syzbot

 sign-in | mailing list | source | docs
🐞 Open [978] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12472] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in create_empty_buffers

Status: closed as invalid on 2017/10/31 10:04
Reported-by: syzbot+3f22a0da4bbc258434689dd5b9209ca028e9e944@syzkaller.appspotmail.com
First crash: 2462d, last: 2425d
▶ ▼ Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in create_empty_buffers (3) fs 1 1389d 1388d 0/26 auto-closed as invalid on 2020/10/27 18:42
upstream general protection fault in create_empty_buffers (4) nilfs 2 357d 390d 0/26 auto-obsoleted due to no activity on 2023/07/26 06:29
linux-6.1 general protection fault in create_empty_buffers origin:upstream missing-backport C unreliable 1 254d 300d 0/3 upstream: reported C repro on 2023/06/23 12:51
linux-5.15 general protection fault in create_empty_buffers origin:lts-only syz done 1 305d 305d 0/3 upstream: reported syz repro on 2023/06/17 23:50
android-54 general protection fault in create_empty_buffers (3) 1 498d 498d 0/2 auto-obsoleted due to no activity on 2023/04/06 14:08
upstream general protection fault in create_empty_buffers (2) fs 1 2048d 2047d 0/26 auto-closed as invalid on 2019/03/08 22:46
android-54 general protection fault in create_empty_buffers 1 1281d 1281d 0/2 auto-closed as invalid on 2021/02/12 03:39
android-54 general protection fault in create_empty_buffers (2) 1 1075d 1075d 0/2 auto-closed as invalid on 2021/09/06 17:43

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 9507 Comm: syz-executor5 Not tainted 4.13.0-rc6+ #51
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801cac46600 task.stack: ffff8801cbd00000
RIP: 0010:create_empty_buffers+0xeb/0x7b0 fs/buffer.c:1581
RSP: 0018:ffff8801cbd07398 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90002025000
RDX: 0000000000000258 RSI: ffffffff81b69d44 RDI: ffffea00074776c0
RBP: ffff8801cbd075a0 R08: 0000000000000000 R09: ffffea00074776e0
R10: 0000000000000000 R11: 0000000000000000 R12: ffffea00074776c0
R13: 0000000000000000 R14: ffff8801cbd07578 R15: dffffc0000000000
FS:  00007f51ca6e6700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001ddbc25000 CR3: 00000001cffc3000 CR4: 00000000001406e0
DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 create_page_buffers+0x1ed/0x290 fs/buffer.c:1696
 __block_write_begin_int+0x22c/0x1410 fs/buffer.c:2006
 __block_write_begin fs/buffer.c:2077 [inline]
 block_write_begin+0xd2/0x2e0 fs/buffer.c:2136
 blkdev_write_begin+0x3c/0x50 fs/block_dev.c:596
 generic_perform_write+0x28c/0x650 mm/filemap.c:2970
 __generic_file_write_iter+0x366/0x5b0 mm/filemap.c:3095
 blkdev_write_iter+0x1cf/0x390 fs/block_dev.c:1897
 call_write_iter include/linux/fs.h:1743 [inline]
 new_sync_write fs/read_write.c:457 [inline]
 __vfs_write+0x684/0x970 fs/read_write.c:470
 vfs_write+0x189/0x510 fs/read_write.c:518
 SYSC_pwrite64 fs/read_write.c:607 [inline]
 SyS_pwrite64+0x15b/0x190 fs/read_write.c:594
 entry_SYSCALL_64_fastpath+0x1f/0xbe
RIP: 0033:0x4512e9
RSP: 002b:00007f51ca6e5c08 EFLAGS: 00000216 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 0000000000718000 RCX: 00000000004512e9
RDX: 0000000000000ffe RSI: 0000000020ce8000 RDI: 000000000000001e
RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000004 R11: 0000000000000216 R12: 00000000004badc0
R13: 00000000ffffffff R14: 00000000209a8ff3 R15: 0000000000000000
Code: 4c 89 ee ba 01 00 00 00 4c 89 e7 e8 a0 e3 ff ff 48 89 85 18 fe ff ff 49 89 c5 eb 03 49 89 c5 e8 dc 5b b7 ff 4c 89 e8 48 c1 e8 03 <42> 80 3c 38 00 0f 85 44 06 00 00 49 8d 7d 08 49 09 5d 00 48 89 
RIP: create_empty_buffers+0xeb/0x7b0 fs/buffer.c:1581 RSP: ffff8801cbd07398
---[ end trace d99fd7e83384a251 ]---

Crashes (3820):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/08/26 00:02 upstream 90a6cd503982 c3631fc7 .config console log report ci-upstream-kasan-gce
2017/08/22 05:32 upstream 05ab303b4f9e f238fbd4 .config console log report ci-upstream-kasan-gce
2017/08/20 05:04 upstream 58d4e450a490 f238fbd4 .config console log report ci-upstream-kasan-gce
2017/08/16 00:38 upstream 40c6d1b9e2fc 6a0246bf .config console log report ci-upstream-kasan-gce
2017/08/14 03:06 upstream c9dc281d91ae 360f0528 .config console log report ci-upstream-kasan-gce
2017/08/11 18:36 upstream 8001a975f955 a0330c0f .config console log report ci-upstream-kasan-gce
2017/08/09 14:27 upstream bfa738cf3dfa 7e288c05 .config console log report ci-upstream-kasan-gce
2017/08/05 19:59 upstream ef9ca02baa87 f5040a63 .config console log report ci-upstream-kasan-gce
2017/08/04 14:14 upstream 869c058fbe74 f5040a63 .config console log report ci-upstream-kasan-gce
2017/08/04 11:22 upstream 869c058fbe74 f5040a63 .config console log report ci-upstream-kasan-gce
2017/08/04 08:24 upstream 8d3fe85f07a9 f5040a63 .config console log report ci-upstream-kasan-gce
2017/08/04 01:17 upstream 8d3fe85f07a9 f5040a63 .config console log report ci-upstream-kasan-gce
2017/08/01 04:13 upstream 2e7ca2064cbb 864b7ea2 .config console log report ci-upstream-kasan-gce
2017/07/31 20:20 upstream 16f73eb02d7e cbf25dd1 .config console log report ci-upstream-kasan-gce
2017/07/31 03:54 upstream 16f73eb02d7e cbf25dd1 .config console log report ci-upstream-kasan-gce
2017/08/24 01:27 linux-next cc6d46bb99b5 f238fbd4 .config console log report ci-upstream-next-kasan-gce
2017/08/17 22:06 linux-next bb70832dd42b f238fbd4 .config console log report ci-upstream-next-kasan-gce
2017/08/15 17:34 linux-next 497247033eb1 6a0246bf .config console log report skylake-linux-next-kasan-qemu
2017/08/14 18:40 linux-next 91dfed74eabc 6a0246bf .config console log report ci-upstream-next-kasan-gce
2017/08/13 13:24 linux-next 91dfed74eabc 360f0528 .config console log report ci-upstream-next-kasan-gce
* Struck through repros no longer work on HEAD.