syzbot

 sign-in | mailing list | source | docs
🐞 Open [712] 🐞 Fixed [297] 🐞 Invalid [838] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in do_syscall_64

Status: auto-closed as invalid on 2020/09/15 12:00
Reported-by: syzbot+67b72e30d4ab7e0bdb1f@syzkaller.appspotmail.com
First crash: 1475d, last: 1439d
▶ ▼ Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in do_syscall_64 kernel C done error 4 1460d 1490d 0/26 closed as dup on 2020/08/15 11:55
linux-4.19 general protection fault in do_syscall_64 (3) 1 822d 822d 0/1 auto-closed as invalid on 2022/05/25 11:05
linux-4.14 general protection fault in do_syscall_64 1 1641d 1641d 0/1 auto-closed as invalid on 2020/02/26 05:52
linux-4.19 general protection fault in do_syscall_64 (2) syz done 2 975d 1308d 1/1 fixed on 2021/09/26 12:12
linux-4.14 general protection fault in do_syscall_64 (2) syz error 8 788d 1439d 0/1 upstream: reported syz repro on 2020/05/18 23:19

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 6748 Comm: syz-executor.3 Not tainted 4.19.123-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__read_once_size include/linux/compiler.h:193 [inline]
RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:253 [inline]
RIP: 0010:do_syscall_64+0x134/0x620 arch/x86/entry/common.c:296
Code: 48 c1 e9 03 80 3c 11 00 0f 85 be 04 00 00 48 89 45 50 e8 0f 31 67 00 48 b8 00 00 00 00 00 fc ff df 65 48 8b 1c 25 00 00 00 00 <00> 00 00 00 00 00 00 00 07 07 00 00 07 07 00 00 07 07 00 00 00 07
RSP: 0018:ffff888086b2ff28 EFLAGS: 00010293
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff11010d65ff5
RDX: 0000000000000000 RSI: ffffffff81009b31 RDI: ffff888086b2ffa8
RBP: ffff888086b2ff58 R08: ffff888086b22280 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff88d256d8 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000002b66940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000043e260 CR3: 0000000086ae7000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45af30
Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 21 ef 84 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 8a 46 00 00
RSP: 002b:00007ffd5eea8108 EFLAGS: 00000246 ORIG_RAX: 0000000000000023
RAX: 0000000000000000 RBX: 000000000012fa1a RCX: 000000000045af30
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffd5eea8110
RBP: 0000000000000f33 R08: 0000000000000001 R09: 0000000002b66940
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
R13: 00007ffd5eea8160 R14: 000000000012f9ce R15: 00007ffd5eea8170
Modules linked in:
---[ end trace 08270fec586e7896 ]---
RIP: 0010:__read_once_size include/linux/compiler.h:193 [inline]
RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:253 [inline]
RIP: 0010:do_syscall_64+0x134/0x620 arch/x86/entry/common.c:296
Code: 48 c1 e9 03 80 3c 11 00 0f 85 be 04 00 00 48 89 45 50 e8 0f 31 67 00 48 b8 00 00 00 00 00 fc ff df 65 48 8b 1c 25 00 00 00 00 <00> 00 00 00 00 00 00 00 07 07 00 00 07 07 00 00 07 07 00 00 00 07
RSP: 0018:ffff888086b2ff28 EFLAGS: 00010293
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff11010d65ff5
RDX: 0000000000000000 RSI: ffffffff81009b31 RDI: ffff888086b2ffa8
RBP: ffff888086b2ff58 R08: ffff888086b22280 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff88d256d8 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000002b66940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000043e260 CR3: 0000000086ae7000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/05/18 12:00 linux-4.19.y 258f0cf7ac3b 24d91142 .config console log report ci2-linux-4-19
2020/05/14 01:07 linux-4.19.y 033c4ea49a4b a885920d .config console log report ci2-linux-4-19
2020/05/09 01:43 linux-4.19.y 84920cc7fbe1 e97b06d3 .config console log report ci2-linux-4-19
2020/05/08 22:13 linux-4.19.y 84920cc7fbe1 e97b06d3 .config console log report ci2-linux-4-19
2020/04/12 13:20 linux-4.19.y dda0e2920330 36b0b050 .config console log report ci2-linux-4-19
2020/04/12 12:55 linux-4.19.y dda0e2920330 36b0b050 .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.