general protection fault in del_gendisk (7)

Status: upstream: reported C repro on 2022/12/22 23:51
Reported-by: syzbot+f6a2e26c6c36039ed200@syzkaller.appspotmail.com
First crash: 1392d, last: 12d
Cause bisection: failed (error log, bisect log)
  
Fix bisection the fix commit could be any of (bisect log):
  003c389455eb Merge 5.10.160 into android12-5.10-lts
  bf760358eac3 Merge branch 'android12-5.10' into android12-5.10-lts
   
▶ ▼ Similar bugs (7)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 general protection fault in del_gendisk (5) 2 syz, C done 1 1497d 1497d 0/2 closed as dup on 2022/07/11 15:32
android-5-10 general protection fault in del_gendisk (4) 2 syz, C done 1 1531d 1529d 0/2 closed as dup on 2022/06/08 16:47
android-54 general protection fault in del_gendisk 2 syz, C 11 463d 1330d 0/2 upstream: reported C repro on 2022/12/24 00:28
android-5-10 general protection fault in del_gendisk (2) 2 syz, C error 2 1570d 1571d 0/2 closed as invalid on 2022/05/05 22:31
android-5-10 general protection fault in del_gendisk (3) 2 syz, C done 1 1546d 1546d 0/2 closed as invalid on 2022/06/03 17:43
android-5-10 general protection fault in del_gendisk (6) 2 syz, C done 1 1413d 1410d 0/2 closed as dup on 2022/10/05 23:44
android-5-10 general protection fault in del_gendisk 2 syz, C error 1 1634d 1740d 0/2 closed as invalid on 2022/03/02 21:49
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2026/05/31 15:56 16m retest repro android13-5.10-lts log
2026/05/06 22:57 14m retest repro android13-5.10-lts report log
2026/03/10 19:32 5m retest repro android13-5.10-lts report log
2026/02/22 06:35 5m retest repro android13-5.10-lts report log
2026/02/22 06:32 5m retest repro android13-5.10-lts report log
2025/12/30 16:28 15m retest repro android13-5.10-lts report log
2025/12/14 04:45 8m retest repro android13-5.10-lts report log
2025/10/20 17:38 9m retest repro android13-5.10-lts report log
2025/10/05 03:39 34m retest repro android13-5.10-lts report log
2025/08/11 12:57 32m retest repro android13-5.10-lts report log

Sample crash report:
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffbebfbc98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fe7adf54fa0 RCX: 00007fe7adccce99
RDX: 000000000010000a RSI: 0000000000004c81 RDI: 0000000000000004
RBP: 00007fe7add62eaf R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe7adf54fac R14: 00007fe7adf54fa0 R15: 00007fe7adf54fa0
---[ end trace 791c2f41edfe68bc ]---
general protection fault, probably for non-canonical address 0xdffffc000000001a: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x00000000000000d0-0x00000000000000d7]
CPU: 0 PID: 367 Comm: syz.2.17 Tainted: G        W         syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
RIP: 0010:kill_device drivers/base/core.c:3388 [inline]
RIP: 0010:device_del+0xe0/0xe60 drivers/base/core.c:3416
Code: 42 80 3c 30 00 74 08 4c 89 ef e8 cb 10 f0 fe 41 bf d0 00 00 00 4d 03 7d 00 4d 89 fe 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 06 84 c0 0f 85 b7 0c 00 00 45 0f b6 27 44 89 e6 83 e6
RSP: 0018:ffffc900041e7c20 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff888110f65108 RCX: ffffffff8480ec62
RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900041e7ba0
RBP: ffffc900041e7d10 R08: ffffc900041e7ba7 R09: 1ffff9200083cf74
R10: dffffc0000000000 R11: fffff5200083cf75 R12: ffff888110f65068
R13: ffff888110f650d0 R14: 000000000000001a R15: 00000000000000d0
FS:  00005555620e5500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd6ac9f0492 CR3: 000000011079b000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 del_gendisk+0x85d/0xa10 block/genhd.c:953
 loop_remove+0x46/0xb0 drivers/block/loop.c:2210
 loop_control_ioctl+0x4a6/0x570 drivers/block/loop.c:2309
 vfs_ioctl fs/ioctl.c:48 [inline]
 __do_sys_ioctl fs/ioctl.c:753 [inline]
 __se_sys_ioctl+0x121/0x1a0 fs/ioctl.c:739
 __x64_sys_ioctl+0x7b/0x90 fs/ioctl.c:739
 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7fe7adccce99
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffbebfbc98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fe7adf54fa0 RCX: 00007fe7adccce99
RDX: 000000000010000a RSI: 0000000000004c81 RDI: 0000000000000004
RBP: 00007fe7add62eaf R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe7adf54fac R14: 00007fe7adf54fa0 R15: 00007fe7adf54fa0
Modules linked in:
---[ end trace 791c2f41edfe68bd ]---
RIP: 0010:kill_device drivers/base/core.c:3388 [inline]
RIP: 0010:device_del+0xe0/0xe60 drivers/base/core.c:3416
Code: 42 80 3c 30 00 74 08 4c 89 ef e8 cb 10 f0 fe 41 bf d0 00 00 00 4d 03 7d 00 4d 89 fe 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 06 84 c0 0f 85 b7 0c 00 00 45 0f b6 27 44 89 e6 83 e6
RSP: 0018:ffffc900041e7c20 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff888110f65108 RCX: ffffffff8480ec62
RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900041e7ba0
RBP: ffffc900041e7d10 R08: ffffc900041e7ba7 R09: 1ffff9200083cf74
R10: dffffc0000000000 R11: fffff5200083cf75 R12: ffff888110f65068
R13: ffff888110f650d0 R14: 000000000000001a R15: 00000000000000d0
FS:  00005555620e5500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd6ac9f0492 CR3: 000000011079b000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	ff c3                	inc    %ebx
   2:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
   9:	00 00 00
   c:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  11:	48 89 f8             	mov    %rdi,%rax
  14:	48 89 f7             	mov    %rsi,%rdi
  17:	48 89 d6             	mov    %rdx,%rsi
  1a:	48 89 ca             	mov    %rcx,%rdx
  1d:	4d 89 c2             	mov    %r8,%r10
  20:	4d 89 c8             	mov    %r9,%r8
  23:	4c 8b 4c 24 08       	mov    0x8(%rsp),%r9
  28:	0f 05                	syscall
* 2a:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax <-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 c7 c1 e8 ff ff ff 	mov    $0xffffffffffffffe8,%rcx
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Crashes (131):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/20 17:15 android13-5.10-lts 50b3a256e550 de6a700d .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2023/11/15 06:01 android13-5.10-lts d30b996835c0 cb976f63 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2022/12/22 23:49 android12-5.10-lts 003c389455eb 9da18ae8 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2023/02/02 19:18 android12-5.10-lts 416c4356f372 16d19e30 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2022/12/24 03:45 android12-5.10-lts 003c389455eb 9da18ae8 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2026/08/02 17:07 android13-5.10-lts 50b3a256e550 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2026/07/29 06:09 android13-5.10-lts 50b3a256e550 19622d9d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2026/07/20 15:44 android13-5.10-lts 50b3a256e550 de6a700d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/07/09 17:45 android13-5.10-lts 59e9a7228857 f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/07/09 06:22 android13-5.10-lts 59e9a7228857 4d9fdfa4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/07/09 06:19 android13-5.10-lts 59e9a7228857 4d9fdfa4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/07/05 02:20 android13-5.10-lts 59e9a7228857 d869b261 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/07/04 20:21 android13-5.10-lts 59e9a7228857 d869b261 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/07/04 20:20 android13-5.10-lts 59e9a7228857 d869b261 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/07/01 10:26 android13-5.10-lts 59e9a7228857 6e83b42d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/06/27 02:25 android13-5.10-lts 59e9a7228857 803ce19b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/06/26 05:27 android13-5.10-lts 59e9a7228857 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/06/25 05:38 android13-5.10-lts d76d4cd0623a 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/06/25 03:55 android13-5.10-lts d76d4cd0623a 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/06/21 13:12 android13-5.10-lts d76d4cd0623a d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/06/20 21:55 android13-5.10-lts d76d4cd0623a 804b3919 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/06/18 05:08 android13-5.10-lts d76d4cd0623a e77fae15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/06/15 12:05 android13-5.10-lts d76d4cd0623a 5f4b362d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/05/13 00:33 android13-5.10-lts 7e2543346ff7 f6671af7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/05/10 13:06 android13-5.10-lts 7e2543346ff7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/05/10 12:57 android13-5.10-lts 7e2543346ff7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/05/08 15:02 android13-5.10-lts 7e2543346ff7 dbf35fa1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/05/07 14:03 android13-5.10-lts 7e2543346ff7 350f4ffc .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/05/07 06:23 android13-5.10-lts ab07aeb2c93d 350f4ffc .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/05/06 03:58 android13-5.10-lts ab07aeb2c93d ae98e6b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/05/05 17:55 android13-5.10-lts ab07aeb2c93d 6ca47dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/05/04 05:34 android13-5.10-lts ab07aeb2c93d b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/05/01 04:08 android13-5.10-lts ab07aeb2c93d ce7952f4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/05/01 04:08 android13-5.10-lts ab07aeb2c93d ce7952f4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/04/25 04:01 android13-5.10-lts ba8b8b193394 9882047a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/03/01 15:27 android13-5.10-lts 3f5f2283d684 67cf5345 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/02/27 13:37 android13-5.10-lts 3f5f2283d684 6a8fcbc4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2025/02/23 13:14 android13-5.10-lts 3f5f2283d684 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2024/04/20 04:50 android13-5.10-lts c449d2a618ef af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2024/04/18 12:09 android13-5.10-lts d82f901b3eb5 af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2024/04/18 03:09 android13-5.10-lts 3c981dac49d9 acc528cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2024/04/17 23:53 android13-5.10-lts 3c981dac49d9 acc528cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2024/04/17 21:48 android13-5.10-lts 3c981dac49d9 acc528cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2024/04/16 21:41 android13-5.10-lts 4e1bc8d8e8ae 18f6e127 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2024/04/16 16:26 android13-5.10-lts 4e1bc8d8e8ae 18f6e127 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2024/04/16 14:09 android13-5.10-lts 4e1bc8d8e8ae 0d592ce4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2024/04/16 08:35 android13-5.10-lts 4e1bc8d8e8ae 0d592ce4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 general protection fault in del_gendisk
2022/10/23 04:56 android12-5.10-lts 69a9a62c66bb c0b80a55 .config console log report info [disk image] [vmlinux] ci2-android-5-10 general protection fault in del_gendisk
* Struck through repros no longer work on HEAD.