syzbot


general protection fault in __x86_indirect_thunk_r11

Status: closed as invalid on 2018/09/05 12:51
Subsystems: mm kasan
[Documentation on labels]
First crash: 2403d, last: 2403d

Sample crash report:
general protection fault: 0000 [#1] SMP PTI
CPU: 0 PID: 4484 Comm: sshd Not tainted 4.18.0-rc8+ #34
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__x86_indirect_thunk_r11+0x10/0x20 arch/x86/lib/retpoline.S:43
Code: 90 0f ae e8 eb f9 4c 89 14 24 c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 e8 07 00 00 00 f3 90 0f ae e8 eb f9 4c 89 1c 24 <c3> 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 e8 07 00 00 00 f3 
PANIC: double fault, error_code: 0x0
RSP: 0018:ffff8801bccaf480 EFLAGS: 00010006
CPU: 1 PID: 4961 Comm: syz-executor612 Not tainted 4.18.0-rc8+ #34
RAX: 0000000000000000 RBX: ffff88021fc39090 RCX: ffff8801a1d3bb00
RDX: ffffffff8a1af000 RSI: 0000000000000002 RDI: ffff8801bccaf4f8
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RBP: ffff8801bccaf610 R08: 0000000000000000 R09: ffff88021fc39090
R10: 0000000000000000 R11: 4c000000a8be0000 R12: ffffffff8119870e
RIP: 0010:task_kmsan_context_state+0x0/0x110 mm/kmsan/kmsan.c:93
R13: 0000000000000000 R14: 4c000000a8be0000 R15: 0000000000000000
FS:  00007f7219f277c0(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000
Code: 
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000000125c CR3: 00000001a9a50000 CR4: 00000000001406f0
0f 
Call Trace:
00 
00 
5b 
 __do_page_fault+0xc8b/0x17e0 arch/x86/mm/fault.c:1397
41 
 do_page_fault+0x98/0xd0 arch/x86/mm/fault.c:1474
5e 
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1169
41 
RIP: 0010:depot_fetch_stack+0x18/0x40 lib/stackdepot.c:201
5f 
Code: 
5d 
fe 
c3 
ff ff 
41 
90 90 
8b 
90 90 
be 
90 90 
90 
90 90 
0c 
90 90 
00 
90 90 
00 
90 90 
e8 
90 89 
b4 
f8 25 
49 
ff ff 
00 
1f 00 
00 
48 8b 
eb 
04 c5 
a1 
10 f5 
90 
25 8a 
90 
c1 ef 
8a 
11 81 
04 
e7 f0 
25 
3f 00 
38 
00 <8b> 
f5 
4c 38 
15 
0c 89 
8a 
4e 04 
c3 
89 0e 
0f 
48 01 
1f 
f8 48 
84 
83 c0 
00 
18 48 
00 
89 46 
00 
08 c7 
00 
46 
00 
RSP: 0018:ffff8801bccaf818 EFLAGS: 00010006
<55> 
48 
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffffffff8a1af000 RSI: ffff8801bccaf820 RDI: 0000000000001250
89 
RBP: ffff8801bccaf878 R08: 0000000000000000 R09: ffff88021fc39090
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
e5 
R13: 00000000a4a3a028 R14: ffffffff81a9cea0 R15: ffff8801a1d3bb00
41 
57 
41 
 __msan_warning+0x70/0xc0 mm/kmsan/kmsan_instr.c:645
56 
 __handle_mm_fault mm/memory.c:4040 [inline]
 handle_mm_fault+0xeb0/0x7ea0 mm/memory.c:4133
41 
54 
 __do_page_fault+0xc8b/0x17e0 arch/x86/mm/fault.c:1397
53 48 83 
 do_page_fault+0x98/0xd0 arch/x86/mm/fault.c:1474
ec 
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1169
10 
RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 arch/x86/lib/copy_user_64.S:66
65 
Code: 38 
44 
4c 89 
8b 
47 20 
3c 
4c 89 
25 
4f 28 
20 
4c 89 
a1 
57 30 
4c 89 
RSP: 0018:ffff8801a1f58000 EFLAGS: 00010083
5f 38 
48 8d 
RAX: 0000000088c00a77 RBX: 0000000000000000 RCX: ffffffff88c00a77
76 40 
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801a1f58048
48 8d 
RBP: ffff8801a1f58008 R08: 0000000000000000 R09: 0000000000000000
7f 40 
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
ff c9 
R13: 0000000000000000 R14: 0000000000000000 R15: ffff8801a1f58048
75 b6 
FS:  0000000001638880(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
89 d1 
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
83 e2 
CR2: ffff8801a1f57ff8 CR3: 00000001bc4ee000 CR4: 00000000001406e0
07 c1 
Call Trace:
e9 03 

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/08/21 15:53 https://github.com/google/kmsan.git master 0cc51dc9a291 95b5c82b .config console log report syz C ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.