syzbot


KASAN: user-memory-access Read in do_syscall_trace_enter

Status: auto-closed as invalid on 2021/10/01 16:58
Subsystems: riscv
[Documentation on labels]
Reported-by: syzbot+e00eb4c4f40728f9bcde@syzkaller.appspotmail.com
First crash: 1337d, last: 1298d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] KASAN: user-memory-access Read in do_syscall_trace_enter 0 (1) 2021/05/01 05:51

Sample crash report:
==================================================================
BUG: KASAN: user-memory-access in test_bit include/asm-generic/bitops/non-atomic.h:106 [inline]
BUG: KASAN: user-memory-access in cpumask_test_cpu include/linux/cpumask.h:373 [inline]
BUG: KASAN: user-memory-access in trace_sys_enter include/trace/events/syscalls.h:18 [inline]
BUG: KASAN: user-memory-access in do_syscall_trace_enter+0x24c/0x5ae arch/riscv/kernel/ptrace.c:255
Read of size 8 at addr 0000003f9800071e by task syz-fuzzer/3050

CPU: 1 PID: 3050 Comm: syz-fuzzer Not tainted 5.12.0-rc8-syzkaller-00011-g18a3c5f7abfd #0
Hardware name: riscv-virtio,qemu (DT)
Call Trace:
[<ffffffe000009708>] walk_stackframe+0x0/0x23c arch/riscv/kernel/traps.c:202
[<ffffffe002a5dd2a>] dump_backtrace+0x40/0x4e arch/riscv/kernel/stacktrace.c:113
[<ffffffe002a5dd5a>] show_stack+0x22/0x2e arch/riscv/kernel/stacktrace.c:118
[<ffffffe002a67574>] __dump_stack lib/dump_stack.c:79 [inline]
[<ffffffe002a67574>] dump_stack+0x148/0x1d8 lib/dump_stack.c:120
[<ffffffe0003bd6c2>] __kasan_report mm/kasan/report.c:403 [inline]
[<ffffffe0003bd6c2>] kasan_report+0x146/0x18c mm/kasan/report.c:416
[<ffffffe0003bdf2a>] check_region_inline mm/kasan/generic.c:174 [inline]
[<ffffffe0003bdf2a>] __asan_load8+0x4a/0x80 mm/kasan/generic.c:253
[<ffffffe000006fe8>] test_bit include/asm-generic/bitops/non-atomic.h:106 [inline]
[<ffffffe000006fe8>] cpumask_test_cpu include/linux/cpumask.h:373 [inline]
[<ffffffe000006fe8>] trace_sys_enter include/trace/events/syscalls.h:18 [inline]
[<ffffffe000006fe8>] do_syscall_trace_enter+0x24c/0x5ae arch/riscv/kernel/ptrace.c:255
[<ffffffe000005664>] handle_syscall_trace_enter+0x6/0x1e
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/06/03 16:57 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 18a3c5f7abfd 0740de69 .config console log report info ci-qemu2-riscv64 KASAN: user-memory-access Read in do_syscall_trace_enter
2021/05/01 05:03 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 18a3c5f7abfd 77e2b668 .config console log report info ci-qemu2-riscv64 KASAN: user-memory-access Read in do_syscall_trace_enter
2021/04/26 00:42 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 18a3c5f7abfd 33592cee .config console log report info ci-qemu2-riscv64 KASAN: user-memory-access Read in do_syscall_trace_enter
* Struck through repros no longer work on HEAD.