syzbot

 sign-in | mailing list | source | docs
🐞 Open [987] ≡ Subsystems 🐞 Fixed [5238] 🐞 Invalid [12509] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

BUG: unable to handle kernel paging request in free_block (4)

Status: closed as dup on 2019/01/14 17:27
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+9ba43818e0e5b09913df@syzkaller.appspotmail.com
First crash: 1931d, last: 1898d
▶ ▼ Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
kernel panic: stack is corrupted in udp4_lib_lookup2 net 11 1942d 1939d
▶ ▼ Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 BUG: unable to handle kernel paging request in free_block 1 1374d 1374d 0/1 auto-closed as invalid on 2020/11/18 03:09
upstream BUG: unable to handle kernel paging request in free_block (3) fs 11 2190d 2219d 0/26 closed as invalid on 2018/09/05 11:23
upstream BUG: unable to handle kernel paging request in free_block (2) mm 1 2227d 2227d 0/26 closed as invalid on 2018/03/21 12:59
upstream BUG: unable to handle kernel paging request in free_block (5) mm syz done done 3 1435d 1834d 0/26 auto-obsoleted due to no activity on 2022/09/07 17:26

Sample crash report:
kernel msg: ebtables bug: please report to author: bad policy
kernel msg: ebtables bug: please report to author: bad policy
BUG: unable to handle kernel paging request at ffffffff01540101
#PF error: [normal kernel read fault]
PGD 8874067 P4D 8874067 PUD 0 
Oops: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 17466 Comm: kworker/1:1 Not tainted 5.0.0-rc5+ #60
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events cache_reap
RIP: 0010:__list_del_entry_valid+0x8b/0xf5 lib/list_debug.c:51
Code: 48 b8 00 02 00 00 00 00 ad de 49 39 c4 0f 84 e2 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80 3c 02 00 75 53 <49> 8b 14 24 4c 39 f2 0f 85 99 00 00 00 49 8d 7d 08 48 b8 00 00 00
base_sock_release(00000000193d460b) sk=000000005ff4b4f7
RSP: 0018:ffff888063ab7bd8 EFLAGS: 00010046
RAX: dffffc0000000000 RBX: ffffe8ffffd2e0f0 RCX: ffffffffffffffff
RDX: 1fffffffe02a8020 RSI: ffffffff81329ba4 RDI: ffffea00019f2250
RBP: ffff888063ab7bf0 R08: ffff88806917e400 R09: ffffed100c756f80
R10: ffffed100c756f7f R11: 0000000000000003 R12: ffffffff01540101
R13: 0000000000000000 R14: ffffea00019f2248 R15: ffffea00019f2248
FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
base_sock_release(000000001ead60a8) sk=00000000e82601d8
CR2: ffffffff01540101 CR3: 0000000080400000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __list_del_entry include/linux/list.h:117 [inline]
 list_del include/linux/list.h:125 [inline]
 free_block+0xd8/0x250 mm/slab.c:3405
 drain_array_locked+0x36/0x90 mm/slab.c:2197
 drain_array+0x8c/0xb0 mm/slab.c:4011
 cache_reap+0xf4/0x280 mm/slab.c:4052
 process_one_work+0x98e/0x1790 kernel/workqueue.c:2173
 worker_thread+0x98/0xe40 kernel/workqueue.c:2319
 kthread+0x357/0x430 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Modules linked in:
CR2: ffffffff01540101
---[ end trace 8a370f8548159400 ]---
RIP: 0010:__list_del_entry_valid+0x8b/0xf5 lib/list_debug.c:51
Code: 48 b8 00 02 00 00 00 00 ad de 49 39 c4 0f 84 e2 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80 3c 02 00 75 53 <49> 8b 14 24 4c 39 f2 0f 85 99 00 00 00 49 8d 7d 08 48 b8 00 00 00
RSP: 0018:ffff888063ab7bd8 EFLAGS: 00010046
RAX: dffffc0000000000 RBX: ffffe8ffffd2e0f0 RCX: ffffffffffffffff
RDX: 1fffffffe02a8020 RSI: ffffffff81329ba4 RDI: ffffea00019f2250
RBP: ffff888063ab7bf0 R08: ffff88806917e400 R09: ffffed100c756f80
R10: ffffed100c756f7f R11: 0000000000000003 R12: ffffffff01540101
R13: 0000000000000000 R14: ffffea00019f2248 R15: ffffea00019f2248
FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffff01540101 CR3: 0000000080400000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/02/13 08:43 net-next-old bd3606c29fcc 1eedba36 .config console log report ci-upstream-net-kasan-gce
2019/01/12 01:41 net-next-old b71acb0e3721 c3f3344c .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.