syzbot


kernel BUG in resv_map_release (3)

Status: upstream: reported C repro on 2024/11/12 05:16
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+f525fd79634858f478e7@syzkaller.appspotmail.com
Fix commit: mm/userfaultfd: fix hugetlb fault mutex hash calculation
Patched on: [ci-upstream-linux-next-kasan-gce-root ci-upstream-rust-kasan-gce], missing on: [ci-qemu-gce-upstream-auto ci-qemu-native-arm64-kvm ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 500d, last: 9d12h
Cause bisection: the cause commit could be any of (bisect log):
  87f690f5a903 wifi: iwlwifi: mvm: define RX queue sync timeout as a macro
  0dd2b42c2c09 wifi: iwlwifi: mvm: don't abort queue sync in CT-kill
  
Fix bisection: failed (error log, bisect log)
  
Discussions (3)
Title Replies (including bot) Last reply
[PATCH] mm/userfaultfd: fix hugetlb fault mutex hash calculation 16 (16) 2026/03/11 10:54
[PATCH] mm/userfaultfd: fix hugetlb fault mutex hash calculation 1 (1) 2026/03/06 13:59
[syzbot] [mm?] kernel BUG in resv_map_release (3) 1 (2) 2024/11/12 12:23
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in resv_map_release mm -1 C done 34 784d 786d 0/29 auto-obsoleted due to no activity on 2024/03/08 23:52
upstream kernel BUG in resv_map_release (2) mm -1 1 621d 617d 0/29 auto-obsoleted due to no activity on 2024/10/18 01:35
Last patch testing requests (10)
Created Duration User Patch Repo Result
2026/02/04 09:00 13m retest repro upstream error
2026/02/04 09:00 12m retest repro upstream error
2026/01/21 08:04 30m retest repro upstream report log
2026/01/21 08:04 10m retest repro upstream error
2026/01/21 07:54 13m retest repro upstream report log
2026/01/01 15:26 24m retest repro upstream error
2026/01/01 15:17 15m retest repro upstream report log
2025/11/19 07:46 14m retest repro upstream report log
2025/11/19 07:46 14m retest repro upstream report log
2025/10/31 20:38 12m retest repro upstream report log

Sample crash report:
------------[ cut here ]------------
kernel BUG at mm/hugetlb.c:1153!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 1 UID: 0 PID: 6260 Comm: syz.0.68 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:resv_map_release+0x1e5/0x1f0 mm/hugetlb.c:1153
Code: f1 ba a0 ff 4d 85 f6 75 1b e8 87 b5 a0 ff 48 89 df 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d1 e3 fa ff e8 6c b5 a0 ff 90 <0f> 0b 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90003c47758 EFLAGS: 00010293
RAX: ffffffff8223af34 RBX: ffff888038557000 RCX: ffff88803a25bd00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: dead000000000122 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff1ed4777 R12: ffff8880385570a0
R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880385570a0
FS:  0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000a00000 CR3: 000000000dbba000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 vma_close mm/internal.h:190 [inline]
 remove_vma+0x8b/0x130 mm/vma.c:466
 tear_down_vmas+0x312/0x520 mm/mmap.c:1264
 exit_mmap+0x4b6/0xa10 mm/mmap.c:1322
 __mmput+0xcb/0x3d0 kernel/fork.c:1174
 exit_mm+0x168/0x220 kernel/exit.c:581
 do_exit+0x6a2/0x23c0 kernel/exit.c:964
 do_group_exit+0x21b/0x2d0 kernel/exit.c:1118
 get_signal+0x125c/0x1310 kernel/signal.c:3034
 arch_do_signal_or_restart+0xbc/0x830 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline]
 exit_to_user_mode_loop+0x86/0x480 kernel/entry/common.c:98
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline]
 do_syscall_64+0x32d/0xf80 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9c24abc799
Code: Unable to access opcode bytes at 0x7f9c24abc76f.
RSP: 002b:00007f9c241160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f9c24d35fa8 RCX: 00007f9c24abc799
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9c24d35fa8
RBP: 00007f9c24d35fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f9c24d36038 R14: 00007ffe29968b10 R15: 00007ffe29968bf8
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:resv_map_release+0x1e5/0x1f0 mm/hugetlb.c:1153
Code: f1 ba a0 ff 4d 85 f6 75 1b e8 87 b5 a0 ff 48 89 df 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d1 e3 fa ff e8 6c b5 a0 ff 90 <0f> 0b 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90003c47758 EFLAGS: 00010293
RAX: ffffffff8223af34 RBX: ffff888038557000 RCX: ffff88803a25bd00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: dead000000000122 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff1ed4777 R12: ffff8880385570a0
R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880385570a0
FS:  0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000a00000 CR3: 000000000dbba000 CR4: 00000000003526f0

Crashes (34):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/13 22:45 upstream b36eb6e3f5d8 351cb5cf .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in resv_map_release
2025/11/05 06:12 upstream c9cfc122f037 a6c9c731 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in resv_map_release
2025/02/27 02:44 upstream 5394eea10651 6a8fcbc4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in resv_map_release
2024/11/08 06:55 upstream 906bd684e4b1 179b040e .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in resv_map_release
2024/11/08 05:29 upstream 906bd684e4b1 179b040e .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in resv_map_release
2025/09/13 05:28 upstream 22f20375f5b7 e2beed91 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in resv_map_release
2025/09/13 04:01 upstream 22f20375f5b7 e2beed91 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in resv_map_release
2025/08/24 10:46 upstream 8d245acc1e88 bf27483f .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in resv_map_release
2026/03/03 19:30 upstream af4e9ef3d784 4180d919 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in resv_map_release
2026/02/27 13:54 upstream a75cb869a8cc a2f13f71 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in resv_map_release
2026/01/07 07:53 upstream f0b9d8eb98df d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in resv_map_release
2025/12/18 15:08 upstream ea1013c15392 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in resv_map_release
2025/12/10 12:30 upstream c9b47175e913 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in resv_map_release
2025/11/30 17:33 upstream 6bda50f4333f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in resv_map_release
2025/11/30 17:32 upstream 6bda50f4333f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in resv_map_release
2025/07/28 03:12 upstream b711733e89a3 fb8f743d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in resv_map_release
2025/06/22 19:13 upstream 739a6c93cc75 d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in resv_map_release
2025/06/22 19:10 upstream 739a6c93cc75 d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in resv_map_release
2025/06/22 19:01 upstream 739a6c93cc75 d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in resv_map_release
2025/06/22 18:57 upstream 739a6c93cc75 d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in resv_map_release
2025/06/22 18:56 upstream 739a6c93cc75 d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in resv_map_release
2025/06/16 05:57 upstream 08215f5486ec 5f4b362d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in resv_map_release
2025/04/09 07:43 upstream bec7dcbc242c b133e63a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in resv_map_release
2025/03/11 03:04 upstream 4d872d51bc9d 16256247 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in resv_map_release
2025/01/04 20:15 upstream 63676eefb7a0 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in resv_map_release
2024/12/03 01:26 upstream cdd30ebb1b9f bb326ffb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in resv_map_release
2024/11/13 13:28 upstream 3022e9d00ebe 62026c85 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in resv_map_release
2025/09/19 18:04 upstream 097a6c336d00 67c37560 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 kernel BUG in resv_map_release
2025/06/12 12:07 upstream 2c4a1f3fe03e 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 kernel BUG in resv_map_release
2026/01/04 06:05 upstream aacb0a6d604a d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in resv_map_release
2025/07/01 00:52 upstream d0b3b7b22dfa 6e83b42d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in resv_map_release
2025/05/23 21:31 upstream 94305e83eccb f8cc0c83 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in resv_map_release
2024/11/08 05:06 upstream 906bd684e4b1 179b040e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in resv_map_release
2025/11/21 12:39 linux-next d724c6f85e80 280ea308 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in resv_map_release
* Struck through repros no longer work on HEAD.