syzbot


INFO: trying to register non-static key in unmap_page_range

Status: auto-closed as invalid on 2020/09/29 05:44
Reported-by: syzbot+1fba4df2a01fb29079e5@syzkaller.appspotmail.com
First crash: 1418d, last: 1418d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: trying to register non-static key in unmap_page_range (2) 2 1028d 1052d 0/1 auto-closed as invalid on 2021/10/24 01:38
upstream INFO: trying to register non-static key in unmap_page_range mm 1 1325d 1321d 0/26 auto-closed as invalid on 2020/12/30 10:17

Sample crash report:
autofs4:pid:17416:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e)
netlink: 'syz-executor.2': attribute type 6 has an invalid length.
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
INFO: trying to register non-static key.
the code is fine but needs lockdep annotation.
turning off the locking correctness validator.
CPU: 1 PID: 17407 Comm: systemd-udevd Not tainted 4.19.125-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
 assign_lock_key kernel/locking/lockdep.c:727 [inline]
 register_lock_class+0xfbb/0x11b0 kernel/locking/lockdep.c:753
 __lock_acquire+0x191/0x4380 kernel/locking/lockdep.c:3303
 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3907
 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
 _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:144
 spin_lock include/linux/spinlock.h:329 [inline]
 zap_pte_range mm/memory.c:1299 [inline]
 zap_pmd_range mm/memory.c:1440 [inline]
 zap_pud_range mm/memory.c:1469 [inline]
 zap_p4d_range mm/memory.c:1490 [inline]
 unmap_page_range+0xa1b/0x2db0 mm/memory.c:1511
 unmap_single_vma+0x196/0x300 mm/memory.c:1556
 unmap_vmas+0xa9/0x180 mm/memory.c:1586
 exit_mmap+0x2b9/0x510 mm/mmap.c:3091
 __mmput kernel/fork.c:1015 [inline]
 mmput+0x14e/0x420 kernel/fork.c:1036
 exit_mm kernel/exit.c:546 [inline]
 do_exit+0xac4/0x2f00 kernel/exit.c:867
 do_group_exit+0x125/0x310 kernel/exit.c:983
 __do_sys_exit_group kernel/exit.c:994 [inline]
 __se_sys_exit_group kernel/exit.c:992 [inline]
 __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:992
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f20feae3618
Code: 00 00 be 3c 00 00 00 eb 19 66 0f 1f 84 00 00 00 00 00 48 89 d7 89 f0 0f 05 48 3d 00 f0 ff ff 77 21 f4 48 89 d7 44 89 c0 0f 05 <48> 3d 00 f0 ff ff 76 e0 f7 d8 64 41 89 01 eb d8 0f 1f 84 00 00 00
RSP: 002b:00007fffee94d248 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fffee94d310 RCX: 00007f20feae3618
RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000
RBP: 00007fffee94d3c0 R08: 00000000000000e7 R09: fffffffffffffe50
R10: 00000000ffffffff R11: 0000000000000202 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000003 R15: 000000000000000e
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
EXT4-fs (loop5): failed to open journal device unknown-block(0,0): -6
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
encrypted_key: insufficient parameters specified
EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
autofs4:pid:17531:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e)
encrypted_key: insufficient parameters specified
autofs4:pid:17535:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e)
EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
EXT4-fs (loop5): failed to open journal device unknown-block(0,0): -6
autofs4:pid:17573:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e)
EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
validate_nla: 5 callbacks suppressed
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
EXT4-fs (loop5): failed to open journal device unknown-block(0,0): -6
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
EXT4-fs (loop5): failed to open journal device unknown-block(0,0): -6
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
EXT4-fs (loop5): failed to open journal device unknown-block(0,0): -6
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
autofs4:pid:17792:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e)
netlink: 'syz-executor.2': attribute type 6 has an invalid length.
EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
autofs4:pid:17837:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e)
EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
EXT4-fs (loop5): failed to open journal device unknown-block(0,0): -6
autofs4:pid:17870:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e)
EXT4-fs (loop5): Can't read superblock on 2nd try
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
autofs4:pid:17980:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e)
EXT4-fs (loop5): Can't read superblock on 2nd try
autofs4:pid:18035:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e)
validate_nla: 10 callbacks suppressed
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
EXT4-fs (loop5): Can't read superblock on 2nd try
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
netlink: 'syz-executor.2': attribute type 6 has an invalid length.
netlink: 'syz-executor.2': attribute type 6 has an invalid length.
netlink: 'syz-executor.2': attribute type 6 has an invalid length.
autofs4:pid:18066:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e)
netlink: 'syz-executor.2': attribute type 6 has an invalid length.
netlink: 'syz-executor.2': attribute type 6 has an invalid length.
netlink: 'syz-executor.2': attribute type 6 has an invalid length.
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
autofs4:pid:18123:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e)
EXT4-fs (loop5): Can't read superblock on 2nd try
netlink: 'syz-executor.1': attribute type 6 has an invalid length.
autofs4:pid:18151:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e)

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/01 05:43 linux-4.19.y 2d16cf4817bc a0331e89 .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.