bisecting fixing commit since 1bab61d3e8cd96f2badf515dcb06e4e1029bc017 building syzkaller on 4afdfa205b55633e7eb9db03a9d099d7aa324801 testing commit 1bab61d3e8cd96f2badf515dcb06e4e1029bc017 with gcc (GCC) 8.1.0 kernel signature: 35c4c3a54c2885888d0a397f9a4301e8c0070d66120bb33fb5c9c9f9a74db866 all runs: crashed: kernel BUG at mm/memory.c:LINE! testing current HEAD 0c88e405c97ed1828443b67891e6d4bb6e56cd4e testing commit 0c88e405c97ed1828443b67891e6d4bb6e56cd4e with gcc (GCC) 8.1.0 kernel signature: b7e7d3bf8b9060608a289f2fa1c6c1e08a9c32e146599b253077ea44d29e1067 all runs: crashed: kernel BUG at mm/memory.c:LINE! revisions tested: 2, total time: 24m4.004039922s (build: 17m44.833620151s, test: 5m41.524278313s) the crash still happens on HEAD commit msg: Linux 4.19.160 crash: kernel BUG at mm/memory.c:LINE! batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! ------------[ cut here ]------------ kernel BUG at mm/memory.c:4040! invalid opcode: 0000 [#1] PREEMPT SMP KASAN batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 CPU: 0 PID: 7215 Comm: syz-executor.1 Not tainted 4.19.160-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:wp_huge_pmd mm/memory.c:4040 [inline] RIP: 0010:__handle_mm_fault+0x2177/0x41a0 mm/memory.c:4248 Code: 49 8d b6 a0 00 00 00 48 89 da 44 89 9d 10 ff ff ff e8 2d 71 fe ff 44 8b 9d 10 ff ff ff e9 28 ec ff ff 48 89 df e8 e0 9b fd ff <0f> 0b 49 8d 84 24 60 ff ff ff 48 89 c7 e8 87 ef 0b 00 41 89 c3 e9 RSP: 0018:ffff8881d8b47cc8 EFLAGS: 00010296 RAX: 0000000000000137 RBX: ffff8881d789a040 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff87678460 RDI: ffffffff8a192a60 RBP: ffff8881d8b47de8 R08: ffffed103ed05081 R09: ffffed103ed05080 R10: ffffed103ed05080 R11: ffff8881f6828407 R12: ffff8881d8b47dc0 R13: 1ffff1103b168fa0 R14: ffffffff87310c60 R15: ffff8881dba6d0c0 FS: 0000000001616940(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffeb733bf88 CR3: 00000001d8852005 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: handle_mm_fault+0x3dd/0x8ab mm/memory.c:4295 __do_page_fault+0x50e/0xb30 arch/x86/mm/fault.c:1412 do_page_fault+0x64/0x3a7 arch/x86/mm/fault.c:1487 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x443d51 Code: 8d 15 b3 1b 0d 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 RSP: 002b:00007ffd299370f8 EFLAGS: 00010202 RAX: 00000000200001c0 RBX: 0000000000000000 RCX: 0000000000000063 RDX: 0000000000000013 RSI: 0000000000790398 RDI: 00000000200001c0 RBP: 0000000000790378 R08: 0000000000000000 R09: 0000000000000000 R10: 00007ffd299371e0 R11: 0000000000000246 R12: 0000000000790380 R13: 000000000000b10d R14: fffffffffffffffe R15: 000000000078bfac Modules linked in: ---[ end trace cfa5be9de7a0e1d2 ]--- batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! RIP: 0010:wp_huge_pmd mm/memory.c:4040 [inline] RIP: 0010:__handle_mm_fault+0x2177/0x41a0 mm/memory.c:4248 batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 Code: 49 8d b6 a0 00 00 00 48 89 da 44 89 9d 10 ff ff ff e8 2d 71 fe ff 44 8b 9d 10 ff ff ff e9 28 ec ff ff 48 89 df e8 e0 9b fd ff <0f> 0b 49 8d 84 24 60 ff ff ff 48 89 c7 e8 87 ef 0b 00 41 89 c3 e9 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! RSP: 0018:ffff8881d8b47cc8 EFLAGS: 00010296 batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 RAX: 0000000000000137 RBX: ffff8881d789a040 RCX: 0000000000000000 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! RDX: 0000000000000000 RSI: ffffffff87678460 RDI: ffffffff8a192a60 IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready RBP: ffff8881d8b47de8 R08: ffffed103ed05081 R09: ffffed103ed05080 batman_adv: batadv0: Interface activated: batadv_slave_1 R10: ffffed103ed05080 R11: ffff8881f6828407 R12: ffff8881d8b47dc0 R13: 1ffff1103b168fa0 R14: ffffffff87310c60 R15: ffff8881dba6d0c0 IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready FS: 0000000001616940(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready CR2: 00007ffcbae56e3c CR3: 00000001d8852003 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400