syzbot


WARNING in alloc_pages_vma

Status: fixed on 2018/12/18 11:30
Subsystems: mm
[Documentation on labels]
Fix commit: 356ff8a9a78f Revert "mm, thp: consolidate THP gfp handling into alloc_hugepage_direct_gfpmask"
First crash: 2198d, last: 2195d

Sample crash report:
audit: type=1400 audit(1544126298.824:35): avc:  denied  { map } for  pid=6089 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
sshd (6087) used greatest stack depth: 15744 bytes left
audit: type=1400 audit(1544126305.404:36): avc:  denied  { map } for  pid=6103 comm="syz-executor442" path="/root/syz-executor442105852" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
WARNING: CPU: 1 PID: 6103 at mm/mempolicy.c:1745 policy_node mm/mempolicy.c:1745 [inline]
WARNING: CPU: 1 PID: 6103 at mm/mempolicy.c:1745 alloc_pages_vma+0x1bd/0x4a0 mm/mempolicy.c:2043
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 6103 Comm: syz-executor442 Not tainted 4.20.0-rc5+ #144
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 panic+0x2ad/0x55c kernel/panic.c:188
 __warn.cold.8+0x20/0x45 kernel/panic.c:540
 report_bug+0x254/0x2d0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:271
 do_invalid_op+0x36/0x40 arch/x86/kernel/traps.c:290
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:969
RIP: 0010:policy_node mm/mempolicy.c:1745 [inline]
RIP: 0010:alloc_pages_vma+0x1bd/0x4a0 mm/mempolicy.c:2043
Code: 5f 5d c3 e8 35 2f bf ff 45 89 ec 31 ff 41 81 e4 00 00 04 00 44 89 e6 e8 31 30 bf ff 45 85 e4 0f 84 50 ff ff ff e8 13 2f bf ff <0f> 0b e9 44 ff ff ff e8 07 2f bf ff e8 22 5e ff ff 48 89 c3 e9 6b
RSP: 0018:ffff8881b2f1f188 EFLAGS: 00010293
RAX: ffff8881bfdfa280 RBX: ffff8881da96f000 RCX: ffffffff81c06c9f
RDX: 0000000000000000 RSI: ffffffff81c06cad RDI: 0000000000000005
RBP: ffff8881b2f1f1c8 R08: ffff8881bfdfa280 R09: ffffed103b5e5b5f
R10: 0000000000000002 R11: ffff8881daf2dafb R12: 0000000000040000
R13: 00000000000742ca R14: ffff8881da96f008 R15: 0000000000000002
 do_huge_pmd_anonymous_page+0x59e/0x2030 mm/huge_memory.c:728
 create_huge_pmd mm/memory.c:3656 [inline]
 __handle_mm_fault+0x3c91/0x5be0 mm/memory.c:3860
 handle_mm_fault+0x54f/0xc70 mm/memory.c:3926
 do_user_addr_fault arch/x86/mm/fault.c:1423 [inline]
 __do_page_fault+0x5e8/0xe60 arch/x86/mm/fault.c:1489
 do_page_fault+0xf2/0x7e0 arch/x86/mm/fault.c:1520
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1139
RIP: 0010:__clear_user+0x3b/0x70 arch/x86/lib/usercopy_64.c:23
Code: f9 be 13 00 00 00 48 c7 c7 a0 47 d8 88 e8 ad 28 d8 f9 0f 1f 00 48 89 d8 48 c1 eb 03 4c 89 e7 83 e0 07 48 89 d9 48 85 c9 74 0f <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a
RSP: 0018:ffff8881b2f1fbc8 EFLAGS: 00010206
RAX: 0000000000000000 RBX: 000000000000000f RCX: 000000000000000f
RDX: 0000000000000000 RSI: ffffffff81b1b3d3 RDI: 00000000203e8008
RBP: ffff8881b2f1fbd8 R08: 1ffff110365e3f55 R09: 0000000000000008
R10: 0000000000000001 R11: ffff8881bfdfa280 R12: 00000000203e8008
R13: 00000000203e8008 R14: 00007ffffffff000 R15: 0000000000000000
 clear_user+0xb1/0xe0 arch/x86/lib/usercopy_64.c:52
 copy_nodes_to_user mm/mempolicy.c:1322 [inline]
 kernel_get_mempolicy+0x292/0x1100 mm/mempolicy.c:1506
 __do_sys_get_mempolicy mm/mempolicy.c:1515 [inline]
 __se_sys_get_mempolicy mm/mempolicy.c:1511 [inline]
 __x64_sys_get_mempolicy+0xbe/0x150 mm/mempolicy.c:1511
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x440009
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffc55a6cf58 EFLAGS: 00000217 ORIG_RAX: 00000000000000ef
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440009
RDX: 0000000000000401 RSI: 00000000203e8000 RDI: 0000000000000000
RBP: 00000000006ca018 R08: 0000000000000002 R09: 0000000000000000
R10: 0000000020336000 R11: 0000000000000217 R12: 0000000000401890
R13: 0000000000401920 R14: 0000000000000000 R15: 0000000000000000
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (98):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/06 20:01 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2018/12/06 19:59 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-smack-root
2018/12/06 19:31 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2018/12/06 18:59 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-root
2018/12/06 18:08 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2018/12/06 17:50 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce
2018/12/06 17:41 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-root
2018/12/06 17:20 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce
2018/12/06 17:15 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-smack-root
2018/12/06 17:10 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-root
2018/12/06 16:44 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-smack-root
2018/12/06 16:35 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-root
2018/12/06 15:57 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-smack-root
2018/12/06 15:37 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce
2018/12/06 15:00 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2018/12/06 15:00 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce
2018/12/06 14:15 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2018/12/06 21:21 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-386
2018/12/06 20:51 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-386
2018/12/06 19:29 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-386
2018/12/06 18:55 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-386
2018/12/06 18:12 upstream cf76c364a1e1 3ab38479 .config console log report syz C ci-upstream-kasan-gce-386
2018/12/08 06:59 upstream 5f179793f0a7 65ed2472 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/08 05:07 upstream 5f179793f0a7 65ed2472 .config console log report ci-upstream-kasan-gce
2018/12/07 19:17 upstream b72f711a4efa 1eb6a7e4 .config console log report ci-upstream-kasan-gce-root
2018/12/07 17:40 upstream b72f711a4efa 1eb6a7e4 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/07 13:29 upstream b72f711a4efa 1eb6a7e4 .config console log report ci-upstream-kasan-gce
2018/12/07 08:50 upstream abb8d6ecbd8f dcf836b1 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/07 05:19 upstream abb8d6ecbd8f dcf836b1 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/07 04:01 upstream abb8d6ecbd8f dcf836b1 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/07 00:08 upstream abb8d6ecbd8f dcf836b1 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/06 21:05 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-root
2018/12/06 13:46 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-root
2018/12/06 13:37 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-root
2018/12/06 13:15 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-root
2018/12/06 13:14 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-root
2018/12/06 13:04 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-root
2018/12/06 13:01 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-root
2018/12/06 12:45 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/06 12:38 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/06 12:37 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/06 12:31 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/06 12:31 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/06 12:28 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce
2018/12/06 12:28 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-root
2018/12/06 12:26 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/06 12:26 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce
2018/12/06 12:25 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/06 12:25 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce
2018/12/06 12:24 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce
2018/12/06 12:20 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-root
2018/12/06 12:14 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/06 12:05 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce
2018/12/06 12:05 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/06 12:00 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/06 11:49 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce
2018/12/06 11:40 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/06 11:29 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/06 11:28 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/06 11:28 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/06 11:21 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce
2018/12/06 11:12 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce
2018/12/07 15:44 upstream b72f711a4efa 1eb6a7e4 .config console log report ci-upstream-kasan-gce-386
2018/12/07 14:31 upstream b72f711a4efa 1eb6a7e4 .config console log report ci-upstream-kasan-gce-386
2018/12/06 13:49 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-386
2018/12/06 13:10 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-386
2018/12/06 12:31 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-386
2018/12/06 12:19 upstream cf76c364a1e1 3ab38479 .config console log report ci-upstream-kasan-gce-386
2018/12/09 17:47 linux-next 74c4a24df7ca 979179d6 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/09 14:09 linux-next 74c4a24df7ca 979179d6 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/08 22:21 linux-next 74c4a24df7ca 60562a1d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/07 12:30 linux-next 74c4a24df7ca 1eb6a7e4 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.