syzbot


WARNING in __mmdrop
Status: upstream: reported syz repro on 2019/07/19 03:35
Reported-by: syzbot+e58112d71f77113ddb7b@syzkaller.appspotmail.com
Fix commit: vhost: fix WARNING in __mmdrop
Patched on: [ci-upstream-linux-next-kasan-gce-root], missing on: [ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 131d, last: 82d
Bisection: introduced by (bisect log):

commit 7f466032dc9e5a61217f22ea34b2df932786bbfc
Author: Jason Wang <jasowang@redhat.com>
Date: Fri May 24 08:12:18 2019 +0000

  vhost: access vq metadata through kernel virtual address

Tree: linux-next
Crash: BUG: Bad rss-counter state (log)
Repro: syz .config
duplicates (2):
Title Repro Bisected Count Last Reported Patched Status
KASAN: use-after-free Read in finish_task_switch (2) syz cause 1 92d 92d 0/14 closed as dup on 2019/07/24 07:07
KASAN: use-after-free Write in tlb_finish_mmu syz cause 1 92d 92d 0/14 closed as dup on 2019/07/24 07:07

Sample crash report:

Crashes (14):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-linux-next-kasan-gce-root 2019/07/19 03:34 linux-next 6d21a41b 7bb222f7 .config log report syz aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-kasan-gce-smack-root 2019/07/28 14:53 upstream 5168afe6 c85e1c5b .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-kasan-gce-smack-root 2019/07/28 12:51 upstream 5168afe6 c85e1c5b .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-kasan-gce-selinux-root 2019/07/22 00:36 upstream c6dd78fc 1656845f .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-kasan-gce-386 2019/07/19 19:07 upstream 3bfe1fc4 1656845f .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-kasan-gce-386 2019/07/18 20:59 upstream 22051d9c 7bb222f7 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/06/09 23:50 linux-next 3f310e51 0159583c .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, riel@surriel.com, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/07/23 10:09 linux-next 6d21a41b 55e0c077 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/07/20 23:27 linux-next 6d21a41b 1656845f .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/06/29 16:55 linux-next 48568d8c 7509bf36 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/06/27 12:09 linux-next 8087b004 7509bf36 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/06/26 18:15 linux-next 1dd45f17 7509bf36 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/06/22 16:49 linux-next dc636f5d 34bf9440 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/06/16 05:50 linux-next f4788d37 442206d7 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, wad@chromium.org