syzbot

 sign-in | mailing list | source | docs
🐞 Open [987] ≡ Subsystems 🐞 Fixed [5236] 🐞 Invalid [12505] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in SyS_bpf (2)

Status: fixed on 2018/02/26 20:04
Subsystems: bpf
[Documentation on labels]
Fix commit: 952fad8e3239 bpf: fix sock_map_alloc() error path
First crash: 2263d, last: 2249d
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in SyS_bpf C 10 2434d 2435d 3/26 fixed on 2017/10/24 06:54

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
audit: type=1400 audit(1518457449.459:8): avc:  denied  { map_create } for  pid=4177 comm="syzkaller497664" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 4177 Comm: syzkaller497664 Not tainted 4.16.0-rc1+ #12
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:find_and_alloc_map kernel/bpf/syscall.c:124 [inline]
RIP: 0010:map_create kernel/bpf/syscall.c:439 [inline]
RIP: 0010:SYSC_bpf kernel/bpf/syscall.c:1866 [inline]
RIP: 0010:SyS_bpf+0x960/0x4860 kernel/bpf/syscall.c:1843
RSP: 0018:ffff8801b135f778 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff817f53df
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000282
RBP: ffff8801b135fe00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff85ef2ec0
R13: ffff8801b135fd58 R14: ffffffffffffffea R15: ffff8801b135fdd8
FS:  0000000002346880(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020efafd4 CR3: 00000001b339b006 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 do_syscall_64+0x282/0x940 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x26/0x9b
RIP: 0033:0x43fd49
RSP: 002b:00007ffc05a1b908 EFLAGS: 00000217 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd49
RDX: 000000000000002c RSI: 0000000020efafd4 RDI: 0000000000000000
RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000217 R12: 0000000000401670
R13: 0000000000401700 R14: 0000000000000000 R15: 0000000000000000
Code: ff 4c 89 ef ff d3 48 3d 00 f0 ff ff 48 89 c3 0f 87 ad 13 00 00 e8 71 a9 f1 ff 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 58 33 00 00 4c 89 ea 48 b8 00 00 00 00 00 fc 
RIP: find_and_alloc_map kernel/bpf/syscall.c:124 [inline] RSP: ffff8801b135f778
RIP: map_create kernel/bpf/syscall.c:439 [inline] RSP: ffff8801b135f778
RIP: SYSC_bpf kernel/bpf/syscall.c:1866 [inline] RSP: ffff8801b135f778
RIP: SyS_bpf+0x960/0x4860 kernel/bpf/syscall.c:1843 RSP: ffff8801b135f778
---[ end trace b0bf456e1a3452a7 ]---
Kernel panic - not syncing: Fatal exception
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1065):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/02/12 17:47 bpf-next 7928b2cbe55b 88bc17df .config console log report syz C ci-upstream-bpf-next-kasan-gce
2018/02/26 08:12 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 07:57 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 07:50 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 07:38 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 07:36 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 07:34 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 07:32 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 07:17 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 07:14 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 07:12 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 06:57 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 06:56 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 06:48 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 06:44 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 06:32 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 06:26 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 06:18 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 06:15 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 06:09 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 05:57 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 05:37 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 05:28 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 05:25 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 05:08 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 04:30 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 04:16 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 03:58 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 03:49 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 03:32 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 03:27 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 03:20 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 03:12 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 03:12 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 03:00 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 01:54 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 01:53 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 01:50 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 01:35 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 00:57 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/26 00:53 bpf-next 7d72637eb39f 9fe8aa42 .config console log report ci-upstream-bpf-next-kasan-gce
2018/02/12 17:32 bpf-next 7928b2cbe55b 88bc17df .config console log report ci-upstream-bpf-next-kasan-gce
* Struck through repros no longer work on HEAD.