general protection fault in process_init

general protection fault in process_init_reply
Status: public: reported C repro on 2019/04/14 00:00
Reported-by: syzbot+fba69abde3443c237d19@syzkaller.appspotmail.com
First crash: 1108d, last: 1060d

similar bugs (1):
Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	general protection fault in process_init_reply	C			24	1068d	1103d	9/22	fixed on 2018/08/28 17:48

Sample crash report:

general protection fault: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 3939 Comm: syz-executor395 Not tainted 4.9.112-g9e79039 #7
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801b5c51800 task.stack: ffff8801b6e68000
RIP: 0010:[<ffffffff81934d6a>]  [<ffffffff81934d6a>] process_init_reply+0xcea/0x11e0 fs/fuse/inode.c:923
RSP: 0018:ffff8801b6e6f988  EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff8801b7ff2200 RCX: 0000000000000001
RDX: 0000000000000020 RSI: ffffffff81934cd2 RDI: 0000000000000100
RBP: ffff8801b6e6f9c0 R08: ffffed0036dcdf03 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000003 R12: ffff8801d9855b60
R13: ffff8801b7ff23db R14: ffff8801b7ff23d4 R15: 0000000000000000
FS:  00007fe98ba09700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffa7e788000 CR3: 00000001c322d000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801b6e6f9c0 0000000000000020 ffff8801d9855b60 ffff8801b7ff2200
 ffffffff81934080 ffff8801b7ff2320 ffff8801b7ff2378 ffff8801b6e6f9f8
 ffffffff8190c673 ffff8801d9855b68 ffff8801d9855b90 ffff8801b7ff2200
Call Trace:
 [<ffffffff8190c673>] request_end+0x173/0x610 fs/fuse/dev.c:397
 [<ffffffff819114ca>] fuse_dev_do_read.isra.29.constprop.34+0xcda/0x1220 fs/fuse/dev.c:1312
 [<ffffffff81911b6e>] fuse_dev_read+0x15e/0x1f0 fs/fuse/dev.c:1345
 [<ffffffff815711bd>] new_sync_read fs/read_write.c:439 [inline]
 [<ffffffff815711bd>] __vfs_read+0x3dd/0x570 fs/read_write.c:451
 [<ffffffff815726c0>] vfs_read+0x120/0x380 fs/read_write.c:472
 [<ffffffff81576719>] SYSC_read fs/read_write.c:588 [inline]
 [<ffffffff81576719>] SyS_read+0xd9/0x1c0 fs/read_write.c:581
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff839f9f53>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: ea 03 80 3c 02 00 0f 85 89 03 00 00 4c 8b bb 70 07 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bf 00 01 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 04 04 00 00 49 c7 87 00 01 00 00 c0 c0 7d 84 
RIP  [<ffffffff81934d6a>] process_init_reply+0xcea/0x11e0 fs/fuse/inode.c:923
 RSP <ffff8801b6e6f988>
---[ end trace 265f4810d8b23d90 ]---

Crashes (4):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro
ci-android-49-kasan-gce-root	2018/07/13 03:10	https://android.googlesource.com/kernel/common android-4.9	9e7903954483	06c33b3a	.config	log	report	syz	C
ci-android-49-kasan-gce-root	2018/08/30 11:32	https://android.googlesource.com/kernel/common android-4.9	09eb2ba5ed0c	6c7e9d3d	.config	log	report
ci-android-49-kasan-gce-root	2018/08/14 19:02	https://android.googlesource.com/kernel/common android-4.9	9dc978d43ec7	5084a625	.config	log	report
ci-android-49-kasan-gce-root	2018/07/19 16:06	https://android.googlesource.com/kernel/common android-4.9	47bbcd6bf8f9	49f35839	.config	log	report