syzbot

 sign-in | mailing list | source | docs
🐞 Open [1419]
≡ Subsystems
🐞 Fixed [5830]
🐞 Invalid [14228]
⬇ Missing Backports [92]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

kernel BUG at include/linux/mm.h:LINE!

Status: fixed on 2018/06/07 13:52
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+d96f60296ef613fe1d69@syzkaller.appspotmail.com
Fix commit: a466ef76b815 x86/kexec: Avoid double free_page() upon do_kexec_load() failure
First crash: 2397d, last: 2360d
▶ ▼ Discussions (9)
Title Replies (including bot) Last reply
[PATCH 3.16 000/366] 3.16.60-rc1 review 370 (370) 2019/03/29 15:47
[PATCH 4.4 00/92] 4.4.133-stable review 126 (126) 2018/11/01 21:45
[PATCH 4.16 000/161] 4.16.12-stable review 171 (171) 2018/05/24 19:47
[PATCH 3.18 00/45] 3.18.110-stable review 52 (52) 2018/05/24 19:46
[PATCH 4.14 000/165] 4.14.44-stable review 176 (176) 2018/05/24 19:46
[PATCH 4.9 00/96] 4.9.103-stable review 101 (101) 2018/05/24 19:26
[PATCH v2] x86/kexec: avoid double free_page() upon do_kexec_load() failure. 4 (4) 2018/05/13 17:54
kernel BUG at include/linux/mm.h:LINE! 2 (4) 2018/05/04 00:32
[PATCH v2] x86/kexec: avoid double free_page() upon do_kexec_load() failure. 1 (1) 2018/05/03 23:38
▶ ▼ Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG at include/linux/mm.h:LINE! (3) fs C 14 2095d 2095d 0/28 closed as invalid on 2019/02/27 20:54
linux-4.19 kernel BUG at include/linux/mm.h:LINE! C error 308 743d 2045d 0/1 upstream: reported C repro on 2019/04/17 12:33
upstream kernel BUG at include/linux/mm.h:LINE! (2) net C 1009 2095d 2358d 11/28 fixed on 2019/02/26 22:09
upstream kernel BUG at include/linux/mm.h:LINE! (5) net C done done 129 2019d 2089d 15/28 fixed on 2020/01/08 01:07
upstream kernel BUG at include/linux/mm.h:LINE! (6) mm C error error 98 763d 1677d 0/28 auto-obsoleted due to no activity on 2023/06/22 14:14
linux-4.14 kernel BUG at include/linux/mm.h:LINE! 1 1808d 1808d 0/1 auto-closed as invalid on 2020/04/08 20:20
upstream kernel BUG at include/linux/mm.h:LINE! (4) fs 2 2093d 2092d 0/28 closed as invalid on 2019/03/02 20:05

Sample crash report:
flags: 0x2fffc0000000000()
raw: 02fffc0000000000 0000000000000000 0000000000000000 00000000ffffffff
raw: ffffea0006c8ca60 ffff8801dae2fdd8 0000000000000000 0000000000000000
page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0)
------------[ cut here ]------------
kernel BUG at include/linux/mm.h:492!
invalid opcode: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 4532 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #53
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:put_page_testzero include/linux/mm.h:492 [inline]
RIP: 0010:__free_pages+0x14f/0x180 mm/page_alloc.c:4427
RSP: 0018:ffff8801cf217c08 EFLAGS: 00010203
RAX: 0000000000000000 RBX: 1ffff10039e42f82 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff81a5b9e5 RDI: ffffed0039e42f70
RBP: ffff8801cf217c98 R08: ffff8801b39bc080 R09: ffffed003b5c4fb0
R10: ffffed003b5c4fb0 R11: ffff8801dae27d87 R12: ffffea0006c8ca00
R13: 1ffff10039e42f86 R14: ffff8801cf217c70 R15: ffffea0006c8ca1c
FS:  0000000002119940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004daac4 CR3: 00000001b2201000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 free_pages+0x50/0x90 mm/page_alloc.c:4441
 free_transition_pgtable+0x68/0xf0 arch/x86/kernel/machine_kexec_64.c:42
 machine_kexec_cleanup+0x9/0x10 arch/x86/kernel/machine_kexec_64.c:268
 kimage_free+0x1f2/0x270 kernel/kexec_core.c:639
 do_kexec_load+0x53a/0x790 kernel/kexec.c:170
 __do_sys_kexec_load kernel/kexec.c:243 [inline]
 __se_sys_kexec_load kernel/kexec.c:218 [inline]
 __x64_sys_kexec_load+0x1bf/0x230 kernel/kexec.c:218
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455a09
RSP: 002b:00007fff2b2615f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
RAX: ffffffffffffffda RBX: 0000000002119914 RCX: 0000000000455a09
RDX: 00000000200005c0 RSI: 0000000000000007 RDI: 0000000000000000
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000468 R14: 00000000006faa60 R15: 0000000000000005
Code: 68 5b 41 5c 41 5d 41 5e 41 5f 5d c3 8b b5 74 ff ff ff 4c 89 e7 e8 02 87 ff ff eb c6 48 c7 c6 80 68 d0 87 4c 89 e7 e8 21 7b 0d 00 <0f> 0b 4c 89 ef 89 85 70 ff ff ff e8 b1 7d 1d 00 8b 85 70 ff ff 
RIP: put_page_testzero include/linux/mm.h:492 [inline] RSP: ffff8801cf217c08
RIP: __free_pages+0x14f/0x180 mm/page_alloc.c:4427 RSP: ffff8801cf217c08
---[ end trace 6b51aa551f1790c9 ]---

Crashes (68):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/05/16 14:36 upstream 21b9f1c7e319 75b2448a .config console log report syz ci-upstream-kasan-gce-root
2018/05/16 01:00 upstream eeba2dfa6a0d 68ce85f1 .config console log report syz ci-upstream-kasan-gce-root
2018/05/15 15:59 upstream 67b8d5c70812 661fd7b9 .config console log report syz ci-upstream-kasan-gce-root
2018/05/15 14:52 upstream 67b8d5c70812 661fd7b9 .config console log report syz ci-upstream-kasan-gce-root
2018/05/15 12:03 upstream 67b8d5c70812 661fd7b9 .config console log report syz ci-upstream-kasan-gce-root
2018/05/13 14:54 upstream ccda3c4b7777 c05b619d .config console log report syz ci-upstream-kasan-gce-root
2018/05/13 05:55 upstream 427fbe89261d e726f42b .config console log report syz ci-upstream-kasan-gce-root
2018/05/11 08:34 upstream 008464a9360e 12c7428a .config console log report syz ci-upstream-kasan-gce-root
2018/05/08 17:47 upstream 036db8bd9637 b88872ba .config console log report syz ci-upstream-kasan-gce-root
2018/05/03 21:03 upstream c15f6d8d4715 9ce14f4b .config console log report syz ci-upstream-kasan-gce-root
2018/06/07 01:01 upstream 0ad39cb3d70f e0e534c6 .config console log report ci-upstream-kasan-gce-root
2018/06/05 23:36 upstream 5037be168f0e 863a24bb .config console log report ci-upstream-kasan-gce-root
2018/06/03 21:44 upstream 325e14f97e0c 2f93b54f .config console log report ci-upstream-kasan-gce-root
2018/06/03 03:36 upstream 4277e6b9fd44 2f93b54f .config console log report ci-upstream-kasan-gce-root
2018/06/01 12:55 upstream 0512e0134582 2f93b54f .config console log report ci-upstream-kasan-gce-root
2018/06/01 07:52 upstream dd52cb879063 2f93b54f .config console log report ci-upstream-kasan-gce-root
2018/05/30 06:42 upstream 0044cdeb7313 2f93b54f .config console log report ci-upstream-kasan-gce-root
2018/05/29 14:59 upstream 3d661e2a2d1c e276de77 .config console log report ci-upstream-kasan-gce-root
2018/05/26 18:38 upstream bc2dbc5420e8 f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/25 18:19 upstream b50694381cfc f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/25 14:00 upstream b50694381cfc f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/24 03:07 upstream bee797529d7c f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/24 02:00 upstream bee797529d7c f48c20b8 .config console log report ci-upstream-kasan-gce
2018/05/23 18:05 upstream a048a07d7f45 f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/23 11:06 upstream a048a07d7f45 f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/22 19:21 upstream a048a07d7f45 f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/22 08:39 upstream a048a07d7f45 f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/20 16:20 upstream 203ec2fed17a f48c20b8 .config console log report ci-upstream-kasan-gce
2018/05/20 13:14 upstream 203ec2fed17a f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/20 11:35 upstream 203ec2fed17a f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/20 00:42 upstream 0b449a441dac f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/19 21:35 upstream 0b449a441dac f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/19 13:44 upstream 73fcb1a370c7 849705db .config console log report ci-upstream-kasan-gce-root
2018/05/19 10:26 upstream 73fcb1a370c7 849705db .config console log report ci-upstream-kasan-gce-root
2018/05/17 23:21 upstream 305bb5521282 738d58ad .config console log report ci-upstream-kasan-gce-root
2018/05/17 22:19 upstream 305bb5521282 738d58ad .config console log report ci-upstream-kasan-gce
2018/05/17 22:11 upstream 305bb5521282 738d58ad .config console log report ci-upstream-kasan-gce-root
2018/05/17 22:08 upstream 305bb5521282 738d58ad .config console log report ci-upstream-kasan-gce-root
2018/05/17 21:40 upstream 305bb5521282 738d58ad .config console log report ci-upstream-kasan-gce
2018/05/16 23:11 upstream 21b9f1c7e319 a367c1d7 .config console log report ci-upstream-kasan-gce-root
2018/05/16 14:50 upstream 21b9f1c7e319 75b2448a .config console log report ci-upstream-kasan-gce-root
2018/05/16 14:18 upstream 21b9f1c7e319 75b2448a .config console log report ci-upstream-kasan-gce-root
2018/05/16 00:43 upstream eeba2dfa6a0d 68ce85f1 .config console log report ci-upstream-kasan-gce-root
2018/05/15 15:45 upstream 67b8d5c70812 661fd7b9 .config console log report ci-upstream-kasan-gce-root
2018/05/15 14:37 upstream 67b8d5c70812 661fd7b9 .config console log report ci-upstream-kasan-gce-root
2018/05/15 11:49 upstream 67b8d5c70812 661fd7b9 .config console log report ci-upstream-kasan-gce-root
2018/05/15 09:51 upstream 67b8d5c70812 661fd7b9 .config console log report ci-upstream-kasan-gce-root
2018/04/30 20:40 upstream 6da6c0db5316 d5b114b4 .config console log report ci-upstream-kasan-gce-root
2018/06/07 07:18 net-next-old 7170e6045a6a e0e534c6 .config console log report ci-upstream-net-kasan-gce
2018/06/04 21:06 net-next-old 4cd328f83916 a50d873b .config console log report ci-upstream-net-kasan-gce
2018/06/02 05:37 net-next-old 21ad1173589e 2f93b54f .config console log report ci-upstream-net-kasan-gce
2018/05/30 01:26 net-next-old ae40832e53c3 2f93b54f .config console log report ci-upstream-net-kasan-gce
2018/05/26 16:02 net-next-old e52cde717093 f48c20b8 .config console log report ci-upstream-net-kasan-gce
2018/05/23 12:30 net-next-old 1fe8c06c4a0d f48c20b8 .config console log report ci-upstream-net-kasan-gce
2018/05/23 01:59 net-next-old 9c803cfd5fe2 f48c20b8 .config console log report ci-upstream-net-kasan-gce
2018/05/21 08:30 net-next-old 7ddae24f97f9 f48c20b8 .config console log report ci-upstream-net-kasan-gce
2018/05/20 08:18 net-next-old 62c8a069b510 f48c20b8 .config console log report ci-upstream-net-kasan-gce
2018/05/19 13:22 net-next-old eb38401c779d 849705db .config console log report ci-upstream-net-kasan-gce
2018/05/19 12:03 net-next-old eb38401c779d 849705db .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.