syzbot


BUG: unable to handle kernel paging request in xfs_sb_read_verify

Status: fixed on 2020/03/06 22:15
Subsystems: xfs
[Documentation on labels]
Reported-by: syzbot+6be2cbddaad2e32b47a0@syzkaller.appspotmail.com
Fix commit: d98c9e83b5e7 kasan: fix crashes on access to memory mapped by vm_map_ram()
First crash: 1669d, last: 1649d
Discussions (1)
Title Replies (including bot) Last reply
BUG: unable to handle kernel paging request in xfs_sb_read_verify 3 (5) 2020/03/01 22:56

Sample crash report:
BUG: unable to handle page fault for address: fffff52002d80000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 21ffee067 P4D 21ffee067 PUD aa51c067 PMD 5c6a3067 PTE 0
Oops: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.5.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: xfs-buf/loop0 xfs_buf_ioend_work
RIP: 0010:xfs_sb_read_verify+0xf0/0x540 fs/xfs/libxfs/xfs_sb.c:691
Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 18 04 00 00 4d 8b ac 24 30 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e a7 03 00 00 41 8b 75 00 bf 58
RSP: 0018:ffffc90000d8faf0 EFLAGS: 00010a06
RAX: dffffc0000000000 RBX: 1ffff920001b1f61 RCX: ffffffff82ad3c26
RDX: 1ffff92002d80000 RSI: ffffffff82aa054b RDI: ffff8880a256bda0
RBP: ffffc90000d8fcd0 R08: ffff8880a9a5a480 R09: ffffed1015d2703d
R10: ffffed1015d2703c R11: ffff8880ae9381e3 R12: ffff8880a256bc80
R13: ffffc90016c00000 R14: ffffc90000d8fca8 R15: ffff888058a70000
FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffff52002d80000 CR3: 00000000a7cce000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 xfs_buf_ioend+0x3f9/0xde0 fs/xfs/xfs_buf.c:1162
 xfs_buf_ioend_work+0x19/0x20 fs/xfs/xfs_buf.c:1183
 process_one_work+0x9af/0x1740 kernel/workqueue.c:2264
 worker_thread+0x98/0xe40 kernel/workqueue.c:2410
 kthread+0x361/0x430 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Modules linked in:
CR2: fffff52002d80000
---[ end trace 78e436bb2729b944 ]---
RIP: 0010:xfs_sb_read_verify+0xf0/0x540 fs/xfs/libxfs/xfs_sb.c:691
Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 18 04 00 00 4d 8b ac 24 30 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e a7 03 00 00 41 8b 75 00 bf 58
RSP: 0018:ffffc90000d8faf0 EFLAGS: 00010a06
RAX: dffffc0000000000 RBX: 1ffff920001b1f61 RCX: ffffffff82ad3c26
RDX: 1ffff92002d80000 RSI: ffffffff82aa054b RDI: ffff8880a256bda0
RBP: ffffc90000d8fcd0 R08: ffff8880a9a5a480 R09: ffffed1015d2703d
R10: ffffed1015d2703c R11: ffff8880ae9381e3 R12: ffff8880a256bc80
R13: ffffc90016c00000 R14: ffffc90000d8fca8 R15: ffff888058a70000
FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffff52002d80000 CR3: 00000000a7cce000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (69):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/12/19 21:34 upstream 4a94c4332334 36650b4b .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/19 05:48 upstream 2187f215ebaa 79b211f7 .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/19 05:48 upstream 2187f215ebaa 79b211f7 .config console log report ci-upstream-kasan-gce-root
2019/12/17 08:53 upstream ea200dec5128 d13d7958 .config console log report ci-upstream-kasan-gce-root
2019/12/16 11:55 upstream 07c4b9e9f71a eef6e580 .config console log report ci-upstream-kasan-gce-root
2019/12/15 21:46 upstream 07c4b9e9f71a eef6e580 .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/14 23:23 upstream e31736d9fae8 eef6e580 .config console log report ci-upstream-kasan-gce-root
2019/12/14 14:51 upstream e31736d9fae8 eef6e580 .config console log report ci-upstream-kasan-gce-root
2019/12/14 07:07 upstream 37d4e84f765b 5b2ca5da .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/14 04:46 upstream 37d4e84f765b 5b2ca5da .config console log report ci-upstream-kasan-gce-root
2019/12/13 08:58 upstream ae4b064e2a61 08003f64 .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/12 14:44 upstream 687dec9b9459 d973f528 .config console log report ci-upstream-kasan-gce-root
2019/12/12 13:19 upstream 687dec9b9459 d973f528 .config console log report ci-upstream-kasan-gce-root
2019/12/12 03:13 upstream 687dec9b9459 d973f528 .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/11 19:12 upstream 6794862a16ef 101194eb .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/11 19:11 upstream 6794862a16ef 101194eb .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/11 19:09 upstream 6794862a16ef 101194eb .config console log report ci-upstream-kasan-gce-root
2019/12/11 11:38 upstream 6794862a16ef 101194eb .config console log report ci-upstream-kasan-gce-root
2019/12/11 11:38 upstream 6794862a16ef 101194eb .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/11 10:40 upstream 6794862a16ef 101194eb .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/10 23:58 upstream 6794862a16ef 5a5826a1 .config console log report ci-upstream-kasan-gce-root
2019/12/09 00:56 upstream 9455d25f4e3b 1508f453 .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/09 00:56 upstream 9455d25f4e3b 1508f453 .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/07 02:22 upstream 7ada90eb9c7a 85f26751 .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/07 02:14 upstream 7ada90eb9c7a 85f26751 .config console log report ci-upstream-kasan-gce-root
2019/12/07 02:05 upstream 7ada90eb9c7a 85f26751 .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/07 01:35 upstream 3cf2890f29ab 85f26751 .config console log report ci-qemu-upstream
2019/12/05 18:01 upstream 2f13437b8917 4fb74474 .config console log report ci-upstream-kasan-gce-root
2019/12/05 18:01 upstream 2f13437b8917 4fb74474 .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/05 04:46 upstream 63de37476ebd b2088328 .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/05 04:45 upstream 63de37476ebd b2088328 .config console log report ci-upstream-kasan-gce-root
2019/12/05 04:44 upstream 63de37476ebd b2088328 .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/03 00:15 upstream 596cf45cbf6e ab342da3 .config console log report ci-upstream-kasan-gce-root
2019/12/02 23:48 upstream 596cf45cbf6e ab342da3 .config console log report ci-upstream-kasan-gce-root
2019/12/02 22:16 upstream 596cf45cbf6e ab342da3 .config console log report ci-upstream-kasan-gce-root
2019/12/02 21:33 upstream 596cf45cbf6e ab342da3 .config console log report ci-upstream-kasan-gce-root
2019/12/02 21:14 upstream 596cf45cbf6e ab342da3 .config console log report ci-upstream-kasan-gce-selinux-root
2019/12/02 14:08 upstream 596cf45cbf6e f879db37 .config console log report ci-qemu-upstream
2019/12/02 14:01 upstream 596cf45cbf6e f879db37 .config console log report ci-qemu-upstream
2019/12/05 18:01 upstream 2f13437b8917 9fd5a512 .config console log report ci-qemu-upstream-386
2019/12/05 04:45 upstream aedc0650f913 b2088328 .config console log report ci-qemu-upstream-386
2019/12/07 02:08 linux-next 838333c80c4f 85f26751 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/12/05 18:01 linux-next 282ffdf30a3e 4fb74474 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/12/05 04:45 linux-next c7c32c43e831 b2088328 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/12/02 12:19 linux-next c5db92909bed f879db37 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/12/02 12:18 linux-next c5db92909bed f879db37 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/12/02 12:13 linux-next c5db92909bed f879db37 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/12/01 20:32 linux-next 419593dad843 a76bf83f .config console log report ci-upstream-linux-next-kasan-gce-root
2019/12/01 06:07 linux-next 419593dad843 a76bf83f .config console log report ci-upstream-linux-next-kasan-gce-root
2019/11/30 15:06 linux-next 419593dad843 3a75be00 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/11/30 15:05 linux-next 419593dad843 3a75be00 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/11/30 06:39 linux-next 419593dad843 3a75be00 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/11/30 03:55 linux-next 419593dad843 3a75be00 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.