syzbot


WARNING in mntput_no_expire (2)

Status: fixed on 2021/11/10 00:50
Reported-by: syzbot+c88a7030da47945a3cc3@syzkaller.appspotmail.com
Fix commit: 7d01ef7585c0 Make sure nd->path.mnt and nd->path.dentry are always valid pointers
First crash: 671d, last: 456d

Cause bisection: introduced by (bisect log) :
commit 73d90386b559d6f4c3c5db5e6bb1b68aae8fd3e7
Author: Damien Le Moal <damien.lemoal@wdc.com>
Date: Thu Jan 28 04:47:27 2021 +0000

  nvme: cleanup zone information initialization

Crash: KASAN: use-after-free Read in chroot_fs_refs (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in mntput_no_expire (3) vfs C inconclusive 29 27d 443d 23/24 upstream: reported C repro on 2021/11/15 22:27
upstream WARNING in mntput_no_expire 1 747d 743d 0/24 auto-closed as invalid on 2021/03/16 10:44
Last patch testing requests:
Created Duration User Patch Repo Result
2021/04/05 06:54 10m ducheng2@gmail.com upstream report log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 8409 at fs/namespace.c:1186 mntput_no_expire+0xaca/0xcb0 fs/namespace.c:1186
Modules linked in:
CPU: 1 PID: 8409 Comm: syz-executor035 Not tainted 5.12.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:mntput_no_expire+0xaca/0xcb0 fs/namespace.c:1186
Code: ff 48 c7 c2 e0 cb 78 89 be c2 02 00 00 48 c7 c7 a0 cb 78 89 c6 05 e5 6d e5 0b 01 e8 ff e1 f6 06 e9 3f fd ff ff e8 c6 a5 a8 ff <0f> 0b e9 fc fc ff ff e8 ba a5 a8 ff e8 55 dc 94 ff 31 ff 89 c5 89
RSP: 0018:ffffc9000165fc78 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 1ffff920002cbf95 RCX: 0000000000000000
RDX: ffff88802072d4c0 RSI: ffffffff81cb4b8a RDI: 0000000000000003
RBP: ffff888011656900 R08: 0000000000000000 R09: ffffffff8fa978af
R10: ffffffff81cb4884 R11: 0000000000000000 R12: 0000000000000008
R13: ffffc9000165fcc8 R14: dffffc0000000000 R15: 00000000ffffffff
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055a722053160 CR3: 000000000bc8e000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 mntput fs/namespace.c:1232 [inline]
 cleanup_mnt+0x523/0x530 fs/namespace.c:1132
 task_work_run+0xdd/0x1a0 kernel/task_work.c:140
 exit_task_work include/linux/task_work.h:30 [inline]
 do_exit+0xbfc/0x2a60 kernel/exit.c:825
 do_group_exit+0x125/0x310 kernel/exit.c:922
 __do_sys_exit_group kernel/exit.c:933 [inline]
 __se_sys_exit_group kernel/exit.c:931 [inline]
 __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:931
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x446af9
Code: Unable to access opcode bytes at RIP 0x446acf.
RSP: 002b:00000000005dfe48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00000000004ce450 RCX: 0000000000446af9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 0000000000000001 R08: ffffffffffffffbc R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004ce450
R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001

Crashes (68):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-upstream-kasan-gce 2021/04/01 07:34 upstream d19cc4bfbff1 6a81331a .config console log report syz C WARNING in mntput_no_expire
ci-upstream-kasan-gce 2021/07/09 05:15 upstream 3dbdb38e2869 1b20171a .config console log report syz WARNING in mntput_no_expire
ci-upstream-linux-next-kasan-gce-root 2021/09/08 22:01 linux-next 999569d59a0a e2776ee4 .config console log report syz WARNING in mntput_no_expire
ci-upstream-kasan-gce 2021/08/02 13:42 upstream c500bee1c5b2 6c236867 .config console log report info WARNING in mntput_no_expire
ci-upstream-kasan-gce-selinux-root 2021/05/18 23:49 upstream 8ac91e6c6033 a343ba6b .config console log report info WARNING in mntput_no_expire
ci-upstream-kasan-gce 2021/04/29 03:03 upstream acd3d2859453 77e2b668 .config console log report info WARNING in mntput_no_expire
ci-upstream-kasan-gce 2021/04/25 10:19 upstream 2a1d7946fa53 36c88236 .config console log report info WARNING in mntput_no_expire
ci-upstream-kasan-gce 2021/04/05 21:05 upstream 0a50438c8436 6a81331a .config console log report info WARNING in mntput_no_expire
ci-upstream-kasan-gce 2021/04/05 19:33 upstream 0a50438c8436 6a81331a .config console log report info WARNING in mntput_no_expire
ci-upstream-kasan-gce 2021/04/05 13:11 upstream e49d033bddf5 6a81331a .config console log report info WARNING in mntput_no_expire
ci-upstream-kasan-gce 2021/04/04 08:07 upstream 2023a53bdf41 6a81331a .config console log report info WARNING in mntput_no_expire
ci-upstream-kasan-gce 2021/04/02 12:43 upstream 1678e493d530 6a81331a .config console log report info WARNING in mntput_no_expire
ci-upstream-kasan-gce 2021/04/01 18:53 upstream ffd9fb546d49 6a81331a .config console log report info WARNING in mntput_no_expire
ci-upstream-kasan-gce 2021/04/01 04:22 upstream d19cc4bfbff1 6a81331a .config console log report info WARNING in mntput_no_expire
ci-qemu-upstream-386 2021/06/16 13:22 upstream 94f0b2d4a1d0 c06f97ad .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/10/28 03:22 bpf 440ffcdd9db4 be531bb4 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/10/26 07:08 bpf 04f8ef5643bc c1132b49 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/10/25 21:00 bpf 04f8ef5643bc 4f0000ee .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/10/22 10:27 bpf 1acfe7c9b44b 55f90bc6 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/10/18 01:39 bpf 732b74d64704 0c5d9412 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/10/17 15:23 bpf 732b74d64704 0c5d9412 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/10/16 23:46 bpf 732b74d64704 0c5d9412 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/10/10 06:26 bpf 8d6c414cd2fb 838e7e2c .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/10/05 20:28 bpf b0e875bac0fa 0a63fd36 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/09/30 15:10 bpf 79e3445b38e0 be530f6c .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/09/24 00:08 bpf 7c3a00911b3d 8cac236e .config console log report info WARNING in mntput_no_expire
ci-upstream-net-this-kasan-gce 2021/09/14 15:24 net 550ac9c1aaaa 07e953c1 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/08/29 13:32 bpf 5b029a32cfe4 be2c130d .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/08/15 04:10 bpf 3776f3517ed9 2489ab88 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/08/12 06:45 bpf 2d3a1e3615c5 6972b106 .config console log report info WARNING in mntput_no_expire
ci-upstream-net-this-kasan-gce 2021/07/20 11:18 net 6f20c8adb181 bc48c9ab .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/07/04 17:20 bpf 0fc4dcc13f09 55aa55c2 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-kasan-gce 2021/05/11 00:54 bpf bbd6f0a94813 ca873091 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/11/02 03:41 bpf-next 36e70b9b06bf 098b5d53 .config console log report info WARNING in mntput_no_expire
ci-upstream-net-kasan-gce 2021/11/02 01:30 net-next c07c6e8eb4b3 098b5d53 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/10/27 14:17 bpf-next 20d1b54a52bd 373bf66b .config console log report info WARNING in mntput_no_expire
ci-upstream-net-kasan-gce 2021/10/27 07:14 net-next 06338ceff925 d50eb50a .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/10/25 02:00 bpf-next c825f5fee19c 282f03fb .config console log report info WARNING in mntput_no_expire
ci-upstream-net-kasan-gce 2021/10/17 19:34 net-next 4e6e167bc049 0c5d9412 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/10/15 10:01 bpf-next 431bfb9ee3e2 0c5d9412 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/10/15 03:09 bpf-next 431bfb9ee3e2 7aa5fe41 .config console log report info WARNING in mntput_no_expire
ci-upstream-net-kasan-gce 2021/10/07 06:37 net-next bcb2293d8106 62ee0987 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/10/07 05:07 bpf-next 9d0578722391 62ee0987 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/10/04 13:34 bpf-next 0693b27644f0 ce697b49 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/09/26 09:35 bpf-next 091037fb770e 8cac236e .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/09/26 03:10 bpf-next 091037fb770e 8cac236e .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/09/25 18:27 bpf-next 091037fb770e 8cac236e .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/09/17 16:12 bpf-next 336562752acc 5b989942 .config console log report info WARNING in mntput_no_expire
ci-upstream-net-kasan-gce 2021/09/17 10:44 net-next 561bed688bff 5b989942 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/09/16 18:35 bpf-next 336562752acc aae492f2 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/09/14 14:32 bpf-next 14bef1ab3037 58d09404 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/09/12 00:54 bpf-next 3384c7c7641b 5ae8508a .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/09/02 01:02 bpf-next a16ef91aa61a 7eb7e152 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/08/29 18:58 bpf-next 47bb27a20d6e be2c130d .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/08/27 09:57 bpf-next 48b2e71c2e53 b318694d .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/08/22 14:51 bpf-next f2a6ee924d26 b599f2fc .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/08/12 02:45 bpf-next 25dc3895baaa 6972b106 .config console log report info WARNING in mntput_no_expire
ci-upstream-net-kasan-gce 2021/08/10 10:46 net-next 2a2b6e3640c4 6972b106 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/08/04 02:53 bpf-next 83f31535565c 6c236867 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/07/31 04:40 bpf-next f309b4ba989d 6c236867 .config console log report info WARNING in mntput_no_expire
ci-upstream-bpf-next-kasan-gce 2021/07/25 21:43 bpf-next 2b7e9f25e590 4d1b57d4 .config console log report info WARNING in mntput_no_expire
ci-upstream-net-kasan-gce 2021/07/04 14:21 net-next 5e437416ff66 55aa55c2 .config console log report info WARNING in mntput_no_expire
ci-upstream-net-kasan-gce 2021/06/24 00:22 net-next a7b62112f0ab fe4ab389 .config console log report info WARNING in mntput_no_expire
ci-upstream-net-kasan-gce 2021/06/19 17:25 net-next 4bea7207a80c aba2b2fb .config console log report info WARNING in mntput_no_expire
ci-upstream-linux-next-kasan-gce-root 2021/05/04 23:22 linux-next 9a9aa07ae18b 06c27ff5 .config console log report info WARNING in mntput_no_expire
ci-upstream-linux-next-kasan-gce-root 2021/04/10 11:21 linux-next e99d8a849517 bfeda1b1 .config console log report info WARNING in mntput_no_expire
ci-upstream-linux-next-kasan-gce-root 2021/04/08 13:02 linux-next 6145d80cfc62 6a81331a .config console log report info WARNING in mntput_no_expire
* Struck through repros no longer work on HEAD.