syzbot


BUG: Bad page map

Status: upstream: reported on 2022/08/25 04:05
Reported-by: syzbot+7bda79ff04dba0a3fcc6@syzkaller.appspotmail.com
First crash: 95d, last: 95d
similar bugs (9):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 BUG: Bad page map (3) 1 132d 132d 0/1 auto-obsoleted due to no activity on 2022/11/15 21:40
upstream BUG: Bad page map (5) C 29 7d01h 211d 23/24 upstream: reported C repro on 2022/05/01 09:02
linux-4.19 BUG: Bad page map (2) 10 319d 499d 0/1 auto-closed as invalid on 2022/05/13 11:22
upstream BUG: Bad page map (2) syz 127 1545d 1601d 0/24 closed as invalid on 2018/09/05 12:51
upstream BUG: Bad page map 1 1604d 1604d 0/24 closed as invalid on 2018/07/08 13:28
upstream BUG: Bad page map (3) 4 1414d 1540d 0/24 auto-closed as invalid on 2019/07/13 00:02
linux-4.19 BUG: Bad page map 2 816d 874d 0/1 auto-closed as invalid on 2021/01/01 08:20
upstream BUG: Bad page map (4) 39 360d 997d 0/24 auto-closed as invalid on 2022/04/02 04:25
linux-4.14 BUG: Bad page map 1 862d 862d 0/1 auto-closed as invalid on 2020/11/16 16:05

Sample crash report:
BUG: Bad page map in process syz-executor.3  pte:ffff8881c4d1f1c0 pmd:1e5467067
addr:00007f216a239000 vm_flags:100400fb anon_vma:0000000000000000 mapping:ffff8881f58462c8 index:1a3
file:kcov fault:0x0 mmap:kcov_mmap readpage:0x0
CPU: 1 PID: 12065 Comm: syz-executor.3 Not tainted 5.4.197-syzkaller-00012-g27e532874a0e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x18e/0x1d5 lib/dump_stack.c:118
 print_bad_pte+0x519/0x540 mm/memory.c:559
 vm_normal_page+0x135/0x1d0 mm/memory.c:648
 zap_pte_range+0x2d3/0x1c10 mm/memory.c:1077
 zap_pmd_range mm/memory.c:1221 [inline]
 zap_pud_range mm/memory.c:1250 [inline]
 zap_p4d_range mm/memory.c:1271 [inline]
 unmap_page_range+0x35e/0x450 mm/memory.c:1292
 unmap_single_vma mm/memory.c:1337 [inline]
 unmap_vmas+0x306/0x440 mm/memory.c:1369
 exit_mmap+0x286/0x4f0 mm/mmap.c:3166
 __mmput+0x34/0x240 kernel/fork.c:1090
 exit_mm kernel/exit.c:489 [inline]
 do_exit+0xb40/0x2b40 kernel/exit.c:799
 do_group_exit+0x136/0x300 kernel/exit.c:910
 get_signal+0xd99/0x13f0 kernel/signal.c:2735
 do_signal+0x3b/0x540 arch/x86/kernel/signal.c:809
 exit_to_usermode_loop+0xdd/0x1d0 arch/x86/entry/common.c:159
 prepare_exit_to_usermode+0x17c/0x1d0 arch/x86/entry/common.c:194
 retint_user+0x8/0x8
RIP: 0033:0x7f216ad1f281
Code: Bad RIP value.
RSP: 002b:00002a452cb9d000 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f216ae32050 RCX: 00007f216ad1f279
RDX: 0000000000000000 RSI: 00002a452cb9d000 RDI: 0000000050000000
RBP: 00007f216ad79189 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffd24d8040f R14: 00007f2169e74300 R15: 0000000000022000
BUG: Bad rss-counter state mm:ffff8881e3064000 type:MM_FILEPAGES val:1

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-android-5-4-perf-kasan 2022/08/25 04:04 android12-5.4 27e532874a0e 514514f6 .config log report info BUG: Bad page map
* Struck through repros no longer work on HEAD.