syzbot


BUG: unable to handle kernel paging request in clear_page_erms (2)

Status: auto-closed as invalid on 2021/06/28 09:14
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+53d8f1783530374386ee@syzkaller.appspotmail.com
First crash: 1093d, last: 1093d
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: unable to handle kernel paging request in clear_page_erms (3) mm 2 1019d 1026d 0/26 auto-closed as invalid on 2021/10/09 21:56
upstream BUG: unable to handle kernel paging request in clear_page_erms (4) mm arch 1 914d 910d 0/26 auto-closed as invalid on 2022/01/23 00:56
linux-4.19 BUG: unable to handle kernel paging request in clear_page_erms 1 842d 842d 0/1 auto-closed as invalid on 2022/05/04 22:20
upstream BUG: unable to handle kernel paging request in clear_page_erms (5) mm 4 85d 185d 0/26 moderation: reported on 2023/10/23 23:39
upstream BUG: unable to handle kernel paging request in clear_page_erms mm 1 1450d 1446d 0/26 auto-closed as invalid on 2020/08/05 10:45

Sample crash report:
BUG: unable to handle page fault for address: ffff88801a201000
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 10c01067 P4D 10c01067 PUD 10c02067 PMD 1dd00063 PTE 800000000000404e
Oops: 0002 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 8460 Comm: ifupdown-hotplu Not tainted 5.12.0-rc8-next-20210423-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:clear_page_erms+0x7/0x10 arch/x86/lib/clear_page_64.S:49
Code: 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 <f3> aa c3 cc cc cc cc cc cc 41 57 41 56 41 55 41 54 55 53 48 89 fb
RSP: 0018:ffffc900018674a0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000400dc0 RCX: 0000000000001000
RDX: ffffea0000688040 RSI: ffff888000000000 RDI: ffff88801a201000
RBP: ffffea0000688040 R08: 0000160000000000 R09: ffffea0000688080
R10: fffff940000d100e R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000000 R15: ffff88813fffb700
FS:  00007f6630785480(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff88801a201000 CR3: 000000001e22f000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 clear_page arch/x86/include/asm/page_64.h:49 [inline]
 clear_highpage include/linux/highmem.h:203 [inline]
 kernel_init_free_pages mm/page_alloc.c:1238 [inline]
 post_alloc_hook+0x175/0x200 mm/page_alloc.c:2350
 prep_new_page mm/page_alloc.c:2358 [inline]
 get_page_from_freelist+0x1034/0x2bf0 mm/page_alloc.c:3994
 __alloc_pages+0x1b2/0x500 mm/page_alloc.c:5200
 alloc_pages+0x18c/0x2a0 mm/mempolicy.c:2272
 pmd_alloc_one include/asm-generic/pgalloc.h:126 [inline]
 __pmd_alloc+0x3b/0x5c0 mm/memory.c:4675
 pmd_alloc include/linux/mm.h:2172 [inline]
 copy_pmd_range mm/memory.c:1044 [inline]
 copy_pud_range mm/memory.c:1101 [inline]
 copy_p4d_range mm/memory.c:1125 [inline]
 copy_page_range+0x2b58/0x3e50 mm/memory.c:1198
 dup_mmap kernel/fork.c:598 [inline]
 dup_mm+0x9ed/0x1380 kernel/fork.c:1373
 copy_mm kernel/fork.c:1425 [inline]
 copy_process+0x5e19/0x70e0 kernel/fork.c:2115
 kernel_clone+0xe7/0xac0 kernel/fork.c:2502
 __do_sys_clone+0xc8/0x110 kernel/fork.c:2619
 do_syscall_64+0x3a/0xb0 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f663027f38b
Code: db 45 85 f6 0f 85 95 01 00 00 64 4c 8b 04 25 10 00 00 00 31 d2 4d 8d 90 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 de 00 00 00 85 c0 41 89 c5 0f 85 e5 00 00
RSP: 002b:00007fff8e69fb30 EFLAGS: 00000246
 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f663027f38b
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 00007fff8e69fb60 R08: 00007f6630785480 R09: 0000000000000030
R10: 00007f6630785750 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 000055f2e07221a8
Modules linked in:

CR2: ffff88801a201000
---[ end trace 63bf41051e3aebf7 ]---
RIP: 0010:clear_page_erms+0x7/0x10 arch/x86/lib/clear_page_64.S:49
Code: 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 <f3> aa c3 cc cc cc cc cc cc 41 57 41 56 41 55 41 54 55 53 48 89 fb
RSP: 0018:ffffc900018674a0 EFLAGS: 00010246

RAX: 0000000000000000 RBX: 0000000000400dc0 RCX: 0000000000001000
RDX: ffffea0000688040 RSI: ffff888000000000 RDI: ffff88801a201000
RBP: ffffea0000688040 R08: 0000160000000000 R09: ffffea0000688080
R10: fffff940000d100e R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000000 R15: ffff88813fffb700
FS:  00007f6630785480(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff88801a201000 CR3: 000000001e22f000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/04/29 09:13 linux-next e3d35712f85a 77e2b668 .config console log report info ci-upstream-linux-next-kasan-gce-root BUG: unable to handle kernel paging request in clear_page_erms
* Struck through repros no longer work on HEAD.