syzbot


BUG: unable to handle kernel paging request in clear_page_erms (3)

Status: auto-closed as invalid on 2021/10/09 21:56
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+ee977076aeb6b7f75e4c@syzkaller.appspotmail.com
First crash: 1023d, last: 1012d
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: unable to handle kernel paging request in clear_page_erms (4) mm arch 1 907d 903d 0/26 auto-closed as invalid on 2022/01/23 00:56
linux-4.19 BUG: unable to handle kernel paging request in clear_page_erms 1 835d 835d 0/1 auto-closed as invalid on 2022/05/04 22:20
upstream BUG: unable to handle kernel paging request in clear_page_erms (2) mm 1 1086d 1068d 0/26 auto-closed as invalid on 2021/06/28 09:14
upstream BUG: unable to handle kernel paging request in clear_page_erms (5) mm 4 77d 178d 0/26 moderation: reported on 2023/10/23 23:39
upstream BUG: unable to handle kernel paging request in clear_page_erms mm 1 1443d 1439d 0/26 auto-closed as invalid on 2020/08/05 10:45

Sample crash report:
BUG: unable to handle page fault for address: ffff8880009c0000
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 10601067 P4D 10601067 PUD 10602067 PMD 128063 PTE 7070707070700
Oops: 0002 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 9785 Comm: kworker/1:6 Tainted: G        W         5.13.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events nsim_dev_trap_report_work
RIP: 0010:clear_page_erms+0x7/0x10 arch/x86/lib/clear_page_64.S:49
Code: 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 <f3> aa c3 cc cc cc cc cc cc 41 57 41 56 41 55 41 54 55 53 48 89 fb
RSP: 0018:ffffc9000aedf700 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffffea0000027000 RCX: 0000000000001000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880009c0000
RBP: ffff8880776d3880 R08: 0000000000000001 R09: ffffed1000138000
R10: fffff94000004e06 R11: 0000000000000003 R12: ffffed100eeda9e1
R13: dffffc0000000000 R14: ffffea0000027200 R15: ffff8880776d4f08
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8880009c0000 CR3: 000000002a40e000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 clear_page arch/x86/include/asm/page_64.h:49 [inline]
 clear_highpage include/linux/highmem.h:184 [inline]
 kernel_init_free_pages.part.0+0x99/0x120 mm/page_alloc.c:1283
 kernel_init_free_pages mm/page_alloc.c:1272 [inline]
 post_alloc_hook+0x145/0x1e0 mm/page_alloc.c:2423
 prep_new_page mm/page_alloc.c:2433 [inline]
 get_page_from_freelist+0xa72/0x2f80 mm/page_alloc.c:4166
 __alloc_pages+0x1b2/0x500 mm/page_alloc.c:5374
 alloc_pages+0x18c/0x2a0 mm/mempolicy.c:2244
 alloc_slab_page mm/slub.c:1713 [inline]
 allocate_slab+0x32b/0x4c0 mm/slub.c:1853
 new_slab mm/slub.c:1916 [inline]
 new_slab_objects mm/slub.c:2662 [inline]
 ___slab_alloc+0x4ba/0x820 mm/slub.c:2825
 __slab_alloc.constprop.0+0xa7/0xf0 mm/slub.c:2865
 slab_alloc_node mm/slub.c:2947 [inline]
 __kmalloc_node_track_caller+0x2e3/0x360 mm/slub.c:4681
 kmalloc_reserve net/core/skbuff.c:355 [inline]
 __alloc_skb+0xde/0x340 net/core/skbuff.c:426
 alloc_skb include/linux/skbuff.h:1112 [inline]
 nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:664 [inline]
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:721 [inline]
 nsim_dev_trap_report_work+0x2ac/0xbd0 drivers/net/netdevsim/dev.c:762
 process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
 worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
 kthread+0x3e5/0x4d0 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Modules linked in:
CR2: ffff8880009c0000
---[ end trace b3d6af8a16fca708 ]---
RIP: 0010:clear_page_erms+0x7/0x10 arch/x86/lib/clear_page_64.S:49
Code: 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 <f3> aa c3 cc cc cc cc cc cc 41 57 41 56 41 55 41 54 55 53 48 89 fb
RSP: 0018:ffffc9000aedf700 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffffea0000027000 RCX: 0000000000001000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880009c0000
RBP: ffff8880776d3880 R08: 0000000000000001 R09: ffffed1000138000
R10: fffff94000004e06 R11: 0000000000000003 R12: ffffed100eeda9e1
R13: dffffc0000000000 R14: ffffea0000027200 R15: ffff8880776d4f08
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8880009c0000 CR3: 000000002a40e000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/07/11 21:55 upstream 98f7fdced2e0 8f5a7b8c .config console log report info ci-upstream-kasan-gce-386 BUG: unable to handle kernel paging request in clear_page_erms
2021/07/01 10:00 upstream dbe69e433722 658ebc66 .config console log report info ci-upstream-kasan-gce-386 BUG: unable to handle kernel paging request in clear_page_erms
* Struck through repros no longer work on HEAD.