syzbot


WARNING in __mmdrop
Status: upstream: reported syz repro on 2019/07/19 03:35
Reported-by: syzbot+e58112d71f77113ddb7b@syzkaller.appspotmail.com
Fix commit: vhost: fix WARNING in __mmdrop
Patched on: [ci-upstream-linux-next-kasan-gce-root], missing on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 355d, last: 307d

Cause bisection: introduced by (bisect log):

commit 7f466032dc9e5a61217f22ea34b2df932786bbfc
Author: Jason Wang <jasowang@redhat.com>
Date: Fri May 24 08:12:18 2019 +0000

  vhost: access vq metadata through kernel virtual address

Crash: BUG: Bad rss-counter state (log)
Repro: syz .config
duplicates (2):
Title Repro Bisected Count Last Reported Patched Status
KASAN: use-after-free Read in finish_task_switch (2) syz cause 1 316d 316d 0/17 closed as dup on 2019/07/24 07:07
KASAN: use-after-free Write in tlb_finish_mmu syz cause 1 316d 316d 0/17 closed as dup on 2019/07/24 07:07
Patch testing requests:
Created Duration User Patch Repo Result
2019/07/23 02:26 17m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc OK
2019/07/22 12:26 10m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc error
2019/07/22 10:43 10m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc report log
2019/07/22 09:09 9m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc report log
2019/07/22 09:08 3m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc error
2019/07/22 08:33 17m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc OK
2019/07/22 07:33 16m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc OK
2019/07/22 04:35 10m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc report log
2019/07/22 04:17 10m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc report log
2019/07/22 03:31 18m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc error
2019/07/22 03:03 16m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc OK
2019/07/22 03:03 10m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc report log
2019/07/22 03:02 16m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc OK
2019/07/22 02:43 9m jasowang@redhat.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 7f466032dc9e5a61217f22ea34b2df932786bbfc report log
2019/07/22 02:27 18m jasowang@redhat.com patch linux-next error
2019/07/21 14:11 18m jasowang@redhat.com patch linux-next error
2019/07/21 14:11 18m jasowang@redhat.com patch linux-next error
2019/07/21 12:14 18m jasowang@redhat.com patch linux-next error
2019/07/21 11:23 18m jasowang@redhat.com upstream error

Sample crash report:

Crashes (14):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-linux-next-kasan-gce-root 2019/07/19 03:34 linux-next 6d21a41b 7bb222f7 .config log report syz aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-kasan-gce-smack-root 2019/07/28 14:53 upstream 5168afe6 c85e1c5b .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-kasan-gce-smack-root 2019/07/28 12:51 upstream 5168afe6 c85e1c5b .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-kasan-gce-selinux-root 2019/07/22 00:36 upstream c6dd78fc 1656845f .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-kasan-gce-386 2019/07/19 19:07 upstream 3bfe1fc4 1656845f .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-kasan-gce-386 2019/07/18 20:59 upstream 22051d9c 7bb222f7 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/07/23 10:09 linux-next 6d21a41b 55e0c077 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/07/20 23:27 linux-next 6d21a41b 1656845f .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, ldv@altlinux.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, viro@zeniv.linux.org.uk, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/06/29 16:55 linux-next 48568d8c 7509bf36 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/06/27 12:09 linux-next 8087b004 7509bf36 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/06/26 18:15 linux-next 1dd45f17 7509bf36 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/06/22 16:49 linux-next dc636f5d 34bf9440 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/06/16 05:50 linux-next f4788d37 442206d7 .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, wad@chromium.org
ci-upstream-linux-next-kasan-gce-root 2019/06/09 23:50 linux-next 3f310e51 0159583c .config log report aarcange@redhat.com, akpm@linux-foundation.org, christian@brauner.io, ebiederm@xmission.com, elena.reshetova@intel.com, guro@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, mhocko@suse.com, mingo@kernel.org, namit@vmware.com, peterz@infradead.org, riel@surriel.com, wad@chromium.org