syzbot


general protection fault in bd_set_size

Status: public: reported syz repro on 2019/04/12 00:01
Reported-by: syzbot+1af161f9dc37d795c196@syzkaller.appspotmail.com
First crash: 2276d, last: 2135d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in bd_set_size fs 8 2503d 2575d 0/28 auto-closed as invalid on 2019/02/22 10:29

Sample crash report:
random: cc1: uninitialized urandom read (8 bytes read)
audit: type=1400 audit(1545927440.299:10): avc:  denied  { map } for  pid=1827 comm="syz-execprog" path="/root/syzkaller-shm460908666" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN NOPTI
Modules linked in:
CPU: 0 PID: 6214 Comm: blkid Not tainted 4.14.90+ #29
task: ffff8881c5feaf00 task.stack: ffff8881c5640000
RIP: 0010:bdev_get_queue include/linux/blkdev.h:1015 [inline]
RIP: 0010:bdev_logical_block_size include/linux/blkdev.h:1451 [inline]
RIP: 0010:bd_set_size+0x58/0x320 fs/block_dev.c:1396
RSP: 0018:ffff8881c5647c78 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff11038bfd6e5
RDX: 00000000000000a7 RSI: 0000000000000000 RDI: 0000000000000538
RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffffabecab31
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881d53f6780
R13: ffff8881d53f6780 R14: ffff8881c72432c8 R15: ffff8881c72434a8
FS:  00007f3ec9021740(0000) GS:ffff8881dba00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000073c000 CR3: 00000001c69e4002 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 loop_clr_fd+0x465/0xac0 drivers/block/loop.c:1057
 __lo_release drivers/block/loop.c:1618 [inline]
 lo_release+0xfd/0x190 drivers/block/loop.c:1636
 __blkdev_put+0x526/0x6e0 fs/block_dev.c:1783
 blkdev_close+0x86/0xb0 fs/block_dev.c:1855
 __fput+0x25e/0x6f0 fs/file_table.c:210
 task_work_run+0x116/0x190 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 exit_to_usermode_loop+0x12e/0x150 arch/x86/entry/common.c:163
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:267 [inline]
 do_syscall_64+0x35d/0x4b0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x7f3ec89292b0
RSP: 002b:00007ffdc2ebba98 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3ec89292b0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000028 R09: 0000000001680000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001f8a030
R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005
Code: 03 80 3c 02 00 0f 85 a4 02 00 00 49 8b 9c 24 e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 38 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 70 02 00 00 4d 8d 6c 24 08 48 8b 9b 38 05 00 
RIP: bdev_get_queue include/linux/blkdev.h:1015 [inline] RSP: ffff8881c5647c78
RIP: bdev_logical_block_size include/linux/blkdev.h:1451 [inline] RSP: ffff8881c5647c78
RIP: bd_set_size+0x58/0x320 fs/block_dev.c:1396 RSP: ffff8881c5647c78
---[ end trace e81a8b7ee0bd5f63 ]---

Crashes (46):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/27 16:24 android-4.14 815e34f802d8 43cf01dd .config console log report syz ci-android-414-kasan-gce-root
2018/12/20 01:26 android-4.14 2eaa69bd84cf 02e69052 .config console log report syz ci-android-414-kasan-gce-root
2018/10/22 04:34 android-4.14 c556d1ffe528 ecb386fe .config console log report syz ci-android-414-kasan-gce-root
2018/10/08 04:58 android-4.14 d33692e8014d 8b311eaf .config console log report syz ci-android-414-kasan-gce-root
2019/01/19 19:03 android-4.14 5a76363f1262 8aa587b0 .config console log report ci-android-414-kasan-gce-root
2019/01/16 15:08 android-4.14 a10e61236fa2 d538790b .config console log report ci-android-414-kasan-gce-root
2019/01/15 14:42 android-4.14 8fccd8d9d51a 79cb1a7c .config console log report ci-android-414-kasan-gce-root
2019/01/10 21:04 android-4.14 2aee898fff5a db9b6579 .config console log report ci-android-414-kasan-gce-root
2019/01/02 18:53 android-4.14 7d2d5fc1acda f0491811 .config console log report ci-android-414-kasan-gce-root
2018/12/31 18:43 android-4.14 7d2d5fc1acda 2b42fdc8 .config console log report ci-android-414-kasan-gce-root
2018/12/31 11:54 android-4.14 7d2d5fc1acda 2b42fdc8 .config console log report ci-android-414-kasan-gce-root
2018/12/30 00:46 android-4.14 7d2d5fc1acda 35e3f847 .config console log report ci-android-414-kasan-gce-root
2018/12/15 06:39 android-4.14 4ee7197c44f6 7624ddd6 .config console log report ci-android-414-kasan-gce-root
2018/12/11 09:20 android-4.14 977dd3f743b7 4093e33b .config console log report ci-android-414-kasan-gce-root
2018/12/09 12:11 android-4.14 13b8d9fdf844 979179d6 .config console log report ci-android-414-kasan-gce-root
2018/12/08 12:32 android-4.14 049053b7aee6 60562a1d .config console log report ci-android-414-kasan-gce-root
2018/12/03 23:27 android-4.14 d11d7f1ccfb1 03f94a45 .config console log report ci-android-414-kasan-gce-root
2018/12/02 17:40 android-4.14 d11d7f1ccfb1 e0d8c853 .config console log report ci-android-414-kasan-gce-root
2018/11/28 15:21 android-4.14 f544ad0b1547 4b6d14f2 .config console log report ci-android-414-kasan-gce-root
2018/11/26 23:26 android-4.14 ea91d158d712 ac912200 .config console log report ci-android-414-kasan-gce-root
2018/11/25 23:41 android-4.14 ea91d158d712 3d3ec907 .config console log report ci-android-414-kasan-gce-root
2018/11/25 07:06 android-4.14 ea91d158d712 ecc7c870 .config console log report ci-android-414-kasan-gce-root
2018/11/23 13:44 android-4.14 ea91d158d712 2b0dc848 .config console log report ci-android-414-kasan-gce-root
2018/11/22 17:11 android-4.14 d8dce63b0484 2ee77802 .config console log report ci-android-414-kasan-gce-root
2018/11/20 18:51 android-4.14 4e76528bd48d 9aca6b52 .config console log report ci-android-414-kasan-gce-root
2018/11/16 04:52 android-4.14 4e76528bd48d 3a41052e .config console log report ci-android-414-kasan-gce-root
2018/11/15 03:40 android-4.14 4e76528bd48d 5f5f6d14 .config console log report ci-android-414-kasan-gce-root
2018/11/14 09:49 android-4.14 97c308ca4091 5f5f6d14 .config console log report ci-android-414-kasan-gce-root
2018/11/10 13:01 android-4.14 87485dbe777b f9815aaf .config console log report ci-android-414-kasan-gce-root
2018/11/06 16:54 android-4.14 d4e5dea08bbf 8bd6bd63 .config console log report ci-android-414-kasan-gce-root
2018/10/30 13:41 android-4.14 4ed22187defd 8dbb755a .config console log report ci-android-414-kasan-gce-root
2018/10/25 04:40 android-4.14 35a066ea5bf9 a8292de9 .config console log report ci-android-414-kasan-gce-root
2018/10/13 11:39 android-4.14 48091d94336e caf12900 .config console log report ci-android-414-kasan-gce-root
2018/10/10 17:17 android-4.14 d33692e8014d 5b11ac2c .config console log report ci-android-414-kasan-gce-root
2018/09/29 20:01 android-4.14 84ae3e35e1ce 41e4b329 .config console log report ci-android-414-kasan-gce-root
2018/09/28 10:52 android-4.14 56aae8ee7423 8bb1f0fc .config console log report ci-android-414-kasan-gce-root
2018/09/09 14:29 android-4.14 b859aa7d7a0c 6b5120a4 .config console log report ci-android-414-kasan-gce-root
2018/09/08 10:06 android-4.14 b859aa7d7a0c 6b5120a4 .config console log report ci-android-414-kasan-gce-root
2018/09/06 13:16 android-4.14 b859aa7d7a0c 0bb7a7eb .config console log report ci-android-414-kasan-gce-root
2018/09/05 11:15 android-4.14 36b4801b9aad 196410e4 .config console log report ci-android-414-kasan-gce-root
2018/09/03 11:56 android-4.14 47350a9f13c6 a4718693 .config console log report ci-android-414-kasan-gce-root
2018/09/02 05:09 android-4.14 47350a9f13c6 a4718693 .config console log report ci-android-414-kasan-gce-root
2018/09/01 21:38 android-4.14 47350a9f13c6 a4718693 .config console log report ci-android-414-kasan-gce-root
2018/08/31 18:02 android-4.14 47350a9f13c6 a4718693 .config console log report ci-android-414-kasan-gce-root
2018/08/31 14:08 android-4.14 47350a9f13c6 a4718693 .config console log report ci-android-414-kasan-gce-root
2018/08/31 09:47 android-4.14 47350a9f13c6 a4718693 .config console log report ci-android-414-kasan-gce-root
* Struck through repros no longer work on HEAD.