general protection fault in kobject_uevent_env

Status: upstream: reported syz repro on 2019/06/15 15:20
Reported-by: syzbot+6331a4ebfc577a04f1e4@syzkaller.appspotmail.com
First crash: 2630d, last: 2367d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-414 general protection fault in kobject_uevent_env 2 syz, C 43 2459d 2695d 0/1 public: reported C repro on 2019/04/11 00:00
▶ ▼ Last patch testing requests (4)
Created Duration User Patch Repo Result
2022/12/07 06:31 9m retest repro linux-4.14.y report log
2022/12/07 05:31 13m retest repro linux-4.14.y report log
2022/08/27 15:27 8m retest repro linux-4.14.y error
2022/08/27 13:27 10m retest repro linux-4.14.y report log
▶ ▼ Fix bisection attempts (3)
Created Duration User Patch Repo Result
2020/04/03 08:09 17m bisect fix linux-4.14.y error job log
2020/03/04 07:31 29m bisect fix linux-4.14.y OK (0) job log log
2020/02/03 03:48 31m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
8021q: adding VLAN 0 to HW filter on device batadv0
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 6928 Comm: syz-executor.0 Not tainted 4.14.139 #35
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff888097cdc300 task.stack: ffff88808b080000
RIP: 0010:kobject_uevent_env+0xa1/0xc23 lib/kobject_uevent.c:350
RSP: 0018:ffff88808b087ae8 EFLAGS: 00010286
RAX: dffffc0000000000 RBX: 0000000000000002 RCX: 1ffff11012f9b96e
RDX: 0000000000000014 RSI: 0000000000000002 RDI: ffffffff87078ed0
RBP: ffff88808b087b68 R08: ffff888097cdc300 R09: 0000000000000001
R10: 0000000000000000 R11: ffff888097cdc300 R12: 00000000000000a0
R13: 0000000000000002 R14: ffff888094032600 R15: 00000000000000a0
FS:  0000000000bef940(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb7ef93e6f0 CR3: 000000007875f000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 kobject_uevent+0x20/0x26 lib/kobject_uevent.c:553
 loop_clr_fd+0x4a7/0xae0 drivers/block/loop.c:1059
 lo_ioctl+0x8ea/0x1ce0 drivers/block/loop.c:1414
 __blkdev_driver_ioctl block/ioctl.c:297 [inline]
 blkdev_ioctl+0x96b/0x1860 block/ioctl.c:594
 block_ioctl+0xde/0x120 fs/block_dev.c:1881
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x7ae/0x1060 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459697
RSP: 002b:00007fffa3d6ebb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459697
RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003
RBP: 0000000000000050 R08: 0000000000000000 R09: 000000000000000a
R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffa3d6ebf0 R14: 000000000000d3ab R15: 00007fffa3d6ec00
Code: fa 83 e2 07 38 d0 7f 09 84 c0 74 05 e8 af 4f 6f fb 41 80 4f 3c 08 e8 a5 a2 45 fb 4c 89 fa b8 ff ff 37 00 48 c1 ea 03 48 c1 e0 2a <80> 3c 02 00 74 08 4c 89 ff e8 47 4f 6f fb 49 8b 37 48 c7 c1 c0 
RIP: kobject_uevent_env+0xa1/0xc23 lib/kobject_uevent.c:350 RSP: ffff88808b087ae8
---[ end trace 51aa6a9851a0885b ]---

Crashes (26):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/08/21 05:30 linux-4.14.y 45f092f9e9cb 6b8391d0 .config console log report syz ci2-linux-4-14
2019/07/02 10:13 linux-4.14.y f4cc0ed9b2c7 cccc4302 .config console log report syz ci2-linux-4-14
2020/01/04 02:22 linux-4.14.y 4c5bf01e16a7 68256974 .config console log report ci2-linux-4-14
2019/12/30 06:55 linux-4.14.y e1f7d50ae3a3 af6b8ef8 .config console log report ci2-linux-4-14
2019/12/26 01:11 linux-4.14.y e1f7d50ae3a3 be5c2c81 .config console log report ci2-linux-4-14
2019/12/02 00:20 linux-4.14.y fbc5fe7a54d0 f879db37 .config console log report ci2-linux-4-14
2019/12/01 07:02 linux-4.14.y 43598c571e7e a76bf83f .config console log report ci2-linux-4-14
2019/11/30 23:06 linux-4.14.y 43598c571e7e a76bf83f .config console log report ci2-linux-4-14
2019/11/22 13:02 linux-4.14.y f56f3d0e65ad 598ca6c8 .config console log report ci2-linux-4-14
2019/11/03 18:41 linux-4.14.y ddef1e8e3f6e c9610487 .config console log report ci2-linux-4-14
2019/11/02 01:05 linux-4.14.y ddef1e8e3f6e 997ccc67 .config console log report ci2-linux-4-14
2019/10/23 19:05 linux-4.14.y b98aebd29824 b602d64b .config console log report ci2-linux-4-14
2019/10/22 08:02 linux-4.14.y b98aebd29824 c59a7cd8 .config console log report ci2-linux-4-14
2019/10/22 04:24 linux-4.14.y b98aebd29824 c59a7cd8 .config console log report ci2-linux-4-14
2019/10/15 13:40 linux-4.14.y e132c8d7b58d b5268b89 .config console log report ci2-linux-4-14
2019/09/06 15:22 linux-4.14.y 414510bc00a5 acb5b744 .config console log report ci2-linux-4-14
2019/09/03 23:50 linux-4.14.y 01fd1694b93c 526709ff .config console log report ci2-linux-4-14
2019/09/03 14:55 linux-4.14.y 01fd1694b93c 48448e71 .config console log report ci2-linux-4-14
2019/08/24 22:50 linux-4.14.y 45f092f9e9cb d21c5d9d .config console log report ci2-linux-4-14
2019/08/21 04:37 linux-4.14.y 45f092f9e9cb 6b8391d0 .config console log report ci2-linux-4-14
2019/08/06 17:01 linux-4.14.y 7d80e1218adf da562c0b .config console log report ci2-linux-4-14
2019/07/24 10:59 linux-4.14.y ff33472c282e 32329ceb .config console log report ci2-linux-4-14
2019/07/17 06:06 linux-4.14.y aea8526edf59 0d10349c .config console log report ci2-linux-4-14
2019/07/02 08:30 linux-4.14.y f4cc0ed9b2c7 cccc4302 .config console log report ci2-linux-4-14
2019/06/29 01:38 linux-4.14.y f4cc0ed9b2c7 7509bf36 .config console log report ci2-linux-4-14
2019/06/15 14:20 linux-4.14.y a74d0e937a3a 442206d7 .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.