syzbot


general protection fault in perf_tp_event (2)

Status: auto-closed as invalid on 2021/07/02 04:41
Subsystems: perf
[Documentation on labels]
Reported-by: syzbot+740e88e3bac50daed3e2@syzkaller.appspotmail.com
First crash: 1365d, last: 1111d
Discussions (1)
Title Replies (including bot) Last reply
general protection fault in perf_tp_event (2) 0 (1) 2020/07/06 10:59
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 general protection fault in perf_tp_event 1 1788d 1788d 0/1 auto-closed as invalid on 2019/10/24 06:05
linux-4.14 general protection fault in perf_tp_event 2 1353d 1391d 0/1 auto-closed as invalid on 2020/11/01 21:53
linux-4.19 general protection fault in perf_tp_event (2) 4 1407d 1556d 0/1 auto-closed as invalid on 2020/09/08 23:43
upstream general protection fault in perf_tp_event (3) perf 9 815d 899d 0/26 auto-closed as invalid on 2022/04/23 10:36
android-54 general protection fault in perf_tp_event 7 1360d 1527d 0/2 auto-closed as invalid on 2020/10/25 22:42
upstream general protection fault in perf_tp_event perf 423 1722d 2146d 0/26 auto-closed as invalid on 2019/10/25 14:12

Sample crash report:
general protection fault, probably for non-canonical address 0xdffffc000000002f: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000178-0x000000000000017f]
CPU: 1 PID: 21247 Comm: syz-executor.2 Not tainted 5.11.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:perf_tp_event_match kernel/events/core.c:9466 [inline]
RIP: 0010:perf_tp_event+0x1d5/0xb60 kernel/events/core.c:9517
Code: 89 85 e8 fd ff ff eb 0f e8 28 eb e2 ff 48 83 eb 60 0f 84 4a 01 00 00 e8 19 eb e2 ff 48 8d bb d8 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e 36 08 00 00 44 8b bb d8 01
RSP: 0018:ffffc900014fedc0 EFLAGS: 00010002
RAX: 000000000000002f RBX: ffffffffffffffa2 RCX: 0000000000000000
RDX: ffff88805ef11bc0 RSI: ffffffff818fed07 RDI: 000000000000017a
RBP: ffffc900014ff030 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff8176492c R11: 0000000000000000 R12: dffffc0000000000
R13: ffff8880b9d303e0 R14: 0000000000000001 R15: 1ffff110173a608d
FS:  0000000001df3400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000053b198 CR3: 0000000052848000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 perf_trace_run_bpf_submit+0x11c/0x210 kernel/events/core.c:9492
 perf_trace_sched_switch+0x49e/0x680 include/trace/events/sched.h:222
 __traceiter_sched_switch+0x69/0xb0 include/trace/events/sched.h:222
 trace_sched_switch include/trace/events/sched.h:222 [inline]
 __schedule+0x11a6/0x21a0 kernel/sched/core.c:5072
 preempt_schedule_common+0x45/0xc0 kernel/sched/core.c:5235
 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:35
 unwind_next_frame+0xe54/0x1f90 arch/x86/kernel/unwind_orc.c:608
 arch_stack_walk+0x7d/0xe0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:121
 kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
 kasan_set_track mm/kasan/common.c:46 [inline]
 set_alloc_info mm/kasan/common.c:401 [inline]
 ____kasan_kmalloc.constprop.0+0x82/0xa0 mm/kasan/common.c:429
 kmalloc include/linux/slab.h:559 [inline]
 tomoyo_realpath_from_path+0xc3/0x620 security/tomoyo/realpath.c:254
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_check_open_permission+0x272/0x380 security/tomoyo/file.c:771
 tomoyo_file_open security/tomoyo/tomoyo.c:313 [inline]
 tomoyo_file_open+0xa3/0xd0 security/tomoyo/tomoyo.c:308
 security_file_open+0x52/0x4f0 security/security.c:1576
 do_dentry_open+0x358/0x11b0 fs/open.c:804
 do_open fs/namei.c:3255 [inline]
 path_openat+0x1b8e/0x2720 fs/namei.c:3370
 do_filp_open+0x17e/0x3c0 fs/namei.c:3397
 do_sys_openat2+0x16d/0x420 fs/open.c:1178
 do_sys_open fs/open.c:1194 [inline]
 __do_sys_openat fs/open.c:1210 [inline]
 __se_sys_openat fs/open.c:1205 [inline]
 __x64_sys_openat+0x13f/0x1f0 fs/open.c:1205
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4194e4
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007ffe3ba2f320 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffe3ba2f430 RCX: 00000000004194e4
RDX: 0000000000000002 RSI: 00007ffe3ba2f470 RDI: 00000000ffffff9c
RBP: 00007ffe3ba2f470 R08: 0000000000000000 R09: 00007ffe3ba2f230
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 000000000007bd24 R14: 0000000000000000 R15: 00007ffe3ba2f470
Modules linked in:
---[ end trace eb8d3405b927e9a0 ]---
RIP: 0010:perf_tp_event_match kernel/events/core.c:9466 [inline]
RIP: 0010:perf_tp_event+0x1d5/0xb60 kernel/events/core.c:9517
Code: 89 85 e8 fd ff ff eb 0f e8 28 eb e2 ff 48 83 eb 60 0f 84 4a 01 00 00 e8 19 eb e2 ff 48 8d bb d8 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e 36 08 00 00 44 8b bb d8 01
RSP: 0018:ffffc900014fedc0 EFLAGS: 00010002
RAX: 000000000000002f RBX: ffffffffffffffa2 RCX: 0000000000000000
RDX: ffff88805ef11bc0 RSI: ffffffff818fed07 RDI: 000000000000017a
RBP: ffffc900014ff030 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff8176492c R11: 0000000000000000 R12: dffffc0000000000
R13: ffff8880b9d303e0 R14: 0000000000000001 R15: 1ffff110173a608d
FS:  0000000001df3400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000053b198 CR3: 0000000052848000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600

Crashes (109):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/02/28 23:42 bpf 557c223b643a 4c37c133 .config console log report info ci-upstream-bpf-kasan-gce general protection fault in perf_tp_event
2021/01/31 20:38 bpf 06cc6e5dc659 fc9fd31e .config console log report info ci-upstream-bpf-kasan-gce general protection fault in perf_tp_event
2021/03/04 04:40 bpf-next 303dcc25b5c7 06ed56cd .config console log report info ci-upstream-bpf-next-kasan-gce general protection fault in perf_tp_event
2021/02/17 10:34 bpf-next b646acd5eb48 052f8d9f .config console log report info ci-upstream-bpf-next-kasan-gce general protection fault in perf_tp_event
2021/01/29 12:00 bpf-next 61ca36c8c4eb 6593fd32 .config console log report info ci-upstream-bpf-next-kasan-gce general protection fault in perf_tp_event
2021/01/20 09:54 bpf-next 8edc0c67d09d d4f4eca5 .config console log report info ci-upstream-bpf-next-kasan-gce general protection fault in perf_tp_event
2021/01/20 06:36 bpf-next 8edc0c67d09d 63631df1 .config console log report info ci-upstream-bpf-next-kasan-gce general protection fault in perf_tp_event
2020/08/29 02:17 upstream 96d454cd2c16 d5a3ae1f .config console log report ci-upstream-kasan-gce-selinux-root
2020/07/31 03:57 upstream 83bdc7275e62 8df85ed9 .config console log report ci-upstream-kasan-gce-smack-root
2020/07/02 03:55 upstream cd77006e01b3 bed10395 .config console log report ci-upstream-kasan-gce-smack-root
2021/01/09 12:41 bpf 286e95eed12e a6c52263 .config console log report info ci-upstream-bpf-kasan-gce
2021/01/08 20:13 bpf 286e95eed12e c104d4a3 .config console log report info ci-upstream-bpf-kasan-gce
2021/01/08 02:53 bpf 0565ff56cd05 c104d4a3 .config console log report info ci-upstream-bpf-kasan-gce
2020/12/03 02:06 bpf 3413f04141aa 8c9190ef .config console log report info ci-upstream-bpf-kasan-gce
2020/10/19 22:56 bpf 76702a2e7280 ff4a3345 .config console log report info ci-upstream-bpf-kasan-gce
2020/10/13 05:17 bpf 28802e7c0c99 d32b0bbf .config console log report info ci-upstream-bpf-kasan-gce
2020/10/12 23:22 bpf 28802e7c0c99 d32b0bbf .config console log report info ci-upstream-bpf-kasan-gce
2020/10/09 11:40 bpf 28802e7c0c99 92390980 .config console log report info ci-upstream-bpf-kasan-gce
2020/10/01 19:42 bpf a59cf619787e a9767fb2 .config console log report info ci-upstream-bpf-kasan-gce
2020/10/01 03:35 bpf 9cf51446e686 8516f6d3 .config console log report info ci-upstream-bpf-kasan-gce
2020/09/30 19:09 bpf 9cf51446e686 8516f6d3 .config console log report info ci-upstream-bpf-kasan-gce
2020/09/29 10:13 bpf 87f92ac4c127 1b88c6d5 .config console log report info ci-upstream-bpf-kasan-gce
2020/09/27 19:09 bpf 87f92ac4c127 5dd8aee8 .config console log report info ci-upstream-bpf-kasan-gce
2020/09/23 05:20 bpf 1245008122d7 3e8f6c27 .config console log report info ci-upstream-bpf-kasan-gce
2020/09/17 05:52 bpf d5d325eae782 8247808b .config console log report info ci-upstream-bpf-kasan-gce
2020/06/23 02:46 bpf 4e15507fea70 1afe1535 .config console log report ci-upstream-bpf-kasan-gce
2020/12/10 22:43 bpf-next 41003dd0241c f900b48c .config console log report info ci-upstream-bpf-next-kasan-gce
2020/10/22 23:15 bpf-next 9ff9b0d392ea 4e740c00 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/10/17 17:30 bpf-next 9ff9b0d392ea fea47c01 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/10/08 23:32 bpf-next 1e9259eca8fd 92390980 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/10/06 12:59 bpf-next dca4121cdc48 1880b4a9 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/27 02:18 bpf-next ba5f4cfeac77 2d5ea0cb .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/26 14:13 bpf-next ba5f4cfeac77 2d5ea0cb .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/24 08:37 bpf-next 0789e13bc3f8 54289b08 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/23 12:34 bpf-next a8a717963fe5 287cd75a .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/20 14:05 bpf-next 70b971118e07 9564d2e9 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/20 09:21 bpf-next 70b971118e07 53ce8104 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/19 23:40 bpf-next 70b971118e07 53ce8104 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/19 20:51 bpf-next 70b971118e07 53ce8104 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/19 15:27 bpf-next 70b971118e07 53ce8104 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/19 11:40 bpf-next b6ed6cf4a3ac 53ce8104 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/19 04:14 bpf-next b6ed6cf4a3ac 53ce8104 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/18 15:06 bpf-next 3b0379111197 38962c8b .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/18 09:13 bpf-next 3b0379111197 38962c8b .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/18 01:20 bpf-next c64779e24e88 8247808b .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/17 15:01 bpf-next c64779e24e88 8247808b .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/17 03:48 bpf-next c64779e24e88 8247808b .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/16 23:10 bpf-next c64779e24e88 8247808b .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/16 01:37 bpf-next d317b0a8acfc 6989d6f6 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/15 15:45 bpf-next d317b0a8acfc 6989d6f6 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/09/14 04:36 bpf-next 2bab48c5bef0 2d3cdd63 .config console log report ci-upstream-bpf-next-kasan-gce
2020/09/11 23:16 bpf-next 2bab48c5bef0 79fb24e2 .config console log report ci-upstream-bpf-next-kasan-gce
2020/09/11 20:29 bpf-next 2bab48c5bef0 79fb24e2 .config console log report ci-upstream-bpf-next-kasan-gce
2020/08/31 03:05 linux-next b36c969764ab d5a3ae1f .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.