syzbot


BUG: bad usercopy in io_openat2_prep

Status: closed as invalid on 2023/02/13 11:27
Subsystems: hardening mm
[Documentation on labels]
Reported-by: syzbot+cdd9922704fc75e03ffc@syzkaller.appspotmail.com
First crash: 443d, last: 438d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] BUG: bad usercopy in io_openat2_prep 3 (5) 2023/02/13 11:27
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: bad usercopy in io_openat2_prep (3) io-uring C 12 430d 429d 0/26 auto-obsoleted due to no activity on 2023/05/21 16:30
upstream BUG: bad usercopy in io_openat2_prep (2) hardening mm C 26 434d 438d 0/26 closed as invalid on 2023/02/17 14:07
Last patch testing requests (1)
Created Duration User Patch Repo Result
2023/02/12 15:50 11m asml.silence@gmail.com https://git.kernel.dk/linux.git for-6.3/io_uring report log

Sample crash report:
usercopy: Kernel memory overwrite attempt detected to SLUB object 'pid' (offset 24, size 24)!
------------[ cut here ]------------
kernel BUG at mm/usercopy.c:102!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4411 Comm: syz-executor101 Not tainted 6.2.0-rc6-syzkaller-17549-gca72d58361ee #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usercopy_abort+0x90/0x94
lr : usercopy_abort+0x90/0x94
sp : ffff80000fb8bb90
x29: ffff80000fb8bba0 x28: 000000000000001c x27: ffff0000c76d1a00
x26: 00000000200000c0 x25: ffff80000cf42000 x24: fffffc0000000000
x23: 05ffc00000000200 x22: fffffc0003250440 x21: ffff0000c9411618
x20: 0000000000000000 x19: 0000000000000018 x18: 0000000000002bee
x17: 63656a626f204255 x16: ffff0000c76d23f8 x15: ffff80000dbc2118
x14: ffff0000c76d1a00 x13: 00000000ffffffff x12: ffff0000c76d1a00
x11: ff808000081bbb4c x10: 0000000000000000 x9 : 295e44a4d7b9f900
x8 : 295e44a4d7b9f900 x7 : ffff80000bf60b80 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000
x2 : ffff0001fefbef08 x1 : 0000000100000000 x0 : 000000000000005d
Call trace:
 usercopy_abort+0x90/0x94
 __check_heap_object+0xa8/0x100
 __check_object_size+0x208/0x6b8
 io_openat2_prep+0xcc/0x2b8
 io_submit_sqes+0x338/0xbb8
 __arm64_sys_io_uring_enter+0x168/0x1308
 invoke_syscall+0x64/0x178
 el0_svc_common+0xbc/0x180
 do_el0_svc+0x48/0x110
 el0_svc+0x58/0x14c
 el0t_64_sync_handler+0x84/0xf0
 el0t_64_sync+0x190/0x194
Code: 9133a800 aa0903e1 f90003e8 94e6c80f (d4210000) 
---[ end trace 0000000000000000 ]---

Crashes (81):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/02/07 19:55 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report syz C ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/13 10:44 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 4d66ad72 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/13 09:29 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 93e26d60 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/13 04:01 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 93e26d60 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/13 00:06 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 93e26d60 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/12 06:10 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 93e26d60 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/11 20:52 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 93e26d60 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/11 10:43 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 93e26d60 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/11 06:16 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 93e26d60 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/11 03:58 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 93e26d60 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/10 20:59 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 95871dcc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/10 18:36 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 95871dcc .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/10 16:32 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 95871dcc .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/10 15:11 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 95871dcc .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/10 12:22 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 07980f9d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/10 08:37 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 07980f9d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/10 05:16 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 07980f9d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/10 01:48 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 07980f9d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/10 00:45 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 07980f9d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/09 18:14 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 07980f9d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/09 16:46 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 07980f9d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/09 14:07 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 14a312c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/09 05:26 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 14a312c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/08 22:00 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 fc9c934e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/08 19:58 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 fc9c934e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/08 15:59 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 fc9c934e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/08 14:45 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 fc9c934e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/08 07:46 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/08 06:33 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eaed33698e35 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 19:32 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 19:31 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 19:18 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 19:09 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 19:03 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 18:56 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 18:51 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 18:44 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 18:27 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 18:25 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 18:11 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 18:08 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 18:07 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 18:07 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 16:06 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 15:59 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 15:57 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
2023/02/07 15:56 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ca72d58361ee 15c3d445 .config console log report info ci-upstream-gce-arm64 BUG: bad usercopy in io_openat2_prep
* Struck through repros no longer work on HEAD.