syzbot

 sign-in | mailing list | source | docs
🐞 Open [717] 🐞 Fixed [181] 🐞 Invalid [640] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in try_to_wake_up

Status: fixed on 2021/05/17 08:49
Reported-by: syzbot+a34f9da6d80289f86f4f@syzkaller.appspotmail.com
Fix commit: f6420532cfd7 net: tun: set tun->dev->addr_len during TUNSETLINK processing
First crash: 1136d, last: 1106d
Fix bisection: fixed by (bisect log) :
commit f6420532cfd7f73ad05045d89efc9c3a9377b85e
Author: Phillip Potter <phil@philpotter.co.uk>
Date: Tue Apr 6 17:45:54 2021 +0000

  net: tun: set tun->dev->addr_len during TUNSETLINK processing

  
▶ ▼ Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in try_to_wake_up (2) io-uring C done done 3547 22h25m 1155d 0/26 upstream: reported C repro on 2021/02/26 14:48
upstream KASAN: use-after-free Read in try_to_wake_up fs C unreliable 82 1156d 1156d 0/26 closed as invalid on 2021/02/25 16:53
linux-4.19 general protection fault in try_to_wake_up syz done 229 1048d 1136d 1/1 fixed on 2021/07/14 00:01
upstream general protection fault in try_to_wake_up kernel syz 1 2224d 2220d 5/26 fixed on 2018/04/06 16:37
linux-5.15 KASAN: use-after-free Read in try_to_wake_up origin:upstream C 36 2d02h 310d 0/3 upstream: reported C repro on 2023/06/21 23:55
linux-4.14 KASAN: use-after-free Read in try_to_wake_up nilfs2 C 8 423d 544d 0/1 upstream: reported C repro on 2022/10/30 09:08
linux-6.1 KASAN: use-after-free Read in try_to_wake_up origin:upstream C 32 2d03h 390d 0/3 upstream: reported C repro on 2023/04/02 17:27

Sample crash report:
vhci_hcd: connection closed
vhci_hcd: stop threads
kasan: CONFIG_KASAN_INLINE enabled
vhci_hcd: release socket
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 7988 Comm: syz-executor241 Not tainted 4.14.226-syzkaller #0
vhci_hcd: disconnect device
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8880b3ec86c0 task.stack: ffff8880982c0000
RIP: 0010:__lock_acquire+0x1cc/0x3f20 kernel/locking/lockdep.c:3369
RSP: 0018:ffff8880982c7868 EFLAGS: 00010006
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 00000000000000fc RSI: 0000000000000000 RDI: 00000000000007e0
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000001 R11: ffff8880b3ec86c0 R12: 00000000000007e0
R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8beb5d40
FS:  00007f8daf55b700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004b2768 CR3: 00000000aad24000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x8c/0xc0 kernel/locking/spinlock.c:160
 try_to_wake_up+0x6a/0x1100 kernel/sched/core.c:1997
 store_attach+0x577/0x990 drivers/usb/usbip/vhci_sysfs.c:435
 dev_attr_store+0x56/0x80 drivers/base/core.c:738
 sysfs_kf_write+0x106/0x160 fs/sysfs/file.c:142
 kernfs_fop_write+0x289/0x440 fs/kernfs/file.c:316
 __vfs_write+0xe4/0x630 fs/read_write.c:480
 vfs_write+0x17f/0x4d0 fs/read_write.c:544
 SYSC_write fs/read_write.c:590 [inline]
 SyS_write+0xf2/0x210 fs/read_write.c:582
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x40684f
RSP: 002b:00007f8daf55ad60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000040684f
RDX: 0000000000000007 RSI: 00007f8daf55adb0 RDI: 0000000000000005
RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f8daf55ad00
R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8daf55adb0
R13: 0000000000000000 R14: 00007f8daf55b400 R15: 0000000000022000
Code: 18 00 00 00 00 48 81 c4 80 01 00 00 44 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 67 2a 00 00 49 81 3c 24 a0 17 2e 8b 0f 84 5f 
RIP: __lock_acquire+0x1cc/0x3f20 kernel/locking/lockdep.c:3369 RSP: ffff8880982c7868
---[ end trace d85b11c131318e26 ]---

Crashes (707):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/03/18 08:22 linux-4.14.y cb83ddcd5332 fdb2bb2c .config console log report syz C ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/04 14:39 linux-4.14.y bd634aa64163 6a81331a .config console log report syz ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/04 09:42 linux-4.14.y bd634aa64163 6a81331a .config console log report syz ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/03 06:14 linux-4.14.y bd634aa64163 6a81331a .config console log report syz ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/02 11:53 linux-4.14.y bd634aa64163 6a81331a .config console log report syz ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/02 07:31 linux-4.14.y bd634aa64163 6a81331a .config console log report syz ci2-linux-4-14 general protection fault in try_to_wake_up
2021/03/28 00:06 linux-4.14.y 670d6552eda8 a8529b82 .config console log report syz ci2-linux-4-14 general protection fault in try_to_wake_up
2021/03/27 21:55 linux-4.14.y 670d6552eda8 a8529b82 .config console log report syz ci2-linux-4-14 general protection fault in try_to_wake_up
2021/03/24 20:48 linux-4.14.y 670d6552eda8 607e3baf .config console log report syz ci2-linux-4-14 general protection fault in try_to_wake_up
2021/03/19 13:12 linux-4.14.y cb83ddcd5332 2af9d324 .config console log report syz ci2-linux-4-14 general protection fault in try_to_wake_up
2021/03/18 06:11 linux-4.14.y cb83ddcd5332 fdb2bb2c .config console log report syz ci2-linux-4-14 general protection fault in try_to_wake_up
2021/03/17 20:44 linux-4.14.y cb83ddcd5332 fdb2bb2c .config console log report syz ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/16 09:30 linux-4.14.y 958e517f4e16 c59079a6 .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/16 08:00 linux-4.14.y 958e517f4e16 c59079a6 .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/16 06:26 linux-4.14.y 958e517f4e16 c59079a6 .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/16 04:50 linux-4.14.y 958e517f4e16 c59079a6 .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/16 01:55 linux-4.14.y 958e517f4e16 c59079a6 .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/15 22:26 linux-4.14.y 958e517f4e16 c59079a6 .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/15 21:25 linux-4.14.y 958e517f4e16 c59079a6 .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/15 15:42 linux-4.14.y 958e517f4e16 fcdb12ba .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/15 13:04 linux-4.14.y 958e517f4e16 fcdb12ba .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/15 11:06 linux-4.14.y 958e517f4e16 fcdb12ba .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/15 09:52 linux-4.14.y 958e517f4e16 fcdb12ba .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/15 08:49 linux-4.14.y 958e517f4e16 fcdb12ba .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/15 07:20 linux-4.14.y 958e517f4e16 fcdb12ba .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/15 02:23 linux-4.14.y 958e517f4e16 fcdb12ba .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/15 00:04 linux-4.14.y 958e517f4e16 fcdb12ba .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 22:17 linux-4.14.y 958e517f4e16 fcdb12ba .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 20:14 linux-4.14.y 958e517f4e16 3134b37f .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 18:53 linux-4.14.y 958e517f4e16 3134b37f .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 18:25 linux-4.14.y 958e517f4e16 3134b37f .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 15:58 linux-4.14.y 958e517f4e16 3134b37f .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 14:55 linux-4.14.y 958e517f4e16 3134b37f .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 12:50 linux-4.14.y 958e517f4e16 3134b37f .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 11:08 linux-4.14.y 958e517f4e16 3134b37f .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 10:06 linux-4.14.y 958e517f4e16 3134b37f .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 07:26 linux-4.14.y 958e517f4e16 a184b83e .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 05:39 linux-4.14.y 958e517f4e16 a184b83e .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 04:27 linux-4.14.y 958e517f4e16 a184b83e .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 03:06 linux-4.14.y 958e517f4e16 a184b83e .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/14 01:57 linux-4.14.y 958e517f4e16 a184b83e .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/13 22:25 linux-4.14.y 958e517f4e16 a184b83e .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/13 20:47 linux-4.14.y 958e517f4e16 a184b83e .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/13 19:22 linux-4.14.y 958e517f4e16 a184b83e .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/13 15:46 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/13 14:40 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/13 14:16 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/13 12:51 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/13 11:09 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/13 08:29 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/13 05:19 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/13 03:15 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/13 00:45 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/12 21:36 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/12 19:13 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/12 18:05 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/12 16:35 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/12 13:16 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/04/12 10:32 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
2021/03/17 20:09 linux-4.14.y cb83ddcd5332 fdb2bb2c .config console log report info ci2-linux-4-14 general protection fault in try_to_wake_up
* Struck through repros no longer work on HEAD.