syzbot

 sign-in | mailing list | source | docs
🐞 Open [994] ≡ Subsystems 🐞 Fixed [5242] 🐞 Invalid [12515] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

BUG: unable to handle kernel paging request in init_srcu_struct_fields

Status: auto-closed as invalid on 2020/03/24 00:19
Subsystems: kvm
[Documentation on labels]
Reported-by: syzbot+010232b93d20ef8abde5@syzkaller.appspotmail.com
First crash: 1960d, last: 1615d
▶ ▼ Discussions (3)
Title Replies (including bot) Last reply
Reminder: 25 open syzbot bugs in kvm subsystem 1 (1) 2019/07/24 01:43
Reminder: 25 open syzbot bugs in kvm subsystem 1 (1) 2019/06/24 05:21
BUG: unable to handle kernel paging request in init_srcu_struct_fields 0 (1) 2018/12/31 07:05
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 BUG: unable to handle kernel paging request in init_srcu_struct_fields syz done 3 1501d 1699d 1/1 fixed on 2020/04/17 06:51

Sample crash report:
BUG: unable to handle page fault for address: ffffc9001619acd0
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD aa54f067 P4D aa54f067 PUD aa550067 PMD a3962067 PTE 0
Oops: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 26184 Comm: syz-executor.1 Not tainted 5.4.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:init_srcu_struct_nodes kernel/rcu/srcutree.c:150 [inline]
RIP: 0010:init_srcu_struct_fields+0xc19/0x1340 kernel/rcu/srcutree.c:180
Code: 88 00 00 00 48 89 f8 48 c1 e8 03 0f b6 04 18 84 c0 74 08 3c 03 0f 8e ef 03 00 00 49 8d bd 90 01 00 00 44 89 f1 b8 01 00 00 00 <41> 2b 8c 24 88 00 00 00 48 89 fa 48 c1 ea 03 d3 e0 80 3c 1a 00 48
RSP: 0018:ffff8880955cfb18 EFLAGS: 00010246
RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880ae800190
RBP: ffff8880955cfbf0 R08: ffff8880a5e92700 R09: ffffed1015d26b75
R10: ffffed1015d26b74 R11: ffff8880ae935ba3 R12: ffffc9001619ac48
R13: ffff8880ae800000 R14: 0000000000000000 R15: ffff8880ae800140
FS:  00007fc64214e700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc9001619acd0 CR3: 0000000092262000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __init_srcu_struct+0x57/0x60 kernel/rcu/srcutree.c:196
 kvm_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:699 [inline]
 kvm_dev_ioctl_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:3506 [inline]
 kvm_dev_ioctl+0x37b/0x1770 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3558
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:509 [inline]
 do_vfs_ioctl+0xdb6/0x13e0 fs/ioctl.c:696
 ksys_ioctl+0xab/0xd0 fs/ioctl.c:713
 __do_sys_ioctl fs/ioctl.c:720 [inline]
 __se_sys_ioctl fs/ioctl.c:718 [inline]
 __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718
 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45a639
Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fc64214dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639
RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64214e6d4
R13: 00000000004c38d2 R14: 00000000004d7dc8 R15: 00000000ffffffff
Modules linked in:
CR2: ffffc9001619acd0
---[ end trace aa662aaaaa538446 ]---
RIP: 0010:init_srcu_struct_nodes kernel/rcu/srcutree.c:150 [inline]
RIP: 0010:init_srcu_struct_fields+0xc19/0x1340 kernel/rcu/srcutree.c:180
Code: 88 00 00 00 48 89 f8 48 c1 e8 03 0f b6 04 18 84 c0 74 08 3c 03 0f 8e ef 03 00 00 49 8d bd 90 01 00 00 44 89 f1 b8 01 00 00 00 <41> 2b 8c 24 88 00 00 00 48 89 fa 48 c1 ea 03 d3 e0 80 3c 1a 00 48
RSP: 0018:ffff8880955cfb18 EFLAGS: 00010246
RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880ae800190
RBP: ffff8880955cfbf0 R08: ffff8880a5e92700 R09: ffffed1015d26b75
R10: ffffed1015d26b74 R11: ffff8880ae935ba3 R12: ffffc9001619ac48
R13: ffff8880ae800000 R14: 0000000000000000 R15: ffff8880ae800140
FS:  00007fc64214e700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc9001619acd0 CR3: 0000000092262000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (13):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/11/25 00:18 upstream 6b8a79467876 598ca6c8 .config console log report ci-upstream-kasan-gce
2019/08/16 17:18 upstream 329120423947 8fd428a1 .config console log report ci-upstream-kasan-gce-smack-root
2019/08/13 04:37 upstream d45331b00ddb 8620c2c2 .config console log report ci-upstream-kasan-gce-selinux-root
2019/08/12 16:44 upstream d45331b00ddb acb51638 .config console log report ci-upstream-kasan-gce
2019/08/09 00:34 upstream ecb095bff5d4 ede31a9b .config console log report ci-upstream-kasan-gce-selinux-root
2019/08/03 05:46 upstream 97b00aff2c45 6affd8e8 .config console log report ci-upstream-kasan-gce-selinux-root
2019/06/19 07:36 upstream bed3c0d84e7e 34bf9440 .config console log report ci-upstream-kasan-gce
2019/04/16 19:32 upstream 618d919cae2f 505ab413 .config console log report ci-upstream-kasan-gce
2018/12/22 04:01 upstream 5092adb2272e 603b5124 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/14 03:52 upstream 65e08c5e8631 fe7127be .config console log report ci-upstream-kasan-gce-root
2019/09/06 00:22 upstream 3b47fd5ca9ea 040fda58 .config console log report ci-upstream-kasan-gce-386
2018/12/20 09:27 upstream ab63e725b49c 02e69052 .config console log report ci-upstream-kasan-gce-386
2019/06/24 01:16 linux-next e2d28c40292b 472f0082 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.