Re: [syzbot] WARNING: suspicious RCU usage in find_inlist_lock

2021-04-13 Thread Dmitry Vyukov
On Sat, Apr 3, 2021 at 4:22 AM syzbot wrote: > > Hello, > > syzbot found the following issue on: > > HEAD commit:1e43c377 Merge tag 'xtensa-20210329' of git://github.com/j.. > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=114cdd4ad0 > kernel config:

Re: [syzbot] WARNING: suspicious RCU usage in lock_sock_nested

2021-04-13 Thread Dmitry Vyukov
On Mon, Apr 5, 2021 at 5:45 PM syzbot wrote: > > Hello, > > syzbot found the following issue on: > > HEAD commit:d19cc4bf Merge tag 'trace-v5.12-rc5' of git://git.kernel.o.. > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=14898326d0 > kernel config:

Re: [syzbot] BUG: unable to handle kernel access to user memory in sock_ioctl

2021-03-10 Thread Dmitry Vyukov
On Wed, Mar 10, 2021 at 7:28 PM syzbot wrote: > > Hello, > > syzbot found the following issue on: > > HEAD commit:0d7588ab riscv: process: Fix no prototype for arch_dup_tas.. > git tree: git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git > fixes > console output: https://syzk

Re: [PATCH] netdevsim: init u64 stats for 32bit hardware

2021-03-02 Thread Dmitry Vyukov
On Fri, Jan 29, 2021 at 6:36 AM Hillf Danton wrote: > > On 29 Jan 2021 2:58:22 Jakub Kicinski wrpte: > > >On Thu, 28 Jan 2021 10:43:16 +0800 Hillf Danton wrote: > > >> Init the u64 stats in order to avoid the lockdep prints on the 32bit > > >> hardware like > > > > > >Thanks for the fix! > > > > H

Re: KMSAN: uninit-value in bpf_iter_prog_supported

2021-02-08 Thread Dmitry Vyukov
On Sun, Feb 7, 2021 at 1:20 PM syzbot wrote: > > Hello, > > syzbot found the following issue on: > > HEAD commit:73d62e81 kmsan: random: prevent boot-time reports in _mix_.. > git tree: https://github.com/google/kmsan.git master > console output: https://syzkaller.appspot.com/x/log.txt?x

Re: [PATCH] netdevsim: init u64 stats for 32bit hardware

2021-01-27 Thread Dmitry Vyukov
t; fs/sysfs/file.c:139) > [<805b4b44>] (sysfs_kf_write) from [<805b3c90>] > (kernfs_fop_write_iter+0x128/0x1ec fs/kernfs/file.c:296) > [<805b3b68>] (kernfs_fop_write_iter) from [<804d22fc>] (call_write_iter > include/linux/fs.h:1901 [inline]) > [<8

Re: BUG: unable to handle kernel paging request in bpf_lru_populate

2020-12-07 Thread Dmitry Vyukov
On Mon, Dec 7, 2020 at 12:43 PM syzbot wrote: > > Hello, > > syzbot found the following issue on: > > HEAD commit:bcd684aa net/nfc/nci: Support NCI 2.x initial sequence > git tree: net-next > console output: https://syzkaller.appspot.com/x/log.txt?x=12001bd350 > kernel config: https

Re: BUG: rwlock bad magic on CPU, kworker/0:LINE/NUM, ADDR

2020-11-30 Thread Dmitry Vyukov
On Mon, Nov 30, 2020 at 12:33 PM syzbot wrote: > > Hello, > > syzbot found the following issue on: > > HEAD commit:90cf87d1 enetc: Let the hardware auto-advance the taprio b.. > git tree: net > console output: https://syzkaller.appspot.com/x/log.txt?x=135479b350 > kernel config: htt

Re: bpf test error: BUG: sleeping function called from invalid context in sta_info_move_state

2020-11-15 Thread Dmitry Vyukov
On Sat, Nov 14, 2020 at 9:42 AM syzbot wrote: > > Hello, > > syzbot found the following issue on: > > HEAD commit:96021828 MAINTAINERS/bpf: Update Andrii's entry. > git tree: bpf > console output: https://syzkaller.appspot.com/x/log.txt?x=102717be50 > kernel config: https://syzkalle

Re: INFO: rcu detected stall in batadv_nc_worker (3)

2020-10-01 Thread Dmitry Vyukov
On Thu, Oct 1, 2020 at 12:35 PM syzbot wrote: > > Hello, > > syzbot found the following issue on: > > HEAD commit:fffe3ae0 Merge tag 'for-linus-hmm' of git://git.kernel.org.. > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=17e0334290 > kernel config:

Re: KASAN: null-ptr-deref Read in x25_connect

2019-06-11 Thread Dmitry Vyukov
On Tue, Jun 11, 2019 at 2:39 PM Arnd Bergmann wrote: > > On Tue, Jun 11, 2019 at 9:18 AM syzbot > wrote: > > > > Hello, > > > > syzbot found the following crash on: > > > > HEAD commit:f4cfcfbd net: dsa: sja1105: Fix link speed not working at .. > > git tree: net > > console output: htt

Re: [PATCH] inet: frags: Remove unnecessary smp_store_release/READ_ONCE

2019-06-07 Thread Dmitry Vyukov
On Fri, May 31, 2019 at 7:11 PM Eric Dumazet wrote: > > On Fri, May 31, 2019 at 9:29 AM Andrea Parri > wrote: > > > > On Fri, May 31, 2019 at 08:45:47AM -0700, Eric Dumazet wrote: > > > On 5/31/19 7:45 AM, Herbert Xu wrote: > > > > > > In this case the code doesn't need them because an implicit >

Re: general protection fault in tcp_v6_connect

2019-06-02 Thread Dmitry Vyukov
On Mon, Jun 3, 2019 at 5:29 AM David Ahern wrote: > > On 6/1/19 12:05 AM, syzbot wrote: > > Hello, > > > > syzbot found the following crash on: > > > > HEAD commit:f4aa8012 cxgb4: Make t4_get_tp_e2c_map static > > git tree: net-next > > console output: https://syzkaller.appspot.com/x/log

Re: [PATCH] inet: frags: Remove unnecessary smp_store_release/READ_ONCE

2019-05-31 Thread Dmitry Vyukov
On Wed, May 29, 2019 at 7:48 AM Herbert Xu wrote: > > On Wed, May 29, 2019 at 07:43:51AM +0200, Dmitry Vyukov wrote: > > > > If fqdir->dead read/write are concurrent, then this still needs to be > > READ_ONCE/WRITE_ONCE. Ordering is orthogonal to atomicity. >

Re: [PATCH] inet: frags: Remove unnecessary smp_store_release/READ_ONCE

2019-05-28 Thread Dmitry Vyukov
On Wed, May 29, 2019 at 7:40 AM Herbert Xu wrote: > > On Tue, May 28, 2019 at 06:31:00AM -0700, Eric Dumazet wrote: > > > > This smp_store_release() is a left over of the first version of the patch, > > where > > there was no rcu grace period enforcement. > > > > I do not believe there is harm le

Re: [PATCH] aio: prevent the final fput() in the middle of vfs_poll() (Re: KASAN: use-after-free Read in unix_dgram_poll)

2019-03-03 Thread Dmitry Vyukov
On Sun, Mar 3, 2019 at 4:19 PM Al Viro wrote: > > On Sun, Mar 03, 2019 at 01:55:02PM +, Al Viro wrote: > > > Maybe unrelated to this bug, but... What's to prevent a wakeup > > that happens just after we'd been added to a waitqueue by ->poll() > > triggering aio_poll_wake(), which gets to aio_

Re: BUG: unable to handle kernel paging request in bpf_prog_kallsyms_add

2019-03-03 Thread Dmitry Vyukov
On Mon, Sep 10, 2018 at 10:31 AM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:f6f3bac08ff9 tools/bpf: bpftool: add net support > git tree: bpf-next > console output: https://syzkaller.appspot.com/x/log.txt?x=1794005640 > kernel config: https://sy

Re: KMSAN: uninit-value in br_mdb_ip_get

2019-02-21 Thread Dmitry Vyukov
On Mon, Jan 28, 2019 at 8:13 PM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:02f2d5aea531 kmsan: (presumably) fix dma_map_page_attrs() > git tree: kmsan > console output: https://syzkaller.appspot.com/x/log.txt?x=173a7310c0 > kernel config: https

Re: KASAN: use-after-free Read in br_mdb_ip_get

2019-02-21 Thread Dmitry Vyukov
On Wed, Feb 20, 2019 at 11:23 AM Herbert Xu wrote: > > On Mon, Jan 28, 2019 at 09:28:36AM +0100, Dmitry Vyukov wrote: > > > > > Weird, this is the kfree() on the error path of br_multicast_new_group() > > > when rhashtable_lookup_insert_fast() fails, which means

Re: KASAN: slab-out-of-bounds Read in tls_push_record

2019-02-20 Thread Dmitry Vyukov
On Wed, Sep 26, 2018 at 9:49 AM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:739d0def85ca Merge branch 'hv_netvsc-Support-LRO-RSC-in-th.. > git tree: net-next > console output: https://syzkaller.appspot.com/x/log.txt?x=13aa179e40 > kernel config:

Re: KASAN: slab-out-of-bounds Write in tls_push_record (2)

2019-02-20 Thread Dmitry Vyukov
On Thu, Aug 2, 2018 at 3:05 PM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:44960f2a7b63 staging: ashmem: Fix SIGBUS crash when traver.. > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=10f7ea7240 > kernel config:

Re: general protection fault in tc_ctl_chain

2019-02-19 Thread Dmitry Vyukov
On Tue, Feb 19, 2019 at 10:10 AM Vlad Buslov wrote: > > This is fixed by Dan Carpenter's patch "net: sched: potential NULL > dereference in tcf_block_find()" that was submitted yesterday. +Dan Let's tell syzbot that this is fixed: #syz fix: net: sched: potential NULL dereference in tcf_block_fi

Re: KASAN: use-after-free Read in sctp_outq_tail

2019-02-13 Thread Dmitry Vyukov
On Wed, Feb 13, 2019 at 2:52 PM Marcelo Ricardo Leitner wrote: > > On Wed, Feb 13, 2019 at 12:35:56PM +0800, Xin Long wrote: > > On Wed, Feb 13, 2019 at 4:00 AM syzbot > > wrote: > > > > > > Hello, > > > > > > syzbot found the following crash on: > > > > > > HEAD commit:d4104460aec1 Add linux

Re: KASAN: use-after-free Read in sctp_outq_tail

2019-02-13 Thread Dmitry Vyukov
On Wed, Feb 13, 2019 at 5:36 AM Xin Long wrote: > > On Wed, Feb 13, 2019 at 4:00 AM syzbot > wrote: > > > > Hello, > > > > syzbot found the following crash on: > > > > HEAD commit:d4104460aec1 Add linux-next specific files for 20190211 > > git tree: linux-next > > console output: https:

Re: KASAN: use-after-free Read in sctp_outq_tail

2019-02-13 Thread Dmitry Vyukov
On Tue, Feb 12, 2019 at 8:19 PM Marcelo Ricardo Leitner wrote: > > On Tue, Feb 12, 2019 at 11:04:27AM -0800, syzbot wrote: > > Hello, > > > > syzbot found the following crash on: > > > > HEAD commit:d4104460aec1 Add linux-next specific files for 20190211 > > git tree: linux-next > > I ca

Re: KASAN: use-after-free Read in __wake_up_common_lock

2019-02-05 Thread Dmitry Vyukov
On Wed, Jan 30, 2019 at 10:02 PM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:62967898789d Merge git://git.kernel.org/pub/scm/linux/kern.. > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=10f0bf08c0 > kernel config:

Re: WARNING: refcount bug in nr_release

2019-02-04 Thread Dmitry Vyukov
On Mon, Jan 7, 2019 at 10:53 AM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:f1c2f8857c5a Merge tag 'powerpc-4.21-2' of git://git.kerne.. > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=16af96bb40 > kernel config:

Re: KASAN: use-after-free Read in selinux_netlbl_socket_setsockopt

2019-02-04 Thread Dmitry Vyukov
On Fri, Feb 1, 2019 at 6:58 PM Cong Wang wrote: > > On Thu, Jan 31, 2019 at 10:56 PM Dmitry Vyukov wrote: > > Hi Paul, > > > > Searching for af_netrom across other syzbot bugs: > > https://groups.google.com/forum/#!searchin/syzkaller-bugs/af_netrom%7Csort:date >

Re: KASAN: use-after-free Read in selinux_netlbl_socket_setsockopt

2019-01-31 Thread Dmitry Vyukov
On Wed, Jan 30, 2019 at 10:30 PM Paul Moore wrote: > > On Wed, Jan 30, 2019 at 4:01 PM syzbot > wrote: > > > > Hello, > > > > syzbot found the following crash on: > > > > HEAD commit:62967898789d Merge git://git.kernel.org/pub/scm/linux/kern.. > > git tree: upstream > > console output:

Re: general protection fault in __xfrm_policy_bysel_ctx

2019-01-31 Thread Dmitry Vyukov
On Wed, Jan 30, 2019 at 3:30 PM Dmitry Vyukov wrote: > > On Wed, Jan 30, 2019 at 3:20 PM Florian Westphal wrote: > > > > Dmitry Vyukov wrote: > > > > syzbot wrote: > > > > > Hello, > > > > > > > > > > syzbot found t

Re: general protection fault in __xfrm_policy_bysel_ctx

2019-01-30 Thread Dmitry Vyukov
On Wed, Jan 30, 2019 at 3:20 PM Florian Westphal wrote: > > Dmitry Vyukov wrote: > > > syzbot wrote: > > > > Hello, > > > > > > > > syzbot found the following crash on: > > > > > > > > HEAD commit:085c4c7dd2

Re: general protection fault in __xfrm_policy_bysel_ctx

2019-01-30 Thread Dmitry Vyukov
On Tue, Jan 29, 2019 at 10:41 AM Florian Westphal wrote: > > syzbot wrote: > > Hello, > > > > syzbot found the following crash on: > > > > HEAD commit:085c4c7dd2b6 net: lmc: remove -I. header search path > > git tree: net-next > > console output: https://syzkaller.appspot.com/x/log.txt?

Re: INFO: task hung in vhost_init_device_iotlb

2019-01-30 Thread Dmitry Vyukov
On Tue, Jan 29, 2019 at 5:06 PM Michael S. Tsirkin wrote: > > On Tue, Jan 29, 2019 at 01:22:02AM -0800, syzbot wrote: > > Hello, > > > > syzbot found the following crash on: > > > > HEAD commit:983542434e6b Merge tag 'edac_fix_for_5.0' of git://git.ker.. > > git tree: upstream > > consol

Re: KASAN: use-after-free Read in br_mdb_ip_get

2019-01-28 Thread Dmitry Vyukov
On Sun, Jan 27, 2019 at 10:34 PM Nikolay Aleksandrov wrote: > > On 27/01/2019 22:26, syzbot wrote: > > Hello, > > > > syzbot found the following crash on: > > > > HEAD commit:ba6069759381 Merge tag 'mmc-v5.0-rc2' of git://git.kernel... > > git tree: upstream > > console output: https://s

[PATCH] net/rose: fix NULL ax25_cb kernel panic

2019-01-25 Thread Dmitry Vyukov
as reported many times and recently with syzbot. We need to test if ax25 is NULL before using it. Testing: Built kernel with CONFIG_ROSE=y. Signed-off-by: Bernard Pidoux Acked-by: Dmitry Vyukov Reported-by: syzbot+1a2c456a1ea08fa5b...@syzkaller.appspotmail.com Cc: "David S. Miller" Cc:

Re: INFO: rcu detected stall in ndisc_alloc_skb

2019-01-20 Thread Dmitry Vyukov
On Sat, Jan 19, 2019 at 2:10 PM Tetsuo Handa wrote: > > On 2019/01/19 21:16, Dmitry Vyukov wrote: > >> The question for me is, whether sysbot can detect hash collision with > >> different > >> syz-program lines before writing the hash value to /dev/kmsg, and

Re: [PATCH] NET:AX25:ROSE NULL ax25_cb kernel panic

2019-01-20 Thread Dmitry Vyukov
On Sun, Jan 20, 2019 at 10:58 AM f6bvp wrote: > > Hi, > > Dmitry wrote: > > >Please also add: > >Reported-by: syzbot+1a2c456a1ea08fa5b...@syzkaller.appspotmail.com > > I did mention syzbot report but without the exact reference, thanks. > > >It's this report we are fixing, right? > >https://syzkal

Re: INFO: rcu detected stall in ndisc_alloc_skb

2019-01-19 Thread Dmitry Vyukov
On Fri, Jan 18, 2019 at 6:20 AM Tetsuo Handa wrote: > > Dmitry Vyukov wrote: > > On Sun, Jan 6, 2019 at 2:47 PM Tetsuo Handa > > wrote: > > > > > > On 2019/01/06 22:24, Dmitry Vyukov wrote: > > > >> A report at 2019/01/05 10:08 from

Re: [PATCH] NET:AX25:ROSE NULL ax25_cb kernel panic

2019-01-19 Thread Dmitry Vyukov
On Sat, Jan 19, 2019 at 11:58 AM f6bvp wrote: > > > [PATCH] [ROSE] NULL ax25_cb kernel panic > > When an internally generated frame is handled by rose_xmit(), > rose_route_frame() is called: > > if (!rose_route_frame(skb, NULL)) { > dev_kfree_skb(skb); > sta

Re: net/core: BUG in copy_net_ns()

2019-01-15 Thread Dmitry Vyukov
On Mon, Jan 14, 2019 at 7:30 PM Eric W. Biederman wrote: > > zzoru writes: > > > I think that it is exactly same to: > > https://groups.google.com/forum/#!searchin/linux.kernel/cleanup_net$20is$20slow%7Csort:date/linux.kernel/IMJ9OzonDSI/QH86oy1PAQAJ > > Already, patch was maded, but maybe he for

Re: net/core: BUG in copy_net_ns()

2019-01-14 Thread Dmitry Vyukov
On Sat, Jan 12, 2019 at 11:34 AM zzoru wrote: > > Probably, there is a memory bug on net object by setup_net() -> ops_init(). > (ipv4_sysctl_init_net, ipmr_net_init, etc...) > I also found that this bug can reproduce v4.18-rc1~ > > On Sat, Jan 12, 2019 at 8:51 AM Eric W. Biederman > wrote: >>

Re: KMSAN: kernel-infoleak in sctp_getsockopt

2019-01-14 Thread Dmitry Vyukov
On Mon, Jan 14, 2019 at 10:58 AM 'Alexander Potapenko' via syzkaller-bugs wrote: > > On Mon, Jan 14, 2019 at 10:56 AM Xin Long wrote: > > > > On Mon, Jan 14, 2019 at 5:34 PM Alexander Potapenko > > wrote: > > > > > > On Mon, Dec 10, 2018 at 9:56 AM Xin Long wrote: > > > > > > > > On Thu, Dec 6

Re: KASAN: null-ptr-deref Read in ip6_hold_safe

2019-01-13 Thread Dmitry Vyukov
On Mon, Jan 14, 2019 at 7:52 AM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:b71acb0e3721 Merge branch 'linus' of git://git.kernel.org/.. > git tree: net-next > console output: https://syzkaller.appspot.com/x/log.txt?x=1492759f40 > kernel config:

Re: INFO: task hung in genl_family_rcv_msg

2019-01-11 Thread Dmitry Vyukov
On Fri, Jan 11, 2019 at 11:09 AM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:1bdbe2274920 Merge tag 'vfio-v5.0-rc2' of git://github.com.. > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=100dc60740 > kernel config:

Re: [PATCH net] tipc: fix uninit-value in tipc_nl_compat_link_set

2019-01-07 Thread Dmitry Vyukov
On Mon, Jan 7, 2019 at 2:38 PM David Miller wrote: > > From: Ying Xue > Date: Mon, 7 Jan 2019 19:29:52 +0800 > > > This is because lc->name string is not validated before it's used. > > It looks like we have several situations like this, not just this one. > > For example, tipc_nl_compat_bearer_{

Re: INFO: rcu detected stall in ndisc_alloc_skb

2019-01-07 Thread Dmitry Vyukov
On Sun, Jan 6, 2019 at 2:47 PM Tetsuo Handa wrote: > > On 2019/01/06 22:24, Dmitry Vyukov wrote: > >> A report at 2019/01/05 10:08 from "no output from test machine (2)" > >> ( https://syzkaller.appspot.com/text?tag=CrashLog&x=1700726f40 ) > >>

Re: kernel panic: stack is corrupted in udp4_lib_lookup2

2019-01-07 Thread Dmitry Vyukov
On Fri, Jan 4, 2019 at 7:05 PM Stefano Brivio wrote: > > On Fri, 4 Jan 2019 18:26:16 +0100 > Dmitry Vyukov wrote: > > > On Fri, Jan 4, 2019 at 6:14 PM Stefano Brivio wrote: > > > > > > On Fri, 4 Jan 2019 12:05:04 +0100 > > > Dmitry Vyukov w

Re: INFO: rcu detected stall in ndisc_alloc_skb

2019-01-06 Thread Dmitry Vyukov
On Sat, Jan 5, 2019 at 11:49 AM Tetsuo Handa wrote: > > On 2019/01/03 2:06, Tetsuo Handa wrote: > > On 2018/12/31 17:24, Dmitry Vyukov wrote: > >>>> Since this involves OOMs and looks like a one-off induced memory > >>>> corruption: > >>>&

Re: WARNING in mem_cgroup_update_lru_size

2019-01-05 Thread Dmitry Vyukov
On Fri, Jan 4, 2019 at 11:58 PM syzbot wrote: > > syzbot has found a reproducer for the following crash on: > > HEAD commit:96d4f267e40f Remove 'type' argument from access_ok() funct.. > git tree: net > console output: https://syzkaller.appspot.com/x/log.txt?x=160c9a80c0 > kernel con

Re: kernel panic: stack is corrupted in udp4_lib_lookup2

2019-01-04 Thread Dmitry Vyukov
On Fri, Jan 4, 2019 at 6:14 PM Stefano Brivio wrote: > > On Fri, 4 Jan 2019 12:05:04 +0100 > Dmitry Vyukov wrote: > > > On Fri, Jan 4, 2019 at 11:54 AM Stefano Brivio wrote: > > > > > > On Fri, 4 Jan 2019 11:32:12 +0100 > > > Dmitry Vyukov wrote:

Re: kernel panic: corrupted stack end detected inside scheduler (3)

2019-01-04 Thread Dmitry Vyukov
On Thu, Aug 2, 2018 at 10:14 AM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:fea49f60c9b7 net: ethernet: ti: cpsw: replace unnecessaril.. > git tree: net-next > console output: https://syzkaller.appspot.com/x/log.txt?x=16d5fae840 > kernel config:

Re: kernel panic: stack is corrupted in udp4_lib_lookup2

2019-01-04 Thread Dmitry Vyukov
On Fri, Jan 4, 2019 at 11:54 AM Stefano Brivio wrote: > > On Fri, 4 Jan 2019 11:32:12 +0100 > Dmitry Vyukov wrote: > > > On Thu, Jan 3, 2019 at 10:54 PM Stefano Brivio wrote: > > > > > > On Thu, 3 Jan 2019 15:15:06 -0600 > > > Willem de Bruijn wrote

Re: kernel panic: stack is corrupted in udp4_lib_lookup2

2019-01-04 Thread Dmitry Vyukov
On Fri, Jan 4, 2019 at 11:32 AM Dmitry Vyukov wrote: > > On Thu, Jan 3, 2019 at 10:54 PM Stefano Brivio wrote: > > > > On Thu, 3 Jan 2019 15:15:06 -0600 > > Willem de Bruijn wrote: > > > > > syzbot generated stack traces with > > > > > >

Re: kernel panic: stack is corrupted in udp4_lib_lookup2

2019-01-04 Thread Dmitry Vyukov
On Thu, Jan 3, 2019 at 10:54 PM Stefano Brivio wrote: > > On Thu, 3 Jan 2019 15:15:06 -0600 > Willem de Bruijn wrote: > > > syzbot generated stack traces with > > > > [ 183.517380] udpv6_err+0x46/0x60 > > [ 183.520739] ? __udp6_lib_err+0x1890/0x1890 > > [ 183.525054] gue6_err_proto_handler+

Re: KASAN: use-after-free Read in kobject_put

2019-01-04 Thread Dmitry Vyukov
On Fri, Jan 4, 2019 at 10:46 AM syzbot wrote: > > syzbot has found a reproducer for the following crash on: > > HEAD commit:645ff1e8e704 Merge branch 'for-linus' of git://git.kernel... > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=172cee4b40 > kerne

Re: BUG: unable to handle kernel NULL pointer dereference in setup_kmem_cache_node

2019-01-02 Thread Dmitry Vyukov
On Wed, Jan 2, 2019 at 4:51 PM Christopher Lameter wrote: > > On Wed, 2 Jan 2019, Dmitry Vyukov wrote: > > > Am I missing something or __alloc_alien_cache misses check for > > kmalloc_node result? > > > > static struct alien_cache *__alloc_

Re: BUG: unable to handle kernel NULL pointer dereference in setup_kmem_cache_node

2019-01-02 Thread Dmitry Vyukov
On Wed, Jan 2, 2019 at 12:36 PM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:903b77c63167 Merge tag 'linux-kselftest-4.21-rc1' of git:/.. > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=133428e340 > kernel config:

Re: [ROSE] rose dereferenced pointer kernel panic

2019-01-02 Thread Dmitry Vyukov
e failure situation when rose_route_frame is called with a NULL > pointer. > > Could you explain with full details how to have "TCP/IP over AX.25 fully > configured" ? > > More specifically how can we configure rose device without NOARP ? This is > not the case whe

Re: Fwd: net/rose: GPF in rose_route_frame

2019-01-02 Thread Dmitry Vyukov
ss right? > What this person specified is neither a legal IP (not in octal) nor legal MAC > (needs six fields). > > --David > > > Forwarded Message > Subject: net/rose: GPF in rose_route_frame > Date: Mon, 24 Dec 2018 11:25:22 +0100 > From: Dmitry

Re: net build error

2018-12-31 Thread Dmitry Vyukov
On Sun, Sep 23, 2018 at 10:14 AM Dmitry Vyukov wrote: > > On Sun, Sep 23, 2018 at 9:42 AM, syzbot > wrote: > > Hello, > > > > syzbot found the following crash on: > > > > HEAD commit:474ff2600889 net-ethtool: ETHTOOL_GUFO did not and should .. >

Re: INFO: rcu detected stall in ndisc_alloc_skb

2018-12-31 Thread Dmitry Vyukov
On Mon, Dec 31, 2018 at 9:17 AM Tetsuo Handa wrote: > > On 2018/12/31 16:49, Dmitry Vyukov wrote: > > On Mon, Dec 31, 2018 at 8:42 AM syzbot > > wrote: > >> > >> Hello, > >> > >> syzbot found the following crash on: > >> &

Re: INFO: rcu detected stall in ndisc_alloc_skb

2018-12-30 Thread Dmitry Vyukov
On Mon, Dec 31, 2018 at 8:42 AM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:ef4ab8447aa2 selftests: bpf: install script with_addr.sh > git tree: bpf-next > console output: https://syzkaller.appspot.com/x/log.txt?x=14a28b6e40 > kernel config: htt

Re: WARNING in batadv_is_on_batman_iface

2018-12-30 Thread Dmitry Vyukov
On Sun, Dec 30, 2018 at 12:00 PM Sven Eckelmann wrote: > > On Sunday, 30 December 2018 11.41.03 CET syzbot wrote: > [...] > > HEAD commit:d8924c0d76aa Merge tag 'devprop-4.21-rc1' of git://git.ker.. > > git tree: upstream > > console output: https://syzkaller.appspot.com/x/log.txt?x=122a

Re: KASAN: use-after-free Write in __xfrm_policy_unlink

2018-12-27 Thread Dmitry Vyukov
On Wed, Dec 26, 2018 at 11:42 AM Florian Westphal wrote: > > syzbot wrote: > > syzbot has found a reproducer for the following crash on: > > > > HEAD commit:ce28bb445388 Merge git://git.kernel.org/pub/scm/linux/kern.. > > git tree: net-next > > console output: https://syzkaller.appspot.

net/rose: GPF in rose_route_frame

2018-12-24 Thread Dmitry Vyukov
Hi, Rose device crashes kernel after several seconds after up'ping. I am doing just: # ip link set dev rose0 address 11:22:33:44:55 # ip link set dev rose0 up Then after ~15 seconds or so: kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access gene

Re: INFO: rcu detected stall in pfkey_sendmsg

2018-12-19 Thread Dmitry Vyukov
On Wed, Dec 19, 2018 at 7:37 PM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:a26d94bff4d5 net: bridge: remove unneeded variable 'err' > git tree: net-next > console output: https://syzkaller.appspot.com/x/log.txt?x=14c7a4cd40 > kernel config: htt

Re: WARNING in __rcu_read_unlock

2018-12-18 Thread Dmitry Vyukov
On Tue, Dec 18, 2018 at 3:13 PM Stefano Brivio wrote: > > [Dropping syzbot from Cc:] > > On Tue, 18 Dec 2018 14:26:00 +0100 > Dmitry Vyukov wrote: > > > On Tue, Dec 18, 2018 at 1:40 PM Stefano Brivio > > wrote: > > > > > Maybe it would be nic

Re: WARNING in __rcu_read_unlock

2018-12-18 Thread Dmitry Vyukov
On Tue, Dec 18, 2018 at 1:40 PM Stefano Brivio wrote: > > On Tue, 18 Dec 2018 09:49:17 +0100 > Dmitry Vyukov wrote: > > > On Tue, Dec 18, 2018 at 12:18 AM Stefano Brivio wrote: > > > > > > On Mon, 17 Dec 2018 16:53:36 +0100 > > > Dmitry Vyukov wrot

Re: WARNING in __rcu_read_unlock

2018-12-18 Thread Dmitry Vyukov
On Tue, Dec 18, 2018 at 12:18 AM Stefano Brivio wrote: > > On Mon, 17 Dec 2018 16:53:36 +0100 > Dmitry Vyukov wrote: > > > On Mon, Dec 17, 2018 at 4:24 PM Stefano Brivio wrote: > > > > > > On Mon, 17 Dec 2018 06:57:35 -0800 > > > Eric Dumazet

Re: WARNING in __rcu_read_unlock

2018-12-17 Thread Dmitry Vyukov
On Mon, Dec 17, 2018 at 12:29 PM Paul E. McKenney wrote: > Any chance of a bisection? Better later then never. Bisection also needs testing :) syz-bisect -config bisect.cfg -crash dda626cdbd87eafe9a755acbbe102e2b6096b256 searching for guilty commit starting from 2aa55dccf83d building syzkaller o

Re: WARNING in __rcu_read_unlock

2018-12-17 Thread Dmitry Vyukov
On Mon, Dec 17, 2018 at 4:24 PM Stefano Brivio wrote: > > On Mon, 17 Dec 2018 06:57:35 -0800 > Eric Dumazet wrote: > > > Might be cause by commit b8a51b38e4d4dec3e379d52c0fe1a66827f7cf1e > > fou, fou6: ICMP error handlers for FoU and GUE > > This: > > diff --git a/net/ipv4/fou.c b/net/ipv4/fou.c

Re: WARNING in __rcu_read_unlock

2018-12-17 Thread Dmitry Vyukov
On Mon, Dec 17, 2018 at 4:00 PM Stefano Brivio wrote: > > On Mon, 17 Dec 2018 06:57:35 -0800 > Eric Dumazet wrote: > > > Might be cause by commit b8a51b38e4d4dec3e379d52c0fe1a66827f7cf1e > > fou, fou6: ICMP error handlers for FoU and GUE > > Most likely, yes. > > > Please Stefano take a look, tha

Re: WARNING in __rcu_read_unlock

2018-12-17 Thread Dmitry Vyukov
On Mon, Dec 17, 2018 at 3:14 PM Arjan van de Ven wrote: > > On 12/17/2018 3:29 AM, Paul E. McKenney wrote: > > As does this sort of report on a line that contains simple integer > > arithmetic and boolean operations.;-) > > > > Any chance of a bisection? > > btw this looks like something caused a

Re: WARNING in __rcu_read_unlock

2018-12-17 Thread Dmitry Vyukov
On Mon, Dec 17, 2018 at 12:29 PM Paul E. McKenney wrote: > > On Mon, Dec 17, 2018 at 10:44:52AM +0100, Dmitry Vyukov wrote: > > On Sun, Dec 16, 2018 at 8:04 PM Paul E. McKenney > > wrote: > > > > > > On Sat, Dec 15, 2018 at 04:41:03AM -0800, syzbot wrote: &

Re: WARNING in __rcu_read_unlock

2018-12-17 Thread Dmitry Vyukov
On Sun, Dec 16, 2018 at 8:04 PM Paul E. McKenney wrote: > > On Sat, Dec 15, 2018 at 04:41:03AM -0800, syzbot wrote: > > Hello, > > > > syzbot found the following crash on: > > > > HEAD commit:2aa55dccf83d hns3: prevent building without CONFIG_INET > > git tree: net-next > > console outpu

Re: general protection fault in watchdog

2018-12-14 Thread Dmitry Vyukov
On Fri, Dec 14, 2018 at 5:53 PM Michal Hocko wrote: > > On Fri 14-12-18 15:31:44, Dmitry Vyukov wrote: > > On Fri, Dec 14, 2018 at 2:54 PM Michal Hocko wrote: > > > > > > On Fri 14-12-18 14:42:33, Dmitry Vyukov wrote: > > > > On Fri, D

Re: general protection fault in watchdog

2018-12-14 Thread Dmitry Vyukov
On Fri, Dec 14, 2018 at 2:54 PM Michal Hocko wrote: > > On Fri 14-12-18 14:42:33, Dmitry Vyukov wrote: > > On Fri, Dec 14, 2018 at 2:28 PM Michal Hocko wrote: > > > > > > On Fri 14-12-18 14:11:05, Dmitry Vyukov wrote: > > > > On Fri, Dec

Re: KASAN: use-after-free Read in tipc_group_cong

2018-12-13 Thread Dmitry Vyukov
On Thu, Dec 13, 2018 at 1:24 PM Jon Maloy wrote: > > > > > -Original Message- > > From: Dmitry Vyukov > > Sent: 13-Dec-18 04:47 > > To: Jon Maloy > > Cc: syzbot+9845fed98688e01f4...@syzkaller.appspotmail.com; David Miller > > ; LKML ; netdev

Re: KASAN: use-after-free Read in tipc_group_cong

2018-12-13 Thread Dmitry Vyukov
On Thu, Dec 13, 2018 at 1:16 AM Jon Maloy wrote: > > -Original Message- > > From: syzbot > > Sent: 12-Dec-18 06:11 > > To: da...@davemloft.net; Jon Maloy ; linux- > > ker...@vger.kernel.org; netdev@vger.kernel.org; syzkaller- > > b...@googlegroups.com; tipc-discuss...@lists.sourceforge.ne

Re: general protection fault in __bfs

2018-12-12 Thread Dmitry Vyukov
On Wed, Dec 12, 2018 at 12:02 PM Dmitry Vyukov wrote: > > On Wed, Dec 12, 2018 at 11:57 AM syzbot > wrote: > > > > Hello, > > > > syzbot found the following crash on: > > > > HEAD commit:f5d582777bcb Merge branch 'for-linus' of git:/

Re: general protection fault in __ip_append_data

2018-12-12 Thread Dmitry Vyukov
On Wed, Dec 12, 2018 at 11:57 AM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:f5d582777bcb Merge branch 'for-linus' of git://git.kernel... > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=16e03afb40 > kernel config:

Re: general protection fault in __bfs

2018-12-12 Thread Dmitry Vyukov
On Wed, Dec 12, 2018 at 11:57 AM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:f5d582777bcb Merge branch 'for-linus' of git://git.kernel... > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=1657b01b40 > kernel config:

Re: tipc: NULL deref in tipc_net_finalize

2018-12-12 Thread Dmitry Vyukov
On Mon, Dec 10, 2018 at 4:33 PM Dmitry Vyukov wrote: > > Hello, > > The following program crashes upstream kernel on > 40e020c129cfc991e8ab4736d2665351ffd1468d (Dec 9) with: > > BUG: unable to handle kernel NULL pointer dereference at 0001 > PGD 0 P4D 0 > Oo

Re: INFO: task hung in ctrl_getfamily

2018-12-11 Thread Dmitry Vyukov
On Tue, Dec 11, 2018 at 11:03 AM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:40e020c129cf Linux 4.20-rc6 > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=146ff5a340 > kernel config: https://syzkaller.appspot.com/x

Re: KMSAN: uninit-value in __inet6_bind

2018-12-11 Thread Dmitry Vyukov
On Tue, Dec 11, 2018 at 1:41 AM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit:3f06bda61398 kmsan: remove excessive KMSAN wrappers from a.. > git tree: https://github.com/google/kmsan.git/master > console output: https://syzkaller.appspot.com/x/log.txt?

Re: [Patch net] tipc: use lock_sock() in tipc_sk_reinit()

2018-12-10 Thread Dmitry Vyukov
ocking, we have to hold the sock refcnt before > rhashtable_walk_stop() and release it after rhashtable_walk_start(). Thanks for the quick fix! > Fixes: 07f6c4bc048a ("tipc: convert tipc reference table to use generic > rhashtable") > Reported-by: Dmitry Vyukov > Cc:

tipc: NULL deref in tipc_net_finalize

2018-12-10 Thread Dmitry Vyukov
Hello, The following program crashes upstream kernel on 40e020c129cfc991e8ab4736d2665351ffd1468d (Dec 9) with: BUG: unable to handle kernel NULL pointer dereference at 0001 PGD 0 P4D 0 Oops: [#1] SMP PTI CPU: 1 PID: 45 Comm: kworker/1:1 Not tainted 4.20.0-rc6 #3 Hardware name: QE

Re: KASAN: use-after-free Read in __lock_sock

2018-12-06 Thread Dmitry Vyukov
On Thu, Dec 6, 2018 at 8:21 AM Xin Long wrote: > > On Thu, Dec 6, 2018 at 3:32 AM syzbot > wrote: > > > > syzbot has found a reproducer for the following crash on: > > > > HEAD commit:0072a0c14d5b Merge tag 'media/v4.20-4' of git://git.kernel.. > > git tree: upstream > > console output:

Re: [PATCH net] rtnetlink: Refine sanity checks in rtnl_fdb_{add|del}

2018-11-30 Thread Dmitry Vyukov
On Fri, Nov 30, 2018 at 4:02 PM, Ido Schimmel wrote: > On Fri, Nov 30, 2018 at 08:59:09AM -0700, David Ahern wrote: >> This does not repro for me: >> # ./a.out >> Invalid address length 6 - must be 4 bytes >> RTNETLINK answers: No buffer space available >> RTNETLINK answers: Operation not supporte

Re: KASAN: out-of-bounds in update_curr

2018-11-27 Thread Dmitry Vyukov
On Tue, Nov 27, 2018 at 4:20 PM, syzbot wrote: > Hello, > > syzbot found the following crash on: > > HEAD commit:4bffc669d624 net: remove unsafe skb_insert() > git tree: net-next > console output: https://syzkaller.appspot.com/x/log.txt?x=1385db8340 > kernel config: https://syzkalle

Re: WARNING: bad usercopy in corrupted (2)

2018-11-26 Thread Dmitry Vyukov
On Mon, Nov 26, 2018 at 12:07 AM, Matthew Wilcox wrote: >> > Hello, >> > >> > syzbot found the following crash on: >> > >> > HEAD commit:aea0a897af9e ptp: Fix pass zero to ERR_PTR() in >> > ptp_clock_.. >> > git tree: net-next >> >> If you found it on net-next, I'd suggets cc'ing linux-

Re: BUG: corrupted list in p9_read_work

2018-10-11 Thread Dmitry Vyukov
On Thu, Oct 11, 2018 at 3:27 PM, Dmitry Vyukov wrote: > On Thu, Oct 11, 2018 at 3:10 PM, Dominique Martinet > wrote: >> Dmitry Vyukov wrote on Thu, Oct 11, 2018: >>> > That's still the tricky part, I'm afraid... Making a separate server >>> > would h

Re: BUG: corrupted list in p9_read_work

2018-10-11 Thread Dmitry Vyukov
On Thu, Oct 11, 2018 at 3:10 PM, Dominique Martinet wrote: > Dmitry Vyukov wrote on Thu, Oct 11, 2018: >> > That's still the tricky part, I'm afraid... Making a separate server >> > would have been easy because I could have reused some of my junk for the >> &g

Re: BUG: corrupted list in p9_read_work

2018-10-11 Thread Dmitry Vyukov
On Wed, Oct 10, 2018 at 5:58 PM, Dominique Martinet wrote: > Dmitry Vyukov wrote on Wed, Oct 10, 2018: >> > The problem is that you can't just give the client a file like trans fd; >> > you'd need to open an ""rdma socket"" (simplifying wording a

Re: net/tipc: recursive locking in tipc_link_reset

2018-10-11 Thread Dmitry Vyukov
On Thu, Oct 11, 2018 at 2:03 PM, Ying Xue wrote: >>> Hi, >>> >>> I am getting the following error while booting the latest kernel on >>> bb2d8f2f61047cbde08b78ec03e4ebdb01ee5434 (Oct 10). Config is attached. >>> >>> Since this happens during boot, this makes LOCKDEP completely >>> unusable, does n

Re: net/tipc: recursive locking in tipc_link_reset

2018-10-11 Thread Dmitry Vyukov
On Thu, Oct 11, 2018 at 9:55 AM, Dmitry Vyukov wrote: > Hi, > > I am getting the following error while booting the latest kernel on > bb2d8f2f61047cbde08b78ec03e4ebdb01ee5434 (Oct 10). Config is attached. > > Since this happens during boot, this makes LOCKDEP completely > unu

Re: [PATCH v2 net] inet: frags: rework rhashtable dismantle

2018-10-02 Thread Dmitry Vyukov
On Tue, Oct 2, 2018 at 4:04 PM, Eric Dumazet wrote: > On Tue, Oct 2, 2018 at 6:46 AM Dmitry Vyukov wrote: >> >> On Tue, Oct 2, 2018 at 3:16 PM, Eric Dumazet wrote: >> > On Tue, Oct 2, 2018 at 1:19 AM Dmitry Vyukov wrote: >> >> >> >> On

Re: [PATCH v2 net] inet: frags: rework rhashtable dismantle

2018-10-02 Thread Dmitry Vyukov
On Tue, Oct 2, 2018 at 3:16 PM, Eric Dumazet wrote: > On Tue, Oct 2, 2018 at 1:19 AM Dmitry Vyukov wrote: >> >> On Tue, Oct 2, 2018 at 7:49 AM, Eric Dumazet wrote: >> >> >> Does inet_frag_kill() hold fq->lock? I am missing how inet_frag_kill() >>

Re: [PATCH v2 net] inet: frags: rework rhashtable dismantle

2018-10-02 Thread Dmitry Vyukov
On Tue, Oct 2, 2018 at 7:49 AM, Eric Dumazet wrote: > syszbot found an interesting use-after-free [1] happening > while IPv4 fragment rhashtable was destroyed at netns dismantle. > > While no insertions can possibly happen at the time a dismantling > netns is destroying this rhashtable, timers can

Re: KASAN: use-after-free Read in tcf_block_find

2018-09-27 Thread Dmitry Vyukov
On Thu, Sep 27, 2018 at 7:50 PM, Cong Wang wrote: > On Thu, Sep 27, 2018 at 1:11 AM Dmitry Vyukov wrote: >> >> Would a stack trace for call_rcu be helpful here? I have this idea for >> a long time, but never get around to implementing it: >> https://bugzilla.kernel

  1   2   3   4   5   6   7   >