kernel panic: nbuf 16, STAT_FIX_LEN_9P 49 assertion failed: !pte_is_mapped(pte)BIT16SZ 2, GBIT16(buf) 0

[syzbot]

Hello,

syzbot found the following crash on:

HEAD commit: bf9a9ba0d6af Add panic_hwtf() for kernel faults
git tree: https://github.com/akaros/akaros.git/master
console output: https://syzkaller.appspot.com/x/log.txt?x=12944d62400000
kernel config: https://syzkaller.appspot.com/x/.config?x=efef8cf2939304d3
dashboard link: https://syzkaller.appspot.com/bug?extid=6df98ab9cc012aea5c07
compiler:

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+6df98a...@syzkaller.appspotmail.com

kernel panic at kern/src/mm.c:737, from core 2: nbuf 16, STAT_FIX_LEN_9P 49
assertion failed: !pte_is_mapped(pte)BIT16SZ 2, GBIT16(buf) 0
This is bad!
Stack Backtrace on Core 2:
20:29:38 executing program 6:
r0 = openat$proc_self_mem(0xffffffffffffff9c,
&(0x7f0000000040)='/proc/self/mem\x00', 0xffffffffffffffa0, 0x1, 0x0)
openat$net_tcp_2_status(0xffffffffffffff9c,
&(0x7f0000000080)='/net/tcp/2/status\x00', 0xfffffe6d, 0x1, 0x0)
fcntl$F_SETFL(r0, 0x4, 0x88000)
openat$proc_self_strace(0xffffffffffffff9c,
&(0x7f0000000000)='/proc/self/strace\x00', 0x12, 0x1, 0x0)
openat$dev_bintime(0xffffffffffffff9c,
&(0x7f0000000100)='/dev/bintime\x00', 0xd, 0x3, 0x0)
openat$proc_self_fd(0xffffffffffffff9c,
&(0x7f00000000c0)='/proc/self/fd\x00', 0xe, 0x1, 0x0)
20:29:38 executing program 5:
r0 = openat$proc_self_profile(0xffffffffffffff9c,
&(0x7f0000000000)='/proc/self/profile\x00', 0x13, 0x1, 0x0)
openat$net_ether0_1_ifstats(0xffffffffffffff9c,
&(0x7f0000000040)='/net/ether0/1/ifstats\x00', 0x16, 0x1, 0x0)
r1 = openat$net_tcp_0_ctl(0xffffffffffffff9c,
&(0x7f0000000080)='/net/tcp/0/ctl\x00', 0xf, 0x3, 0x0)
openat$net_ipifc_0_local(0xffffffffffffff9c,
&(0x7f00000000c0)='/net/ipifc/0/local\x00', 0x13, 0x1, 0x0)
vmm_ctl$VMM_CTL_SET_EXITS(0x2, 0x1)
openat$dev_sysname(0xffffffffffffff9c,
&(0x7f0000000100)='/dev/sysname\x00', 0xd, 0x3, 0x0)
read(r0, &(0x7f0000000140)=""/54, 0x36)
openat$net_ipifc_0_snoop(0xffffffffffffff9c,
&(0x7f0000000180)='/net/ipifc/0/snoop\x00', 0x13, 0x1, 0x0)
openat$proc_self_fpregs(0xffffffffffffff9c,
&(0x7f00000001c0)='/proc/self/fpregs\x00', 0x12, 0x1, 0x0)
openat$net_ipifc_1_ctl(0xffffffffffffff9c,
&(0x7f0000000200)='/net/ipifc/1/ctl\x00', 0x11, 0x3, 0x0)
r2 = openat$net_tcp_0_ctl(0xffffffffffffff9c,
&(0x7f0000000240)='/net/tcp/0/ctl\x00', 0xf, 0x3, 0x0)
openat$net_tcp_2_ctl(0xffffffffffffff9c,
&(0x7f0000000280)='/net/tcp/2/ctl\x00', 0xf, 0x3, 0x0)
openat$dev_kmesg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kmesg\x00',
0xb, 0x1, 0x0)
stat(&(0x7f0000000300)='./file0\x00', 0x8, &(0x7f0000000340))
openat$net_ipifc_1_local(0xffffffffffffff9c,
&(0x7f00000003c0)='/net/ipifc/1/local\x00', 0x13, 0x1, 0x0)
fwstat(r2, &(0x7f0000000400)=""/237, 0xed, 0x0)
openat$net_ether0_0_ctl(0xffffffffffffff9c,
&(0x7f0000000500)='/net/ether0/0/ctl\x00', 0x12, 0x3, 0x0)
openat$net_udp_0_ctl(0xffffffffffffff9c,
&(0x7f0000000540)='/net/udp/0/ctl\x00', 0xf, 0x3, 0x0)
openat$proc_self_status(0xffffffffffffff9c,
&(0x7f0000000580)='/proc/self/status\x00', 0x12, 0x1, 0x0)
openat$dev_random(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/random\x00',
0xc, 0x1, 0x0)
openat$proc_self_ctl(0xffffffffffffff9c,
&(0x7f0000000600)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)
openat$dev_sdctl(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sdctl\x00',
0xb, 0x3, 0x0)
openat$net_icmpv6_stats(0xffffffffffffff9c,
&(0x7f0000000680)='/net/icmpv6/stats\x00', 0x12, 0x1, 0x0)
openat$dev_klog(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/klog\x00', 0xa,
0x1, 0x0)
openat$net_ipifc_0_remote(0xffffffffffffff9c,
&(0x7f0000000700)='/net/ipifc/0/remote\x00', 0x14, 0x1, 0x0)
fcntl$F_SETFL(r2, 0x4, 0x80000)
openat$proc_self_strace(0xffffffffffffff9c,
&(0x7f0000000740)='/proc/self/strace\x00', 0x12, 0x1, 0x0)
close(r1)
openat$net_ether0_clone(0xffffffffffffff9c,
&(0x7f0000000780)='/net/ether0/clone\x00', 0x12, 0x3, 0x0)
openat$net_tcp_clone(0xffffffffffffff9c,
&(0x7f00000007c0)='/net/tcp/clone\x00', 0xf, 0x3, 0x0)
#01 [<0xffffffffc200a3e7>] in backtrace at src/kdebug.c:219
nbuf 121, STAT_FIX_LEN_9P 49 #02 [<0xffffffffc2009bb2>] in _panic
BIT16SZ 2, GBIT16(buf) 0 #03 [<0xffffffffc200dbd3>] in map_page_at_addr
This is bad!
#04 [<0xffffffffc200dc22>] in populate_anon_va at src/mm.c:770
20:29:38 executing program 2:
r0 = openat$net_ipifc_1_local(0xffffffffffffff9c,
&(0x7f00000002c0)='/net/ipifc/1/local\x00', 0x13, 0x1, 0x0)
read(r0, &(0x7f0000000040)=""/17, 0x11)
openat$net_ether0_2_ctl(0xffffffffffffff9c,
&(0x7f0000000000)='/net/ether0/2/ctl\x00', 0x12, 0x3, 0x0)
#05 [<0xffffffffc200fc92>] in populate_va at src/mm.c:1333
20:29:38 executing program 0:
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0)
openat$net_icmpv6_stats(0xffffffffffffff9c,
&(0x7f0000000080)='/net/icmpv6/stats\x00', 0xfffffffffffffe87, 0x1, 0x0)
#06 [<0xffffffffc2056380>] in sys_populate_va at src/syscall.c:1773
#07 [<0xffffffffc20593c9>] in syscall at src/syscall.c:2528
nbuf 121, STAT_FIX_LEN_9P 49 #08 [<0xffffffffc2059584>] in run_local_syscall
BIT16SZ 2, GBIT16(buf) 0 #09 [<0xffffffffc2059ab9>] in prep_syscalls
This is bad!
#10 [<0xffffffffc20ab29a>] in sysenter_callwrapper at arch/x86/trap.c:851
nbuf 121, STAT_FIX_LEN_9P 49
BIT16SZ 2, GBIT16(buf) 0 This is bad!
20:29:39 executing program 4:
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffd)
rmdir(&(0x7f0000000040)='./file0\x00', 0x8)
unlink(&(0x7f0000000000)='./file0\x00', 0x8)
nbuf 121, STAT_FIX_LEN_9P 49 BIT16SZ 2, GBIT16(buf) 0 This is bad!
20:29:39 executing program 1:
unlink(&(0x7f00000000c0)='./file0\x00', 0x8)
notify(0x0, 0xb, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)})
r0 = proc_create(&(0x7f0000000000)='./file0\x00', 0x8,
&(0x7f0000000040)='\x00', 0x1, 0x1)
notify(r0, 0x32, &(0x7f0000000080)={0x0, 0x40, 0x40,
&(0x7f0000000180)="4488e8d7712b7a1e22247a5bd66a89207fd87b7af797386c5579dbd1f7e59822ff206262dd7d13c6315340af863a59382164727d6600c3684c415920d3277f94583049100dcb68647c0e40c131bb5adbcc90b1d3269ccb1ce9b6fb94d0c074d481746cc9356746e2d31373f2e113d11544822eb60a37b8eee67214ea31c762b001268ffc627de035a642b78f18bc301cc98e7cf18c7e3a3c86c3dcedb6305525b0ac4d07a168692615d9e93517a447c7c76d9c683e707b09d36e899660c94e07b6780692ad5fd82d036e63e4b9d93f283e",
0x20})
unlink(&(0x7f0000001280)='./file0\x00', 0x8)
notify(r0, 0xa, &(0x7f0000000100)={0x5, 0x800, 0x9,
&(0x7f0000000280)="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",
0x2})
20:29:43 executing program 3:
r0 = openat$proc_self_user(0xffffffffffffff9c,
&(0x7f0000000040)='/proc/self/user\x00', 0x46, 0x1, 0x0)
openat$proc_self_fpregs(0xffffffffffffff9c,
&(0x7f0000000000)='/proc/self/fpregs\x00', 0x12, 0x1, 0x0)
abort_sysc_fd(r0)
openat$net_tcp_0_status(0xffffffffffffff9c,
&(0x7f0000000080)='/net/tcp/0/status\x00', 0x12, 0x1, 0x0)
20:29:43 executing program 7:
openat$net_udp_0_ctl(0xffffffffffffff9c,
&(0x7f0000000000)='/net/udp/0/ctl\x00', 0xf, 0x3, 0x0)
20:29:44 executing program 5:
r0 = openat$dev_pid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pid\x00',
0x9, 0x1, 0x0)
fd2path(r0, &(0x7f0000000040)=""/157, 0x9d)
openat$proc_self_wait(0xffffffffffffff9c,
&(0x7f0000000100)='/proc/self/wait\x00', 0x10, 0x1, 0x0)
fcntl$F_SETFD(r0, 0x2, 0x1)
fwstat(r0, &(0x7f0000000140)=""/255, 0xff, 0x0)
20:29:44 executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', 0x2, 0x12, 0x0)
r0 = openat$net_udp_0_remote(0xffffffffffffff9c,
&(0x7f0000000100)='/net/udp/0/remote\x00', 0x3, 0x1, 0x0)
r1 = proc_create(&(0x7f0000000040)='./file0\x00', 0xfffffffffffffddd,
&(0x7f0000000080)='/net/udp/0/remote\x00', 0xfffffffffffffc36, 0x1)
fchdir(r1, r0)
openat$net_tcp_1_status(0xffffffffffffff9c,
&(0x7f00000000c0)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0)
20:29:44 executing program 0:
r0 = openat$proc_self_fd(0xffffffffffffff9c,
&(0x7f00000000c0)='/proc/self/fd\x00', 0xfffffffffffffe53, 0x1, 0x0)
fstat(r0, &(0x7f0000000040))
20:29:45 executing program 4:
r0 = openat$proc_self_wait(0xffffffffffffff9c,
&(0x7f0000000000)='/proc/self/wait\x00', 0x10, 0x1, 0x0)
r1 = openat$net_ether0_ifstats(0xffffffffffffff9c,
&(0x7f0000000100)='/net/ether0/ifstats\x00', 0x14, 0x1, 0x0)
fcntl$F_GETFD(r1, 0x1)
openat$prof_kpctl(0xffffffffffffff9c, &(0x7f0000000080)='/prof/kpctl\x00',
0xc, 0x3, 0x0)
fstat(r0, &(0x7f0000000140))
openat$dev_cputime(0xffffffffffffff9c,
&(0x7f0000000040)='/dev/cputime\x00', 0xd, 0x1, 0x0)
fcntl$F_GETFD(r1, 0x1)
20:29:45 executing program 1:
r0 = openat$net_ipifc_1_ctl(0xffffffffffffff9c,
&(0x7f0000000000)='/net/ipifc/1/ctl\x00', 0x11, 0x3, 0x0)
openat$net_cs(0xffffffffffffff9c, &(0x7f0000000200)='/net/cs\x00', 0x8,
0x3, 0x0)
abort_sysc_fd(r0)


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#bug-status-tracking for how to communicate with
syzbot.

[Barret Rhoden]

On 2018-07-18 at 17:00 syzbot

4d> f72f862bb4eee0615821",

#syz invalid