syzbot


general protection fault in sg_read

Status: public: reported C repro on 2019/04/12 00:00
Reported-by: syzbot+70d1e7619807e2901081@syzkaller.appspotmail.com
First crash: 2330d, last: 2194d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 general protection fault in sg_read C 21823 2217d 2381d 0/3 closed as invalid on 2019/01/01 20:10

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
IPVS: Creating netns size=2552 id=3
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 3738 Comm: syzkaller258683 Not tainted 4.4.120-gd63fdf6 #28
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8800adff4800 task.stack: ffff8801d9228000
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
RIP: 0010:[<ffffffff825bab57>]  [<ffffffff825bab57>] sg_read_oxfer drivers/scsi/sg.c:1976 [inline]
RIP: 0010:[<ffffffff825bab57>]  [<ffffffff825bab57>] sg_read+0xd17/0x1490 drivers/scsi/sg.c:530
RSP: 0018:ffff8801d922fbc0  EFLAGS: 00010246
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff825bab1e
RDX: 0000000000000000 RSI: 0000000020000024 RDI: ffff8800ad5ba270
RBP: ffff8801d922fcd0 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000000 R11: 1ffff1003b245f3e R12: 0000000000000076
R13: 0000000000000000 R14: ffff8801d0164060 R15: ffff8800ad5ba240
FS:  00007f82ddc77700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000025525c0 CR3: 00000000b1f8a000 CR4: 0000000000160670
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000000000000 0000000000000000 0000000000000000 ffff8800ad5ba258
 0000000000000000 ffff8800ad5ba268 000000000000009a 0000000000000000
 ffff8801d4b12500 0000000000001000 1ffff1003b245f84 0000000020000024
Call Trace:
 [<ffffffff8151cf33>] __vfs_read+0x103/0x440 fs/read_write.c:432
 [<ffffffff8151edd3>] vfs_read+0x123/0x3a0 fs/read_write.c:454
 [<ffffffff81521719>] SYSC_read fs/read_write.c:569 [inline]
 [<ffffffff81521719>] SyS_read+0xd9/0x1b0 fs/read_write.c:562
 [<ffffffff8377395f>] entry_SYSCALL_64_fastpath+0x1c/0x98
Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 97 06 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5f 28 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 6b 06 00 00 48 8b 1b 48 85 db 0f 84 3b 03 00 
RIP  [<ffffffff825bab57>] sg_read_oxfer drivers/scsi/sg.c:1976 [inline]
RIP  [<ffffffff825bab57>] sg_read+0xd17/0x1490 drivers/scsi/sg.c:530
 RSP <ffff8801d922fbc0>
general protection fault: 0000 [#2] [   27.836986] ---[ end trace 1695d5206311e472 ]---
Kernel panic - not syncing: Fatal exception
PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 3740 Comm: syzkaller258683 Tainted: G      D         4.4.120-gd63fdf6 #28
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801d925b000 task.stack: ffff8801d97e0000
RIP: 0010:[<ffffffff825bab57>]  [<ffffffff825bab57>] sg_read_oxfer drivers/scsi/sg.c:1976 [inline]
RIP: 0010:[<ffffffff825bab57>]  [<ffffffff825bab57>] sg_read+0xd17/0x1490 drivers/scsi/sg.c:530
RSP: 0018:ffff8801d97e7bc0  EFLAGS: 00010246
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff825bab1e
RDX: 0000000000000000 RSI: 0000000020000024 RDI: ffff8801d9754370
RBP: ffff8801d97e7cd0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 1ffff1003b2fcf3e R12: 0000000000000076
R13: 0000000000000000 R14: ffff8801d0ce2a80 R15: ffff8801d9754340
FS:  00007f82ddc56700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f82ddc55e78 CR3: 00000000b1f8a000 CR4: 0000000000160670
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000000000000 0000000000000000 0000000000000000 ffff8801d9754358
 0000000000000000 ffff8801d9754368 000000000000009a 0000000000000000
 ffff8801d4b12500 0000000000001000 1ffff1003b2fcf84 0000000020000024
Call Trace:
 [<ffffffff8151cf33>] __vfs_read+0x103/0x440 fs/read_write.c:432
 [<ffffffff8151edd3>] vfs_read+0x123/0x3a0 fs/read_write.c:454
 [<ffffffff81521719>] SYSC_read fs/read_write.c:569 [inline]
 [<ffffffff81521719>] SyS_read+0xd9/0x1b0 fs/read_write.c:562
 [<ffffffff8377395f>] entry_SYSCALL_64_fastpath+0x1c/0x98
Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 97 06 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5f 28 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 6b 06 00 00 48 8b 1b 48 85 db 0f 84 3b 03 00 
RIP  [<ffffffff825bab57>] sg_read_oxfer drivers/scsi/sg.c:1976 [inline]
RIP  [<ffffffff825bab57>] sg_read+0xd17/0x1490 drivers/scsi/sg.c:530
 RSP <ffff8801d97e7bc0>
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (11034):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/03/07 17:35 https://android.googlesource.com/kernel/common android-4.4 d63fdf61a4dc a5e76540 .config console log report syz C ci-android-44-kasan-gce
2018/03/05 19:53 https://android.googlesource.com/kernel/common android-4.4 855ea747806b bbd5104f .config console log report syz C ci-android-44-kasan-gce
2018/02/23 13:34 https://android.googlesource.com/kernel/common android-4.4 17c7c494f718 33464158 .config console log report syz C ci-android-44-kasan-gce
2018/01/23 17:56 https://android.googlesource.com/kernel/common android-4.4 3fc4284df70b a5b7566c .config console log report syz C ci-android-44-kasan-gce
2018/01/19 05:58 https://android.googlesource.com/kernel/common android-4.4 ca0ebb4ee237 161c1d64 .config console log report syz C ci-android-44-kasan-gce
2018/01/08 01:30 https://android.googlesource.com/kernel/common android-4.4 dac143966992 19c05fff .config console log report syz C ci-android-44-kasan-gce-386
2018/01/08 01:03 https://android.googlesource.com/kernel/common android-4.4 dac143966992 19c05fff .config console log report syz C ci-android-44-kasan-gce-386
2018/01/07 23:18 https://android.googlesource.com/kernel/common android-4.4 dac143966992 19c05fff .config console log report syz C ci-android-44-kasan-gce-386
2018/01/07 22:44 https://android.googlesource.com/kernel/common android-4.4 dac143966992 19c05fff .config console log report syz C ci-android-44-kasan-gce-386
2018/01/07 19:23 https://android.googlesource.com/kernel/common android-4.4 dac143966992 19c05fff .config console log report syz C ci-android-44-kasan-gce-386
2018/01/07 19:21 https://android.googlesource.com/kernel/common android-4.4 dac143966992 19c05fff .config console log report syz C ci-android-44-kasan-gce
2018/01/07 18:59 https://android.googlesource.com/kernel/common android-4.4 dac143966992 19c05fff .config console log report syz C ci-android-44-kasan-gce
2018/01/07 17:06 https://android.googlesource.com/kernel/common android-4.4 dac143966992 19c05fff .config console log report syz C ci-android-44-kasan-gce
2018/01/07 16:21 https://android.googlesource.com/kernel/common android-4.4 dac143966992 19c05fff .config console log report syz C ci-android-44-kasan-gce
2018/01/07 12:33 https://android.googlesource.com/kernel/common android-4.4 dac143966992 19c05fff .config console log report syz C ci-android-44-kasan-gce
2018/01/03 07:02 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 00193447 .config console log report syz C ci-android-44-kasan-gce-386
2018/01/01 13:26 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 00193447 .config console log report syz C ci-android-44-kasan-gce-386
2018/01/01 10:01 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 00193447 .config console log report syz C ci-android-44-kasan-gce-386
2018/01/01 07:20 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 00193447 .config console log report syz C ci-android-44-kasan-gce
2018/01/01 04:19 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 00193447 .config console log report syz C ci-android-44-kasan-gce
2017/12/31 10:16 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/31 03:56 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce
2017/12/31 02:02 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/30 20:49 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce
2017/12/28 13:29 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 7d240098 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/28 09:40 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 7d240098 .config console log report syz C ci-android-44-kasan-gce
2017/12/28 07:27 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 7d240098 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/28 03:02 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 7d240098 .config console log report syz C ci-android-44-kasan-gce
2017/12/27 23:50 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 7d240098 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/27 17:38 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 09c8f4c0 .config console log report syz C ci-android-44-kasan-gce
2017/12/27 15:59 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 09c8f4c0 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/27 12:45 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 09c8f4c0 .config console log report syz C ci-android-44-kasan-gce
2017/12/27 09:14 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 09c8f4c0 .config console log report syz C ci-android-44-kasan-gce
2017/12/27 01:30 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 73aba437 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/26 20:01 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 73aba437 .config console log report syz C ci-android-44-kasan-gce
2017/12/10 16:00 https://android.googlesource.com/kernel/common android-4.4 ed884ebd80a9 5ad0ce95 .config console log report syz C ci-android-44-kasan-gce
2017/12/09 16:13 https://android.googlesource.com/kernel/common android-4.4 ed884ebd80a9 5ad0ce95 .config console log report syz C ci-android-44-kasan-gce
2018/02/23 13:36 https://android.googlesource.com/kernel/common android-4.4 17c7c494f718 33464158 .config console log report syz C ci-android-44-kasan-gce-386
2018/01/24 09:32 https://android.googlesource.com/kernel/common android-4.4 ef588ef53d3e a5b7566c .config console log report syz C ci-android-44-kasan-gce-386
2018/03/31 09:58 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 8fbce0e4 .config console log report syz ci-android-44-kasan-gce-386
2018/03/07 16:11 https://android.googlesource.com/kernel/common android-4.4 d63fdf61a4dc a5e76540 .config console log report syz ci-android-44-kasan-gce-386
2018/03/05 19:35 https://android.googlesource.com/kernel/common android-4.4 855ea747806b bbd5104f .config console log report syz ci-android-44-kasan-gce-386
2018/03/01 01:52 https://android.googlesource.com/kernel/common android-4.4 024f962d4b24 05b5a32c .config console log report syz ci-android-44-kasan-gce-386
2018/04/11 22:13 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 9cd56d71 .config console log report ci-android-44-kasan-gce
2018/04/23 10:47 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 20941ab3 .config console log report ci-android-44-kasan-gce-386
2018/04/23 05:39 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/23 01:23 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/22 20:18 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/22 17:24 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/22 15:37 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/22 13:02 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/22 09:18 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/22 06:31 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/22 03:23 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/22 02:15 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/22 01:03 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/21 23:50 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/21 22:01 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/21 18:40 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/21 16:59 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/21 15:56 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d23fcf6c .config console log report ci-android-44-kasan-gce-386
2018/04/21 10:25 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 ca03d688 .config console log report ci-android-44-kasan-gce-386
2018/04/21 07:12 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 ca03d688 .config console log report ci-android-44-kasan-gce-386
2018/04/21 04:59 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 ca03d688 .config console log report ci-android-44-kasan-gce-386
2018/04/21 01:59 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 ca03d688 .config console log report ci-android-44-kasan-gce-386
2018/04/20 20:50 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 cc402841 .config console log report ci-android-44-kasan-gce-386
2018/04/20 18:23 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 cc402841 .config console log report ci-android-44-kasan-gce-386
2018/04/20 16:59 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 cc402841 .config console log report ci-android-44-kasan-gce-386
2018/04/20 11:34 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 eae05cb0 .config console log report ci-android-44-kasan-gce-386
2018/04/20 09:31 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 eae05cb0 .config console log report ci-android-44-kasan-gce-386
2018/04/20 06:07 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 eae05cb0 .config console log report ci-android-44-kasan-gce-386
2018/04/20 05:04 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 eae05cb0 .config console log report ci-android-44-kasan-gce-386
2018/04/20 02:16 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 eae05cb0 .config console log report ci-android-44-kasan-gce-386
2018/04/19 22:42 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 3642839c .config console log report ci-android-44-kasan-gce-386
2018/04/19 20:21 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 3642839c .config console log report ci-android-44-kasan-gce-386
2018/04/19 17:43 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 3642839c .config console log report ci-android-44-kasan-gce-386
2018/04/19 14:12 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 3642839c .config console log report ci-android-44-kasan-gce-386
2018/04/19 08:54 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 d1b2ef69 .config console log report ci-android-44-kasan-gce-386
2018/04/19 03:45 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 829f0234 .config console log report ci-android-44-kasan-gce-386
2018/04/18 21:45 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 829f0234 .config console log report ci-android-44-kasan-gce-386
2018/04/18 19:30 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 52643b44 .config console log report ci-android-44-kasan-gce-386
2018/04/18 09:06 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 52643b44 .config console log report ci-android-44-kasan-gce-386
2018/04/18 01:51 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 b80fd3b5 .config console log report ci-android-44-kasan-gce-386
2018/04/17 01:40 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 b80fd3b5 .config console log report ci-android-44-kasan-gce-386
2018/04/17 00:39 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 b80fd3b5 .config console log report ci-android-44-kasan-gce-386
2018/04/16 11:33 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 802ac912 .config console log report ci-android-44-kasan-gce-386
2018/04/15 16:07 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 7a67784c .config console log report ci-android-44-kasan-gce-386
2018/04/15 14:58 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 7a67784c .config console log report ci-android-44-kasan-gce-386
2018/04/15 11:34 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 7a67784c .config console log report ci-android-44-kasan-gce-386
2018/04/15 08:30 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 7a67784c .config console log report ci-android-44-kasan-gce-386
2018/04/15 03:05 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 7a67784c .config console log report ci-android-44-kasan-gce-386
2018/04/15 00:00 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 7a67784c .config console log report ci-android-44-kasan-gce-386
2018/04/14 22:13 https://android.googlesource.com/kernel/common android-4.4 38f41ec1cb31 7a67784c .config console log report ci-android-44-kasan-gce-386
* Struck through repros no longer work on HEAD.