BUG: unable to handle kernel paging request in swake_up

Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
android-5-15	BUG: unable to handle kernel paging request in swake_up_locked origin:lts	syz			1	165d	165d	0/2	auto-obsoleted due to no activity on 2024/09/07 02:36
upstream	KMSAN: uninit-value in swake_up_locked kernel				2	1186d	1196d	0/28	auto-closed as invalid on 2021/11/21 11:48

android-5-15

BUG: unable to handle kernel paging request in swake_up_locked origin:lts

syz

165d

0/2

auto-obsoleted due to no activity on 2024/09/07 02:36

upstream

KMSAN: uninit-value in swake_up_locked kernel

1186d

1196d

0/28

auto-closed as invalid on 2021/11/21 11:48

Created	Duration	User	Patch	Repo	Result
2024/05/19 23:32	2m	retest repro		android13-5.10-lts	error

Created

Duration

User

Patch

Repo

Result

2024/05/19 23:32

retest repro

android13-5.10-lts

error


Created	Duration	User	Patch	Repo	Result
2024/07/20 08:05	10h04m	bisect fix		android13-5.10-lts	OK (4) job log
2024/06/06 03:51	2h24m	bisect fix		android13-5.10-lts	OK (0) job log log

BUG: unable to handle page fault for address: fffffffffffffff8 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 6612067 P4D 6612067 PUD 6614067 PMD 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 310 Comm: syz-executor938 Not tainted 5.10.210-syzkaller-00394-g70b6ab09a34b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:swake_up_locked+0x57/0x120 kernel/sched/swait.c:30 Code: 89 df e8 bc 57 59 00 4c 8b 3b 49 39 df 0f 84 ca 00 00 00 49 8d 7f f8 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 99 57 59 00 <49> 8b 7f f8 e8 10 e1 f9 ff 4c 89 ff e8 b8 96 07 01 84 c0 74 6a 49 RSP: 0018:ffffc900022a7d30 EFLAGS: 00010046 RAX: 1fffffffffffffff RBX: ffffc90001fe7aa0 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: fffffffffffffff8 RBP: ffffc900022a7d58 R08: dffffc0000000000 R09: 0000000000000003 R10: fffff52000454f98 R11: dffffc0000000001 R12: dffffc0000000000 R13: ffffc90001fe7a90 R14: 0000000000000246 R15: 0000000000000000 FS: 00005555562213c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffffffffffffff8 CR3: 0000000116159000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: complete+0x5c/0xb0 kernel/sched/completion.c:36 uinput_flush_requests drivers/input/misc/uinput.c:213 [inline] uinput_destroy_device+0x164/0x950 drivers/input/misc/uinput.c:298 uinput_release+0x3e/0x50 drivers/input/misc/uinput.c:744 __fput+0x309/0x760 fs/file_table.c:281 ____fput+0x15/0x20 fs/file_table.c:314 task_work_run+0x129/0x190 kernel/task_work.c:164 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop+0xbf/0xd0 kernel/entry/common.c:172 exit_to_user_mode_prepare kernel/entry/common.c:199 [inline] syscall_exit_to_user_mode+0xc5/0x1d0 kernel/entry/common.c:274 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7fb6af562a8a Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 53 81 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 b3 81 02 00 8b 44 24 RSP: 002b:00007ffe50aa0df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fb6af562a8a RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00000000000dde3b R08: 0000000000000000 R09: 00007ffe50aa0ed0 R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000003e8 R13: 00007fb6af5ea1bc R14: 00000000000dde6d R15: 00007fb6af5ea1a0 Modules linked in: CR2: fffffffffffffff8 ---[ end trace 7f3ef19fc4eed330 ]--- RIP: 0010:swake_up_locked+0x57/0x120 kernel/sched/swait.c:30 Code: 89 df e8 bc 57 59 00 4c 8b 3b 49 39 df 0f 84 ca 00 00 00 49 8d 7f f8 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 99 57 59 00 <49> 8b 7f f8 e8 10 e1 f9 ff 4c 89 ff e8 b8 96 07 01 84 c0 74 6a 49 RSP: 0018:ffffc900022a7d30 EFLAGS: 00010046 RAX: 1fffffffffffffff RBX: ffffc90001fe7aa0 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: fffffffffffffff8 RBP: ffffc900022a7d58 R08: dffffc0000000000 R09: 0000000000000003 R10: fffff52000454f98 R11: dffffc0000000001 R12: dffffc0000000000 R13: ffffc90001fe7a90 R14: 0000000000000246 R15: 0000000000000000 FS: 00005555562213c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffffffffffffff8 CR3: 0000000116159000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 89 df mov %ebx,%edi 2: e8 bc 57 59 00 call 0x5957c3 7: 4c 8b 3b mov (%rbx),%r15 a: 49 39 df cmp %rbx,%r15 d: 0f 84 ca 00 00 00 je 0xdd 13: 49 8d 7f f8 lea -0x8(%r15),%rdi 17: 48 89 f8 mov %rdi,%rax 1a: 48 c1 e8 03 shr $0x3,%rax 1e: 42 80 3c 20 00 cmpb $0x0,(%rax,%r12,1) 23: 74 05 je 0x2a 25: e8 99 57 59 00 call 0x5957c3 * 2a: 49 8b 7f f8 mov -0x8(%r15),%rdi <-- trapping instruction 2e: e8 10 e1 f9 ff call 0xfff9e143 33: 4c 89 ff mov %r15,%rdi 36: e8 b8 96 07 01 call 0x10796f3 3b: 84 c0 test %al,%al 3d: 74 6a je 0xa9 3f: 49 rex.WB

Crashes (1):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Assets (help?)	Manager	Title
2024/05/05 23:31	android13-5.10-lts	70b6ab09a34b	610f2a54	.config	console log	report	syz	C		[disk image] [vmlinux] [kernel image]	ci2-android-5-10	BUG: unable to handle kernel paging request in swake_up_locked

Crashes (1):

Assets (help?)