All of lore.kernel.org
 help / color / mirror / Atom feed
* Fw: [Bug 202919] New: Bad page map in process syz-executor.5  pte:9100000081 pmd:47c67067
@ 2019-03-21  0:01 Andrew Morton
  2019-03-21 18:58 ` Qian Cai
  2019-03-25 10:40 ` Kirill A. Shutemov
  0 siblings, 2 replies; 3+ messages in thread
From: Andrew Morton @ 2019-03-21  0:01 UTC (permalink / raw)
  To: linux-mm; +Cc: Mark Rutland


kcov_mmap()/kcov_fault_in_area() appear to have produced a pte which
confused _vm_normal_page().  Could someone please take a look?


Begin forwarded message:

Date: Thu, 14 Mar 2019 15:06:47 +0000
From: bugzilla-daemon@bugzilla.kernel.org
To: akpm@linux-foundation.org
Subject: [Bug 202919] New: Bad page map in process syz-executor.5  pte:9100000081 pmd:47c67067


https://bugzilla.kernel.org/show_bug.cgi?id=202919

            Bug ID: 202919
           Summary: Bad page map in process syz-executor.5  pte:9100000081
                    pmd:47c67067
           Product: Memory Management
           Version: 2.5
    Kernel Version: 5.0.2
          Hardware: All
                OS: Linux
              Tree: Mainline
            Status: NEW
          Severity: normal
          Priority: P1
         Component: Page Allocator
          Assignee: akpm@linux-foundation.org
          Reporter: zhanggen12@hotmail.com
        Regression: No

Created attachment 281823
  --> https://bugzilla.kernel.org/attachment.cgi?id=281823&action=edit
bad page map

BUG: Bad page map in process syz-executor.5  pte:9100000081 pmd:47c67067
addr:00000000768464c8 vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:18f
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Not tainted 5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 _vm_normal_page+0x111/0x2b0 mm/memory.c:612
 zap_pte_range mm/memory.c:1063 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x89b/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: 7d a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48
89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83
4b a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
BUG: Bad page map in process syz-executor.5  pte:5309000000a1 pmd:47c67067
addr:000000002e2065c3 vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:190
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 _vm_normal_page+0x111/0x2b0 mm/memory.c:612
 zap_pte_range mm/memory.c:1063 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x89b/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: 7d a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48
89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83
4b a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
swap_info_get: Bad swap file entry 5401e6ffffffffff
BUG: Bad page map in process syz-executor.5  pte:ac32000000000000 pmd:47c67067
addr:000000008adbb032 vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:192
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1137 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x109e/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: 7d a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48
89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83
4b a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
swap_info_get: Bad swap file entry 3ffffb6ffffff
BUG: Bad page map in process syz-executor.5  pte:9200000082 pmd:47c67067
addr:00000000d83b3dac vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:193
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1137 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x109e/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: 7d a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48
89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83
4b a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
swap_info_get: Bad swap file entry 4c02787f887fffff
BUG: Bad page map in process syz-executor.5  pte:9b0f00ef00000000 pmd:47c67067
addr:000000008533c1ed vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:196
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1137 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x109e/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: 7d a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48
89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83
4b a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
BUG: Bad page map in process syz-executor.5  pte:9300000083 pmd:47c67067
addr:00000000117ad9ce vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:197
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 _vm_normal_page+0x111/0x2b0 mm/memory.c:612
 zap_pte_range mm/memory.c:1063 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x89b/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: 7d a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48
89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83
4b a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
BUG: Bad page map in process syz-executor.5  pte:1fe90000000004a1 pmd:47c67067
addr:00000000632caa85 vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:198
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 _vm_normal_page+0x111/0x2b0 mm/memory.c:612
 zap_pte_range mm/memory.c:1063 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x89b/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: 7d a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48
89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83
4b a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
BUG: Bad page map in process syz-executor.5  pte:00040017 pmd:47c67067
page:ffffea0000001000 count:0 mapcount:-129 mapping:0000000000000000 index:0x0
flags: 0x0()
raw: 0000000000000000 ffff88807fffa270 ffff88807fffa270 0000000000000000
raw: 0000000000000000 0000000000000006 00000000ffffff7e 0000000000000000
page dumped because: bad pte
addr:00000000b5a11157 vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:199
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1092 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x144b/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: 7d a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48
89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83
4b a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
swap_info_get: Bad swap file entry 2403b5f00b7fffff
BUG: Bad page map in process syz-executor.5  pte:48941fe900000000 pmd:47c67067
addr:00000000ee146683 vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:19a
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1137 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x109e/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: 7d a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48
89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83
4b a6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
swap_info_get: Bad swap file entry 3ffffb5ffffff
BUG: Bad page map in process syz-executor.5  pte:9400000084 pmd:47c67067
addr:000000003ad02655 vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:19b
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1137 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x109e/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
swap_info_get: Bad swap file entry 3fffffffffd7f
BUG: Bad page map in process syz-executor.5  pte:00050000 pmd:47c67067
addr:00000000d5308cc0 vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:19d
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1137 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x109e/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
swap_info_get: Bad swap file entry 2802db6fffffffff
BUG: Bad page map in process syz-executor.5  pte:5249200000000000 pmd:47c67067
addr:000000005f7bdb6f vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:19e
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1137 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x109e/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
BUG: Bad page map in process syz-executor.5  pte:9500000085 pmd:47c67067
addr:000000000c5b1271 vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:19f
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 _vm_normal_page+0x111/0x2b0 mm/memory.c:612
 zap_pte_range mm/memory.c:1063 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x89b/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
BUG: Bad page map in process syz-executor.5  pte:20001458000008a1 pmd:47c67067
addr:000000004f1778f6 vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:1a0
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 _vm_normal_page+0x111/0x2b0 mm/memory.c:612
 zap_pte_range mm/memory.c:1063 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x89b/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
swap_info_get: Bad swap file entry 3fffffffffd7f
BUG: Bad page map in process syz-executor.5  pte:00050000 pmd:47c67067
addr:000000009c3df739 vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:1a1
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1137 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x109e/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
swap_info_get: Bad swap file entry 50003eefffffffff
BUG: Bad page map in process syz-executor.5  pte:a782200000000000 pmd:47c67067
addr:00000000a298f08a vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:1a2
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1137 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x109e/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
swap_info_get: Bad swap file entry 3ffffb4ffffff
BUG: Bad page map in process syz-executor.5  pte:9600000086 pmd:47c67067
addr:000000001f1892ea vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:1a3
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1137 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x109e/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
swap_info_get: Bad swap file entry 3fffffffffd7f
BUG: Bad page map in process syz-executor.5  pte:00050000 pmd:47c67067
addr:0000000088420d0c vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:1a5
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1137 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x109e/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
swap_info_get: Bad swap file entry 5c00f06fffffffff
BUG: Bad page map in process syz-executor.5  pte:be1f200000000000 pmd:47c67067
addr:000000009c08436b vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:1a6
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1137 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x109e/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
BUG: Bad page map in process syz-executor.5  pte:9700000087 pmd:47c67067
addr:00000000e0488400 vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:1a7
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 _vm_normal_page+0x111/0x2b0 mm/memory.c:612
 zap_pte_range mm/memory.c:1063 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x89b/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
BUG: Bad page map in process syz-executor.5  pte:2000800000000ca1 pmd:47c67067
addr:000000002e00ad5a vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:1a8
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 _vm_normal_page+0x111/0x2b0 mm/memory.c:612
 zap_pte_range mm/memory.c:1063 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x89b/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
swap_info_get: Bad swap file entry 3fffffffffc7f
BUG: Bad page map in process syz-executor.5  pte:00070000 pmd:47c67067
addr:000000006a47b55c vm_flags:100400fb anon_vma:          (null)
mapping:000000009265a729 index:1a9
file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
 zap_pte_range mm/memory.c:1137 [inline]
 zap_pmd_range mm/memory.c:1192 [inline]
 zap_pud_range mm/memory.c:1221 [inline]
 zap_p4d_range mm/memory.c:1242 [inline]
 unmap_page_range+0x109e/0x1950 mm/memory.c:1263
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN PTI
CPU: 0 PID: 30290 Comm: syz-executor.5 Tainted: G    B             5.0.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
RIP: 0010:__read_once_size include/linux/compiler.h:193 [inline]
RIP: 0010:compound_head include/linux/page-flags.h:143 [inline]
RIP: 0010:migration_entry_to_page include/linux/swapops.h:210 [inline]
RIP: 0010:zap_pte_range mm/memory.c:1133 [inline]
RIP: 0010:zap_pmd_range mm/memory.c:1192 [inline]
RIP: 0010:zap_pud_range mm/memory.c:1221 [inline]
RIP: 0010:zap_p4d_range mm/memory.c:1242 [inline]
RIP: 0010:unmap_page_range+0xdb8/0x1950 mm/memory.c:1263
Code: e3 ff 48 8b 54 24 18 48 b8 00 00 00 00 00 ea ff ff 48 c1 e2 06 48 01 d0
48 89 44 24 28 48 83 c0 08 48 89 44 24 60 48 c1 e8 03 <42> 80 3c 30 00 0f 85 e5
09 00 00 4c 8b 6c 24 28 31 ff 49 8b 45 08
RSP: 0018:ffff88804871f700 EFLAGS: 00010206
RAX: 000630bffffffff9 RBX: fe73200000000000 RCX: ffffffff8158a3cc
RDX: 00319bffffffffc0 RSI: ffffffff8158a9c0 RDI: 0000000000000007
RBP: 0000000000000000 R08: ffff88804af72f80 R09: fffffbfff0948d33
R10: fffffbfff0948d33 R11: ffffffff84a4699b R12: ffff88804871f9b8
R13: 000000000000001f R14: dffffc0000000000 R15: 00007f26a4071000
FS:  00007f26a3070700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004588cf CR3: 0000000004426006 CR4: 00000000001606f0
Call Trace:
 unmap_single_vma+0x198/0x300 mm/memory.c:1308
 unmap_vmas+0x172/0x280 mm/memory.c:1339
 exit_mmap+0x27d/0x4a0 mm/mmap.c:3139
 __mmput kernel/fork.c:1047 [inline]
 mmput+0xd0/0x3b0 kernel/fork.c:1068
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0xa55/0x2e00 kernel/exit.c:862
 do_group_exit+0x125/0x350 kernel/exit.c:979
 get_signal+0x362/0x1c60 kernel/signal.c:2575
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x16b/0x1c0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x3da/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4588f9
Code: Bad RIP value.
RSP: 002b:00007f26a306fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 000000000072bf00 RCX: 00000000004588f9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08
RBP: 000000000072bf08 R08: 00007f26a3070700 R09: 00007f26a3070700
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c
R13: 0000000000000000 R14: 00007f26a30709c0 R15: 00007f26a3070700
Modules linked in:
Dumping ftrace buffer:
   (ftrace buffer empty)
---[ end trace 72dd5bdc713f57dd ]---
RIP: 0010:__read_once_size include/linux/compiler.h:193 [inline]
RIP: 0010:compound_head include/linux/page-flags.h:143 [inline]
RIP: 0010:migration_entry_to_page include/linux/swapops.h:210 [inline]
RIP: 0010:zap_pte_range mm/memory.c:1133 [inline]
RIP: 0010:zap_pmd_range mm/memory.c:1192 [inline]
RIP: 0010:zap_pud_range mm/memory.c:1221 [inline]
RIP: 0010:zap_p4d_range mm/memory.c:1242 [inline]
RIP: 0010:unmap_page_range+0xdb8/0x1950 mm/memory.c:1263
Code: e3 ff 48 8b 54 24 18 48 b8 00 00 00 00 00 ea ff ff 48 c1 e2 06 48 01 d0
48 89 44 24 28 48 83 c0 08 48 89 44 24 60 48 c1 e8 03 <42> 80 3c 30 00 0f 85 e5
09 00 00 4c 8b 6c 24 28 31 ff 49 8b 45 08
RSP: 0018:ffff88804871f700 EFLAGS: 00010206
RAX: 000630bffffffff9 RBX: fe73200000000000 RCX: ffffffff8158a3cc
RDX: 00319bffffffffc0 RSI: ffffffff8158a9c0 RDI: 0000000000000007
RBP: 0000000000000000 R08: ffff88804af72f80 R09: fffffbfff0948d33
R10: fffffbfff0948d33 R11: ffffffff84a4699b R12: ffff88804871f9b8
R13: 000000000000001f R14: dffffc0000000000 R15: 00007f26a4071000
FS:  00007f26a3070700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004588cf CR3: 0000000004426006 CR4: 00000000001606f0

-- 
You are receiving this mail because:
You are the assignee for the bug.


^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: Fw: [Bug 202919] New: Bad page map in process syz-executor.5  pte:9100000081 pmd:47c67067
  2019-03-21  0:01 Fw: [Bug 202919] New: Bad page map in process syz-executor.5 pte:9100000081 pmd:47c67067 Andrew Morton
@ 2019-03-21 18:58 ` Qian Cai
  2019-03-25 10:40 ` Kirill A. Shutemov
  1 sibling, 0 replies; 3+ messages in thread
From: Qian Cai @ 2019-03-21 18:58 UTC (permalink / raw)
  To: Andrew Morton, linux-mm; +Cc: Mark Rutland

On Wed, 2019-03-20 at 17:01 -0700, Andrew Morton wrote:
> kcov_mmap()/kcov_fault_in_area() appear to have produced a pte which
> confused _vm_normal_page().  Could someone please take a look?

Tough without a reproducer.


^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: Fw: [Bug 202919] New: Bad page map in process syz-executor.5 pte:9100000081 pmd:47c67067
  2019-03-21  0:01 Fw: [Bug 202919] New: Bad page map in process syz-executor.5 pte:9100000081 pmd:47c67067 Andrew Morton
  2019-03-21 18:58 ` Qian Cai
@ 2019-03-25 10:40 ` Kirill A. Shutemov
  1 sibling, 0 replies; 3+ messages in thread
From: Kirill A. Shutemov @ 2019-03-25 10:40 UTC (permalink / raw)
  To: Andrew Morton; +Cc: linux-mm, Mark Rutland

On Wed, Mar 20, 2019 at 05:01:51PM -0700, Andrew Morton wrote:
> 
> kcov_mmap()/kcov_fault_in_area() appear to have produced a pte which
> confused _vm_normal_page().  Could someone please take a look?
> 
> 
> Begin forwarded message:
> 
> Date: Thu, 14 Mar 2019 15:06:47 +0000
> From: bugzilla-daemon@bugzilla.kernel.org
> To: akpm@linux-foundation.org
> Subject: [Bug 202919] New: Bad page map in process syz-executor.5  pte:9100000081 pmd:47c67067
> 
> 
> https://bugzilla.kernel.org/show_bug.cgi?id=202919
> 
>             Bug ID: 202919
>            Summary: Bad page map in process syz-executor.5  pte:9100000081
>                     pmd:47c67067
>            Product: Memory Management
>            Version: 2.5
>     Kernel Version: 5.0.2
>           Hardware: All
>                 OS: Linux
>               Tree: Mainline
>             Status: NEW
>           Severity: normal
>           Priority: P1
>          Component: Page Allocator
>           Assignee: akpm@linux-foundation.org
>           Reporter: zhanggen12@hotmail.com
>         Regression: No
> 
> Created attachment 281823
>   --> https://bugzilla.kernel.org/attachment.cgi?id=281823&action=edit
> bad page map
> 
> BUG: Bad page map in process syz-executor.5  pte:9100000081 pmd:47c67067
> addr:00000000768464c8 vm_flags:100400fb anon_vma:          (null)
> mapping:000000009265a729 index:18f
> file:kcov fault:          (null) mmap:kcov_mmap readpage:          (null)
> CPU: 0 PID: 30290 Comm: syz-executor.5 Not tainted 5.0.2 #1
> Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
> Call Trace:
>  __dump_stack lib/dump_stack.c:77 [inline]
>  dump_stack+0xca/0x13e lib/dump_stack.c:113
>  print_bad_pte.cold.120+0x2c7/0x2f0 mm/memory.c:526
>  _vm_normal_page+0x111/0x2b0 mm/memory.c:612

Hm. This is print_bad_pte() under 'if (IS_ENABLED(CONFIG_ARCH_HAS_PTE_SPECIAL))'.
I don't see how would we get there since pte (0x9100000081) doesn't have
special flag set (0x200). 'if (likely(!pte_special(pte)))' should not
not allow us to get there.

Very strange.

-- 
 Kirill A. Shutemov


^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2019-03-25 10:40 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-03-21  0:01 Fw: [Bug 202919] New: Bad page map in process syz-executor.5 pte:9100000081 pmd:47c67067 Andrew Morton
2019-03-21 18:58 ` Qian Cai
2019-03-25 10:40 ` Kirill A. Shutemov

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.