syzbot

 sign-in | mailing list | source | docs
🐞 Open [977] ≡ Subsystems 🐞 Fixed [5207] 🐞 Invalid [12453] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in string

Status: closed as dup on 2017/12/11 23:11
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+f7b85b77fd8042059586165494cd708475e87fc3@syzkaller.appspotmail.com
First crash: 2331d, last: 2308d
▶ ▼ Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
general protection fault in show_timer fs C 10 2309d 2328d
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in string (2) net 1 2083d 2083d 8/26 fixed on 2018/08/28 17:48

Sample crash report:
audit: type=1400 audit(1513084262.707:7): avc:  denied  { map } for  pid=3146 comm="syzkaller813193" path="/root/syzkaller813193227" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 3146 Comm: syzkaller813193 Not tainted 4.15.0-rc3+ #218
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:string+0xb4/0x200 lib/vsprintf.c:595
RSP: 0018:ffff8801c44cf8c8 EFLAGS: 00010006
RAX: dffffc0000000000 RBX: fffffffffffffffe RCX: ffffffff8513b1ef
RDX: 000dccad8dce4e8e RSI: 1ffff10038899f01 RDI: ffff8801c44cf8e8
RBP: ffff8801c44cf918 R08: ffffed00388dd4c6 R09: ffffed00388dd4c6
R10: 0000000000000002 R11: ffffed00388dd4c5 R12: 006e656c6e727474
R13: 006e656c6e727473 R14: ffffffffffffffff R15: ffff8801c46ea62a
FS:  000000000214a880(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000454f50 CR3: 00000001c587d000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 vsnprintf+0x863/0x1900 lib/vsprintf.c:2282
 seq_vprintf+0xe3/0x1a0 fs/seq_file.c:397
 seq_printf+0xb3/0xe0 fs/seq_file.c:412
 show_timer+0x1ee/0x2b0 fs/proc/base.c:2274
 seq_read+0x385/0x13d0 fs/seq_file.c:234
 __vfs_read+0xef/0xa00 fs/read_write.c:411
 vfs_read+0x124/0x360 fs/read_write.c:447
 SYSC_read fs/read_write.c:573 [inline]
 SyS_read+0xef/0x220 fs/read_write.c:566
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x440139
RSP: 002b:00007ffda492eb98 EFLAGS: 00000213 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007ffda492e940 RCX: 0000000000440139
RDX: 0000000000000000 RSI: 0000000020874000 RDI: 0000000000000003
RBP: 000000000000007f R08: 0000000000000011 R09: 65732f636f72702f
R10: 0000000000000000 R11: 0000000000000213 R12: 00007ffda492eba0
R13: 00000000004a1597 R14: 00007ffda492eab8 R15: 0000000000000001
Code: 01 00 00 e8 2f 83 5c fc 4d 85 f6 0f 84 10 01 00 00 e8 21 83 5c fc 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 4d 8d 65 01 48 c1 ea 03 <0f> b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 ec 00 00 
RIP: string+0xb4/0x200 lib/vsprintf.c:595 RSP: ffff8801c44cf8c8
---[ end trace 228c94274d296047 ]---
Kernel panic - not syncing: Fatal exception
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (40):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/12/12 13:13 upstream a638349bf6c2 081721ff .config console log report syz C ci-upstream-kasan-gce
2017/12/07 18:00 upstream 968edbd93c0c 5d643f8e .config console log report syz C ci-upstream-kasan-gce
2017/12/06 15:24 upstream 328b4ed93b69 0796857b .config console log report syz C ci-upstream-kasan-gce
2017/12/03 05:09 upstream 2db767d9889c 48359b97 .config console log report syz C ci-upstream-kasan-gce
2017/12/12 08:23 upstream a638349bf6c2 da131727 .config console log report syz C ci-upstream-kasan-gce-386
2017/12/07 18:13 upstream 968edbd93c0c 5d643f8e .config console log report syz C ci-upstream-kasan-gce-386
2017/12/03 22:36 upstream ae64f9bd1d36 48359b97 .config console log report syz C ci-upstream-kasan-gce-386
2017/12/03 05:36 upstream 2db767d9889c 48359b97 .config console log report syz C ci-upstream-kasan-gce-386
2017/12/14 12:30 mmots 82bcf1def3b5 ac20b98c .config console log report syz C ci-upstream-mmots-kasan-gce
2017/12/12 11:11 linux-next d20787938ddb da131727 .config console log report syz C ci-upstream-next-kasan-gce
2017/12/12 03:04 mmots 82bcf1def3b5 da131727 .config console log report syz C ci-upstream-mmots-kasan-gce
2017/12/09 14:29 linux-next ad4dac17f9d5 5ad0ce95 .config console log report syz C ci-upstream-next-kasan-gce
2017/12/07 13:47 linux-next e40fd8d6b4d9 5d643f8e .config console log report syz C ci-upstream-next-kasan-gce
2017/12/06 15:49 linux-next d5c52866f560 0796857b .config console log report syz C ci-upstream-next-kasan-gce
2017/12/15 11:11 upstream 032b4cc8ff84 ac20b98c .config console log report ci-upstream-kasan-gce
2017/12/05 03:43 upstream 2391f0b4808e de212f1a .config console log report ci-upstream-kasan-gce
2017/12/04 19:59 upstream ae64f9bd1d36 48359b97 .config console log report ci-upstream-kasan-gce
2017/12/03 04:49 upstream 2db767d9889c 48359b97 .config console log report ci-upstream-kasan-gce
2017/12/14 18:14 upstream 7c5cac1bc717 ac20b98c .config console log report ci-upstream-kasan-gce-386
2017/12/11 00:58 upstream 51090c5d6de0 5ad0ce95 .config console log report ci-upstream-kasan-gce-386
2017/11/29 02:37 upstream 43570f0383d6 34f2c233 .config console log report ci-upstream-kasan-gce-386
2017/11/28 19:33 upstream 43f462f1c2e1 ac93d7e1 .config console log report ci-upstream-kasan-gce-386
2017/11/27 11:41 upstream 4fbd8d194f06 deb5f6ae .config console log report ci-upstream-kasan-gce-386
2017/12/20 12:38 linux-next 6084b576dca2 2d836b1d .config console log report ci-upstream-next-kasan-gce
2017/12/20 09:32 linux-next 6084b576dca2 2d836b1d .config console log report ci-upstream-next-kasan-gce
2017/12/20 08:29 linux-next 6084b576dca2 2d836b1d .config console log report ci-upstream-next-kasan-gce
2017/12/20 01:47 linux-next 6084b576dca2 2d836b1d .config console log report ci-upstream-next-kasan-gce
2017/12/19 16:38 linux-next 6084b576dca2 af9163c7 .config console log report ci-upstream-next-kasan-gce
2017/12/19 13:30 linux-next 6084b576dca2 af9163c7 .config console log report ci-upstream-next-kasan-gce
2017/12/19 09:00 linux-next 6084b576dca2 1c4160ef .config console log report ci-upstream-next-kasan-gce
2017/12/19 02:59 linux-next 6084b576dca2 1c4160ef .config console log report ci-upstream-next-kasan-gce
2017/12/19 02:59 linux-next 6084b576dca2 1c4160ef .config console log report ci-upstream-next-kasan-gce
2017/12/17 11:56 linux-next 6084b576dca2 d5beb42a .config console log report ci-upstream-next-kasan-gce
2017/12/17 11:41 linux-next 6084b576dca2 d5beb42a .config console log report ci-upstream-next-kasan-gce
2017/12/16 17:31 linux-next 6084b576dca2 b6f0c91b .config console log report ci-upstream-next-kasan-gce
2017/12/16 15:02 linux-next 6084b576dca2 b6f0c91b .config console log report ci-upstream-next-kasan-gce
2017/12/15 08:37 linux-next 6084b576dca2 ac20b98c .config console log report ci-upstream-next-kasan-gce
2017/12/15 02:41 linux-next 6084b576dca2 ac20b98c .config console log report ci-upstream-next-kasan-gce
2017/12/04 17:30 linux-next 7cc61a0a562c 48359b97 .config console log report ci-upstream-next-kasan-gce
2017/11/29 12:20 mmots a4f586bceda4 34f2c233 .config console log report ci-upstream-mmots-kasan-gce
* Struck through repros no longer work on HEAD.