syzbot


general protection fault in perf_output_read

Status: auto-closed as invalid on 2019/10/25 08:49
Reported-by: syzbot+19ee0fdb5dbae00376b2@syzkaller.appspotmail.com
First crash: 1759d, last: 1759d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 general protection fault in perf_output_read C 162 1582d 1813d 0/3 public: reported C repro on 2019/04/11 08:44
linux-4.14 general protection fault in perf_output_read C 1 403d 1261d 0/1 upstream: reported C repro on 2020/10/14 09:13

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN NOPTI
Modules linked in:
CPU: 0 PID: 20343 Comm: syz-executor.2 Not tainted 4.14.123+ #5
task: 000000008717b6c9 task.stack: 000000003f002f04
RIP: 0010:primary_event_id kernel/events/core.c:1318 [inline]
RIP: 0010:perf_output_read_group kernel/events/core.c:5882 [inline]
RIP: 0010:perf_output_read+0x603/0xfc0 kernel/events/core.c:5917
RSP: 0018:ffff888188b7f0f8 EFLAGS: 00010202
RAX: 00000000000000d0 RBX: ffff888188b7f3d8 RCX: 0000000000040000
RDX: ffffffff813eb0e4 RSI: ffffc90006579000 RDI: 0000000000000680
RBP: ffff88818a30a0d0 R08: ffff88821fffd01c R09: ffffed10358d8943
R10: ffffed10358d8942 R11: ffff8881ac6c4a17 R12: 00000000000001f0
R13: dead4ead00000000 R14: dffffc0000000000 R15: ffff888188b7f1e0
FS:  00007f9e8be8f700(0000) GS:ffff8881dba00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002029e13f CR3: 000000018881c004 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 perf_output_sample+0xcea/0x1700 kernel/events/core.c:5959
 __perf_event_output kernel/events/core.c:6269 [inline]
 perf_event_output_forward+0x10b/0x220 kernel/events/core.c:6282
 __perf_event_overflow+0x116/0x320 kernel/events/core.c:7520
 perf_swevent_overflow+0x17b/0x210 kernel/events/core.c:7596
 perf_swevent_event+0x19c/0x270 kernel/events/core.c:7629
 do_perf_sw_event kernel/events/core.c:7737 [inline]
 ___perf_sw_event+0x2a4/0x4a0 kernel/events/core.c:7768
 __perf_sw_event+0x42/0x80 kernel/events/core.c:7780
 perf_sw_event include/linux/perf_event.h:1046 [inline]
 __do_page_fault+0x785/0xb80 arch/x86/mm/fault.c:1464
 page_fault+0x22/0x50 arch/x86/entry/entry_64.S:1120
RIP: 0010:fault_in_pages_readable include/linux/pagemap.h:614 [inline]
RIP: 0010:iov_iter_fault_in_readable+0x29c/0x350 lib/iov_iter.c:421
RSP: 0018:ffff888188b7f9d0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 000000000000007f RCX: 0000000000040000
RDX: ffffffff81b740b6 RSI: ffffc90006579000 RDI: ffff888188b7fd18
RBP: 1ffff1103116ff3b R08: ffff8881c3230f18 R09: 0000000000000003
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001000
R13: 0000000000000000 R14: 000000002029e13f R15: ffff888188b7fd10
 generic_perform_write+0x158/0x450 mm/filemap.c:3100
 __generic_file_write_iter+0x32e/0x550 mm/filemap.c:3235
 ext4_file_write_iter+0x551/0xd60 fs/ext4/file.c:264
 call_write_iter include/linux/fs.h:1785 [inline]
 new_sync_write fs/read_write.c:471 [inline]
 __vfs_write+0x401/0x5a0 fs/read_write.c:484
 vfs_write+0x17f/0x4d0 fs/read_write.c:546
 SYSC_write fs/read_write.c:593 [inline]
 SyS_write+0xc0/0x1a0 fs/read_write.c:585
 do_syscall_64+0x19b/0x510 arch/x86/entry/common.c:292
Code: 42 80 3c 30 00 0f 85 66 08 00 00 4d 85 e4 4c 8b ad 90 04 00 00 74 27 e8 bc 1f f2 ff 49 8d bc 24 90 04 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 4f 08 00 00 4d 8b ac 24 90 04 00 00 e8 95 
RIP: primary_event_id kernel/events/core.c:1318 [inline] RSP: ffff888188b7f0f8
RIP: perf_output_read_group kernel/events/core.c:5882 [inline] RSP: ffff888188b7f0f8
RIP: perf_output_read+0x603/0xfc0 kernel/events/core.c:5917 RSP: ffff888188b7f0f8
---[ end trace 577c862526445730 ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/06/03 21:21 android-4.14 50f99a65439b 63bf051f .config console log report ci-android-414-kasan-gce-root
* Struck through repros no longer work on HEAD.