syzbot


upstream boot error: KMSAN: use-after-free in stack_depot_save_flags

Status: upstream: reported on 2024/02/03 03:55
Subsystems: net dri
[Documentation on labels]
Reported-by: syzbot+7364c186cc00641845c5@syzkaller.appspotmail.com
First crash: 77d, last: 60d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [net?] upstream boot error: KMSAN: use-after-free in stack_depot_save_flags 0 (1) 2024/02/03 03:55

Sample crash report:
io scheduler kyber registered
io scheduler bfq registered
input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0
ACPI: button: Power Button [PWRF]
input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input1
ACPI: button: Sleep Button [SLPF]
ioatdma: Intel(R) QuickData Technology Driver 5.00
ACPI: \_SB_.LNKC: Enabled at IRQ 11
virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver
ACPI: \_SB_.LNKD: Enabled at IRQ 10
virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver
ACPI: \_SB_.LNKB: Enabled at IRQ 10
virtio-pci 0000:00:06.0: virtio_pci: leaving for legacy driver
virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver
N_HDLC line discipline registered with maxframe=4096
Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A
00:04: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A
00:05: ttyS2 at I/O 0x3e8 (irq = 6, base_baud = 115200) is a 16550A
00:06: ttyS3 at I/O 0x2e8 (irq = 7, base_baud = 115200) is a 16550A
Non-volatile memory driver v1.3
Linux agpgart interface v0.103
ACPI: bus type drm_connector registered
[drm] Initialized vgem 1.0.0 20120112 for vgem on minor 0
[drm] Initialized vkms 1.0.0 20180514 for vkms on minor 1
Console: switching to colour frame buffer device 128x48
platform vkms: [drm] fb0: vkmsdrmfb frame buffer device
usbcore: registered new interface driver udl
brd: module loaded
loop: module loaded
zram: Added device: zram0
null_blk: disk nullb0 created
null_blk: module loaded
Guest personality initialized and is inactive
VMCI host device registered (name=vmci, major=10, minor=118)
Initialized host personality
usbcore: registered new interface driver rtsx_usb
usbcore: registered new interface driver viperboard
usbcore: registered new interface driver dln2
usbcore: registered new interface driver pn533_usb
nfcsim 0.2 initialized
usbcore: registered new interface driver port100
usbcore: registered new interface driver nfcmrvl
Loading iSCSI transport class v2.0-870.
virtio_scsi virtio0: 1/0/0 default/read/poll queues
scsi host0: Virtio SCSI HBA
st: Version 20160209, fixed bufsize 32768, s/g segs 256
Rounding down aligned max_sectors from 4294967295 to 4294967288
db_root: cannot open: /etc/target
=====================================================
BUG: KMSAN: use-after-free in __list_del_entry_valid_or_report+0x19e/0x490 lib/list_debug.c:52
 __list_del_entry_valid_or_report+0x19e/0x490 lib/list_debug.c:52
 __list_del_entry_valid include/linux/list.h:124 [inline]
 __list_del_entry include/linux/list.h:215 [inline]
 list_del include/linux/list.h:229 [inline]
 depot_pop_free lib/stackdepot.c:426 [inline]
 depot_alloc_stack lib/stackdepot.c:445 [inline]
 stack_depot_save_flags+0x3e9/0x7b0 lib/stackdepot.c:684
 stack_depot_save+0x12/0x20 lib/stackdepot.c:722
 ref_tracker_alloc+0x215/0x700 lib/ref_tracker.c:210
 __netdev_tracker_alloc include/linux/netdevice.h:4147 [inline]
 netdev_hold include/linux/netdevice.h:4176 [inline]
 linkwatch_add_event net/core/link_watch.c:127 [inline]
 linkwatch_fire_event+0x32b/0x6d0 net/core/link_watch.c:292
 netif_carrier_off+0xec/0x110 net/sched/sch_generic.c:601
 bond_create+0x19d/0x2a0 drivers/net/bonding/bond_main.c:6395
 bonding_init+0x1a7/0x2d0 drivers/net/bonding/bond_main.c:6473
 do_one_initcall+0x216/0x960 init/main.c:1236
 do_initcall_level+0x140/0x350 init/main.c:1298
 do_initcalls+0xf0/0x1d0 init/main.c:1314
 do_basic_setup+0x22/0x30 init/main.c:1333
 kernel_init_freeable+0x300/0x4b0 init/main.c:1551
 kernel_init+0x2f/0x7e0 init/main.c:1441
 ret_from_fork+0x66/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242

Uninit was created at:
 free_pages_prepare mm/page_alloc.c:1094 [inline]
 free_unref_page_prepare+0xc1/0xad0 mm/page_alloc.c:2346
 free_unref_page+0x58/0x6d0 mm/page_alloc.c:2486
 free_the_page mm/page_alloc.c:563 [inline]
 __free_pages+0xb1/0x1f0 mm/page_alloc.c:4653
 thread_stack_free_rcu+0x97/0xb0 kernel/fork.c:344
 rcu_do_batch kernel/rcu/tree.c:2190 [inline]
 rcu_core+0xa3c/0x1e00 kernel/rcu/tree.c:2465
 rcu_core_si+0x12/0x20 kernel/rcu/tree.c:2482
 __do_softirq+0x1b7/0x7c5 kernel/softirq.c:553

CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.8.0-rc4-syzkaller-00180-g4f5e5092fdbf #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
=====================================================

Crashes (216):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/02/15 22:56 upstream 4f5e5092fdbf d9b1cdd5 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/15 05:50 upstream 8d3dea210042 d9b1cdd5 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/15 02:11 upstream 8d3dea210042 6a8ec742 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/14 15:15 upstream 7e90b5c295ec 6a8ec742 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/14 00:58 upstream 7e90b5c295ec d902085f .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/13 19:12 upstream 7e90b5c295ec e66542d7 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/13 12:36 upstream c664e16bb1ba e66542d7 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/12 22:53 upstream c664e16bb1ba 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/11 20:43 upstream 2766f59ca44e 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/11 00:29 upstream 7521f258ea30 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/10 01:55 upstream ca00c700c521 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/09 21:56 upstream e6f39a90de92 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/09 19:12 upstream 1f719a2f3fa6 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/08 23:57 upstream 1f719a2f3fa6 7f07e9b0 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/08 16:18 upstream 047371968ffc 7f07e9b0 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/07 11:24 upstream 6d280f4d760e 6404acf9 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/07 11:24 upstream 6d280f4d760e 6404acf9 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/06 14:07 upstream 99bd3cb0d12e 6404acf9 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/04 13:29 upstream 54be6c6c5ae8 a67b2c42 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/04 09:26 upstream 3f24fcdacd40 a67b2c42 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/04 08:08 upstream 3a0e92207940 a67b2c42 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/03 02:56 upstream 56897d51886f 60bf9982 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/02 21:47 upstream 6897cea71837 60bf9982 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/02 05:21 upstream 021533194476 d61103fc .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/02 00:05 upstream 021533194476 81024119 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/01 21:52 upstream 41b9fb381a48 81024119 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/01 19:54 upstream 5c24e4e9e708 81024119 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/15 20:39 upstream 4f5e5092fdbf d9b1cdd5 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/15 07:02 upstream 8d3dea210042 d9b1cdd5 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/14 15:52 upstream 7e90b5c295ec 6a8ec742 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/12 18:10 upstream 716f4aaa7b48 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/12 18:10 upstream 716f4aaa7b48 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/11 23:32 upstream 841c35169323 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/11 21:49 upstream 2766f59ca44e 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/10 17:53 upstream a5b6244cf87c 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/10 04:01 upstream 4a7bbe7519b6 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/10 02:33 upstream ca00c700c521 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/09 23:06 upstream 9ed18b0b7765 77b23aa1 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/08 07:07 upstream 047371968ffc 6404acf9 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/07 18:55 upstream 547ab8fc4cb0 6404acf9 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/07 09:13 upstream 6d280f4d760e 6404acf9 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/06 15:19 upstream 99bd3cb0d12e 6404acf9 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/06 08:30 upstream 99bd3cb0d12e 4e988e80 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/05 15:38 upstream 54be6c6c5ae8 4e988e80 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/03 16:31 upstream b555d191561a a67b2c42 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/03 14:07 upstream b555d191561a 60bf9982 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/03 01:33 upstream 56897d51886f 60bf9982 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/02 23:55 upstream 6897cea71837 60bf9982 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/02/02 10:39 upstream 021533194476 60bf9982 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
2024/01/30 03:48 upstream 861c0981648f 991a98f4 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream boot error: KMSAN: use-after-free in stack_depot_save_flags
* Struck through repros no longer work on HEAD.