syzbot


general protection fault in __hrtimer_run_queues

Status: closed as invalid on 2018/07/07 21:38
Subsystems: kernel
[Documentation on labels]
First crash: 2112d, last: 2112d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in __hrtimer_run_queues (3) reiserfs C error done 2 130d 295d 26/26 fixed on 2024/01/30 15:47
upstream general protection fault in __hrtimer_run_queues (2) kernel 1 1932d 1932d 0/26 auto-closed as invalid on 2019/07/02 11:21

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.18.0-rc3-next-20180706+ #1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:lookup_object lib/debugobjects.c:157 [inline]
RIP: 0010:debug_object_deactivate+0x191/0x450 lib/debugobjects.c:540
Code: 02 00 00 48 8b 1b 41 bf 01 00 00 00 48 85 db 74 46 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 18 41 83 c7 01 48 89 fe 48 c1 ee 03 <80> 3c 06 00 0f 85 04 02 00 00 48 3b 53 18 0f 84 53 01 00 00 48 89 
RSP: 0018:ffff8801dae07a90 EFLAGS: 00010006
RAX: dffffc0000000000 RBX: 0000000041b58ab3 RCX: ffffffff81603e61
RDX: ffff8801dae26560 RSI: 000000000836b159 RDI: 0000000041b58acb
RBP: ffff8801dae07b50 R08: fffffbfff1576866 R09: fffffbfff1576865
R10: fffffbfff1576865 R11: ffffffff8abb432b R12: 1ffff1003b5c0f54
R13: ffffffff8abb4328 R14: ffffffff88fa0fe0 R15: 0000000000000013
FS:  0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
PANIC: double fault, error_code: 0x0
CR2: 00007ffc2a832b2c CR3: 0000000008e6a000 CR4: 00000000001406f0
CPU: 1 PID: 11673 Comm: syz-executor149 Not tainted 4.18.0-rc3-next-20180706+ #1
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
RIP: 0010:__lock_acquire+0x2e/0x5020 kernel/locking/lockdep.c:3294
Call Trace:
Code: 41 57 
 <IRQ>
41 
89 
cf 
 debug_hrtimer_deactivate kernel/time/hrtimer.c:421 [inline]
 debug_deactivate kernel/time/hrtimer.c:471 [inline]
 __run_hrtimer kernel/time/hrtimer.c:1368 [inline]
 __hrtimer_run_queues+0x2bf/0x10c0 kernel/time/hrtimer.c:1460
41 
56 41 
55 
49 89 
fd 
41 54 
45 
89 
cc 
53 
65 4c 
 hrtimer_interrupt+0x2f3/0x750 kernel/time/hrtimer.c:1518
8b 
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1025 [inline]
 smp_apic_timer_interrupt+0x165/0x730 arch/x86/kernel/apic/apic.c:1050
34 
25 
40 
ee 01 
00 
48 
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:867
83 
 </IRQ>
e4 f0 
RIP: 0010:arch_local_irq_enable arch/x86/include/asm/paravirt.h:793 [inline]
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x56/0x70 kernel/locking/spinlock.c:192
48 
Code: 
81 ec 
f1 
60 
88 
03 
48 
00 
b8 
00 
00 
48 
00 
8b 
00 
45 
00 
10 
00 
<89> 
fc 
94 
ff 
24 
df 
80 
48 
00 
89 
00 
fa 
00 
48 
48 
c1 
ba 00 
ea 
00 00 
03 
00 
80 
00 
3c 
fc ff 
02 
df 48 
00 
89 
75 
84 
1d 
24 
48 
98 
83 
3d 
RSP: 0018:ffff8801b55b9e30 EFLAGS: 00010086
8b 
91 
RAX: 0000000000000000 RBX: 1ffff10036ab7443 RCX: 0000000000000002
54 
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff88f92920
01 
RBP: ffff8801b55ba1c0 R08: 0000000000000000 R09: 0000000000000000
00 
R10: ffff8801c036f1b8 R11: ffffffff88e1272b R12: 0000000000000000
74 
R13: ffffffff88f92920 R14: ffff8801c721c1c0 R15: 0000000000000002
11 
FS:  00007f2abb4e4700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000
fb 66 
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
0f 
CR2: ffff8801b55b9e28 CR3: 00000001c3db7000 CR4: 00000000001406e0
1f 44 
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
00 
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
00 
Call Trace:
<65> 

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/07/07 20:23 linux-next 526674536360 ab89aea9 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.