syzbot

 sign-in | mailing list | source | docs
🐞 Open [712] 🐞 Fixed [297] 🐞 Invalid [838] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in skb_put

Status: upstream: reported C repro on 2019/04/23 05:25
Reported-by: syzbot+cfdea684d4caf61d635a@syzkaller.appspotmail.com
First crash: 1830d, last: 953d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in skb_put bluetooth C done error 43 1326d 1907d 0/26 auto-obsoleted due to no activity on 2022/09/23 14:24
linux-4.14 general protection fault in skb_put C error 70 1079d 1831d 0/1 upstream: reported C repro on 2019/04/22 01:02
▶ ▼ Fix bisection attempts (13)
Created Duration User Patch Repo Result
2021/10/16 10:05 12m bisect fix linux-4.19.y error job log (0)
2021/07/27 07:01 30m bisect fix linux-4.19.y job log (0) log
2021/06/27 03:22 30m bisect fix linux-4.19.y job log (0) log
2021/05/28 02:58 23m bisect fix linux-4.19.y job log (0) log
2021/04/28 02:04 28m bisect fix linux-4.19.y job log (0) log
2021/03/15 02:03 24m bisect fix linux-4.19.y job log (0) log
2021/02/12 02:28 0m bisect fix linux-4.19.y error job log (0)
2021/01/13 02:03 24m bisect fix linux-4.19.y job log (0) log
2020/12/13 22:12 24m bisect fix linux-4.19.y job log (0) log
2020/10/27 23:57 23m bisect fix linux-4.19.y job log (0) log
2020/08/14 08:14 26m bisect fix linux-4.19.y job log (0) log
2020/07/15 05:15 25m bisect fix linux-4.19.y job log (0) log
2019/12/30 08:32 25m bisect fix linux-4.19.y job log (0) log

Sample crash report:
R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff
R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000000000
kasan: CONFIG_KASAN_INLINE enabled
Bluetooth: Can't allocate mem for new packet
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 47 Comm: kworker/u4:2 Not tainted 4.19.36 #4
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound flush_to_ldisc
RIP: 0010:skb_put+0x35/0x1e0 net/core/skbuff.c:1697
Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 c8 00 00 00 48 83 ec 08 e8 5c 7e 0a fc 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 58
RSP: 0018:ffff8880a9877b28 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff8880a189d340 RCX: ffffffff84e27a89
RDX: 0000000000000019 RSI: ffffffff8560c6b4 RDI: 0000000000000000
RBP: ffff8880a9877b58 R08: ffff8880a98b84c0 R09: ffffed1015d24733
R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 0000000000000000
R13: 0000000000000001 R14: 00000000000000c8 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe66fd8d000 CR3: 00000000a0492000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 skb_put_data include/linux/skbuff.h:2091 [inline]
 bcsp_unslip_one_byte drivers/bluetooth/hci_bcsp.c:451 [inline]
 bcsp_recv+0x9b3/0x13b0 drivers/bluetooth/hci_bcsp.c:612
 hci_uart_tty_receive+0x22b/0x530 drivers/bluetooth/hci_ldisc.c:607
 tty_ldisc_receive_buf+0x164/0x1c0 drivers/tty/tty_buffer.c:460
 tty_port_default_receive_buf+0x7d/0xb0 drivers/tty/tty_port.c:38
 receive_buf drivers/tty/tty_buffer.c:476 [inline]
 flush_to_ldisc+0x228/0x390 drivers/tty/tty_buffer.c:528
 process_one_work+0x98e/0x1760 kernel/workqueue.c:2153
 worker_thread+0x98/0xe40 kernel/workqueue.c:2296
 kthread+0x357/0x430 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413
Modules linked in:
---[ end trace a41480f45287912a ]---
RIP: 0010:skb_put+0x35/0x1e0 net/core/skbuff.c:1697
Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 c8 00 00 00 48 83 ec 08 e8 5c 7e 0a fc 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 58
RSP: 0018:ffff8880a9877b28 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff8880a189d340 RCX: ffffffff84e27a89
RDX: 0000000000000019 RSI: ffffffff8560c6b4 RDI: 0000000000000000
RBP: ffff8880a9877b58 R08: ffff8880a98b84c0 R09: ffffed1015d24733
R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 0000000000000000
R13: 0000000000000001 R14: 00000000000000c8 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe66fd8d000 CR3: 00000000a0492000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (32):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/04/23 04:58 linux-4.19.y c98875d930e9 53199d6e .config console log report syz C ci2-linux-4-19
2020/04/07 23:42 linux-4.19.y dda0e2920330 db9bcd4b .config console log report syz ci2-linux-4-19
2020/02/28 09:01 linux-4.19.y f25804f38984 c88c7b75 .config console log report syz ci2-linux-4-19
2019/07/20 03:44 linux-4.19.y 3bd837bfe431 1656845f .config console log report syz ci2-linux-4-19
2021/09/16 09:05 linux-4.19.y b172b44fcb17 07e953c1 .config console log report info ci2-linux-4-19 general protection fault in skb_put
2021/09/14 13:47 linux-4.19.y b172b44fcb17 58d09404 .config console log report info ci2-linux-4-19 general protection fault in skb_put
2021/09/04 03:20 linux-4.19.y b172b44fcb17 d236a457 .config console log report info ci2-linux-4-19 general protection fault in skb_put
2021/09/01 16:47 linux-4.19.y e23d55af0e1f 7eb7e152 .config console log report info ci2-linux-4-19 general protection fault in skb_put
2021/08/17 11:41 linux-4.19.y 59456c9cc40c 33c26cb7 .config console log report info ci2-linux-4-19 general protection fault in skb_put
2021/03/29 02:04 linux-4.19.y 78fec1611cbf a8529b82 .config console log report info ci2-linux-4-19 general protection fault in skb_put
2021/02/13 02:03 linux-4.19.y 811218eceeaa 98682e5e .config console log report info ci2-linux-4-19 general protection fault in skb_put
2020/11/13 22:11 linux-4.19.y 31acccdc8774 4a7fa9b4 .config console log report info ci2-linux-4-19
2020/09/27 23:46 linux-4.19.y 10ad6cfd5736 5dd8aee8 .config console log report info ci2-linux-4-19
2020/09/08 00:09 linux-4.19.y c37da90efff5 abf9ba4f .config console log report ci2-linux-4-19
2020/06/15 04:54 linux-4.19.y 3fc898571b97 2a22c77a .config console log report ci2-linux-4-19
2020/05/27 08:47 linux-4.19.y 1bab61d3e8cd 9072c126 .config console log report ci2-linux-4-19
2020/05/01 02:58 linux-4.19.y 765675379b62 3698959a .config console log report ci2-linux-4-19
2020/04/28 22:14 linux-4.19.y 7edd66cf6167 e3ecea2e .config console log report ci2-linux-4-19
2020/04/26 20:09 linux-4.19.y 7edd66cf6167 0ce7569e .config console log report ci2-linux-4-19
2020/04/17 04:38 linux-4.19.y 6dd0e32665e5 c743fcb3 .config console log report ci2-linux-4-19
2020/04/11 14:32 linux-4.19.y dda0e2920330 a8c6a3f8 .config console log report ci2-linux-4-19
2020/03/19 18:48 linux-4.19.y 93556fb211fa 2c31c529 .config console log report ci2-linux-4-19
2020/02/04 10:59 linux-4.19.y 32ee7492f104 93e5e335 .config console log report ci2-linux-4-19
2020/01/20 17:39 linux-4.19.y dc4ba5be1bab c40da18c .config console log report ci2-linux-4-19
2020/01/18 18:25 linux-4.19.y dc4ba5be1bab 3de7aabb .config console log report ci2-linux-4-19
2019/11/30 08:32 linux-4.19.y 14260788bbb9 3a75be00 .config console log report ci2-linux-4-19
2019/11/13 15:18 linux-4.19.y 7d8dbefc22ff 048f2d49 .config console log report ci2-linux-4-19
2019/09/28 01:54 linux-4.19.y d573e8a79f70 d8074e0b .config console log report ci2-linux-4-19
2019/06/17 19:16 linux-4.19.y 6500aa436df4 442206d7 .config console log report ci2-linux-4-19
2019/06/16 14:00 linux-4.19.y 7aa823a959e1 442206d7 .config console log report ci2-linux-4-19
2019/04/27 11:26 linux-4.19.y 19bb613acb9a b617407b .config console log report ci2-linux-4-19
2019/04/23 04:24 linux-4.19.y c98875d930e9 53199d6e .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.