syzbot


general protection fault in step_into

Status: premoderation: reported C repro on 2025/06/30 23:58
Bug presence: origin:downstream
[Documentation on labels]
Reported-by: syzbot+7b9e9955549f7b08b57a@syzkaller.appspotmail.com
First crash: 237d, last: 6h54m
Bug presence (3)
Date Name Commit Repro Result
2025/07/25 android16-6.12 (ToT) 437e1d666d1d C [report] general protection fault in step_into
2025/07/25 lts (merge base) e0e2f7824338 C Didn't crash
2025/07/25 upstream (ToT) 2942242dde89 C Didn't crash
Similar bugs (8)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 general protection fault in step_into origin:lts-only 11 C done 310 6d23h 680d 0/3 upstream: reported C repro on 2024/04/13 08:21
upstream general protection fault in step_into fs 2 1 2002d 1998d 0/29 auto-closed as invalid on 2020/11/28 01:59
android-5-10 general protection fault in step_into 2 C done 295 1d08h 1015d 0/2 upstream: reported C repro on 2023/05/14 14:12
linux-6.1 KASAN: null-ptr-deref Read in step_into origin:lts-only 11 C inconclusive 108 1d09h 687d 0/3 upstream: reported C repro on 2024/04/06 11:08
android-5-15 general protection fault in step_into origin:downstream 2 C done 123 2d10h 1015d 0/2 upstream: reported C repro on 2023/05/14 14:01
android-6-1 general protection fault in step_into origin:downstream 2 C done 93 2d20h 1015d 0/2 upstream: reported C repro on 2023/05/14 14:12
linux-6.6 general protection fault in step_into origin:lts-only 2 C inconclusive 21 61d 161d 0/2 upstream: reported C repro on 2025/09/14 20:10
upstream BUG: unable to handle kernel paging request in step_into ntfs3 11 C error done 5 778d 1145d 0/29 auto-obsoleted due to no activity on 2024/05/25 15:27
Last patch testing requests (4)
Created Duration User Patch Repo Result
2026/01/28 07:22 7m retest repro android16-6.12 report log
2026/01/02 06:33 3m retest repro android16-6.12 error
2025/11/19 04:59 5m retest repro android16-6.12 error
2025/10/24 02:25 4m retest repro android16-6.12 error

Sample crash report:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 0 UID: 0 PID: 385 Comm: syz.2.17 Not tainted syzkaller #0 73dd41fee924560e78783f72ff837ca22365b77d
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:traverse_mounts fs/namei.c:1467 [inline]
RIP: 0010:handle_mounts fs/namei.c:1579 [inline]
RIP: 0010:step_into+0x129/0xf60 fs/namei.c:1899
Code: 74 24 08 c6 44 24 7f 00 43 0f b6 04 3c 84 c0 4d 89 fd 0f 85 18 0c 00 00 45 8b 36 4c 8b bc 24 a8 00 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 17 0c 00 00 45 8b 3f 44 89 fe 81 e6 00
RSP: 0018:ffffc9000110f8a0 EFLAGS: 00010247
RAX: 0000000000000000 RBX: ffffc9000110fae0 RCX: ffff88812dc62600
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000110f9b8 R08: ffff888113e33b1f R09: 1ffff110227c6763
R10: dffffc0000000000 R11: ffffed10227c6764 R12: 1ffff92000221f63
R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000006
FS:  00007f79129756c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7912974ff8 CR3: 0000000116554000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 walk_component+0x255/0x440 fs/namei.c:2067
 lookup_last fs/namei.c:2564 [inline]
 path_lookupat+0x180/0x4a0 fs/namei.c:2588
 filename_lookup+0x228/0x580 fs/namei.c:2617
 user_path_at+0x42/0x60 fs/namei.c:3024
 path_setxattr+0x308/0x5d0 fs/xattr.c:653
 __do_sys_setxattr fs/xattr.c:676 [inline]
 __se_sys_setxattr fs/xattr.c:672 [inline]
 __x64_sys_setxattr+0xc9/0xe0 fs/xattr.c:672
 x64_sys_call+0x2d94/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:189
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f7911b9c629
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7912975028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
RAX: ffffffffffffffda RBX: 00007f7911e16090 RCX: 00007f7911b9c629
RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000200
RBP: 00007f7911c32b39 R08: 0000000000000002 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f7911e16128 R14: 00007f7911e16090 R15: 00007ffdbec89698
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:traverse_mounts fs/namei.c:1467 [inline]
RIP: 0010:handle_mounts fs/namei.c:1579 [inline]
RIP: 0010:step_into+0x129/0xf60 fs/namei.c:1899
Code: 74 24 08 c6 44 24 7f 00 43 0f b6 04 3c 84 c0 4d 89 fd 0f 85 18 0c 00 00 45 8b 36 4c 8b bc 24 a8 00 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 17 0c 00 00 45 8b 3f 44 89 fe 81 e6 00
RSP: 0018:ffffc9000110f8a0 EFLAGS: 00010247
RAX: 0000000000000000 RBX: ffffc9000110fae0 RCX: ffff88812dc62600
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000110f9b8 R08: ffff888113e33b1f R09: 1ffff110227c6763
R10: dffffc0000000000 R11: ffffed10227c6764 R12: 1ffff92000221f63
R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000006
FS:  00007f79129756c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7911be9d40 CR3: 0000000116554000 CR4: 00000000003526b0
----------------
Code disassembly (best guess):
   0:	74 24                	je     0x26
   2:	08 c6                	or     %al,%dh
   4:	44 24 7f             	rex.R and $0x7f,%al
   7:	00 43 0f             	add    %al,0xf(%rbx)
   a:	b6 04                	mov    $0x4,%dh
   c:	3c 84                	cmp    $0x84,%al
   e:	c0 4d 89 fd          	rorb   $0xfd,-0x77(%rbp)
  12:	0f 85 18 0c 00 00    	jne    0xc30
  18:	45 8b 36             	mov    (%r14),%r14d
  1b:	4c 8b bc 24 a8 00 00 	mov    0xa8(%rsp),%r15
  22:	00
  23:	4c 89 f8             	mov    %r15,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	42 0f b6 04 28       	movzbl (%rax,%r13,1),%eax <-- trapping instruction
  2f:	84 c0                	test   %al,%al
  31:	0f 85 17 0c 00 00    	jne    0xc4e
  37:	45 8b 3f             	mov    (%r15),%r15d
  3a:	44 89 fe             	mov    %r15d,%esi
  3d:	81                   	.byte 0x81
  3e:	e6 00                	out    %al,$0x0

Crashes (33):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/20 18:07 android16-6.12 879c70c90804 17d780d6 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/11/04 11:13 android16-6.12 0d6730ee6542 686bf657 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/07/24 19:47 android16-6.12 379b99745e88 65d60d73 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2026/02/22 17:40 android16-6.12 c190014704c7 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2026/02/20 17:36 android16-6.12 879c70c90804 17d780d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2026/02/09 17:48 android16-6.12 3b54985e1263 df949cd9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2026/02/07 07:08 android16-6.12 6aeca23b5dee f20fc9f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2026/02/06 20:52 android16-6.12 356523087425 97745f52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2026/02/05 11:49 android16-6.12 c895831740a4 4936e85c .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/11/04 10:26 android16-6.12 0d6730ee6542 686bf657 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/10/29 15:24 android16-6.12 0d6730ee6542 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/10/29 15:24 android16-6.12 0d6730ee6542 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/10/09 18:44 android16-6.12 bb493f3fc3fe 7e2882b3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/10/01 02:35 android16-6.12 6c382330c9d9 65a0eece .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/09/30 21:39 android16-6.12 6c382330c9d9 65a0eece .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/09/16 11:53 android16-6.12 ef71e857711e e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/09/14 16:15 android16-6.12 0668e45a4339 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/09/05 09:55 android16-6.12 c5058bfb5bf2 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/09/03 00:40 android16-6.12 4ae522d0f966 96a211bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/09/02 06:58 android16-6.12 2e5a4bace74a 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/08/26 23:54 android16-6.12 bb9513914902 e12e5ba4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/08/26 14:54 android16-6.12 bb9513914902 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/08/25 08:17 android16-6.12 c9198633ac9e bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/08/19 05:37 android16-6.12 0d89690c20b1 523f460e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/08/16 07:32 android16-6.12 3f3a5c5e782d 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/08/13 23:49 android16-6.12 affdb774d7ec 22ec1469 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/08/08 18:29 android16-6.12 e76cff4952af 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/08/07 09:06 android16-6.12 886d2f37b799 9a42d6b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/08/04 01:31 android16-6.12 bf0fb8bb181b 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/08/03 19:37 android16-6.12 bf0fb8bb181b 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/08/02 20:03 android16-6.12 bf0fb8bb181b 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/07/24 18:50 android16-6.12 379b99745e88 65d60d73 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
2025/06/30 23:57 android16-6.12 668635cd345a 6e83b42d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust general protection fault in step_into
* Struck through repros no longer work on HEAD.