syzbot

 sign-in | mailing list | source | docs
🐞 Open [196] 🐞 Fixed [42] 🐞 Invalid [470] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in loop_validate_file

Status: public: reported syz repro on 2019/04/14 09:28
Reported-by: syzbot+486112e0b304714e563a@syzkaller.appspotmail.com
First crash: 2106d, last: 1694d
▶ ▼ Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-44 general protection fault in loop_validate_file syz 20 1920d 1838d 0/2 public: reported syz repro on 2019/04/14 00:02
android-414 general protection fault in loop_validate_file 4 1927d 1838d 0/1 auto-closed as invalid on 2019/07/13 08:46
upstream general protection fault in loop_validate_file block C 19 1953d 2137d 0/26 closed as dup on 2018/06/18 14:51
upstream general protection fault in loop_validate_file (2) block 3 1862d 1865d 11/26 fixed on 2019/04/01 10:28
android-414 general protection fault in loop_validate_file (2) syz 6 1692d 1738d 0/1 public: reported syz repro on 2019/07/22 13:25
linux-4.14 general protection fault in loop_validate_file C error 9 418d 1701d 0/1 upstream: reported C repro on 2019/08/28 22:28

Sample crash report:
IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 13004 Comm: syz-executor1 Not tainted 4.9.117-g8b21e85 #19
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801cda83000 task.stack: ffff8801cd9b8000
RIP: 0010:[<ffffffff825c6bcd>]  [<ffffffff825c6bcd>] loop_validate_file+0x20d/0x400 drivers/block/loop.c:656
RSP: 0018:ffff8801cd9bfae0  EFLAGS: 00010206
RAX: 0000000000000036 RBX: dffffc0000000000 RCX: ffff8801cda83000
RDX: 0000000000000000 RSI: ffffffff825c6b9d RDI: 00000000000001b0
RBP: ffff8801cd9bfaf8 R08: ffff8801cda83910 R09: 0000000000000001
R10: 0000000000000000 R11: 1ffff10039b5071d R12: 0000000000000000
R13: ffff8801d61a2840 R14: ffff8801d61a2840 R15: ffff8801d38cdc58
FS:  00007fb73210d700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fffdbd43c00 CR3: 00000001d3d61000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801d38cdb00 ffff8801cd121200 0000000000000004 ffff8801cd9bfb80
 ffffffff825cc31d ffff8801cd9bfd38 ffffffff8153af09 0000000000930000
 ffff8801d38cdb18 ffff8801cd9bfb80 0000004c0000000b 1ffff10039b37f6c
Call Trace:
 [<ffffffff825cc31d>] loop_change_fd drivers/block/loop.c:702 [inline]
 [<ffffffff825cc31d>] lo_ioctl+0x3ed/0x1690 drivers/block/loop.c:1359
 [<ffffffff81e587e6>] __blkdev_driver_ioctl block/ioctl.c:294 [inline]
 [<ffffffff81e587e6>] blkdev_ioctl+0x7b6/0x1a70 block/ioctl.c:590
 [<ffffffff816330ee>] block_ioctl+0xde/0x120 fs/block_dev.c:1688
 [<ffffffff815b309c>] vfs_ioctl fs/ioctl.c:43 [inline]
 [<ffffffff815b309c>] file_ioctl fs/ioctl.c:493 [inline]
 [<ffffffff815b309c>] do_vfs_ioctl+0x1ac/0x11a0 fs/ioctl.c:677
 [<ffffffff815b411f>] SYSC_ioctl fs/ioctl.c:694 [inline]
 [<ffffffff815b411f>] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:685
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff839fcc13>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 00 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 f7 01 00 00 4d 8b a4 24 f0 00 00 00 49 8d bc 24 b0 01 00 00 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 cc 01 00 00 4d 8b a4 24 b0 01 00 00 4c 89 e0 
RIP  [<ffffffff825c6bcd>] loop_validate_file+0x20d/0x400 drivers/block/loop.c:656
 RSP <ffff8801cd9bfae0>
---[ end trace 28a6b7ea2c287e0a ]---

Crashes (28):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/08/05 13:36 https://android.googlesource.com/kernel/common android-4.9 8b21e85d919c 1beb8136 .config console log report syz ci-android-49-kasan-gce-root
2018/08/05 12:30 https://android.googlesource.com/kernel/common android-4.9 8b21e85d919c 1beb8136 .config console log report syz ci-android-49-kasan-gce
2018/07/19 14:41 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 49f35839 .config console log report syz ci-android-49-kasan-gce
2018/07/19 14:20 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 49f35839 .config console log report syz ci-android-49-kasan-gce-root
2019/09/04 12:18 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 12381952 .config console log report syz ci-android-49-kasan-gce-386
2018/08/05 12:37 https://android.googlesource.com/kernel/common android-4.9 8b21e85d919c 1beb8136 .config console log report syz ci-android-49-kasan-gce-386
2018/07/19 13:35 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 49f35839 .config console log report syz ci-android-49-kasan-gce-386
2019/04/27 16:15 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 b617407b .config console log report ci-android-49-kasan-gce
2018/12/01 07:01 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 d8988561 .config console log report ci-android-49-kasan-gce
2018/11/24 17:55 https://android.googlesource.com/kernel/common android-4.9 f44ed2c9232d ecc7c870 .config console log report ci-android-49-kasan-gce
2018/11/24 06:50 https://android.googlesource.com/kernel/common android-4.9 f44ed2c9232d eb9ed731 .config console log report ci-android-49-kasan-gce
2018/11/17 13:57 https://android.googlesource.com/kernel/common android-4.9 109a48ed2f69 b08ee62a .config console log report ci-android-49-kasan-gce
2018/11/16 19:07 https://android.googlesource.com/kernel/common android-4.9 109a48ed2f69 f5e275d1 .config console log report ci-android-49-kasan-gce
2018/08/25 12:59 https://android.googlesource.com/kernel/common android-4.9 09eb2ba5ed0c 9be5aa1d .config console log report ci-android-49-kasan-gce-root
2018/08/19 13:03 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce-root
2018/08/16 07:59 https://android.googlesource.com/kernel/common android-4.9 f85543ba3c54 9ccc1d45 .config console log report ci-android-49-kasan-gce
2018/08/14 19:13 https://android.googlesource.com/kernel/common android-4.9 9dc978d43ec7 5084a625 .config console log report ci-android-49-kasan-gce-root
2018/08/09 04:29 https://android.googlesource.com/kernel/common android-4.9 856452b4f22e 2eeda842 .config console log report ci-android-49-kasan-gce-root
2018/08/06 03:14 https://android.googlesource.com/kernel/common android-4.9 8b21e85d919c 1beb8136 .config console log report ci-android-49-kasan-gce
2018/08/05 20:25 https://android.googlesource.com/kernel/common android-4.9 8b21e85d919c 1beb8136 .config console log report ci-android-49-kasan-gce
2018/08/04 14:36 https://android.googlesource.com/kernel/common android-4.9 8b21e85d919c 3476a2df .config console log report ci-android-49-kasan-gce
2018/08/04 02:22 https://android.googlesource.com/kernel/common android-4.9 8b21e85d919c df7f6947 .config console log report ci-android-49-kasan-gce
2019/03/21 12:20 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 427ea487 .config console log report ci-android-49-kasan-gce-386
2019/03/14 21:10 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 d72db19b .config console log report ci-android-49-kasan-gce-386
2018/10/24 02:51 https://android.googlesource.com/kernel/common android-4.9 b8bd066f13f4 a8292de9 .config console log report ci-android-49-kasan-gce-386
2018/09/04 09:56 https://android.googlesource.com/kernel/common android-4.9 a06ea261bc2a a4718693 .config console log report ci-android-49-kasan-gce-386
2018/08/21 20:20 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce-386
2018/08/12 21:38 https://android.googlesource.com/kernel/common android-4.9 9dc978d43ec7 7a88b141 .config console log report ci-android-49-kasan-gce-386
* Struck through repros no longer work on HEAD.