syzbot


BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:LINE (2)

Status: closed as invalid on 2019/06/22 23:06
Subsystems: kvm
[Documentation on labels]
Reported-by: syzbot+4af447792df4648be93b@syzkaller.appspotmail.com
First crash: 2199d, last: 2007d
Discussions (1)
Title Replies (including bot) Last reply
BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:LINE (2) 0 (2) 2018/04/11 23:48
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:LINE crypto 11 2312d 2330d 0/26 closed as dup on 2017/11/30 20:41

Sample crash report:
BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:1342
in_atomic(): 0, irqs_disabled(): 1, pid: 4492, name: syzkaller559833
1 lock held by syzkaller559833/4492:
 #0: 00000000d3c337f7 (&mm->mmap_sem){++++}, at: __do_page_fault+0x381/0xe40 arch/x86/mm/fault.c:1328
irq event stamp: 3862
hardirqs last  enabled at (3861): [<ffffffff81b2720f>] slab_alloc mm/slab.c:3385 [inline]
hardirqs last  enabled at (3861): [<ffffffff81b2720f>] kmem_cache_alloc+0x26f/0x760 mm/slab.c:3552
hardirqs last disabled at (3862): [<ffffffff87601402>] error_entry+0x72/0xd0 arch/x86/entry/entry_64.S:1261
softirqs last  enabled at (3800): [<ffffffff87800778>] __do_softirq+0x778/0xaf5 kernel/softirq.c:311
softirqs last disabled at (3779): [<ffffffff81470db1>] invoke_softirq kernel/softirq.c:365 [inline]
softirqs last disabled at (3779): [<ffffffff81470db1>] irq_exit+0x1d1/0x200 kernel/softirq.c:405
CPU: 0 PID: 4492 Comm: syzkaller559833 Not tainted 4.16.0+ #19
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 ___might_sleep.cold.88+0x11f/0x13a kernel/sched/core.c:6188
 __might_sleep+0x95/0x190 kernel/sched/core.c:6141
 __do_page_fault+0x3ae/0xe40 arch/x86/mm/fault.c:1342
 do_page_fault+0xee/0x8a7 arch/x86/mm/fault.c:1474
 page_fault+0x25/0x50 arch/x86/entry/entry_64.S:1159
RIP: 0010:vmx_vcpu_run+0x95f/0x25f0 arch/x86/kvm/vmx.c:9746
RSP: 0018:ffff8801d95b7368 EFLAGS: 00010002
RAX: 000000000000118c RBX: ffff8801d90076c0 RCX: 0000000000000282
RDX: 0000000000000000 RSI: 00000000000000fc RDI: 00000000014000c0
RBP: ffff8801d95b7c18 R08: 0000000000036f48 R09: ffffed003b200ed8
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d90076c0
R13: ffff8801dad80000 R14: 0000000000000000 R15: ffff8801d90076bf
 kasan_slab_alloc+0x12/0x20 mm/kasan/kasan.c:490
 slab_post_alloc_hook mm/slab.h:444 [inline]
 slab_alloc mm/slab.c:3392 [inline]
 kmem_cache_alloc+0x11b/0x760 mm/slab.c:3552
 getname_flags+0xd0/0x5a0 fs/namei.c:140
 getname+0x19/0x20 fs/namei.c:211
 do_sys_open+0x38e/0x770 fs/open.c:1087
 SYSC_openat fs/open.c:1120 [inline]
 SyS_openat+0x30/0x40 fs/open.c:1114
 do_syscall_64+0x29e/0x9d0 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x4487c9
RSP: 002b:00007f4fe57efda8 EFLAGS: 00000297 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00000000006dec44 RCX: 00000000004487c9
RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000297 R12: 00000000006dec40
R13: 0030656c69662f2e R14: 6d766b2f7665642f R15: 000000000000000c
BUG: unable to handle kernel paging request at 000000000000590a
PGD 1d9ba4067 P4D 1d9ba4067 PUD 1d9b9a067 PMD 0 
Oops: 0002 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 4492 Comm: syzkaller559833 Tainted: G        W        4.16.0+ #19
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:vmx_vcpu_run+0x95f/0x25f0 arch/x86/kvm/vmx.c:9746
RSP: 0018:ffff8801d95b7368 EFLAGS: 00010002
RAX: 000000000000118c RBX: ffff8801d90076c0 RCX: 0000000000000282
RDX: 0000000000000000 RSI: 00000000000000fc RDI: 00000000014000c0
RBP: ffff8801d95b7c18 R08: 0000000000036f48 R09: ffffed003b200ed8
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d90076c0
R13: ffff8801dad80000 R14: 0000000000000000 R15: ffff8801d90076bf
FS:  00007f4fe57f0700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000000590a CR3: 00000001ad282000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 kasan_slab_alloc+0x12/0x20 mm/kasan/kasan.c:490
 slab_post_alloc_hook mm/slab.h:444 [inline]
 slab_alloc mm/slab.c:3392 [inline]
 kmem_cache_alloc+0x11b/0x760 mm/slab.c:3552
 getname_flags+0xd0/0x5a0 fs/namei.c:140
 getname+0x19/0x20 fs/namei.c:211
 do_sys_open+0x38e/0x770 fs/open.c:1087
 SYSC_openat fs/open.c:1120 [inline]
 SyS_openat+0x30/0x40 fs/open.c:1114
 do_syscall_64+0x29e/0x9d0 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x4487c9
RSP: 002b:00007f4fe57efda8 EFLAGS: 00000297 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00000000006dec44 RCX: 00000000004487c9
RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000297 R12: 00000000006dec40
R13: 0030656c69662f2e R14: 6d766b2f7665642f R15: 000000000000000c
Code: 8b a9 68 03 00 00 4c 8b b1 70 03 00 00 4c 8b b9 78 03 00 00 48 8b 89 08 03 00 00 75 05 0f 01 c2 eb 03 0f 01 c3 48 89 4c 24 08 59 <0f> 96 81 88 56 00 00 48 89 81 00 03 00 00 48 89 99 18 03 00 00 
RIP: vmx_vcpu_run+0x95f/0x25f0 arch/x86/kvm/vmx.c:9746 RSP: ffff8801d95b7368
CR2: 000000000000590a
---[ end trace 752da7ce25dee858 ]---

Crashes (43):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/04/11 23:47 upstream b284d4d5a678 9cd56d71 .config console log report syz C ci-upstream-kasan-gce
2018/07/13 05:22 linux-next 3ee15ba60e6b 06c33b3a .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/13 02:05 linux-next 3ee15ba60e6b 06c33b3a .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/12 22:08 linux-next 3ee15ba60e6b 06c33b3a .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/12 19:10 linux-next 3ee15ba60e6b 06c33b3a .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/11 18:53 linux-next 98be45067040 2e0e3130 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/11 16:00 linux-next 98be45067040 2e0e3130 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/11 03:12 linux-next 3951bd9fe3e2 2e0e3130 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/10 11:25 linux-next 3951bd9fe3e2 9fa03fa5 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/10 10:22 linux-next 3951bd9fe3e2 9fa03fa5 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/10 01:15 linux-next d00d6d9a339d f25e5770 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/09 09:13 linux-next d00d6d9a339d f25e5770 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/09 08:54 linux-next d00d6d9a339d f25e5770 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/09 03:08 linux-next 526674536360 f25e5770 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/04/16 04:48 upstream 71b8ebbf3d7b 7a67784c .config console log report syz ci-upstream-kasan-gce-root
2018/04/11 04:13 upstream c18bb396d3d2 8b8de427 .config console log report syz ci-upstream-kasan-gce-root
2018/10/20 16:30 upstream 270b77a0f30e ecb386fe .config console log report ci-upstream-kasan-gce-root
2018/07/30 02:30 upstream 3cfb6772d4cf 1a381291 .config console log report ci-upstream-kasan-gce
2018/07/22 14:37 upstream 45ae4df92207 8cc079c3 .config console log report ci-upstream-kasan-gce
2018/07/17 09:08 upstream 30b06abfb92b 13761366 .config console log report ci-upstream-kasan-gce
2018/07/16 01:13 upstream 9d3cce1e8b85 92a49505 .config console log report ci-upstream-kasan-gce
2018/07/15 09:14 upstream c31496dbacc2 92a49505 .config console log report ci-upstream-kasan-gce
2018/07/11 21:18 upstream 1e09177acae3 2e0e3130 .config console log report ci-upstream-kasan-gce
2018/07/10 16:05 upstream 092150a25cb7 9fa03fa5 .config console log report ci-upstream-kasan-gce
2018/07/06 20:56 upstream b4d0562137c9 9636bc93 .config console log report ci-upstream-kasan-gce
2018/07/06 19:17 upstream b4d0562137c9 9636bc93 .config console log report ci-upstream-kasan-gce-root
2018/06/20 22:39 upstream 81e97f01371f 095ef806 .config console log report ci-upstream-kasan-gce
2018/06/18 11:01 upstream 9ffc59d57228 27c5f59f .config console log report ci-upstream-kasan-gce-root
2018/05/31 14:40 upstream 88a867653065 2f93b54f .config console log report ci-upstream-kasan-gce
2018/05/13 23:25 upstream 66e1c94db3cd 481f030c .config console log report ci-upstream-kasan-gce
2018/05/13 21:39 upstream ccda3c4b7777 c05b619d .config console log report ci-upstream-kasan-gce
2018/05/13 05:12 upstream 427fbe89261d e726f42b .config console log report ci-upstream-kasan-gce
2018/05/07 10:23 upstream 701e39d05119 a211da1a .config console log report ci-upstream-kasan-gce
2018/05/07 01:21 upstream 701e39d05119 a211da1a .config console log report ci-upstream-kasan-gce
2018/05/06 14:26 upstream ee946c36be21 6c18ddb0 .config console log report ci-upstream-kasan-gce
2018/05/02 13:10 upstream f2125992e7cb d5b114b4 .config console log report ci-upstream-kasan-gce
2018/05/01 21:30 upstream fff75eb2a08c d5b114b4 .config console log report ci-upstream-kasan-gce
2018/04/27 06:35 upstream 0644f186fc9d 73417389 .config console log report ci-upstream-kasan-gce
2018/04/19 08:15 upstream 87ef12027b9b d1b2ef69 .config console log report ci-upstream-kasan-gce
2018/04/18 16:06 upstream a27fc14219f2 52643b44 .config console log report ci-upstream-kasan-gce
2018/04/16 19:19 upstream 60cc43fc8884 802ac912 .config console log report ci-upstream-kasan-gce
2018/04/16 02:11 upstream 71b8ebbf3d7b 7a67784c .config console log report ci-upstream-kasan-gce
2018/07/14 03:51 linux-next 483d835c8189 92a49505 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.