syzbot


BUG: unable to handle kernel paging request in inet_sendmsg

Status: closed as invalid on 2024/06/15 08:33
Subsystems: net
[Documentation on labels]
First crash: 459d, last: 459d

Sample crash report:
Unable to handle kernel paging request at virtual address 007f800082802c20
Mem abort info:
  ESR = 0x0000000096000004
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x04: level 0 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000
  CM = 0, WnR = 0, TnD = 0, TagAccess = 0
  GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[007f800082802c20] address between user and kernel address ranges
Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 3186 Comm: sshd Not tainted 6.9.0-syzkaller-12124-g6d69b6c12fce #0
Hardware name: linux,dummy-virt (DT)
pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : inet_sendmsg+0x3c/0x70 net/ipv4/af_inet.c:853
lr : inet_sendmsg+0x28/0x70 net/ipv4/af_inet.c:850
sp : ffff80008927bc20
x29: ffff80008927bc20 x28: f4f0000005f436c0 x27: 0000000000000000
x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000
x23: 0000000000000000 x22: f1f000000318d380 x21: f5f0000007709280
x20: 00000000000000f4 x19: ffff80008927bcb0 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000
x11: f670000005ff6980 x10: 0000000000000000 x9 : 0000000000000000
x8 : ffff80008927bd18 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : f5f0000007709280 x3 : ff7f800082802bb8
x2 : 00000000000000f4 x1 : ffff80008927bcb0 x0 : f5f0000007709280
Call trace:
 inet_sendmsg+0x3c/0x70 net/ipv4/af_inet.c:853
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg+0x54/0x60 net/socket.c:745
 sock_write_iter+0x98/0xf8 net/socket.c:1160
 new_sync_write fs/read_write.c:497 [inline]
 vfs_write+0x300/0x368 fs/read_write.c:590
 ksys_write+0xe8/0x104 fs/read_write.c:643
 __do_sys_write fs/read_write.c:655 [inline]
 __se_sys_write fs/read_write.c:652 [inline]
 __arm64_sys_write+0x1c/0x28 fs/read_write.c:652
 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline]
 invoke_syscall+0x48/0x118 arch/arm64/kernel/syscall.c:48
 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:133
 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:152
 el0_svc+0x34/0xf8 arch/arm64/kernel/entry-common.c:712
 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:598
Code: f94016a3 aa1403e2 aa1303e1 aa1503e0 (f9403463) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	f94016a3 	ldr	x3, [x21, #40]
   4:	aa1403e2 	mov	x2, x20
   8:	aa1303e1 	mov	x1, x19
   c:	aa1503e0 	mov	x0, x21
* 10:	f9403463 	ldr	x3, [x3, #104] <-- trapping instruction

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/24 11:41 upstream 6d69b6c12fce 8f98448e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-mte BUG: unable to handle kernel paging request in inet_sendmsg
* Struck through repros no longer work on HEAD.