syzbot


BUG: corrupted list in tomoyo_try_to_gc

Status: closed as dup on 2025/01/04 13:17
Subsystems: tomoyo
[Documentation on labels]
Reported-by: syzbot+e92661ab419d1a81b816@syzkaller.appspotmail.com
First crash: 109d, last: 91d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
general protection fault in account_kernel_stack (3) kernel C 7 88d 103d
Discussions (2)
Title Replies (including bot) Last reply
[syzbot] [tomoyo?] BUG: corrupted list in tomoyo_try_to_gc 1 (2) 2025/01/04 13:17
[syzbot] Monthly tomoyo report (Dec 2024) 0 (1) 2024/12/19 18:40

Sample crash report:
list_del corruption, ffff888026b41180->next is NULL
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:52!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 1 UID: 0 PID: 20175 Comm: GC for TOMOYO Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:__list_del_entry_valid_or_report+0xea/0x1c0 lib/list_debug.c:52
Code: 0f 85 ae 00 00 00 48 8b 42 08 48 39 c6 75 5f b8 01 00 00 00 48 83 c4 18 c3 cc cc cc cc 48 c7 c7 e0 73 b1 8b e8 57 06 db fc 90 <0f> 0b 48 c7 c7 40 74 b1 8b e8 48 06 db fc 90 0f 0b 48 c7 c7 a0 74
RSP: 0018:ffffc90005637e00 EFLAGS: 00010282
RAX: 0000000000000033 RBX: ffff888026b41180 RCX: ffffffff8178e2b9
RDX: 0000000000000000 RSI: ffffffff81798a46 RDI: 0000000000000005
RBP: ffff888026b41180 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000000 R11: 0000000000000001 R12: ffff888026b41190
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd02103fe30 CR3: 000000004cee2000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __list_del_entry_valid include/linux/list.h:124 [inline]
 __list_del_entry include/linux/list.h:215 [inline]
 tomoyo_try_to_gc+0x21/0xcd0 security/tomoyo/gc.c:395
 tomoyo_collect_entry security/tomoyo/gc.c:599 [inline]
 tomoyo_gc_thread security/tomoyo/gc.c:619 [inline]
 tomoyo_gc_thread+0xd3b/0x1390 security/tomoyo/gc.c:612
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_del_entry_valid_or_report+0xea/0x1c0 lib/list_debug.c:52
Code: 0f 85 ae 00 00 00 48 8b 42 08 48 39 c6 75 5f b8 01 00 00 00 48 83 c4 18 c3 cc cc cc cc 48 c7 c7 e0 73 b1 8b e8 57 06 db fc 90 <0f> 0b 48 c7 c7 40 74 b1 8b e8 48 06 db fc 90 0f 0b 48 c7 c7 a0 74
RSP: 0018:ffffc90005637e00 EFLAGS: 00010282
RAX: 0000000000000033 RBX: ffff888026b41180 RCX: ffffffff8178e2b9
RDX: 0000000000000000 RSI: ffffffff81798a46 RDI: 0000000000000005
RBP: ffff888026b41180 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000000 R11: 0000000000000001 R12: ffff888026b41190
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c29200f CR3: 000000000db7e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (14):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/30 00:29 upstream 4099a71718b0 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/27 18:35 upstream d6ef8b40d075 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/27 08:55 upstream d6ef8b40d075 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/25 23:09 upstream 9b2ffa6148b1 444551c4 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/25 16:55 upstream 9b2ffa6148b1 444551c4 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/23 15:42 upstream 4bbf9020becb 444551c4 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/22 05:48 upstream 48f506ad0b68 d7f584ee .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/20 23:45 upstream e9b8ffafd20a d7f584ee .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/19 17:42 upstream eabcdba3ad40 1d58202c .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/19 07:37 upstream c061cf420ded 1432fc84 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/17 17:41 upstream 59dbb9d81adf a0626d3a .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/16 12:34 upstream 78d4f34e2115 eec85da6 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/12 01:43 upstream f92f4749861b 6f1b0fa8 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/11 16:47 upstream f92f4749861b 6f1b0fa8 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
* Struck through repros no longer work on HEAD.