syzbot


BUG: unable to handle kernel paging request in ip_mc_init_dev (2)

Status: closed as invalid on 2022/12/01 16:51
Subsystems: net
[Documentation on labels]
First crash: 553d, last: 553d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: unable to handle kernel paging request in ip_mc_init_dev net 1 2309d 2307d 0/26 closed as invalid on 2018/02/13 20:06

Sample crash report:
Unable to handle kernel paging request at virtual address 000000500000069c
Mem abort info:
  ESR = 0x0000000096000005
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x05: level 1 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000005
  CM = 0, WnR = 0
user pgtable: 4k pages, 48-bit VAs, pgdp=000000016bd5f000
[000000500000069c] pgd=08000001644f4003, p4d=08000001644f4003, pud=0000000000000000
Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 19660 Comm: syz-executor.2 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : read_pnet include/net/net_namespace.h:369 [inline]
pc : dev_net include/linux/netdevice.h:2510 [inline]
pc : ip_mc_reset net/ipv4/igmp.c:1755 [inline]
pc : ip_mc_init_dev+0x98/0xfc net/ipv4/igmp.c:1775
lr : ip_mc_init_dev+0x88/0xfc net/ipv4/igmp.c:1773
sp : ffff80001fecb0e0
x29: ffff80001fecb0e0 x28: ffff800009e788e8 x27: ffff000110f30000
x26: ffff80000d8179d0 x25: 0000000000000001 x24: ffff80000d8166f0
x23: 0000000000000001 x22: ffff00011e45d010 x21: 0000000000000000
x20: 0000000000000001 x19: ffff00011e45d000 x18: fffffffffffffff5
x17: 595342555300302d x16: ffff80000db49158 x15: ffff0001108c4f80
x14: 0000000000000000 x13: 00000000ffffffff x12: ffff0001108c4f80
x11: ff8080000821540c x10: 00000000000003e8 x9 : 00000000000030d4
x8 : 000000500000004c x7 : ffff8000095d1cc4 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000
x2 : ffff80000f13fee8 x1 : ffff80000ceae000 x0 : ffff00011e45d128
Call trace:
 ip_mc_init_dev+0x98/0xfc net/ipv4/igmp.c:1777
 inetdev_init+0x1c0/0x2d4 net/ipv4/devinet.c:287
 inetdev_event+0x8c0/0xa38 net/ipv4/devinet.c:1534
 notifier_call_chain kernel/notifier.c:87 [inline]
 raw_notifier_call_chain+0x7c/0x108 kernel/notifier.c:455
 call_netdevice_notifiers_info net/core/dev.c:1945 [inline]
 call_netdevice_notifiers_extack net/core/dev.c:1983 [inline]
 call_netdevice_notifiers+0x9c/0x108 net/core/dev.c:1997
 register_netdevice+0x8cc/0xa0c net/core/dev.c:10103
 vxcan_newlink+0x208/0x3ec drivers/net/can/vxcan.c:229
 rtnl_newlink_create+0x228/0x6bc net/core/rtnetlink.c:3363
 __rtnl_newlink net/core/rtnetlink.c:3580 [inline]
 rtnl_newlink+0x728/0xa04 net/core/rtnetlink.c:3593
 rtnetlink_rcv_msg+0x484/0x82c net/core/rtnetlink.c:6090
 netlink_rcv_skb+0xe4/0x1d0 net/netlink/af_netlink.c:2501
 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6108
 netlink_unicast_kernel+0xfc/0x1dc net/netlink/af_netlink.c:1319
 netlink_unicast+0x164/0x248 net/netlink/af_netlink.c:1345
 netlink_sendmsg+0x484/0x584 net/netlink/af_netlink.c:1921
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg net/socket.c:734 [inline]
 ____sys_sendmsg+0x2f8/0x440 net/socket.c:2482
 ___sys_sendmsg net/socket.c:2536 [inline]
 __sys_sendmsg+0x1ac/0x228 net/socket.c:2565
 __do_sys_sendmsg net/socket.c:2574 [inline]
 __se_sys_sendmsg net/socket.c:2572 [inline]
 __arm64_sys_sendmsg+0x2c/0x3c net/socket.c:2572
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall arch/arm64/kernel/syscall.c:52 [inline]
 el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206
 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581
Code: f9400268 52861a89 52807d0a d000c3c1 (f9432908) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	f9400268 	ldr	x8, [x19]
   4:	52861a89 	mov	w9, #0x30d4                	// #12500
   8:	52807d0a 	mov	w10, #0x3e8                 	// #1000
   c:	d000c3c1 	adrp	x1, 0x187a000
* 10:	f9432908 	ldr	x8, [x8, #1616] <-- trapping instruction

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/10/10 23:53 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci bbed346d5a96 aea5da89 .config console log report info [disk image] [vmlinux] ci-upstream-gce-arm64 BUG: unable to handle kernel paging request in ip_mc_init_dev
* Struck through repros no longer work on HEAD.