syzbot


kernel BUG in trans_pgd_create_copy
Status: auto-closed as invalid on 2022/02/12 17:55
Reported-by: syzbot+a0d68c9c9123000ed5ab@syzkaller.appspotmail.com
First crash: 203d, last: 191d

Sample crash report:
------------[ cut here ]------------
kernel BUG at arch/arm64/include/asm/pgalloc.h:79!
Internal error: Oops - BUG: 0 [#1] SMP
Modules linked in:
CPU: 1 PID: 17777 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller-12999-gc8c109546a19 #0
Hardware name: linux,dummy-virt (DT)
pstate: 40000005 (nZcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : pmd_populate_kernel arch/arm64/include/asm/pgalloc.h:79 [inline]
pc : copy_pte arch/arm64/mm/trans_pgd.c:70 [inline]
pc : copy_pmd arch/arm64/mm/trans_pgd.c:105 [inline]
pc : copy_pud arch/arm64/mm/trans_pgd.c:141 [inline]
pc : copy_p4d arch/arm64/mm/trans_pgd.c:167 [inline]
pc : copy_page_tables arch/arm64/mm/trans_pgd.c:186 [inline]
pc : trans_pgd_create_copy+0x5bc/0x7f0 arch/arm64/mm/trans_pgd.c:213
lr : trans_alloc arch/arm64/mm/trans_pgd.c:30 [inline]
lr : copy_pte arch/arm64/mm/trans_pgd.c:67 [inline]
lr : copy_pmd arch/arm64/mm/trans_pgd.c:105 [inline]
lr : copy_pud arch/arm64/mm/trans_pgd.c:141 [inline]
lr : copy_p4d arch/arm64/mm/trans_pgd.c:167 [inline]
lr : copy_page_tables arch/arm64/mm/trans_pgd.c:186 [inline]
lr : trans_pgd_create_copy+0x480/0x7f0 arch/arm64/mm/trans_pgd.c:213
sp : ffff80001b437a60
x29: ffff80001b437a60 x28: 1fffe0000fffee00 x27: ffff800010059c70
x26: ffff00003fffffff x25: ffff0000397d4000 x24: dfff800000000000
x23: ffff000000200000 x22: ffff80001b437c30 x21: ffff000040000000
x20: ffff00007fff7000 x19: ffff000000000000 x18: ffff00006aa2fc08
x17: 0000000000000000 x16: 0000000000000000 x15: d503201fd503201f
x14: 1ffff00003686e32 x13: 0000000000000000 x12: ffff6000072fac00
x11: 1fffe000072fabff x10: ffff6000072fabff x9 : 0000000000000000
x8 : ffff0000397d6000 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000004
x2 : fffffc0000000000 x1 : ffff80001608f680 x0 : ffff0000397d5000
Call trace:
 set_p4d arch/arm64/include/asm/pgtable.h:701 [inline]
 __p4d_populate arch/arm64/include/asm/pgalloc.h:46 [inline]
 p4d_populate arch/arm64/include/asm/pgalloc.h:54 [inline]
 copy_pud arch/arm64/mm/trans_pgd.c:129 [inline]
 copy_p4d arch/arm64/mm/trans_pgd.c:167 [inline]
 copy_page_tables arch/arm64/mm/trans_pgd.c:186 [inline]
 trans_pgd_create_copy+0x5bc/0x7f0 arch/arm64/mm/trans_pgd.c:213
 machine_kexec_post_load+0x178/0x6d0 arch/arm64/kernel/machine_kexec.c:146
 do_kexec_load+0x194/0x520 kernel/kexec.c:155
 __do_compat_sys_kexec_load kernel/kexec.c:292 [inline]
 __se_compat_sys_kexec_load kernel/kexec.c:257 [inline]
 __arm64_compat_sys_kexec_load+0x36c/0x47c kernel/kexec.c:257
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x6c/0x260 arch/arm64/kernel/syscall.c:52
 el0_svc_common.constprop.0+0xc4/0x254 arch/arm64/kernel/syscall.c:142
 do_el0_svc_compat+0x40/0x80 arch/arm64/kernel/syscall.c:187
 el0_svc_compat+0x64/0x280 arch/arm64/kernel/entry-common.c:736
 el0t_32_sync_handler+0x90/0x140 arch/arm64/kernel/entry-common.c:746
 el0t_32_sync+0x1a4/0x1a8 arch/arm64/kernel/entry.S:577
Code: 17fffee0 aa1503e0 97ffdd37 17ffff17 (d4210000) 
---[ end trace 1eb9b72fa9edf501 ]---

Crashes (37):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-qemu2-arm64-compat 2021/11/14 17:55 upstream c8c109546a19 83f5c9b5 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/14 12:36 upstream c8c109546a19 83f5c9b5 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/13 21:28 upstream a9b9669d9822 83f5c9b5 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/13 10:28 upstream 66f4beaa6c1d 83f5c9b5 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/12 15:57 upstream 5833291ab6de 83f5c9b5 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/12 01:58 upstream ca2ef2d9f2aa 75b04091 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/10 20:00 upstream 89d714ab6043 75b04091 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/09 22:15 upstream d2f38a3c6507 59bcaf9a .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/09 20:31 upstream d2f38a3c6507 59bcaf9a .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/08 12:00 upstream 6b75d88fa81b d29682f1 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/05 13:10 upstream d4439a1189f9 4c1be0be .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/04 15:22 upstream 7ddb58cb0eca 4c1be0be .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/04 07:14 upstream 7ddb58cb0eca 4c1be0be .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/03 08:22 upstream dcd68326d29b 17f3edd2 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/03 05:08 upstream cc0356d6a02e 17f3edd2 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/03 04:53 upstream cc0356d6a02e 17f3edd2 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/03 04:40 upstream cc0356d6a02e 17f3edd2 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/03 04:02 upstream cc0356d6a02e 17f3edd2 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/03 03:43 upstream cc0356d6a02e 17f3edd2 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/03 03:28 upstream cc0356d6a02e 17f3edd2 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/03 01:12 upstream cc0356d6a02e 17f3edd2 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 22:45 upstream cc0356d6a02e 17f3edd2 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 22:29 upstream cc0356d6a02e 17f3edd2 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 20:01 upstream cc0356d6a02e 17f3edd2 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 20:00 upstream cc0356d6a02e 17f3edd2 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 18:03 upstream cc0356d6a02e 17f3edd2 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 16:21 upstream bfc484fe6abb 098b5d53 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 16:00 upstream bfc484fe6abb 098b5d53 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 15:58 upstream bfc484fe6abb 098b5d53 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 15:25 upstream bfc484fe6abb 098b5d53 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 13:44 upstream bfc484fe6abb 098b5d53 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 13:30 upstream bfc484fe6abb 098b5d53 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 13:00 upstream bfc484fe6abb 098b5d53 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 11:38 upstream bfc484fe6abb 098b5d53 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 09:13 upstream bfc484fe6abb 098b5d53 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 09:08 upstream bfc484fe6abb 098b5d53 .config log report info kernel BUG in trans_pgd_create_copy
ci-qemu2-arm64-compat 2021/11/02 07:37 upstream bfc484fe6abb 098b5d53 .config log report info kernel BUG in trans_pgd_create_copy