syzbot


BUG: corrupted list in tomoyo_try_to_gc

Status: upstream: reported on 2024/12/16 09:53
Subsystems: tomoyo
[Documentation on labels]
Reported-by: syzbot+e92661ab419d1a81b816@syzkaller.appspotmail.com
First crash: 9d21h, last: 14h40m
Discussions (2)
Title Replies (including bot) Last reply
[syzbot] Monthly tomoyo report (Dec 2024) 0 (1) 2024/12/19 18:40
[syzbot] [tomoyo?] BUG: corrupted list in tomoyo_try_to_gc 0 (1) 2024/12/16 09:53

Sample crash report:
list_del corruption, ffff88802616f680->next is NULL
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:52!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 1 UID: 0 PID: 7094 Comm: GC for TOMOYO Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:__list_del_entry_valid_or_report+0xea/0x1c0 lib/list_debug.c:52
Code: 0f 85 ae 00 00 00 48 8b 42 08 48 39 c6 75 5f b8 01 00 00 00 48 83 c4 18 c3 cc cc cc cc 48 c7 c7 a0 71 b1 8b e8 b7 11 db fc 90 <0f> 0b 48 c7 c7 00 72 b1 8b e8 a8 11 db fc 90 0f 0b 48 c7 c7 60 72
RSP: 0018:ffffc90018ef7e00 EFLAGS: 00010282
RAX: 0000000000000033 RBX: ffff88802616f680 RCX: ffffffff8178e1e9
RDX: 0000000000000000 RSI: ffffffff81798976 RDI: 0000000000000005
RBP: ffff88802616f680 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000000 R11: 0000000000000001 R12: ffff88802616f690
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000201e2030 CR3: 000000002fd3a000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __list_del_entry_valid include/linux/list.h:124 [inline]
 __list_del_entry include/linux/list.h:215 [inline]
 tomoyo_try_to_gc+0x21/0xcd0 security/tomoyo/gc.c:395
 tomoyo_collect_entry security/tomoyo/gc.c:599 [inline]
 tomoyo_gc_thread security/tomoyo/gc.c:619 [inline]
 tomoyo_gc_thread+0xd3b/0x1390 security/tomoyo/gc.c:612
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_del_entry_valid_or_report+0xea/0x1c0 lib/list_debug.c:52
Code: 0f 85 ae 00 00 00 48 8b 42 08 48 39 c6 75 5f b8 01 00 00 00 48 83 c4 18 c3 cc cc cc cc 48 c7 c7 a0 71 b1 8b e8 b7 11 db fc 90 <0f> 0b 48 c7 c7 00 72 b1 8b e8 a8 11 db fc 90 0f 0b 48 c7 c7 60 72
RSP: 0018:ffffc90018ef7e00 EFLAGS: 00010282
RAX: 0000000000000033 RBX: ffff88802616f680 RCX: ffffffff8178e1e9
RDX: 0000000000000000 RSI: ffffffff81798976 RDI: 0000000000000005
RBP: ffff88802616f680 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000000 R11: 0000000000000001 R12: ffff88802616f690
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002034f030 CR3: 0000000032ac6000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/20 23:45 upstream e9b8ffafd20a d7f584ee .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/19 17:42 upstream eabcdba3ad40 1d58202c .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/19 07:37 upstream c061cf420ded 1432fc84 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/17 17:41 upstream 59dbb9d81adf a0626d3a .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/16 12:34 upstream 78d4f34e2115 eec85da6 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/12 01:43 upstream f92f4749861b 6f1b0fa8 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
2024/12/11 16:47 upstream f92f4749861b 6f1b0fa8 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: corrupted list in tomoyo_try_to_gc
* Struck through repros no longer work on HEAD.