Re: BUG: unable to handle kernel NULL pointer dereference in do_syscall_32_irqs_on
Hello, On Sun, 2020-07-26 at 01:03 -0700, syzbot wrote: > Hello, > > syzbot found the following issue on: > > HEAD commit:23ee3e4e Merge tag 'pci-v5.8-fixes-2' of > git://git.kernel... > git tree: upstream > console output: > https://syzkaller.appspot.com/x/log.txt?x=14a4c7d890 > kernel config: > https://syzkaller.appspot.com/x/.config?x=f87a5e4232fdb267 > dashboard link: > https://syzkaller.appspot.com/bug?extid=0e3a50ab9ac2fdf9ffc6 > compiler: gcc (GCC) 10.1.0-syz 20200507 > userspace arch: i386 > syz repro: > https://syzkaller.appspot.com/x/repro.syz?x=168fe3a090 > > IMPORTANT: if you fix the issue, please add the following tag to the > commit: > Reported-by: syzbot+0e3a50ab9ac2fdf9f...@syzkaller.appspotmail.com > > BUG: kernel NULL pointer dereference, address: > #PF: supervisor write access in kernel mode > #PF: error_code(0x0002) - not-present page > PGD 94d49067 P4D 94d49067 PUD a1c93067 PMD 0 > Oops: 0002 [#1] PREEMPT SMP KASAN > CPU: 0 PID: 6854 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller > #0 > Hardware name: Google Google Compute Engine/Google Compute Engine, > BIOS Google 01/01/2011 > RIP: 0010:do_syscall_32_irqs_on+0x3f/0x60 arch/x86/entry/common.c:428 > Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 > 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> > 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 > RSP: 0018:c900017b7f28 EFLAGS: 00010296 > RAX: RBX: c900017b7f58 RCX: 1920002f6fd2 > RDX: 888098bb4240 RSI: 81c214b2 RDI: 0005 > RBP: c900017b7f58 R08: 0001 R09: 888098bb4b08 > R10: ff8c R11: R12: 0001 > R13: R14: R15: > FS: () GS:8880ae60(0063) > knlGS:0a292900 > CS: 0010 DS: 002b ES: 002b CR0: 80050033 > CR2: CR3: a1b88000 CR4: 001406f0 > DR0: DR1: DR2: > DR3: DR6: fffe0ff0 DR7: 0400 > Call Trace: > __do_fast_syscall_32 arch/x86/entry/common.c:475 [inline] > do_fast_syscall_32+0x7f/0x120 arch/x86/entry/common.c:503 > entry_SYSENTER_compat_after_hwframe+0x4d/0x5c > BUG: kernel NULL pointer dereference, address: > #PF: supervisor write access in kernel mode > #PF: error_code(0x0002) - not-present page > PGD 94d49067 P4D 94d49067 PUD a1c93067 PMD 0 > Oops: 0002 [#2] PREEMPT SMP KASAN > CPU: 0 PID: 6854 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller > #0 > Hardware name: Google Google Compute Engine/Google Compute Engine, > BIOS Google 01/01/2011 > RIP: 0010:in_gate_area_no_mm+0x0/0x6a > arch/x86/entry/vsyscall/vsyscall_64.c:343 > Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 > 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> > 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 > RSP: 0018:c900017b7440 EFLAGS: 00010093 > RAX: RBX: c900017b74e0 RCX: 816a62f0 > RDX: 888098bb4240 RSI: 816a631b RDI: f7f83569 > RBP: f7f83569 R08: c900017b75f0 R09: 8c8d7109 > R10: f7f83569 R11: R12: c900017b75f0 > R13: 0001 R14: f7f83569 R15: c900017b7500 > FS: () GS:8880ae60(0063) > knlGS:0a292900 > CS: 0010 DS: 002b ES: 002b CR0: 80050033 > CR2: CR3: a1b88000 CR4: 001406f0 > DR0: DR1: DR2: > DR3: DR6: fffe0ff0 DR7: 0400 > Call Trace: > is_kernel include/linux/kallsyms.h:44 [inline] > is_ksym_addr include/linux/kallsyms.h:50 [inline] > kallsyms_lookup+0xc3/0x2e0 kernel/kallsyms.c:290 > __sprint_symbol+0x9c/0x1c0 kernel/kallsyms.c:363 > symbol_string+0x14c/0x370 lib/vsprintf.c:969 > pointer+0x185/0x970 lib/vsprintf.c:2226 > vsnprintf+0x5b2/0x14f0 lib/vsprintf.c:2624 > vscnprintf+0x29/0x80 lib/vsprintf.c:2723 > vprintk_store+0x44/0x4a0 kernel/printk/printk.c:1942 > vprintk_emit+0x139/0x770 kernel/printk/printk.c:2003 > vprintk_func+0x8f/0x1a6 kernel/printk/printk_safe.c:393 > printk+0xba/0xed kernel/printk/printk.c:2070 > show_ip+0x22/0x30 arch/x86/kernel/dumpstack.c:124 > show_iret_regs+0x10/0x32 arch/x86/kernel/dumpstack.c:131 > __show_regs+0x18/0x50 arch/x86/kernel/process_64.c:72 > show_trace_log_lvl+0x255/0x2b4 arch/x86/kernel/dumpstack.c:274 > show_regs arch/x86/kernel/dumpstack.c:447 [inline] > __die_body arch/x86/kernel/dumpstack.c:393 [inline] > __die+0x51/0x90 arch/x86/kernel/dumpstack.c:407 > no_context+0x56b/0x9f0 arch/x86/mm/fault.c:695 > __bad_area_nosemaphore+0xa9/0x480 arch/x86/mm/fault.c:789 > do_user_addr_fault+0x8ce/0xd00 arch/x86/mm/fault.c:1258 > handle_page_fault
BUG: unable to handle kernel NULL pointer dereference in do_syscall_32_irqs_on
Hello, syzbot found the following issue on: HEAD commit:23ee3e4e Merge tag 'pci-v5.8-fixes-2' of git://git.kernel... git tree: upstream console output: https://syzkaller.appspot.com/x/log.txt?x=14a4c7d890 kernel config: https://syzkaller.appspot.com/x/.config?x=f87a5e4232fdb267 dashboard link: https://syzkaller.appspot.com/bug?extid=0e3a50ab9ac2fdf9ffc6 compiler: gcc (GCC) 10.1.0-syz 20200507 userspace arch: i386 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=168fe3a090 IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+0e3a50ab9ac2fdf9f...@syzkaller.appspotmail.com BUG: kernel NULL pointer dereference, address: #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 94d49067 P4D 94d49067 PUD a1c93067 PMD 0 Oops: 0002 [#1] PREEMPT SMP KASAN CPU: 0 PID: 6854 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:do_syscall_32_irqs_on+0x3f/0x60 arch/x86/entry/common.c:428 Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 RSP: 0018:c900017b7f28 EFLAGS: 00010296 RAX: RBX: c900017b7f58 RCX: 1920002f6fd2 RDX: 888098bb4240 RSI: 81c214b2 RDI: 0005 RBP: c900017b7f58 R08: 0001 R09: 888098bb4b08 R10: ff8c R11: R12: 0001 R13: R14: R15: FS: () GS:8880ae60(0063) knlGS:0a292900 CS: 0010 DS: 002b ES: 002b CR0: 80050033 CR2: CR3: a1b88000 CR4: 001406f0 DR0: DR1: DR2: DR3: DR6: fffe0ff0 DR7: 0400 Call Trace: __do_fast_syscall_32 arch/x86/entry/common.c:475 [inline] do_fast_syscall_32+0x7f/0x120 arch/x86/entry/common.c:503 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c BUG: kernel NULL pointer dereference, address: #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 94d49067 P4D 94d49067 PUD a1c93067 PMD 0 Oops: 0002 [#2] PREEMPT SMP KASAN CPU: 0 PID: 6854 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:in_gate_area_no_mm+0x0/0x6a arch/x86/entry/vsyscall/vsyscall_64.c:343 Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 RSP: 0018:c900017b7440 EFLAGS: 00010093 RAX: RBX: c900017b74e0 RCX: 816a62f0 RDX: 888098bb4240 RSI: 816a631b RDI: f7f83569 RBP: f7f83569 R08: c900017b75f0 R09: 8c8d7109 R10: f7f83569 R11: R12: c900017b75f0 R13: 0001 R14: f7f83569 R15: c900017b7500 FS: () GS:8880ae60(0063) knlGS:0a292900 CS: 0010 DS: 002b ES: 002b CR0: 80050033 CR2: CR3: a1b88000 CR4: 001406f0 DR0: DR1: DR2: DR3: DR6: fffe0ff0 DR7: 0400 Call Trace: is_kernel include/linux/kallsyms.h:44 [inline] is_ksym_addr include/linux/kallsyms.h:50 [inline] kallsyms_lookup+0xc3/0x2e0 kernel/kallsyms.c:290 __sprint_symbol+0x9c/0x1c0 kernel/kallsyms.c:363 symbol_string+0x14c/0x370 lib/vsprintf.c:969 pointer+0x185/0x970 lib/vsprintf.c:2226 vsnprintf+0x5b2/0x14f0 lib/vsprintf.c:2624 vscnprintf+0x29/0x80 lib/vsprintf.c:2723 vprintk_store+0x44/0x4a0 kernel/printk/printk.c:1942 vprintk_emit+0x139/0x770 kernel/printk/printk.c:2003 vprintk_func+0x8f/0x1a6 kernel/printk/printk_safe.c:393 printk+0xba/0xed kernel/printk/printk.c:2070 show_ip+0x22/0x30 arch/x86/kernel/dumpstack.c:124 show_iret_regs+0x10/0x32 arch/x86/kernel/dumpstack.c:131 __show_regs+0x18/0x50 arch/x86/kernel/process_64.c:72 show_trace_log_lvl+0x255/0x2b4 arch/x86/kernel/dumpstack.c:274 show_regs arch/x86/kernel/dumpstack.c:447 [inline] __die_body arch/x86/kernel/dumpstack.c:393 [inline] __die+0x51/0x90 arch/x86/kernel/dumpstack.c:407 no_context+0x56b/0x9f0 arch/x86/mm/fault.c:695 __bad_area_nosemaphore+0xa9/0x480 arch/x86/mm/fault.c:789 do_user_addr_fault+0x8ce/0xd00 arch/x86/mm/fault.c:1258 handle_page_fault arch/x86/mm/fault.c:1365 [inline] exc_page_fault+0xab/0x170 arch/x86/mm/fault.c:1418 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:542 RIP: 0010:do_syscall_32_irqs_on+0x3f/0x60 arch/x86/entry/common.c:428 Code: 00 00 00 00 00 00 00 00 00 00
