-next ea4dabbb4ad7 16d19e30 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/02 12:23 linux-next ea4dabbb4ad7 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/02 12:11 linux-next ea4dabbb4ad7 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/02 11:54 linux-next ea4dabbb4ad7 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/02 07:03 linux-next ea4dabbb4ad7 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/02 05:37 linux-next ea4dabbb4ad7 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/01 21:56 linux-next 66eee64b2354 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/01 13:27 linux-next 66eee64b2354 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/01 13:13 linux-next 66eee64b2354 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/01 06:28 linux-next 66eee64b2354 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/02/01 05:33 linux-next 66eee64b2354 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/01/31 13:57 linux-next 80bd9028feca 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/01/31 13:41 linux-next 80bd9028feca 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
2023/01/31 13:27 linux-next 80bd9028feca 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in __tlb_remove_page_size
* Struck through repros no longer work on HEAD.