general protection fault in qlist_free

Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	general protection fault in qlist_free_all (4) net				16	2109d	2219d	0/26	auto-closed as invalid on 2019/02/22 10:34
upstream	general protection fault in qlist_free_all (2) fs				1	2352d	2352d	0/26	closed as invalid on 2017/12/05 10:45

kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 14713 Comm: syz-executor5 Not tainted 4.14.0-rc1+ #66 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801d0832280 task.stack: ffff8801d01f8000 RIP: 0010:virt_to_head_page include/linux/mm.h:603 [inline] RIP: 0010:qlink_to_cache mm/kasan/quarantine.c:127 [inline] RIP: 0010:qlist_free_all+0x12b/0x160 mm/kasan/quarantine.c:163 RSP: 0000:ffff8801d01ff908 EFLAGS: 00010203 RAX: ffff0301d890d700 RBX: 0000000000000282 RCX: ffffea0000000000 RDX: 03ffe7ec07624340 RSI: ffff8801d0832b48 RDI: 0000000000000282 RBP: ffff8801d01ff940 R08: ffffea00070aee60 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: ffff0301d890d700 R15: ffffffff85ac99a0 FS: 0000000001cd2940(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001ddbc20000 CR3: 00000001d0a56000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: quarantine_reduce+0x141/0x170 mm/kasan/quarantine.c:259 kasan_kmalloc+0xca/0xe0 mm/kasan/kasan.c:536 kasan_slab_alloc+0x12/0x20 mm/kasan/kasan.c:489 slab_post_alloc_hook mm/slab.h:444 [inline] slab_alloc mm/slab.c:3397 [inline] kmem_cache_alloc+0x11b/0x760 mm/slab.c:3559 ptlock_alloc mm/memory.c:4659 [inline] ptlock_init include/linux/mm.h:1729 [inline] pgtable_pmd_page_ctor include/linux/mm.h:1821 [inline] pmd_alloc_one arch/x86/include/asm/pgalloc.h:93 [inline] __pmd_alloc+0xb6/0x4e0 mm/memory.c:4150 pmd_alloc include/linux/mm.h:1679 [inline] __handle_mm_fault+0x10a2/0x39c0 mm/memory.c:4001 handle_mm_fault+0x334/0x8d0 mm/memory.c:4071 __do_page_fault+0x4f6/0xb60 arch/x86/mm/fault.c:1445 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1520 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1066 RIP: 0033:0x40125d RSP: 002b:0000000000a6f910 EFLAGS: 00010287 RAX: 0000001ddcc20000 RBX: 0000000001cd2914 RCX: 000000000040c380 RDX: 0000001ddbc20000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000001cd2940 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000e75 R13: 0000000000000017 R14: 0000000000036431 R15: 0000000000000016 Code: 00 00 00 80 48 01 c2 72 44 48 b9 00 00 00 80 ff 77 00 00 48 01 ca 48 b9 00 00 00 00 00 ea ff ff 48 c1 ea 0c 48 c1 e2 06 48 01 ca <48> 8b 4a 20 48 8d 71 ff 83 e1 01 48 0f 45 d6 4c 8b 6a 30 e9 f4 RIP: virt_to_head_page include/linux/mm.h:603 [inline] RSP: ffff8801d01ff908 RIP: qlink_to_cache mm/kasan/quarantine.c:127 [inline] RSP: ffff8801d01ff908 RIP: qlist_free_all+0x12b/0x160 mm/kasan/quarantine.c:163 RSP: ffff8801d01ff908 ---[ end trace 6c0302ce98f854fc ]---