syzbot


kernel BUG in rmap_walk_file

Status: auto-closed as invalid on 2021/07/15 10:56
Reported-by: syzbot+a779f82f506fd795561c@syzkaller.appspotmail.com
First crash: 623d, last: 623d
similar bugs (5):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in rmap_walk_file 3 396d 485d 0/24 auto-closed as invalid on 2022/01/28 16:17
linux-4.14 kernel BUG at mm/internal.h:LINE! 1 867d 867d 0/1 auto-closed as invalid on 2020/11/13 00:54
upstream kernel BUG at mm/internal.h:LINE! (2) 1 858d 854d 0/24 auto-closed as invalid on 2020/11/22 19:58
upstream kernel BUG at mm/internal.h:LINE! (3) 1 728d 724d 0/24 auto-closed as invalid on 2021/04/01 10:43
upstream kernel BUG at mm/internal.h:LINE! 5 1347d 1346d 0/24 closed as invalid on 2019/08/22 04:15

Sample crash report:
next ffff888000175528 prev ffff888000175b58 mm ffff88806f66d900
prot 8000000000000025 anon_vma           (null) vm_ops ffffffff8797f6c0
pgoff 0 file ffff8880b3ecb7c0 private_data           (null)
flags: 0x80000fb(read|write|shared|mayread|maywrite|mayexec|mayshare|softdirty)
------------[ cut here ]------------
kernel BUG at mm/internal.h:351!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 18078 Comm: kworker/u4:2 Not tainted 4.14.225-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: writeback wb_workfn (flush-8:0)
task: ffff88809fc6e1c0 task.stack: ffff88809bf28000
RIP: 0010:vma_address mm/internal.h:351 [inline]
RIP: 0010:rmap_walk_file+0x405/0x810 mm/rmap.c:1822
RSP: 0018:ffff88809bf2f1c0 EFLAGS: 00010287
RAX: 0000000000000154 RBX: 0000000000002000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff88809fc6eae8 RDI: ffffed10137e5e17
RBP: ffffea000215ce80 R08: 0000000000000154 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff888000175420
R13: dffffc0000000000 R14: ffff88809bf2f290 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000970004 CR3: 00000000790ec000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 rmap_walk+0xc4/0x150 mm/rmap.c:1847
 page_mkclean+0x148/0x180 mm/rmap.c:981
 clear_page_dirty_for_io+0x1fa/0xa20 mm/page-writeback.c:2704
 mpage_submit_page+0x6e/0x220 fs/ext4/inode.c:2215
 mpage_process_page_bufs+0x425/0x520 fs/ext4/inode.c:2345
 mpage_prepare_extent_to_map+0x43e/0xa10 fs/ext4/inode.c:2717
 ext4_writepages+0xf88/0x32a0 fs/ext4/inode.c:2864
 do_writepages+0xc3/0x240 mm/page-writeback.c:2361
 __writeback_single_inode+0xda/0x1010 fs/fs-writeback.c:1377
 writeback_sb_inodes+0x48b/0xd30 fs/fs-writeback.c:1639
 __writeback_inodes_wb+0xbf/0x230 fs/fs-writeback.c:1708
 wb_writeback+0x710/0xb80 fs/fs-writeback.c:1814
 wb_check_old_data_flush fs/fs-writeback.c:1927 [inline]
 wb_do_writeback fs/fs-writeback.c:1951 [inline]
 wb_workfn+0x708/0xf50 fs/fs-writeback.c:1980
 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Code: 80 7c 24 3c 00 0f 84 ad 02 00 00 48 83 c4 40 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 64 dd ff e8 c3 64 dd ff 4c 89 e7 e8 dd 9f 88 05 <0f> 0b e8 b4 64 dd ff 48 8b 44 24 20 4c 8d 68 68 4c 89 ef e8 a3 
RIP: vma_address mm/internal.h:351 [inline] RSP: ffff88809bf2f1c0
RIP: rmap_walk_file+0x405/0x810 mm/rmap.c:1822 RSP: ffff88809bf2f1c0
---[ end trace b5a1963dca989d90 ]---

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-14 2021/03/17 10:55 linux-4.14.y c7150cd2fa8c fdb2bb2c .config log report info kernel BUG in rmap_walk_file
* Struck through repros no longer work on HEAD.