syzbot


kernel BUG in unmap_page_range (2)

Status: auto-obsoleted due to no activity on 2024/10/01 00:28
First crash: 147d, last: 147d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-54 kernel BUG in unmap_page_range 15 261d 522d 0/2 auto-obsoleted due to no activity on 2024/06/08 05:47

Sample crash report:
------------[ cut here ]------------
kernel BUG at include/linux/swapops.h:195!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 1791 Comm: syz.1.493 Not tainted 5.4.276-syzkaller-00021-g58de09405d1e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:migration_entry_to_page include/linux/swapops.h:195 [inline]
RIP: 0010:zap_pte_range mm/memory.c:1146 [inline]
RIP: 0010:zap_pmd_range mm/memory.c:1222 [inline]
RIP: 0010:zap_pud_range mm/memory.c:1251 [inline]
RIP: 0010:zap_p4d_range mm/memory.c:1272 [inline]
RIP: 0010:unmap_page_range+0x2606/0x2620 mm/memory.c:1293
Code: 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 a0 01 00 00 75 1d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2a 59 d9 ff <0f> 0b e8 23 59 d9 ff 0f 0b e8 6c 0e b0 ff 66 66 2e 0f 1f 84 00 00
RSP: 0018:ffff8881e6d97880 EFLAGS: 00010293
RAX: ffffffff818adfd6 RBX: 0000000000000000 RCX: ffff8881e4e49f80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff8881e6d97a70 R08: ffffffff818acc72 R09: fffffb1df8246d99
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: fffff8efc1236cc0 R14: 1ffff11039c10e39 R15: ffff8881f6e49888
FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fcdbb9eca6c CR3: 0000000005e0e000 CR4: 00000000003406a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 unmap_single_vma mm/memory.c:1338 [inline]
 unmap_vmas+0x355/0x4b0 mm/memory.c:1370
 exit_mmap+0x2bc/0x520 mm/mmap.c:3191
 __mmput+0x8e/0x2c0 kernel/fork.c:1101
 exit_mm kernel/exit.c:536 [inline]
 do_exit+0xc08/0x2bc0 kernel/exit.c:846
 do_group_exit+0x138/0x300 kernel/exit.c:982
 __do_sys_exit_group kernel/exit.c:993 [inline]
 __se_sys_exit_group kernel/exit.c:991 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:991
 do_syscall_64+0xca/0x1c0 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x5c/0xc1
RIP: 0033:0x7ff6c0ebcf19
Code: Bad RIP value.
RSP: 002b:00007fff35abb748 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fff35abb840 RCX: 00007ff6c0ebcf19
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000535abb87f R09: 0000000000000000
R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Modules linked in:
---[ end trace 6c7407f292bf232f ]---
RIP: 0010:migration_entry_to_page include/linux/swapops.h:195 [inline]
RIP: 0010:zap_pte_range mm/memory.c:1146 [inline]
RIP: 0010:zap_pmd_range mm/memory.c:1222 [inline]
RIP: 0010:zap_pud_range mm/memory.c:1251 [inline]
RIP: 0010:zap_p4d_range mm/memory.c:1272 [inline]
RIP: 0010:unmap_page_range+0x2606/0x2620 mm/memory.c:1293
Code: 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 a0 01 00 00 75 1d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2a 59 d9 ff <0f> 0b e8 23 59 d9 ff 0f 0b e8 6c 0e b0 ff 66 66 2e 0f 1f 84 00 00
RSP: 0018:ffff8881e6d97880 EFLAGS: 00010293
RAX: ffffffff818adfd6 RBX: 0000000000000000 RCX: ffff8881e4e49f80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff8881e6d97a70 R08: ffffffff818acc72 R09: fffffb1df8246d99
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: fffff8efc1236cc0 R14: 1ffff11039c10e39 R15: ffff8881f6e49888
FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff6c0ebceef CR3: 0000000005e0e000 CR4: 00000000003406a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/03 00:17 android12-5.4 58de09405d1e 07f0a0a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-perf-kasan kernel BUG in unmap_page_range
* Struck through repros no longer work on HEAD.