syzbot


general protection fault in queued_spin_lock_slowpath

Status: closed as invalid on 2018/06/27 15:08
Subsystems: mm
[Documentation on labels]
First crash: 2667d, last: 2667d

Sample crash report:
R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000014
R13: 000000000000055e R14: 00000000006fc170 R15: 0000000000000007
bridge0: port 1(bridge_slave_0) entered disabled state
kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher
kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher
general protection fault: 0000 [#1] SMP PTI
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 4524 Comm: syz-executor1 Not tainted 4.16.0+ #87
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__write_once_size include/linux/compiler.h:224 [inline]
RIP: 0010:queued_spin_lock_slowpath+0x48d/0xab0 kernel/locking/qspinlock.c:427
RSP: 0000:ffff88015407f570 EFLAGS: 00010246
RAX: ffffffff8b312000 RBX: 696c6e755f775cee RCX: ffff880000000000
RDX: ffffffff8b313000 RSI: 0000000000000008 RDI: 696c6e755f775cee
RBP: ffff88015407f5f0 R08: 0000000000000000 R09: 0000000000000002
R10: 0000000000000000 R11: 000000018200012f R12: 0000000000000000
R13: ffff88021fc3f680 R14: ffff88021fc3f688 R15: 0000000000000000
FS:  00000000010aa940(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2731de2518 CR3: 0000000154068000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 queued_spin_lock include/asm-generic/qspinlock.h:90 [inline]
 do_raw_spin_lock include/linux/spinlock.h:161 [inline]
 __raw_spin_lock include/linux/spinlock_api_smp.h:143 [inline]
 _raw_spin_lock+0x79/0x80 kernel/locking/spinlock.c:144
 spin_lock include/linux/spinlock.h:310 [inline]
 shmem_free_inode mm/shmem.c:260 [inline]
 shmem_evict_inode+0xa58/0xde0 mm/shmem.c:1094
 evict+0x4b3/0xda0 fs/inode.c:553
 iput_final fs/inode.c:1515 [inline]
 iput+0xb85/0xf10 fs/inode.c:1542
 dentry_unlink_inode+0x84b/0x8a0 fs/dcache.c:371
 __dentry_kill+0x86e/0xd20 fs/dcache.c:575
 dentry_kill fs/dcache.c:616 [inline]
 dput+0xbde/0xce0 fs/dcache.c:831
 do_one_tree+0x31a/0x340 fs/dcache.c:1495
 shrink_dcache_for_umount+0xd5/0x290 fs/dcache.c:1509
 generic_shutdown_super+0xab/0x660 fs/super.c:424
 kill_anon_super fs/super.c:991 [inline]
 kill_litter_super+0xd9/0x1b0 fs/super.c:1001
 deactivate_locked_super+0x11c/0x220 fs/super.c:312
 deactivate_super+0x1a9/0x1b0 fs/super.c:343
 cleanup_mnt+0x302/0x4d0 fs/namespace.c:1173
 __cleanup_mnt+0x3b/0x50 fs/namespace.c:1180
 task_work_run+0x243/0x2c0 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 exit_to_usermode_loop arch/x86/entry/common.c:166 [inline]
 prepare_exit_to_usermode+0x33c/0x3a0 arch/x86/entry/common.c:196
 syscall_return_slowpath+0xe9/0x700 arch/x86/entry/common.c:265
 do_syscall_64+0x36d/0x430 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x458387
RSP: 002b:0000000000a3c918 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000036 RCX: 0000000000458387
RDX: 00000000010ab9b3 RSI: 0000000000000002 RDI: 0000000000a3da80
RBP: 0000000000a3da80 R08: 0000000000000000 R09: 000000000000000a
R10: 0000000000000005 R11: 0000000000000246 R12: 00000000010ab940
R13: 0000000000000000 R14: 00000000000001a7 R15: 000000000001aca0
Code: 8b 20 48 89 df e8 84 8a 7e 00 49 89 c5 4d 85 e4 0f 85 2e 02 00 00 4c 8b 7d a0 4d 89 7d 00 45 85 ff 0f 85 30 02 00 00 4c 8b 6d 90 <4c> 89 2b 45 85 ff 4c 8b 65 a8 0f 85 3c 02 00 00 41 8b 1e 4c 89 
RIP: __write_once_size include/linux/compiler.h:224 [inline] RSP: ffff88015407f570
RIP: queued_spin_lock_slowpath+0x48d/0xab0 kernel/locking/qspinlock.c:427 RSP: ffff88015407f570
---[ end trace 70b7a9358b8728e5 ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/05/05 13:53 https://github.com/google/kmsan.git master d2d741e5d189 6a0382b5 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.