syzbot

 sign-in | mailing list | source | docs
🐞 Open [717]
🐞 Fixed [181]
🐞 Invalid [640]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

general protection fault in rb_erase

Status: upstream: reported C repro on 2019/04/11 11:41
Reported-by: syzbot+270547c5f86519663819@syzkaller.appspotmail.com
First crash: 2081d, last: 1560d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in rb_erase (2) kernel syz done 4 1971d 2179d 12/28 fixed on 2019/08/27 17:15
upstream general protection fault in rb_erase (3) kernfs 1 1628d 1624d 0/28 auto-closed as invalid on 2020/09/05 07:17
upstream general protection fault in rb_erase integrity lsm C 79836 2237d 2278d 11/28 fixed on 2018/11/12 21:25
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2023/02/03 09:32 10m retest repro linux-4.14.y report log
2023/02/03 08:32 9m retest repro linux-4.14.y report log
2023/02/03 07:32 15m retest repro linux-4.14.y report log
2023/02/03 06:32 10m retest repro linux-4.14.y report log
2023/02/03 05:32 9m retest repro linux-4.14.y report log
2023/02/03 04:32 12m retest repro linux-4.14.y report log
2023/02/03 03:32 13m retest repro linux-4.14.y report log
2023/02/03 02:32 12m retest repro linux-4.14.y report log
2023/02/03 01:32 14m retest repro linux-4.14.y report log
2023/02/03 00:32 12m retest repro linux-4.14.y report log

Sample crash report:
audit: type=1400 audit(1598467681.155:8): avc:  denied  { execmem } for  pid=6348 comm="syz-executor659" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 6348 Comm: syz-executor659 Not tainted 4.14.195-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff88809ef20600 task.stack: ffff888098270000
RIP: 0010:__rb_erase_augmented include/linux/rbtree_augmented.h:167 [inline]
RIP: 0010:rb_erase+0x29/0x1290 lib/rbtree.c:459
RSP: 0018:ffff888098277a68 EFLAGS: 00010292
RAX: dffffc0000000000 RBX: ffff888089abd1f0 RCX: 1ffff1101304ef27
RDX: 0000000000000001 RSI: ffffffff8a677fa0 RDI: 0000000000000008
RBP: 0000000000000000 R08: ffffffff8a1140fc R09: 0000000000001e68
R10: 0000000000000001 R11: ffff88809ef20600 R12: 0000000000000000
R13: dffffc0000000000 R14: ffff888089abf3f8 R15: ffffffff8a677fa0
FS:  0000000002455880(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000100 CR3: 00000000a785d000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 integrity_inode_free+0x119/0x300 security/integrity/iint.c:146
 security_inode_free+0x14/0x80 security/security.c:443
 __destroy_inode+0x1e8/0x4d0 fs/inode.c:238
 destroy_inode+0x49/0x110 fs/inode.c:265
 iput_final fs/inode.c:1524 [inline]
 iput+0x458/0x7e0 fs/inode.c:1551
 swap_inode_boot_loader fs/ext4/ioctl.c:197 [inline]
 ext4_ioctl+0x16c5/0x3870 fs/ext4/ioctl.c:924
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x440239
RSP: 002b:00007ffe8899af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440239
RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a40
R13: 0000000000401ad0 R14: 0000000000000000 R15: 0000000000000000
Code: ff ff 48 b8 00 00 00 00 00 fc ff df 41 57 49 89 f7 41 56 41 55 41 54 49 89 fc 48 83 c7 08 48 89 fa 55 48 c1 ea 03 53 48 83 ec 18 <80> 3c 02 00 0f 85 f2 0c 00 00 49 8d 7c 24 10 4d 8b 74 24 08 48 
RIP: __rb_erase_augmented include/linux/rbtree_augmented.h:167 [inline] RSP: ffff888098277a68
RIP: rb_erase+0x29/0x1290 lib/rbtree.c:459 RSP: ffff888098277a68
---[ end trace 2feb962b3695b994 ]---

Crashes (34042):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/26 18:49 linux-4.14.y d7e78d08fa77 318430cb .config console log report syz C ci2-linux-4-14
2020/08/24 22:11 linux-4.14.y 6a24ca2506d6 67b599d1 .config console log report syz C ci2-linux-4-14
2020/06/17 19:04 linux-4.14.y b850307b279c b6c46f43 .config console log report syz C ci2-linux-4-14
2020/06/07 07:14 linux-4.14.y c6db52a88798 e6b89e4e .config console log report syz C ci2-linux-4-14
2020/05/27 07:48 linux-4.14.y a41ba30d9df2 9072c126 .config console log report syz C ci2-linux-4-14
2020/05/08 06:12 linux-4.14.y d71f695ce745 6c70a1c2 .config console log report syz C ci2-linux-4-14
2020/03/23 13:05 linux-4.14.y 01364dad1d45 78267cec .config console log report syz C ci2-linux-4-14
2020/03/22 08:20 linux-4.14.y 01364dad1d45 78267cec .config console log report syz C ci2-linux-4-14
2020/03/20 22:17 linux-4.14.y 01364dad1d45 2c31c529 .config console log report syz C ci2-linux-4-14
2020/03/20 01:03 linux-4.14.y 12cd844a39ed 2c31c529 .config console log report syz C ci2-linux-4-14
2020/03/15 08:56 linux-4.14.y 12cd844a39ed 749688d2 .config console log report syz C ci2-linux-4-14
2020/03/15 05:34 linux-4.14.y 12cd844a39ed 749688d2 .config console log report syz C ci2-linux-4-14
2020/03/02 03:20 linux-4.14.y 78d697fc93f9 4a4e0509 .config console log report syz C ci2-linux-4-14
2020/01/26 05:57 linux-4.14.y 8bac50406cca f4e7270e .config console log report syz C ci2-linux-4-14
2020/01/05 19:50 linux-4.14.y 84f5ad468100 d646e21f .config console log report syz C ci2-linux-4-14
2019/12/12 11:23 linux-4.14.y a844dc4c5442 d973f528 .config console log report syz C ci2-linux-4-14
2019/11/01 18:15 linux-4.14.y ddef1e8e3f6e a41ca8fa .config console log report syz C ci2-linux-4-14
2019/10/20 22:11 linux-4.14.y b98aebd29824 8c88c9c1 .config console log report syz C ci2-linux-4-14
2019/09/30 22:44 linux-4.14.y f6e27dbb1afa c7a4fb99 .config console log report syz C ci2-linux-4-14
2019/09/30 20:47 linux-4.14.y f6e27dbb1afa c7a4fb99 .config console log report syz C ci2-linux-4-14
2019/09/21 19:56 linux-4.14.y f6e27dbb1afa d96e88f3 .config console log report syz C ci2-linux-4-14
2019/09/15 00:57 linux-4.14.y e2cd24b62938 32d59357 .config console log report syz C ci2-linux-4-14
2019/09/07 22:32 linux-4.14.y 414510bc00a5 a60cb4cd .config console log report syz C ci2-linux-4-14
2019/09/03 08:08 linux-4.14.y 01fd1694b93c 14544a56 .config console log report syz C ci2-linux-4-14
2019/08/21 18:58 linux-4.14.y 45f092f9e9cb 4ea67ff8 .config console log report syz C ci2-linux-4-14
2019/08/21 16:51 linux-4.14.y 45f092f9e9cb 4ea67ff8 .config console log report syz C ci2-linux-4-14
2019/08/16 14:09 linux-4.14.y 45f092f9e9cb 8fd428a1 .config console log report syz C ci2-linux-4-14
2019/08/15 23:16 linux-4.14.y 3ffe1e79c174 faeffb00 .config console log report syz C ci2-linux-4-14
2019/08/10 18:15 linux-4.14.y 3ffe1e79c174 acb51638 .config console log report syz C ci2-linux-4-14
2019/08/09 11:44 linux-4.14.y b19ffe6e7205 ede31a9b .config console log report syz C ci2-linux-4-14
2019/06/30 08:29 linux-4.14.y f4cc0ed9b2c7 7509bf36 .config console log report syz C ci2-linux-4-14
2019/06/24 18:50 linux-4.14.y a5758c531177 2873954b .config console log report syz C ci2-linux-4-14
2019/04/28 11:46 linux-4.14.y fa5941f45d7e b617407b .config console log report syz C ci2-linux-4-14
2019/04/23 09:42 linux-4.14.y 68d7a45eec10 53199d6e .config console log report syz C ci2-linux-4-14
2019/04/23 06:57 linux-4.14.y 68d7a45eec10 53199d6e .config console log report syz C ci2-linux-4-14
2019/04/21 23:48 linux-4.14.y 68d7a45eec10 b0e8efcb .config console log report syz C ci2-linux-4-14
2019/04/21 22:45 linux-4.14.y 68d7a45eec10 b0e8efcb .config console log report syz C ci2-linux-4-14
2019/04/16 01:53 linux-4.14.y 1ec8f1f0bffe 505ab413 .config console log report syz C ci2-linux-4-14
2019/04/13 16:02 linux-4.14.y 1ec8f1f0bffe c402d8f1 .config console log report syz C ci2-linux-4-14
2019/04/11 16:43 linux-4.14.y 1ec8f1f0bffe 13030ef8 .config console log report syz C ci2-linux-4-14
2020/09/12 20:43 linux-4.14.y cbfa1702aaf6 21d289c2 .config console log report ci2-linux-4-14
2020/09/12 19:42 linux-4.14.y cbfa1702aaf6 21d289c2 .config console log report ci2-linux-4-14
2020/09/12 18:29 linux-4.14.y cbfa1702aaf6 21d289c2 .config console log report ci2-linux-4-14
2020/09/12 17:21 linux-4.14.y cbfa1702aaf6 21d289c2 .config console log report ci2-linux-4-14
2020/09/12 15:09 linux-4.14.y cbfa1702aaf6 21d289c2 .config console log report ci2-linux-4-14
2020/09/12 14:05 linux-4.14.y cbfa1702aaf6 21d289c2 .config console log report ci2-linux-4-14
2020/09/12 12:57 linux-4.14.y cbfa1702aaf6 21d289c2 .config console log report ci2-linux-4-14
2020/09/12 08:58 linux-4.14.y 458a534cac0c 79fb24e2 .config console log report ci2-linux-4-14
2020/09/12 06:55 linux-4.14.y 458a534cac0c 79fb24e2 .config console log report ci2-linux-4-14
2020/09/12 06:53 linux-4.14.y 458a534cac0c 79fb24e2 .config console log report ci2-linux-4-14
2020/09/12 05:51 linux-4.14.y 458a534cac0c 79fb24e2 .config console log report ci2-linux-4-14
2020/09/12 04:34 linux-4.14.y 458a534cac0c 79fb24e2 .config console log report ci2-linux-4-14
2020/09/12 02:29 linux-4.14.y 458a534cac0c 79fb24e2 .config console log report ci2-linux-4-14
2020/09/12 00:48 linux-4.14.y 458a534cac0c 79fb24e2 .config console log report ci2-linux-4-14
2020/09/11 21:09 linux-4.14.y 458a534cac0c adfb8b4e .config console log report ci2-linux-4-14
2020/09/11 20:06 linux-4.14.y 458a534cac0c adfb8b4e .config console log report ci2-linux-4-14
2020/09/11 19:46 linux-4.14.y 458a534cac0c adfb8b4e .config console log report ci2-linux-4-14
2020/09/11 18:22 linux-4.14.y 458a534cac0c adfb8b4e .config console log report ci2-linux-4-14
2020/09/11 16:24 linux-4.14.y 458a534cac0c adfb8b4e .config console log report ci2-linux-4-14
2020/09/11 15:09 linux-4.14.y 458a534cac0c adfb8b4e .config console log report ci2-linux-4-14
2020/09/11 13:12 linux-4.14.y 458a534cac0c adfb8b4e .config console log report ci2-linux-4-14
2020/09/11 11:58 linux-4.14.y 458a534cac0c adfb8b4e .config console log report ci2-linux-4-14
2020/09/11 10:50 linux-4.14.y 458a534cac0c adfb8b4e .config console log report ci2-linux-4-14
2020/09/11 08:50 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/11 04:38 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/11 04:38 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/11 03:28 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/11 02:35 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/11 01:34 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/11 01:23 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/11 00:23 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/10 23:20 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/10 22:26 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/10 21:33 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/10 20:39 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/10 20:05 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/10 19:04 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/10 17:57 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/10 16:50 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/10 16:19 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/10 15:15 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2019/04/11 11:38 linux-4.14.y 1ec8f1f0bffe e955ac50 .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.