upstream boot error: general protection fault in swiotlb

upstream boot error: general protection fault in swiotlb_map
Status: auto-closed as invalid on 2020/12/10 07:19
Reported-by: syzbot+3f86afd0b1e4bf1cb64c@syzkaller.appspotmail.com
First crash: 364d, last: 328d

Sample crash report:

ceph: loaded (mds proto 32)
NET: Registered protocol family 38
async_tx: api initialized (async)
Key type asymmetric registered
Asymmetric key parser 'x509' registered
Asymmetric key parser 'pkcs8' registered
Key type pkcs7_test registered
Asymmetric key parser 'tpm_parser' registered
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 243)
io scheduler mq-deadline registered
io scheduler kyber registered
io scheduler bfq registered
hgafb: HGA card not detected.
hgafb: probe of hgafb.0 failed with error -22
usbcore: registered new interface driver udlfb
uvesafb: failed to execute /sbin/v86d
uvesafb: make sure that the v86d helper is installed and executable
uvesafb: Getting VBE info block failed (eax=0x4f00, err=-2)
uvesafb: vbe_init() failed with -22
uvesafb: probe of uvesafb.0 failed with error -22
vga16fb: mapped to 0x000000008642dff9
Console: switching to colour frame buffer device 80x30
fb0: VGA16 VGA frame buffer device
input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0
ACPI: Power Button [PWRF]
ioatdma: Intel(R) QuickData Technology Driver 5.00
PCI Interrupt Link [GSIF] enabled at IRQ 21
PCI Interrupt Link [GSIG] enabled at IRQ 22
PCI Interrupt Link [GSIH] enabled at IRQ 23
N_HDLC line discipline registered with maxframe=4096
Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A
Cyclades driver 2.6
Initializing Nozomi driver 2.1d
RocketPort device driver module, version 2.09, 12-June-2003
No rocketport ports found; unloading driver
Non-volatile memory driver v1.3
Linux agpgart interface v0.103
[drm] Initialized vgem 1.0.0 20120112 for vgem on minor 0
[drm] Initialized vkms 1.0.0 20180514 for vkms on minor 1
usbcore: registered new interface driver udl
[drm] pci: virtio-vga detected at 0000:00:01.0
fb0: switching to virtiodrmfb from VGA16 VGA
Console: switching to colour VGA+ 80x25
virtio-pci 0000:00:01.0: vgaarb: deactivate vga console
Console: switching to colour dummy device 80x25
[drm] features: -virgl +edid
[drm] number of scanouts: 1
[drm] number of cap sets: 0
[drm] Initialized virtio_gpu 0.1.0 0 for virtio0 on minor 2
general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 2 PID: 1 Comm: swapper/0 Not tainted 5.9.0-rc4-syzkaller #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014
RIP: 0010:swiotlb_map+0x5ac/0x700 kernel/dma/swiotlb.c:683
Code: 28 04 00 00 48 c1 ea 03 80 3c 02 00 0f 85 4d 01 00 00 4c 8b a5 18 04 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 1e 01 00 00 48 8d 7d 50 4d 8b 24 24 48 b8 00 00
RSP: 0000:ffffc9000034f3e0 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8162f5dd
RDX: 0000000000000000 RSI: ffffffff8162f658 RDI: ffff88807608b470
RBP: ffff88807608b048 R08: 0000000000000001 R09: ffffffff8c5f5a37
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 000000007ac00000 R14: dffffc0000000000 R15: 0000000000001000
FS:  0000000000000000(0000) GS:ffff88802d000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000009a8d000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 dma_direct_map_page include/linux/dma-direct.h:167 [inline]
 dma_direct_map_sg+0x3bb/0x670 kernel/dma/direct.c:373
 dma_map_sg_attrs+0xd0/0x160 kernel/dma/mapping.c:183
 drm_gem_shmem_get_pages_sgt drivers/gpu/drm/drm_gem_shmem_helper.c:700 [inline]
 drm_gem_shmem_get_pages_sgt+0x1fc/0x310 drivers/gpu/drm/drm_gem_shmem_helper.c:679
 virtio_gpu_object_shmem_init drivers/gpu/drm/virtio/virtgpu_object.c:154 [inline]
 virtio_gpu_object_create+0x2fd/0xa70 drivers/gpu/drm/virtio/virtgpu_object.c:233
 virtio_gpu_gem_create drivers/gpu/drm/virtio/virtgpu_gem.c:45 [inline]
 virtio_gpu_mode_dumb_create+0x298/0x530 drivers/gpu/drm/virtio/virtgpu_gem.c:85
 drm_mode_create_dumb+0x27c/0x300 drivers/gpu/drm/drm_dumb_buffers.c:94
 drm_client_buffer_create drivers/gpu/drm/drm_client.c:267 [inline]
 drm_client_framebuffer_create+0x1b7/0x770 drivers/gpu/drm/drm_client.c:412
 drm_fb_helper_generic_probe+0x1e5/0x810 drivers/gpu/drm/drm_fb_helper.c:2086
 drm_fb_helper_single_fb_probe drivers/gpu/drm/drm_fb_helper.c:1635 [inline]
 __drm_fb_helper_initial_config_and_unlock+0xbc6/0x12d0 drivers/gpu/drm/drm_fb_helper.c:1793
 drm_fb_helper_initial_config drivers/gpu/drm/drm_fb_helper.c:1888 [inline]
 drm_fb_helper_initial_config drivers/gpu/drm/drm_fb_helper.c:1880 [inline]
 drm_fbdev_client_hotplug+0x2d4/0x580 drivers/gpu/drm/drm_fb_helper.c:2180
 drm_fbdev_generic_setup+0x1c8/0x450 drivers/gpu/drm/drm_fb_helper.c:2262
 virtio_gpu_probe+0x28f/0x2e0 drivers/gpu/drm/virtio/virtgpu_drv.c:127
 virtio_dev_probe+0x445/0x6f0 drivers/virtio/virtio.c:248
 really_probe+0x282/0x9f0 drivers/base/dd.c:553
 driver_probe_device+0xfe/0x1d0 drivers/base/dd.c:738
 device_driver_attach+0x228/0x290 drivers/base/dd.c:1013
 __driver_attach drivers/base/dd.c:1090 [inline]
 __driver_attach+0xda/0x240 drivers/base/dd.c:1044
 bus_for_each_dev+0x147/0x1d0 drivers/base/bus.c:305
 bus_add_driver+0x348/0x5a0 drivers/base/bus.c:622
 driver_register+0x220/0x3a0 drivers/base/driver.c:171
 do_one_initcall+0x10a/0x7a4 init/main.c:1204
 do_initcall_level init/main.c:1277 [inline]
 do_initcalls init/main.c:1293 [inline]
 do_basic_setup init/main.c:1313 [inline]
 kernel_init_freeable+0x5e9/0x66d init/main.c:1512
 kernel_init+0xd/0x1c0 init/main.c:1402
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294
Modules linked in:
---[ end trace f11de63953416166 ]---
RIP: 0010:swiotlb_map+0x5ac/0x700 kernel/dma/swiotlb.c:683
Code: 28 04 00 00 48 c1 ea 03 80 3c 02 00 0f 85 4d 01 00 00 4c 8b a5 18 04 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 1e 01 00 00 48 8d 7d 50 4d 8b 24 24 48 b8 00 00
RSP: 0000:ffffc9000034f3e0 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8162f5dd
RDX: 0000000000000000 RSI: ffffffff8162f658 RDI: ffff88807608b470
RBP: ffff88807608b048 R08: 0000000000000001 R09: ffffffff8c5f5a37
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 000000007ac00000 R14: dffffc0000000000 R15: 0000000000001000
FS:  0000000000000000(0000) GS:ffff88802ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff88800d601000 CR3: 0000000009a8d000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (195):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report
ci-qemu-upstream	2020/09/11 07:18	upstream	581cb3a26baf	adfb8b4e	.config	log	report
ci-qemu-upstream	2020/09/10 21:29	upstream	581cb3a26baf	409809d8	.config	log	report
ci-qemu-upstream	2020/09/10 06:01	upstream	7fe10096c150	409809d8	.config	log	report
ci-qemu-upstream	2020/09/10 03:40	upstream	7fe10096c150	ac7ca78e	.config	log	report
ci-qemu-upstream	2020/09/10 01:04	upstream	ab29a807a7dd	ac7ca78e	.config	log	report
ci-qemu-upstream	2020/09/09 17:59	upstream	34d4ddd359db	ac7ca78e	.config	log	report
ci-qemu-upstream	2020/09/09 05:55	upstream	34d4ddd359db	0ea7a887	.config	log	report
ci-qemu-upstream	2020/09/08 19:29	upstream	6f6a73c8b715	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/09/07 01:17	upstream	f4d51dffc6c0	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/09/06 20:18	upstream	a8205e310011	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/09/05 23:22	upstream	dd9fb9bb3340	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/09/05 23:22	upstream	dd9fb9bb3340	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/09/05 18:03	upstream	9322c47b21b9	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/09/04 21:47	upstream	c70672d8d316	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/09/04 02:50	upstream	59126901f200	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/09/03 18:41	upstream	e28f0104343d	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/09/02 20:51	upstream	fc3abb53250a	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/09/02 03:35	upstream	9c7d619be5a0	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/09/01 22:34	upstream	b765a32a2e91	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/09/01 22:34	upstream	b765a32a2e91	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/09/01 18:39	upstream	b51594df17d0	abf9ba4f	.config	log	report
ci-qemu-upstream	2020/08/31 20:42	upstream	b51594df17d0	d5a3ae1f	.config	log	report
ci-qemu-upstream	2020/08/31 19:30	upstream	59815d6d1c77	d5a3ae1f	.config	log	report
ci-qemu-upstream	2020/08/30 23:48	upstream	e43327c706f2	d5a3ae1f	.config	log	report
ci-qemu-upstream	2020/08/30 20:38	upstream	dcc5c6f013d8	d5a3ae1f	.config	log	report
ci-qemu-upstream	2020/08/29 22:17	upstream	1127b219ce94	d5a3ae1f	.config	log	report
ci-qemu-upstream	2020/08/29 21:01	upstream	e77aee1326f7	d5a3ae1f	.config	log	report
ci-qemu-upstream	2020/08/29 00:29	upstream	4d41ead6ead9	d5a3ae1f	.config	log	report
ci-qemu-upstream	2020/08/28 21:56	upstream	005c53447a63	d5a3ae1f	.config	log	report
ci-qemu-upstream	2020/08/28 20:46	upstream	96d454cd2c16	d5a3ae1f	.config	log	report
ci-qemu-upstream	2020/08/28 14:51	upstream	15bc20c6af4c	d5a3ae1f	.config	log	report
ci-qemu-upstream	2020/08/27 06:34	upstream	15bc20c6af4c	816e0689	.config	log	report
ci-qemu-upstream	2020/08/27 06:34	upstream	15bc20c6af4c	816e0689	.config	log	report
ci-qemu-upstream	2020/08/26 19:13	upstream	15bc20c6af4c	318430cb	.config	log	report
ci-qemu-upstream	2020/08/26 11:18	upstream	2ac69819ba9e	318430cb	.config	log	report
ci-qemu-upstream	2020/08/26 02:10	upstream	2ac69819ba9e	344da168	.config	log	report
ci-qemu-upstream	2020/08/25 20:01	upstream	abb3438d69fb	344da168	.config	log	report
ci-qemu-upstream	2020/08/11 11:07	upstream	00e4db51259a	5d3ebca9	.config	log	report
ci-qemu-upstream	2020/08/11 02:32	upstream	086ba2ec163b	d3694ffb	.config	log	report
ci-qemu-upstream	2020/08/11 02:32	upstream	086ba2ec163b	d3694ffb	.config	log	report
ci-qemu-upstream	2020/08/11 00:23	upstream	4bcf69e57063	d3694ffb	.config	log	report
ci-qemu-upstream	2020/08/10 23:12	upstream	fc80c51fd4b2	d3694ffb	.config	log	report
ci-qemu-upstream	2020/08/10 11:06	upstream	fc80c51fd4b2	7adc7b65	.config	log	report
ci-qemu-upstream	2020/08/09 22:55	upstream	fc80c51fd4b2	70301872	.config	log	report
ci-qemu-upstream	2020/08/09 20:31	upstream	9420f1ce0186	70301872	.config	log	report
ci-qemu-upstream	2020/08/06 10:41	upstream	47ec5303d73e	1f122f88	.config	log	report