syzbot


WARNING: locking bug in unmap_page_range

Status: auto-closed as invalid on 2021/02/02 04:08
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+a3ab428a038913cb91a7@syzkaller.appspotmail.com
First crash: 1332d, last: 1299d
Discussions (1)
Title Replies (including bot) Last reply
WARNING: locking bug in unmap_page_range 0 (1) 2020/09/08 07:32

Sample crash report:
------------[ cut here ]------------
DEBUG_LOCKS_WARN_ON(1)
WARNING: CPU: 1 PID: 30581 at kernel/locking/lockdep.c:183 hlock_class kernel/locking/lockdep.c:183 [inline]
WARNING: CPU: 1 PID: 30581 at kernel/locking/lockdep.c:183 hlock_class kernel/locking/lockdep.c:172 [inline]
WARNING: CPU: 1 PID: 30581 at kernel/locking/lockdep.c:183 check_wait_context kernel/locking/lockdep.c:4115 [inline]
WARNING: CPU: 1 PID: 30581 at kernel/locking/lockdep.c:183 __lock_acquire+0x15f1/0x5780 kernel/locking/lockdep.c:4391
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 30581 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x198/0x1fd lib/dump_stack.c:118
 panic+0x382/0x7fb kernel/panic.c:231
 __warn.cold+0x20/0x4b kernel/panic.c:600
 report_bug+0x1bd/0x210 lib/bug.c:198
 handle_bug+0x38/0x90 arch/x86/kernel/traps.c:234
 exc_invalid_op+0x14/0x40 arch/x86/kernel/traps.c:254
 asm_exc_invalid_op+0x12/0x20 arch/x86/include/asm/idtentry.h:536
RIP: 0010:hlock_class kernel/locking/lockdep.c:183 [inline]
RIP: 0010:hlock_class kernel/locking/lockdep.c:172 [inline]
RIP: 0010:check_wait_context kernel/locking/lockdep.c:4115 [inline]
RIP: 0010:__lock_acquire+0x15f1/0x5780 kernel/locking/lockdep.c:4391
Code: 08 84 d2 0f 85 c5 39 00 00 8b 0d c2 fe fd 09 85 c9 0f 85 7f fa ff ff 48 c7 c6 c0 da 8b 88 48 c7 c7 80 d5 8b 88 e8 41 cb ea ff <0f> 0b e9 65 fa ff ff c7 44 24 48 fe ff ff ff 41 bf 01 00 00 00 c7
RSP: 0018:ffffc90009b37788 EFLAGS: 00010082
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff88802c1a0280 RSI: ffffffff815f59d5 RDI: fffff52001366ee3
RBP: ffff88802c1a0280 R08: 0000000000000000 R09: ffffffff8a05ae03
R10: 0000000000001857 R11: 0000000000000001 R12: ffff88802c1a0b68
R13: 0000000000001d02 R14: ffff88800011b3d8 R15: 0000000000040000
 lock_acquire+0x1f3/0xaf0 kernel/locking/lockdep.c:5029
 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
 _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151
 spin_lock include/linux/spinlock.h:354 [inline]
 zap_pte_range mm/memory.c:1240 [inline]
 zap_pmd_range mm/memory.c:1386 [inline]
 zap_pud_range mm/memory.c:1415 [inline]
 zap_p4d_range mm/memory.c:1436 [inline]
 unmap_page_range+0xa71/0x2a30 mm/memory.c:1457
 unmap_single_vma+0x198/0x300 mm/memory.c:1502
 unmap_vmas+0x168/0x2e0 mm/memory.c:1534
 exit_mmap+0x2b1/0x530 mm/mmap.c:3183
 __mmput+0x122/0x470 kernel/fork.c:1077
 mmput+0x53/0x60 kernel/fork.c:1098
 exit_mm kernel/exit.c:483 [inline]
 do_exit+0xa8b/0x29f0 kernel/exit.c:793
 do_group_exit+0x125/0x310 kernel/exit.c:903
 __do_sys_exit_group kernel/exit.c:914 [inline]
 __se_sys_exit_group kernel/exit.c:912 [inline]
 __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:912
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45de89
Code: Bad RIP value.
RSP: 002b:00007ffc330394e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000001e RCX: 000000000045de89
RDX: 00000000004177e1 RSI: fffffffffffffff7 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00000000e417e65b R09: 00007ffc33039540
R10: 00000000e417e657 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc33039540 R14: 0000000000000000 R15: 00007ffc33039550
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/10/05 04:07 upstream 549738f15da0 5ef9c291 .config console log report info ci-upstream-kasan-gce-selinux-root
2020/09/02 03:04 upstream b765a32a2e91 abf9ba4f .config console log report ci-upstream-kasan-gce
* Struck through repros no longer work on HEAD.