general protection fault in loop_clr_fd (2)

Status: upstream: reported C repro on 2020/10/24 14:56
Reported-by: syzbot+2be7d1f1055673413f63@syzkaller.appspotmail.com
First crash: 2110d, last: 1254d
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 general protection fault in loop_clr_fd 2 5 2261d 2337d 0/1 auto-closed as invalid on 2020/09/24 08:56
▶ ▼ Fix bisection attempts (16)
Created Duration User Patch Repo Result
2023/02/28 09:07 31m bisect fix linux-4.14.y OK (0) job log log
2023/01/26 23:47 35m bisect fix linux-4.14.y OK (0) job log log
2022/08/30 05:47 33m bisect fix linux-4.14.y OK (0) job log log
2022/07/04 00:31 28m bisect fix linux-4.14.y OK (0) job log log
2022/05/17 07:01 34m bisect fix linux-4.14.y OK (0) job log log
2022/04/17 05:28 29m bisect fix linux-4.14.y OK (0) job log log
2022/03/17 10:27 32m bisect fix linux-4.14.y OK (0) job log log
2022/02/15 09:53 33m bisect fix linux-4.14.y OK (0) job log log
2022/01/16 09:20 33m bisect fix linux-4.14.y OK (0) job log log
2021/12/17 08:30 31m bisect fix linux-4.14.y OK (0) job log log
2021/11/17 08:00 29m bisect fix linux-4.14.y OK (0) job log log
2021/10/18 07:29 30m bisect fix linux-4.14.y OK (0) job log log
2021/09/18 06:54 35m bisect fix linux-4.14.y OK (0) job log log
2021/08/19 06:22 30m bisect fix linux-4.14.y OK (0) job log log
2021/07/20 05:51 31m bisect fix linux-4.14.y OK (0) job log log
2021/06/19 09:36 32m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 9378 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff88809fb16140 task.stack: ffff88809efb8000
RIP: 0010:kobject_uevent_env+0xb2/0xf40 lib/kobject_uevent.c:355
RSP: 0018:ffff88809efbfc00 EFLAGS: 00010206
RAX: 0000000000000018 RBX: 0000000000000002 RCX: 1ffff11013f62d48
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000000000c0
RBP: ffff888098b91490 R08: ffffffff8b99acd0 R09: 0000000000000003
R10: 0000000000000000 R11: ffff88809fb16140 R12: 00000000000000a0
R13: dffffc0000000000 R14: ffff888098b91388 R15: 00000000000000a0
FS:  00007fa88f9718c0(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f101a14e000 CR3: 000000009f03a000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 loop_clr_fd+0x59f/0xc20 drivers/block/loop.c:1069
 __lo_release drivers/block/loop.c:1660 [inline]
 lo_release+0xff/0x190 drivers/block/loop.c:1678
 __blkdev_put+0x5aa/0x800 fs/block_dev.c:1803
 blkdev_close+0x86/0xb0 fs/block_dev.c:1875
 __fput+0x25f/0x7a0 fs/file_table.c:210
 task_work_run+0x11f/0x190 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 exit_to_usermode_loop+0x1ad/0x200 arch/x86/entry/common.c:164
 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
 do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fa88eab7270
RSP: 002b:00007ffc7be7fad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007fa88eab7270
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
RBP: 00007fa88f971710 R08: 000055cc669fb3a0 R09: 000055cc669fb100
R10: 00007fa88f9718c0 R11: 0000000000000246 R12: 0000000000000000
R13: 000055cc66a056e0 R14: 0000000000000003 R15: 000000000000000e
Code: 03 42 80 3c 28 00 0f 85 e4 0b 00 00 4d 8b 64 24 18 4d 85 e4 0f 84 01 0c 00 00 e8 ba 6e 58 fa 49 8d 7c 24 20 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 db 0b 00 00 49 8b 6c 24 20 48 85 ed 74 b0 
RIP: kobject_uevent_env+0xb2/0xf40 lib/kobject_uevent.c:355 RSP: ffff88809efbfc00
---[ end trace 0a2cd2211c4fdcbf ]---

Crashes (47):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/05/06 11:26 linux-4.14.y 7d7d1c0ab3eb 06c27ff5 .config console log report syz C ci2-linux-4-14 general protection fault in loop_clr_fd
2021/03/30 05:24 linux-4.14.y 670d6552eda8 6a81331a .config console log report syz C ci2-linux-4-14 general protection fault in loop_clr_fd
2021/01/06 20:13 linux-4.14.y 1752938529c6 fff20c29 .config console log report syz C ci2-linux-4-14
2021/06/20 05:50 linux-4.14.y cfb41ef9deb1 aba2b2fb .config console log report syz ci2-linux-4-14 general protection fault in loop_clr_fd
2020/12/31 20:45 linux-4.14.y 1752938529c6 79264ae3 .config console log report syz ci2-linux-4-14
2020/12/17 06:22 linux-4.14.y 3f2ecb86cb90 04201c06 .config console log report syz ci2-linux-4-14
2020/11/25 16:15 linux-4.14.y 87335852c5d9 1a1f4bd8 .config console log report syz ci2-linux-4-14
2022/11/18 03:24 linux-4.14.y e911713e40ca 5bb70014 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-4-14 general protection fault in loop_clr_fd
2022/11/11 03:45 linux-4.14.y e911713e40ca f42ee5d8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-4-14 general protection fault in loop_clr_fd
2022/10/25 09:10 linux-4.14.y 9d5c0b3a8e1a 45645420 .config console log report info [disk image] [vmlinux] ci2-linux-4-14 general protection fault in loop_clr_fd
2022/10/11 00:18 linux-4.14.y 9d5c0b3a8e1a 5bcf0c31 .config console log report info [disk image] [vmlinux] ci2-linux-4-14 general protection fault in loop_clr_fd
2022/09/22 01:21 linux-4.14.y 4edbf74132a4 60af5050 .config console log report info [disk image] [vmlinux] ci2-linux-4-14 general protection fault in loop_clr_fd
2022/09/06 11:52 linux-4.14.y 65640c873dcf 65aea2b9 .config console log report info [disk image] [vmlinux] ci2-linux-4-14 general protection fault in loop_clr_fd
2022/09/04 18:36 linux-4.14.y e548869f356f 28811d0a .config console log report info [disk image] [vmlinux] ci2-linux-4-14 general protection fault in loop_clr_fd
2022/07/28 19:00 linux-4.14.y 9c3bf9cf362f fb95c74d .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2022/07/27 00:35 linux-4.14.y 9c3bf9cf362f ae971e66 .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2022/07/21 14:28 linux-4.14.y 424a46ea058e 6e67af9d .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2022/07/21 08:46 linux-4.14.y 424a46ea058e 6e67af9d .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2022/06/04 00:30 linux-4.14.y 501eec4f9e13 c8857892 .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/05/20 09:28 linux-4.14.y 7d7d1c0ab3eb a343ba6b .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/05/16 01:21 linux-4.14.y 7d7d1c0ab3eb f54a5c09 .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/04/30 04:53 linux-4.14.y 7d7d1c0ab3eb 77e2b668 .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/04/28 23:24 linux-4.14.y 7d7d1c0ab3eb 77e2b668 .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/04/27 12:39 linux-4.14.y cf256fbcbe34 805b5003 .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/04/27 08:58 linux-4.14.y cf256fbcbe34 8ee2dea6 .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/04/26 22:40 linux-4.14.y cf256fbcbe34 8ee2dea6 .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/04/26 11:51 linux-4.14.y cf256fbcbe34 e60b7df1 .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/04/23 14:58 linux-4.14.y cf256fbcbe34 17f0b706 .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/04/20 16:06 linux-4.14.y cf256fbcbe34 c0ced557 .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/03/12 04:12 linux-4.14.y c7150cd2fa8c 429d8a6b .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/03/04 18:13 linux-4.14.y 397a88b2cc86 f89ed068 .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/02/22 23:53 linux-4.14.y 29c52025152b c26fb06b .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/02/19 23:52 linux-4.14.y 29c52025152b f689d40a .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/02/07 19:55 linux-4.14.y 2c8a3fceddf0 2ce644fc .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/02/05 13:54 linux-4.14.y 2c8a3fceddf0 23a562df .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/02/05 11:11 linux-4.14.y 2c8a3fceddf0 23a562df .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/02/05 00:12 linux-4.14.y 2c8a3fceddf0 23a562df .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/01/28 21:02 linux-4.14.y 2d2791fce891 7df34f59 .config console log report info ci2-linux-4-14 general protection fault in loop_clr_fd
2021/01/13 14:43 linux-4.14.y f79dc86058bc a945f0a3 .config console log report info ci2-linux-4-14
2021/01/06 12:02 linux-4.14.y 1752938529c6 fff20c29 .config console log report info ci2-linux-4-14
2021/01/05 05:05 linux-4.14.y 1752938529c6 2a28ff1f .config console log report info ci2-linux-4-14
2021/01/04 20:54 linux-4.14.y 1752938529c6 2a28ff1f .config console log report info ci2-linux-4-14
2020/12/31 19:22 linux-4.14.y 1752938529c6 79264ae3 .config console log report info ci2-linux-4-14
2020/12/22 04:01 linux-4.14.y 3f2ecb86cb90 04201c06 .config console log report info ci2-linux-4-14
2020/12/17 01:52 linux-4.14.y 3f2ecb86cb90 04201c06 .config console log report info ci2-linux-4-14
2020/11/25 13:02 linux-4.14.y 87335852c5d9 1a1f4bd8 .config console log report info ci2-linux-4-14
2020/10/24 14:55 linux-4.14.y 5b7a52cd2eef a1839e81 .config console log report info ci2-linux-4-14
* Struck through repros no longer work on HEAD.