syzbot

 sign-in | mailing list | source | docs
🐞 Open [712] 🐞 Fixed [297] 🐞 Invalid [838] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in nfc_genl_dump_devices_done

Status: upstream: reported C repro on 2022/11/04 11:14
Reported-by: syzbot+5185a08c2e0f0cec505a@syzkaller.appspotmail.com
First crash: 532d, last: 413d

Sample crash report:
RBP: 00007ffe6fc3f630 R08: 0000000000000001 R09: 000000000000000d
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 00007ffe6fc3f69a R14: 0000000000000004 R15: 00007ffe6fc3f6d0
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 3606 Comm: kworker/1:2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
Workqueue: events netlink_sock_destruct_work
RIP: 0010:klist_iter_exit+0x21/0x80 lib/klist.c:314
Code: 66 0f 1f 84 00 00 00 00 00 41 54 55 53 48 89 fb e8 34 69 74 f9 48 8d 6b 08 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 <80> 3c 02 00 75 40 4c 8b 63 08 4d 85 e4 74 2e e8 0b 69 74 f9 31 f6
RSP: 0018:ffff8880a88c7c48 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff87ee1c3c RDI: 0000000000000000
RBP: 0000000000000008 R08: 0000000000000000 R09: fffffbfff15cf8ac
R10: ffffffff8ae7c567 R11: 0000000000074071 R12: 0000000000000000
R13: ffffffff896f11a0 R14: ffff8880ba12a8c0 R15: ffff8880ba12f000
FS:  0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd10b70a330 CR3: 00000000a16c2000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 nfc_device_iter_exit net/nfc/nfc.h:133 [inline]
 nfc_genl_dump_devices_done+0x31/0x50 net/nfc/netlink.c:658
 genl_lock_done+0x82/0xc0 net/netlink/genetlink.c:495
 netlink_sock_destruct+0x96/0x280 net/netlink/af_netlink.c:398
 __sk_destruct+0x4b/0x8a0 net/core/sock.c:1576
 sk_destruct net/core/sock.c:1617 [inline]
 __sk_free+0x165/0x3b0 net/core/sock.c:1628
 sk_free+0x3b/0x50 net/core/sock.c:1639
 process_one_work+0x864/0x1570 kernel/workqueue.c:2153
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
 kthread+0x33f/0x4 drivers/block/aoe/aoecmd.c:1249
----------------
Code disassembly (best guess):
   0:	66 0f 1f 84 00 00 00 	nopw   0x0(%rax,%rax,1)
   7:	00 00
   9:	41 54                	push   %r12
   b:	55                   	push   %rbp
   c:	53                   	push   %rbx
   d:	48 89 fb             	mov    %rdi,%rbx
  10:	e8 34 69 74 f9       	callq  0xf9746949
  15:	48 8d 6b 08          	lea    0x8(%rbx),%rbp
  19:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  20:	fc ff df
  23:	48 89 ea             	mov    %rbp,%rdx
  26:	48 c1 ea 03          	shr    $0x3,%rdx
* 2a:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1) <-- trapping instruction
  2e:	75 40                	jne    0x70
  30:	4c 8b 63 08          	mov    0x8(%rbx),%r12
  34:	4d 85 e4             	test   %r12,%r12
  37:	74 2e                	je     0x67
  39:	e8 0b 69 74 f9       	callq  0xf9746949
  3e:	31 f6                	xor    %esi,%esi

Crashes (14):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/02/17 03:03 linux-4.19.y 3f8a27f9e27b 851bc19a .config console log report syz C [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
2022/11/04 11:29 linux-4.19.y 3f8a27f9e27b 6d752409 .config console log report syz C [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
2023/03/03 02:27 linux-4.19.y 3f8a27f9e27b f8902b57 .config console log report info [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
2023/02/27 05:08 linux-4.19.y 3f8a27f9e27b ee50e71c .config console log report info [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
2023/02/21 16:30 linux-4.19.y 3f8a27f9e27b f949448d .config console log report info [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
2023/02/17 02:35 linux-4.19.y 3f8a27f9e27b 851bc19a .config console log report info [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
2023/02/03 23:12 linux-4.19.y 3f8a27f9e27b 1b2f701a .config console log report info [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
2023/02/01 02:50 linux-4.19.y 3f8a27f9e27b b68fb8d6 .config console log report info [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
2023/01/31 00:24 linux-4.19.y 3f8a27f9e27b b68fb8d6 .config console log report info [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
2023/01/29 21:38 linux-4.19.y 3f8a27f9e27b 9dfcf09c .config console log report info [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
2023/01/10 00:53 linux-4.19.y 3f8a27f9e27b 48bc529a .config console log report info [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
2022/12/16 05:05 linux-4.19.y 3f8a27f9e27b 6f9c033e .config console log report info [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
2022/11/05 07:52 linux-4.19.y 3f8a27f9e27b 6d752409 .config console log report info [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
2022/11/04 11:14 linux-4.19.y 3f8a27f9e27b 6d752409 .config console log report info [disk image] [vmlinux] ci2-linux-4-19 general protection fault in nfc_genl_dump_devices_done
* Struck through repros no longer work on HEAD.