syzbot


BUG: unable to handle kernel paging request in msan_get_shadow_origin_ptr

Status: closed as invalid on 2018/09/05 16:40
Subsystems: mm
[Documentation on labels]
First crash: 2620d, last: 2610d

Sample crash report:
BUG: unable to handle kernel paging request at ffffea0006b66da0
PGD 21f7ef067 P4D 21f7ef067 PUD 10 
Oops: 0000 [#1] SMP PTI
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 2596 Comm: udevd Not tainted 4.17.0+ #9
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:msan_get_shadow_origin_ptr+0x161/0x230 mm/kmsan/kmsan_instr.c:260
RSP: 0000:ffff880195def428 EFLAGS: 00010206
RAX: 0000000006b66d60 RBX: ffffffff8b58a000 RCX: 000000000011e679
RDX: 0000000000000460 RSI: 0000000000000008 RDI: ffffea0000000000
RBP: ffff880195def458 R08: 0000000000000000 R09: 0000000000000000
R10: ffff880195da37c0 R11: ffffffff81a7d740 R12: 0000160000000000
R13: 0000000006b66d60 R14: ffffffff8b589000 R15: ffff88011e679da0
FS:  0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffea0006b66da0 CR3: 000000000ac30000 CR4: 00000000001406e0
DR0: 0000000020000040 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 __msan_metadata_ptr_for_load_8+0x10/0x20 mm/kmsan/kmsan_instr.c:321
 ____rb_erase_color lib/rbtree.c:382 [inline]
 __rb_erase_color+0xbbe/0x1d30 lib/rbtree.c:429
 rb_erase_augmented_cached include/linux/rbtree_augmented.h:289 [inline]
 vma_interval_tree_remove+0x1806/0x1a50 mm/interval_tree.c:24
 __remove_shared_vm_struct mm/mmap.c:152 [inline]
 unlink_file_vma+0x265/0x2e0 mm/mmap.c:167
 free_pgtables+0x308/0x6b0 mm/memory.c:643
 exit_mmap+0x510/0x980 mm/mmap.c:3106
 __mmput+0x158/0x600 kernel/fork.c:962
 mmput+0xab/0xf0 kernel/fork.c:983
 exit_mm+0x6ed/0x7a0 kernel/exit.c:545
 do_exit+0xc12/0x3930 kernel/exit.c:854
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 get_signal+0x1405/0x1ec0 kernel/signal.c:2482
 do_signal+0xb8/0x1d20 arch/x86/kernel/signal.c:810

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/06/26 13:44 https://github.com/google/kmsan.git master 123906095e30 089f1181 .config console log report ci-upstream-kmsan-gce
2018/06/17 02:39 https://github.com/google/kmsan.git master 88e0e95b30f1 27c5f59f .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.