syzbot


WARNING in __mmdrop
Status: fixed on 2020/06/28 13:52
Reported-by: syzbot+e58112d71f77113ddb7b@syzkaller.appspotmail.com
Fix commit: 3d2c7d370475 Revert "vhost: access vq metadata through kernel virtual address"
First crash: 907d, last: 858d

Cause bisection: introduced by (bisect log) :
commit 7f466032dc9e5a61217f22ea34b2df932786bbfc
Author: Jason Wang <jasowang@redhat.com>
Date: Fri May 24 08:12:18 2019 +0000

  vhost: access vq metadata through kernel virtual address

Crash: BUG: Bad rss-counter state (log)
Repro: syz .config
duplicates (2):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
KASAN: use-after-free Read in finish_task_switch (2) syz done 1 868d 867d 0/22 closed as dup on 2019/07/24 07:07
KASAN: use-after-free Write in tlb_finish_mmu syz done 1 868d 867d 0/22 closed as dup on 2019/07/24 07:07
Patch testing requests:
Created Duration User Patch Repo Result
2019/07/23 02:26 17m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc OK
2019/07/22 12:26 10m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc error
2019/07/22 10:43 10m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc report log
2019/07/22 09:09 9m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc report log
2019/07/22 09:08 3m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc error
2019/07/22 08:33 17m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc OK
2019/07/22 07:33 16m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc OK
2019/07/22 04:35 10m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc report log
2019/07/22 04:17 10m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc report log
2019/07/22 03:31 18m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc error
2019/07/22 03:03 16m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc OK
2019/07/22 03:03 10m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc report log
2019/07/22 03:02 16m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc OK
2019/07/22 02:43 9m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc report log
2019/07/22 02:27 18m jasowang@redhat.com patch linux-next error
2019/07/21 14:11 18m jasowang@redhat.com patch linux-next error
2019/07/21 14:11 18m jasowang@redhat.com patch linux-next error
2019/07/21 12:14 18m jasowang@redhat.com patch linux-next error
2019/07/21 11:23 18m jasowang@redhat.com upstream error

Sample crash report:

Crashes (14):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-linux-next-kasan-gce-root 2019/07/19 03:34 linux-next 6d21a41b7b1f 7bb222f7 .config log report syz
ci-upstream-kasan-gce-smack-root 2019/07/28 14:53 upstream 5168afe6ef59 c85e1c5b .config log report
ci-upstream-kasan-gce-smack-root 2019/07/28 12:51 upstream 5168afe6ef59 c85e1c5b .config log report
ci-upstream-kasan-gce-selinux-root 2019/07/22 00:36 upstream c6dd78fcb8ee 1656845f .config log report
ci-upstream-kasan-gce-386 2019/07/19 19:07 upstream 3bfe1fc46794 1656845f .config log report
ci-upstream-kasan-gce-386 2019/07/18 20:59 upstream 22051d9c4a57 7bb222f7 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/07/23 10:09 linux-next 6d21a41b7b1f 55e0c077 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/07/20 23:27 linux-next 6d21a41b7b1f 1656845f .config log report
ci-upstream-linux-next-kasan-gce-root 2019/06/29 16:55 linux-next 48568d8c7f47 7509bf36 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/06/27 12:09 linux-next 8087b004bd09 7509bf36 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/06/26 18:15 linux-next 1dd45f170b7e 7509bf36 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/06/22 16:49 linux-next dc636f5d78de 34bf9440 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/06/16 05:50 linux-next f4788d37bc84 442206d7 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/06/09 23:50 linux-next 3f310e51ceb1 0159583c .config log report