syzbot

 sign-in | mailing list | source | docs
🐞 Open [712] 🐞 Fixed [297] 🐞 Invalid [838] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in klist_iter_exit

Status: upstream: reported C repro on 2021/04/12 19:06
Reported-by: syzbot+984f0e794042ceadb043@syzkaller.appspotmail.com
First crash: 1109d, last: 605d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 general protection fault in klist_iter_exit 1 873d 873d 0/1 auto-closed as invalid on 2022/04/04 03:07
android-54 general protection fault in klist_iter_exit 1 854d 854d 0/2 auto-closed as invalid on 2022/04/22 15:11
upstream general protection fault in klist_iter_exit net nfc C unreliable inconclusive 54 839d 1146d 0/26 auto-obsoleted due to no activity on 2022/09/16 23:48
android-5-10 general protection fault in klist_iter_exit C error 5 866d 903d 1/2 fixed on 2021/12/20 18:14
▶ ▼ Fix bisection attempts (2)
Created Duration User Patch Repo Result
2022/06/19 10:31 11m bisect fix linux-4.19.y error job log (0)
2021/06/04 19:49 30m bisect fix linux-4.19.y job log (0) log

Sample crash report:
RBP: 00007fff51e34110 R08: 0000000000000001 R09: bb1414ac51e34127
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000013 R14: 00007fff51e34110 R15: 0000000000000003
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 3509 Comm: kworker/1:2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
Workqueue: events netlink_sock_destruct_work
RIP: 0010:klist_iter_exit+0x21/0x80 lib/klist.c:314
Code: 66 0f 1f 84 00 00 00 00 00 41 54 55 53 48 89 fb e8 34 69 74 f9 48 8d 6b 08 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 <80> 3c 02 00 75 40 4c 8b 63 08 4d 85 e4 74 2e e8 0b 69 74 f9 31 f6
RSP: 0018:ffff8880a9747c48 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff87ee1c3c RDI: 0000000000000000
RBP: 0000000000000008 R08: 0000000000000000 R09: fffffbfff15cf8ac
R10: ffffffff8ae7c567 R11: 0000000000074071 R12: 0000000000000000
R13: ffffffff896f11a0 R14: ffff8880ba12a8c0 R15: ffff8880ba12f000
FS:  0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f83bf897000 CR3: 00000000a0ea6000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 nfc_device_iter_exit net/nfc/nfc.h:133 [inline]
 nfc_genl_dump_devices_done+0x31/0x50 net/nfc/netlink.c:658
 genl_lock_done+0x82/0xc0 net/netlink/genetlink.c:495
 netlink_sock_destruct+0x96/0x280 net/netlink/af_netlink.c:398
 __sk_destruct+0x4b/0x8a0 net/core/sock.c:1576
 sk_destruct net/core/sock.c:1617 [inline]
 __sk_free+0x165/0x3b0 net/core/sock.c:1628
 sk_free+0x3b/0x50 net/core/sock.c:1639
 process_one_work+0x864/0x1570 kernel/workqueue.c:2153
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
 kt
----------------
Code disassembly (best guess):
   0:	66 0f 1f 84 00 00 00 	nopw   0x0(%rax,%rax,1)
   7:	00 00
   9:	41 54                	push   %r12
   b:	55                   	push   %rbp
   c:	53                   	push   %rbx
   d:	48 89 fb             	mov    %rdi,%rbx
  10:	e8 34 69 74 f9       	callq  0xf9746949
  15:	48 8d 6b 08          	lea    0x8(%rbx),%rbp
  19:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  20:	fc ff df
  23:	48 89 ea             	mov    %rbp,%rdx
  26:	48 c1 ea 03          	shr    $0x3,%rdx
* 2a:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1) <-- trapping instruction
  2e:	75 40                	jne    0x70
  30:	4c 8b 63 08          	mov    0x8(%rbx),%r12
  34:	4d 85 e4             	test   %r12,%r12
  37:	74 2e                	je     0x67
  39:	e8 0b 69 74 f9       	callq  0xf9746949
  3e:	31 f6                	xor    %esi,%esi

Crashes (89):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/08/29 07:46 linux-4.19.y 3f8a27f9e27b 07177916 .config console log report syz C ci2-linux-4-19 general protection fault in klist_iter_exit
2022/05/18 01:12 linux-4.19.y 3f8a27f9e27b 744a39e2 .config console log report syz C ci2-linux-4-19 general protection fault in klist_iter_exit
2021/04/12 19:20 linux-4.19.y 830a059cbba6 6a81331a .config console log report syz C ci2-linux-4-19 general protection fault in klist_iter_exit
2022/08/29 06:48 linux-4.19.y 3f8a27f9e27b 07177916 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/08/19 14:26 linux-4.19.y 3f8a27f9e27b 26a13b38 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/08/18 03:22 linux-4.19.y 3f8a27f9e27b a9409d47 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/07/29 19:09 linux-4.19.y 3f8a27f9e27b fef302b1 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/07/26 01:13 linux-4.19.y 3f8a27f9e27b 34795c51 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/07/24 06:41 linux-4.19.y 3f8a27f9e27b 22343af4 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/07/22 18:48 linux-4.19.y 3f8a27f9e27b 22343af4 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/06/26 01:56 linux-4.19.y 3f8a27f9e27b a371c43c .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/06/23 06:39 linux-4.19.y 3f8a27f9e27b 912f5df7 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/05/20 10:31 linux-4.19.y 3f8a27f9e27b cb1ac2e7 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/05/18 23:21 linux-4.19.y 3f8a27f9e27b 50c53f39 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/05/18 00:58 linux-4.19.y 3f8a27f9e27b 744a39e2 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/05/12 09:35 linux-4.19.y 3f8a27f9e27b beb0b407 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/05/10 16:24 linux-4.19.y 3f8a27f9e27b 8b277b8e .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/04/14 03:08 linux-4.19.y 3f8a27f9e27b b17b2923 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/04/12 07:02 linux-4.19.y 3f8a27f9e27b af01ee7d .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/03/26 14:16 linux-4.19.y 3f8a27f9e27b 89bc8608 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/03/16 22:46 linux-4.19.y 3f8a27f9e27b 46cc3b21 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/03/11 14:12 linux-4.19.y 3f8a27f9e27b 9e8eaa75 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/03/03 03:22 linux-4.19.y 3f8a27f9e27b 45a13a73 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/03/02 04:26 linux-4.19.y 3f8a27f9e27b 45a13a73 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/02/13 11:03 linux-4.19.y 3f8a27f9e27b 8b9ca619 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/02/08 07:20 linux-4.19.y 3f8a27f9e27b a7dab638 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/02/03 15:40 linux-4.19.y 3f8a27f9e27b 4ebb2798 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/02/03 07:14 linux-4.19.y 3f8a27f9e27b 4ebb2798 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/02/01 00:04 linux-4.19.y 3f8a27f9e27b 6b7c57fe .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/01/22 09:33 linux-4.19.y 3f8a27f9e27b 214351e1 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/01/19 16:19 linux-4.19.y 3f8a27f9e27b 0620189b .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/01/13 00:41 linux-4.19.y 3f8a27f9e27b 44d1319a .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/01/11 08:10 linux-4.19.y 3f8a27f9e27b ddb0ab8c .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/01/10 14:12 linux-4.19.y 3f8a27f9e27b 2ca0d385 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/01/10 06:15 linux-4.19.y 3f8a27f9e27b 2ca0d385 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2022/01/06 13:38 linux-4.19.y 3f8a27f9e27b 6acc789a .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/29 16:48 linux-4.19.y 3f8a27f9e27b 6cc879d4 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/27 15:58 linux-4.19.y 3f8a27f9e27b 5140bd58 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/26 16:03 linux-4.19.y 3f8a27f9e27b e4f103c4 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/25 09:35 linux-4.19.y 3f8a27f9e27b 6caa12e4 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/17 19:29 linux-4.19.y 3f8a27f9e27b 44068e19 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/16 06:06 linux-4.19.y 3f8a27f9e27b 572bcb40 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/15 22:40 linux-4.19.y 3f8a27f9e27b 572bcb40 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/12 06:59 linux-4.19.y 3f8a27f9e27b 49ca1f59 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/07 08:39 linux-4.19.y 3f8a27f9e27b 0230ba3e .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/06 17:01 linux-4.19.y 3f8a27f9e27b 579a8754 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/05 07:48 linux-4.19.y 3f8a27f9e27b a617004c .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/05 01:28 linux-4.19.y 3f8a27f9e27b a617004c .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/04 23:36 linux-4.19.y 3f8a27f9e27b a617004c .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/02 11:25 linux-4.19.y 3f8a27f9e27b 61f86278 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/01 14:08 linux-4.19.y 3f8a27f9e27b 5fa3eacc .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/12/01 10:00 linux-4.19.y 3f8a27f9e27b 5fa3eacc .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/09/20 03:14 linux-4.19.y b172b44fcb17 70b76c1d .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/09/19 02:54 linux-4.19.y b172b44fcb17 70b76c1d .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/09/17 23:42 linux-4.19.y b172b44fcb17 70b76c1d .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/09/17 09:59 linux-4.19.y b172b44fcb17 5b989942 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/09/03 00:49 linux-4.19.y e23d55af0e1f f62a5829 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/08/22 20:59 linux-4.19.y 59456c9cc40c b599f2fc .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/08/21 06:17 linux-4.19.y 59456c9cc40c b599f2fc .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/08/19 06:53 linux-4.19.y 59456c9cc40c a2fe1cb5 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/08/18 18:00 linux-4.19.y 59456c9cc40c a2fe1cb5 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/08/15 00:59 linux-4.19.y addba38e7c3b 2489ab88 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/08/09 12:59 linux-4.19.y 5c66974a6304 6972b106 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/07/18 06:49 linux-4.19.y fcfbdfe9626e f115ae98 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/07/03 22:56 linux-4.19.y 9f84340f012e 55aa55c2 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/06/28 12:20 linux-4.19.y eb575cd5d7f6 9d2ab5df .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/05/05 19:49 linux-4.19.y 97a8651cadce 06c27ff5 .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
2021/04/12 19:05 linux-4.19.y 830a059cbba6 6a81331a .config console log report info ci2-linux-4-19 general protection fault in klist_iter_exit
* Struck through repros no longer work on HEAD.