syzbot

 sign-in | mailing list | source | docs
🐞 Open [717]
🐞 Fixed [181]
🐞 Invalid [640]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

general protection fault in __smc_diag_dump

Status: upstream: reported syz repro on 2019/06/25 06:51
Reported-by: syzbot+2d2cd56fd53cec16c9ce@syzkaller.appspotmail.com
First crash: 1976d, last: 754d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in __smc_diag_dump syz done 309 2136d 2149d 12/28 fixed on 2019/07/10 21:40
upstream general protection fault in __smc_diag_dump (2) net s390 14 30d 84d 28/28 fixed on 2024/10/22 11:57
upstream general protection fault in __smc_diag_dump (3) net s390 C 29 15h32m 13d 0/28 upstream: reported C repro on 2024/11/07 14:17
▶ ▼ Fix bisection attempts (25)
Created Duration User Patch Repo Result
2023/02/03 12:14 0m bisect fix linux-4.14.y error job log
2022/10/29 07:04 24m bisect fix linux-4.14.y OK (0) job log log
2022/09/10 10:26 20m bisect fix linux-4.14.y OK (0) job log log
2022/08/11 09:54 31m bisect fix linux-4.14.y OK (0) job log log
2022/07/12 09:31 22m bisect fix linux-4.14.y OK (0) job log log
2022/06/12 09:09 21m bisect fix linux-4.14.y OK (0) job log log
2022/05/13 08:40 28m bisect fix linux-4.14.y OK (0) job log log
2022/04/13 08:09 31m bisect fix linux-4.14.y OK (0) job log log
2022/03/14 04:08 23m bisect fix linux-4.14.y OK (0) job log log
2022/02/11 16:58 26m bisect fix linux-4.14.y OK (0) job log log
2022/01/12 16:31 26m bisect fix linux-4.14.y OK (0) job log log
2021/12/13 16:03 28m bisect fix linux-4.14.y OK (0) job log log
2021/11/13 13:50 27m bisect fix linux-4.14.y OK (0) job log log
2021/10/14 13:18 31m bisect fix linux-4.14.y OK (0) job log log
2021/09/14 12:39 28m bisect fix linux-4.14.y OK (0) job log log
2021/08/15 12:12 27m bisect fix linux-4.14.y OK (0) job log log
2021/07/16 11:46 26m bisect fix linux-4.14.y OK (0) job log log
2021/06/16 11:17 21m bisect fix linux-4.14.y OK (0) job log log
2021/04/26 07:40 28m bisect fix linux-4.14.y OK (0) job log log
2021/03/27 04:36 21m bisect fix linux-4.14.y OK (0) job log log
2021/02/24 18:00 22m bisect fix linux-4.14.y OK (0) job log log
2021/02/04 08:29 0m bisect fix linux-4.14.y error job log
2021/01/05 08:06 23m bisect fix linux-4.14.y OK (0) job log log
2020/11/16 18:00 23m bisect fix linux-4.14.y OK (0) job log log
2020/10/17 17:35 24m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
batman_adv: batadv0: Interface activated: batadv_slave_1
IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 6703 Comm: syz-executor.0 Not tainted 4.14.191-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff888091fe4180 task.stack: ffff888091c10000
RIP: 0010:smc_diag_msg_common_fill net/smc/smc_diag.c:46 [inline]
RIP: 0010:__smc_diag_dump.constprop.0+0x320/0x14e0 net/smc/smc_diag.c:81
RSP: 0018:ffff888091c17578 EFLAGS: 00010203
RAX: dffffc0000000000 RBX: ffff888087390900 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffff88808739093c RDI: 000000000000000e
RBP: ffff8880980cae80 R08: 0000000000000001 R09: ffff888087390910
R10: ffff88808739094f R11: ffff888091fe4180 R12: 1ffff11012382eb3
R13: ffff8880911a6f50 R14: ffff888091126cc0 R15: 0000000000000000
FS:  00007ffa020ad700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000008d946000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 smc_diag_dump+0x1be/0x260 net/smc/smc_diag.c:169
 netlink_dump+0x39c/0xad0 net/netlink/af_netlink.c:2203
 __netlink_dump_start+0x4e2/0x740 net/netlink/af_netlink.c:2300
 netlink_dump_start include/linux/netlink.h:217 [inline]
 smc_diag_handler_dump+0x19d/0x1e0 net/smc/smc_diag.c:190
 __sock_diag_cmd net/core/sock_diag.c:231 [inline]
 sock_diag_rcv_msg+0x28d/0x390 net/core/sock_diag.c:263
 netlink_rcv_skb+0x125/0x390 net/netlink/af_netlink.c:2433
 sock_diag_rcv+0x26/0x40 net/core/sock_diag.c:274
 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline]
 netlink_unicast+0x437/0x610 net/netlink/af_netlink.c:1313
 netlink_sendmsg+0x62e/0xb80 net/netlink/af_netlink.c:1878
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 ___sys_sendmsg+0x6c8/0x800 net/socket.c:2062
 __sys_sendmsg+0xa3/0x120 net/socket.c:2096
 SYSC_sendmsg net/socket.c:2107 [inline]
 SyS_sendmsg+0x27/0x40 net/socket.c:2103
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x45cc79
RSP: 002b:00007ffa020acc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 000000000002bec0 RCX: 000000000045cc79
RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005
RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c
R13: 00007fff8b58f0df R14: 00007ffa020ad9c0 R15: 000000000078bf0c
Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 05 11 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7f 20 49 8d 7f 0e 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 
RIP: smc_diag_msg_common_fill net/smc/smc_diag.c:46 [inline] RSP: ffff888091c17578
RIP: __smc_diag_dump.constprop.0+0x320/0x14e0 net/smc/smc_diag.c:81 RSP: ffff888091c17578
---[ end trace 449cd49393c91cea ]---

Crashes (39):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/03 17:37 linux-4.14.y 7f2c5eb458b8 96dd3623 .config console log report syz ci2-linux-4-14
2020/03/29 14:58 linux-4.14.y 01364dad1d45 05736b29 .config console log report syz ci2-linux-4-14
2019/09/03 16:21 linux-4.14.y 01fd1694b93c 48448e71 .config console log report syz ci2-linux-4-14
2019/08/27 06:24 linux-4.14.y b5260801526c d21c5d9d .config console log report syz ci2-linux-4-14
2019/08/27 03:29 linux-4.14.y b5260801526c d21c5d9d .config console log report syz ci2-linux-4-14
2019/08/08 21:08 linux-4.14.y b19ffe6e7205 bcc419e9 .config console log report syz ci2-linux-4-14
2019/07/30 03:26 linux-4.14.y ff33472c282e f67095ee .config console log report syz ci2-linux-4-14
2019/07/23 21:03 linux-4.14.y ff33472c282e de453f34 .config console log report syz ci2-linux-4-14
2019/06/30 14:13 linux-4.14.y f4cc0ed9b2c7 7509bf36 .config console log report syz ci2-linux-4-14
2019/06/30 01:49 linux-4.14.y f4cc0ed9b2c7 7509bf36 .config console log report syz ci2-linux-4-14
2019/06/25 14:02 linux-4.14.y bc2bccef19ee 0a8d1a96 .config console log report syz ci2-linux-4-14
2019/06/25 06:37 linux-4.14.y bc2bccef19ee 82c13b6b .config console log report syz ci2-linux-4-14
2021/05/17 10:26 linux-4.14.y 7d7d1c0ab3eb a2eb125d .config console log report info ci2-linux-4-14 general protection fault in __smc_diag_dump
2020/12/06 08:05 linux-4.14.y c196b3a9c83a f12ba0c5 .config console log report info ci2-linux-4-14
2020/09/17 12:57 linux-4.14.y cbfa1702aaf6 8247808b .config console log report info ci2-linux-4-14
2020/09/15 12:41 linux-4.14.y cbfa1702aaf6 9e681632 .config console log report info ci2-linux-4-14
2020/08/10 18:27 linux-4.14.y 14b58326976d 7adc7b65 .config console log report ci2-linux-4-14
2020/08/01 14:36 linux-4.14.y 7f2c5eb458b8 8df85ed9 .config console log report ci2-linux-4-14
2020/07/18 14:26 linux-4.14.y b850307b279c 9c812472 .config console log report ci2-linux-4-14
2020/06/24 21:02 linux-4.14.y b850307b279c 9d60b18e .config console log report ci2-linux-4-14
2020/05/17 17:10 linux-4.14.y ab9dfda23248 37bccd4e .config console log report ci2-linux-4-14
2020/04/23 10:20 linux-4.14.y c10b57a567e4 2e44d63e .config console log report ci2-linux-4-14
2020/04/13 10:31 linux-4.14.y 4520f06b03ae 17a986e5 .config console log report ci2-linux-4-14
2020/04/11 23:02 linux-4.14.y 4520f06b03ae a8c6a3f8 .config console log report ci2-linux-4-14
2020/04/08 08:17 linux-4.14.y 4520f06b03ae db9bcd4b .config console log report ci2-linux-4-14
2020/03/27 20:49 linux-4.14.y 01364dad1d45 831e9a81 .config console log report ci2-linux-4-14
2020/02/12 04:21 linux-4.14.y e0f8b8a65a47 4d1ab643 .config console log report ci2-linux-4-14
2019/11/14 10:46 linux-4.14.y 775d01b65b5d 048f2d49 .config console log report ci2-linux-4-14
2019/09/22 07:35 linux-4.14.y f6e27dbb1afa d96e88f3 .config console log report ci2-linux-4-14
2019/09/08 16:06 linux-4.14.y 414510bc00a5 a60cb4cd .config console log report ci2-linux-4-14
2019/08/30 07:19 linux-4.14.y 01fd1694b93c cd626f3b .config console log report ci2-linux-4-14
2019/08/27 03:10 linux-4.14.y b5260801526c d21c5d9d .config console log report ci2-linux-4-14
2019/08/08 18:11 linux-4.14.y b19ffe6e7205 bcc419e9 .config console log report ci2-linux-4-14
2019/07/30 02:59 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/07/23 18:59 linux-4.14.y ff33472c282e de453f34 .config console log report ci2-linux-4-14
2019/06/30 01:21 linux-4.14.y f4cc0ed9b2c7 7509bf36 .config console log report ci2-linux-4-14
2019/06/26 21:24 linux-4.14.y bc2bccef19ee 4d342240 .config console log report ci2-linux-4-14
2019/06/25 12:33 linux-4.14.y bc2bccef19ee 0a8d1a96 .config console log report ci2-linux-4-14
2019/06/25 05:50 linux-4.14.y bc2bccef19ee 82c13b6b .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.