general protection fault in do_syscall_64 (2)
10 views
Skip to first unread message
syzbot
Sep 26, 2020, 8:52:16 AM9/26/20
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: d09b8017 Linux 4.19.147
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1799fa87900000
kernel config: https://syzkaller.appspot.com/x/.config?x=1d6e3516b2a7476c
dashboard link: https://syzkaller.appspot.com/bug?extid=1b145eddc8ee597b8c4a
compiler: gcc (GCC) 10.1.0-syz 20200507
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1b145e...@syzkaller.appspotmail.com
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 12611 Comm: syz-executor.5 Not tainted 4.19.147-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:317 [inline]
RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline]
RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline]
RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline]
RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
RIP: 0010:do_syscall_64+0x218/0x670 arch/x86/entry/common.c:296
Code: ce 1c 71 00 fa 66 0f 1f 44 00 00 65 48 8b 1c 25 40 ee 01 00 e8 29 9b 76 00 48 89 da 48 b8 00 00 00 00 00 00 00 00 48 c1 ea 03 <80> 3c 02 00 0f 85 d3 03 00 00 4c 8b 23 31 ff 49 c1 ec 1f 41 83 e4
RSP: 0018:ffff88804c587f28 EFLAGS: 00010806
RAX: 0000000000000000 RBX: ffff88804d064480 RCX: 0000000000000000
RDX: 1ffff11009a0c890 RSI: 0000000000000000 RDI: ffff88804d064ccc
RBP: ffff88804c587f58 R08: 000000001a402a47 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff896389b8 R14: 0000000000000000 R15: 0000000000000000
FS: 000000000173f940(0000) GS:ffff8880ae200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000749698 CR3: 000000009a12e000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x460fba
Code: 25 18 00 00 00 00 74 01 f0 48 0f b1 3d af a6 24 01 48 39 c2 75 da f3 c3 0f 1f 84 00 00 00 00 00 48 63 ff b8 e4 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 f3 c3 0f 1f 40 00 48 c7 c2 d4 ff ff ff f7
RSP: 002b:00007fff81ca7f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4
RAX: 0000000000000000 RBX: 0000000000057cfe RCX: 0000000000460fba
RDX: 0000000000000000 RSI: 00007fff81ca7f50 RDI: 0000000000000001
RBP: 0000000000000001 R08: 00000000ba1ad6dd R09: 00000000ba1ad6e1
R10: 00007fff81ca8060 R11: 0000000000000246 R12: 000000000118d9c0
R13: 000000000118d9c0 R14: ffffffffffffffff R15: 000000000118cff4
Modules linked in:
---[ end trace dce3b25caefc5948 ]---
RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:317 [inline]
RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline]
RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline]
RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline]
RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
RIP: 0010:do_syscall_64+0x218/0x670 arch/x86/entry/common.c:296
Code: ce 1c 71 00 fa 66 0f 1f 44 00 00 65 48 8b 1c 25 40 ee 01 00 e8 29 9b 76 00 48 89 da 48 b8 00 00 00 00 00 00 00 00 48 c1 ea 03 <80> 3c 02 00 0f 85 d3 03 00 00 4c 8b 23 31 ff 49 c1 ec 1f 41 83 e4
RSP: 0018:ffff88804c587f28 EFLAGS: 00010806
RAX: 0000000000000000 RBX: ffff88804d064480 RCX: 0000000000000000
RDX: 1ffff11009a0c890 RSI: 0000000000000000 RDI: ffff88804d064ccc
RBP: ffff88804c587f58 R08: 000000001a402a47 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff896389b8 R14: 0000000000000000 R15: 0000000000000000
FS: 000000000173f940(0000) GS:ffff8880ae200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000749698 CR3: 000000009a12e000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: d09b8017 Linux 4.19.147
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1799fa87900000
kernel config: https://syzkaller.appspot.com/x/.config?x=1d6e3516b2a7476c
dashboard link: https://syzkaller.appspot.com/bug?extid=1b145eddc8ee597b8c4a
compiler: gcc (GCC) 10.1.0-syz 20200507
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1b145e...@syzkaller.appspotmail.com
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 12611 Comm: syz-executor.5 Not tainted 4.19.147-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:317 [inline]
RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline]
RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline]
RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline]
RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
RIP: 0010:do_syscall_64+0x218/0x670 arch/x86/entry/common.c:296
Code: ce 1c 71 00 fa 66 0f 1f 44 00 00 65 48 8b 1c 25 40 ee 01 00 e8 29 9b 76 00 48 89 da 48 b8 00 00 00 00 00 00 00 00 48 c1 ea 03 <80> 3c 02 00 0f 85 d3 03 00 00 4c 8b 23 31 ff 49 c1 ec 1f 41 83 e4
RSP: 0018:ffff88804c587f28 EFLAGS: 00010806
RAX: 0000000000000000 RBX: ffff88804d064480 RCX: 0000000000000000
RDX: 1ffff11009a0c890 RSI: 0000000000000000 RDI: ffff88804d064ccc
RBP: ffff88804c587f58 R08: 000000001a402a47 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff896389b8 R14: 0000000000000000 R15: 0000000000000000
FS: 000000000173f940(0000) GS:ffff8880ae200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000749698 CR3: 000000009a12e000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x460fba
Code: 25 18 00 00 00 00 74 01 f0 48 0f b1 3d af a6 24 01 48 39 c2 75 da f3 c3 0f 1f 84 00 00 00 00 00 48 63 ff b8 e4 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 f3 c3 0f 1f 40 00 48 c7 c2 d4 ff ff ff f7
RSP: 002b:00007fff81ca7f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4
RAX: 0000000000000000 RBX: 0000000000057cfe RCX: 0000000000460fba
RDX: 0000000000000000 RSI: 00007fff81ca7f50 RDI: 0000000000000001
RBP: 0000000000000001 R08: 00000000ba1ad6dd R09: 00000000ba1ad6e1
R10: 00007fff81ca8060 R11: 0000000000000246 R12: 000000000118d9c0
R13: 000000000118d9c0 R14: ffffffffffffffff R15: 000000000118cff4
Modules linked in:
---[ end trace dce3b25caefc5948 ]---
RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:317 [inline]
RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline]
RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline]
RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline]
RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
RIP: 0010:do_syscall_64+0x218/0x670 arch/x86/entry/common.c:296
Code: ce 1c 71 00 fa 66 0f 1f 44 00 00 65 48 8b 1c 25 40 ee 01 00 e8 29 9b 76 00 48 89 da 48 b8 00 00 00 00 00 00 00 00 48 c1 ea 03 <80> 3c 02 00 0f 85 d3 03 00 00 4c 8b 23 31 ff 49 c1 ec 1f 41 83 e4
RSP: 0018:ffff88804c587f28 EFLAGS: 00010806
RAX: 0000000000000000 RBX: ffff88804d064480 RCX: 0000000000000000
RDX: 1ffff11009a0c890 RSI: 0000000000000000 RDI: ffff88804d064ccc
RBP: ffff88804c587f58 R08: 000000001a402a47 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff896389b8 R14: 0000000000000000 R15: 0000000000000000
FS: 000000000173f940(0000) GS:ffff8880ae200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000749698 CR3: 000000009a12e000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Sep 26, 2020, 12:20:17 PM9/26/20
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: d09b8017 Linux 4.19.147
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=12e0fe4b900000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1b145e...@syzkaller.appspotmail.com
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
Bluetooth: hci0: command 0x0409 tx timeout
RAX: 0000000000000000 RBX: ffff8880a4296200 RCX: 0000000000000000
RDX: 1ffff11014852c40 RSI: 0000000000000000 RDI: ffff8880a4296a4c
RBP: ffff8880890fff58 R08: 0000000000000000 R09: 0000000000000000
Code: 75 14 b8 23 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 cd fb ff c3 48 83 ec 08 e8 ea 46 00 00 48 89 04 24 b8 23 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 47 00 00 48 89 d0 48 83 c4 08 48 3d 01
RSP: 002b:00007ffda5a15380 EFLAGS: 00000293 ORIG_RAX: 0000000000000023
RAX: 0000000000000000 RBX: 000000000003a654 RCX: 000000000045c641
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffda5a15390
RBP: 000000000000002b R08: 0000000000000000 R09: 00000000029f5940
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
R13: 00007ffda5a153e0 R14: 000000000003a620 R15: 00007ffda5a153f0
Modules linked in:
---[ end trace 584c556a8429ef7d ]---
general protection fault: 0000 [#2] PREEMPT SMP KASAN
RSP: 0018:ffff88809e9aff28 EFLAGS: 00010802
RBP: ffff8880890fff58 R08: 0000000000000000 R09: 0000000000000000
RAX: 0000000000000000 RBX: ffff88809dcf8700 RCX: 1ffffffff142e4f8
FS: 00000000029f5940(0000) GS:ffff8880ae200000(0000) knlGS:0000000000000000
R10: 0000000000000005 R11: 0000000000000001 R12: 0000000000000000
CR2: 00000000004ebb70 CR3: 000000008bec8000 CR4: 00000000001406f0
HEAD commit: d09b8017 Linux 4.19.147
git tree: linux-4.19.y
kernel config: https://syzkaller.appspot.com/x/.config?x=1d6e3516b2a7476c
dashboard link: https://syzkaller.appspot.com/bug?extid=1b145eddc8ee597b8c4a
compiler: gcc (GCC) 10.1.0-syz 20200507
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=116fc517900000
dashboard link: https://syzkaller.appspot.com/bug?extid=1b145eddc8ee597b8c4a
compiler: gcc (GCC) 10.1.0-syz 20200507
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1b145e...@syzkaller.appspotmail.com
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
Bluetooth: hci0: command 0x0409 tx timeout
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 6496 Comm: syz-executor.0 Not tainted 4.19.147-syzkaller #0
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
kasan: CONFIG_KASAN_INLINE enabled
RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:317 [inline]
RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline]
RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline]
RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline]
RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
RIP: 0010:do_syscall_64+0x218/0x670 arch/x86/entry/common.c:296
RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline]
RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline]
RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline]
RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
RIP: 0010:do_syscall_64+0x218/0x670 arch/x86/entry/common.c:296
kasan: GPF could be caused by NULL-ptr deref or user memory access
Code: ce 1c 71 00 fa 66 0f 1f 44 00 00 65 48 8b 1c 25 40 ee 01 00 e8 29 9b 76 00 48 89 da 48 b8 00 00 00 00 00 00 00 00 48 c1 ea 03 <80> 3c 02 00 0f 85 d3 03 00 00 4c 8b 23 31 ff 49 c1 ec 1f 41 83 e4
RSP: 0018:ffff8880890fff28 EFLAGS: 00010802
RAX: 0000000000000000 RBX: ffff8880a4296200 RCX: 0000000000000000
RDX: 1ffff11014852c40 RSI: 0000000000000000 RDI: ffff8880a4296a4c
RBP: ffff8880890fff58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff896389b8 R14: 0000000000000000 R15: 0000000000000000
FS: 00000000029f5940(0000) GS:ffff8880ae200000(0000) knlGS:0000000000000000
R13: ffffffff896389b8 R14: 0000000000000000 R15: 0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004ebb70 CR3: 000000008bec8000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c641
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 75 14 b8 23 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 cd fb ff c3 48 83 ec 08 e8 ea 46 00 00 48 89 04 24 b8 23 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 47 00 00 48 89 d0 48 83 c4 08 48 3d 01
RSP: 002b:00007ffda5a15380 EFLAGS: 00000293 ORIG_RAX: 0000000000000023
RAX: 0000000000000000 RBX: 000000000003a654 RCX: 000000000045c641
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffda5a15390
RBP: 000000000000002b R08: 0000000000000000 R09: 00000000029f5940
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
R13: 00007ffda5a153e0 R14: 000000000003a620 R15: 00007ffda5a153f0
Modules linked in:
---[ end trace 584c556a8429ef7d ]---
general protection fault: 0000 [#2] PREEMPT SMP KASAN
RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:317 [inline]
RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline]
RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline]
RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline]
RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
RIP: 0010:do_syscall_64+0x218/0x670 arch/x86/entry/common.c:296
CPU: 1 PID: 6807 Comm: syz-executor.0 Tainted: G D 4.19.147-syzkaller #0
RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline]
RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline]
RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline]
RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
RIP: 0010:do_syscall_64+0x218/0x670 arch/x86/entry/common.c:296
Code: ce 1c 71 00 fa 66 0f 1f 44 00 00 65 48 8b 1c 25 40 ee 01 00 e8 29 9b 76 00 48 89 da 48 b8 00 00 00 00 00 00 00 00 48 c1 ea 03 <80> 3c 02 00 0f 85 d3 03 00 00 4c 8b 23 31 ff 49 c1 ec 1f 41 83 e4
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RSP: 0018:ffff8880890fff28 EFLAGS: 00010802
RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:317 [inline]
RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline]
RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline]
RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline]
RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
RIP: 0010:do_syscall_64+0x218/0x670 arch/x86/entry/common.c:296
RAX: 0000000000000000 RBX: ffff8880a4296200 RCX: 0000000000000000
RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline]
RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline]
RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline]
RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
RIP: 0010:do_syscall_64+0x218/0x670 arch/x86/entry/common.c:296
Code: ce 1c 71 00 fa 66 0f 1f 44 00 00 65 48 8b 1c 25 40 ee 01 00 e8 29 9b 76 00 48 89 da 48 b8 00 00 00 00 00 00 00 00 48 c1 ea 03 <80> 3c 02 00 0f 85 d3 03 00 00 4c 8b 23 31 ff 49 c1 ec 1f 41 83 e4
RDX: 1ffff11014852c40 RSI: 0000000000000000 RDI: ffff8880a4296a4c
RSP: 0018:ffff88809e9aff28 EFLAGS: 00010802
RBP: ffff8880890fff58 R08: 0000000000000000 R09: 0000000000000000
RAX: 0000000000000000 RBX: ffff88809dcf8700 RCX: 1ffffffff142e4f8
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
RDX: 1ffff11013b9f0e0 RSI: ffffffff817741b4 RDI: 0000000000000000
R13: ffffffff896389b8 R14: 0000000000000000 R15: 0000000000000000
RBP: ffff88809e9aff58 R08: 0000000000000000 R09: 0000000000000000
FS: 00000000029f5940(0000) GS:ffff8880ae200000(0000) knlGS:0000000000000000
R10: 0000000000000005 R11: 0000000000000001 R12: 0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
R13: ffffffff896389b8 R14: 0000000000000000 R15: 0000000000000000
FS: 00000000029f5940(0000) GS:ffff8880ae300000(0000) knlGS:0000000000000000
CR2: 00000000004ebb70 CR3: 000000008bec8000 CR4: 00000000001406f0
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
CR2: 00007f29896fddb8 CR3: 000000008f7ff000 CR4: 00000000001406e0
syzbot
Sep 24, 2021, 6:56:05 PM9/24/21
to syzkaller...@googlegroups.com
syzbot suspects this issue was fixed by commit:
commit 6be10fb6c143608a7c7ab3901a096e272233bf64
Author: George Kennedy <george....@oracle.com>
Date: Tue Jul 7 19:26:03 2020 +0000
fbmem: add margin check to fb_check_caps()
bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=14565c6b300000
start commit: d09b80172c22 Linux 4.19.147
git tree: linux-4.19.y
If the result looks correct, please mark the issue as fixed by replying with:
#syz fix: fbmem: add margin check to fb_check_caps()
For information about bisection process see: https://goo.gl/tpsmEJ#bisection
commit 6be10fb6c143608a7c7ab3901a096e272233bf64
Author: George Kennedy <george....@oracle.com>
Date: Tue Jul 7 19:26:03 2020 +0000
fbmem: add margin check to fb_check_caps()
bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=14565c6b300000
start commit: d09b80172c22 Linux 4.19.147
git tree: linux-4.19.y
kernel config: https://syzkaller.appspot.com/x/.config?x=1d6e3516b2a7476c
dashboard link: https://syzkaller.appspot.com/bug?extid=1b145eddc8ee597b8c4a
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=116fc517900000
dashboard link: https://syzkaller.appspot.com/bug?extid=1b145eddc8ee597b8c4a
If the result looks correct, please mark the issue as fixed by replying with:
#syz fix: fbmem: add margin check to fb_check_caps()
For information about bisection process see: https://goo.gl/tpsmEJ#bisection
Reply all
Reply to author
Forward
0 new messages