KASAN: null-ptr-deref Write in event_handler

Status: upstream: reported C repro on 2020/10/03 09:17
Reported-by: syzbot+66f92fe4a74ddcc863bc@syzkaller.appspotmail.com
First crash: 2134d, last: 1780d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: null-ptr-deref Write in event_handler usb 12 syz, C done 2869 1984d 2131d 20/29 fixed on 2021/04/09 19:46
▶ ▼ Fix bisection attempts (12)
Created Duration User Patch Repo Result
2021/10/21 14:22 12m bisect fix linux-4.19.y error job log
2021/09/21 13:46 35m bisect fix linux-4.19.y OK (0) job log log
2021/08/22 05:55 34m bisect fix linux-4.19.y OK (0) job log log
2021/07/23 04:32 38m bisect fix linux-4.19.y OK (0) job log log
2021/06/23 03:57 21m bisect fix linux-4.19.y OK (0) job log log
2021/05/24 03:31 26m bisect fix linux-4.19.y OK (0) job log log
2021/04/23 16:49 22m bisect fix linux-4.19.y OK (0) job log log
2021/03/24 16:24 22m bisect fix linux-4.19.y OK (0) job log log
2021/02/22 16:00 22m bisect fix linux-4.19.y OK (0) job log log
2021/02/18 19:32 18m bisect fix linux-4.19.y error job log
2021/02/14 17:48 0m bisect fix linux-4.19.y error job log
2021/01/15 17:24 23m bisect fix linux-4.19.y OK (0) job log log

Sample crash report:
vhci_hcd: connection closed
vhci_hcd vhci_hcd.0: port 0 already used
vhci_hcd: disconnect device
vhci_hcd vhci_hcd.0: port 0 already used
==================================================================
BUG: KASAN: null-ptr-deref in atomic_inc include/asm-generic/atomic-instrumented.h:109 [inline]
BUG: KASAN: null-ptr-deref in kthread_stop+0x72/0x6b0 kernel/kthread.c:558
Write of size 4 at addr 000000000000001c by task kworker/u4:3/170

CPU: 0 PID: 170 Comm: kworker/u4:3 Not tainted 4.19.162-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usbip_event event_handler
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
 kasan_report_error.cold+0x15b/0x1c7 mm/kasan/report.c:352
 kasan_report+0x8f/0x96 mm/kasan/report.c:412
 atomic_inc include/asm-generic/atomic-instrumented.h:109 [inline]
 kthread_stop+0x72/0x6b0 kernel/kthread.c:558
 vhci_shutdown_connection+0x14e/0x280 drivers/usb/usbip/vhci_hcd.c:1021
 event_handler+0x1f0/0x4f0 drivers/usb/usbip/usbip_event.c:78
 process_one_work+0x864/0x1570 kernel/workqueue.c:2155
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
==================================================================
vhci_hcd: vhci_device speed not set
vhci_hcd: connection closed
vhci_hcd vhci_hcd.0: port 0 already used
vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)

Crashes (1046):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/12/08 18:30 linux-4.19.y 4abf26854aad 9af51e31 .config console log report syz C ci2-linux-4-19
2020/11/05 08:59 linux-4.19.y f5d8eef067ac cba33199 .config console log report syz C ci2-linux-4-19
2020/11/05 02:58 linux-4.19.y f5d8eef067ac cba33199 .config console log report syz C ci2-linux-4-19
2020/10/04 08:19 linux-4.19.y b09c34517e1a 1a3f9408 .config console log report syz C ci2-linux-4-19
2020/12/14 00:43 linux-4.19.y 13d2ce42de8c 8f160dd5 .config console log report syz ci2-linux-4-19
2020/12/10 07:33 linux-4.19.y 4abf26854aad c090b4da .config console log report syz ci2-linux-4-19
2020/12/05 13:26 linux-4.19.y daefdc9eb24b 0ef84591 .config console log report syz ci2-linux-4-19
2020/12/04 23:37 linux-4.19.y daefdc9eb24b 20366b87 .config console log report syz ci2-linux-4-19
2020/12/03 21:05 linux-4.19.y daefdc9eb24b 59ad4022 .config console log report syz ci2-linux-4-19
2020/11/29 06:42 linux-4.19.y 0c88e405c97e a0092f9d .config console log report syz ci2-linux-4-19
2020/11/29 04:05 linux-4.19.y 0c88e405c97e a0092f9d .config console log report syz ci2-linux-4-19
2020/11/28 01:37 linux-4.19.y 0c88e405c97e 486f93ef .config console log report syz ci2-linux-4-19
2020/11/26 22:59 linux-4.19.y 0c88e405c97e 2f1cec62 .config console log report syz ci2-linux-4-19
2020/11/21 16:39 linux-4.19.y 2c746135a12e c7ec2d19 .config console log report syz ci2-linux-4-19
2020/11/21 15:27 linux-4.19.y 2c746135a12e c7ec2d19 .config console log report syz ci2-linux-4-19
2020/11/19 21:11 linux-4.19.y 2c746135a12e 0767f13f .config console log report syz ci2-linux-4-19
2020/11/19 04:22 linux-4.19.y 2c746135a12e 0767f13f .config console log report syz ci2-linux-4-19
2020/11/11 06:58 linux-4.19.y 31acccdc8774 cca87986 .config console log report syz ci2-linux-4-19
2020/11/10 15:22 linux-4.19.y 53fff24aaf01 cca87986 .config console log report syz ci2-linux-4-19
2020/11/10 14:49 linux-4.19.y 53fff24aaf01 cca87986 .config console log report syz ci2-linux-4-19
2020/11/10 11:19 linux-4.19.y b94de4d19498 cca87986 .config console log report syz ci2-linux-4-19
2020/11/06 14:29 linux-4.19.y b94de4d19498 cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 20:59 linux-4.19.y b94de4d19498 cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 20:49 linux-4.19.y b94de4d19498 cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 20:41 linux-4.19.y b94de4d19498 cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 20:15 linux-4.19.y b94de4d19498 cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 20:04 linux-4.19.y b94de4d19498 cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 19:37 linux-4.19.y b94de4d19498 cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 18:55 linux-4.19.y b94de4d19498 cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 15:16 linux-4.19.y b94de4d19498 cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 14:38 linux-4.19.y b94de4d19498 cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 14:28 linux-4.19.y b94de4d19498 cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 14:15 linux-4.19.y b94de4d19498 cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 10:21 linux-4.19.y f5d8eef067ac cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 08:44 linux-4.19.y f5d8eef067ac cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 08:24 linux-4.19.y f5d8eef067ac cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 08:14 linux-4.19.y f5d8eef067ac cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 05:59 linux-4.19.y f5d8eef067ac cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 05:05 linux-4.19.y f5d8eef067ac cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 02:43 linux-4.19.y f5d8eef067ac cba33199 .config console log report syz ci2-linux-4-19
2020/11/05 00:18 linux-4.19.y f5d8eef067ac cba33199 .config console log report syz ci2-linux-4-19
2020/10/03 13:35 linux-4.19.y b09c34517e1a 2653fa43 .config console log report syz ci2-linux-4-19
2020/12/16 17:07 linux-4.19.y 13d2ce42de8c 649595c6 .config console log report info ci2-linux-4-19
2020/12/16 14:03 linux-4.19.y 13d2ce42de8c 649595c6 .config console log report info ci2-linux-4-19
2020/12/16 08:49 linux-4.19.y 13d2ce42de8c 649595c6 .config console log report info ci2-linux-4-19
2020/12/16 07:04 linux-4.19.y 13d2ce42de8c f213e07e .config console log report info ci2-linux-4-19
2020/12/16 04:02 linux-4.19.y 13d2ce42de8c f213e07e .config console log report info ci2-linux-4-19
2020/12/15 20:03 linux-4.19.y 13d2ce42de8c f213e07e .config console log report info ci2-linux-4-19
2020/12/15 17:11 linux-4.19.y 13d2ce42de8c 97183ed7 .config console log report info ci2-linux-4-19
2020/12/15 15:34 linux-4.19.y 13d2ce42de8c 97183ed7 .config console log report info ci2-linux-4-19
2020/12/15 03:49 linux-4.19.y 13d2ce42de8c 97183ed7 .config console log report info ci2-linux-4-19
2020/12/14 12:23 linux-4.19.y 13d2ce42de8c b22a7ec3 .config console log report info ci2-linux-4-19
2020/12/14 04:04 linux-4.19.y 13d2ce42de8c 8f160dd5 .config console log report info ci2-linux-4-19
2020/12/13 17:01 linux-4.19.y 13d2ce42de8c bca53db9 .config console log report info ci2-linux-4-19
2020/12/13 13:32 linux-4.19.y 13d2ce42de8c bca53db9 .config console log report info ci2-linux-4-19
2020/12/13 05:37 linux-4.19.y 13d2ce42de8c bca53db9 .config console log report info ci2-linux-4-19
2020/12/13 02:41 linux-4.19.y 13d2ce42de8c bca53db9 .config console log report info ci2-linux-4-19
2020/12/13 00:50 linux-4.19.y 13d2ce42de8c bca53db9 .config console log report info ci2-linux-4-19
2020/12/12 20:47 linux-4.19.y 13d2ce42de8c bca53db9 .config console log report info ci2-linux-4-19
2020/12/12 16:15 linux-4.19.y 13d2ce42de8c bca53db9 .config console log report info ci2-linux-4-19
2020/12/12 02:59 linux-4.19.y 13d2ce42de8c bca53db9 .config console log report info ci2-linux-4-19
2020/12/11 16:37 linux-4.19.y 13d2ce42de8c ba24ffcd .config console log report info ci2-linux-4-19
2020/12/11 09:09 linux-4.19.y 4abf26854aad f900b48c .config console log report info ci2-linux-4-19
2020/12/11 03:17 linux-4.19.y 4abf26854aad f900b48c .config console log report info ci2-linux-4-19
2020/12/10 20:58 linux-4.19.y 4abf26854aad 2a55c22b .config console log report info ci2-linux-4-19
2020/12/10 18:50 linux-4.19.y 4abf26854aad 2a55c22b .config console log report info ci2-linux-4-19
2020/12/10 14:54 linux-4.19.y 4abf26854aad 2a55c22b .config console log report info ci2-linux-4-19
2020/12/10 12:29 linux-4.19.y 4abf26854aad 2a55c22b .config console log report info ci2-linux-4-19
2020/12/10 09:07 linux-4.19.y 4abf26854aad c090b4da .config console log report info ci2-linux-4-19
2020/12/10 07:20 linux-4.19.y 4abf26854aad c090b4da .config console log report info ci2-linux-4-19
2020/12/10 03:01 linux-4.19.y 4abf26854aad c090b4da .config console log report info ci2-linux-4-19
2020/12/10 01:41 linux-4.19.y 4abf26854aad c090b4da .config console log report info ci2-linux-4-19
2020/12/09 15:35 linux-4.19.y 4abf26854aad 99917735 .config console log report info ci2-linux-4-19
2020/12/09 06:44 linux-4.19.y 4abf26854aad 40cc414d .config console log report info ci2-linux-4-19
2020/12/08 22:08 linux-4.19.y 4abf26854aad 40cc414d .config console log report info ci2-linux-4-19
2020/12/08 18:05 linux-4.19.y 4abf26854aad 9af51e31 .config console log report info ci2-linux-4-19
2020/12/08 16:02 linux-4.19.y 4abf26854aad 9af51e31 .config console log report info ci2-linux-4-19
2020/12/08 14:57 linux-4.19.y 4abf26854aad 9af51e31 .config console log report info ci2-linux-4-19
2020/12/08 02:22 linux-4.19.y daefdc9eb24b 51a9082e .config console log report info ci2-linux-4-19
2020/12/07 23:10 linux-4.19.y daefdc9eb24b 51a9082e .config console log report info ci2-linux-4-19
2020/12/07 18:40 linux-4.19.y daefdc9eb24b f80ce148 .config console log report info ci2-linux-4-19
2020/12/07 16:33 linux-4.19.y daefdc9eb24b f80ce148 .config console log report info ci2-linux-4-19
2020/12/07 14:38 linux-4.19.y daefdc9eb24b f80ce148 .config console log report info ci2-linux-4-19
2020/12/07 02:03 linux-4.19.y daefdc9eb24b c521566d .config console log report info ci2-linux-4-19
2020/12/06 23:32 linux-4.19.y daefdc9eb24b c521566d .config console log report info ci2-linux-4-19
2020/12/06 22:29 linux-4.19.y daefdc9eb24b c521566d .config console log report info ci2-linux-4-19
2020/12/06 06:23 linux-4.19.y daefdc9eb24b 50503117 .config console log report info ci2-linux-4-19
2020/10/03 09:16 linux-4.19.y b09c34517e1a 2653fa43 .config console log report info ci2-linux-4-19
* Struck through repros no longer work on HEAD.