syzbot


kernel BUG at mm/memory.c:LINE!
Status: upstream: reported syz repro on 2020/05/21 23:25
Reported-by: syzbot+c464fddc58432bbf3f44@syzkaller.appspotmail.com
First crash: 734d, last: 650d

Fix bisection: the fix commit could be any of (bisect log):
  a41ba30d9df2 Linux 4.14.181
  4139fb08c05f Linux 4.14.187
similar bugs (4):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 kernel BUG at mm/memory.c:LINE! C error 6 71d 734d 0/1 upstream: reported C repro on 2020/05/21 22:29
upstream kernel BUG in __handle_mm_fault 2 391d 390d 0/22 auto-closed as invalid on 2021/06/29 08:42
upstream kernel BUG in vmf_insert_pfn_prot C done 1415 4d00h 251d 0/22 upstream: reported C repro on 2021/09/17 09:22
upstream kernel BUG at mm/memory.c:LINE! 1 1418d 1417d 9/22 fixed on 2018/08/08 18:10

Sample crash report:
next ffff8880a196a420 prev ffff88808e47ec60 mm ffff8880941b6000
prot 25 anon_vma           (null) vm_ops ffffffff8690c420
pgoff 0 file ffff8880964cd2c0 private_data           (null)
flags: 0xfe(write|exec|shared|mayread|maywrite|mayexec|mayshare)
------------[ cut here ]------------
kernel BUG at mm/memory.c:3895!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 6582 Comm: syz-executor.0 Not tainted 4.14.181-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8880948b06c0 task.stack: ffff888096780000
RIP: 0010:wp_huge_pmd mm/memory.c:3895 [inline]
RIP: 0010:__handle_mm_fault+0x213f/0x3700 mm/memory.c:4103
RSP: 0018:ffff888096787d48 EFLAGS: 00010283
RAX: 0000000000000137 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff868c0a40 RDI: ffffed1012cf0f88
RBP: 0000000080a000e5 R08: 0000000000000137 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff11012cf0faf
R13: ffff8880905a6840 R14: 0000000000000080 R15: ffffffff87806758
FS:  0000000000e44940(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000200001c0 CR3: 000000009fd07000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 handle_mm_fault+0x306/0x794 mm/memory.c:4150
 __do_page_fault+0x578/0xb50 arch/x86/mm/fault.c:1442
 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1123
RIP: c4ea:0xfffffffffffffffe
RSP: 0000:0000000000790378 EFLAGS: 00790380
Code: df ff f0 ff 4d 1c 0f 85 ba ed ff ff e8 5b d1 df ff 48 89 ef e8 d3 d4 f6 ff e9 a8 ed ff ff e8 49 d1 df ff 4c 89 ef e8 fd ab fd ff <0f> 0b e8 3a d1 df ff 4c 8d 7c 24 60 4c 89 ff e8 4d b2 0a 00 41 
RIP: wp_huge_pmd mm/memory.c:3895 [inline] RSP: ffff888096787d48
RIP: __handle_mm_fault+0x213f/0x3700 mm/memory.c:4103 RSP: ffff888096787d48
---[ end trace 0b180e244032d3c2 ]---

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-14 2020/05/21 23:24 linux-4.14.y a41ba30d9df2 4afdfa20 .config log report syz
ci2-linux-4-14 2020/08/14 11:27 linux-4.14.y 14b58326976d 54ce1ed6 .config log report