syzbot

 sign-in | mailing list | source | docs
🐞 Open [984] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12476] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in keyctl_pkey_params_get

Status: fixed on 2019/01/16 03:28
Subsystems: keyrings lsm
[Documentation on labels]
Reported-by: syzbot+a22e0dc07567662c50bc@syzkaller.appspotmail.com
Fix commit: 57b0e3145320 KEYS: fix parsing invalid pkey info string 94c13f66e13c security: don't use a negative Opt_err token index
First crash: 1994d, last: 1935d
▶ ▼ Discussions (3)
Title Replies (including bot) Last reply
[PATCH 4.20 000/145] 4.20.1-stable review 164 (164) 2019/01/09 23:18
[PATCH] KEYS: fix parsing invalid pkey info string 17 (17) 2019/01/01 21:08
general protection fault in keyctl_pkey_params_get 0 (1) 2018/11/03 15:48

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 8029 Comm: syz-executor212 Not tainted 4.20.0+ #3
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:keyctl_pkey_params_parse security/keys/keyctl_pkey.c:56 [inline]
RIP: 0010:keyctl_pkey_params_get+0x284/0x550 security/keys/keyctl_pkey.c:96
Code: fe 48 8b 44 24 38 48 c1 e8 03 42 80 3c 28 00 0f 85 41 02 00 00 4c 8b b4 24 b0 00 00 00 4c 89 f0 4c 89 f2 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 08 84 c0 0f 85 2a 02 00 00 41 0f b6 36 31
RSP: 0018:ffff8880a110fbd0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8880a110fd90 RCX: ffffffff834376dd
RDX: 0000000000000000 RSI: ffffffff834376eb RDI: 0000000000000001
RBP: ffff8880a110fd20 R08: ffff8880933c4540 R09: ffffed1013faac79
R10: ffffed1013faac78 R11: 0000000000000005 R12: 0000000000000000
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00007fb42bab5700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000200 CR3: 0000000094dba000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 keyctl_pkey_query+0xb8/0x2a0 security/keys/keyctl_pkey.c:173
 __do_sys_keyctl security/keys/keyctl.c:1752 [inline]
 __se_sys_keyctl security/keys/keyctl.c:1636 [inline]
 __x64_sys_keyctl+0x144/0x420 security/keys/keyctl.c:1636
 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x445589
Code: e8 6c b6 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b 12 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fb42bab4db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
RAX: ffffffffffffffda RBX: 00000000006dac28 RCX: 0000000000445589
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000018
RBP: 00000000006dac20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000020000200 R11: 0000000000000246 R12: 00000000006dac2c
R13: 00007ffc7dd39acf R14: 00007fb42bab59c0 R15: 00000000006dad2c
Modules linked in:
---[ end trace 45844d09cbfd26be ]---
RIP: 0010:keyctl_pkey_params_parse security/keys/keyctl_pkey.c:56 [inline]
RIP: 0010:keyctl_pkey_params_get+0x284/0x550 security/keys/keyctl_pkey.c:96
Code: fe 48 8b 44 24 38 48 c1 e8 03 42 80 3c 28 00 0f 85 41 02 00 00 4c 8b b4 24 b0 00 00 00 4c 89 f0 4c 89 f2 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 08 84 c0 0f 85 2a 02 00 00 41 0f b6 36 31
RSP: 0018:ffff8880a110fbd0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8880a110fd90 RCX: ffffffff834376dd
RDX: 0000000000000000 RSI: ffffffff834376eb RDI: 0000000000000001
RBP: ffff8880a110fd20 R08: ffff8880933c4540 R09: ffffed1013faac79
R10: ffffed1013faac78 R11: 0000000000000005 R12: 0000000000000000
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00007fb42bab5700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000200 CR3: 0000000094dba000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (85):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/01/01 16:30 upstream e1ef035d272e 3d85f48c .config console log report syz C ci-upstream-kasan-gce-root
2019/01/01 15:03 upstream e1ef035d272e 3d85f48c .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/01/01 14:50 upstream e1ef035d272e 3d85f48c .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/01/01 14:48 upstream e1ef035d272e 3d85f48c .config console log report syz C ci-upstream-kasan-gce
2019/01/01 03:58 upstream f12e840c819b 3d85f48c .config console log report syz C ci-upstream-kasan-gce
2019/01/01 03:23 upstream f12e840c819b 3d85f48c .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/01/01 03:20 upstream f12e840c819b 3d85f48c .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/01/01 03:19 upstream f12e840c819b 3d85f48c .config console log report syz C ci-upstream-kasan-gce-root
2018/11/14 20:20 upstream ccda4af0f4b9 5f5f6d14 .config console log report syz C ci-upstream-kasan-gce-smack-root
2018/11/14 20:08 upstream ccda4af0f4b9 5f5f6d14 .config console log report syz C ci-upstream-kasan-gce
2018/11/14 20:08 upstream ccda4af0f4b9 5f5f6d14 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2018/11/07 11:52 upstream 8053e5b93eca 8bd6bd63 .config console log report syz C ci-upstream-kasan-gce-smack-root
2018/11/07 01:27 upstream 8053e5b93eca 8bd6bd63 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2018/11/05 01:16 upstream 4710e78940d8 8bd6bd63 .config console log report syz C ci-upstream-kasan-gce
2018/11/03 10:16 upstream 5f21585384a4 8bd6bd63 .config console log report syz C ci-upstream-kasan-gce-root
2019/01/01 14:35 upstream e1ef035d272e 3d85f48c .config console log report syz C ci-upstream-kasan-gce-386
2019/01/01 03:07 upstream f12e840c819b 3d85f48c .config console log report syz C ci-upstream-kasan-gce-386
2018/11/14 20:06 upstream ccda4af0f4b9 5f5f6d14 .config console log report syz C ci-upstream-kasan-gce-386
2018/11/04 21:31 upstream 71e56028173b 8bd6bd63 .config console log report syz C ci-upstream-kasan-gce-386
2019/01/02 04:17 linux-next 6a1d293238c1 3d85f48c .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2019/01/01 10:57 linux-next 6a1d293238c1 3d85f48c .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/11/14 20:24 linux-next 442b8cea2477 5f5f6d14 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/11/08 12:17 linux-next f7af6d2c48bf e85d2a61 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2019/01/01 13:59 upstream e1ef035d272e 3d85f48c .config console log report ci-upstream-kasan-gce-smack-root
2018/12/31 11:27 upstream 195303136f19 2b42fdc8 .config console log report ci-upstream-kasan-gce-root
2018/12/31 10:52 upstream 195303136f19 2b42fdc8 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/31 09:50 upstream 195303136f19 2b42fdc8 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/30 18:36 upstream 195303136f19 9942de5f .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/30 16:52 upstream 195303136f19 9942de5f .config console log report ci-upstream-kasan-gce-root
2018/12/29 11:41 upstream 903b77c63167 a40793d7 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/29 08:29 upstream f346b0becb1b e33ad0f1 .config console log report ci-upstream-kasan-gce
2018/12/28 06:43 upstream b71acb0e3721 af317504 .config console log report ci-upstream-kasan-gce-root
2018/12/26 17:10 upstream 5694cecdb092 8a41a0ad .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/26 02:47 upstream d8924c0d76aa 8a41a0ad .config console log report ci-upstream-kasan-gce-root
2018/12/25 08:00 upstream 8fe28cb58bcb 8a41a0ad .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/21 16:24 upstream 9097a058d49e 588075e6 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/21 05:02 upstream 9097a058d49e 2b497001 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/20 01:50 upstream 62393dbcbe0f 02e69052 .config console log report ci-upstream-kasan-gce
2018/12/20 01:00 upstream 62393dbcbe0f 02e69052 .config console log report ci-upstream-kasan-gce
2018/12/19 22:24 upstream 62393dbcbe0f fe2dc057 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/19 09:43 upstream 62393dbcbe0f 4edaba93 .config console log report ci-upstream-kasan-gce-root
2018/12/18 22:15 upstream ddfbab46539f 4edaba93 .config console log report ci-upstream-kasan-gce
2018/12/09 10:14 upstream 8214bdf7d3e6 c7918378 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/04 22:51 upstream 0072a0c14d5b f162ad97 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/01 04:45 upstream b6839ef26e54 d8988561 .config console log report ci-upstream-kasan-gce
2018/11/14 15:26 upstream ccda4af0f4b9 5f5f6d14 .config console log report ci-upstream-kasan-gce
2018/11/03 08:24 upstream 5f21585384a4 8bd6bd63 .config console log report ci-upstream-kasan-gce-root
2019/01/01 16:18 upstream e1ef035d272e 3d85f48c .config console log report ci-upstream-kasan-gce-386
2018/12/27 15:13 upstream fc2fd5f0f1aa 43cf01dd .config console log report ci-upstream-kasan-gce-386
2018/12/25 19:14 upstream 8fe28cb58bcb 8a41a0ad .config console log report ci-upstream-kasan-gce-386
2018/12/24 12:33 upstream 8fe28cb58bcb be79df56 .config console log report ci-upstream-kasan-gce-386
2018/12/24 05:22 upstream 3c730b1041ae e3bd7ab8 .config console log report ci-upstream-kasan-gce-386
2018/12/24 03:39 upstream 3c730b1041ae e3bd7ab8 .config console log report ci-upstream-kasan-gce-386
2018/12/22 18:07 upstream 23203e3f34c9 e3bd7ab8 .config console log report ci-upstream-kasan-gce-386
2018/12/20 02:09 upstream 62393dbcbe0f 02e69052 .config console log report ci-upstream-kasan-gce-386
2018/12/20 01:35 upstream 62393dbcbe0f 02e69052 .config console log report ci-upstream-kasan-gce-386
2018/12/09 13:40 upstream 8214bdf7d3e6 979179d6 .config console log report ci-upstream-kasan-gce-386
2018/12/06 06:19 upstream d08970904582 764b42c4 .config console log report ci-upstream-kasan-gce-386
2018/11/17 07:16 upstream 1ce80e0fe98e b08ee62a .config console log report ci-upstream-kasan-gce-386
2018/11/07 06:20 upstream 8053e5b93eca 8bd6bd63 .config console log report ci-upstream-kasan-gce-386
2018/12/31 12:31 linux-next 6a1d293238c1 2b42fdc8 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/17 03:43 linux-next d14b746c6c1c def91db3 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/11/11 15:27 linux-next 442b8cea2477 f3c4e618 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/11/10 12:26 linux-next 442b8cea2477 f9815aaf .config console log report ci-upstream-linux-next-kasan-gce-root
2018/11/07 02:14 linux-next 337734cbca74 8bd6bd63 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.