syzbot


WARNING in md_ioctl

Status: fixed on 2021/03/10 01:49
Subsystems: raid
[Documentation on labels]
Reported-by: syzbot+1e46a0864c1a6e9bd3d8@syzkaller.appspotmail.com
Fix commit: c731b84b51bf md: fix a warning caused by a race between concurrent md_ioctl()s
First crash: 2189d, last: 1227d
Cause bisection: introduced by (bisect log) :
commit 4b6ce6810a5dc0af387a238e8c852e0d3822381f
Author: Rafael Antognolli <rafael.antognolli@intel.com>
Date: Mon Feb 5 23:33:30 2018 +0000

  drm/i915/cnl: WaPipeControlBefore3DStateSamplePattern

Crash: WARNING in md_ioctl (log)
Repro: C syz .config
  
Fix bisection: failed (error log, bisect log)
  
Discussions (9)
Title Replies (including bot) Last reply
[PATCH 4.14 000/242] 4.14.213-rc1 review 245 (245) 2021/01/13 01:20
[PATCH 5.10 00/40] 5.10.3-rc1 review 60 (60) 2021/01/06 23:56
[PATCH 4.19 000/346] 4.19.164-rc1 review 356 (356) 2021/01/02 11:29
[PATCH 5.4 000/453] 5.4.86-rc1 review 465 (465) 2020/12/30 09:22
[PATCH 4.9 000/175] 4.9.249-rc1 review 178 (178) 2020/12/29 09:28
[PATCH] md: fix a warning caused by a race between concurrent md_ioctl()s 2 (2) 2020/11/06 03:13
WARNING in md_ioctl 1 (3) 2019/11/26 08:42
Reminder: 11 open syzbot bugs in block subsystem 1 (1) 2019/07/24 02:26
Reminder: 11 open syzbot bugs in block subsystem 1 (1) 2019/06/25 06:17
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 WARNING in md_ioctl C 1 2189d 1839d 0/3 public: reported C repro on 2019/04/14 08:51
linux-4.14 WARNING in md_ioctl C 448 432d 1837d 0/1 upstream: reported C repro on 2019/04/16 09:27
linux-4.19 WARNING in md_ioctl C done 199 1216d 1834d 1/1 fixed on 2021/01/26 16:42

Sample crash report:
WARNING: CPU: 0 PID: 9647 at drivers/md/md.c:7169 md_ioctl+0x4017/0x5980 drivers/md/md.c:7169
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 9647 Comm: syz-executor099 Not tainted 5.2.0-rc3+ #12
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 panic+0x2cb/0x744 kernel/panic.c:219
 __warn.cold+0x20/0x4d kernel/panic.c:576
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 fixup_bug arch/x86/kernel/traps.c:174 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:272
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:291
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:986
RIP: 0010:md_ioctl+0x4017/0x5980 drivers/md/md.c:7169
Code: fd ff ff c7 80 40 01 00 00 00 00 00 00 e9 e0 eb ff ff 48 8d 85 38 fe ff ff 48 89 85 b8 fd ff ff e9 01 db ff ff e8 b9 0c 8e fc <0f> 0b e9 04 cd ff ff e8 ad 0c 8e fc 89 de bf 23 09 48 40 e8 21 0e
RSP: 0018:ffff888096027950 EFLAGS: 00010293
RAX: ffff88809322c380 RBX: 0000000000000932 RCX: ffffffff84e266f2
RDX: 0000000000000000 RSI: ffffffff84e299f7 RDI: 0000000000000007
RBP: ffff888096027bc0 R08: ffff88809322c380 R09: ffffed101341a482
R10: ffff888096027940 R11: ffff88809a0d240f R12: 0000000000000932
R13: ffff8880a2c14100 R14: ffff88809a0d2268 R15: ffff88809a0d2408
 __blkdev_driver_ioctl block/ioctl.c:304 [inline]
 blkdev_ioctl+0xece/0x1c10 block/ioctl.c:606
 block_ioctl+0xee/0x130 fs/block_dev.c:1930
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:509 [inline]
 do_vfs_ioctl+0xd5f/0x1380 fs/ioctl.c:696
 ksys_ioctl+0xab/0xd0 fs/ioctl.c:713
 __do_sys_ioctl fs/ioctl.c:720 [inline]
 __se_sys_ioctl fs/ioctl.c:718 [inline]
 __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718
 do_syscall_64+0xfd/0x680 arch/x86/entry/common.c:301
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4467b9
Code: e8 0c e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f1c02594db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 00000000004467b9
RDX: 0000000000000000 RSI: 0000000000000932 RDI: 0000000000000003
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffd713f38ff R14: 00007f1c025959c0 R15: 0000000000000000
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (684):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/06/04 14:08 upstream 788a024921c4 e41a20c5 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/04/21 06:45 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-selinux-root
2018/04/29 21:44 upstream c61a56ababa4 bb79c6ab .config console log report syz C ci-upstream-kasan-gce-root
2019/08/01 00:14 upstream 4010b622f1d2 c692b5bd .config console log report syz ci-upstream-kasan-gce-selinux-root
2019/07/31 00:33 upstream 629f8205a6cc 7c7ded69 .config console log report syz ci-upstream-kasan-gce-selinux-root
2019/06/04 16:32 upstream 788a024921c4 e41a20c5 .config console log report syz ci-upstream-kasan-gce-smack-root
2019/05/02 10:08 upstream 459e3a21535a 7516d9fa .config console log report syz ci-upstream-kasan-gce-root
2019/05/02 10:02 upstream 459e3a21535a 7516d9fa .config console log report syz ci-upstream-kasan-gce-selinux-root
2019/04/21 05:31 upstream 9e5de623a0cb b0e8efcb .config console log report syz ci-upstream-kasan-gce-smack-root
2019/04/21 05:18 upstream 9e5de623a0cb b0e8efcb .config console log report syz ci-upstream-kasan-gce-smack-root
2019/04/19 23:13 upstream 55e3a6ba5cce b0e8efcb .config console log report syz ci-upstream-kasan-gce-smack-root
2019/04/16 11:53 upstream 618d919cae2f 505ab413 .config console log report syz ci-upstream-kasan-gce-root
2019/04/16 11:34 upstream 5512320c9f6f 505ab413 .config console log report syz ci-upstream-kasan-gce-selinux-root
2019/04/16 10:32 upstream 5512320c9f6f 505ab413 .config console log report syz ci-upstream-kasan-gce-smack-root
2018/05/31 13:45 upstream 88a867653065 2f93b54f .config console log report syz ci-upstream-kasan-gce-root
2020/12/16 03:18 upstream d635a69dd498 f213e07e .config console log report info ci-upstream-kasan-gce-root
2020/12/13 15:23 upstream 6bff9bb8a292 bca53db9 .config console log report info ci-upstream-kasan-gce-root
2020/12/11 12:25 upstream 33dc9614dc20 ba24ffcd .config console log report info ci-upstream-kasan-gce-root
2020/12/10 13:25 upstream a2f5ea9e314b f900b48c .config console log report info ci-upstream-kasan-gce-root
2020/12/06 03:59 upstream 32f741b02f1a 50503117 .config console log report info ci-qemu-upstream
2020/12/04 20:41 upstream e87297fa080a 20366b87 .config console log report info ci-upstream-kasan-gce-root
2020/12/03 23:27 upstream 34816d20f173 e6b0d314 .config console log report info ci-upstream-kasan-gce-root
2020/11/29 14:09 upstream aae5ab854e38 a0092f9d .config console log report info ci-upstream-kasan-gce-root
2020/11/29 00:27 upstream 45e885c439e8 a0092f9d .config console log report info ci-upstream-kasan-gce-root
2020/08/03 08:00 upstream 5a30a78924ec 196277c4 .config console log report ci-upstream-kasan-gce-smack-root
2020/08/02 14:46 upstream ac3a0c847296 63a73341 .config console log report ci-upstream-kasan-gce-selinux-root
2020/08/01 05:35 upstream d8b9faec54ae d895b3be .config console log report ci-upstream-kasan-gce-root
2020/08/01 02:29 upstream d8b9faec54ae d895b3be .config console log report ci-upstream-kasan-gce-selinux-root
2020/07/31 07:10 upstream 83bdc7275e62 8df85ed9 .config console log report ci-upstream-kasan-gce-smack-root
2020/07/31 01:58 upstream 83bdc7275e62 8df85ed9 .config console log report ci-upstream-kasan-gce-smack-root
2020/07/25 19:51 upstream 68845a55c31b 1f7cc1ca .config console log report ci-upstream-kasan-gce-root
2020/07/24 00:11 upstream d15be546031c 70c104a1 .config console log report ci-upstream-kasan-gce-root
2020/07/23 01:16 upstream 8c26c87b0532 340ea530 .config console log report ci-upstream-kasan-gce-root
2020/07/21 19:03 upstream 4fa640dc5230 21f1765e .config console log report ci-upstream-kasan-gce-root
2020/07/13 02:53 upstream 4437dd6e8f71 9ebcc5b1 .config console log report ci-upstream-kasan-gce-selinux-root
2020/07/12 22:05 upstream 0aea6d5c5be3 115e1930 .config console log report ci-upstream-kasan-gce-selinux-root
2020/07/11 14:27 upstream a581387e415b 18d18b59 .config console log report ci-upstream-kasan-gce-selinux-root
2020/07/10 21:15 upstream 42f82040ee66 edf162e8 .config console log report ci-upstream-kasan-gce-smack-root
2020/07/08 03:23 upstream 7cc2a8ea1048 51095195 .config console log report ci-upstream-kasan-gce-smack-root
2020/07/07 13:28 upstream 7cc2a8ea1048 51095195 .config console log report ci-upstream-kasan-gce-selinux-root
2020/07/06 08:39 upstream 7cc2a8ea1048 51095195 .config console log report ci-upstream-kasan-gce-smack-root
2020/07/02 23:41 upstream cd77006e01b3 bed10395 .config console log report ci-upstream-kasan-gce-root
2020/07/02 09:44 upstream cd77006e01b3 bed10395 .config console log report ci-upstream-kasan-gce-smack-root
2020/07/01 22:36 upstream 7c30b859a947 39acb39d .config console log report ci-upstream-kasan-gce-smack-root
2020/06/27 04:29 upstream 1590a2e1c681 ffec44b5 .config console log report ci-upstream-kasan-gce-selinux-root
2020/06/23 18:09 upstream 7ae77150d94d 54566aff .config console log report ci-upstream-kasan-gce-root
2020/06/14 07:55 upstream 7ae77150d94d a61674a5 .config console log report ci-upstream-kasan-gce-smack-root
2020/06/08 09:49 upstream 7ae77150d94d 7751efd0 .config console log report ci-upstream-kasan-gce-root
2020/06/05 05:22 upstream acf25aa66371 6720fdef .config console log report ci-upstream-kasan-gce-smack-root
2020/05/30 23:29 upstream ffeb595d8481 6f3e1c7c .config console log report ci-upstream-kasan-gce-root
2020/05/29 07:16 upstream 75caf310d16c d19ed305 .config console log report ci-upstream-kasan-gce-root
2020/05/25 09:14 upstream 9cb1fd0efd19 11284182 .config console log report ci-upstream-kasan-gce-smack-root
2020/05/24 20:47 upstream caffb99b6929 bd28eb9d .config console log report ci-upstream-kasan-gce-smack-root
2020/05/24 12:43 upstream 423b8baf18a8 96c92ad3 .config console log report ci-upstream-kasan-gce-selinux-root
2020/05/24 09:12 upstream 423b8baf18a8 96c92ad3 .config console log report ci-upstream-kasan-gce-smack-root
2020/05/22 20:49 upstream 051143e1602d 9682898d .config console log report ci-upstream-kasan-gce-smack-root
2020/05/22 09:42 upstream d2f8825ab78e 5afa2ddd .config console log report ci-upstream-kasan-gce-selinux-root
2020/05/20 00:44 upstream 3c9e66568ad4 67fa1f59 .config console log report ci-upstream-kasan-gce-root
2020/05/18 08:08 upstream b9bbe6ed63b2 37bccd4e .config console log report ci-upstream-kasan-gce-smack-root
2020/05/18 05:28 upstream b9bbe6ed63b2 37bccd4e .config console log report ci-upstream-kasan-gce-root
2020/12/08 08:48 upstream cd796ed33450 9af51e31 .config console log report info ci-qemu-upstream-386
2020/12/07 16:20 upstream 0477e9288185 57072f7b .config console log report info ci-qemu-upstream-386
2020/07/14 21:37 linux-next 5fb3d6042387 609fb517 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/06 14:25 linux-next e7b08814b16b e6b89e4e .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.