syzbot


INFO: trying to register non-static key in shmem_add_to_page_cache

Status: auto-closed as invalid on 2021/11/13 15:53
Reported-by: syzbot+2e9a9b04e7809d0e9cf7@syzkaller.appspotmail.com
First crash: 1078d, last: 1011d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 INFO: trying to register non-static key in shmem_add_to_page_cache 1 1173d 1173d 0/1 auto-closed as invalid on 2021/06/05 06:41

Sample crash report:
audit: type=1800 audit(1626450744.064:901): pid=15000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15038 res=0
nla_parse: 8 callbacks suppressed
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.
CPU: 1 PID: 14973 Comm: systemd-udevd Not tainted 4.19.197-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 assign_lock_key kernel/locking/lockdep.c:728 [inline]
 register_lock_class+0xe82/0x11c0 kernel/locking/lockdep.c:754
 __lock_acquire+0x17d/0x3ff0 kernel/locking/lockdep.c:3304
 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908
 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:128 [inline]
 _raw_spin_lock_irq+0x5b/0x80 kernel/locking/spinlock.c:160
 spin_lock_irq include/linux/spinlock.h:354 [inline]
 shmem_add_to_page_cache+0x306/0xbb0 mm/shmem.c:607
 shmem_getpage_gfp+0x2004/0x37f0 mm/shmem.c:1836
 shmem_getpage mm/shmem.c:132 [inline]
 shmem_write_begin+0xff/0x1e0 mm/shmem.c:2446
 generic_perform_write+0x1f8/0x4d0 mm/filemap.c:3170
 __generic_file_write_iter+0x24b/0x610 mm/filemap.c:3295
 generic_file_write_iter+0x3f8/0x730 mm/filemap.c:3323
 call_write_iter include/linux/fs.h:1821 [inline]
 new_sync_write fs/read_write.c:474 [inline]
 __vfs_write+0x51b/0x770 fs/read_write.c:487
 vfs_write+0x1f3/0x540 fs/read_write.c:549
 ksys_write+0x12b/0x2a0 fs/read_write.c:599
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fca6fac9970
Code: 73 01 c3 48 8b 0d 28 d5 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 99 2d 2c 00 00 75 10 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 7e 9b 01 00 48 89 04 24
RSP: 002b:00007ffcf69a8318 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000037 RCX: 00007fca6fac9970
RDX: 0000000000000037 RSI: 00005591100208a0 RDI: 000000000000000f
RBP: 00005591100208a0 R08: 0000559110030ed0 R09: 00007fca70c578c0
R10: 0000000000000073 R11: 0000000000000246 R12: 0000000000000037
R13: 0000000000000001 R14: 0000559110030df0 R15: 0000000000000037
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 14973 Comm: systemd-udevd Not tainted 4.19.197-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__list_del_entry_valid+0x81/0xf0 lib/list_debug.c:51
Code: 0f 84 54 90 84 04 48 b8 00 02 00 00 00 00 ad de 49 39 c4 0f 84 55 90 84 04 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 51 49 8b 14 24 48 39 ea 0f 85 0c 90 84 04 49 8d 7d
RSP: 0018:ffff888035f4fbe0 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffff8880985ed7c8 RCX: ffffffff814bdc7b
RDX: 0000000000000000 RSI: ffffffff8189ab0f RDI: ffff8880985ed7d0
RBP: ffff8880985ed7c8 R08: 0000000000000001 R09: ffffed10147a1278
R10: ffff8880a3d093c3 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8880985ed7d0 R15: ffff8880985ed658
FS:  00007fca70c578c0(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000541198 CR3: 00000000a6d87000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __list_del_entry include/linux/list.h:117 [inline]
 list_del_init include/linux/list.h:159 [inline]
 list_lru_del+0x11b/0x570 mm/list_lru.c:156
 inode_lru_list_del fs/inode.c:434 [inline]
 iput_final fs/inode.c:1552 [inline]
 iput+0x4c0/0x860 fs/inode.c:1581
 dentry_unlink_inode+0x265/0x320 fs/dcache.c:374
 __dentry_kill+0x3c0/0x640 fs/dcache.c:566
 dentry_kill+0xc4/0x510 fs/dcache.c:685
 dput+0x55f/0x640 fs/dcache.c:846
 do_renameat2+0xb69/0xc70 fs/namei.c:4633
 __do_sys_rename fs/namei.c:4675 [inline]
 __se_sys_rename fs/namei.c:4673 [inline]
 __x64_sys_rename+0x5d/0x80 fs/namei.c:4673
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fca6fa52d47
Code: 75 12 48 89 df e8 19 84 07 00 85 c0 0f 95 c0 0f b6 c0 f7 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 52 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 21 41 33 00 f7 d8 64 89 01 48
RSP: 002b:00007ffcf69a8408 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
RAX: ffffffffffffffda RBX: 000055911002fd40 RCX: 00007fca6fa52d47
RDX: 0000000000000000 RSI: 00007ffcf69a8410 RDI: 0000559110020450
RBP: 00007ffcf69a84d0 R08: 0000559110030ed0 R09: 0000559110030df0
R10: 00007fca70c578c0 R11: 0000000000000246 R12: 00007ffcf69a8410
R13: 0000000000000001 R14: 000055910e1086cb R15: 0000000000000000
Modules linked in:
---[ end trace 26e5ba4ad5ef022f ]---
RIP: 0010:__list_del_entry_valid+0x81/0xf0 lib/list_debug.c:51
Code: 0f 84 54 90 84 04 48 b8 00 02 00 00 00 00 ad de 49 39 c4 0f 84 55 90 84 04 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 51 49 8b 14 24 48 39 ea 0f 85 0c 90 84 04 49 8d 7d
RSP: 0018:ffff888035f4fbe0 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffff8880985ed7c8 RCX: ffffffff814bdc7b
RDX: 0000000000000000 RSI: ffffffff8189ab0f RDI: ffff8880985ed7d0
RBP: ffff8880985ed7c8 R08: 0000000000000001 R09: ffffed10147a1278
R10: ffff8880a3d093c3 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8880985ed7d0 R15: ffff8880985ed658
FS:  00007fca70c578c0(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000541198 CR3: 00000000a6d87000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/07/16 15:52 linux-4.19.y fcfbdfe9626e f115ae98 .config console log report info ci2-linux-4-19 INFO: trying to register non-static key in shmem_add_to_page_cache
2021/05/10 14:17 linux-4.19.y 3c8c23092588 ca873091 .config console log report info ci2-linux-4-19 INFO: trying to register non-static key in shmem_add_to_page_cache
* Struck through repros no longer work on HEAD.