syzbot


BUG: unable to handle kernel NULL pointer dereference in __x64_sys_epoll_ctl

Status: auto-closed as invalid on 2019/02/22 10:29
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+af4f30024481097c29a3@syzkaller.appspotmail.com
First crash: 2163d, last: 2163d

Sample crash report:
EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize
BUG: unable to handle kernel NULL pointer dereference at 0000000000000004
PGD 1b608b067 P4D 1b608b067 PUD 1b608c067 PMD 0 
Oops: 0002 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 2709 Comm: udevd Not tainted 4.17.0-rc5+ #56
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:_copy_from_user+0x100/0x150 lib/usercopy.c:12
RSP: 0018:ffff8801b60afc38 EFLAGS: 00010297
RAX: 0000000000000004 RBX: 000000000000000c RCX: ffffffff83538300
RDX: 0000000000000001 RSI: 000000000000000c RDI: ffff8801b60afd78
RBP: ffff8801b60afc68 R08: ffffed0036c15fb1 R09: ffffed0036c15faf
R10: ffffed0036c15fb0 R11: 0000000000000003 R12: 00007fffc243042c
R13: 00007fffc2430420 R14: ffff8801b60afd78 R15: 00007ffffffff000
FS:  00007fb7832197a0(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000001b608a000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000007373 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 copy_from_user include/linux/uaccess.h:147 [inline]
 __do_sys_epoll_ctl fs/eventpoll.c:2013 [inline]
 __se_sys_epoll_ctl fs/eventpoll.c:2000 [inline]
 __x64_sys_epoll_ctl+0x165/0x1090 fs/eventpoll.c:2000
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fb78292d90a
RSP: 002b:00007fffc2430378 EFLAGS: 00000206 ORIG_RAX: 00000000000000e9
RAX: ffffffffffffffda RBX: 0000000001d5f250 RCX: 00007fb78292d90a
RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000007
RBP: 0000000000625500 R08: 0000000000000a95 R09: 0000000000000a95
R10: 00007fffc2430420 R11: 0000000000000206 R12: 0000000001d705a0
R13: 00007fffc2431497 R14: 0000000000000005 R15: 0000000001d5f250
Code: 4d 85 e4 75 38 e8 11 ac 25 fe 4c 89 e0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fa ab 25 fe 89 de 4c 89 f7 e8 80 07 62 fe <00> 00 00 00 00 00 00 00 e8 13 bd 18 04 41 89 c4 eb b4 e8 d9 ab 
RIP: _copy_from_user+0x100/0x150 lib/usercopy.c:12 RSP: ffff8801b60afc38
CR2: 0000000000000004
---[ end trace 8134c8413d98fbdb ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/05/18 14:30 upstream 3acf4e395260 c992b767 .config console log report ci-upstream-kasan-gce-root
* Struck through repros no longer work on HEAD.