syzbot


kernel BUG in folio_flags

Status: upstream: reported on 2023/01/12 10:25
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+fa6f2ee9039b87ef86c4@syzkaller.appspotmail.com
Fix commit: mm-reimplement-compound_nr-fix
Patched on: [ci-upstream-linux-next-kasan-gce-root], missing on: [ci-qemu-native-arm64-kvm ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-net-next-test-gce ci2-upstream-usb]
First crash: 558d, last: 111d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [tmpfs?] kernel BUG in folio_flags 1 (2) 2023/01/12 13:05

Sample crash report:
 free_pg_vec net/packet/af_packet.c:4330 [inline]
 packet_set_ring+0x1953/0x24d0 net/packet/af_packet.c:4549
 packet_release+0x7de/0xcc0 net/packet/af_packet.c:3158
 __sock_release net/socket.c:659 [inline]
 sock_close+0xbc/0x240 net/socket.c:1421
 __fput+0x429/0x8a0 fs/file_table.c:422
 task_work_run+0x24f/0x310 kernel/task_work.c:180
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0xa1b/0x27e0 kernel/exit.c:878
 do_group_exit+0x207/0x2c0 kernel/exit.c:1027
 get_signal+0x176e/0x1850 kernel/signal.c:2907
 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop kernel/entry/common.c:105 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:201 [inline]
 syscall_exit_to_user_mode+0xc9/0x360 kernel/entry/common.c:212
 do_syscall_64+0x10a/0x240 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x6d/0x75
------------[ cut here ]------------
kernel BUG at include/linux/page-flags.h:314!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 1 PID: 20418 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller-08073-g480e035fc4c7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:folio_flags+0x11a/0x1b0 include/linux/page-flags.h:314
Code: 48 89 d8 48 25 ff 0f 00 00 74 21 e8 80 19 a1 ff e9 52 ff ff ff e8 76 19 a1 ff 48 89 df 48 c7 c6 c0 49 b6 8b e8 67 de e9 ff 90 <0f> 0b 48 89 df be 08 00 00 00 e8 e7 6a 04 00 48 89 d8 48 c1 e8 03
RSP: 0018:ffffc9000ba46f68 EFLAGS: 00010246
RAX: d0711a3fca16ac00 RBX: ffffea0000485400 RCX: ffffc9000ba46d03
RDX: 0000000000000001 RSI: ffffffff8baad360 RDI: ffffffff8bfed360
RBP: 0000000000000000 R08: ffffffff8f872cef R09: 1ffffffff1f0e59d
R10: dffffc0000000000 R11: fffffbfff1f0e59e R12: 1ffffd4000090a80
R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
FS:  00007f17335a76c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f80a6d5e070 CR3: 00000000799a4000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 folio_test_hugetlb+0xab/0x1d0 include/linux/page-flags.h:849
 PageHuge+0xe3/0x1c0 mm/hugetlb.c:2173
 isolate_migratepages_block+0xa12/0x5e20 mm/compaction.c:950
 isolate_migratepages mm/compaction.c:2074 [inline]
 compact_zone+0x3020/0x47f0 mm/compaction.c:2530
 compact_node+0x217/0x420 mm/compaction.c:2846
 compact_nodes mm/compaction.c:2859 [inline]
 sysctl_compaction_handler+0x103/0x1b0 mm/compaction.c:2905
 proc_sys_call_handler+0x551/0x8b0 fs/proc/proc_sysctl.c:595
 call_write_iter include/linux/fs.h:2108 [inline]
 iter_file_splice_write+0xbd7/0x14e0 fs/splice.c:743
 do_splice_from fs/splice.c:941 [inline]
 direct_splice_actor+0x11e/0x220 fs/splice.c:1164
 splice_direct_to_actor+0x58e/0xc90 fs/splice.c:1108
 do_splice_direct_actor fs/splice.c:1207 [inline]
 do_splice_direct+0x28c/0x3e0 fs/splice.c:1233
 do_sendfile+0x56d/0xdc0 fs/read_write.c:1295
 __do_sys_sendfile64 fs/read_write.c:1356 [inline]
 __se_sys_sendfile64+0x100/0x1e0 fs/read_write.c:1348
 do_syscall_64+0xfb/0x240
 entry_SYSCALL_64_after_hwframe+0x6d/0x75
RIP: 0033:0x7f173287dde9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f17335a70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007f17329abf80 RCX: 00007f173287dde9
RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000005
RBP: 00007f17328ca47a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f17329abf80 R15: 00007f1732acfa48
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:folio_flags+0x11a/0x1b0 include/linux/page-flags.h:314
Code: 48 89 d8 48 25 ff 0f 00 00 74 21 e8 80 19 a1 ff e9 52 ff ff ff e8 76 19 a1 ff 48 89 df 48 c7 c6 c0 49 b6 8b e8 67 de e9 ff 90 <0f> 0b 48 89 df be 08 00 00 00 e8 e7 6a 04 00 48 89 d8 48 c1 e8 03
RSP: 0018:ffffc9000ba46f68 EFLAGS: 00010246
RAX: d0711a3fca16ac00 RBX: ffffea0000485400 RCX: ffffc9000ba46d03
RDX: 0000000000000001 RSI: ffffffff8baad360 RDI: ffffffff8bfed360
RBP: 0000000000000000 R08: ffffffff8f872cef R09: 1ffffffff1f0e59d
R10: dffffc0000000000 R11: fffffbfff1f0e59e R12: 1ffffd4000090a80
R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
FS:  00007f17335a76c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f80a6d5e070 CR3: 00000000799a4000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (62):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/03 08:40 upstream 480e035fc4c7 7925100d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in folio_flags
2024/03/23 14:54 upstream fe46a7dd189e 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in folio_flags
2024/02/07 23:53 upstream 6d280f4d760e 6404acf9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in folio_flags
2024/01/28 11:52 upstream 8a696a29c690 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in folio_flags
2024/01/15 09:20 upstream 052d534373b7 551587c1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in folio_flags
2024/01/11 00:14 upstream ab27740f7665 04815ef1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root kernel BUG in folio_flags
2023/12/23 18:13 upstream 5254c0cbc92d fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in folio_flags
2023/12/22 13:32 upstream 24e0d2e527a3 4f9530a3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in folio_flags
2023/12/14 12:58 upstream 5bd7ef53ffe5 3222d10c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in folio_flags
2023/12/12 18:25 upstream 26aff849438c ebcad15c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in folio_flags
2023/12/08 06:13 upstream 9ace34a8e446 28b24332 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in folio_flags
2023/11/27 09:34 upstream d2da77f431ac 5b429f39 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in folio_flags
2023/11/20 09:56 upstream eb3479bc23fa cb976f63 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in folio_flags
2023/11/11 11:47 upstream ac347a0655db 6d6dbf8a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in folio_flags
2023/11/03 19:02 upstream 4652b8e4f3ff c4ac074c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in folio_flags
2023/10/28 08:52 upstream 888cf78c29e2 3c418d72 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in folio_flags
2023/10/26 00:10 upstream 4f82870119a4 72e794c4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in folio_flags
2023/10/25 23:46 upstream 4f82870119a4 72e794c4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in folio_flags
2023/10/21 13:52 upstream c3200081020d 361b23dc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in folio_flags
2023/10/18 05:03 upstream 06dc10eae55b 342b9c55 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in folio_flags
2023/09/11 18:08 upstream 0bb80ecc33a8 59da8366 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in folio_flags
2024/01/28 23:15 upstream 4854cf9c61d0 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 kernel BUG in folio_flags
2024/01/30 11:28 upstream 861c0981648f 7f400fcb .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/12/31 07:26 upstream 453f5db0619e fb427a07 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/12/26 10:21 upstream fbafc3e621c3 fb427a07 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/12/25 11:22 upstream 861deac3b092 fb427a07 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/12/10 18:21 upstream c527f5606aa5 28b24332 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/12/07 01:28 upstream bee0e7762ad2 e3299f55 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/11/17 05:41 upstream 7475e51b8796 cb976f63 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/11/06 01:19 upstream 1cfb751165ef 500bfdc4 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/10/31 00:32 upstream 14ab6d425e80 b5729d82 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/10/26 10:49 upstream 611da07b89fd b67a3ce3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/10/24 21:26 upstream 4f82870119a4 7256c5bd .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/10/24 18:03 upstream d88520ad73b7 7256c5bd .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/10/20 15:09 upstream ce55c22ec8b2 361b23dc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/10/19 15:46 upstream dd72f9c7e512 f62755ed .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/10/13 08:20 upstream e8c127b05766 6388bc36 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/10/06 19:58 upstream af95dc6fdc25 ea12a918 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/10/05 21:20 upstream 3006adf3be79 becbb1de .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/09/21 15:39 upstream 42dc814987c1 0b6a67ac .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/09/19 04:16 upstream 2cf0f7156238 0b6a67ac .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/09/15 07:50 upstream 9fdfb15a3dbf 0b6a67ac .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/09/10 14:54 upstream 535a265d7f0d 6654cf89 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/09/09 21:08 upstream 6099776f9f26 6654cf89 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/09/09 10:00 upstream 32bf43e4efdb 6654cf89 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/09/01 17:25 upstream e0152e7481c6 696ea0d2 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2023/08/31 14:02 upstream b97d64c72259 4ad3538b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in folio_flags
2024/02/16 01:22 upstream 4f5e5092fdbf 578f7538 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in folio_flags
2023/12/16 02:54 upstream 3bd7d7488169 3222d10c .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in folio_flags
2023/12/05 09:21 upstream bee0e7762ad2 f819d6f7 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in folio_flags
2023/10/08 10:56 upstream b9ddbb0cde2a 5e837c76 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in folio_flags
2023/09/30 22:57 upstream 3b517966c561 8e26a358 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in folio_flags
2023/09/27 07:44 upstream 0e945134b680 0b6a67ac .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in folio_flags
2023/09/12 18:04 upstream a747acc0b752 59da8366 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in folio_flags
2023/09/07 13:00 upstream 7ba2090ca64e 72324844 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in folio_flags
2023/09/01 08:38 upstream 99d99825fc07 696ea0d2 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in folio_flags
2023/08/30 18:12 upstream 6c1b980a7e79 84803932 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in folio_flags
2023/06/05 08:17 upstream 9561de3a55be a4ae4f42 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in folio_flags
2023/10/11 12:13 net-next e5f061d5e340 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce kernel BUG in folio_flags
2023/10/02 09:30 net-next fbff653a40f6 8e26a358 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce kernel BUG in folio_flags
2023/01/12 12:02 linux-next 0a093b2893c7 96166539 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in folio_flags
2023/01/12 08:30 linux-next 0a093b2893c7 96166539 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in folio_flags
* Struck through repros no longer work on HEAD.