syzbot


BUG: unable to handle kernel paging request in ip_vs_info_seq_ops

Status: closed as invalid on 2018/04/10 15:18
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+b0ad4f097c0980c8a87a@syzkaller.appspotmail.com
First crash: 2495d, last: 2495d

Sample crash report:
IPVS: ftp: loaded support on port[0] = 21
BUG: unable to handle kernel paging request at 000000003392037f
IP: ip_vs_info_seq_ops+0x73f/0xc00
PGD 0 P4D 0 
Oops: 0002 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 24642 Comm: syz-executor0 Not tainted 4.16.0-rc6+ #287
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:ip_vs_info_seq_ops+0x73f/0xc00
RSP: 0018:ffff8801db107990 EFLAGS: 00010a03
RAX: ffffffff815f3ae7 RBX: ffff8801d6987b38 RCX: 0000000000000000
RDX: 1ffff1003ad30f68 RSI: 0000000033920310 RDI: ffff8801d6987b38
RBP: ffff8801db107c80 R08: ffffffff815f3ae7 R09: 0000000000000000
R10: ffff8801db107868 R11: ffffffff8858c2c0 R12: ffff8801d6987b40
R13: ffffffff87c687a0 R14: dffffc0000000000 R15: ffff8801db107c58
FS:  00007fab64b1a700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000003392037f CR3: 000000000846a006 CR4: 00000000001606e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __do_softirq+0x2d7/0xb85 kernel/softirq.c:285
 invoke_softirq kernel/softirq.c:365 [inline]
 irq_exit+0x1cc/0x200 kernel/softirq.c:405
 exiting_irq arch/x86/include/asm/apic.h:541 [inline]
 smp_apic_timer_interrupt+0x16b/0x700 arch/x86/kernel/apic/apic.c:1052
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:857
 </IRQ>
RIP: 0010:check_kcov_mode kernel/kcov.c:67 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x20/0x50 kernel/kcov.c:101
RSP: 0018:ffff8801b4906cb0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff12
RAX: ffff8801d1de0680 RBX: dffffc0000000000 RCX: ffffffff819bc887
RDX: 0000000000000000 RSI: ffffea0007435300 RDI: ffff8801ca16c00c
RBP: ffff8801b4906cb0 R08: 0000000000000000 R09: 1ffff10036920d24
R10: ffff8801b4906858 R11: ffffffff8858c380 R12: 00007fab65943000
R13: ffffea0007435300 R14: ffff8801c5beaa18 R15: 0000000000000002
 zap_pte_range mm/memory.c:1303 [inline]
 zap_pmd_range mm/memory.c:1441 [inline]
 zap_pud_range mm/memory.c:1470 [inline]
 zap_p4d_range mm/memory.c:1491 [inline]
 unmap_page_range+0xcb7/0x22e0 mm/memory.c:1512
 unmap_single_vma+0x15f/0x2d0 mm/memory.c:1557
 unmap_vmas+0xf1/0x1b0 mm/memory.c:1587
 exit_mmap+0x23a/0x500 mm/mmap.c:3020
 __mmput kernel/fork.c:960 [inline]
 mmput+0x223/0x6d0 kernel/fork.c:981
 exit_mm kernel/exit.c:544 [inline]
 do_exit+0x90a/0x1ad0 kernel/exit.c:852
 do_group_exit+0x149/0x400 kernel/exit.c:968
 get_signal+0x73a/0x16d0 kernel/signal.c:2469
 do_signal+0x90/0x1e90 arch/x86/kernel/signal.c:809
 exit_to_usermode_loop+0x258/0x2f0 arch/x86/entry/common.c:162
 prepare_exit_to_usermode arch/x86/entry/common.c:196 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:265 [inline]
 do_syscall_64+0x6ec/0x940 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x454e79
RSP: 002b:00007fab64b19ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000072bec8 RCX: 0000000000454e79
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bec8
RBP: 000000000072bec8 R08: 0000000000000000 R09: 000000000072bea0
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000a3e81f R14: 00007fab64b1a9c0 R15: 0000000000000000
Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
RIP: ip_vs_info_seq_ops+0x73f/0xc00 RSP: ffff8801db107990
CR2: 000000003392037f
---[ end trace 2c785521dba91f4b ]---
invalid opcode: 0000 [#2] SMP KASAN
Dumping ftrace buffer:

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/03/31 01:30 net-next-old 6f14f49ce5eb 8fbce0e4 .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.