general protection fault in __fsnotify_parent
7 views
Skip to first unread message
syzbot
Jun 12, 2021, 12:42:18 PM6/12/21
to syzkaller-a...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: b0b664ad ANDROID: GKI: update .xml file
git tree: android12-5.4
console output: https://syzkaller.appspot.com/x/log.txt?x=17d0346fd00000
kernel config: https://syzkaller.appspot.com/x/.config?x=d6369a9bfb56299f
dashboard link: https://syzkaller.appspot.com/bug?extid=33e01ab862123610994d
compiler: Debian clang version 11.0.1-2
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+33e01a...@syzkaller.appspotmail.com
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 30810 Comm: syz-executor.0 Not tainted 5.4.125-syzkaller-00093-gb0b664ad1351 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__fsnotify_parent+0xbc/0x310 fs/notify/fsnotify.c:155
Code: 08 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 28 4b eb ff 4d 8b 36 4c 89 6c 24 18 44 89 64 24 14 4c 89 f0 48 c1 e8 03 <8a> 04 18 84 c0 0f 85 04 02 00 00 45 8b 2e bb 00 40 00 00 be 00 40
RSP: 0018:ffff8881e9e97d00 EFLAGS: 00010246
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000040000
RDX: ffffc9000f608000 RSI: 0000000000000588 RDI: 0000000000000589
RBP: ffff8881e9e97df0 R08: ffffffff81dde41d R09: ffffed103be7b800
R10: ffffed103e4d5b95 R11: 0000000000000000 R12: 0000000000000020
R13: ffff8881e9e97e60 R14: 0000000000000000 R15: 1ffff1103d3d2fa4
FS: 00007fb3673c6700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc35b299718 CR3: 00000001e2898000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
fsnotify_parent include/linux/fsnotify.h:40 [inline]
fsnotify_open include/linux/fsnotify.h:276 [inline]
do_sys_open+0x53f/0x7c0 fs/open.c:1118
do_syscall_64+0xcb/0x1e0 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4665d9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fb3673c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665d9
RDX: 0000000000000000 RSI: 0000000020002040 RDI: ffffffffffffff9c
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0f0
R13: 00007ffe5b978def R14: 00007fb3673c6300 R15: 0000000000022000
Modules linked in:
---[ end trace 41e59136b6b1d2ed ]---
RIP: 0010:__fsnotify_parent+0xbc/0x310 fs/notify/fsnotify.c:155
Code: 08 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 28 4b eb ff 4d 8b 36 4c 89 6c 24 18 44 89 64 24 14 4c 89 f0 48 c1 e8 03 <8a> 04 18 84 c0 0f 85 04 02 00 00 45 8b 2e bb 00 40 00 00 be 00 40
RSP: 0018:ffff8881e9e97d00 EFLAGS: 00010246
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000040000
RDX: ffffc9000f608000 RSI: 0000000000000588 RDI: 0000000000000589
RBP: ffff8881e9e97df0 R08: ffffffff81dde41d R09: ffffed103be7b800
R10: ffffed103e4d5b95 R11: 0000000000000000 R12: 0000000000000020
R13: ffff8881e9e97e60 R14: 0000000000000000 R15: 1ffff1103d3d2fa4
FS: 00007fb3673c6700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc35b29a000 CR3: 00000001e2898000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: b0b664ad ANDROID: GKI: update .xml file
git tree: android12-5.4
console output: https://syzkaller.appspot.com/x/log.txt?x=17d0346fd00000
kernel config: https://syzkaller.appspot.com/x/.config?x=d6369a9bfb56299f
dashboard link: https://syzkaller.appspot.com/bug?extid=33e01ab862123610994d
compiler: Debian clang version 11.0.1-2
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+33e01a...@syzkaller.appspotmail.com
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 30810 Comm: syz-executor.0 Not tainted 5.4.125-syzkaller-00093-gb0b664ad1351 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__fsnotify_parent+0xbc/0x310 fs/notify/fsnotify.c:155
Code: 08 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 28 4b eb ff 4d 8b 36 4c 89 6c 24 18 44 89 64 24 14 4c 89 f0 48 c1 e8 03 <8a> 04 18 84 c0 0f 85 04 02 00 00 45 8b 2e bb 00 40 00 00 be 00 40
RSP: 0018:ffff8881e9e97d00 EFLAGS: 00010246
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000040000
RDX: ffffc9000f608000 RSI: 0000000000000588 RDI: 0000000000000589
RBP: ffff8881e9e97df0 R08: ffffffff81dde41d R09: ffffed103be7b800
R10: ffffed103e4d5b95 R11: 0000000000000000 R12: 0000000000000020
R13: ffff8881e9e97e60 R14: 0000000000000000 R15: 1ffff1103d3d2fa4
FS: 00007fb3673c6700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc35b299718 CR3: 00000001e2898000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
fsnotify_parent include/linux/fsnotify.h:40 [inline]
fsnotify_open include/linux/fsnotify.h:276 [inline]
do_sys_open+0x53f/0x7c0 fs/open.c:1118
do_syscall_64+0xcb/0x1e0 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4665d9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fb3673c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665d9
RDX: 0000000000000000 RSI: 0000000020002040 RDI: ffffffffffffff9c
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0f0
R13: 00007ffe5b978def R14: 00007fb3673c6300 R15: 0000000000022000
Modules linked in:
---[ end trace 41e59136b6b1d2ed ]---
RIP: 0010:__fsnotify_parent+0xbc/0x310 fs/notify/fsnotify.c:155
Code: 08 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 28 4b eb ff 4d 8b 36 4c 89 6c 24 18 44 89 64 24 14 4c 89 f0 48 c1 e8 03 <8a> 04 18 84 c0 0f 85 04 02 00 00 45 8b 2e bb 00 40 00 00 be 00 40
RSP: 0018:ffff8881e9e97d00 EFLAGS: 00010246
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000040000
RDX: ffffc9000f608000 RSI: 0000000000000588 RDI: 0000000000000589
RBP: ffff8881e9e97df0 R08: ffffffff81dde41d R09: ffffed103be7b800
R10: ffffed103e4d5b95 R11: 0000000000000000 R12: 0000000000000020
R13: ffff8881e9e97e60 R14: 0000000000000000 R15: 1ffff1103d3d2fa4
FS: 00007fb3673c6700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc35b29a000 CR3: 00000001e2898000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Jun 12, 2021, 1:15:24 PM6/12/21
to syzkaller-a...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: b0b664ad ANDROID: GKI: update .xml file
git tree: android12-5.4
console output: https://syzkaller.appspot.com/x/log.txt?x=11544dc0300000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+33e01a...@syzkaller.appspotmail.com
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8881e1863f00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881dea37e60
RBP: ffff8881dea37df0 R08: ffffffff81dde41d R09: ffffed103c744400
R10: ffffed103e4eae67 R11: 0000000000000000 R12: 0000000000000020
R13: ffff8881dea37e60 R14: 0000000000000000 R15: 1ffff1103bd46fa4
FS: [K[ [0;1;31m* 00007f7202bc1700(0000) GS:ffff8881f6e00000([0m [0;31m* [0m] A start job0000) knl is running for GS:000000000dev-ttyS0.device0000000
CR2: 00000000200095c0 CR3: 00000001ed3b7000 CR4: 00000000001406f0
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
R13: 00007ffdbcf7c64f R14: 00007f7202bc1300 R15: 0000000000022000
Modules linked in:
---[ end trace 34ee335b12e269a9 ]---
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8881e1863f00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881dea37e60
RBP: ffff8881dea37df0 R08: ffffffff81dde41d R09: ffffed103c744400
R10: ffffed103e4eae67 R11: 0000000000000000 R12: 0000000000000020
R13: ffff8881dea37e60 R14: 0000000000000000 R15: 1ffff1103bd46fa4
FS: 00007f7202bc1700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
HEAD commit: b0b664ad ANDROID: GKI: update .xml file
git tree: android12-5.4
kernel config: https://syzkaller.appspot.com/x/.config?x=d6369a9bfb56299f
dashboard link: https://syzkaller.appspot.com/bug?extid=33e01ab862123610994d
compiler: Debian clang version 11.0.1-2
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=100f2570300000
dashboard link: https://syzkaller.appspot.com/bug?extid=33e01ab862123610994d
compiler: Debian clang version 11.0.1-2
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+33e01a...@syzkaller.appspotmail.com
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 3311 Comm: syz-executor.0 Not tainted 5.4.125-syzkaller-00093-gb0b664ad1351 #0
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__fsnotify_parent+0xbc/0x310 fs/notify/fsnotify.c:155
Code: 08 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 28 4b eb ff 4d 8b 36 4c 89 6c 24 18 44 89 64 24 14 4c 89 f0 48 c1 e8 03 <8a> 04 18 84 c0 0f 85 04 02 00 00 45 8b 2e bb 00 40 00 00 be 00 40
RSP: 0018:ffff8881dea37d00 EFLAGS: 00010246
RIP: 0010:__fsnotify_parent+0xbc/0x310 fs/notify/fsnotify.c:155
Code: 08 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 28 4b eb ff 4d 8b 36 4c 89 6c 24 18 44 89 64 24 14 4c 89 f0 48 c1 e8 03 <8a> 04 18 84 c0 0f 85 04 02 00 00 45 8b 2e bb 00 40 00 00 be 00 40
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8881e1863f00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881dea37e60
RBP: ffff8881dea37df0 R08: ffffffff81dde41d R09: ffffed103c744400
R10: ffffed103e4eae67 R11: 0000000000000000 R12: 0000000000000020
R13: ffff8881dea37e60 R14: 0000000000000000 R15: 1ffff1103bd46fa4
FS: [K[ [0;1;31m* 00007f7202bc1700(0000) GS:ffff8881f6e00000([0m [0;31m* [0m] A start job0000) knl is running for GS:000000000dev-ttyS0.device0000000
CR2: 00000000200095c0 CR3: 00000001ed3b7000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
fsnotify_parent include/linux/fsnotify.h:40 [inline]
fsnotify_open include/linux/fsnotify.h:276 [inline]
do_sys_open+0x53f/0x7c0 fs/open.c:1118
do_syscall_64+0xcb/0x1e0 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4665d9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7202bc1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
fsnotify_parent include/linux/fsnotify.h:40 [inline]
fsnotify_open include/linux/fsnotify.h:276 [inline]
do_sys_open+0x53f/0x7c0 fs/open.c:1118
do_syscall_64+0xcb/0x1e0 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4665d9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
RDX: 0000000000000000 RSI: 0000000020002040 RDI: ffffffffffffff9c
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R13: 00007ffdbcf7c64f R14: 00007f7202bc1300 R15: 0000000000022000
Modules linked in:
---[ end trace 34ee335b12e269a9 ]---
RIP: 0010:__fsnotify_parent+0xbc/0x310 fs/notify/fsnotify.c:155
Code: 08 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 28 4b eb ff 4d 8b 36 4c 89 6c 24 18 44 89 64 24 14 4c 89 f0 48 c1 e8 03 <8a> 04 18 84 c0 0f 85 04 02 00 00 45 8b 2e bb 00 40 00 00 be 00 40
RSP: 0018:ffff8881dea37d00 EFLAGS: 00010246
Code: 08 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 28 4b eb ff 4d 8b 36 4c 89 6c 24 18 44 89 64 24 14 4c 89 f0 48 c1 e8 03 <8a> 04 18 84 c0 0f 85 04 02 00 00 45 8b 2e bb 00 40 00 00 be 00 40
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8881e1863f00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881dea37e60
RBP: ffff8881dea37df0 R08: ffffffff81dde41d R09: ffffed103c744400
R10: ffffed103e4eae67 R11: 0000000000000000 R12: 0000000000000020
R13: ffff8881dea37e60 R14: 0000000000000000 R15: 1ffff1103bd46fa4
FS: 00007f7202bc1700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f570b7f8000 CR3: 00000001ed3b7000 CR4: 00000000001406e0
syzbot
Apr 20, 2023, 10:00:41 AM4/20/23
to syzkaller-a...@googlegroups.com
Auto-closing this bug as obsolete.
No recent activity, existing reproducers are no longer triggering the issue.
No recent activity, existing reproducers are no longer triggering the issue.
Reply all
Reply to author
Forward
0 new messages