syzbot


kernel BUG at include/linux/mm.h:LINE! (6)

Status: upstream: reported C repro on 2020/04/19 15:28
Reported-by: syzbot+a923008018a2d298247b@syzkaller.appspotmail.com
First crash: 968d, last: 50d

Cause bisection: failed (bisect log)

Fix bisection: failed (bisect log)
similar bugs (7):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG at include/linux/mm.h:LINE! (3) C 14 1381d 1381d 0/24 closed as invalid on 2019/02/27 20:54
linux-4.19 kernel BUG at include/linux/mm.h:LINE! C error 308 30d 1332d 0/1 upstream: reported C repro on 2019/04/17 12:33
upstream kernel BUG at include/linux/mm.h:LINE! syz 68 1646d 1683d 6/24 fixed on 2018/06/07 13:52
upstream kernel BUG at include/linux/mm.h:LINE! (2) C 1009 1382d 1645d 12/24 fixed on 2019/02/26 22:09
upstream kernel BUG at include/linux/mm.h:LINE! (5) C done done 129 1306d 1376d 16/24 fixed on 2020/01/08 01:07
linux-4.14 kernel BUG at include/linux/mm.h:LINE! 1 1095d 1095d 0/1 auto-closed as invalid on 2020/04/08 20:20
upstream kernel BUG at include/linux/mm.h:LINE! (4) 2 1379d 1378d 0/24 closed as invalid on 2019/03/02 20:05
Patch testing requests:
Created Duration User Patch Repo Result
2022/09/23 02:30 19m retest repro upstream OK log
2022/09/22 23:29 17m retest repro upstream OK log
2022/09/12 17:27 18m retest repro upstream OK log
2022/09/12 13:27 18m retest repro upstream OK log

Sample crash report:
------------[ cut here ]------------
kernel BUG at include/linux/mm.h:1529!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 3610 Comm: syz-executor407 Not tainted 6.0.0-syzkaller-09589-g55be6084c8e0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
RIP: 0010:page_needs_cow_for_dma include/linux/mm.h:1529 [inline]
RIP: 0010:page_try_dup_anon_rmap include/linux/rmap.h:253 [inline]
RIP: 0010:copy_hugetlb_page_range+0x1f16/0x2590 mm/hugetlb.c:4846
Code: 20 2c ee ff 0f 0b e8 49 d9 b6 ff 83 8c 24 00 01 00 00 01 48 8d bc 24 e0 00 00 00 e8 14 15 02 00 e9 5d ef ff ff e8 2a d9 b6 ff <0f> 0b e8 23 d9 b6 ff 0f 0b e8 1c d9 b6 ff 49 c1 e4 0e 48 8b 84 24
RSP: 0018:ffffc90003c8f5f0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff888025235880 RSI: ffffffff81c47116 RDI: 0000000000000005
RBP: ffffea0001170000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 000000000008c07d R12: ffffea0001170008
R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000020000000
FS:  0000555557369300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020003200 CR3: 000000001d225000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 copy_page_range+0x2145/0x38e0 mm/memory.c:1288
 dup_mmap kernel/fork.c:699 [inline]
 dup_mm+0xa99/0x13a0 kernel/fork.c:1524
 copy_mm kernel/fork.c:1576 [inline]
 copy_process+0x3bd3/0x7110 kernel/fork.c:2254
 kernel_clone+0xe7/0x8f0 kernel/fork.c:2672
 __do_sys_clone3+0x1cd/0x2e0 kernel/fork.c:2964
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f2d19230c39
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff4c74e768 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2d19230c39
RDX: 00007f2d19230c39 RSI: 0000000000000058 RDI: 00007fff4c74e770
RBP: 00007f2d191f4d80 R08: 0000000000000000 R09: 0000000000000000
R10: 00007fff4c74e770 R11: 0000000000000246 R12: 00007f2d191f4e10
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:page_needs_cow_for_dma include/linux/mm.h:1529 [inline]
RIP: 0010:page_try_dup_anon_rmap include/linux/rmap.h:253 [inline]
RIP: 0010:copy_hugetlb_page_range+0x1f16/0x2590 mm/hugetlb.c:4846
Code: 20 2c ee ff 0f 0b e8 49 d9 b6 ff 83 8c 24 00 01 00 00 01 48 8d bc 24 e0 00 00 00 e8 14 15 02 00 e9 5d ef ff ff e8 2a d9 b6 ff <0f> 0b e8 23 d9 b6 ff 0f 0b e8 1c d9 b6 ff 49 c1 e4 0e 48 8b 84 24
RSP: 0018:ffffc90003c8f5f0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff888025235880 RSI: ffffffff81c47116 RDI: 0000000000000005
RBP: ffffea0001170000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 000000000008c07d R12: ffffea0001170008
R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000020000000
FS:  0000555557369300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020003200 CR3: 000000001d225000 CR4: 0000000000350ef0

Crashes (98):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2022/10/20 10:36 upstream 55be6084c8e0 b31320fc .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce 2022/10/10 11:14 upstream 4899a36f91a9 aea5da89 .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-root 2022/10/05 07:03 upstream a5088ee7251e eab8f949 .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-root 2022/10/05 06:43 upstream a5088ee7251e eab8f949 .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-root 2022/10/05 06:19 upstream a5088ee7251e eab8f949 .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-root 2022/10/05 06:01 upstream a5088ee7251e eab8f949 .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce 2022/09/30 10:00 upstream 987a926c1d8a 1d385642 .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce 2022/09/30 09:40 upstream 987a926c1d8a 1d385642 .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce 2022/09/30 05:25 upstream 511cce163b75 1d385642 .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce 2022/09/30 05:01 upstream 511cce163b75 1d385642 .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-selinux-root 2022/09/30 04:47 upstream 511cce163b75 1d385642 .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce 2022/09/30 04:46 upstream 511cce163b75 1d385642 .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-root 2022/09/30 04:45 upstream 987a926c1d8a 1d385642 .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-smack-root 2022/09/30 04:35 upstream 511cce163b75 1d385642 .config log report syz C kernel BUG in page_try_dup_anon_rmap
ci-upstream-kasan-gce-selinux-root 2020/12/07 17:28 upstream 0477e9288185 1190297f .config log report syz C
ci-upstream-linux-next-kasan-gce-root 2022/09/30 04:36 linux-next aaa11ce2ffc8 1d385642 .config log report syz C kernel BUG in copy_hugetlb_page_range
ci-upstream-linux-next-kasan-gce-root 2020/12/01 00:15 linux-next c6b11acc5f85 78d50c1d .config log report syz C
ci-upstream-kasan-gce 2022/03/24 08:14 upstream 1bc191051dca 5ff41e94 .config log report syz C kernel BUG in kvm_release_pfn_clean
ci-upstream-kasan-gce 2020/09/28 07:38 upstream 16bc1d5432eb 5dd8aee8 .config log report syz C
ci-upstream-kasan-gce-386 2020/09/28 07:28 upstream 16bc1d5432eb 5dd8aee8 .config log report syz C
ci-upstream-kasan-gce-386 2020/09/26 03:20 upstream 171d4ff79f96 4a006f63 .config log report syz C
ci-upstream-kasan-gce-smack-root 2022/10/10 10:54 upstream 4899a36f91a9 aea5da89 .config log report info kernel BUG in page_try_dup_anon_rmap
ci-upstream-kasan-gce-selinux-root 2022/10/08 18:57 upstream e8bc52cb8df8 aea5da89 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-root 2022/10/03 01:21 upstream a962b54e162c feb56351 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-selinux-root 2022/10/03 01:04 upstream a962b54e162c feb56351 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce 2022/10/02 23:57 upstream a962b54e162c feb56351 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-selinux-root 2022/09/30 21:41 upstream 5a77386984b5 feb56351 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-smack-root 2022/09/30 04:54 upstream 511cce163b75 1d385642 .config log report info kernel BUG in page_try_dup_anon_rmap
ci-upstream-kasan-gce-root 2022/09/30 04:53 upstream 987a926c1d8a 1d385642 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce 2022/09/30 04:52 upstream 511cce163b75 1d385642 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-smack-root 2022/09/30 04:42 upstream 511cce163b75 1d385642 .config log report info kernel BUG in page_try_dup_anon_rmap
ci-upstream-kasan-gce-selinux-root 2022/09/30 04:33 upstream 511cce163b75 1d385642 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-selinux-root 2022/09/30 04:33 upstream 511cce163b75 1d385642 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce 2022/09/30 04:31 upstream 511cce163b75 1d385642 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce 2022/09/30 04:31 upstream 511cce163b75 1d385642 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-root 2022/09/30 04:30 upstream 987a926c1d8a 1d385642 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-smack-root 2022/09/30 04:23 upstream 511cce163b75 1d385642 .config log report info kernel BUG in page_try_dup_anon_rmap
ci-upstream-kasan-gce-smack-root 2022/09/30 04:21 upstream 511cce163b75 1d385642 .config log report info kernel BUG in page_try_dup_anon_rmap
ci-upstream-kasan-gce 2022/03/21 07:08 upstream f443e374ae13 e2d91b1d .config log report info kernel BUG in kvm_release_pfn_clean
ci-upstream-kasan-gce 2022/03/20 12:16 upstream 14702b3b2438 e2d91b1d .config log report info kernel BUG in kvm_release_pfn_clean
ci-upstream-kasan-gce 2022/03/16 21:31 upstream 56e337f2cf13 dfa9a8ed .config log report info kernel BUG in kvm_release_pfn_clean
ci-upstream-kasan-gce 2022/03/16 01:25 upstream 56e337f2cf13 9e8eaa75 .config log report info kernel BUG in kvm_release_pfn_clean
ci-upstream-kasan-gce 2022/03/02 03:58 upstream 575115360652 45a13a73 .config log report info kernel BUG in kvm_release_pfn_clean
ci-upstream-kasan-gce 2022/02/05 13:43 upstream 0457e5153e0e a7dab638 .config log report info kernel BUG in kvm_release_pfn_clean
ci-upstream-kasan-gce-root 2021/11/03 10:29 upstream cc0356d6a02e 17f3edd2 .config log report info kernel BUG in release_pages
ci-upstream-kasan-gce-selinux-root 2020/07/02 18:18 upstream cd77006e01b3 bed10395 .config log report
ci-upstream-kasan-gce-root 2020/05/31 08:14 upstream ffeb595d8481 6f3e1c7c .config log report
ci-upstream-kasan-gce 2020/04/15 15:13 upstream 8632e9b5645b 3f3c5574 .config log report
ci-qemu-upstream-386 2022/10/03 06:09 upstream a962b54e162c feb56351 .config log report info kernel BUG in copy_hugetlb_page_range
ci-qemu-upstream-386 2022/10/03 02:31 upstream a962b54e162c feb56351 .config log report info kernel BUG in copy_hugetlb_page_range
ci-qemu-upstream-386 2022/09/30 04:58 upstream 987a926c1d8a 45fd7169 .config log report info kernel BUG in copy_hugetlb_page_range
ci-qemu-upstream-386 2022/09/30 04:46 upstream 987a926c1d8a 45fd7169 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-386 2022/09/30 04:21 upstream 511cce163b75 1d385642 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-kasan-gce-386 2021/11/11 11:30 upstream debe436e77c7 75b04091 .config log report info kernel BUG in release_pages
ci-upstream-linux-next-kasan-gce-root 2022/10/02 21:57 linux-next aaa11ce2ffc8 feb56351 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-linux-next-kasan-gce-root 2022/09/30 04:53 linux-next aaa11ce2ffc8 1d385642 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-linux-next-kasan-gce-root 2022/09/30 04:42 linux-next aaa11ce2ffc8 1d385642 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-linux-next-kasan-gce-root 2022/09/30 04:23 linux-next aaa11ce2ffc8 1d385642 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-linux-next-kasan-gce-root 2022/09/30 04:22 linux-next aaa11ce2ffc8 1d385642 .config log report info kernel BUG in copy_hugetlb_page_range
ci-upstream-linux-next-kasan-gce-root 2022/03/18 15:58 linux-next 91265a6da44d e2d91b1d .config log report info kernel BUG in kvm_release_pfn_clean
* Struck through repros no longer work on HEAD.