From mboxrd@z Thu Jan 1 00:00:00 1970 From: syzbot Subject: Re: WARNING in drm_mode_createblob_ioctl Date: Wed, 06 Nov 2019 07:20:00 -0800 Message-ID: <00000000000012ff570596af15cc@google.com> References: <000000000000b2de3a0594d8b4ca@google.com> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes Return-path: In-Reply-To: <000000000000b2de3a0594d8b4ca@google.com> Sender: linux-kernel-owner@vger.kernel.org To: airlied@linux.ie, akpm@linux-foundation.org, daniel@ffwll.ch, dri-devel@lists.freedesktop.org, dvyukov@google.com, keescook@chromium.org, linux-kernel@vger.kernel.org, maarten.lankhorst@linux.intel.com, mripard@kernel.org, sean@poorly.run, sfr@canb.auug.org.au, syzkaller-bugs@googlegroups.com, viro@zeniv.linux.org.uk List-Id: dri-devel@lists.freedesktop.org syzbot has bisected this bug to: commit 9e5a64c71b2f70ba530f8156046dd7dfb8a7a0ba Author: Kees Cook Date: Mon Nov 4 22:57:23 2019 +0000 uaccess: disallow > INT_MAX copy sizes bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=125fe6dce00000 start commit: 51309b9d Add linux-next specific files for 20191105 git tree: linux-next final crash: https://syzkaller.appspot.com/x/report.txt?x=115fe6dce00000 console output: https://syzkaller.appspot.com/x/log.txt?x=165fe6dce00000 kernel config: https://syzkaller.appspot.com/x/.config?x=a9b1a641c1f1fc52 dashboard link: https://syzkaller.appspot.com/bug?extid=fb77e97ebf0612ee6914 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1212dc3ae00000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=145f604ae00000 Reported-by: syzbot+fb77e97ebf0612ee6914@syzkaller.appspotmail.com Fixes: 9e5a64c71b2f ("uaccess: disallow > INT_MAX copy sizes") For information about bisection process see: https://goo.gl/tpsmEJ#bisection From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.4 required=3.0 tests=FROM_LOCAL_HEX, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2FFD6C5DF60 for ; Thu, 7 Nov 2019 07:43:55 +0000 (UTC) Received: from gabe.freedesktop.org (gabe.freedesktop.org [131.252.210.177]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 0C2AA21882 for ; Thu, 7 Nov 2019 07:43:55 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 0C2AA21882 Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=dri-devel-bounces@lists.freedesktop.org Received: from gabe.freedesktop.org (localhost [127.0.0.1]) by gabe.freedesktop.org (Postfix) with ESMTP id 7CCD66EEA6; Thu, 7 Nov 2019 07:43:25 +0000 (UTC) Received: from mail-io1-f71.google.com (mail-io1-f71.google.com [209.85.166.71]) by gabe.freedesktop.org (Postfix) with ESMTPS id 47E786ED9B for ; Wed, 6 Nov 2019 15:20:01 +0000 (UTC) Received: by mail-io1-f71.google.com with SMTP id c67so18247542iof.22 for ; Wed, 06 Nov 2019 07:20:01 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:date:in-reply-to:message-id:subject :from:to; bh=QbobwaWWXn01psZxrEEOIRgurZbAVL2YBBMKCRdbKg0=; b=c623TQYvPufHR/0V9SuH9tmgTGDr53SH8yxo/nISR3O1cd7s4N0/8WMLt5IquoI1+V Sc0StSJWSKDJU9lsRbNTNdw9gKr/hnGKYXcB5ouC35fjvGhSExpOvywPLewV19c717UT uBpBPa8ZSV17evi+WT+X3TafoiomhYzk7i9c2w1OeoxOoHsIQHSQFnW81B1u7sAC+JwY FBfkV4Kco8vCs7J8yqAbQOBU42W8BtXrbYE0cCIcEeazbXEdIJ9MxFpm+2vDy8IIc2lC J8NkH7XzbcWbTpVJyEnt1NrcMcu+Dc8ZURqLXs96Pnc8+H3VCVkXB9EYR9o0UsPF1MPN 7HYA== X-Gm-Message-State: APjAAAU6iOP2ILVIMjnyrN1K9qXU6gDzoeI0DNqslS4nPTdAvvfv2U3u nEmwjUcN0XhcXz/YSqvBrnaUM4Qf6MkaHClA545/Al7ywBp9 X-Google-Smtp-Source: APXvYqypSQ9fhpxFp136CkTuJg8S2JHGyT1Q1HM7ZQrLQcFZ1R8db4+KQgj35ozavDMfx9kbB4OKxsoKjNLFZ6xz4SrlcF5/UZsr MIME-Version: 1.0 X-Received: by 2002:a92:8c92:: with SMTP id s18mr3258760ill.2.1573053600559; Wed, 06 Nov 2019 07:20:00 -0800 (PST) Date: Wed, 06 Nov 2019 07:20:00 -0800 In-Reply-To: <000000000000b2de3a0594d8b4ca@google.com> X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <00000000000012ff570596af15cc@google.com> Subject: Re: WARNING in drm_mode_createblob_ioctl From: syzbot To: airlied@linux.ie, akpm@linux-foundation.org, daniel@ffwll.ch, dri-devel@lists.freedesktop.org, dvyukov@google.com, keescook@chromium.org, linux-kernel@vger.kernel.org, maarten.lankhorst@linux.intel.com, mripard@kernel.org, sean@poorly.run, sfr@canb.auug.org.au, syzkaller-bugs@googlegroups.com, viro@zeniv.linux.org.uk X-Mailman-Approved-At: Thu, 07 Nov 2019 07:43:23 +0000 X-BeenThere: dri-devel@lists.freedesktop.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Direct Rendering Infrastructure - Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed"; DelSp="yes" Errors-To: dri-devel-bounces@lists.freedesktop.org Sender: "dri-devel" Message-ID: <20191106152000.Sto2_PSrVS-7xlWz4gB_wiZyKeYZ2K5Kxzlxkxs8qrc@z> c3l6Ym90IGhhcyBiaXNlY3RlZCB0aGlzIGJ1ZyB0bzoKCmNvbW1pdCA5ZTVhNjRjNzFiMmY3MGJh NTMwZjgxNTYwNDZkZDdkZmI4YTdhMGJhCkF1dGhvcjogS2VlcyBDb29rIDxrZWVzY29va0BjaHJv bWl1bS5vcmc+CkRhdGU6ICAgTW9uIE5vdiA0IDIyOjU3OjIzIDIwMTkgKzAwMDAKCiAgICAgdWFj Y2VzczogZGlzYWxsb3cgPiBJTlRfTUFYIGNvcHkgc2l6ZXMKCmJpc2VjdGlvbiBsb2c6ICBodHRw czovL3N5emthbGxlci5hcHBzcG90LmNvbS94L2Jpc2VjdC50eHQ/eD0xMjVmZTZkY2UwMDAwMApz dGFydCBjb21taXQ6ICAgNTEzMDliOWQgQWRkIGxpbnV4LW5leHQgc3BlY2lmaWMgZmlsZXMgZm9y IDIwMTkxMTA1CmdpdCB0cmVlOiAgICAgICBsaW51eC1uZXh0CmZpbmFsIGNyYXNoOiAgICBodHRw czovL3N5emthbGxlci5hcHBzcG90LmNvbS94L3JlcG9ydC50eHQ/eD0xMTVmZTZkY2UwMDAwMApj b25zb2xlIG91dHB1dDogaHR0cHM6Ly9zeXprYWxsZXIuYXBwc3BvdC5jb20veC9sb2cudHh0P3g9 MTY1ZmU2ZGNlMDAwMDAKa2VybmVsIGNvbmZpZzogIGh0dHBzOi8vc3l6a2FsbGVyLmFwcHNwb3Qu Y29tL3gvLmNvbmZpZz94PWE5YjFhNjQxYzFmMWZjNTIKZGFzaGJvYXJkIGxpbms6IGh0dHBzOi8v c3l6a2FsbGVyLmFwcHNwb3QuY29tL2J1Zz9leHRpZD1mYjc3ZTk3ZWJmMDYxMmVlNjkxNApzeXog cmVwcm86ICAgICAgaHR0cHM6Ly9zeXprYWxsZXIuYXBwc3BvdC5jb20veC9yZXByby5zeXo/eD0x MjEyZGMzYWUwMDAwMApDIHJlcHJvZHVjZXI6ICAgaHR0cHM6Ly9zeXprYWxsZXIuYXBwc3BvdC5j b20veC9yZXByby5jP3g9MTQ1ZjYwNGFlMDAwMDAKClJlcG9ydGVkLWJ5OiBzeXpib3QrZmI3N2U5 N2ViZjA2MTJlZTY5MTRAc3l6a2FsbGVyLmFwcHNwb3RtYWlsLmNvbQpGaXhlczogOWU1YTY0Yzcx YjJmICgidWFjY2VzczogZGlzYWxsb3cgPiBJTlRfTUFYIGNvcHkgc2l6ZXMiKQoKRm9yIGluZm9y bWF0aW9uIGFib3V0IGJpc2VjdGlvbiBwcm9jZXNzIHNlZTogaHR0cHM6Ly9nb28uZ2wvdHBzbUVK I2Jpc2VjdGlvbgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f XwpkcmktZGV2ZWwgbWFpbGluZyBsaXN0CmRyaS1kZXZlbEBsaXN0cy5mcmVlZGVza3RvcC5vcmcK aHR0cHM6Ly9saXN0cy5mcmVlZGVza3RvcC5vcmcvbWFpbG1hbi9saXN0aW5mby9kcmktZGV2ZWw=