assertion failed: va

[syzbot]

Hello,

syzbot found the following crash on:

HEAD commit: 09363dc1775f Set up go function pointer table
git tree: https://github.com/akaros/akaros.git/master
console output: https://syzkaller.appspot.com/x/log.txt?x=1759a55a400000
kernel config: https://syzkaller.appspot.com/x/.config?x=efef8cf2939304d3
dashboard link: https://syzkaller.appspot.com/bug?extid=feb212a7af2969509775
compiler:

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+feb212...@syzkaller.appspotmail.com

kernel panic at kern/src/ns/qio.c:1355, from core 0: assertion failed: va
Stack Backtrace on Core 0:
#01 [<0xffffffffc200a33c>] in backtrace at src/kdebug.c:220
#02 [<0xffffffffc2009b3d>] in _panic at src/init.c:268
#03 [<0xffffffffc203a14b>] in read_all_blocks at src/ns/qio.c:1355
#04 [<0xffffffffc203c814>] in qread at src/ns/qio.c:1438
#05 [<0xffffffffc20149cb>] in ipread at src/net/devip.c:872
#06 [<0xffffffffc203f783>] in rread at src/ns/sysfile.c:763
#07 [<0xffffffffc203f92b>] in sysread at src/ns/sysfile.c:821
#08 [<0xffffffffc2056031>] in sys_read at src/syscall.c:1698
#09 [<0xffffffffc2059569>] in syscall at src/syscall.c:2455
#10 [<0xffffffffc2059734>] in run_local_syscall at src/syscall.c:2490
#11 [<0xffffffffc2059c69>] in prep_syscalls at src/syscall.c:2510
#12 [<0xffffffffc20ab5fa>] in sysenter_callwrapper at arch/x86/trap.c:854


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#bug-status-tracking for how to communicate with
syzbot.

[syzbot]

syzbot has found a reproducer for the following crash on:

HEAD commit: 73001cbb86fe alarm: Clean up condition variable usage
git tree: https://github.com/akaros/akaros.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=116a1f6e400000
kernel config: https://syzkaller.appspot.com/x/.config?x=bc709c3b83482973

dashboard link: https://syzkaller.appspot.com/bug?extid=feb212a7af2969509775
compiler:

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=129e6a09400000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14d36391400000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+feb212...@syzkaller.appspotmail.com

kernel panic at kern/src/ns/qio.c:1355, from core 0: assertion failed: va
Stack Backtrace on Core 0:

#01 [<0xffffffffc200a3ac>] in backtrace at src/kdebug.c:229

#02 [<0xffffffffc2009b3d>] in _panic at src/init.c:268

#03 [<0xffffffffc203a28b>] in read_all_blocks at src/ns/qio.c:1355
#04 [<0xffffffffc203c954>] in qread at src/ns/qio.c:1438
#05 [<0xffffffffc2014a8b>] in ipread at src/net/devip.c:874
#06 [<0xffffffffc203f883>] in rread at src/ns/sysfile.c:765
#07 [<0xffffffffc203fa2b>] in sysread at src/ns/sysfile.c:823
#08 [<0xffffffffc20569c1>] in sys_read at src/syscall.c:1698
#09 [<0xffffffffc2059f59>] in syscall at src/syscall.c:2465
#10 [<0xffffffffc205a124>] in run_local_syscall at src/syscall.c:2500
#11 [<0xffffffffc205a659>] in prep_syscalls at src/syscall.c:2520
#12 [<0xffffffffc20ac10a>] in sysenter_callwrapper at arch/x86/trap.c:854

[Barret Rhoden]

#syz fix: Check safety of user pointer syscall arguments

On 2018-10-12 at 19:02 syzbot