syzbot


WARNING in __kernel_read
Status: fixed on 2020/09/16 22:51
Reported-by: syzbot+d012ca3f813739c37c25@syzkaller.appspotmail.com
Fix commit: a39c46067c84 net/9p: validate fds in p9_fd_open
First crash: 679d, last: 619d

Cause bisection: introduced by (bisect log) :
commit 6209dd9132e8ea5545cffc84483841e88ea8cc5b
Author: Christoph Hellwig <hch@lst.de>
Date: Fri May 8 07:00:28 2020 +0000

  fs: implement kernel_read using __kernel_read

Crash: WARNING in __kernel_read (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in __kernel_read (2) C error 292 214d 602d 0/22 upstream: reported C repro on 2020/09/26 02:58

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 7205 at fs/read_write.c:427 __kernel_read+0x416/0x550 fs/read_write.c:427
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 7205 Comm: syz-executor921 Not tainted 5.9.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x198/0x1fd lib/dump_stack.c:118
 panic+0x347/0x7c0 kernel/panic.c:231
 __warn.cold+0x20/0x46 kernel/panic.c:600
 report_bug+0x1bd/0x210 lib/bug.c:198
 handle_bug+0x38/0x90 arch/x86/kernel/traps.c:234
 exc_invalid_op+0x14/0x40 arch/x86/kernel/traps.c:254
 asm_exc_invalid_op+0x12/0x20 arch/x86/include/asm/idtentry.h:536
RIP: 0010:__kernel_read+0x416/0x550 fs/read_write.c:427
Code: 00 00 48 3b 6d 50 74 6e e8 47 47 b5 ff b9 01 00 00 00 4c 89 f2 44 89 fe 48 89 ef e8 44 56 12 00 e9 8e fe ff ff e8 2a 47 b5 ff <0f> 0b 49 c7 c4 ea ff ff ff e9 18 fe ff ff e8 17 47 b5 ff 48 89 ea
RSP: 0018:ffffc900020a7c48 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff88809e69d840 RCX: ffffffff81bf02e4
RDX: ffff88809efb6540 RSI: ffffffff81bf0656 RDI: 0000000000000005
RBP: ffffc90000e92000 R08: 0000000000000001 R09: ffffffff8c984587
R10: 0000000000000000 R11: 0000000000000000 R12: 000000000008801c
R13: ffffc900020a7d08 R14: ffff88809e69d8c4 R15: 0000000000000002
 kernel_read+0x52/0x70 fs/read_write.c:457
 kernel_read_file fs/exec.c:989 [inline]
 kernel_read_file+0x2e5/0x620 fs/exec.c:952
 kernel_read_file_from_fd+0x56/0xa0 fs/exec.c:1076
 __do_sys_finit_module+0xe6/0x190 kernel/module.c:4051
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x44b6a9
Code: e8 0c d3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b ca fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fde91f68db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
RAX: ffffffffffffffda RBX: 00000000006dcc68 RCX: 000000000044b6a9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00000000006dcc60 R08: 00007fde91f69700 R09: 0000000000000000
R10: 00007fde91f69700 R11: 0000000000000246 R12: 00000000006dcc6c
R13: 00007ffc3806423f R14: 00007fde91f699c0 R15: 00000000006dcc6c
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (60):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2020/09/09 13:11 upstream 34d4ddd359db 0ea7a887 .config log report syz C
ci-upstream-kasan-gce-root 2020/09/08 00:35 upstream f4d51dffc6c0 abf9ba4f .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/09/05 09:14 upstream c70672d8d316 abf9ba4f .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/07/11 16:25 upstream a581387e415b 18d18b59 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/07/11 10:59 upstream a581387e415b 18d18b59 .config log report syz C
ci-upstream-kasan-gce-root 2020/07/11 10:42 upstream a581387e415b 18d18b59 .config log report syz C
ci-upstream-kasan-gce-root 2020/08/08 00:48 upstream d6efb3ac3e6c cb436c69 .config log report
ci-upstream-kasan-gce-smack-root 2020/08/06 19:32 upstream 47ec5303d73e 1f122f88 .config log report
ci-upstream-kasan-gce-selinux-root 2020/08/04 06:34 upstream bcf876870b95 196277c4 .config log report
ci-upstream-kasan-gce-smack-root 2020/07/30 08:18 upstream d3590ebf6f91 233283a1 .config log report
ci-upstream-kasan-gce-smack-root 2020/07/28 13:09 upstream 92ed30191993 cb93dc6a .config log report
ci-upstream-kasan-gce-root 2020/07/28 04:40 upstream 92ed30191993 cb93dc6a .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/28 01:47 upstream 92ed30191993 cb93dc6a .config log report
ci-upstream-kasan-gce-smack-root 2020/07/26 01:40 upstream 23ee3e4e5bd2 1f7cc1ca .config log report
ci-upstream-kasan-gce-root 2020/07/25 14:24 upstream 68845a55c31b 1f7cc1ca .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/24 13:11 upstream f37e99aca03f 554af388 .config log report
ci-upstream-kasan-gce-root 2020/07/24 09:05 upstream d15be546031c 70c104a1 .config log report
ci-upstream-kasan-gce-smack-root 2020/07/23 10:32 upstream 8c26c87b0532 340ea530 .config log report
ci-upstream-kasan-gce-root 2020/07/22 15:06 upstream 4fa640dc5230 128cd85f .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/22 15:03 upstream 4fa640dc5230 128cd85f .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/22 14:44 upstream 4fa640dc5230 128cd85f .config log report
ci-upstream-kasan-gce-root 2020/07/21 19:20 upstream 4fa640dc5230 21f1765e .config log report
ci-upstream-kasan-gce-root 2020/07/20 21:59 upstream 5714ee50bb43 4285ffa3 .config log report
ci-upstream-kasan-gce-smack-root 2020/07/20 14:53 upstream 5714ee50bb43 4285ffa3 .config log report
ci-upstream-kasan-gce-root 2020/07/20 01:56 upstream 92188b41f139 9c812472 .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/19 21:42 upstream f932d58abc38 9c812472 .config log report
ci-upstream-kasan-gce-root 2020/07/19 19:26 upstream f932d58abc38 9c812472 .config log report
ci-upstream-kasan-gce-root 2020/07/19 13:52 upstream f932d58abc38 9c812472 .config log report
ci-upstream-kasan-gce-smack-root 2020/07/19 07:40 upstream f932d58abc38 9c812472 .config log report
ci-upstream-kasan-gce-smack-root 2020/07/16 14:46 upstream 994e99a96c9b f3bec699 .config log report
ci-upstream-kasan-gce-root 2020/07/16 14:39 upstream 994e99a96c9b f3bec699 .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/16 14:34 upstream 994e99a96c9b f3bec699 .config log report
ci-upstream-kasan-gce-smack-root 2020/07/16 08:00 upstream 994e99a96c9b f3bec699 .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/16 07:55 upstream 994e99a96c9b f3bec699 .config log report
ci-upstream-kasan-gce-root 2020/07/16 07:25 upstream 994e99a96c9b f3bec699 .config log report
ci-upstream-kasan-gce-smack-root 2020/07/15 19:12 upstream e9919e11e219 f3bec699 .config log report
ci-upstream-kasan-gce-smack-root 2020/07/15 04:04 upstream e9919e11e219 609fb517 .config log report
ci-upstream-kasan-gce-root 2020/07/14 14:49 upstream 0dc589da873b ce4c95b3 .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/14 13:49 upstream 0dc589da873b ce4c95b3 .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/14 12:59 upstream 0dc589da873b ce4c95b3 .config log report
ci-upstream-kasan-gce-root 2020/07/14 12:52 upstream 0dc589da873b ce4c95b3 .config log report
ci-upstream-kasan-gce-smack-root 2020/07/14 12:51 upstream 0dc589da873b ce4c95b3 .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/13 18:19 upstream 11ba468877bb f90ec899 .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/12 20:48 upstream 0aea6d5c5be3 115e1930 .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/12 01:49 upstream a581387e415b 18d18b59 .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/11 19:38 upstream a581387e415b 18d18b59 .config log report
ci-upstream-kasan-gce-root 2020/07/11 18:10 upstream a581387e415b 18d18b59 .config log report
ci-upstream-kasan-gce-root 2020/07/11 10:28 upstream a581387e415b 18d18b59 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/08/13 05:13 linux-next bc09acc9f224 bc15f7db .config log report
ci-upstream-linux-next-kasan-gce-root 2020/08/12 17:34 linux-next bc09acc9f224 bb3e5fe6 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/07/19 21:14 linux-next 4c43049f19a2 9c812472 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/07/18 06:38 linux-next 4c43049f19a2 9c812472 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/07/16 14:43 linux-next ca0e494af5ed f3bec699 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/07/16 06:40 linux-next ca0e494af5ed f3bec699 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/07/14 12:59 linux-next be978f8feb1d ce4c95b3 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/07/12 02:55 linux-next d31958b30ea3 18d18b59 .config log report