syzbot

 sign-in | mailing list | source | docs
🐞 Open [717] 🐞 Fixed [181] 🐞 Invalid [640] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in tcp_sendmsg_locked

Status: auto-closed as invalid on 2019/12/20 05:10
Reported-by: syzbot+398480e87696bf4d85a1@syzkaller.appspotmail.com
First crash: 1688d, last: 1677d
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-414 general protection fault in tcp_sendmsg_locked 1672 1677d 1688d 0/1 auto-closed as invalid on 2019/12/20 16:36

Sample crash report:
SELinux: failed to load policy
TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
FAT-fs (loop4): bogus number of reserved sectors
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 7885 Comm: syz-executor.5 Not tainted 4.14.145 #0
FAT-fs (loop4): Can't find a valid FAT filesystem
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff888063492180 task.stack: ffff888063890000
RIP: 0010:tcp_sendmsg_locked+0x50e/0x3200 net/ipv4/tcp.c:1281
RSP: 0018:ffff8880638979b0 EFLAGS: 00010206
RAX: 0000000000000012 RBX: 0000000000000000 RCX: ffffc90005e65000
RDX: 000000000000011c RSI: ffffffff85240e44 RDI: 0000000000000090
RBP: ffff888063897b48 R08: ffff888063492180 R09: 0000000000000001
R10: 0000000000000000 R11: ffff888063492180 R12: dffffc0000000000
R13: ffff8880a616e500 R14: ffff888063897c28 R15: ffff88806240e0c0
FS:  00007f397c7f3700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6761146df8 CR3: 0000000087fca000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 tcp_sendmsg+0x30/0x50 net/ipv4/tcp.c:1457
 inet_sendmsg+0x122/0x500 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xce/0x110 net/socket.c:656
 sock_write_iter+0x21d/0x390 net/socket.c:925
 call_write_iter include/linux/fs.h:1777 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x4a7/0x6b0 fs/read_write.c:482
 vfs_write+0x198/0x500 fs/read_write.c:544
 SYSC_write fs/read_write.c:590 [inline]
 SyS_write+0xfd/0x230 fs/read_write.c:582
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459a09
RSP: 002b:00007f397c7f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09
RDX: 00000000fffffffe RSI: 0000000020000380 RDI: 0000000000000009
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f397c7f36d4
R13: 00000000004c5f88 R14: 00000000004e0610 R15: 00000000ffffffff
Code: d4 38 fc 4d 85 ed 0f 84 40 08 00 00 e8 ac d4 38 fc 8b 85 78 ff ff ff 48 8d bb 90 00 00 00 89 85 50 ff ff ff 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 06 0f 8e 4a 25 00 00 f6 83 90 00 00 00 
RIP: tcp_sendmsg_locked+0x50e/0x3200 net/ipv4/tcp.c:1281 RSP: ffff8880638979b0
kobject: 'loop2' (ffff8880a4a4e9e0): kobject_uevent_env
kobject: 'loop2' (ffff8880a4a4e9e0): fill_kobj_path: path = '/devices/virtual/block/loop2'
---[ end trace 1de86189d3763768 ]---

Crashes (1767):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/09/21 04:40 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/21 03:46 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/21 02:43 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/21 01:51 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/21 01:08 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/21 00:08 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 22:59 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 21:58 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 21:14 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 20:00 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 19:22 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 18:09 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 17:51 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 16:49 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 16:42 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 15:26 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 14:17 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 13:14 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 12:44 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 11:43 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 10:54 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 09:54 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 09:39 linux-4.14.y b10ab5e2c476 d96e88f3 .config console log report ci2-linux-4-14
2019/09/20 08:01 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/20 07:54 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/20 06:52 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/20 05:49 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/20 04:49 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/20 04:30 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/20 03:24 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/20 03:03 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/20 01:58 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/20 01:27 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/20 00:21 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/19 23:25 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/19 21:56 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/19 21:50 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config console log report ci2-linux-4-14
2019/09/19 19:43 linux-4.14.y b10ab5e2c476 eb940044 .config console log report ci2-linux-4-14
2019/09/19 18:27 linux-4.14.y b10ab5e2c476 eb940044 .config console log report ci2-linux-4-14
2019/09/19 17:45 linux-4.14.y b10ab5e2c476 eb940044 .config console log report ci2-linux-4-14
2019/09/19 16:45 linux-4.14.y b10ab5e2c476 eb940044 .config console log report ci2-linux-4-14
2019/09/10 11:10 linux-4.14.y e2cd24b62938 a60cb4cd .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.