syzbot


WARNING in __clear_user

Status: auto-closed as invalid on 2020/11/13 22:51
Reported-by: syzbot+4259f36687ba9df2c507@syzkaller.appspotmail.com
First crash: 1379d, last: 1379d

Sample crash report:
------------[ cut here ]------------
Unexpected user alpha2: A�
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 1 PID: 28956 Comm: syz-executor.2 Not tainted 4.19.133-syzkaller #0
WARNING: CPU: 0 PID: 2919 at net/wireless/reg.c:416 is_user_regdom_saved net/wireless/reg.c:416 [inline]
WARNING: CPU: 0 PID: 2919 at net/wireless/reg.c:416 restore_alpha2 net/wireless/reg.c:3094 [inline]
WARNING: CPU: 0 PID: 2919 at net/wireless/reg.c:416 restore_regulatory_settings+0x20a/0x1130 net/wireless/reg.c:3186
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Kernel panic - not syncing: panic_on_warn set ...

Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
 handle_userfault.cold+0x3b/0x58 fs/userfaultfd.c:442
 do_anonymous_page+0xdda/0x1be0 mm/memory.c:3211
 handle_pte_fault mm/memory.c:4039 [inline]
 __handle_mm_fault+0x227a/0x41c0 mm/memory.c:4165
 handle_mm_fault+0x436/0xb10 mm/memory.c:4202
 __do_page_fault+0x6d8/0xde0 arch/x86/mm/fault.c:1412
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0010:__clear_user+0x40/0x70 arch/x86/lib/usercopy_64.c:23
Code: d6 49 88 e8 32 b6 5b fa 0f 1f 00 48 89 d8 48 c1 eb 03 48 89 ef 83 e0 07 48 89 d9 48 85 c9 74 19 66 2e 0f 1f 84 00 00 00 00 00 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a
RSP: 0018:ffff8880509d79b0 EFLAGS: 00010202
RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070
RDX: 00000000000027d5 RSI: ffffffff8736b2ae RDI: 0000000020012000
RBP: 0000000020011380 R08: ffffffff8b3d8b38 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000020011380
R13: 00007ffffffff000 R14: 0000000000000000 R15: ffff88805dab8300
 clear_user+0xa6/0xe0 arch/x86/lib/usercopy_64.c:53
 iov_iter_zero+0x216/0xd30 lib/iov_iter.c:906
 read_iter_zero+0xd0/0x1d0 drivers/char/mem.c:714
 call_read_iter include/linux/fs.h:1815 [inline]
 do_iter_readv_writev+0x569/0x790 fs/read_write.c:679
 do_iter_read+0x26f/0x630 fs/read_write.c:923
 vfs_readv+0xe5/0x150 fs/read_write.c:987
 do_readv+0x136/0x330 fs/read_write.c:1020
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c1d9
Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f376e321c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000023cc0 RCX: 000000000045c1d9
RDX: 000000000000000a RSI: 0000000020001900 RDI: 0000000000000005
RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c
R13: 00007ffd63c9344f R14: 00007f376e3229c0 R15: 000000000078bf0c
CPU: 0 PID: 2919 Comm: kworker/0:2 Not tainted 4.19.133-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_power_efficient crda_timeout_work
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
 panic+0x26a/0x50e kernel/panic.c:186
 __warn.cold+0x20/0x61 kernel/panic.c:541
 report_bug+0x262/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x1d7/0x310 arch/x86/kernel/traps.c:296
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1038
RIP: 0010:is_user_regdom_saved net/wireless/reg.c:416 [inline]
RIP: 0010:restore_alpha2 net/wireless/reg.c:3094 [inline]
RIP: 0010:restore_regulatory_settings+0x20a/0x1130 net/wireless/reg.c:3186
Code: 03 44 89 ee e8 c7 df a4 fa 45 84 ed 0f 85 3e 07 00 00 e8 89 de a4 fa 41 0f be d4 0f be f3 48 c7 c7 40 4e 40 88 e8 61 dd 78 fa <0f> 0b e8 6f de a4 fa 48 8b 1d d8 f4 d4 02 48 b8 00 00 00 00 00 fc
RSP: 0018:ffff88809e337c60 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000041 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8154cd91 RDI: ffffed1013c66f7e
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8880ae62bac0 R15: ffff8880ae630a00
 crda_timeout_work+0x1b/0x20 net/wireless/reg.c:513
 process_one_work+0x864/0x1570 kernel/workqueue.c:2155
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298
 kthread+0x30b/0x410 kernel/kthread.c:246
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
CPU: 1 PID: 28945 Comm: syz-executor.4 Not tainted 4.19.133-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
 handle_userfault.cold+0x3b/0x58 fs/userfaultfd.c:442
 do_anonymous_page+0xdda/0x1be0 mm/memory.c:3211
 handle_pte_fault mm/memory.c:4039 [inline]
 __handle_mm_fault+0x227a/0x41c0 mm/memory.c:4165
 handle_mm_fault+0x436/0xb10 mm/memory.c:4202
 __do_page_fault+0x6d8/0xde0 arch/x86/mm/fault.c:1412
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0010:__clear_user+0x40/0x70 arch/x86/lib/usercopy_64.c:23
Code: d6 49 88 e8 32 b6 5b fa 0f 1f 00 48 89 d8 48 c1 eb 03 48 89 ef 83 e0 07 48 89 d9 48 85 c9 74 19 66 2e 0f 1f 84 00 00 00 00 00 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a
RSP: 0018:ffff88808e07f9b0 EFLAGS: 00010202
RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070
RDX: 00000000000027d4 RSI: ffffffff8736b2ae RDI: 0000000020012000
RBP: 0000000020011380 R08: ffffffff8b3d8b38 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000020011380
R13: 00007ffffffff000 R14: 0000000000000000 R15: ffff888056752480
 clear_user+0xa6/0xe0 arch/x86/lib/usercopy_64.c:53
 iov_iter_zero+0x216/0xd30 lib/iov_iter.c:906
 read_iter_zero+0xd0/0x1d0 drivers/char/mem.c:714
 call_read_iter include/linux/fs.h:1815 [inline]
 do_iter_readv_writev+0x569/0x790 fs/read_write.c:679
 do_iter_read+0x26f/0x630 fs/read_write.c:923
 vfs_readv+0xe5/0x150 fs/read_write.c:987
 do_readv+0x136/0x330 fs/read_write.c:1020
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c1d9
Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f2818c2bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000023cc0 RCX: 000000000045c1d9
RDX: 000000000000000a RSI: 0000000020001900 RDI: 0000000000000005
RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c
R13: 00007ffc9e36442f R14: 00007f2818c2c9c0 R15: 000000000078bf0c
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/07/16 22:50 linux-4.19.y 17a87580a885 54b3c45e .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.