syzbot

 sign-in | mailing list | source | docs
🐞 Open [1594]
≡ Subsystems
🐞 Fixed [6264]
🐞 Invalid [15878]
⬇ Missing Backports [186]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

BUG: corrupted list in nfc_llcp_unregister_device

Status: auto-obsoleted due to no activity on 2024/01/13 09:34
Subsystems: net nfc
[Documentation on labels]
Reported-by: syzbot+81232c4a81a886e2b580@syzkaller.appspotmail.com
First crash: 915d, last: 605d
Cause bisection: failed (error log, bisect log)
  
Fix bisection: fixed by (bisect log) :
commit b938790e70540bf4f2e653dcd74b232494d06c8f
Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Date: Fri Sep 15 20:24:47 2023 +0000

  Bluetooth: hci_codec: Fix leaking content of local_codecs

  
▶ ▼ Discussions (11)
Title Replies (including bot) Last reply
[syzbot] BUG: corrupted list in nfc_llcp_unregister_device 0 (3) 2023/11/05 17:34
Re: KASAN: slab-use-after-free Read in nfc_llcp_unregister_device 1 (1) 2023/10/25 07:12
[syzbot] Monthly nfc report (Oct 2023) 0 (1) 2023/10/09 12:45
[syzbot] Monthly nfc report (Sep 2023) 0 (1) 2023/09/06 08:12
[syzbot] Monthly nfc report (Aug 2023) 0 (1) 2023/08/07 07:27
[syzbot] Monthly nfc report (Jul 2023) 0 (1) 2023/07/05 13:10
[syzbot] Monthly nfc report (Jun 2023) 0 (1) 2023/06/06 23:17
[syzbot] Monthly nfc report (May 2023) 0 (1) 2023/05/04 12:45
[syzbot] Monthly nfc report 0 (1) 2023/04/03 11:13
[PATCH] nfc: llcp: Fix race in handling llcp_devices 3 (3) 2023/02/08 09:01
[PATCH v2] nfc: llcp: Fix race in handling llcp_devices 2 (2) 2022/12/06 11:09
▶ ▼ Last patch testing requests (11)
Created Duration User Patch Repo Result
2024/01/13 08:45 20m retest repro upstream OK log
2024/01/13 08:45 27m retest repro upstream OK log
2023/11/04 02:03 19m retest repro upstream report log
2023/11/04 02:03 18m retest repro upstream report log
2023/10/31 02:27 32m retest repro upstream OK log
2023/09/29 06:59 20m retest repro upstream OK log
2023/08/28 08:36 34m retest repro upstream OK log
2023/08/28 08:36 22m retest repro upstream OK log
2023/08/28 08:36 29m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci OK log
2023/08/25 18:33 22m retest repro upstream report log
2022/12/30 12:52 18m hdanton@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 2258c2dc850b report log

Sample crash report:
list_del corruption. prev->next should be ffff888079dcb000, but was ffff88807acbb000. (prev=ffffffff8e546ce0)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:59!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 21557 Comm: syz-executor.2 Not tainted 6.2.0-rc4-syzkaller-00077-gd368967cb103 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
RIP: 0010:__list_del_entry_valid.cold+0x12/0x72 lib/list_debug.c:59
Code: f0 ff 0f 0b 48 89 f1 48 c7 c7 80 bd a6 8a 4c 89 e6 e8 cb 2c f0 ff 0f 0b 4c 89 e1 48 89 ee 48 c7 c7 e0 bf a6 8a e8 b7 2c f0 ff <0f> 0b 48 89 ee 48 c7 c7 c0 be a6 8a e8 a6 2c f0 ff 0f 0b 4c 89 e2
RSP: 0018:ffffc9000b28fd58 EFLAGS: 00010282
RAX: 000000000000006d RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff88806b5b9d40 RSI: ffffffff8166822c RDI: fffff52001651f9d
RBP: ffff888079dcb000 R08: 000000000000006d R09: 0000000000000000
R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff8e546ce0
R13: ffff88802b1e3000 R14: ffff888079dce000 R15: ffff888079dc95f0
FS:  0000555555fb1400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4363fad988 CR3: 000000002820b000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 __list_del_entry include/linux/list.h:134 [inline]
 list_del include/linux/list.h:148 [inline]
 local_release net/nfc/llcp_core.c:171 [inline]
 kref_put include/linux/kref.h:65 [inline]
 nfc_llcp_local_put net/nfc/llcp_core.c:181 [inline]
 nfc_llcp_local_put net/nfc/llcp_core.c:176 [inline]
 nfc_llcp_unregister_device+0xb8/0x260 net/nfc/llcp_core.c:1619
 nfc_unregister_device+0x196/0x330 net/nfc/core.c:1179
 virtual_ncidev_close+0x52/0xb0 drivers/nfc/virtual_ncidev.c:163
 __fput+0x27c/0xa90 fs/file_table.c:320
 task_work_run+0x16f/0x270 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296
 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fc8d423df7b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffce18f3bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007fc8d423df7b
RDX: 00007fc8d3e00588 RSI: ffffffffffffffff RDI: 0000000000000005
RBP: 00007fc8d43ad980 R08: 0000000000000000 R09: 00007fc8d3e00000
R10: 00007fc8d3e00590 R11: 0000000000000293 R12: 00000000000bda59
R13: 00007ffce18f3cb0 R14: 00007fc8d43abf80 R15: 0000000000000032
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_del_entry_valid.cold+0x12/0x72 lib/list_debug.c:59
Code: f0 ff 0f 0b 48 89 f1 48 c7 c7 80 bd a6 8a 4c 89 e6 e8 cb 2c f0 ff 0f 0b 4c 89 e1 48 89 ee 48 c7 c7 e0 bf a6 8a e8 b7 2c f0 ff <0f> 0b 48 89 ee 48 c7 c7 c0 be a6 8a e8 a6 2c f0 ff 0f 0b 4c 89 e2
RSP: 0018:ffffc9000b28fd58 EFLAGS: 00010282
RAX: 000000000000006d RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff88806b5b9d40 RSI: ffffffff8166822c RDI: fffff52001651f9d
RBP: ffff888079dcb000 R08: 000000000000006d R09: 0000000000000000
R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff8e546ce0
R13: ffff88802b1e3000 R14: ffff888079dce000 R15: ffff888079dc95f0
FS:  0000555555fb1400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4363fad988 CR3: 000000002820b000 CR4: 0000000000350ef0

Crashes (122):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/01/20 16:25 upstream d368967cb103 559a440a .config console log report syz ci-upstream-kasan-gce-root BUG: corrupted list in nfc_llcp_unregister_device
2023/02/15 21:07 upstream e1c04510f521 6be0f1f5 .config console log report syz ci-upstream-kasan-gce-386 BUG: corrupted list in nfc_llcp_unregister_device
2023/03/26 04:40 upstream 65aca32efdcb fbf0499a .config console log report syz ci-qemu-upstream BUG: corrupted list in nfc_llcp_unregister_device
2023/04/01 06:56 upstream 5a57b48fdfcb f325deb0 .config console log report syz ci-upstream-kasan-gce-root BUG: corrupted list in nfc_llcp_unregister_device
2023/06/11 15:10 upstream 022ce8862dff 7086cdb9 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/08/31 20:48 upstream b97d64c72259 4ad3538b .config console log report syz [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/02/19 18:24 upstream 925cf0457d7e bcdf85f8 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root KASAN: use-after-free Read in nfc_llcp_unregister_device
2022/12/31 07:03 upstream c8451c141e07 ab32d508 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root KASAN: use-after-free Read in nfc_llcp_unregister_device
2022/12/30 10:41 upstream 2258c2dc850b 44712fbc .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root KASAN: use-after-free Read in nfc_llcp_unregister_device
2023/05/07 12:23 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 14f8db1c0f9a 90c93c40 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/10/03 14:57 upstream ce36c8b14987 65faba36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: corrupted list in nfc_llcp_unregister_device
2023/06/26 00:10 upstream 547cc9be86f4 09ffe269 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: corrupted list in nfc_llcp_unregister_device
2023/06/25 08:42 upstream a92b7d26c743 09ffe269 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in nfc_llcp_unregister_device
2023/06/23 15:49 upstream 8a28a0b6f1a1 09ffe269 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: corrupted list in nfc_llcp_unregister_device
2023/06/22 15:26 upstream dad9774deaf1 09ffe269 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in nfc_llcp_unregister_device
2023/06/20 01:58 upstream 45a3e24f65e9 d521bc56 .config console log report info ci-upstream-kasan-gce BUG: corrupted list in nfc_llcp_unregister_device
2023/06/19 06:22 upstream 8c1f0c38b310 f3921d4d .config console log report info ci-upstream-kasan-gce-root BUG: corrupted list in nfc_llcp_unregister_device
2023/06/14 19:28 upstream b6dad5178cea d2ee9228 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in nfc_llcp_unregister_device
2023/06/05 18:04 upstream 9561de3a55be a4ae4f42 .config console log report info ci-qemu-upstream BUG: corrupted list in nfc_llcp_unregister_device
2023/06/01 10:17 upstream 929ed21dfdb6 babc4389 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream BUG: corrupted list in nfc_llcp_unregister_device
2023/05/29 09:31 upstream 7877cb91f108 cf184559 .config console log report info ci-upstream-kasan-gce BUG: corrupted list in nfc_llcp_unregister_device
2023/05/28 21:57 upstream 416839029e38 cf184559 .config console log report info ci-upstream-kasan-gce BUG: corrupted list in nfc_llcp_unregister_device
2023/05/26 00:21 upstream 9db898594c54 0513b3e6 .config console log report info ci-upstream-kasan-gce-selinux-root BUG: corrupted list in nfc_llcp_unregister_device
2023/05/23 16:11 upstream ae8373a5add4 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: corrupted list in nfc_llcp_unregister_device
2023/05/18 12:53 upstream 1b66c114d161 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in nfc_llcp_unregister_device
2023/05/06 00:19 upstream 78b421b6a7c6 4cec9341 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: corrupted list in nfc_llcp_unregister_device
2023/06/30 10:26 upstream 6e2332e0ab53 01298212 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: corrupted list in nfc_llcp_unregister_device
2023/06/29 16:08 upstream 6e2332e0ab53 134ddc02 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: corrupted list in nfc_llcp_unregister_device
2023/06/23 18:15 upstream 8a28a0b6f1a1 79782afc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: corrupted list in nfc_llcp_unregister_device
2023/06/21 21:46 upstream 2214170caabb 79782afc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: corrupted list in nfc_llcp_unregister_device
2023/06/20 06:15 upstream dbad9ce9397e 09ffe269 .config console log report info ci-qemu-upstream-386 BUG: corrupted list in nfc_llcp_unregister_device
2023/06/15 01:49 upstream b6dad5178cea 76decb82 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: corrupted list in nfc_llcp_unregister_device
2023/06/13 10:26 upstream fb054096aea0 749afb64 .config console log report info ci-qemu-upstream-386 BUG: corrupted list in nfc_llcp_unregister_device
2023/06/01 06:36 upstream 929ed21dfdb6 babc4389 .config console log report info ci-qemu-upstream-386 BUG: corrupted list in nfc_llcp_unregister_device
2023/04/14 18:45 upstream 7a934f4bd7d6 ec410564 .config console log report info ci-qemu2-arm64 BUG: corrupted list in nfc_llcp_unregister_device
2023/06/25 20:01 linux-next 8d2be868b42c 09ffe269 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in nfc_llcp_unregister_device
2023/06/19 07:33 linux-next f7efed9f38f8 f3921d4d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in nfc_llcp_unregister_device
2023/05/24 03:47 linux-next 715abedee4cd 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in nfc_llcp_unregister_device
2023/05/23 06:12 linux-next 715abedee4cd 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in nfc_llcp_unregister_device
2022/11/28 00:10 linux-next 9e46a7996732 74a66371 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in nfc_llcp_unregister_device
2023/10/02 16:20 upstream 8a749fd1a872 0c7326f3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/09/04 08:08 upstream 708283abf896 696ea0d2 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/08/31 22:52 upstream b97d64c72259 4ad3538b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/09/15 06:50 upstream 9fdfb15a3dbf 0b6a67ac .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/09/14 16:21 upstream aed8aee11130 0b6a67ac .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/09/07 08:34 upstream 744a759492b5 72324844 .config console log report info ci-qemu-upstream-386 KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/08/31 18:53 upstream b97d64c72259 4ad3538b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/08/09 01:01 upstream 14f9643dc90a 3c27dfcd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/05/13 15:29 upstream 9a48d6046722 2b9ba477 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/04/08 06:10 upstream aa318c48808c 71147e29 .config console log report info ci-upstream-kasan-gce-smack-root KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/01/23 12:16 upstream 2475bf0250de 44388686 .config console log report info ci2-upstream-fs KASAN: use-after-free Read in nfc_llcp_unregister_device
2023/08/05 08:14 upstream c8273a25864e 4ffcc9ef .config console log report info ci-qemu-upstream-386 KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/06/28 14:22 upstream 6e2332e0ab53 8064cb02 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/06/16 00:49 upstream b6dad5178cea f3921d4d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-mte KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/06/12 08:02 upstream 858fd168a95c 49519f06 .config console log report info ci-qemu2-arm64-mte KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/06/08 01:14 upstream a27648c74210 058b3a5a .config console log report info ci-qemu2-arm64-mte KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/05/25 15:56 upstream 933174ae28ba 51e154a0 .config console log report info ci-qemu2-arm64-mte KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/05/21 05:35 upstream 0dd2a6fb1e34 4bce1a3e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-mte KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/05/08 08:09 upstream ac9a78681b92 90c93c40 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-mte KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/05/03 13:07 upstream 348551ddaf31 48e0a81d .config console log report info ci-qemu2-arm64-mte KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/04/27 04:21 upstream 6e98b09da931 19a3dabe .config console log report info ci-qemu2-arm64-mte KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/04/21 01:17 upstream 6a66fdd29ea1 2b32bd34 .config console log report info ci-qemu2-arm64-mte KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/04/08 09:27 upstream aa318c48808c 71147e29 .config console log report info ci-qemu2-arm64-mte KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/04/05 19:05 upstream 99ddf2254feb 8b834965 .config console log report info ci-qemu2-arm64-mte KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/09/13 12:43 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 8eb8fe67e2c8 0b6a67ac .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/07/31 21:25 linux-next ec8939156379 2a0d0f29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/07/02 12:02 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e40939bbfc68 bfc47836 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: slab-use-after-free Read in nfc_llcp_unregister_device
2023/03/02 19:32 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2ebd1fbb946d f8902b57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: use-after-free Read in nfc_llcp_unregister_device
2023/01/14 09:35 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 9598c377d828 529798b0 .config console log report info ci-upstream-gce-arm64 BUG: unable to handle kernel paging request in nfc_llcp_unregister_device
* Struck through repros no longer work on HEAD.