syzbot

 sign-in | mailing list | source | docs
🐞 Open [979] ≡ Subsystems 🐞 Fixed [5235] 🐞 Invalid [12494] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in device_del (3)

Status: closed as invalid on 2019/11/19 13:44
Subsystems: usb
[Documentation on labels]
Reported-by: syzbot+d7f6a4fd149fcdaf780b@syzkaller.appspotmail.com
First crash: 1806d, last: 1743d
▶ ▼ Discussions (4)
Title Replies (including bot) Last reply
general protection fault in device_del (3) 1 (2) 2019/11/19 13:43
Reminder: 67 open syzbot bugs in usb subsystem 1 (1) 2019/07/24 01:35
Reminder: 47 open syzbot bugs in usb subsystem 1 (1) 2019/07/09 19:01
Reminder: 42 open syzbot bugs in usb subsystem 1 (1) 2019/06/25 03:44
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in device_del (2) usb C 1 1806d 1806d 0/26 closed as invalid on 2019/05/14 21:06
upstream general protection fault in device_del usb C 4 1806d 1806d 0/26 closed as invalid on 2019/05/14 12:46

Sample crash report:
usb 1-1: New USB device strings: Mfr=1, Product=255, SerialNumber=8
usb 1-1: claimed gadget: Vendor=0424 ProdID=c001 Bus=01 Device=02
usb 1-1: device path: /sys/bus/usb/devices/1-1:4.125
most_core: registered new device mdev0 (1-1:4.125)
usb 1-1: USB disconnect, device number 2
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.2.0-rc6+ #14
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
RIP: 0010:device_del+0x7a/0xb80 drivers/base/core.c:2229
Code: c7 40 04 00 07 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 00 00 00 31 c0 e8 d1 9d d5 fe 48 8d 7b 40 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 79 0a 00 00 48 8b 43 40 4c 8d a3 80 00 00 00 31
RSP: 0018:ffff8881d9e0f7d0 EFLAGS: 00010202
RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff82673ddf RDI: 0000000000000040
RBP: dffffc0000000000 R08: ffff8881d9df9800 R09: ffffed1039fee706
R10: ffffed1039fee705 R11: ffff8881cff7382f R12: ffff8881cfef1a28
R13: ffff8881cff73760 R14: ffff8881cfef19b0 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000006cc0a0 CR3: 0000000006e21000 CR4: 00000000001406f0
Call Trace:
 device_unregister+0x11/0x30 drivers/base/core.c:2306
 hdm_disconnect+0xdf/0x200 drivers/staging/most/usb/usb.c:1208
 usb_unbind_interface+0x1bd/0x8a0 drivers/usb/core/driver.c:423
 __device_release_driver drivers/base/dd.c:1081 [inline]
 device_release_driver_internal+0x404/0x4c0 drivers/base/dd.c:1112
 bus_remove_device+0x2dc/0x4a0 drivers/base/bus.c:556
 device_del+0x460/0xb80 drivers/base/core.c:2274
 usb_disable_device+0x211/0x690 drivers/usb/core/message.c:1237
 usb_disconnect+0x284/0x830 drivers/usb/core/hub.c:2199
 hub_port_connect drivers/usb/core/hub.c:4949 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5213 [inline]
 port_event drivers/usb/core/hub.c:5359 [inline]
 hub_event+0x143d/0x35f0 drivers/usb/core/hub.c:5441
 process_one_work+0x905/0x1570 kernel/workqueue.c:2269
 worker_thread+0x96/0xe20 kernel/workqueue.c:2415
 kthread+0x30b/0x410 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Modules linked in:
---[ end trace e4fe4de18bc13a7b ]---
RIP: 0010:device_del+0x7a/0xb80 drivers/base/core.c:2229
Code: c7 40 04 00 07 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 00 00 00 31 c0 e8 d1 9d d5 fe 48 8d 7b 40 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 79 0a 00 00 48 8b 43 40 4c 8d a3 80 00 00 00 31
RSP: 0018:ffff8881d9e0f7d0 EFLAGS: 00010202
RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff82673ddf RDI: 0000000000000040
RBP: dffffc0000000000 R08: ffff8881d9df9800 R09: ffffed1039fee706
R10: ffffed1039fee705 R11: ffff8881cff7382f R12: ffff8881cfef1a28
R13: ffff8881cff73760 R14: ffff8881cfef19b0 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000006cc0a0 CR3: 0000000006e21000 CR4: 00000000001406f0

Crashes (286):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/07/11 19:17 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 186a30b9 .config console log report syz C ci2-upstream-usb
2019/07/11 00:48 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 ff7bf04c .config console log report syz C ci2-upstream-usb
2019/07/09 22:45 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 f62e1e85 .config console log report syz C ci2-upstream-usb
2019/06/12 19:57 https://github.com/google/kasan.git usb-fuzzer 69bbe8c72e6f 794a1ad7 .config console log report syz C ci2-upstream-usb
2019/06/07 21:52 https://github.com/google/kasan.git usb-fuzzer 69bbe8c72e6f cf9c3a50 .config console log report syz C ci2-upstream-usb
2019/06/03 21:32 https://github.com/google/kasan.git usb-fuzzer 69bbe8c72e6f 63bf051f .config console log report syz C ci2-upstream-usb
2019/05/14 21:27 https://github.com/google/kasan.git usb-fuzzer 43151d6c3fce 2e630085 .config console log report syz C ci2-upstream-usb
2019/07/16 12:54 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 6732e2c0 .config console log report ci2-upstream-usb
2019/07/16 10:40 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 6732e2c0 .config console log report ci2-upstream-usb
2019/07/16 08:19 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 6732e2c0 .config console log report ci2-upstream-usb
2019/07/16 04:56 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 6732e2c0 .config console log report ci2-upstream-usb
2019/07/16 02:02 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 139ac68a .config console log report ci2-upstream-usb
2019/07/16 01:23 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 139ac68a .config console log report ci2-upstream-usb
2019/07/15 17:59 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 139ac68a .config console log report ci2-upstream-usb
2019/07/15 14:37 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 a827bf70 .config console log report ci2-upstream-usb
2019/07/15 12:23 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 a827bf70 .config console log report ci2-upstream-usb
2019/07/15 11:07 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 a827bf70 .config console log report ci2-upstream-usb
2019/07/15 09:28 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 a827bf70 .config console log report ci2-upstream-usb
2019/07/15 03:00 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 2bbe2f05 .config console log report ci2-upstream-usb
2019/07/15 01:10 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 2bbe2f05 .config console log report ci2-upstream-usb
2019/07/14 22:16 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 2bbe2f05 .config console log report ci2-upstream-usb
2019/07/14 18:42 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 2bbe2f05 .config console log report ci2-upstream-usb
2019/07/14 11:11 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 e6fb0f13 .config console log report ci2-upstream-usb
2019/07/14 04:28 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 e6fb0f13 .config console log report ci2-upstream-usb
2019/07/14 00:02 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 e6fb0f13 .config console log report ci2-upstream-usb
2019/07/13 21:43 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 e6fb0f13 .config console log report ci2-upstream-usb
2019/07/13 20:23 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 e6fb0f13 .config console log report ci2-upstream-usb
2019/07/13 09:10 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 e6fb0f13 .config console log report ci2-upstream-usb
2019/07/13 08:54 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 e6fb0f13 .config console log report ci2-upstream-usb
2019/07/13 05:30 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 baa5258a .config console log report ci2-upstream-usb
2019/07/13 00:36 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 baa5258a .config console log report ci2-upstream-usb
2019/07/12 23:03 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 baa5258a .config console log report ci2-upstream-usb
2019/07/12 21:20 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 baa5258a .config console log report ci2-upstream-usb
2019/07/12 20:17 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 baa5258a .config console log report ci2-upstream-usb
2019/07/12 16:48 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 baa5258a .config console log report ci2-upstream-usb
2019/07/12 11:55 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 baa5258a .config console log report ci2-upstream-usb
2019/07/12 10:21 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 baa5258a .config console log report ci2-upstream-usb
2019/07/12 08:40 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 baa5258a .config console log report ci2-upstream-usb
2019/07/12 07:39 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 baa5258a .config console log report ci2-upstream-usb
2019/07/11 21:26 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 186a30b9 .config console log report ci2-upstream-usb
2019/07/11 13:12 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 ff7bf04c .config console log report ci2-upstream-usb
2019/07/11 11:22 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 ff7bf04c .config console log report ci2-upstream-usb
2019/07/11 10:10 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 ff7bf04c .config console log report ci2-upstream-usb
2019/07/11 07:57 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 ff7bf04c .config console log report ci2-upstream-usb
2019/07/11 03:23 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 ff7bf04c .config console log report ci2-upstream-usb
2019/07/10 23:52 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 ff7bf04c .config console log report ci2-upstream-usb
2019/07/10 18:00 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 f62e1e85 .config console log report ci2-upstream-usb
2019/07/10 15:50 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 f62e1e85 .config console log report ci2-upstream-usb
2019/07/10 09:44 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 f62e1e85 .config console log report ci2-upstream-usb
2019/07/10 04:48 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 f62e1e85 .config console log report ci2-upstream-usb
2019/07/09 14:29 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 f62e1e85 .config console log report ci2-upstream-usb
2019/07/09 08:19 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 f62e1e85 .config console log report ci2-upstream-usb
* Struck through repros no longer work on HEAD.