syzbot


general protection fault in cpuacct_account_field

Status: closed as invalid on 2018/07/05 16:25
Subsystems: kernel
[Documentation on labels]
First crash: 2121d, last: 2121d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in cpuacct_account_field (3) kernel 6 1930d 1985d 0/26 auto-closed as invalid on 2019/07/12 06:27
upstream general protection fault in cpuacct_account_field (2) kernel 1 2106d 2105d 8/26 fixed on 2018/08/07 13:43

Sample crash report:
random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
IPVS: ftp: loaded support on port[0] = 21
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
CPU: 0 PID: 4819 Comm: 6_ Not tainted 4.18.0-rc3+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:task_css include/linux/cgroup.h:477 [inline]
RIP: 0010:task_ca kernel/sched/cpuacct.c:43 [inline]
RIP: 0010:cpuacct_account_field+0x13c/0x3b0 kernel/sched/cpuacct.c:365
Code: da 45 08 00 85 c0 74 0d 80 3d 71 01 3c 08 00 0f 84 79 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7d 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 49 02 00 00 4d 8b 65 10 49 81 fc 80 a4 f7 88 0f 
RSP: 0018:ffff8801dae078e8 EFLAGS: 00010806
RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 1a0ee071147837e2 RSI: 0000000000000000 RDI: d0770388a3c1bf10
RBP: ffff8801dae07978 R08: 0000000000000000 R09: 0000000000000001
R10: ffff8801dae07950 R11: 0000000000000000 R12: ffff8801abb02740
R13: d0770388a3c1bf00 R14: 1ffff1003b5c0f1e R15: 00000000000f4240
FS:  00007f3e2d5eb700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3e2d5eae78 CR3: 0000000008e6a000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 cgroup_account_cputime_field include/linux/cgroup.h:739 [inline]
 task_group_account_field kernel/sched/cputime.c:108 [inline]
 account_system_index_time+0x1dc/0x5c0 kernel/sched/cputime.c:171
 account_system_time+0x7f/0xb0 kernel/sched/cputime.c:199
 account_process_tick+0x76/0x240 kernel/sched/cputime.c:498
 update_process_times+0x21/0x70 kernel/time/timer.c:1634
 tick_sched_handle+0x9f/0x180 kernel/time/tick-sched.c:164
 tick_sched_timer+0x45/0x130 kernel/time/tick-sched.c:1274
 __run_hrtimer kernel/time/hrtimer.c:1398 [inline]
 __hrtimer_run_queues+0x3eb/0x10c0 kernel/time/hrtimer.c:1460
 hrtimer_interrupt+0x2f3/0x750 kernel/time/hrtimer.c:1518
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1025 [inline]
 smp_apic_timer_interrupt+0x165/0x730 arch/x86/kernel/apic/apic.c:1050
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:863
 </IRQ>
Modules linked in:
Dumping ftrace buffer:
   (ftrace buffer empty)
---[ end trace 4905576d3e2bfcdc ]---
RIP: 0010:task_css include/linux/cgroup.h:477 [inline]
RIP: 0010:task_ca kernel/sched/cpuacct.c:43 [inline]
RIP: 0010:cpuacct_account_field+0x13c/0x3b0 kernel/sched/cpuacct.c:365
Code: da 45 08 00 85 c0 74 0d 80 3d 71 01 3c 08 00 0f 84 79 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7d 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 49 02 00 00 4d 8b 65 10 49 81 fc 80 a4 f7 88 0f 
RSP: 0018:ffff8801dae078e8 EFLAGS: 00010806
RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 1a0ee071147837e2 RSI: 0000000000000000 RDI: d0770388a3c1bf10
RBP: ffff8801dae07978 R08: 0000000000000000 R09: 0000000000000001
R10: ffff8801dae07950 R11: 0000000000000000 R12: ffff8801abb02740
R13: d0770388a3c1bf00 R14: 1ffff1003b5c0f1e R15: 00000000000f4240
FS:  00007f3e2d5eb700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3e2d5eae78 CR3: 0000000008e6a000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/07/05 07:26 bpf-next 2bdea157b999 f525fd72 .config console log report syz C ci-upstream-bpf-next-kasan-gce
* Struck through repros no longer work on HEAD.