syzbot


general protection fault in __radix_tree_lookup

Status: auto-closed as invalid on 2020/07/04 19:51
Reported-by: syzbot+3457adbba7d10bb313af@syzkaller.appspotmail.com
First crash: 1596d, last: 1510d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-414 general protection fault in __radix_tree_lookup 4 1712d 1837d 0/1 auto-closed as invalid on 2019/12/15 10:27

Sample crash report:
nla_parse: 35 callbacks suppressed
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 30598 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff88804cfd8500 task.stack: ffff88820e4c0000
RIP: 0010:__read_once_size include/linux/compiler.h:183 [inline]
RIP: 0010:radix_tree_load_root lib/radix-tree.c:602 [inline]
RIP: 0010:__radix_tree_lookup+0x4a/0x2e0 lib/radix-tree.c:1040
RSP: 0000:ffff88820e4c79d0 EFLAGS: 00010297
RAX: dffffedfffff4270 RBX: 1ffff11041c98f48 RCX: ffff88820e4c7a60
RDX: 0000000000000000 RSI: 0003fffffef86593 RDI: 000016fffffa1378
RBP: 000016fffffa1378 R08: 0000000000000000 R09: 0000000000020012
R10: ffff88804cfd8da8 R11: ffff88804cfd8500 R12: 0003fffffef86593
R13: dffffc0000000000 R14: 0003fffffef86593 R15: dffffc0000000000
FS:  0000000001500940(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000c88928 CR3: 0000000000464000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 radix_tree_lookup_slot+0x60/0xa0 lib/radix-tree.c:1079
 find_get_entry+0x8d/0x690 mm/filemap.c:1355
 pagecache_get_page+0x44/0xa10 mm/filemap.c:1465
 find_get_page include/linux/pagemap.h:276 [inline]
 lookup_swap_cache+0xcd/0x390 mm/swap_state.c:338
 swap_readahead_detect+0x150/0x650 mm/swap_state.c:675
 do_swap_page+0x5a7/0x18a0 mm/memory.c:2886
 handle_pte_fault mm/memory.c:3993 [inline]
 __handle_mm_fault+0x1659/0x3280 mm/memory.c:4113
 handle_mm_fault+0x288/0x7a0 mm/memory.c:4150
 __do_page_fault+0x4bc/0xb40 arch/x86/mm/fault.c:1420
 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1122
RIP: 76c920:0x15d06b
RSP: 15d2a9:0000000000000001 EFLAGS: 0076bf20
Code: 24 28 48 c1 e8 03 4c 01 e8 48 89 7c 24 08 48 89 34 24 48 89 54 24 18 48 89 4c 24 20 48 89 44 24 10 e8 fb 8a 1f fb 48 8b 44 24 10 <80> 38 00 0f 85 44 02 00 00 48 8b 44 24 08 48 8b 58 08 48 89 d8 
RIP: __read_once_size include/linux/compiler.h:183 [inline] RSP: ffff88820e4c79d0
RIP: radix_tree_load_root lib/radix-tree.c:602 [inline] RSP: ffff88820e4c79d0
RIP: __radix_tree_lookup+0x4a/0x2e0 lib/radix-tree.c:1040 RSP: ffff88820e4c79d0
---[ end trace 79cb11de88f646e1 ]---

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/03/06 19:50 linux-4.14.y 78d697fc93f9 7fb694ef .config console log report ci2-linux-4-14
2019/12/12 01:23 linux-4.14.y a844dc4c5442 0d368675 .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.