syzbot


general protection fault in lo_ioctl

Status: closed as invalid on 2019/01/01 20:10
First crash: 2463d, last: 2130d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in lo_ioctl 17 2368d 2362d 0/26 closed as invalid on 2018/02/12 16:15
android-44 general protection fault in lo_ioctl 1 2140d 2139d 0/2 auto-closed as invalid on 2019/02/22 15:09
upstream general protection fault in lo_ioctl (2) block syz 2 2183d 2183d 11/26 fixed on 2019/01/15 20:25

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 2732 Comm: syz-executor1 Not tainted 4.9.109-g7cecc75 #54
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801d94f0000 task.stack: ffff8801697e0000
RIP: 0010:[<ffffffff825cbd07>]  [<ffffffff825cbd07>] loop_set_fd drivers/block/loop.c:886 [inline]
RIP: 0010:[<ffffffff825cbd07>]  [<ffffffff825cbd07>] lo_ioctl+0x1517/0x1aa0 drivers/block/loop.c:1347
RSP: 0018:ffff8801697e7b08  EFLAGS: 00010206
RAX: 0000000000000036 RBX: 0000000000000000 RCX: dffffc0000000000
RDX: 000000000000008c RSI: ffffffff825cbcc6 RDI: 00000000000001b0
RBP: ffff8801697e7b80 R08: ffff8801d94f0910 R09: 0000000000000001
R10: 0000000000000000 R11: 1ffff1003b29e11d R12: ffff8801d61c12d0
R13: ffff8801d9c17300 R14: ffff8801d3fddb00 R15: ffff8801d3fddc58
FS:  00007f042987a700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc20722cdb8 CR3: 00000001be18f000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801697e7b00 0000000200000001 ffff8801d3fddc50 ffff8801697e6000
 ffff8801697e7b80 ffff8801d61c14c8 ffff8801da24f000 ffff8801d9c173e0
 000000000002001d 0000000100000000 ffff8801d9c17300 1ffff1002d2fcf73
Call Trace:
 [<ffffffff81e57a26>] __blkdev_driver_ioctl block/ioctl.c:294 [inline]
 [<ffffffff81e57a26>] blkdev_ioctl+0x7b6/0x1a70 block/ioctl.c:590
 [<ffffffff81632b8e>] block_ioctl+0xde/0x120 fs/block_dev.c:1688
 [<ffffffff815b2b9c>] vfs_ioctl fs/ioctl.c:43 [inline]
 [<ffffffff815b2b9c>] file_ioctl fs/ioctl.c:493 [inline]
 [<ffffffff815b2b9c>] do_vfs_ioctl+0x1ac/0x11a0 fs/ioctl.c:677
 [<ffffffff815b3c1f>] SYSC_ioctl fs/ioctl.c:694 [inline]
 [<ffffffff815b3c1f>] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:685
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff839f9913>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: e8 03 80 3c 08 00 0f 85 92 02 00 00 48 8b 9b f0 00 00 00 48 b9 00 00 00 00 00 fc ff df 48 8d bb b0 01 00 00 48 89 f8 48 c1 e8 03 <80> 3c 08 00 0f 85 bf 03 00 00 48 8b 9b b0 01 00 00 48 b9 00 00 
RIP  [<ffffffff825cbd07>] loop_set_fd drivers/block/loop.c:886 [inline]
RIP  [<ffffffff825cbd07>] lo_ioctl+0x1517/0x1aa0 drivers/block/loop.c:1347
 RSP <ffff8801697e7b08>
SELinux:  policydb version -387068950 does not match my version range 15-30
---[ end trace 3f6673abfbf6406f ]---

Crashes (13):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/06/23 12:33 https://android.googlesource.com/kernel/common android-4.9 7cecc756ceae 2064fc5c .config console log report ci-android-49-kasan-gce
2018/06/16 07:19 https://android.googlesource.com/kernel/common android-4.9 b7d377b4640b 27c5f59f .config console log report ci-android-49-kasan-gce-root
2018/06/13 20:39 https://android.googlesource.com/kernel/common android-4.9 b7d377b4640b 27c5f59f .config console log report ci-android-49-kasan-gce
2018/05/28 13:43 https://android.googlesource.com/kernel/common android-4.9 0cecdf831513 f48c20b8 .config console log report ci-android-49-kasan-gce-root
2018/05/09 02:26 https://android.googlesource.com/kernel/common android-4.9 9731a2dab47e b88872ba .config console log report ci-android-49-kasan-gce
2018/05/07 18:16 https://android.googlesource.com/kernel/common android-4.9 63a812bb84e4 9e0846e8 .config console log report ci-android-49-kasan-gce-root
2018/04/23 21:54 https://android.googlesource.com/kernel/common android-4.9 142d4b530f5a 0d8e591c .config console log report ci-android-49-kasan-gce-root
2017/08/26 09:41 https://android.googlesource.com/kernel/common android-4.9 bf7ef8f2d57c be291771 .config console log report ci-android-49-kasan-gce
2017/08/15 23:19 https://android.googlesource.com/kernel/common android-4.9 e63ae19e0f61 f93be584 .config console log report ci-android-49-kasan-gce
2017/07/31 12:23 https://android.googlesource.com/kernel/common android-4.9 ed323354ecec f5040a63 .config console log report ci-android-49-kasan-gce
2017/07/25 09:21 https://android.googlesource.com/kernel/common android-4.9 72a0c9f5b54a b0d23a5c .config console log report ci-android-49-kasan-gce
2018/06/04 11:53 https://android.googlesource.com/kernel/common android-4.9 d7e64f8022e4 6cbe7c26 .config console log report ci-android-49-kasan-gce-386
2018/03/04 17:47 https://android.googlesource.com/kernel/common android-4.9 e0b05e693a9d 2c6f473e .config console log report ci-android-49-kasan-gce-386
* Struck through repros no longer work on HEAD.