syzbot

 sign-in | mailing list | source | docs
🐞 Open [717] 🐞 Fixed [181] 🐞 Invalid [640] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

BUG: Bad page state

Status: upstream: reported C repro on 2022/10/03 07:33
Reported-by: syzbot+9f87a6a842302312d3ff@syzkaller.appspotmail.com
First crash: 432d, last: 290d
▶ ▼ Similar bugs (15)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: Bad page state (3) usb C 3 2161d 2168d 4/25 fixed on 2018/02/02 04:39
upstream BUG: Bad page state (5) mm C 171 1746d 1760d 0/25 closed as invalid on 2019/02/27 20:53
linux-4.19 BUG: Bad page state 1 748d 748d 0/1 auto-closed as invalid on 2022/03/21 10:57
linux-4.19 BUG: Bad page state (2) 1 558d 558d 0/1 auto-obsoleted due to no activity on 2022/09/26 19:49
upstream BUG: Bad page state (7) mm 3 1196d 1253d 0/25 auto-closed as invalid on 2020/12/28 02:44
linux-6.1 BUG: Bad page state origin:upstream C 5 12d 196d 0/3 upstream: reported C repro on 2023/05/27 10:10
linux-4.19 BUG: Bad page state (3) C error 1 432d 432d 0/1 upstream: reported C repro on 2022/10/02 20:53
android-49 BUG: Bad page state 3 1529d 1552d 0/3 auto-closed as invalid on 2020/01/30 18:48
android-54 BUG: Bad page state C 9 1349d 1380d 0/2 auto-obsoleted due to no activity on 2022/08/26 22:10
upstream BUG: Bad page state (2) crypto 1 2204d 2199d 0/25 closed as invalid on 2017/12/06 12:57
upstream BUG: Bad page state (4) sound 1 1966d 1966d 0/25 closed as invalid on 2018/09/05 12:51
upstream BUG: Bad page state (6) mm C 2 1745d 1745d 0/25 closed as invalid on 2019/03/01 18:38
upstream BUG: Bad page state C 2 2307d 2307d 3/25 fixed on 2017/10/24 06:54
linux-5.15 BUG: Bad page state origin:upstream C 8 8d16h 237d 0/3 upstream: reported C repro on 2023/04/16 11:16
upstream BUG: Bad page state (8) mm C 6784 11h55m 1041d 1/25 upstream: reported C repro on 2021/02/01 10:07
▶ ▼ Fix bisection attempts (3)
Created Duration User Patch Repo Result
2023/02/22 03:11 23m bisect fix linux-4.14.y job log (0) log
2023/01/23 01:11 28m bisect fix linux-4.14.y job log (0) log
2022/11/05 20:40 26m bisect fix linux-4.14.y job log (0) log

Sample crash report:
ERROR: (device loop0): txAbort: 
======================================================
WARNING: the mand mount option is being deprecated and
         will be removed in v5.15!
======================================================
BUG: Bad page state in process syz-executor378  pfn:985c5
page:ffffea0002617140 count:0 mapcount:0 mapping:          (null) index:0x2f
flags: 0xfff0000000100c(referenced|uptodate|private)
raw: 00fff0000000100c 0000000000000000 000000000000002f 00000000ffffffff
raw: ffffea00027fa9a0 ffffea000295a460 ffff88809adf83c0 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
bad because of flags: 0x1000(private)
Modules linked in:
CPU: 0 PID: 7978 Comm: syz-executor378 Not tainted 4.14.295-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 bad_page.cold+0xdb/0x100 mm/page_alloc.c:576
 free_hot_cold_page_list+0x93/0x300 mm/page_alloc.c:2663
 release_pages+0x828/0xbf0 mm/swap.c:820
 __pagevec_release+0x84/0xe0 mm/swap.c:837
 pagevec_release include/linux/pagevec.h:78 [inline]
 truncate_inode_pages_range+0x5ce/0x13e0 mm/truncate.c:320
 jfs_remount+0x41f/0x5a0 fs/jfs/super.c:485
 do_remount_sb+0x150/0x530 fs/super.c:868
 do_remount fs/namespace.c:2393 [inline]
 do_mount+0x15f3/0x2a30 fs/namespace.c:2896
 SYSC_mount fs/namespace.c:3121 [inline]
 SyS_mount+0xa8/0x120 fs/namespace.c:3098
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fd8bb1f7e09
RSP: 002b:00007ffdd8e7e9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8bb1f7e09
RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000000
RBP: 00007fd8bb1b7670 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000060 R11: 0000000000000246 R12: 00000000f8008000
R13: 0000000000000000 R14: 00080000000000fc R15: 0000000000000000
BUG: Bad page state in process syz-executor378  pfn:9fea6
page:ffffea00027fa980 count:0 mapcount:0 mapping:          (null) index:0x2e
flags: 0xfff0000000100c(referenced|uptodate|private)
raw: 00fff0000000100c 0000000000000000 000000000000002e 00000000ffffffff
raw: ffffea00028c36e0 ffffea0002617160 ffff88809adf84b0 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
bad because of flags: 0x1000(private)
Modules linked in:
CPU: 1 PID: 7978 Comm: syz-executor378 Tainted: G    B           4.14.295-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 bad_page.cold+0xdb/0x100 mm/page_alloc.c:576
 free_hot_cold_page_list+0x93/0x300 mm/page_alloc.c:2663
 release_pages+0x828/0xbf0 mm/swap.c:820
 __pagevec_release+0x84/0xe0 mm/swap.c:837
 pagevec_release include/linux/pagevec.h:78 [inline]
 truncate_inode_pages_range+0x5ce/0x13e0 mm/truncate.c:320
 jfs_remount+0x41f/0x5a0 fs/jfs/super.c:485
 do_remount_sb+0x150/0x530 fs/super.c:868
 do_remount fs/namespace.c:2393 [inline]
 do_mount+0x15f3/0x2a30 fs/namespace.c:2896
 SYSC_mount fs/namespace.c:3121 [inline]
 SyS_mount+0xa8/0x120 fs/namespace.c:3098
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fd8bb1f7e09
RSP: 002b:00007ffdd8e7e9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8bb1f7e09
RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000000
RBP: 00007fd8bb1b7670 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000060 R11: 0000000000000246 R12: 00000000f8008000
R13: 0000000000000000 R14: 00080000000000fc R15: 0000000000000000
BUG: Bad page state in process syz-executor378  pfn:a30db
page:ffffea00028c36c0 count:0 mapcount:0 mapping:          (null) index:0x2d
flags: 0xfff0000000100c(referenced|uptodate|private)
raw: 00fff0000000100c 0000000000000000 000000000000002d 00000000ffffffff
raw: ffffea0002b948e0 ffffea00027fa9a0 ffff88809adf85a0 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
bad because of flags: 0x1000(private)
Modules linked in:
CPU: 1 PID: 7978 Comm: syz-executor378 Tainted: G    B           4.14.295-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 bad_page.cold+0xdb/0x100 mm/page_alloc.c:576
 free_hot_cold_page_list+0x93/0x300 mm/page_alloc.c:2663
 release_pages+0x828/0xbf0 mm/swap.c:820
 __pagevec_release+0x84/0xe0 mm/swap.c:837
 pagevec_release include/linux/pagevec.h:78 [inline]
 truncate_inode_pages_range+0x5ce/0x13e0 mm/truncate.c:320
 jfs_remount+0x41f/0x5a0 fs/jfs/super.c:485
 do_remount_sb+0x150/0x530 fs/super.c:868
 do_remount fs/namespace.c:2393 [inline]
 do_mount+0x15f3/0x2a30 fs/namespace.c:2896
 SYSC_mount fs/namespace.c:3121 [inline]
 SyS_mount+0xa8/0x120 fs/namespace.c:3098
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fd8bb1f7e09
RSP: 002b:00007ffdd8e7e9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8bb1f7e09
RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000000
RBP: 00007fd8bb1b7670 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000060 R11: 0000000000000246 R12: 00000000f8008000
R13: 0000000000000000 R14: 00080000000000fc R15: 00000000

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/10/03 07:33 linux-4.14.y 9d5c0b3a8e1a feb56351 .config console log report syz C [disk image] [vmlinux] ci2-linux-4-14 BUG: Bad page state
2022/10/06 20:40 linux-4.14.y 9d5c0b3a8e1a 80b58a42 .config console log report info [disk image] [vmlinux] ci2-linux-4-14 BUG: Bad page state
2022/10/06 18:46 linux-4.14.y 9d5c0b3a8e1a 80b58a42 .config console log report info [disk image] [vmlinux] ci2-linux-4-14 BUG: Bad page state
2022/10/06 16:53 linux-4.14.y 9d5c0b3a8e1a 80b58a42 .config console log report info [disk image] [vmlinux] ci2-linux-4-14 BUG: Bad page state
2022/10/06 05:14 linux-4.14.y 9d5c0b3a8e1a 2c6543ad .config console log report info [disk image] [vmlinux] ci2-linux-4-14 BUG: Bad page state
2022/10/06 01:45 linux-4.14.y 9d5c0b3a8e1a 2c6543ad .config console log report info [disk image] [vmlinux] ci2-linux-4-14 BUG: Bad page state
2022/10/05 22:45 linux-4.14.y 9d5c0b3a8e1a 2c6543ad .config console log report info [disk image] [vmlinux] ci2-linux-4-14 BUG: Bad page state
2022/10/05 03:12 linux-4.14.y 9d5c0b3a8e1a 267e3bb1 .config console log report info [disk image] [vmlinux] ci2-linux-4-14 BUG: Bad page state
2022/10/04 14:51 linux-4.14.y 9d5c0b3a8e1a eab8f949 .config console log report info [disk image] [vmlinux] ci2-linux-4-14 BUG: Bad page state
* Struck through repros no longer work on HEAD.