syzbot


KASAN: invalid-access Read in copy_page

Status: upstream: reported on 2022/08/06 01:31
Reported-by: syzbot+c2c79c6d6eddc5262b77@syzkaller.appspotmail.com
First crash: 15d, last: 6h13m

Sample crash report:
==================================================================
BUG: KASAN: invalid-access in copy_page+0x10/0xd0 arch/arm64/lib/copy_page.S:26
Read at addr f5ff0000192fc000 by task syz-executor.0/2220
Pointer tag: [f5], memory tag: [f0]

CPU: 1 PID: 2220 Comm: syz-executor.0 Not tainted 6.0.0-rc1-syzkaller-00017-g3cc40a443a04 #0
Hardware name: linux,dummy-virt (DT)
Call trace:
 dump_backtrace.part.0+0xd0/0xe0 arch/arm64/kernel/stacktrace.c:182
 dump_backtrace arch/arm64/kernel/stacktrace.c:188 [inline]
 show_stack+0x18/0x5c arch/arm64/kernel/stacktrace.c:189
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x68/0x84 lib/dump_stack.c:106
 print_address_description mm/kasan/report.c:317 [inline]
 print_report+0x104/0x604 mm/kasan/report.c:433
 kasan_report+0x8c/0xb0 mm/kasan/report.c:495
 __do_kernel_fault+0x11c/0x1c0 arch/arm64/mm/fault.c:319
 do_bad_area arch/arm64/mm/fault.c:469 [inline]
 do_tag_check_fault+0x78/0x90 arch/arm64/mm/fault.c:742
 do_mem_abort+0x48/0x9c arch/arm64/mm/fault.c:818
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:366
 el1h_64_sync_handler+0xb0/0xd0 arch/arm64/kernel/entry-common.c:417
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 copy_page+0x10/0xd0 arch/arm64/lib/copy_page.S:26
 copy_user_highpage+0x18/0x50 arch/arm64/mm/copypage.c:34
 __wp_page_copy_user mm/memory.c:2856 [inline]
 wp_page_copy+0xa0/0x6f0 mm/memory.c:3117
 do_wp_page+0x140/0x660 mm/memory.c:3479
 handle_pte_fault mm/memory.c:4929 [inline]
 __handle_mm_fault+0x664/0xe7c mm/memory.c:5053
 handle_mm_fault+0xec/0x280 mm/memory.c:5151
 __do_page_fault arch/arm64/mm/fault.c:502 [inline]
 do_page_fault+0x120/0x3d0 arch/arm64/mm/fault.c:602
 do_mem_abort+0x48/0x9c arch/arm64/mm/fault.c:818
 el0_da+0x30/0xbc arch/arm64/kernel/entry-common.c:502
 el0t_64_sync_handler+0x134/0x1b0 arch/arm64/kernel/entry-common.c:645
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:581

The buggy address belongs to the physical page:
page:00000000fbc2b07a refcount:2 mapcount:1 mapping:0000000000000000 index:0xfffffffff pfn:0x592fc
memcg:f2ff00001df2c000
anon flags: 0x1ffc2800208001c(uptodate|dirty|lru|swapbacked|arch_2|node=0|zone=0|lastcpupid=0x7ff|kasantag=0xa)
raw: 01ffc2800208001c fffffc000064bf88 f3ff000007a4f000 fcff0000078f8a81
raw: 0000000fffffffff 0000000000000000 0000000200000000 f2ff00001df2c000
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff0000192fbe00: f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5
 ffff0000192fbf00: f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5
>ffff0000192fc000: f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0
                   ^
 ffff0000192fc100: f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0
 ffff0000192fc200: f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0
==================================================================

Crashes (94):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-qemu2-arm64-mte 2022/08/17 10:41 upstream 3cc40a443a04 4e72d229 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/17 08:58 upstream 3cc40a443a04 4e72d229 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/16 21:26 upstream 3cc40a443a04 9e4b39c2 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/16 20:07 upstream 568035b01cfb 9e4b39c2 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/16 03:24 upstream 568035b01cfb 7a7cb304 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/15 23:48 upstream 568035b01cfb 7a7cb304 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/15 17:28 upstream 568035b01cfb 8dfcaa3d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/15 07:24 upstream 568035b01cfb 8dfcaa3d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/15 05:04 upstream 568035b01cfb 8dfcaa3d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/15 03:17 upstream 568035b01cfb 8dfcaa3d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/14 16:43 upstream aea23e7c464b 8dfcaa3d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/14 14:35 upstream aea23e7c464b 8dfcaa3d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/14 13:04 upstream aea23e7c464b 8dfcaa3d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/14 12:23 upstream f6eb0fed6a39 8dfcaa3d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/14 04:10 upstream f6eb0fed6a39 8dfcaa3d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/14 02:04 upstream f6eb0fed6a39 8dfcaa3d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/13 14:36 upstream 69dac8e431af 8dfcaa3d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/13 12:56 upstream 69dac8e431af 8dfcaa3d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/13 01:48 upstream 4a9350597aff 8dfcaa3d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/12 12:47 upstream 7ebfc85e2cd7 402cd70d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/12 10:09 upstream 7ebfc85e2cd7 402cd70d .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/12 07:50 upstream 2ae08b36c06e 21724cb2 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/12 01:05 upstream 2ae08b36c06e 21724cb2 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/11 23:50 upstream 2ae08b36c06e 21724cb2 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/11 22:27 upstream 2ae08b36c06e 21724cb2 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/11 15:39 upstream ffcf9c5700e4 787ed7e0 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/11 14:24 upstream ffcf9c5700e4 787ed7e0 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/11 12:22 upstream ffcf9c5700e4 787ed7e0 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/11 10:11 upstream ffcf9c5700e4 787ed7e0 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/10 23:00 upstream f41445645ab5 a6201f11 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/10 21:28 upstream f41445645ab5 a6201f11 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/10 11:15 upstream d4252071b97d aaa9eaa0 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/10 08:51 upstream d4252071b97d aaa9eaa0 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/09 21:30 upstream 426b4ca2d6a5 c2a623d6 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/09 19:48 upstream 426b4ca2d6a5 c2a623d6 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/09 16:03 upstream eb555cb5b794 c2a623d6 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/09 12:07 upstream eb555cb5b794 da700653 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/09 09:38 upstream eb555cb5b794 da700653 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/09 00:53 upstream 3466f49dd0dd da700653 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/08 23:52 upstream 3466f49dd0dd da700653 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/08 19:11 upstream 3466f49dd0dd da700653 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/08 16:58 upstream 4e23eeebb2e5 da700653 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/08 16:50 upstream 4e23eeebb2e5 da700653 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/08 12:49 upstream 4e23eeebb2e5 88e3a122 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/06 00:12 upstream 9e2f40233670 e853abd9 .config log report info KASAN: invalid-access Read in copy_page
ci-qemu2-arm64-mte 2022/08/02 01:26 upstream 9de1f9c8ca51 fef302b1 .config log report info KASAN: invalid-access Read in copy_page