bisecting fixing commit since 1bab61d3e8cd96f2badf515dcb06e4e1029bc017
building syzkaller on 4afdfa205b55633e7eb9db03a9d099d7aa324801
testing commit 1bab61d3e8cd96f2badf515dcb06e4e1029bc017 with gcc (GCC) 8.1.0
kernel signature: e24c300dc8f156e43c5ab4906436d61b67e0cf044ff4f982f885c513e0c04aa5
all runs: crashed: kernel BUG at mm/memory.c:LINE!
testing current HEAD ad326970d25cc85128cd22d62398751ad072efff
testing commit ad326970d25cc85128cd22d62398751ad072efff with gcc (GCC) 8.1.0
kernel signature: e9c05bd190278e859f8c2ebcc72187bfd2c215fcc0e2e2ce468e1987f9bcc202
all runs: crashed: kernel BUG at mm/memory.c:LINE!
revisions tested: 2, total time: 25m30.547846487s (build: 18m24.530755917s, test: 5m56.283603962s)
the crash still happens on HEAD
commit msg: Linux 4.19.152
crash: kernel BUG at mm/memory.c:LINE!
prot 25 anon_vma 0000000000000000 vm_ops ffffffff87310a60
pgoff 0 file ffff88809616c0c0 private_data 0000000000000000
flags: 0xfe(write|exec|shared|mayread|maywrite|mayexec|mayshare)
IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
------------[ cut here ]------------
kernel BUG at mm/memory.c:4040!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
CPU: 1 PID: 7838 Comm: syz-executor.2 Not tainted 4.19.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:wp_huge_pmd mm/memory.c:4040 [inline]
RIP: 0010:__handle_mm_fault+0x2177/0x41a0 mm/memory.c:4248
Code: 49 8d b6 a0 00 00 00 48 89 da 44 89 9d 10 ff ff ff e8 2d 71 fe ff 44 8b 9d 10 ff ff ff e9 28 ec ff ff 48 89 df e8 e0 9b fd ff <0f> 0b 49 8d 84 24 60 ff ff ff 48 89 c7 e8 87 ef 0b 00 41 89 c3 e9
RSP: 0018:ffff88808cd47cc8 EFLAGS: 00010296
RAX: 0000000000000137 RBX: ffff88808d79ae70 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff87677b20 RDI: ffffffff8a192a60
RBP: ffff88808cd47de8 R08: ffffed1015d65081 R09: ffffed1015d65080
R10: ffffed1015d65080 R11: ffff8880aeb28407 R12: ffff88808cd47dc0
R13: 1ffff110119a8fa0 R14: ffffffff87310a60 R15: ffff88808db612c0
FS:  0000000002b51940(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005565fde2eb30 CR3: 000000008d434000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 handle_mm_fault+0x3dd/0x8ab mm/memory.c:4295
 __do_page_fault+0x50e/0xb30 arch/x86/mm/fault.c:1412
 do_page_fault+0x64/0x3a7 arch/x86/mm/fault.c:1487
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x443d51
Code: 8d 15 b3 1b 0d 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6
RSP: 002b:00007ffdcd6f2d88 EFLAGS: 00010202
RAX: 00000000200001c0 RBX: 0000000000000000 RCX: 0000000000000063
RDX: 0000000000000013 RSI: 0000000000790398 RDI: 00000000200001c0
RBP: 0000000000790378 R08: 0000000000000000 R09: 0000000000000000
R10: 00007ffdcd6f2e70 R11: 0000000000000246 R12: 0000000000790380
R13: 000000000000b890 R14: fffffffffffffffe R15: 000000000078c04c
Modules linked in:
---[ end trace 3df1fd9f2b4e2b8c ]---
RIP: 0010:wp_huge_pmd mm/memory.c:4040 [inline]
RIP: 0010:__handle_mm_fault+0x2177/0x41a0 mm/memory.c:4248
IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
Code: 49 8d b6 a0 00 00 00 48 89 da 44 89 9d 10 ff ff ff e8 2d 71 fe ff 44 8b 9d 10 ff ff ff e9 28 ec ff ff 48 89 df e8 e0 9b fd ff <0f> 0b 49 8d 84 24 60 ff ff ff 48 89 c7 e8 87 ef 0b 00 41 89 c3 e9
IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
RSP: 0018:ffff88808cd47cc8 EFLAGS: 00010296
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
RAX: 0000000000000137 RBX: ffff88808d79ae70 RCX: 0000000000000000
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
RDX: 0000000000000000 RSI: ffffffff87677b20 RDI: ffffffff8a192a60
RBP: ffff88808cd47de8 R08: ffffed1015d65081 R09: ffffed1015d65080
device veth0_macvtap entered promiscuous mode
R10: ffffed1015d65080 R11: ffff8880aeb28407 R12: ffff88808cd47dc0
IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
R13: 1ffff110119a8fa0 R14: ffffffff87310a60 R15: ffff88808db612c0
device veth1_macvtap entered promiscuous mode
FS:  0000000002b51940(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000
IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
CR2: 00007fff480d4edc CR3: 000000008d434000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400