syzbot

 sign-in | mailing list | source | docs
🐞 Open [717]
🐞 Fixed [181]
🐞 Invalid [640]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

KASAN: global-out-of-bounds Read in prepare_error_buf

Status: auto-closed as invalid on 2019/10/29 05:57
Reported-by: syzbot+9580f005128a8186f67b@syzkaller.appspotmail.com
First crash: 2041d, last: 1942d

Sample crash report:
name failslab, interval 1, probability 0, space 0, times 0
==================================================================
BUG: KASAN: global-out-of-bounds in strscpy+0x20e/0x2c0 lib/string.c:206
Read of size 8 at addr ffffffff8677bda0 by task syz-executor.5/9932

CPU: 1 PID: 9932 Comm: syz-executor.5 Not tainted 4.14.134 #30
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x19c lib/dump_stack.c:53
 print_address_description.cold+0x5/0x1dc mm/kasan/report.c:252
 kasan_report_error mm/kasan/report.c:351 [inline]
 kasan_report mm/kasan/report.c:409 [inline]
 kasan_report.cold+0xa9/0x2af mm/kasan/report.c:393
 __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:430
 strscpy+0x20e/0x2c0 lib/string.c:206
 prepare_error_buf+0x94/0x1aa0 fs/reiserfs/prints.c:213
 __reiserfs_warning+0x9f/0xb0 fs/reiserfs/prints.c:288
 reiserfs_getopt fs/reiserfs/super.c:1063 [inline]
 reiserfs_parse_options+0x153e/0x1820 fs/reiserfs/super.c:1194
 reiserfs_fill_super+0x461/0x2b20 fs/reiserfs/super.c:1946
 mount_bdev+0x2be/0x370 fs/super.c:1134
 get_super_block+0x35/0x40 fs/reiserfs/super.c:2605
 mount_fs+0x97/0x2a1 fs/super.c:1237
 vfs_kern_mount.part.0+0x5e/0x3d0 fs/namespace.c:1046
 vfs_kern_mount fs/namespace.c:1036 [inline]
 do_new_mount fs/namespace.c:2549 [inline]
 do_mount+0x417/0x27d0 fs/namespace.c:2879
 SYSC_mount fs/namespace.c:3095 [inline]
 SyS_mount+0xab/0x120 fs/namespace.c:3072
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c27a
RSP: 002b:00007fa713717a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fa713717b40 RCX: 000000000045c27a
RDX: 00007fa713717ae0 RSI: 0000000020000040 RDI: 00007fa713717b00
RBP: 0000000000000009 R08: 00007fa713717b40 R09: 00007fa713717ae0
R10: 0000000000010001 R11: 0000000000000206 R12: 0000000000000004
R13: 00000000004c8a7f R14: 00000000004df8b8 R15: 00000000ffffffff

The buggy address belongs to the variable:
 __func__.31301+0x980/0x3a60

Memory state around the buggy address:
 ffffffff8677bc80: fa fa fa fa 00 03 fa fa fa fa fa fa 00 00 00 00
 ffffffff8677bd00: 00 06 fa fa fa fa fa fa 00 03 fa fa fa fa fa fa
>ffffffff8677bd80: 00 00 00 00 06 fa fa fa fa fa fa fa 00 03 fa fa
                               ^
 ffffffff8677be00: fa fa fa fa 00 00 00 00 05 fa fa fa fa fa fa fa
 ffffffff8677be80: 00 03 fa fa fa fa fa fa 00 00 00 01 fa fa fa fa
==================================================================

Crashes (13607):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/07/31 05:21 linux-4.14.y ff33472c282e 7c7ded69 .config console log report ci2-linux-4-14
2019/07/31 04:28 linux-4.14.y ff33472c282e 7c7ded69 .config console log report ci2-linux-4-14
2019/07/31 03:33 linux-4.14.y ff33472c282e 7c7ded69 .config console log report ci2-linux-4-14
2019/07/31 03:21 linux-4.14.y ff33472c282e 7c7ded69 .config console log report ci2-linux-4-14
2019/07/31 02:17 linux-4.14.y ff33472c282e 7c7ded69 .config console log report ci2-linux-4-14
2019/07/31 02:08 linux-4.14.y ff33472c282e 7c7ded69 .config console log report ci2-linux-4-14
2019/07/31 01:01 linux-4.14.y ff33472c282e 7c7ded69 .config console log report ci2-linux-4-14
2019/07/31 00:07 linux-4.14.y ff33472c282e 7c7ded69 .config console log report ci2-linux-4-14
2019/07/30 23:07 linux-4.14.y ff33472c282e 7c7ded69 .config console log report ci2-linux-4-14
2019/07/30 22:21 linux-4.14.y ff33472c282e 7c7ded69 .config console log report ci2-linux-4-14
2019/07/30 21:11 linux-4.14.y ff33472c282e 7c7ded69 .config console log report ci2-linux-4-14
2019/07/30 21:05 linux-4.14.y ff33472c282e 7c7ded69 .config console log report ci2-linux-4-14
2019/07/30 19:20 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 18:20 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 17:19 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 17:14 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 16:12 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 16:07 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 15:07 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 14:16 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 13:10 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 12:56 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 11:44 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 11:34 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 10:32 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 10:30 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 09:28 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 09:04 linux-4.14.y ff33472c282e f28bf2a5 .config console log report ci2-linux-4-14
2019/07/30 06:46 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/07/30 06:28 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/07/30 05:23 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/07/30 04:22 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/07/30 03:44 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/07/30 02:40 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/07/30 02:06 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/07/30 01:14 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/07/30 01:09 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/07/30 00:09 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/07/29 23:50 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/07/29 22:44 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/07/29 22:18 linux-4.14.y ff33472c282e f67095ee .config console log report ci2-linux-4-14
2019/04/23 01:25 linux-4.14.y 68d7a45eec10 53199d6e .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.