syzbot


Internal error in copy_from_kernel_nofault

Status: upstream: reported C repro on 2025/08/09 00:00
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+87280fbdce4b4b86260d@syzkaller.appspotmail.com
First crash: 20d, last: 19h10m
Bug presence (2)
Date Name Commit Repro Result
2025/08/13 linux-5.15.y (ToT) c79648372d02 C [report] Internal error in copy_from_kernel_nofault
2025/08/13 upstream (ToT) 8742b2d8935f C Didn't crash
Similar bugs (8)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: out-of-bounds Write in copy_from_kernel_nofault mm 23 1 372d 372d 0/29 closed as invalid on 2024/09/13 11:13
upstream BUG: unable to handle kernel paging request in copy_from_kernel_nofault (2) mm 8 C 2 503d 513d 25/29 fixed on 2024/05/22 23:36
upstream BUG: unable to handle kernel paging request in copy_from_kernel_nofault mm 8 C done 5 549d 648d 25/29 fixed on 2024/03/29 01:33
upstream KASAN: out-of-bounds Read in copy_from_kernel_nofault mm 17 C done 1628 156d 332d 28/29 fixed on 2025/05/06 15:33
linux-5.15 BUG: unable to handle kernel paging request in copy_from_kernel_nofault origin:upstream 8 C done 2 549d 652d 3/3 fixed on 2024/03/28 13:37
linux-6.1 KASAN: stack-out-of-bounds Write in copy_from_kernel_nofault origin:lts-only 23 C unreliable 3 549d 879d 0/3 upstream: reported C repro on 2023/04/02 16:05
android-5-15 BUG: unable to handle kernel paging request in copy_from_kernel_nofault missing-backport 8 C done 231 382d 652d 0/2 auto-obsoleted due to no activity on 2024/10/20 13:25
android-6-1 BUG: unable to handle kernel paging request in copy_from_kernel_nofault origin:upstream missing-backport 8 C done inconclusive 127 435d 652d 0/2 auto-obsoleted due to no activity on 2024/08/28 01:00

Sample crash report:
Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4219 Comm: syz.0.17 Not tainted 5.15.189-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 62400405 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc)
pc : copy_from_kernel_nofault+0x134/0x330 mm/maccess.c:39
lr : copy_from_kernel_nofault+0x10c/0x330 mm/maccess.c:39
sp : ffff80001fe17760
x29: ffff80001fe17760 x28: 0000000000000004 x27: dfff800000000000
x26: 1fffe00019c0c611 x25: 00000000fffffff2 x24: ffff80001fe17840
x23: 0000000000000000 x22: 0000000000000000 x21: ffffffff860bffff
x20: ffff80001fe17844 x19: ffff0000ce063088 x18: 0000000000000002
x17: 0000000000000000 x16: ffff800008683e84 x15: 0000000000000036
x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000ff0100
x11: 0000000000000002 x10: 0000000000000000 x9 : 1ffff00003fc2f08
x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000058587025
x5 : ffff80001fe17865 x4 : ffff800013919d84 x3 : ffff800008587df4
x2 : 0000000000000004 x1 : 0000000000000004 x0 : 0000000000000003
Call trace:
 copy_from_kernel_nofault+0x134/0x330 mm/maccess.c:39
 bpf_bprintf_prepare+0xc60/0x119c kernel/bpf/helpers.c:885
 ____bpf_snprintf kernel/bpf/helpers.c:1011 [inline]
 bpf_snprintf+0xcc/0x14c kernel/bpf/helpers.c:995
 bpf_prog_f2f741945f01d4c6+0x78/0x808
 bpf_dispatcher_nop_func include/linux/bpf.h:790 [inline]
 __bpf_prog_run include/linux/filter.h:628 [inline]
 bpf_prog_run include/linux/filter.h:635 [inline]
 bpf_prog_run_pin_on_cpu include/linux/filter.h:652 [inline]
 bpf_flow_dissect+0x100/0x408 net/core/flow_dissector.c:896
 bpf_prog_test_run_flow_dissector+0x330/0x4c4 net/bpf/test_run.c:907
 bpf_prog_test_run+0x2e0/0x374 kernel/bpf/syscall.c:3368
 __sys_bpf+0x4ac/0x5f0 kernel/bpf/syscall.c:4669
 __do_sys_bpf kernel/bpf/syscall.c:4755 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:4753 [inline]
 __arm64_sys_bpf+0x80/0x98 kernel/bpf/syscall.c:4753
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: d343ff09 2a1703f9 12000b0a b94002a8 (11000d4a) 
---[ end trace bbe2110391fedf53 ]---
----------------
Code disassembly (best guess):
   0:	d343ff09 	lsr	x9, x24, #3
   4:	2a1703f9 	mov	w25, w23
   8:	12000b0a 	and	w10, w24, #0x7
   c:	b94002a8 	ldr	w8, [x21]
* 10:	11000d4a 	add	w10, w10, #0x3 <-- trapping instruction

Crashes (33):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/08/11 16:14 linux-5.15.y c79648372d02 32a0e5ed .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/28 05:27 linux-5.15.y c79648372d02 e12e5ba4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/28 05:25 linux-5.15.y c79648372d02 e12e5ba4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/28 05:25 linux-5.15.y c79648372d02 e12e5ba4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/25 08:00 linux-5.15.y c79648372d02 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/24 04:44 linux-5.15.y c79648372d02 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/24 04:44 linux-5.15.y c79648372d02 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/24 04:43 linux-5.15.y c79648372d02 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/24 04:43 linux-5.15.y c79648372d02 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/24 04:42 linux-5.15.y c79648372d02 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/21 02:50 linux-5.15.y c79648372d02 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/21 02:49 linux-5.15.y c79648372d02 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/17 16:19 linux-5.15.y c79648372d02 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/17 16:18 linux-5.15.y c79648372d02 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/14 05:37 linux-5.15.y c79648372d02 22ec1469 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/14 05:36 linux-5.15.y c79648372d02 22ec1469 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/14 05:35 linux-5.15.y c79648372d02 22ec1469 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/09 13:02 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/09 12:58 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/09 12:39 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/09 07:47 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/09 07:45 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/09 07:44 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/09 07:25 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/09 07:24 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/08 22:06 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/08 22:04 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/08 21:55 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/08 21:55 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/08 20:55 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/08 20:54 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/08 20:53 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
2025/08/08 20:52 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 Internal error in copy_from_kernel_nofault
* Struck through repros no longer work on HEAD.