syzbot

 sign-in | mailing list | source | docs
🐞 Open [982] ≡ Subsystems 🐞 Fixed [5217] 🐞 Invalid [12479] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

BUG: unable to handle kernel paging request in memset_erms

Status: fixed on 2018/01/19 01:24
Subsystems: sound
[Documentation on labels]
Reported-by: syzbot+3902b5220e8ca27889ca@syzkaller.appspotmail.com
Fix commit: b088b53e20c7 ALSA: aloop: Fix inconsistent format due to incomplete rule
First crash: 2299d, last: 2283d
▶ ▼ Discussions (6)
Title Replies (including bot) Last reply
[PATCH 3.16 000/254] 3.16.55-rc1 review 261 (261) 2018/03/03 15:48
[PATCH 3.2 000/140] 3.2.100-rc1 review 142 (142) 2018/02/28 16:57
[PATCH 4.4 00/87] 4.4.112-stable review 103 (103) 2018/02/14 16:43
[PATCH 4.9 00/96] 4.9.77-stable review 111 (111) 2018/01/21 16:03
[PATCH 4.14 000/118] 4.14.14-stable review 139 (139) 2018/01/16 20:50
[PATCH 3.18 00/46] 3.18.92-stable review 50 (50) 2018/01/16 20:31
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: unable to handle kernel paging request in memset_erms (2) sound C 11 2267d 2282d 5/26 fixed on 2018/05/13 22:34

Sample crash report:
BUG: unable to handle kernel paging request at ffffc90001da6000
IP: memset_erms+0x9/0x10 arch/x86/lib/memset_64.S:65
PGD 1dad2c067 P4D 1dad2c067 PUD 1dad2d067 PMD 1caf50067 PTE 0
Oops: 0002 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 4272 Comm: syzkaller606094 Not tainted 4.15.0-rc6+ #251
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:memset_erms+0x9/0x10 arch/x86/lib/memset_64.S:65
RSP: 0018:ffff8801bd1cf508 EFLAGS: 00010246
RAX: fffff520003f3c00 RBX: ffffc90001da6000 RCX: 00000000001f8200
RDX: 00000000001f8200 RSI: 0000000000000000 RDI: ffffc90001da6000
RBP: ffff8801bd1cf528 R08: 0000000000000000 R09: ffffc90001da6000
R10: 000000000003f040 R11: fffff520003f3c3f R12: 00000000001f8200
R13: 0000000000000000 R14: ffffffff86e6631c R15: 0000000000000010
FS:  00007fe118c24700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc90001da6000 CR3: 00000001be894006 CR4: 00000000001606e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 memset include/linux/string.h:329 [inline]
 snd_pcm_format_set_silence+0x13f/0x4b0 sound/core/pcm_misc.c:414
 loopback_prepare+0xcdc/0x1000 sound/drivers/aloop.c:356
 snd_pcm_do_prepare+0x58/0x90 sound/core/pcm_native.c:1640
 snd_pcm_action_single+0x70/0x110 sound/core/pcm_native.c:1084
 snd_pcm_action_nonatomic+0x95/0xa0 sound/core/pcm_native.c:1151
 snd_pcm_prepare+0x115/0x1a0 sound/core/pcm_native.c:1687
 snd_pcm_kernel_ioctl+0x97/0x240 sound/core/pcm_native.c:2993
 snd_pcm_oss_prepare+0x49/0x150 sound/core/oss/pcm_oss.c:1105
 snd_pcm_oss_make_ready+0xf9/0x130 sound/core/oss/pcm_oss.c:1133
 snd_pcm_oss_set_trigger+0x62d/0x830 sound/core/oss/pcm_oss.c:1944
 snd_pcm_oss_poll+0x77c/0xd20 sound/core/oss/pcm_oss.c:2712
 do_pollfd fs/select.c:822 [inline]
 do_poll fs/select.c:872 [inline]
 do_sys_poll+0x715/0x10b0 fs/select.c:966
 SYSC_poll fs/select.c:1024 [inline]
 SyS_poll+0x10d/0x450 fs/select.c:1012
 entry_SYSCALL_64_fastpath+0x23/0x9a
RIP: 0033:0x449a09
RSP: 002b:00007fe118c23da8 EFLAGS: 00000297 ORIG_RAX: 0000000000000007
RAX: ffffffffffffffda RBX: 00000000006dbc24 RCX: 0000000000449a09
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020009fe0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000297 R12: 646e732f7665642f
R13: 7073642f7665642f R14: 0000040000000fde R15: 0000000000000005
Code: 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 <f3> aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 
RIP: memset_erms+0x9/0x10 arch/x86/lib/memset_64.S:65 RSP: ffff8801bd1cf508
CR2: ffffc90001da6000
---[ end trace 786071e5cf0edbd2 ]---

Crashes (35):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/01/08 04:14 upstream b84449dc14d2 19c05fff .config console log report syz C ci-upstream-kasan-gce
2018/01/08 04:36 mmots 69eed2290e1d 19c05fff .config console log report syz C ci-upstream-mmots-kasan-gce
2018/01/05 04:39 linux-next 73005e1a35fd 00193447 .config console log report syz C ci-upstream-next-kasan-gce
2018/01/15 11:37 upstream a8750ddca918 66d492a6 .config console log report ci-upstream-kasan-gce
2018/01/11 07:39 upstream 5f615b97cdea 02a19b64 .config console log report ci-upstream-kasan-gce
2018/01/08 06:08 upstream b84449dc14d2 19c05fff .config console log report ci-upstream-kasan-gce
2018/01/02 23:39 upstream 30a7acd57389 00193447 .config console log report ci-upstream-kasan-gce
2018/01/15 14:06 upstream a8750ddca918 66d492a6 .config console log report ci-upstream-kasan-gce-386
2018/01/15 10:09 upstream a8750ddca918 66d492a6 .config console log report ci-upstream-kasan-gce-386
2018/01/14 19:32 upstream 9443c168505d 66d492a6 .config console log report ci-upstream-kasan-gce-386
2018/01/14 06:59 upstream 2c1cfa499018 c9e7aeae .config console log report ci-upstream-kasan-gce-386
2018/01/11 11:08 upstream 5f615b97cdea 9dc808a6 .config console log report ci-upstream-kasan-gce-386
2018/01/18 20:37 linux-next a362f6d2cdbd 161c1d64 .config console log report ci-upstream-next-kasan-gce
2018/01/18 06:37 linux-next 1fec57a31e56 b8970f31 .config console log report ci-upstream-next-kasan-gce
2018/01/17 04:51 linux-next fdddade65d7b a46e5318 .config console log report ci-upstream-next-kasan-gce
2018/01/16 19:14 linux-next fdddade65d7b 4198e588 .config console log report ci-upstream-next-kasan-gce
2018/01/16 11:10 linux-next fdddade65d7b 4198e588 .config console log report ci-upstream-next-kasan-gce
2018/01/16 06:46 linux-next fdddade65d7b e17f4a5d .config console log report ci-upstream-next-kasan-gce
2018/01/15 16:12 linux-next b625c1ff8227 66d492a6 .config console log report ci-upstream-next-kasan-gce
2018/01/14 18:37 linux-next 3e53c7415294 66d492a6 .config console log report ci-upstream-next-kasan-gce
2018/01/13 08:15 linux-next 3e53c7415294 9dc808a6 .config console log report ci-upstream-next-kasan-gce
2018/01/12 15:09 linux-next 3e53c7415294 9dc808a6 .config console log report ci-upstream-next-kasan-gce
2018/01/11 06:22 linux-next b4464bcab38d 02a19b64 .config console log report ci-upstream-next-kasan-gce
2018/01/11 02:41 linux-next b4464bcab38d 02a19b64 .config console log report ci-upstream-next-kasan-gce
2018/01/10 16:53 linux-next b4464bcab38d 02a19b64 .config console log report ci-upstream-next-kasan-gce
2018/01/10 03:21 mmots 69eed2290e1d 1f60c828 .config console log report ci-upstream-mmots-kasan-gce
2018/01/09 10:27 mmots 69eed2290e1d 11dc42f6 .config console log report ci-upstream-mmots-kasan-gce
2018/01/09 04:14 linux-next 895c0dde3985 11dc42f6 .config console log report ci-upstream-next-kasan-gce
2018/01/08 09:11 mmots 69eed2290e1d 19c05fff .config console log report ci-upstream-mmots-kasan-gce
2018/01/08 00:12 mmots 69eed2290e1d 19c05fff .config console log report ci-upstream-mmots-kasan-gce
2018/01/07 06:33 linux-next 990b6a07d18c 19c05fff .config console log report ci-upstream-next-kasan-gce
2018/01/05 17:20 linux-next 990b6a07d18c 00193447 .config console log report ci-upstream-next-kasan-gce
2018/01/05 05:12 linux-next 73005e1a35fd 00193447 .config console log report ci-upstream-next-kasan-gce
2018/01/05 04:18 linux-next 73005e1a35fd 00193447 .config console log report ci-upstream-next-kasan-gce
2018/01/04 23:22 linux-next 73005e1a35fd 00193447 .config console log report ci-upstream-next-kasan-gce
* Struck through repros no longer work on HEAD.