syzbot


WARNING: locking bug in __send_signal

Status: auto-closed as invalid on 2020/08/09 21:17
Reported-by: syzbot+652fc4510d1c060e7678@syzkaller.appspotmail.com
First crash: 1469d, last: 1469d

Sample crash report:
netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
NOHZ: local_softirq_pending 08
WARNING: CPU: 0 PID: 6770 at kernel/locking/lockdep.c:698 arch_local_save_flags arch/x86/include/asm/paravirt.h:784 [inline]
WARNING: CPU: 0 PID: 6770 at kernel/locking/lockdep.c:698 arch_local_save_flags arch/x86/include/asm/paravirt.h:782 [inline]
WARNING: CPU: 0 PID: 6770 at kernel/locking/lockdep.c:698 look_up_lock_class kernel/locking/lockdep.c:689 [inline]
WARNING: CPU: 0 PID: 6770 at kernel/locking/lockdep.c:698 register_lock_class+0xe45/0x16f0 kernel/locking/lockdep.c:748
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 6770 Comm: syz-executor.4 Not tainted 4.19.114-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x188/0x20d lib/dump_stack.c:118
 panic+0x26a/0x50e kernel/panic.c:186
 __warn.cold+0x20/0x46 kernel/panic.c:541
 report_bug+0x262/0x2a0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x1d7/0x310 arch/x86/kernel/traps.c:296
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1037
RIP: 0010:look_up_lock_class kernel/locking/lockdep.c:698 [inline]
RIP: 0010:register_lock_class+0xe45/0x16f0 kernel/locking/lockdep.c:748
Code: 48 89 da 4c 8b 74 24 68 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 10 04 00 00 4c 89 33 e9 b4 f4 ff ff 0f 0b <0f> 0b e9 b5 f3 ff ff 44 89 e0 48 8b 4c 24 28 83 c0 01 4c 8b 64 24
RSP: 0018:ffff8880481674a0 EFLAGS: 00010082
RAX: dffffc0000000000 RBX: ffff888000100ad8 RCX: 1ffff1100902ce9d
RDX: 1ffff1100002015e RSI: 0000000000000000 RDI: ffff888000100af0
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8b24f720
R13: 0000000000000000 R14: ffffffff87690d20 R15: 1ffff1100902ce9d
 __lock_acquire+0x154/0x49c0 kernel/locking/lockdep.c:3299
 lock_acquire+0x170/0x400 kernel/locking/lockdep.c:3903
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x8c/0xbf kernel/locking/spinlock.c:152
 __wake_up_common_lock+0xb0/0x170 kernel/sched/wait.c:120
 signalfd_notify include/linux/signalfd.h:22 [inline]
 __send_signal+0x1247/0x14c0 kernel/signal.c:1179
 do_send_sig_info+0x9b/0x130 kernel/signal.c:1267
 send_sig_info+0x3b/0x60 kernel/signal.c:1549
 zap_pid_ns_processes+0x25d/0x670 kernel/pid_namespace.c:219
 find_child_reaper kernel/exit.c:587 [inline]
 forget_original_parent kernel/exit.c:676 [inline]
 exit_notify kernel/exit.c:713 [inline]
 do_exit+0x279b/0x2f30 kernel/exit.c:900
 do_group_exit+0x125/0x350 kernel/exit.c:983
 get_signal+0x3ec/0x1f90 kernel/signal.c:2588
 do_signal+0x8f/0x1710 arch/x86/kernel/signal.c:821
 exit_to_usermode_loop+0x22b/0x2b0 arch/x86/entry/common.c:163
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
 do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4166ca
Code: 24 48 c7 44 24 08 00 00 00 00 e8 f1 d7 fe ff c6 05 fa 7a ad 01 01 48 8b 6c 24 20 48 83 c4 28 c3 e8 7b 0c 04 00 e9 76 ff ff ff <cc> cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 2c
RSP: 002b:00007ffcbf06c268 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
RAX: fffffffffffffe00 RBX: 0000000002ab6940 RCX: 00000000004166ca
RDX: 0000000040000000 RSI: 00007ffcbf06c2a0 RDI: ffffffffffffffff
RBP: 0000000000000957 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
R13: 00007ffcbf06c2a0 R14: 0000000002ab699b R15: 00007ffcbf06c2b0
Shutting down cpus with NMI
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/04/11 21:16 linux-4.19.y dda0e2920330 a8c6a3f8 .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.