bisecting fixing commit since 5d6ab0bb408ffdaac585982faa9ec8c7d5cc349f
building syzkaller on 838e7e2cd9228583ca33c49a39aea4d863d3e36d
testing commit 5d6ab0bb408ffdaac585982faa9ec8c7d5cc349f
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: b0181f485e7854461dc1882e3643d50e6feb3311e0413c36dfb20220166845ed
run #0: crashed: WARNING in drm_gem_shmem_vm_open
run #1: crashed: WARNING in drm_gem_shmem_vm_open
run #2: crashed: WARNING in drm_gem_shmem_vm_open
run #3: crashed: WARNING in drm_gem_shmem_vm_open
run #4: crashed: WARNING in drm_gem_shmem_vm_open
run #5: crashed: WARNING in drm_gem_shmem_vm_open
run #6: crashed: WARNING in drm_gem_shmem_vm_open
run #7: crashed: WARNING in drm_gem_shmem_vm_open
run #8: crashed: WARNING in drm_gem_shmem_vm_open
run #9: crashed: WARNING in drm_gem_shmem_vm_open
run #10: crashed: WARNING in drm_gem_shmem_vm_open
run #11: crashed: WARNING in drm_gem_shmem_vm_open
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
testing current HEAD 8008293888188c3923f5bd8a69370dae25ed14e5
testing commit 8008293888188c3923f5bd8a69370dae25ed14e5
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 8474bff261e4ba731fa5f99258fb6ac055586f28b4507335494611e294c8cede
all runs: crashed: kernel BUG in vmf_insert_pfn_prot
revisions tested: 2, total time: 25m11.600141306s (build: 12m51.081994497s, test: 11m42.451627005s)
the crash still happens on HEAD
commit msg: mm: vmscan: reduce throttling due to a failure to make progress -fix
crash: kernel BUG in vmf_insert_pfn_prot
------------[ cut here ]------------
kernel BUG at mm/memory.c:2103!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 3974 Comm: syz-executor.4 Not tainted 5.16.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:vmf_insert_pfn_prot+0x183/0x2f0 mm/memory.c:2103
Code: 00 0f 85 41 01 00 00 48 83 c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 0b 0f 0b 48 89 c2 83 e2 28 48 83 fa 20 0f 85 23 ff ff ff <0f> 0b 48 b8 ff ff ff ff ff ff 0f 00 4c 21 e8 49 39 c5 0f 85 16 ff
RSP: 0000:ffffc9000285fc10 EFLAGS: 00010246
RAX: 0000000008140476 RBX: 1ffff9200050bf82 RCX: 1ffff11002fc2dd8
RDX: 0000000000000020 RSI: 0000000000000000 RDI: ffff888017e16ec0
RBP: ffff888017e16e70 R08: 0000000000000000 R09: ffffc9000285fbe7
R10: fffff5200050bf7c R11: 0000000000000000 R12: 0000000020000000
R13: 00000000000194d1 R14: ffff88814673c000 R15: ffff888146b41a30
FS:  0000555556bee400(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000280 CR3: 0000000063823000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 drm_gem_shmem_fault+0x1af/0x250 drivers/gpu/drm/drm_gem_shmem_helper.c:567
 __do_fault+0xed/0x390 mm/memory.c:3849
 do_cow_fault mm/memory.c:4194 [inline]
 do_fault mm/memory.c:4295 [inline]
 handle_pte_fault mm/memory.c:4551 [inline]
 __handle_mm_fault+0x2118/0x3f50 mm/memory.c:4686
 handle_mm_fault+0x166/0x5e0 mm/memory.c:4784
 do_user_addr_fault+0x2da/0xcd0 arch/x86/mm/fault.c:1397
 handle_page_fault arch/x86/mm/fault.c:1485 [inline]
 exc_page_fault+0x5a/0xc0 arch/x86/mm/fault.c:1541
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:568
RIP: 0033:0x7f5ad4c9bbbb
Code: 48 85 c0 74 1b 48 83 f8 01 0f 85 5a 03 00 00 0f b7 44 24 18 66 c1 c0 08 0f b7 c0 48 89 44 24 18 48 8b 44 24 10 0f b7 54 24 18 <66> 89 10 e9 70 fe ff ff 48 83 7c 24 08 08 0f 85 09 03 00 00 48 8b
RSP: 002b:00007f5ad5332b70 EFLAGS: 00010246
RAX: 0000000020000280 RBX: 00007f5ad5203000 RCX: 0000000000000000
RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000555556bee2f0
RBP: 00007f5ad5332c68 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000246 R12: 000000000000ea2a
R13: 00000000000003e8 R14: 00007f5ad4dfef60 R15: 000000000000ea1a
 </TASK>
Modules linked in:
---[ end trace a221b94951c085d0 ]---
RIP: 0010:vmf_insert_pfn_prot+0x183/0x2f0 mm/memory.c:2103
Code: 00 0f 85 41 01 00 00 48 83 c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 0b 0f 0b 48 89 c2 83 e2 28 48 83 fa 20 0f 85 23 ff ff ff <0f> 0b 48 b8 ff ff ff ff ff ff 0f 00 4c 21 e8 49 39 c5 0f 85 16 ff
RSP: 0000:ffffc9000285fc10 EFLAGS: 00010246
RAX: 0000000008140476 RBX: 1ffff9200050bf82 RCX: 1ffff11002fc2dd8
RDX: 0000000000000020 RSI: 0000000000000000 RDI: ffff888017e16ec0
RBP: ffff888017e16e70 R08: 0000000000000000 R09: ffffc9000285fbe7
R10: fffff5200050bf7c R11: 0000000000000000 R12: 0000000020000000
R13: 00000000000194d1 R14: ffff88814673c000 R15: ffff888146b41a30
FS:  0000555556bee400(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f40df928018 CR3: 0000000063823000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400