BUG: corrupted list in p9_fd_request

Status: upstream: reported syz repro on 2019/08/26 04:18
Reported-by: syzbot+00bd306c64c69d4df709@syzkaller.appspotmail.com
First crash: 2543d, last: 2257d
Fix bisection the fix commit could be any of (bisect log):
  a844dc4c5442 Linux 4.14.158
  4139fb08c05f Linux 4.14.187
   
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: corrupted list in p9_fd_request v9fs 8 6 2892d 2953d 0/29 auto-closed as invalid on 2019/03/10 15:35
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2023/01/23 03:32 9m retest repro linux-4.14.y report log
2023/01/23 02:32 9m retest repro linux-4.14.y report log
2023/01/23 01:32 9m retest repro linux-4.14.y report log
2023/01/23 00:32 9m retest repro linux-4.14.y report log
2023/01/22 15:32 10m retest repro linux-4.14.y report log
2023/01/22 09:32 9m retest repro linux-4.14.y report log
2023/01/22 00:32 13m retest repro linux-4.14.y report log
2023/01/21 15:32 9m retest repro linux-4.14.y report log
2023/01/21 13:32 14m retest repro linux-4.14.y report log
2023/01/21 11:32 10m retest repro linux-4.14.y report log
▶ ▼ Fix bisection attempts (7)
Created Duration User Patch Repo Result
2020/07/07 04:05 31m bisect fix linux-4.14.y OK (2) job log
2020/06/07 03:41 23m bisect fix linux-4.14.y OK (0) job log log
2020/05/08 02:52 26m bisect fix linux-4.14.y OK (0) job log log
2020/04/08 02:24 24m bisect fix linux-4.14.y OK (0) job log log
2020/03/09 01:58 25m bisect fix linux-4.14.y OK (0) job log log
2020/02/08 01:31 24m bisect fix linux-4.14.y OK (0) job log log
2020/01/09 00:43 25m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
8021q: adding VLAN 0 to HW filter on device batadv0
list_add double add: new=ffff88808ea22758, prev=ffff88808ea22758, next=ffff8880a67d85c0.
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:29!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 7223 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0
kobject: '9p-41' (ffff888095b9ce10): kobject_add_internal: parent: 'bdi', set: 'devices'
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff888097416180 task.stack: ffff88807fab8000
RIP: 0010:__list_add_valid.cold+0x26/0x3c lib/list_debug.c:29
RSP: 0018:ffff88807fabfa00 EFLAGS: 00010282
RAX: 0000000000000058 RBX: ffff8880a67d8580 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff86cc43c0 RDI: ffffed100ff57f36
RBP: ffff88807fabfa18 R08: 0000000000000058 R09: ffff888097416a48
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a67d85c0
R13: ffff88808ea22758 R14: ffff88808ea22758 R15: ffff88808ea22758
FS:  00007f14e844a700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8755a4d000 CR3: 000000007de71000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __list_add include/linux/list.h:60 [inline]
 list_add_tail include/linux/list.h:93 [inline]
 p9_fd_request+0xe3/0x2b0 net/9p/trans_fd.c:679
 p9_client_rpc+0x21b/0x1180 net/9p/client.c:774
kobject: '9p-41' (ffff888095b9ce10): kobject_uevent_env
kobject: '9p-41' (ffff888095b9ce10): fill_kobj_path: path = '/devices/virtual/bdi/9p-41'
 p9_client_clunk+0x89/0x150 net/9p/client.c:1507
 v9fs_dentry_release+0x6d/0xd0 fs/9p/vfs_dentry.c:73
 __dentry_kill+0x39a/0x580 fs/dcache.c:596
 dentry_kill fs/dcache.c:632 [inline]
 dput.part.0+0x59f/0x750 fs/dcache.c:847
 dput fs/dcache.c:811 [inline]
 do_one_tree+0x44/0x50 fs/dcache.c:1507
 shrink_dcache_for_umount+0x67/0x140 fs/dcache.c:1521
 generic_shutdown_super+0x6d/0x370 fs/super.c:431
 kill_anon_super+0x3f/0x60 fs/super.c:1006
 v9fs_kill_super+0x3e/0xa0 fs/9p/vfs_super.c:230
 deactivate_locked_super+0x74/0xe0 fs/super.c:319
 deactivate_super fs/super.c:350 [inline]
 deactivate_super+0x85/0xa0 fs/super.c:346
 cleanup_mnt+0xb2/0x150 fs/namespace.c:1183
 __cleanup_mnt+0x16/0x20 fs/namespace.c:1190
 task_work_run+0x114/0x190 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 exit_to_usermode_loop+0x1da/0x220 arch/x86/entry/common.c:164
 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
 do_syscall_64+0x4bc/0x640 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45a6f9
RSP: 002b:00007f14e8449c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000002 RCX: 000000000045a6f9
RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000020000140
RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14e844a6d4
R13: 00000000004cb211 R14: 00000000004e4988 R15: 00000000ffffffff
Code: e9 56 ff ff ff 4c 89 e1 48 c7 c7 80 0d 04 87 e8 bf 8f 40 fe 0f 0b 48 89 f2 4c 89 e1 4c 89 ee 48 c7 c7 c0 0e 04 87 e8 
kobject: '9p-42' (ffff888098142610): kobject_add_internal: parent: 'bdi', set: 'devices'
a8 8f 40 fe <0f> 0b 48 89 f1 48 c7 c7 40 0e 04 87 4c 89 e6 e8 94 8f 40 fe 0f 
RIP: __list_add_valid.cold+0x26/0x3c lib/list_debug.c:29 RSP: ffff88807fabfa00
---[ end trace 644dbe71b9835f23 ]---

Crashes (62):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/12/10 00:43 linux-4.14.y a844dc4c5442 b31eda3d .config console log report syz ci2-linux-4-14
2019/11/21 02:44 linux-4.14.y f56f3d0e65ad 8098ea0f .config console log report syz ci2-linux-4-14
2019/10/22 20:09 linux-4.14.y b98aebd29824 4ee855e7 .config console log report syz ci2-linux-4-14
2019/10/21 20:50 linux-4.14.y b98aebd29824 b24d2b8a .config console log report syz ci2-linux-4-14
2019/10/21 04:59 linux-4.14.y b98aebd29824 8c88c9c1 .config console log report syz ci2-linux-4-14
2019/10/21 00:40 linux-4.14.y b98aebd29824 8c88c9c1 .config console log report syz ci2-linux-4-14
2019/10/20 12:59 linux-4.14.y b98aebd29824 8c88c9c1 .config console log report syz ci2-linux-4-14
2019/10/20 11:55 linux-4.14.y b98aebd29824 8c88c9c1 .config console log report syz ci2-linux-4-14
2019/10/19 10:14 linux-4.14.y b98aebd29824 8c88c9c1 .config console log report syz ci2-linux-4-14
2019/10/18 06:10 linux-4.14.y b98aebd29824 8c88c9c1 .config console log report syz ci2-linux-4-14
2019/10/13 08:05 linux-4.14.y e132c8d7b58d 426631dd .config console log report syz ci2-linux-4-14
2019/10/03 14:17 linux-4.14.y f6e27dbb1afa fc17ba49 .config console log report syz ci2-linux-4-14
2019/10/02 12:28 linux-4.14.y f6e27dbb1afa 2e29b534 .config console log report syz ci2-linux-4-14
2019/10/01 15:22 linux-4.14.y f6e27dbb1afa b7a87a83 .config console log report syz ci2-linux-4-14
2019/10/01 03:54 linux-4.14.y f6e27dbb1afa c7a4fb99 .config console log report syz ci2-linux-4-14
2019/09/30 01:57 linux-4.14.y f6e27dbb1afa c1ad5441 .config console log report syz ci2-linux-4-14
2019/09/29 10:44 linux-4.14.y f6e27dbb1afa c1ad5441 .config console log report syz ci2-linux-4-14
2019/09/28 09:51 linux-4.14.y f6e27dbb1afa d8074e0b .config console log report syz ci2-linux-4-14
2019/09/28 09:18 linux-4.14.y f6e27dbb1afa d8074e0b .config console log report syz ci2-linux-4-14
2019/09/24 05:02 linux-4.14.y f6e27dbb1afa c68252d2 .config console log report syz ci2-linux-4-14
2019/08/26 03:51 linux-4.14.y b5260801526c d21c5d9d .config console log report syz ci2-linux-4-14
2019/11/26 23:34 linux-4.14.y 43598c571e7e 1048481f .config console log report ci2-linux-4-14
2019/11/26 05:23 linux-4.14.y 43598c571e7e 598ca6c8 .config console log report ci2-linux-4-14
2019/11/26 03:39 linux-4.14.y 43598c571e7e 598ca6c8 .config console log report ci2-linux-4-14
2019/11/23 14:02 linux-4.14.y f56f3d0e65ad 598ca6c8 .config console log report ci2-linux-4-14
2019/11/20 19:57 linux-4.14.y 775d01b65b5d 432c7650 .config console log report ci2-linux-4-14
2019/11/18 21:46 linux-4.14.y 775d01b65b5d d5696d51 .config console log report ci2-linux-4-14
2019/11/18 11:14 linux-4.14.y 775d01b65b5d d5696d51 .config console log report ci2-linux-4-14
2019/11/18 09:38 linux-4.14.y 775d01b65b5d d5696d51 .config console log report ci2-linux-4-14
2019/11/15 02:50 linux-4.14.y 775d01b65b5d 048f2d49 .config console log report ci2-linux-4-14
2019/11/09 17:49 linux-4.14.y c9fda4f22428 1e35461e .config console log report ci2-linux-4-14
2019/10/27 21:49 linux-4.14.y b98aebd29824 25bb509e .config console log report ci2-linux-4-14
2019/10/25 19:28 linux-4.14.y b98aebd29824 04ca72cd .config console log report ci2-linux-4-14
2019/10/25 11:13 linux-4.14.y b98aebd29824 d01bb02a .config console log report ci2-linux-4-14
2019/10/20 21:51 linux-4.14.y b98aebd29824 8c88c9c1 .config console log report ci2-linux-4-14
2019/10/20 07:01 linux-4.14.y b98aebd29824 8c88c9c1 .config console log report ci2-linux-4-14
2019/10/19 17:42 linux-4.14.y b98aebd29824 8c88c9c1 .config console log report ci2-linux-4-14
2019/10/19 05:29 linux-4.14.y b98aebd29824 8c88c9c1 .config console log report ci2-linux-4-14
2019/10/19 01:38 linux-4.14.y b98aebd29824 8c88c9c1 .config console log report ci2-linux-4-14
2019/10/17 11:03 linux-4.14.y e132c8d7b58d 8c88c9c1 .config console log report ci2-linux-4-14
2019/10/17 10:31 linux-4.14.y e132c8d7b58d 8c88c9c1 .config console log report ci2-linux-4-14
2019/10/15 13:35 linux-4.14.y e132c8d7b58d b5268b89 .config console log report ci2-linux-4-14
2019/10/15 09:49 linux-4.14.y e132c8d7b58d 05ad7292 .config console log report ci2-linux-4-14
2019/10/13 20:42 linux-4.14.y e132c8d7b58d 2f661ec4 .config console log report ci2-linux-4-14
2019/10/08 10:06 linux-4.14.y 42327896f194 28ac6e64 .config console log report ci2-linux-4-14
2019/10/06 18:52 linux-4.14.y db1892238c55 f3f7d9c8 .config console log report ci2-linux-4-14
2019/10/06 18:38 linux-4.14.y db1892238c55 f3f7d9c8 .config console log report ci2-linux-4-14
2019/10/06 02:39 linux-4.14.y db1892238c55 f3f7d9c8 .config console log report ci2-linux-4-14
2019/10/05 21:21 linux-4.14.y db1892238c55 f3f7d9c8 .config console log report ci2-linux-4-14
2019/10/04 15:07 linux-4.14.y f6e27dbb1afa c86336cf .config console log report ci2-linux-4-14
2019/10/03 15:42 linux-4.14.y f6e27dbb1afa fc17ba49 .config console log report ci2-linux-4-14
2019/10/03 13:21 linux-4.14.y f6e27dbb1afa fc17ba49 .config console log report ci2-linux-4-14
2019/10/02 10:54 linux-4.14.y f6e27dbb1afa 2e29b534 .config console log report ci2-linux-4-14
2019/10/01 13:20 linux-4.14.y f6e27dbb1afa b7a87a83 .config console log report ci2-linux-4-14
2019/09/30 01:15 linux-4.14.y f6e27dbb1afa c1ad5441 .config console log report ci2-linux-4-14
2019/09/29 09:28 linux-4.14.y f6e27dbb1afa c1ad5441 .config console log report ci2-linux-4-14
2019/09/28 08:41 linux-4.14.y f6e27dbb1afa d8074e0b .config console log report ci2-linux-4-14
2019/09/28 08:31 linux-4.14.y f6e27dbb1afa d8074e0b .config console log report ci2-linux-4-14
2019/09/26 19:25 linux-4.14.y f6e27dbb1afa 24d405a3 .config console log report ci2-linux-4-14
2019/09/26 00:21 linux-4.14.y f6e27dbb1afa a3355dba .config console log report ci2-linux-4-14
2019/09/24 03:51 linux-4.14.y f6e27dbb1afa c68252d2 .config console log report ci2-linux-4-14
2019/08/26 03:18 linux-4.14.y b5260801526c d21c5d9d .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.