syzbot


general protection fault in step_into

Status: auto-closed as invalid on 2020/11/28 01:59
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+d908a625ed56a63142fd@syzkaller.appspotmail.com
First crash: 1334d, last: 1334d
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 general protection fault in step_into C 7 3d15h 12d 0/3 upstream: reported C repro on 2024/04/13 08:21
android-5-10 general protection fault in step_into C done 148 7h32m 347d 0/2 upstream: reported C repro on 2023/05/14 14:12
linux-6.1 KASAN: null-ptr-deref Read in step_into origin:lts-only C 7 4d18h 19d 0/3 upstream: reported C repro on 2024/04/06 11:08
android-5-15 general protection fault in step_into origin:downstream C done 68 7d16h 347d 0/2 upstream: reported C repro on 2023/05/14 14:01
android-6-1 general protection fault in step_into origin:downstream C done 65 3d23h 347d 0/2 upstream: reported C repro on 2023/05/14 14:12

Sample crash report:
general protection fault, probably for non-canonical address 0xe00eeaee0000ee00: 0000 [#1] PREEMPT SMP KASAN
KASAN: maybe wild-memory-access in range [0x0077777000077000-0x0077777000077007]
CPU: 1 PID: 6873 Comm: syz-executor.2 Not tainted 5.9.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:pick_link fs/namei.c:1666 [inline]
RIP: 0010:step_into+0x8fc/0x1990 fs/namei.c:1716
Code: e4 0d 00 00 4d 8b b5 d0 03 00 00 4d 85 f6 0f 84 f9 08 00 00 e8 55 8e b1 ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 4c 89 f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 09 10 00 00
RSP: 0018:ffffc900053b7b00 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: ffffc900053b7d38 RCX: ffffffff81c2b076
RDX: 000eeeee0000ee00 RSI: ffffffff81c2b0bb RDI: ffff888000802c88
RBP: ffffc900053b7be8 R08: 0000000000000001 R09: ffff88805c4da9e0
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8880008028b8 R14: 0077777000077000 R15: ffffc900053b7d84
FS:  000000000311f940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000003128a98 CR3: 000000005c4b6000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 walk_component+0x171/0x6a0 fs/namei.c:1866
 lookup_last fs/namei.c:2309 [inline]
 path_lookupat+0x1ba/0x830 fs/namei.c:2333
 filename_lookup+0x19f/0x560 fs/namei.c:2366
 user_path_at include/linux/namei.h:59 [inline]
 ksys_umount fs/namespace.c:1751 [inline]
 __do_sys_umount fs/namespace.c:1759 [inline]
 __se_sys_umount fs/namespace.c:1757 [inline]
 __x64_sys_umount+0xdc/0x150 fs/namespace.c:1757
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45ffe7
Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fd 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fffb2504d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ffe7
RDX: 0000000000403148 RSI: 0000000000000002 RDI: 00007fffb2504de0
RBP: 00000000000013ec R08: 0000000000000000 R09: 0000000000000011
R10: 000000000000000a R11: 0000000000000246 R12: 00007fffb2505e70
R13: 0000000003120a60 R14: 0000000000000000 R15: 00007fffb2505e70
Modules linked in:
---[ end trace 8a03b2305cfaa808 ]---
RIP: 0010:pick_link fs/namei.c:1666 [inline]
RIP: 0010:step_into+0x8fc/0x1990 fs/namei.c:1716
Code: e4 0d 00 00 4d 8b b5 d0 03 00 00 4d 85 f6 0f 84 f9 08 00 00 e8 55 8e b1 ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 4c 89 f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 09 10 00 00
RSP: 0018:ffffc900053b7b00 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: ffffc900053b7d38 RCX: ffffffff81c2b076
RDX: 000eeeee0000ee00 RSI: ffffffff81c2b0bb RDI: ffff888000802c88
RBP: ffffc900053b7be8 R08: 0000000000000001 R09: ffff88805c4da9e0
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8880008028b8 R14: 0077777000077000 R15: ffffc900053b7d84
FS:  000000000311f940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000003128a98 CR3: 000000005c4b6000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/30 01:58 upstream 4d41ead6ead9 d5a3ae1f .config console log report ci-upstream-kasan-gce-root
* Struck through repros no longer work on HEAD.