syzbot

 sign-in | mailing list | source | docs
🐞 Open [979] ≡ Subsystems 🐞 Fixed [4543] 🐞 Invalid [10483] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

BUG: corrupted list in p9_fd_cancelled (2)

Status: upstream: reported syz repro on 2019/08/29 03:58
Labels: 9p net (incorrect?)
Reported-by: syzbot+1d26c4ed77bc6c5ed5e6@syzkaller.appspotmail.com
First crash: 1373d, last: 3d04h

Cause bisection: failed (error log, bisect log)

Fix bisection: failed (error log, bisect log)
▶ ▼ Discussions (3)
Title Replies (including bot) Last reply
[syzbot] Monthly 9p report (May 2023) 0 (1) 2023/05/07 06:35
[syzbot] Monthly 9p report 0 (1) 2023/04/06 08:17
BUG: corrupted list in p9_fd_cancelled (2) 0 (1) 2019/08/29 03:58
▶ ▼ Similar bugs (15)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 BUG: corrupted list in p9_fd_cancelled 1 540d 540d 0/2 closed as invalid on 2022/03/01 11:24
linux-4.14 BUG: corrupted list in p9_fd_cancelled syz done 2 1274d 1319d 1/1 fixed on 2020/01/03 09:37
android-6-1 BUG: corrupted list in p9_fd_cancelled 2 10d 13d 0/2 premoderation: reported on 2023/05/16 17:03
android-5-10 BUG: corrupted list in p9_fd_cancelled (2) 3 413d 448d 0/2 auto-closed as invalid on 2022/07/10 10:51
android-54 BUG: corrupted list in p9_fd_cancelled 3 701d 910d 0/2 auto-closed as invalid on 2021/10/25 12:29
linux-4.19 BUG: corrupted list in p9_fd_cancelled syz done 2 1293d 1356d 1/1 fixed on 2019/12/18 17:42
linux-6.1 BUG: corrupted list in p9_fd_cancelled 12 2d20h 78d 0/3 upstream: reported on 2023/03/12 02:32
android-5-15 BUG: corrupted list in p9_fd_cancelled origin:downstream syz done 9 10d 120d 0/2 premoderation: reported syz repro on 2023/01/29 05:13
upstream BUG: corrupted list in p9_fd_cancelled 16 1677d 1778d 0/24 auto-closed as invalid on 2019/04/23 06:51
linux-4.19 BUG: corrupted list in p9_fd_cancelled (3) 1 509d 509d 0/1 auto-closed as invalid on 2022/05/05 22:32
linux-5.15 BUG: corrupted list in p9_fd_cancelled 1 65d 65d 0/3 upstream: reported on 2023/03/25 04:05
android-54 BUG: corrupted list in p9_fd_cancelled (2) syz 15 22d 552d 0/2 upstream: reported syz repro on 2021/11/23 15:00
linux-4.19 BUG: corrupted list in p9_fd_cancelled (4) 1 122d 122d 0/1 upstream: reported on 2023/01/27 06:50
linux-4.19 BUG: corrupted list in p9_fd_cancelled (2) 1 823d 823d 0/1 auto-closed as invalid on 2021/06/25 15:45
android-5-10 BUG: corrupted list in p9_fd_cancelled (3) 12 5d17h 277d 0/2 premoderation: reported on 2022/08/25 12:46

Sample crash report:
list_del corruption, ffff88808ecdbfb0->next is LIST_POISON1 (dead000000000100)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:45!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 20174 Comm: syz-executor.1 Not tainted 5.3.0-rc5+ #125
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__list_del_entry_valid.cold+0x23/0x4f lib/list_debug.c:45
Code: e8 d5 06 1e fe 0f 0b 4c 89 f6 48 c7 c7 e0 26 c6 87 e8 c4 06 1e fe 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 20 26 c6 87 e8 b0 06 1e fe <0f> 0b 4c 89 e2 4c 89 f6 48 c7 c7 80 26 c6 87 e8 9c 06 1e fe 0f 0b
RSP: 0018:ffff8880994076d8 EFLAGS: 00010286
RAX: 000000000000004e RBX: 1ffff11013280ee9 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff815c2526 RDI: ffffed1013280ecd
RBP: ffff8880994076f0 R08: 000000000000004e R09: ffffed1015d060d1
R10: ffffed1015d060d0 R11: ffff8880ae830687 R12: dead000000000122
R13: dead000000000100 R14: ffff88808ecdbfb0 R15: ffff88808ecdbfb8
FS:  00007fb2aca54700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffee6574f58 CR3: 00000000a8e6d000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __list_del_entry include/linux/list.h:131 [inline]
 list_del include/linux/list.h:139 [inline]
 p9_fd_cancelled+0x3c/0x1c0 net/9p/trans_fd.c:710
 p9_client_flush+0x1b7/0x1f0 net/9p/client.c:674
 p9_client_rpc+0x112f/0x12a0 net/9p/client.c:781
 p9_client_version net/9p/client.c:952 [inline]
 p9_client_create+0xb7f/0x1430 net/9p/client.c:1052
 v9fs_session_init+0x1e7/0x18c0 fs/9p/v9fs.c:406
 v9fs_mount+0x7d/0x920 fs/9p/vfs_super.c:120
 legacy_get_tree+0x108/0x220 fs/fs_context.c:661
 vfs_get_tree+0x8e/0x390 fs/super.c:1413
 do_new_mount fs/namespace.c:2791 [inline]
 do_mount+0x13b3/0x1c30 fs/namespace.c:3111
 ksys_mount+0xdb/0x150 fs/namespace.c:3320
 __do_sys_mount fs/namespace.c:3334 [inline]
 __se_sys_mount fs/namespace.c:3331 [inline]
 __x64_sys_mount+0xbe/0x150 fs/namespace.c:3331
 do_syscall_64+0xfd/0x6a0 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x459879
Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fb2aca53c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879
RDX: 00000000200002c0 RSI: 0000000020000040 RDI: 0000000000000000
RBP: 000000000075bfc8 R08: 0000000020000400 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2aca546d4
R13: 00000000004c5e2f R14: 00000000004da930 R15: 00000000ffffffff
Modules linked in:
---[ end trace c76f5f29f0af3347 ]---
RIP: 0010:__list_del_entry_valid.cold+0x23/0x4f lib/list_debug.c:45
Code: e8 d5 06 1e fe 0f 0b 4c 89 f6 48 c7 c7 e0 26 c6 87 e8 c4 06 1e fe 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 20 26 c6 87 e8 b0 06 1e fe <0f> 0b 4c 89 e2 4c 89 f6 48 c7 c7 80 26 c6 87 e8 9c 06 1e fe 0f 0b
RSP: 0018:ffff8880994076d8 EFLAGS: 00010286
RAX: 000000000000004e RBX: 1ffff11013280ee9 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff815c2526 RDI: ffffed1013280ecd
RBP: ffff8880994076f0 R08: 000000000000004e R09: ffffed1015d060d1
R10: ffffed1015d060d0 R11: ffff8880ae830687 R12: dead000000000122
R13: dead000000000100 R14: ffff88808ecdbfb0 R15: ffff88808ecdbfb8
FS:  00007fb2aca54700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffee6574f58 CR3: 00000000a8e6d000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (160):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Manager Title
2019/08/25 02:04 upstream 361469211f87 d21c5d9d .config console log report syz ci-upstream-kasan-gce-root
2019/10/16 13:10 linux-next 0e9d28bc6c81 d4ea592f .config console log report syz ci-upstream-linux-next-kasan-gce-root
2023/05/25 13:37 upstream 933174ae28ba 0513b3e6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/05/24 15:42 upstream 9d646009f65d 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/05/23 13:30 upstream ae8373a5add4 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in p9_fd_cancelled
2023/05/22 13:49 upstream 44c026a73be8 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/05/22 09:57 upstream 44c026a73be8 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/05/19 23:59 upstream cbd6ac3837cd 96689200 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in p9_fd_cancelled
2023/05/19 11:43 upstream 2d1bcbc6cd70 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/05/18 15:37 upstream 4d6d4c7f541d 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/05/18 06:26 upstream 1b66c114d161 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/05/18 03:54 upstream 1b66c114d161 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/05/16 01:54 upstream f1fcbaa18b28 71b00cfb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in p9_fd_cancelled
2023/05/12 19:24 upstream cc3c44c9fda2 ecca8a24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/05/11 09:24 upstream 80e62bc8487b 0fbd49f4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/05/11 07:17 upstream 80e62bc8487b 0fbd49f4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/05/09 01:58 upstream ba0ad6ed89fd f4168103 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/05/05 21:04 upstream 78b421b6a7c6 4cec9341 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in p9_fd_cancelled
2023/05/04 17:43 upstream 1a5304fecee5 3a560463 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in p9_fd_cancelled
2023/05/04 03:16 upstream 89b7fd5d7f3c b5918830 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in p9_fd_cancelled
2023/05/02 20:08 upstream 865fdb08197e 48e0a81d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/04/26 03:14 upstream 4173cf6fb6b7 7560799c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in p9_fd_cancelled
2023/04/19 20:20 upstream 789b4a41c247 a219f34e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in p9_fd_cancelled
2023/04/16 04:16 upstream a7a55e27ad72 ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in p9_fd_cancelled
2023/04/15 03:18 upstream 95abc817ab3a ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/04/10 22:16 upstream 0d3eb744aed4 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/04/08 02:38 upstream aa318c48808c 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in p9_fd_cancelled
2023/04/08 01:15 upstream aa318c48808c 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/04/04 00:29 upstream 148341f0a2f5 7db618d0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/04/03 09:41 upstream 7e364e56293b 41147e3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/04/02 23:47 upstream 6ab608fe852b f325deb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/04/02 05:03 upstream 00c7b5f4ddc5 f325deb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in p9_fd_cancelled
2023/03/29 16:41 upstream fcd476ea6a88 f325deb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/03/29 04:02 upstream fcd476ea6a88 fc067f05 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in p9_fd_cancelled
2023/03/28 22:32 upstream fcd476ea6a88 48c74771 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/03/27 23:35 upstream 3a93e40326c8 47f3aaf1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/03/27 10:23 upstream 197b6b60ae7b f8f96aa9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/03/25 07:57 upstream 65aca32efdcb fbf0499a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/03/21 05:33 upstream 7d31677bb7b1 7939252e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: corrupted list in p9_fd_cancelled
2023/03/20 12:20 upstream e8d018dd0257 7939252e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/03/19 21:49 upstream 5cdfdd6da323 7939252e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: corrupted list in p9_fd_cancelled
2022/09/11 20:25 upstream 4ed9c1e971b1 356d8217 .config console log report info ci-qemu-upstream-386 BUG: corrupted list in p9_fd_cancelled
2023/05/26 18:52 linux-next 715abedee4cd cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/05/24 22:23 linux-next 715abedee4cd 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/05/20 03:37 linux-next 715abedee4cd 96689200 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/05/12 00:39 linux-next aabe491169be adb9a3cd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/05/08 08:21 linux-next 52025ebbb518 90c93c40 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/04/26 09:32 linux-next f600e0bbde85 7560799c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/04/14 20:00 linux-next d3f2cd248191 3cfcaa1b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/04/13 15:44 linux-next 7d8214bba44c 3cfcaa1b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/04/12 10:14 linux-next 7d8214bba44c 1a1596b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/04/05 02:25 linux-next 6a53bda3aaf3 831373d3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/04/04 13:48 linux-next 6a53bda3aaf3 928dd177 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/04/04 02:24 linux-next 31bd35b66249 7db618d0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/03/28 17:34 linux-next a6faf7ea9fcb 48c74771 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/03/22 15:29 linux-next 0aa250ce67a2 d846e076 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/03/22 12:03 linux-next 0aa250ce67a2 d846e076 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in p9_fd_cancelled
2023/02/14 00:29 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 93ae7e0a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in p9_fd_cancelled
* Struck through repros no longer work on HEAD.