syzbot


WARNING in __list_add (2)

Status: public: reported C repro on 2019/04/14 00:00
Reported-by: syzbot+832716454338eb9a805f@syzkaller.appspotmail.com
First crash: 2312d, last: 2277d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-44 WARNING in __list_add C 2 2288d 2048d 0/2 public: reported C repro on 2019/04/14 00:00
android-49 WARNING in __list_add C 11 2660d 2673d 1/3 fixed on 2017/08/12 08:42

Sample crash report:
random: sshd: uninitialized urandom read (32 bytes read)
urandom_read: 1 callbacks suppressed
random: sshd: uninitialized urandom read (32 bytes read)
------------[ cut here ]------------
WARNING: CPU: 0 PID: 24 at lib/list_debug.c:33 __list_add+0x143/0x1c0 lib/list_debug.c:30
list_add corruption. prev->next should be next (ffff8801b6e31430), but was ffff8801b6e31440. (prev=ffff8801bc648098).
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 24 Comm: kworker/0:1 Not tainted 4.9.124-g09eb2ba #31
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events p9_write_work
 ffff8801d940f9b8 ffffffff81eb95e9 ffffffff83c48ac0 00000000ffffffff
 0000000000000000 0000000000000000 0000000000000021 ffff8801d940fa78
 ffffffff81423eb5 0000000041b58ab3 ffffffff843bb8e8 ffffffff81423cf6
Call Trace:
 [<ffffffff81eb95e9>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81eb95e9>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81423eb5>] panic+0x1bf/0x3bc kernel/panic.c:179
 [<ffffffff814241a1>] __warn.cold.9+0xc1/0x17f kernel/panic.c:542
 [<ffffffff81138252>] warn_slowpath_fmt+0xc2/0x100 kernel/panic.c:565
 [<ffffffff81f21323>] __list_add+0x143/0x1c0 lib/list_debug.c:30
 [<ffffffff839cb856>] list_add_tail include/linux/list.h:77 [inline]
 [<ffffffff839cb856>] list_move_tail include/linux/list.h:169 [inline]
 [<ffffffff839cb856>] p9_write_work+0x1a6/0x910 net/9p/trans_fd.c:474
 [<ffffffff8118f461>] process_one_work+0x7e1/0x1500 kernel/workqueue.c:2092
 [<ffffffff81190256>] worker_thread+0xd6/0x10a0 kernel/workqueue.c:2226
 [<ffffffff8119f3cd>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff83a01b9c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/08/28 05:00 https://android.googlesource.com/kernel/common android-4.9 09eb2ba5ed0c 7ef1de9e .config console log report syz C ci-android-49-kasan-gce-root
2018/08/18 01:21 https://android.googlesource.com/kernel/common android-4.9 681e57bb080a 738da825 .config console log report syz C ci-android-49-kasan-gce-root
2018/08/17 14:57 https://android.googlesource.com/kernel/common android-4.9 f85543ba3c54 738da825 .config console log report syz C ci-android-49-kasan-gce
2018/08/27 11:38 https://android.googlesource.com/kernel/common android-4.9 09eb2ba5ed0c 758cd203 .config console log report ci-android-49-kasan-gce
2018/08/19 13:38 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce-root
2018/08/17 14:12 https://android.googlesource.com/kernel/common android-4.9 f85543ba3c54 738da825 .config console log report ci-android-49-kasan-gce
2018/08/03 04:56 https://android.googlesource.com/kernel/common android-4.9 0137ea2134c0 5b7e23bb .config console log report ci-android-49-kasan-gce
2018/08/02 11:30 https://android.googlesource.com/kernel/common android-4.9 0137ea2134c0 0a7cf4ec .config console log report ci-android-49-kasan-gce
2018/07/24 07:41 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 912c93d7 .config console log report ci-android-49-kasan-gce-root
* Struck through repros no longer work on HEAD.