bisecting fixing commit since fdc072324f3c66190a20f57490b4842a391d8233
building syzkaller on 58ae5e18624eaaac79cab00e63d6f32c9bd64ee0
testing commit fdc072324f3c66190a20f57490b4842a391d8233 with gcc (GCC) 8.1.0
kernel signature: 0365e3ebac73fe8078c143105cadc0288e49d8049da32eb1c3232ae393c9e47a
run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
run #6: crashed: BUG: sleeping function called from invalid context in __do_page_fault
run #7: crashed: BUG: sleeping function called from invalid context in __do_page_fault
run #8: crashed: BUG: sleeping function called from invalid context in corrupted
run #9: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
testing current HEAD 2d16cf4817bc6944a2adb5bf4db607c8258e87da
testing commit 2d16cf4817bc6944a2adb5bf4db607c8258e87da with gcc (GCC) 8.1.0
kernel signature: 94709e4eb4722c868561989b22423fd8d7fd07cc280f09cb966216c44de876a3
run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
run #2: crashed: general protection fault in syscall_trace_enter
run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
run #7: crashed: BUG: unable to handle kernel paging request in do_syscall_64
run #8: crashed: BUG: unable to handle kernel NULL pointer dereference in do_syscall_64
run #9: crashed: general protection fault in syscall_trace_enter
revisions tested: 2, total time: 27m32.023221996s (build: 18m54.358884921s, test: 7m51.332760197s)
the crash still happens on HEAD
commit msg: Linux 4.19.125
crash: general protection fault in syscall_trace_enter
batman_adv: batadv0: Interface activated: batadv_slave_1
IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 3694 Comm: systemd-udevd Not tainted 4.19.125-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:syscall_trace_enter+0x7b/0x10e0 arch/x86/entry/common.c:69
Code: 18 88 49 8d 7e 08 48 c7 85 48 ff ff ff 30 60 00 81 c7 02 f1 f1 f1 f1 c7 42 0c f3 f3 f3 f3 48 89 fa 65 48 8b 0c 25 28 00 00 00 <00> 89 4d d0 31 c9 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e
RSP: 0018:ffff88809049fe18 EFLAGS: 00010286
RAX: dffffc0000000000 RBX: ffff88809049ff58 RCX: 9b9811763a037000
RDX: ffff888090492148 RSI: 0000000000000001 RDI: ffff888090492148
RBP: ffff88809049ff10 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff11012093fc9
R13: ffff88809049fee8 R14: ffff888090492140 R15: 0000000000000000
FS:  00007fe5b9a8f8c0(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005581c6250000 CR3: 000000009075f000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 do_syscall_64+0x386/0x4e0 arch/x86/entry/common.c:283
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fe5b8902335
Code: 69 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 31 db 2b 00 f7 d8 64 89
RSP: 002b:00007ffd8f707bc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006
RAX: ffffffffffffffda RBX: 00005581c6235580 RCX: 00007fe5b8902335
RDX: 00007ffd8f707c00 RSI: 00007ffd8f707c00 RDI: 00005581c6234580
RBP: 00007ffd8f707cc0 R08: 00007fe5b8bc1258 R09: 0000000000001010
R10: 0000000000000020 R11: 0000000000000246 R12: 00005581c6234580
R13: 00005581c6234594 R14: 00005581c622fe8d R15: 00005581c622fe94
Modules linked in:
---[ end trace 19119179561a2fa3 ]---
RIP: 0010:syscall_trace_enter+0x7b/0x10e0 arch/x86/entry/common.c:69
Code: 18 88 49 8d 7e 08 48 c7 85 48 ff ff ff 30 60 00 81 c7 02 f1 f1 f1 f1 c7 42 0c f3 f3 f3 f3 48 89 fa 65 48 8b 0c 25 28 00 00 00 <00> 89 4d d0 31 c9 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e
RSP: 0018:ffff88809049fe18 EFLAGS: 00010286
RAX: dffffc0000000000 RBX: ffff88809049ff58 RCX: 9b9811763a037000
RDX: ffff888090492148 RSI: 0000000000000001 RDI: ffff888090492148
RBP: ffff88809049ff10 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff11012093fc9
R13: ffff88809049fee8 R14: ffff888090492140 R15: 0000000000000000
FS:  00007fe5b9a8f8c0(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005581c6250000 CR3: 000000009075f000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400