syzbot


BUG: unable to handle kernel paging request in __split_huge_pmd

Status: fixed on 2018/08/22 06:57
Fix commit: 89c059b66a08 x86/mm: Simplify p[g4um]d_page() macros
First crash: 2112d, last: 2105d

Sample crash report:
BUG: unable to handle kernel paging request at ffffeafff8e38020
IP: [<ffffffff8154dfa1>] __read_once_size include/linux/compiler.h:243 [inline]
IP: [<ffffffff8154dfa1>] compound_head include/linux/page-flags.h:143 [inline]
IP: [<ffffffff8154dfa1>] PageMlocked include/linux/page-flags.h:327 [inline]
IP: [<ffffffff8154dfa1>] __split_huge_pmd+0x391/0x1870 mm/huge_memory.c:1773
PGD 0 [   84.429119] 
Oops: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 10881 Comm: syz-executor753 Not tainted 4.9.122-g54068d6 #78
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801c8736000 task.stack: ffff8801bc9f8000
RIP: 0010:[<ffffffff8154dfa1>]  [<ffffffff8154dfa1>] __read_once_size include/linux/compiler.h:243 [inline]
RIP: 0010:[<ffffffff8154dfa1>]  [<ffffffff8154dfa1>] compound_head include/linux/page-flags.h:143 [inline]
RIP: 0010:[<ffffffff8154dfa1>]  [<ffffffff8154dfa1>] PageMlocked include/linux/page-flags.h:327 [inline]
RIP: 0010:[<ffffffff8154dfa1>]  [<ffffffff8154dfa1>] __split_huge_pmd+0x391/0x1870 mm/huge_memory.c:1773
RSP: 0018:ffff8801bc9ffb70  EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffffeafff8e38000 RCX: 0000000000000000
RDX: 1ffffd5fff1c7004 RSI: ffffffff8154df6e RDI: ffffeafff8e38020
RBP: ffff8801bc9ffca0 R08: ffff8801c8736910 R09: 0000000000000001
R10: ffff8801c8736000 R11: 1ffff100390e6d1d R12: ffffea0000000000
R13: 0000000000000000 R14: ffff8801c4ec1ae8 R15: ffff8801c5918800
FS:  00007fd47cb7e700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffeafff8e38020 CR3: 00000001c4dc5000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffffffff8153e677 ffffffff8153ec42 ffffffff8153a57e ffffffff814e075c
 ffffffff855d3f80 ffffffff814e45f2 0000000000007de1 ffff8801c8736908
 ffff8801c87368b8 ffff8801c8736910 ffff8801c87368c0 1ffff1003793ff83
Call Trace:
 [<ffffffff8154f629>] split_huge_pmd_address+0x1a9/0x1f0 mm/huge_memory.c:1800
 [<ffffffff8154f853>] vma_adjust_trans_huge+0x1e3/0x250 mm/huge_memory.c:1826
 [<ffffffff814df138>] __vma_adjust+0x168/0x16c0 mm/mmap.c:777
 [<ffffffff814e0bc0>] vma_adjust include/linux/mm.h:1965 [inline]
 [<ffffffff814e0bc0>] __split_vma.isra.40+0x530/0x670 mm/mmap.c:2624
 [<ffffffff814e0f52>] do_munmap+0x252/0xe50 mm/mmap.c:2703
 [<ffffffff814e45f2>] SYSC_munmap mm/mmap.c:2769 [inline]
 [<ffffffff814e45f2>] SyS_munmap+0x72/0xa0 mm/mmap.c:2761
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff83a00cd3>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: ff df 4c 21 e3 49 bc 00 00 00 00 00 ea ff ff 48 c1 eb 06 4c 01 e3 48 8d 7b 20 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 14 13 00 00 <4c> 8b 6b 20 49 89 dc 41 f6 c5 01 0f 85 ab 0a 00 00 e8 b9 2d e1 
RIP  [<ffffffff8154dfa1>] __read_once_size include/linux/compiler.h:243 [inline]
RIP  [<ffffffff8154dfa1>] compound_head include/linux/page-flags.h:143 [inline]
RIP  [<ffffffff8154dfa1>] PageMlocked include/linux/page-flags.h:327 [inline]
RIP  [<ffffffff8154dfa1>] __split_huge_pmd+0x391/0x1870 mm/huge_memory.c:1773
 RSP <ffff8801bc9ffb70>
CR2: ffffeafff8e38020
---[ end trace 888d62cf0bbdd48f ]---

Crashes (174):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/08/20 11:38 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report syz C ci-android-49-kasan-gce
2018/08/22 05:38 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce
2018/08/22 02:12 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce
2018/08/21 20:20 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce
2018/08/21 14:40 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce
2018/08/21 12:33 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce-root
2018/08/21 10:38 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce
2018/08/21 09:06 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce
2018/08/21 07:32 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce
2018/08/21 06:12 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce-root
2018/08/21 05:35 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce
2018/08/21 04:19 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce
2018/08/21 02:53 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce-root
2018/08/20 19:27 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce
2018/08/20 16:18 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce
2018/08/20 14:40 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce
2018/08/20 13:35 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce
2018/08/20 11:07 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce
2018/08/20 00:42 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce-root
2018/08/19 19:14 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce
2018/08/19 18:08 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce
2018/08/19 16:26 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce-root
2018/08/19 15:09 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce
2018/08/19 13:26 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce
2018/08/19 00:43 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 de20bcbb .config console log report ci-android-49-kasan-gce
2018/08/18 20:32 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 de20bcbb .config console log report ci-android-49-kasan-gce
2018/08/15 17:48 https://android.googlesource.com/kernel/common android-4.9 f85543ba3c54 9ccc1d45 .config console log report ci-android-49-kasan-gce
2018/08/22 03:44 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce-386
2018/08/21 18:46 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce-386
2018/08/21 17:41 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce-386
2018/08/21 13:04 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce-386
2018/08/21 00:28 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce-386
2018/08/20 20:46 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce-386
2018/08/20 18:03 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce-386
2018/08/20 09:54 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce-386
2018/08/20 07:52 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce-386
2018/08/20 02:59 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce-386
2018/08/20 01:54 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce-386
2018/08/19 21:51 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce-386
2018/08/19 07:10 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 de20bcbb .config console log report ci-android-49-kasan-gce-386
2018/08/19 03:58 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 de20bcbb .config console log report ci-android-49-kasan-gce-386
2018/08/18 23:40 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 de20bcbb .config console log report ci-android-49-kasan-gce-386
2018/08/18 23:15 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 de20bcbb .config console log report ci-android-49-kasan-gce-386
2018/08/18 16:31 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 db1858f6 .config console log report ci-android-49-kasan-gce-386
* Struck through repros no longer work on HEAD.