syzbot


general protection fault in cpuacct_charge (3)

Status: auto-closed as invalid on 2019/12/30 00:15
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+99ec2b8b9983a62f125b@syzkaller.appspotmail.com
First crash: 1692d, last: 1662d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in cpuacct_charge (2) kernel 1 1921d 1921d 0/26 closed as dup on 2019/01/15 16:59
upstream general protection fault in cpuacct_charge kernel 1 2097d 2096d 8/26 fixed on 2018/08/07 13:43

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 8773 Comm: syz-executor.1 Not tainted 5.3.0+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:cpuacct_charge+0x18f/0x360 kernel/sched/cpuacct.c:350
Code: c5 40 81 bb 88 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 81 01 00 00 48 03 1c c5 40 81 bb 88 4a 8d 3c 3b 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 89 01 00 00 4e 01 2c 3b 49 8d bc 24 28 01 00
RSP: 0018:ffff888096887688 EFLAGS: 00010007
RAX: 061ff11020e96000 RBX: 30ff8881074affff RCX: ffffffff83447c9e
RDX: 1ffffffff1177029 RSI: ffffffff83447cac RDI: 30ff8881074b0007
RBP: ffff8880968876b8 R08: ffff8880a32fc440 R09: 0000000000000000
R10: fffffbfff138b688 R11: ffff8880a32fc440 R12: ffffffff864ed000
R13: 000000000053f054 R14: dffffc0000000000 R15: 0000000000000008
FS:  00000000027f8940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000070f158 CR3: 000000008c74e000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 cgroup_account_cputime include/linux/cgroup.h:778 [inline]
 update_curr+0x2f5/0x8d0 kernel/sched/fair.c:861
 dequeue_entity+0x1e/0x1150 kernel/sched/fair.c:4066
 dequeue_task_fair+0xad/0x920 kernel/sched/fair.c:5291
 dequeue_task kernel/sched/core.c:1314 [inline]
 deactivate_task+0x114/0x420 kernel/sched/core.c:1334
 detach_task.isra.0+0x7a/0x140 kernel/sched/fair.c:7287
 detach_tasks kernel/sched/fair.c:7375 [inline]
 load_balance+0xa83/0x26a0 kernel/sched/fair.c:8834
 newidle_balance+0x788/0xe90 kernel/sched/fair.c:9795
 pick_next_task_fair+0x92/0xc60 kernel/sched/fair.c:6854
 pick_next_task kernel/sched/core.c:3920 [inline]
 __schedule+0x3d0/0x1e70 kernel/sched/core.c:4039
 schedule+0xd9/0x260 kernel/sched/core.c:4136
 freezable_schedule include/linux/freezer.h:172 [inline]
 do_nanosleep+0x21f/0x640 kernel/time/hrtimer.c:1871
 hrtimer_nanosleep+0x297/0x550 kernel/time/hrtimer.c:1924
 __do_sys_nanosleep kernel/time/hrtimer.c:1958 [inline]
 __se_sys_nanosleep kernel/time/hrtimer.c:1945 [inline]
 __x64_sys_nanosleep+0x1a6/0x220 kernel/time/hrtimer.c:1945
 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457ed0
Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 81 e8 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 24 d3 fb ff c3 48 83 ec 08 e8 ea 46 00 00
RSP: 002b:00007ffc0c346878 EFLAGS: 00000246 ORIG_RAX: 0000000000000023
RAX: ffffffffffffffda RBX: 00000000000e6483 RCX: 0000000000457ed0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffc0c346880
RBP: 000000000000036e R08: 0000000000000001 R09: 00000000027f8940
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
R13: 00007ffc0c3468d0 R14: 00000000000e6470 R15: 00007ffc0c3468e0
Modules linked in:
---[ end trace 9a09ab4e6853e6cc ]---
RIP: 0010:cpuacct_charge+0x18f/0x360 kernel/sched/cpuacct.c:350
Code: c5 40 81 bb 88 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 81 01 00 00 48 03 1c c5 40 81 bb 88 4a 8d 3c 3b 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 89 01 00 00 4e 01 2c 3b 49 8d bc 24 28 01 00
RSP: 0018:ffff888096887688 EFLAGS: 00010007
RAX: 061ff11020e96000 RBX: 30ff8881074affff RCX: ffffffff83447c9e
RDX: 1ffffffff1177029 RSI: ffffffff83447cac RDI: 30ff8881074b0007
RBP: ffff8880968876b8 R08: ffff8880a32fc440 R09: 0000000000000000
R10: fffffbfff138b688 R11: ffff8880a32fc440 R12: ffffffff864ed000
R13: 000000000053f054 R14: dffffc0000000000 R15: 0000000000000008
FS:  00000000027f8940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000070f158 CR3: 000000008c74e000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/01 00:14 net-next-old 02dc96ef6c25 c7a4fb99 .config console log report ci-upstream-net-kasan-gce
2019/09/01 07:53 net-next-old ed6e8103ba72 bad3cce2 .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.