syzbot

 sign-in | mailing list | source | docs
🐞 Open [712] 🐞 Fixed [297] 🐞 Invalid [838] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

SYZFAIL: bad thread state in completion

Status: upstream: reported syz repro on 2021/03/01 17:42
Reported-by: syzbot+dfa4c91a6ce7683ad102@syzkaller.appspotmail.com
First crash: 1144d, last: 934d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-54 SYZFAIL: bad thread state in completion 1 733d 733d 0/2 auto-closed as invalid on 2022/08/15 04:43
upstream SYZFAIL: bad thread state in completion 1 1083d 1083d 0/26 auto-closed as invalid on 2021/07/31 03:50
upstream SYZFAIL: bad thread state in completion (2) 1 989d 989d 0/26 auto-closed as invalid on 2021/11/01 16:42
android-5-10 SYZFAIL: bad thread state in completion syz error error 5 495d 837d 0/2 premoderation: reported syz repro on 2022/01/03 06:51
linux-4.14 SYZFAIL: bad thread state in completion syz error 2 747d 1151d 0/1 upstream: reported syz repro on 2021/02/23 06:04
▶ ▼ Fix bisection attempts (8)
Created Duration User Patch Repo Result
2021/10/31 18:37 10m bisect fix linux-4.19.y error job log (0)
2021/09/27 20:22 26m bisect fix linux-4.19.y job log (0) log
2021/08/28 19:52 29m bisect fix linux-4.19.y job log (0) log
2021/07/29 19:22 30m bisect fix linux-4.19.y job log (0) log
2021/06/29 18:57 24m bisect fix linux-4.19.y job log (0) log
2021/05/30 18:29 28m bisect fix linux-4.19.y job log (0) log
2021/04/30 18:05 23m bisect fix linux-4.19.y job log (0) log
2021/03/31 17:41 23m bisect fix linux-4.19.y job log (0) log

Sample crash report:
2021/03/01 17:37:26 result: hanged=false err=wrong call 2 num 0/132
2021/03/01 17:37:26 result: hanged=false err=wrong call 1 num 0/132
2021/03/01 17:37:27 result: hanged=false err=wrong call 2 num 0/132
2021/03/01 17:37:27 result: hanged=false err=executor 0: exit status 67
SYZFAIL: bad thread state in completion
ready=0 done=1 executing=0 (errno 14: Bad address)
SYZFAIL: bad thread state in completion
*** stack smashing detected ***: terminated
running=-1 collide=0 completed=4 flag_threaded=0 flag_collide=0 current=0
th # 0: created=1 executing=0 colliding=0 ready=0 done=1 call_index=2 res=-1 reserrno=14
th # 1: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 2: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 3: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 4: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 5: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 6: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 7: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 8: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 9: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th #10: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th #11: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th #12: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th #13: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th #14: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th #15: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
SYZFAIL: negative running
 (errno 14: Bad address)
SYZFAIL: bad thread state in completion
ready=0 done=1 executing=0 (errno 14: Bad address)
SYZFAIL: child failed
 (errno 0: Success)
loop exited with status 67


SYZFAIL: bad thread state in completion
ready=0 done=1 executing=0 (errno 14: Bad address)
SYZFAIL: bad thread state in completion
*** stack smashing detected ***: terminated
running=-1 collide=0 completed=4 flag_threaded=0 flag_collide=0 current=0
th # 0: created=1 executing=0 colliding=0 ready=0 done=1 call_index=2 res=-1 reserrno=14
th # 1: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 2: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 3: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 4: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 5: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 6: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 7: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 8: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th # 9: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th #10: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th #11: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th #12: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th #13: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th #14: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
th #15: created=0 executing=0 colliding=0 ready=0 done=0 call_index=0 res=0 reserrno=0
SYZFAIL: negative running
 (errno 14: Bad address)
SYZFAIL: bad thread state in completion
ready=0 done=1 executing=0 (errno 14: Bad address)
SYZFAIL: child failed
 (errno 0: Success)
loop exited with status 67
2021/03/01 17:37:35 executed programs: 194
2021/03/01 17:37:35 result: hanged=false err=wrong call 1 num 0/132

2021/03/01 17:37:36 result: hanged=false err=executor 0: exit status 67
SYZFAIL: bad argument type
type=140720627724096 (errno 14: Bad address)
SYZFAIL: child failed
 (errno 0: Success)
loop exited with status 67


SYZFAIL: bad argument type
type=140720627724096 (errno 14: Bad address)
SYZFAIL: child failed
 (errno 0: Success)
loop exited with status 67

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/03/01 17:41 linux-4.19.y 2d19be4653f5 4c37c133 .config console log report syz ci2-linux-4-19 SYZFAIL: bad thread state in completion
* Struck through repros no longer work on HEAD.