INFO: rcu detected stall in do_signal (3)
9 views
Skip to first unread message
syzbot
Jun 11, 2020, 2:41:14 AM6/11/20
to syzkaller...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: 3fc89857 Linux 4.19.128
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13a35f29100000
kernel config: https://syzkaller.appspot.com/x/.config?x=6c6e6bf14f2aabf
dashboard link: https://syzkaller.appspot.com/bug?extid=5c93d4fd285119aa1e7f
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+5c93d4...@syzkaller.appspotmail.com
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 0-...!: (10500 ticks this GP) idle=d7a/1/0x4000000000000002 softirq=509176/509176 fqs=0
rcu: (t=10500 jiffies g=491577 q=8504)
rcu: rcu_preempt kthread starved for 10500 jiffies! g491577 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
rcu: RCU grace-period kthread stack dump:
rcu_preempt I29520 10 2 0x80000000
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x8a2/0x1fc0 kernel/sched/core.c:3515
schedule+0x8d/0x1b0 kernel/sched/core.c:3559
schedule_timeout+0x4c1/0xed0 kernel/time/timer.c:1806
rcu_gp_kthread+0xf94/0x2050 kernel/rcu/tree.c:2202
kthread+0x30b/0x410 kernel/kthread.c:246
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
NMI backtrace for cpu 0
CPU: 0 PID: 26682 Comm: syz-executor.1 Not tainted 4.19.128-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
<IRQ>
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x1a6/0x1eb lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
rcu_dump_cpu_stacks+0x170/0x1bb kernel/rcu/tree.c:1340
print_cpu_stall kernel/rcu/tree.c:1478 [inline]
check_cpu_stall kernel/rcu/tree.c:1550 [inline]
__rcu_pending kernel/rcu/tree.c:3293 [inline]
rcu_pending kernel/rcu/tree.c:3336 [inline]
rcu_check_callbacks.cold+0x634/0xddc kernel/rcu/tree.c:2682
update_process_times+0x2a/0x70 kernel/time/timer.c:1638
tick_sched_handle.isra.0+0x91/0x180 kernel/time/tick-sched.c:168
tick_sched_timer+0x44/0x130 kernel/time/tick-sched.c:1278
__run_hrtimer kernel/time/hrtimer.c:1401 [inline]
__hrtimer_run_queues+0x2ec/0xd20 kernel/time/hrtimer.c:1463
hrtimer_interrupt+0x312/0x770 kernel/time/hrtimer.c:1521
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1067 [inline]
smp_apic_timer_interrupt+0x10c/0x550 arch/x86/kernel/apic/apic.c:1092
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
</IRQ>
RIP: 0010:zap_pte_range mm/memory.c:1339 [inline]
RIP: 0010:zap_pmd_range mm/memory.c:1440 [inline]
RIP: 0010:zap_pud_range mm/memory.c:1469 [inline]
RIP: 0010:zap_p4d_range mm/memory.c:1490 [inline]
RIP: 0010:unmap_page_range+0x1280/0x2bb0 mm/memory.c:1511
Code: d7 ff 45 84 ed 0f 84 c5 06 00 00 e8 0a 58 d7 ff 48 89 ef e8 72 1c fb ff 41 89 c5 e8 fa 57 d7 ff 31 ff 44 89 ee e8 60 59 d7 ff <45> 85 ed 0f 88 fc 0c 00 00 e8 e2 57 d7 ff 48 8b 7c 24 18 48 89 ee
RSP: 0018:ffff8881e0417750 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 00007ff38c1e9000 RCX: ffffffff819042d0
RDX: 00000000000004e1 RSI: 0000000000000000 RDI: 0000000000000005
RBP: ffffea0002a28c40 R08: ffff8881e0406540 R09: fffff9400054518f
R10: fffff9400054518e R11: ffffea0002a28c73 R12: ffff8881fb24af40
R13: 00000000000004e1 R14: dffffc0000000000 R15: ffffea0002a28c48
unmap_single_vma+0x196/0x300 mm/memory.c:1556
unmap_vmas+0xa9/0x180 mm/memory.c:1586
exit_mmap+0x2b9/0x510 mm/mmap.c:3091
__mmput kernel/fork.c:1015 [inline]
mmput+0x14e/0x420 kernel/fork.c:1036
exit_mm kernel/exit.c:546 [inline]
do_exit+0xac4/0x2f00 kernel/exit.c:867
do_group_exit+0x125/0x310 kernel/exit.c:983
get_signal+0x3f5/0x1f30 kernel/signal.c:2588
do_signal+0x8f/0x1620 arch/x86/kernel/signal.c:821
exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163
prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45ca69
Code: Bad RIP value.
RSP: 002b:00007ff38b547cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000078bfa8 RCX: 000000000045ca69
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8
RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac
R13: 00007fff564d94cf R14: 00007ff38b5489c0 R15: 000000000078bfac
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 13181 Comm: syz-executor.1 Not tainted 4.19.128-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__read_once_size include/linux/compiler.h:193 [inline]
RIP: 0010:trace_lock_acquire include/trace/events/lock.h:13 [inline]
RIP: 0010:lock_acquire+0x2db/0x3c0 kernel/locking/lockdep.c:3906
Code: 8c 00 00 00 48 8b 03 48 85 c0 75 9b 65 ff 0d 4c d2 b1 7e 0f 85 55 fe ff ff e8 65 41 b0 ff e9 4b fe ff ff 65 ff 05 35 d2 b1 7e <48> 8b 05 a6 ce 36 08 e8 59 ba 05 00 85 c0 74 09 80 3d 08 77 36 08
RSP: 0018:ffff8880ae707668 EFLAGS: 00000083
RAX: 0000000000000001 RBX: ffff8881c0a043c0 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881c0a04c44
RBP: ffffffff88b933a0 R08: 0000000000000000 R09: 0000000000000000
R10: ffff8880ae707a40 R11: ffff8880ae7239d3 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000000000
FS: 00007ff38b548700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c003b43000 CR3: 00000000a134d000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<IRQ>
rcu_lock_acquire include/linux/rcupdate.h:242 [inline]
rcu_read_lock include/linux/rcupdate.h:627 [inline]
__perf_output_begin kernel/events/ring_buffer.c:156 [inline]
perf_output_begin_forward+0xd9/0xb60 kernel/events/ring_buffer.c:262
__perf_event_output kernel/events/core.c:6587 [inline]
perf_event_output_forward+0x108/0x270 kernel/events/core.c:6603
__perf_event_overflow+0x13c/0x370 kernel/events/core.c:7876
perf_swevent_hrtimer+0x26d/0x3d0 kernel/events/core.c:9232
__run_hrtimer kernel/time/hrtimer.c:1401 [inline]
__hrtimer_run_queues+0x2ec/0xd20 kernel/time/hrtimer.c:1463
hrtimer_interrupt+0x312/0x770 kernel/time/hrtimer.c:1521
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1067 [inline]
smp_apic_timer_interrupt+0x10c/0x550 arch/x86/kernel/apic/apic.c:1092
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
</IRQ>
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x7/0x20 kernel/kcov.c:195
Code: 00 00 00 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 ce fe ff ff 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0c 24 48 89 f2 <48> 89 fe bf 07 00 00 00 e9 ac fe ff ff 66 90 66 2e 0f 1f 84 00 00
RSP: 0018:ffff8881c080f748 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: dead000000000100 RBX: 00007ff38c29b000 RCX: ffffffff8190416e
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffea00024873c0 R08: ffff8881c0a043c0 R09: fffff94000490e77
R10: fffff94000490e76 R11: ffffea00024873b3 R12: ffff8881c08ce4d0
R13: ffffea00024873c0 R14: dffffc0000000000 R15: ffffea00024873c8
compound_head include/linux/page-flags.h:144 [inline]
PageSwapBacked include/linux/page-flags.h:295 [inline]
mm_counter_file include/linux/mm.h:1638 [inline]
mm_counter include/linux/mm.h:1647 [inline]
zap_pte_range mm/memory.c:1337 [inline]
zap_pmd_range mm/memory.c:1440 [inline]
zap_pud_range mm/memory.c:1469 [inline]
zap_p4d_range mm/memory.c:1490 [inline]
unmap_page_range+0x111e/0x2bb0 mm/memory.c:1511
unmap_single_vma+0x196/0x300 mm/memory.c:1556
unmap_vmas+0xa9/0x180 mm/memory.c:1586
exit_mmap+0x2b9/0x510 mm/mmap.c:3091
__mmput kernel/fork.c:1015 [inline]
mmput+0x14e/0x420 kernel/fork.c:1036
exit_mm kernel/exit.c:546 [inline]
do_exit+0xac4/0x2f00 kernel/exit.c:867
do_group_exit+0x125/0x310 kernel/exit.c:983
get_signal+0x3f5/0x1f30 kernel/signal.c:2588
do_signal+0x8f/0x1620 arch/x86/kernel/signal.c:821
exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163
prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45ca69
Code: 48 c7 44 24 10 00 00 00 00 48 8b 44 24 68 48 89 44 24 18 48 8b 44 24 70 48 89 44 24 20 48 8b 44 24 78 48 89 44 24 28 48 89 4c <24> 30 0f 57 c0 0f 11 44 24 38 48 c7 44 24 48 00 00 00 00 e8 0f d4
RSP: 002b:00007ff38b547cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000078bfa8 RCX: 000000000045ca69
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8
RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac
R13: 00007fff564d94cf R14: 00007ff38b5489c0 R15: 000000000078bfac
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following crash on:
HEAD commit: 3fc89857 Linux 4.19.128
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13a35f29100000
kernel config: https://syzkaller.appspot.com/x/.config?x=6c6e6bf14f2aabf
dashboard link: https://syzkaller.appspot.com/bug?extid=5c93d4fd285119aa1e7f
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+5c93d4...@syzkaller.appspotmail.com
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 0-...!: (10500 ticks this GP) idle=d7a/1/0x4000000000000002 softirq=509176/509176 fqs=0
rcu: (t=10500 jiffies g=491577 q=8504)
rcu: rcu_preempt kthread starved for 10500 jiffies! g491577 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
rcu: RCU grace-period kthread stack dump:
rcu_preempt I29520 10 2 0x80000000
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x8a2/0x1fc0 kernel/sched/core.c:3515
schedule+0x8d/0x1b0 kernel/sched/core.c:3559
schedule_timeout+0x4c1/0xed0 kernel/time/timer.c:1806
rcu_gp_kthread+0xf94/0x2050 kernel/rcu/tree.c:2202
kthread+0x30b/0x410 kernel/kthread.c:246
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
NMI backtrace for cpu 0
CPU: 0 PID: 26682 Comm: syz-executor.1 Not tainted 4.19.128-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
<IRQ>
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x1a6/0x1eb lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
rcu_dump_cpu_stacks+0x170/0x1bb kernel/rcu/tree.c:1340
print_cpu_stall kernel/rcu/tree.c:1478 [inline]
check_cpu_stall kernel/rcu/tree.c:1550 [inline]
__rcu_pending kernel/rcu/tree.c:3293 [inline]
rcu_pending kernel/rcu/tree.c:3336 [inline]
rcu_check_callbacks.cold+0x634/0xddc kernel/rcu/tree.c:2682
update_process_times+0x2a/0x70 kernel/time/timer.c:1638
tick_sched_handle.isra.0+0x91/0x180 kernel/time/tick-sched.c:168
tick_sched_timer+0x44/0x130 kernel/time/tick-sched.c:1278
__run_hrtimer kernel/time/hrtimer.c:1401 [inline]
__hrtimer_run_queues+0x2ec/0xd20 kernel/time/hrtimer.c:1463
hrtimer_interrupt+0x312/0x770 kernel/time/hrtimer.c:1521
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1067 [inline]
smp_apic_timer_interrupt+0x10c/0x550 arch/x86/kernel/apic/apic.c:1092
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
</IRQ>
RIP: 0010:zap_pte_range mm/memory.c:1339 [inline]
RIP: 0010:zap_pmd_range mm/memory.c:1440 [inline]
RIP: 0010:zap_pud_range mm/memory.c:1469 [inline]
RIP: 0010:zap_p4d_range mm/memory.c:1490 [inline]
RIP: 0010:unmap_page_range+0x1280/0x2bb0 mm/memory.c:1511
Code: d7 ff 45 84 ed 0f 84 c5 06 00 00 e8 0a 58 d7 ff 48 89 ef e8 72 1c fb ff 41 89 c5 e8 fa 57 d7 ff 31 ff 44 89 ee e8 60 59 d7 ff <45> 85 ed 0f 88 fc 0c 00 00 e8 e2 57 d7 ff 48 8b 7c 24 18 48 89 ee
RSP: 0018:ffff8881e0417750 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 00007ff38c1e9000 RCX: ffffffff819042d0
RDX: 00000000000004e1 RSI: 0000000000000000 RDI: 0000000000000005
RBP: ffffea0002a28c40 R08: ffff8881e0406540 R09: fffff9400054518f
R10: fffff9400054518e R11: ffffea0002a28c73 R12: ffff8881fb24af40
R13: 00000000000004e1 R14: dffffc0000000000 R15: ffffea0002a28c48
unmap_single_vma+0x196/0x300 mm/memory.c:1556
unmap_vmas+0xa9/0x180 mm/memory.c:1586
exit_mmap+0x2b9/0x510 mm/mmap.c:3091
__mmput kernel/fork.c:1015 [inline]
mmput+0x14e/0x420 kernel/fork.c:1036
exit_mm kernel/exit.c:546 [inline]
do_exit+0xac4/0x2f00 kernel/exit.c:867
do_group_exit+0x125/0x310 kernel/exit.c:983
get_signal+0x3f5/0x1f30 kernel/signal.c:2588
do_signal+0x8f/0x1620 arch/x86/kernel/signal.c:821
exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163
prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45ca69
Code: Bad RIP value.
RSP: 002b:00007ff38b547cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000078bfa8 RCX: 000000000045ca69
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8
RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac
R13: 00007fff564d94cf R14: 00007ff38b5489c0 R15: 000000000078bfac
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 13181 Comm: syz-executor.1 Not tainted 4.19.128-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__read_once_size include/linux/compiler.h:193 [inline]
RIP: 0010:trace_lock_acquire include/trace/events/lock.h:13 [inline]
RIP: 0010:lock_acquire+0x2db/0x3c0 kernel/locking/lockdep.c:3906
Code: 8c 00 00 00 48 8b 03 48 85 c0 75 9b 65 ff 0d 4c d2 b1 7e 0f 85 55 fe ff ff e8 65 41 b0 ff e9 4b fe ff ff 65 ff 05 35 d2 b1 7e <48> 8b 05 a6 ce 36 08 e8 59 ba 05 00 85 c0 74 09 80 3d 08 77 36 08
RSP: 0018:ffff8880ae707668 EFLAGS: 00000083
RAX: 0000000000000001 RBX: ffff8881c0a043c0 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881c0a04c44
RBP: ffffffff88b933a0 R08: 0000000000000000 R09: 0000000000000000
R10: ffff8880ae707a40 R11: ffff8880ae7239d3 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000000000
FS: 00007ff38b548700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c003b43000 CR3: 00000000a134d000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<IRQ>
rcu_lock_acquire include/linux/rcupdate.h:242 [inline]
rcu_read_lock include/linux/rcupdate.h:627 [inline]
__perf_output_begin kernel/events/ring_buffer.c:156 [inline]
perf_output_begin_forward+0xd9/0xb60 kernel/events/ring_buffer.c:262
__perf_event_output kernel/events/core.c:6587 [inline]
perf_event_output_forward+0x108/0x270 kernel/events/core.c:6603
__perf_event_overflow+0x13c/0x370 kernel/events/core.c:7876
perf_swevent_hrtimer+0x26d/0x3d0 kernel/events/core.c:9232
__run_hrtimer kernel/time/hrtimer.c:1401 [inline]
__hrtimer_run_queues+0x2ec/0xd20 kernel/time/hrtimer.c:1463
hrtimer_interrupt+0x312/0x770 kernel/time/hrtimer.c:1521
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1067 [inline]
smp_apic_timer_interrupt+0x10c/0x550 arch/x86/kernel/apic/apic.c:1092
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
</IRQ>
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x7/0x20 kernel/kcov.c:195
Code: 00 00 00 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 ce fe ff ff 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0c 24 48 89 f2 <48> 89 fe bf 07 00 00 00 e9 ac fe ff ff 66 90 66 2e 0f 1f 84 00 00
RSP: 0018:ffff8881c080f748 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: dead000000000100 RBX: 00007ff38c29b000 RCX: ffffffff8190416e
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffea00024873c0 R08: ffff8881c0a043c0 R09: fffff94000490e77
R10: fffff94000490e76 R11: ffffea00024873b3 R12: ffff8881c08ce4d0
R13: ffffea00024873c0 R14: dffffc0000000000 R15: ffffea00024873c8
compound_head include/linux/page-flags.h:144 [inline]
PageSwapBacked include/linux/page-flags.h:295 [inline]
mm_counter_file include/linux/mm.h:1638 [inline]
mm_counter include/linux/mm.h:1647 [inline]
zap_pte_range mm/memory.c:1337 [inline]
zap_pmd_range mm/memory.c:1440 [inline]
zap_pud_range mm/memory.c:1469 [inline]
zap_p4d_range mm/memory.c:1490 [inline]
unmap_page_range+0x111e/0x2bb0 mm/memory.c:1511
unmap_single_vma+0x196/0x300 mm/memory.c:1556
unmap_vmas+0xa9/0x180 mm/memory.c:1586
exit_mmap+0x2b9/0x510 mm/mmap.c:3091
__mmput kernel/fork.c:1015 [inline]
mmput+0x14e/0x420 kernel/fork.c:1036
exit_mm kernel/exit.c:546 [inline]
do_exit+0xac4/0x2f00 kernel/exit.c:867
do_group_exit+0x125/0x310 kernel/exit.c:983
get_signal+0x3f5/0x1f30 kernel/signal.c:2588
do_signal+0x8f/0x1620 arch/x86/kernel/signal.c:821
exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163
prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45ca69
Code: 48 c7 44 24 10 00 00 00 00 48 8b 44 24 68 48 89 44 24 18 48 8b 44 24 70 48 89 44 24 20 48 8b 44 24 78 48 89 44 24 28 48 89 4c <24> 30 0f 57 c0 0f 11 44 24 38 48 c7 44 24 48 00 00 00 00 e8 0f d4
RSP: 002b:00007ff38b547cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000078bfa8 RCX: 000000000045ca69
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8
RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac
R13: 00007fff564d94cf R14: 00007ff38b5489c0 R15: 000000000078bfac
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Aug 6, 2021, 5:07:18 PM8/6/21
to syzkaller...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages