syzbot


BUG: unable to handle kernel paging request in fuse_dev_do_write

Status: upstream: reported C repro on 2020/12/15 11:21
Reported-by: syzbot+6f69172f54597343c14f@syzkaller.appspotmail.com
First crash: 1313d, last: 16d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 BUG: unable to handle kernel paging request in fuse_dev_do_write 18 374d 439d 0/2 auto-obsoleted due to no activity on 2023/09/03 17:45
android-49 BUG: unable to handle kernel paging request in fuse_dev_do_write C 46 1737d 1925d 0/3 public: reported C repro on 2019/04/13 00:00
android-5-15 BUG: unable to handle kernel paging request in fuse_dev_do_write 2 374d 376d 0/2 auto-obsoleted due to no activity on 2023/10/10 01:15
android-5-10 BUG: unable to handle kernel paging request in fuse_dev_do_write (2) 1 238d 238d 0/2 auto-obsoleted due to no activity on 2024/02/23 07:02
android-6-1 BUG: unable to handle kernel paging request in fuse_dev_do_write origin:downstream C done 33 28d 428d 0/2 upstream: reported C repro on 2023/05/18 20:01
android-5-10 BUG: unable to handle kernel paging request in fuse_dev_do_write (3) 1 118d 118d 0/2 auto-obsoleted due to no activity on 2024/06/22 11:39
Last patch testing requests (10)
Created Duration User Patch Repo Result
2024/07/04 00:11 17m retest repro android12-5.4 report log
2024/07/04 00:11 13m retest repro android12-5.4 report log
2024/07/04 00:11 8m retest repro android12-5.4 report log
2024/06/19 19:34 16m retest repro android12-5.4 report log
2024/06/19 19:34 16m retest repro android12-5.4 report log
2024/06/19 19:34 9m retest repro android12-5.4 report log
2024/06/04 08:02 7m retest repro android12-5.4 report log
2024/06/04 08:02 9m retest repro android12-5.4 report log
2024/04/23 13:52 4m retest repro android12-5.4 report log
2024/04/23 13:52 4m retest repro android12-5.4 report log

Sample crash report:
BUG: unable to handle page fault for address: ffffed105c5c55ff
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 23fff3067 P4D 23fff3067 PUD 23fff1067 PMD 0 
Oops: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 363 Comm: syz-executor355 Not tainted 5.4.233-syzkaller-00003-gf423d52eea72 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
RIP: 0010:fuse_dev_do_write+0x21f0/0x4e00 fs/fuse/dev.c:1939
Code: d0 b3 ff 4d 8b 3f 4c 89 e0 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 cc 26 00 00 45 8b 24 24 41 ff cc 4d 01 fc 4c 89 e0 48 c1 e8 03 <0f> b6 04 18 84 c0 0f 85 cd 26 00 00 41 c6 04 24 00 41 80 3c 1e 00
RSP: 0018:ffff8881dfb0f7e0 EFLAGS: 00010a07
RAX: 1ffff1105c5c55ff RBX: dffffc0000000000 RCX: ffff8881e2db5e80
RDX: 0000000000000000 RSI: 00000000000007e0 RDI: 00000000000007e0
RBP: ffff8881dfb0fb30 R08: ffffffff81e005b0 R09: fffff94000ef44ff
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8882e2e2afff
R13: 0000000000000010 R14: 1ffff1103c5c4d70 R15: ffff8881e2e2b000
FS:  00007f84fb3ab700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffed105c5c55ff CR3: 00000001e2e2d000 CR4: 00000000003406a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 fuse_dev_write+0x15b/0x1e0 fs/fuse/dev.c:1976
 call_write_iter include/linux/fs.h:1981 [inline]
 new_sync_write fs/read_write.c:483 [inline]
 __vfs_write+0x5d3/0x750 fs/read_write.c:496
 vfs_write+0x206/0x4e0 fs/read_write.c:558
 ksys_write+0x199/0x2c0 fs/read_write.c:611
 do_syscall_64+0xca/0x1c0 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x5c/0xc1
Modules linked in:
CR2: ffffed105c5c55ff
---[ end trace 0c0537fd75ec3f71 ]---
RIP: 0010:fuse_dev_do_write+0x21f0/0x4e00 fs/fuse/dev.c:1939
Code: d0 b3 ff 4d 8b 3f 4c 89 e0 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 cc 26 00 00 45 8b 24 24 41 ff cc 4d 01 fc 4c 89 e0 48 c1 e8 03 <0f> b6 04 18 84 c0 0f 85 cd 26 00 00 41 c6 04 24 00 41 80 3c 1e 00
RSP: 0018:ffff8881dfb0f7e0 EFLAGS: 00010a07
RAX: 1ffff1105c5c55ff RBX: dffffc0000000000 RCX: ffff8881e2db5e80
RDX: 0000000000000000 RSI: 00000000000007e0 RDI: 00000000000007e0
RBP: ffff8881dfb0fb30 R08: ffffffff81e005b0 R09: fffff94000ef44ff
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8882e2e2afff
R13: 0000000000000010 R14: 1ffff1103c5c4d70 R15: ffff8881e2e2b000
FS:  00007f84fb3ab700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffed105c5c55ff CR3: 00000001e2e2d000 CR4: 00000000003406a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	d0 b3 ff 4d 8b 3f    	shlb   0x3f8b4dff(%rbx)
   6:	4c 89 e0             	mov    %r12,%rax
   9:	48 c1 e8 03          	shr    $0x3,%rax
   d:	0f b6 04 18          	movzbl (%rax,%rbx,1),%eax
  11:	84 c0                	test   %al,%al
  13:	0f 85 cc 26 00 00    	jne    0x26e5
  19:	45 8b 24 24          	mov    (%r12),%r12d
  1d:	41 ff cc             	dec    %r12d
  20:	4d 01 fc             	add    %r15,%r12
  23:	4c 89 e0             	mov    %r12,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	0f b6 04 18          	movzbl (%rax,%rbx,1),%eax <-- trapping instruction
  2e:	84 c0                	test   %al,%al
  30:	0f 85 cd 26 00 00    	jne    0x2703
  36:	41 c6 04 24 00       	movb   $0x0,(%r12)
  3b:	41 80 3c 1e 00       	cmpb   $0x0,(%r14,%rbx,1)

Crashes (213):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/05/18 20:33 android12-5.4 f423d52eea72 3bb7af1d .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/04/30 03:33 android12-5.4 d5ed2ca98e48 62df2017 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/12/25 16:11 android12-5.4 a8aad8851131 9da18ae8 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/06/02 13:17 android12-5.4 a4d27a2c85c9 6e12f05f .config strace log report syz C ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2020/12/16 15:29 android12-5.4 3f2fbc0cdc98 649595c6 .config console log report syz C ci2-android-5-4-kasan
2020/12/16 15:09 android12-5.4 3f2fbc0cdc98 649595c6 .config console log report syz C ci2-android-5-4-kasan
2020/12/16 14:49 android12-5.4 3f2fbc0cdc98 649595c6 .config console log report syz C ci2-android-5-4-kasan
2020/12/15 11:43 android12-5.4 30fc30201c19 97183ed7 .config console log report syz C ci2-android-5-4-kasan
2023/07/10 10:25 android12-5.4 6d5c2c1877e5 668cb1fa .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/07/10 08:48 android12-5.4 6d5c2c1877e5 668cb1fa .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/06/13 17:11 android12-5.4 39a9b92e9828 749afb64 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/06/10 19:27 android12-5.4 10e0626a3202 49519f06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/06/10 18:02 android12-5.4 10e0626a3202 49519f06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/06/10 17:42 android12-5.4 10e0626a3202 49519f06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/05/22 03:05 android12-5.4 dd94985a9b62 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/05/18 17:49 android12-5.4 f423d52eea72 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/05/18 16:34 android12-5.4 f423d52eea72 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/05/15 06:10 android12-5.4 f423d52eea72 2b9ba477 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/05/08 05:34 android12-5.4 0fcb7cff9462 90c93c40 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/05/01 06:58 android12-5.4 d5ed2ca98e48 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/04/30 07:18 android12-5.4 d5ed2ca98e48 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/04/30 03:12 android12-5.4 d5ed2ca98e48 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2023/03/17 19:44 android12-5.4 f4e4be09c27c 7939252e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/12/30 02:49 android12-5.4 a8aad8851131 44712fbc .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/12/29 01:08 android12-5.4 a8aad8851131 44712fbc .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/12/25 15:50 android12-5.4 a8aad8851131 9da18ae8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/07/16 13:44 android12-5.4 330fa791a029 95cb00d1 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/06/28 11:47 android12-5.4 9ce4508d6de9 ef82eb2c .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/06/24 09:27 android12-5.4 9ce4508d6de9 a5dbd430 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/06/08 11:32 android12-5.4 b9c3a995e377 b2706118 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/06/07 03:30 android12-5.4 3716b22823c5 c8857892 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/06/02 16:31 android12-5.4 a4d27a2c85c9 6e12f05f .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/06/02 15:29 android12-5.4 a4d27a2c85c9 6e12f05f .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/06/02 12:51 android12-5.4 a4d27a2c85c9 6e12f05f .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/06/02 12:21 android12-5.4 a4d27a2c85c9 6e12f05f .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/04/15 21:53 android12-5.4 b730087e9a5d 8bcc32a6 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/03/19 11:06 android12-5.4 49216514f3a3 e2d91b1d .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/03/18 22:07 android12-5.4 49216514f3a3 e2d91b1d .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/03/05 14:17 android12-5.4 8a3679a75730 45a13a73 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/02/27 18:40 android12-5.4 961dd91cc692 45a13a73 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/02/23 22:59 android12-5.4 cae20698ffbf 6e821dbf .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/02/16 18:13 android12-5.4 2426795494c7 8b9ca619 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/02/08 21:34 android12-5.4 2159354389cf 0b33604d .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/01/21 01:17 android12-5.4 6140ec56536b b838eb76 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/01/19 22:50 android12-5.4 946eff433f93 5da9499f .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/01/18 05:42 android12-5.4 37c7c8d4f085 731a2d23 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/01/09 05:37 android12-5.4 5b673be0c6b0 2ca0d385 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2022/01/09 03:17 android12-5.4 5b673be0c6b0 2ca0d385 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2021/12/09 06:46 android12-5.4 93698d0219f2 a4a2a501 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2021/12/07 19:29 android12-5.4 93698d0219f2 0230ba3e .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2021/12/07 15:09 android12-5.4 93698d0219f2 0230ba3e .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2021/11/23 06:44 android12-5.4 697fba25ed27 545ab074 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2021/10/17 23:49 android12-5.4 73e6d86c30ee 0c5d9412 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2021/10/17 22:24 android12-5.4 73e6d86c30ee 0c5d9412 .config console log report info ci2-android-5-4-kasan BUG: unable to handle kernel paging request in fuse_dev_do_write
2021/01/02 04:26 android12-5.4 e627b02af655 79264ae3 .config console log report info ci2-android-5-4-kasan
2020/12/15 11:20 android12-5.4 30fc30201c19 97183ed7 .config console log report info ci2-android-5-4-kasan
* Struck through repros no longer work on HEAD.