syzbot


WARNING in emulate_vsyscall

Status: fixed on 2022/03/08 16:11
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+2698183e871d8a137f9d@syzkaller.appspotmail.com
Fix commit: d4ffd5df9d18 x86/fault: Fix wrong signal when vsyscall fails with pkey
First crash: 1121d, last: 940d
Cause bisection: introduced by (bisect log) :
commit 5042d40a264c8a508d58ed71e4c07b05175b3635
Author: Andy Lutomirski <luto@kernel.org>
Date: Wed Feb 10 02:33:42 2021 +0000

  x86/fault: Bypass no_context() for implicit kernel faults from usermode

Crash: WARNING in emulate_vsyscall (log)
Repro: C syz .config
  
Fix bisection: fixed by (bisect log) :
commit d4ffd5df9d18031b6a53f934388726775b4452d3
Author: Jiashuo Liang <liangjs@pku.edu.cn>
Date: Fri Jul 30 03:01:52 2021 +0000

  x86/fault: Fix wrong signal when vsyscall fails with pkey

  
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] WARNING in emulate_vsyscall 1 (3) 2021/10/28 13:01
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in emulate_vsyscall (2) kernel C 5 39m 19d 0/26 upstream: reported C repro on 2024/04/03 18:24
linux-6.1 WARNING in emulate_vsyscall origin:upstream C 3 10d 17d 0/3 upstream: reported C repro on 2024/04/06 00:40

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 8442 at arch/x86/entry/vsyscall/vsyscall_64.c:276 emulate_vsyscall+0x317/0xbf0 arch/x86/entry/vsyscall/vsyscall_64.c:276
Modules linked in:
CPU: 0 PID: 8442 Comm: syz-executor857 Not tainted 5.13.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:emulate_vsyscall+0x317/0xbf0 arch/x86/entry/vsyscall/vsyscall_64.c:276
Code: 80 01 00 00 e8 2a 72 74 00 48 c1 eb 0a 31 ff 41 bc 01 00 00 00 f7 d3 83 e3 01 89 de e8 c2 79 74 00 85 db 74 0f e8 09 72 74 00 <0f> 0b e9 44 01 00 00 45 31 e4 e8 fa 71 74 00 44 89 e0 48 83 c4 38
RSP: 0000:ffffc9000163fe48 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff88802902d4c0 RSI: ffffffff810069e7 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff810069de R11: 0000000000000000 R12: 0000000000000001
R13: ffffc9000163ffd8 R14: ffffc9000163fff0 R15: 0000000000000000
FS:  0000000001b43400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000100 CR3: 00000000179ad000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 do_user_addr_fault+0x9a5/0x1210 arch/x86/mm/fault.c:1314
 handle_page_fault arch/x86/mm/fault.c:1475 [inline]
 exc_page_fault+0x9e/0x180 arch/x86/mm/fault.c:1531
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:577
RIP: 0033:_end+0x6e9da000/0x0
Code: Unable to access opcode bytes at RIP 0xffffffffff5fffd6.
RSP: 002b:00000000005dfe78 EFLAGS: 00010246
RAX: ffffffffffffffda RBX: 0000000000001000 RCX: 000000000002a220
RDX: 0000000000001000 RSI: 0000000600000001 RDI: 00000000000c6fd0
RBP: 000000000009af91 R08: 000000000049c000 R09: 000000000049c000
R10: 000000000009c000 R11: 0000000400000001 R12: 000000000009af91
R13: 0000000000401000 R14: 0000000000401000 R15: 0000000000001000

Crashes (3890):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/06/14 22:41 upstream 009c9aa5be65 1ba81399 .config console log report syz C ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/03/28 19:05 upstream 0f4498cef9f5 a8529b82 .config console log report syz C ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/03/28 19:08 linux-next 931294922e65 a8529b82 .config console log report syz C ci-upstream-linux-next-kasan-gce-root WARNING in emulate_vsyscall
2021/09/26 10:06 upstream a5e0aceabef6 8cac236e .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/26 08:29 upstream a5e0aceabef6 8cac236e .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/25 21:01 upstream 7d42e9818258 8cac236e .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/25 15:07 upstream 7d42e9818258 8cac236e .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/25 09:14 upstream 4c4f0c2bf341 8cac236e .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/25 00:17 upstream 4c4f0c2bf341 8cac236e .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/24 22:23 upstream 4c4f0c2bf341 8cac236e .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/24 17:58 upstream f9e36107ec70 8cac236e .config console log report info ci-upstream-kasan-gce-root WARNING in emulate_vsyscall
2021/09/24 17:44 upstream f9e36107ec70 8cac236e .config console log report info ci-upstream-kasan-gce-root WARNING in emulate_vsyscall
2021/09/24 14:51 upstream f9e36107ec70 8cac236e .config console log report info ci-upstream-kasan-gce-smack-root WARNING in emulate_vsyscall
2021/09/24 05:12 upstream f9e36107ec70 8cac236e .config console log report info ci-upstream-kasan-gce-root WARNING in emulate_vsyscall
2021/09/24 00:45 upstream 58e2cf5d7946 8cac236e .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/23 20:31 upstream 58e2cf5d7946 8cac236e .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/23 19:28 upstream 58e2cf5d7946 8cac236e .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/23 15:34 upstream 58e2cf5d7946 8cac236e .config console log report info ci-upstream-kasan-gce-root WARNING in emulate_vsyscall
2021/09/23 06:19 upstream cf1d2c3e7e2f 8cac236e .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/23 01:30 upstream cf1d2c3e7e2f 8cac236e .config console log report info ci-upstream-kasan-gce-smack-root WARNING in emulate_vsyscall
2021/09/23 01:20 upstream cf1d2c3e7e2f 8cac236e .config console log report info ci-upstream-kasan-gce-root WARNING in emulate_vsyscall
2021/09/22 23:07 upstream cf1d2c3e7e2f 8cac236e .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/22 23:05 upstream cf1d2c3e7e2f 8cac236e .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/22 21:22 upstream cf1d2c3e7e2f 8cac236e .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/22 15:49 upstream 92477dd1faa6 169724fe .config console log report info ci-upstream-kasan-gce-smack-root WARNING in emulate_vsyscall
2021/09/22 09:40 upstream 92477dd1faa6 169724fe .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/22 01:09 upstream d9fb678414c0 169724fe .config console log report info ci-upstream-kasan-gce-root WARNING in emulate_vsyscall
2021/09/21 19:42 upstream d9fb678414c0 169724fe .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/21 16:50 upstream d9fb678414c0 169724fe .config console log report info ci-upstream-kasan-gce-smack-root WARNING in emulate_vsyscall
2021/09/21 16:45 upstream d9fb678414c0 169724fe .config console log report info ci-upstream-kasan-gce-root WARNING in emulate_vsyscall
2021/09/21 08:16 upstream e4e737bb5c17 af796c18 .config console log report info ci-upstream-kasan-gce-root WARNING in emulate_vsyscall
2021/09/21 04:46 upstream e4e737bb5c17 af796c18 .config console log report info ci-upstream-kasan-gce-smack-root WARNING in emulate_vsyscall
2021/09/21 04:44 upstream e4e737bb5c17 af796c18 .config console log report info ci-upstream-kasan-gce-root WARNING in emulate_vsyscall
2021/09/20 23:32 upstream e8f71f89236e af796c18 .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/20 23:22 upstream e4e737bb5c17 af796c18 .config console log report info ci-upstream-kasan-gce-root WARNING in emulate_vsyscall
2021/09/20 20:01 upstream e4e737bb5c17 af796c18 .config console log report info ci-upstream-kasan-gce-root WARNING in emulate_vsyscall
2021/09/20 19:00 upstream e4e737bb5c17 af796c18 .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/20 18:40 upstream e4e737bb5c17 af796c18 .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/20 09:43 upstream e4e737bb5c17 70b76c1d .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/20 07:10 upstream 20621d2f27a0 70b76c1d .config console log report info ci-upstream-kasan-gce-smack-root WARNING in emulate_vsyscall
2021/09/20 05:58 upstream bc1abb9e55ce 70b76c1d .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/20 02:56 upstream bc1abb9e55ce 70b76c1d .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/20 02:20 upstream d4d016caa4b8 70b76c1d .config console log report info ci-upstream-kasan-gce-smack-root WARNING in emulate_vsyscall
2021/09/20 00:02 upstream d4d016caa4b8 70b76c1d .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/19 19:22 upstream d4d016caa4b8 70b76c1d .config console log report info ci-upstream-kasan-gce-root WARNING in emulate_vsyscall
2021/09/19 17:57 upstream d4d016caa4b8 70b76c1d .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/19 10:01 upstream 93ff9f13be91 70b76c1d .config console log report info ci-upstream-kasan-gce-smack-root WARNING in emulate_vsyscall
2021/09/19 04:20 upstream 93ff9f13be91 70b76c1d .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/18 20:25 upstream 4357f03d6611 70b76c1d .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/18 15:09 upstream 4357f03d6611 70b76c1d .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/18 12:57 upstream 4357f03d6611 70b76c1d .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in emulate_vsyscall
2021/09/18 11:52 upstream 4357f03d6611 70b76c1d .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/04/16 08:16 upstream 7e25f40eab52 c59079a6 .config console log report info ci-qemu-upstream WARNING in emulate_vsyscall
2021/03/28 18:38 upstream 0f4498cef9f5 a8529b82 .config console log report info ci-upstream-kasan-gce WARNING in emulate_vsyscall
2021/09/22 04:55 linux-next 83fa5857d812 169724fe .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in emulate_vsyscall
2021/09/21 13:59 linux-next 83fa5857d812 169724fe .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in emulate_vsyscall
2021/09/21 02:39 linux-next 1f77990c4b79 af796c18 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in emulate_vsyscall
2021/09/21 01:12 linux-next 1f77990c4b79 af796c18 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in emulate_vsyscall
* Struck through repros no longer work on HEAD.