syzbot

 sign-in | mailing list | source | docs
🐞 Open [997] ≡ Subsystems 🐞 Fixed [5242] 🐞 Invalid [12512] ⬇ Missing Backports [84] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in rxrpc_send_keepalive

Status: closed as dup on 2019/08/22 13:32
Subsystems: afs net
[Documentation on labels]
Reported-by: syzbot+345e0797ca47ec984348@syzkaller.appspotmail.com
First crash: 1720d, last: 1655d
▶ ▼ Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
KASAN: use-after-free Read in rxrpc_send_keepalive afs net C error 694 1649d 1721d

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 27261 Comm: kworker/0:5 Not tainted 5.4.0-rc3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: krxrpcd rxrpc_peer_keepalive_worker
RIP: 0010:rxrpc_send_keepalive+0x14f/0x940 net/rxrpc/output.c:634
Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 67 07 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 6e 18 49 8d 7d 08 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e c9 06 00 00 41 8b 45 08 49 8d
RSP: 0018:ffff888036e87ab0 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: ffff88808f52f000 RCX: ffffffff86a4b19e
RDX: 000000002000777e RSI: ffffffff86a481c2 RDI: 000000010003bbf1
RBP: ffff888036e87c28 R08: ffff8880a902a280 R09: fffffbfff14ee345
R10: fffffbfff14ee344 R11: ffffffff8a771a27 R12: 0000000000000014
R13: 000000010003bbe9 R14: ffff88806c7fa000 R15: 0000000000000afd
FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007facb790a028 CR3: 000000005011e000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 rxrpc_peer_keepalive_dispatch net/rxrpc/peer_event.c:369 [inline]
 rxrpc_peer_keepalive_worker+0x7be/0xd02 net/rxrpc/peer_event.c:430
 process_one_work+0x9af/0x1740 kernel/workqueue.c:2269
 worker_thread+0x98/0xe40 kernel/workqueue.c:2415
 kthread+0x361/0x430 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Modules linked in:
---[ end trace edb7bb9b6010ecb4 ]---
RIP: 0010:rxrpc_send_keepalive+0x14f/0x940 net/rxrpc/output.c:634
Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 67 07 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 6e 18 49 8d 7d 08 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e c9 06 00 00 41 8b 45 08 49 8d
RSP: 0018:ffff888036e87ab0 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: ffff88808f52f000 RCX: ffffffff86a4b19e
RDX: 000000002000777e RSI: ffffffff86a481c2 RDI: 000000010003bbf1
RBP: ffff888036e87c28 R08: ffff8880a902a280 R09: fffffbfff14ee345
R10: fffffbfff14ee344 R11: ffffffff8a771a27 R12: 0000000000000014
R13: 000000010003bbe9 R14: ffff88806c7fa000 R15: 0000000000000afd
FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000a46e80 CR3: 000000006186e000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (20):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/15 07:28 upstream 4f5cafb5cb84 05ad7292 .config console log report ci-upstream-kasan-gce
2019/10/11 15:29 upstream 9e208aa06c21 1a3bad90 .config console log report ci-upstream-kasan-gce
2019/09/30 09:12 upstream a3c0e7b1fe1f c1ad5441 .config console log report ci-upstream-kasan-gce
2019/09/06 11:53 upstream 3b47fd5ca9ea 040fda58 .config console log report ci-upstream-kasan-gce
2019/09/05 14:33 upstream 3b47fd5ca9ea 040fda58 .config console log report ci-upstream-kasan-gce
2019/10/03 18:00 net-old 134cc4cefad3 fc17ba49 .config console log report ci-upstream-net-this-kasan-gce
2019/09/27 21:53 net-old 2b6fd3ea438c d8074e0b .config console log report ci-upstream-net-this-kasan-gce
2019/09/03 19:57 net-old e33b4325e60e 48448e71 .config console log report ci-upstream-net-this-kasan-gce
2019/10/13 04:14 net-next-old 524900a212f4 426631dd .config console log report ci-upstream-net-kasan-gce
2019/10/04 05:59 net-next-old 9077f052abd5 fc17ba49 .config console log report ci-upstream-net-kasan-gce
2019/09/21 03:24 net-next-old b41dae061bbd d96e88f3 .config console log report ci-upstream-net-kasan-gce
2019/09/20 20:21 net-next-old b41dae061bbd d96e88f3 .config console log report ci-upstream-net-kasan-gce
2019/09/20 06:26 net-next-old b41dae061bbd 4d3ae0b7 .config console log report ci-upstream-net-kasan-gce
2019/09/14 19:40 net-next-old 1ba569fc2250 32d59357 .config console log report ci-upstream-net-kasan-gce
2019/09/09 21:45 net-next-old 6703a605b5ab a60cb4cd .config console log report ci-upstream-net-kasan-gce
2019/09/09 10:55 net-next-old 6703a605b5ab a60cb4cd .config console log report ci-upstream-net-kasan-gce
2019/09/06 10:41 net-next-old 0e5b36bc4c1f 040fda58 .config console log report ci-upstream-net-kasan-gce
2019/08/16 02:25 net-next-old 459c5fb44379 8fd428a1 .config console log report ci-upstream-net-kasan-gce
2019/08/10 23:49 net-next-old 38b9e0f6d981 acb51638 .config console log report ci-upstream-net-kasan-gce
2019/09/15 20:06 linux-next 6d028043b55e 32d59357 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.