syzbot


BUG: using smp_processor_id() in preemptible code in __do_user_fault

Status: closed as invalid on 2022/08/16 10:34
Reported-by: syzbot+a7ee43e564223f195c84@syzkaller.appspotmail.com
First crash: 567d, last: 68d

Sample crash report:
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.1/8499
caller is debug_smp_processor_id+0x20/0x24 lib/smp_processor_id.c:60
CPU: 0 PID: 8499 Comm: syz-executor.1 Not tainted 5.19.0-rc7-syzkaller #0
Hardware name: ARM-Versatile Express
Backtrace: 
[<816f3a64>] (dump_backtrace) from [<816f3d94>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:253)
 r7:00000000 r6:81710154 r5:60000113 r4:81d80514
[<816f3d7c>] (show_stack) from [<816fc6c0>] (__dump_stack lib/dump_stack.c:88 [inline])
[<816f3d7c>] (show_stack) from [<816fc6c0>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106)
[<816fc678>] (dump_stack_lvl) from [<816fc6e4>] (dump_stack+0x18/0x1c lib/dump_stack.c:113)
 r5:81d8a35c r4:852ac680
[<816fc6cc>] (dump_stack) from [<81710130>] (check_preemption_disabled+0xfc/0x100 lib/smp_processor_id.c:49)
[<81710034>] (check_preemption_disabled) from [<81710154>] (debug_smp_processor_id+0x20/0x24 lib/smp_processor_id.c:60)
 r7:00000a07 r6:852ac680 r5:0000000b r4:ffffffc0
[<81710134>] (debug_smp_processor_id) from [<80216a7c>] (harden_branch_predictor arch/arm/include/asm/system_misc.h:23 [inline])
[<81710134>] (debug_smp_processor_id) from [<80216a7c>] (__do_user_fault+0x8c/0xfc arch/arm/mm/fault.c:163)
[<802169f0>] (__do_user_fault) from [<80216cf4>] (do_page_fault+0x18c/0x38c arch/arm/mm/fault.c:374)
 r9:85536640 r8:85536600 r7:852ac680 r6:00000a07 r5:ffffffc0 r4:ed959fb0
[<80216b68>] (do_page_fault) from [<802170dc>] (do_DataAbort+0x38/0xa8 arch/arm/mm/fault.c:539)
 r10:7ee96544 r9:76f806d0 r8:80216b68 r7:ed959fb0 r6:ffffffc0 r5:00000a07
 r4:8241d218
[<802170a4>] (do_DataAbort) from [<80200dfc>] (__dabt_usr+0x5c/0x60 arch/arm/kernel/entry-armv.S:427)
Exception stack(0xed959fb0 to 0xed959ff8)
9fa0:                                     7fffffff 200001c0 ffffffc0 20000190
9fc0: 00000004 00000313 00000140 20fff000 7ee963b2 76f806d0 7ee96544 76f8020c
9fe0: 00000000 76f7fff8 00000000 000141f4 80000010 ffffffff
 r8:822a1044 r7:852ac680 r6:ffffffff r5:80000010 r4:000141f4

Crashes (17864):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-qemu2-arm32 2022/07/22 05:37 upstream 68e77ffbfd06 5e6028b9 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/22 04:10 upstream 68e77ffbfd06 5e6028b9 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/22 02:24 upstream 68e77ffbfd06 5e6028b9 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/22 00:38 upstream 68e77ffbfd06 5e6028b9 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 22:47 upstream 68e77ffbfd06 5e6028b9 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 18:35 upstream 353f7988dd84 6e67af9d .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 15:48 upstream 353f7988dd84 6e67af9d .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 14:26 upstream 353f7988dd84 6e67af9d .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 12:58 upstream 353f7988dd84 6e67af9d .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 12:38 upstream 353f7988dd84 6e67af9d .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 09:21 upstream 353f7988dd84 6e67af9d .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 08:16 upstream 353f7988dd84 6e67af9d .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 06:54 upstream 353f7988dd84 88cb1383 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 05:18 upstream 353f7988dd84 88cb1383 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 04:14 upstream 353f7988dd84 88cb1383 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 03:13 upstream 353f7988dd84 88cb1383 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 02:21 upstream 353f7988dd84 88cb1383 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/21 01:18 upstream 353f7988dd84 88cb1383 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/20 23:36 upstream 353f7988dd84 88cb1383 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/20 22:33 upstream 353f7988dd84 88cb1383 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/20 16:16 upstream ca85855bdcae 88cb1383 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/20 14:25 upstream ca85855bdcae 88cb1383 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/20 13:04 upstream ca85855bdcae 775344bc .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/20 09:50 upstream ca85855bdcae 775344bc .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/20 08:36 upstream ca85855bdcae 775344bc .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/20 08:36 upstream ca85855bdcae 775344bc .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/20 06:03 upstream ca85855bdcae 775344bc .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/20 05:00 upstream ca85855bdcae 775344bc .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/20 03:48 upstream ca85855bdcae 775344bc .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/20 02:33 upstream ca85855bdcae 775344bc .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/20 00:45 upstream ca85855bdcae 775344bc .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/19 23:45 upstream ca85855bdcae 775344bc .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/19 23:28 upstream ca85855bdcae 775344bc .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/19 21:16 upstream ca85855bdcae 775344bc .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/19 19:54 upstream ca85855bdcae 72a3cc0c .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/19 18:15 upstream ca85855bdcae 72a3cc0c .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/19 17:11 upstream ca85855bdcae 72a3cc0c .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/19 15:19 upstream ca85855bdcae 72a3cc0c .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/19 14:14 upstream ca85855bdcae 72a3cc0c .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/19 11:54 upstream ca85855bdcae 72a3cc0c .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/19 11:11 upstream ca85855bdcae 72a3cc0c .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/19 06:55 upstream 80e19f34c288 ff988920 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2022/07/19 05:40 upstream 80e19f34c288 ff988920 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2021/03/11 08:04 upstream a74e6a014c9d c2ca1f2a .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
ci-qemu2-arm32 2021/03/10 02:11 upstream 05a59d79793d 26967e35 .config log report info BUG: using smp_processor_id() in preemptible code in __do_user_fault
* Struck through repros no longer work on HEAD.