syzbot


general protection fault in on

Status: moderation: reported on 2024/11/11 09:05
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+cbbbdfd794e1c3e68993@syzkaller.appspotmail.com
First crash: 10d, last: 10d

Sample crash report:
Nov  7 09:03:54 syzkaller daemon.err dhcpcd[5658]: libudev: received NULL device
Nov  7 09:03:54 syzkaller daemon.err dhcpcd[5658]: libudev: received NULL device
Nov  7 09:03:54 syzkaller daemon.err dhcpcd[5658]: libudev: received NULL device
Nov  7 09:03:54 syzkaller daemon.err dhcpcd[5658]: libudev: received NULL device
Nov  7 09:03:54 syzkaller daemon.err dhcpcd[5658]: libudev: re[c e i v5e7d. 0N1U6L639][ T6010] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI
L device
Nov  7[   57.019964][ T6010] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
 09:03:54 syzkal[   57.019985][ T6010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
ler daemon.err d[   57.020007][ T6010] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1c0 lib/list_debug.c:49
hcpcd[5658]: lib[   57.020023][ T6010] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 83 c7 08 48 83 ec 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 19 01 00 00 48 89 f2 48 8b 4e 08 48 b8 00 00 00
udev: received N[   57.020032][ T6010] RSP: 0018:ffffc90004c3fc28 EFLAGS: 00010202
ULL device
Nov [   57.020039][ T6010] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88802902d078
 7 09:03:54 syzk[   57.020045][ T6010] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008
aller daemon.err[   57.020051][ T6010] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
 dhcpcd[5658]: l[   57.020057][ T6010] R10: 0000000000000001 R11: ffffffff961cada8 R12: dffffc0000000000
ibudev: received[   57.020062][ T6010] R13: ffffffffffffffb8 R14: ffff88802902d000 R15: ffffc90004ce8000
 NULL device
No[   57.020087][ T6010] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
v  7 09:03:54 sy[   57.020096][ T6010] CR2: 00007f160e4656c0 CR3: 000000002a67c000 CR4: 0000000000352ef0
zkaller daemon.e[   57.020102][ T6010] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
rr dhcpcd[5658]:[   57.020107][ T6010] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
 libudev: receiv[   57.020113][ T6010] Call Trace:
ed NULL device
Nov  7 09:03:54 [   57.020120][ T6010]  ? __die_body arch/x86/kernel/dumpstack.c:420 [inline]
Nov  7 09:03:54 [   57.020120][ T6010]  ? die_addr+0x3b/0xa0 arch/x86/kernel/dumpstack.c:460
syzkaller daemon[   57.020131][ T6010]  ? __exc_general_protection arch/x86/kernel/traps.c:748 [inline]
syzkaller daemon[   57.020131][ T6010]  ? exc_general_protection+0x155/0x230 arch/x86/kernel/traps.c:693
.err dhcpcd[5658[   57.020143][ T6010]  ? asm_exc_general_protection+0x26/0x30 arch/x86/include/asm/idtentry.h:617
]: libudev: rece[   57.020159][ T6010]  ? __list_del_entry_valid_or_report+0x20/0x1c0 lib/list_debug.c:49
ived NULL device[   57.020171][ T6010]  ? __pfx_do_raw_spin_lock+0x10/0x10 kernel/locking/spinlock_debug.c:64

Nov  7 09:03:5[   57.020182][ T6010]  __list_del_entry_valid include/linux/list.h:124 [inline]
Nov  7 09:03:5[   57.020182][ T6010]  __list_del_entry include/linux/list.h:215 [inline]
Nov  7 09:03:5[   57.020182][ T6010]  list_move_tail include/linux/list.h:310 [inline]
Nov  7 09:03:5[   57.020182][ T6010]  swap_reclaim_full_clusters+0x109/0x460 mm/swapfile.c:748
4 syzkaller daem[   57.020193][ T6010]  swap_reclaim_work+0x2e/0x40 mm/swapfile.c:779
on.err dhcpcd[56[   57.020207][ T6010]  process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
58]: libudev: re[   57.020218][ T6010]  ? __pfx_lock_acquire.part.0+0x10/0x10 kernel/locking/lockdep.c:122
ceived NULL devi[   57.020227][ T6010]  ? __pfx_process_one_work+0x10/0x10 include/linux/list.h:153
ce
Nov  7 09:03[   57.020237][ T6010]  ? assign_work+0x1a0/0x250 kernel/workqueue.c:1200
:54 syzkaller da[   57.020250][ T6010]  process_scheduled_works kernel/workqueue.c:3310 [inline]
:54 syzkaller da[   57.020250][ T6010]  worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
emon.err dhcpcd[[   57.020260][ T6010]  ? __kthread_parkme+0x148/0x220 kernel/kthread.c:293
Nov  7 09:03:54 [   57.020271][ T6010]  ? __pfx_worker_thread+0x10/0x10 include/linux/list.h:183
syzkaller daemon[   57.020280][ T6010]  kthread+0x2c1/0x3a0 kernel/kthread.c:389
.err dhcpcd[5658[   57.020290][ T6010]  ? __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:159 [inline]
.err dhcpcd[5658[   57.020290][ T6010]  ? _raw_spin_unlock_irq+0x23/0x50 kernel/locking/spinlock.c:202
]: libudev: rece[   57.020302][ T6010]  ? __pfx_kthread+0x10/0x10 include/linux/list.h:373
ived NULL device[   57.020313][ T6010]  ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147

Nov  7 09:03:5[   57.020321][ T6010]  ? __pfx_kthread+0x10/0x10 include/linux/list.h:373
4 syzkaller daem[   57.020332][ T6010]  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
on.err dhcpcd[56[   57.020346][ T6010]  </TASK>
58]: libudev: re[   57.020350][ T6010] Modules linked in:
ceived NULL devi[   57.020416][ T6010] ---[ end trace 0000000000000000 ]---
ce
Nov  7 09:03[   57.104252][ T6010] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1c0 lib/list_debug.c:49
:54 syzkaller da[   57.106383][ T6010] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 83 c7 08 48 83 ec 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 19 01 00 00 48 89 f2 48 8b 4e 08 48 b8 00 00 00
emon.err dhcpcd[[   57.111531][ T6010] RSP: 0018:ffffc90004c3fc28 EFLAGS: 00010202
5658]: libudev: [   57.113384][ T6010] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88802902d078
received NULL de[   57.115816][ T6010] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008
vice
Nov  7 09:[   57.118143][ T6010] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
03:54 syzkaller [   57.120474][ T6010] R10: 0000000000000001 R11: ffffffff961cada8 R12: dffffc0000000000
daemon.err dhcpc[   57.122838][ T6010] R13: ffffffffffffffb8 R14: ffff88802902d000 R15: ffffc90004ce8000
d[5658]: libudev[   57.125207][ T6010] FS:  0000000000000000(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000
: received NULL [   57.127715][ T6010] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
device
Nov  7 0[   57.129730][ T6010] CR2: 00007f160e4656c0 CR3: 000000002a67c000 CR4: 0000000000352ef0
9:03:54 syzkalle[   57.132041][ T6010] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
r daemon.err dhc[   57.134385][ T6010] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/11/07 09:04 upstream 7758b206117d df3dc63b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in on
* Struck through repros no longer work on HEAD.