BUG: stack guard page was hit in corrupted (18)

Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported
BUG: stack guard page was hit in file_open	C	error		25	992d	1070d

error

992d

1070d

Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
android-5-10	BUG: stack guard page was hit in corrupted (14)	C	error		2	974d	974d	0/2	closed as dup on 2022/03/24 14:58
android-5-10	BUG: stack guard page was hit in corrupted (16)	C	error		2	968d	970d	0/2	closed as dup on 2022/03/30 17:23
android-5-10	BUG: stack guard page was hit in corrupted (9)	C	error		1	982d	982d	0/2	closed as dup on 2022/03/16 16:28
android-5-10	BUG: stack guard page was hit in corrupted (13)	C	error		1	975d	975d	0/2	closed as dup on 2022/03/22 16:23
android-5-10	BUG: stack guard page was hit in corrupted (17)	C	error		3	964d	965d	0/2	closed as dup on 2022/04/04 16:48
android-6-1	BUG: stack guard page was hit in corrupted origin:lts	C			2	21d	106d	0/2	upstream: reported C repro on 2024/08/07 17:59
android-5-10	BUG: stack guard page was hit in corrupted (5)	C	error		3	986d	986d	0/2	closed as dup on 2022/03/11 15:58
android-5-10	BUG: stack guard page was hit in corrupted (19)	C			1	958d	958d	0/2	closed as dup on 2022/04/08 17:06
android-5-10	BUG: stack guard page was hit in corrupted (6)	C	error		1	985d	985d	0/2	closed as dup on 2022/03/11 22:51
android-5-10	BUG: stack guard page was hit in corrupted (20)	C	error		1	955d	955d	0/2	closed as dup on 2022/04/11 14:20
android-5-10	BUG: stack guard page was hit in corrupted (21)	C	error		3	941d	942d	0/2	closed as dup on 2022/05/04 16:12
android-5-10	BUG: stack guard page was hit in corrupted (8)	C			1	983d	983d	0/2	closed as dup on 2022/03/14 15:44
android-5-10	BUG: stack guard page was hit in corrupted (4)	C	error		1	988d	988d	0/2	closed as dup on 2022/03/09 18:22
android-5-10	BUG: stack guard page was hit in corrupted (7)	C	error		1	985d	985d	0/2	closed as dup on 2022/03/13 15:49
android-5-10	BUG: stack guard page was hit in corrupted	C	error		3	1017d	1052d	0/2	closed as invalid on 2022/02/28 16:10
android-5-10	BUG: stack guard page was hit in corrupted (10)	C	error		1	980d	980d	0/2	closed as dup on 2022/03/17 16:45
android-5-10	BUG: stack guard page was hit in corrupted (15)	C	error		1	972d	972d	0/2	closed as dup on 2022/03/25 16:30
android-5-10	BUG: stack guard page was hit in corrupted (12)	C	done		2	976d	978d	0/2	closed as dup on 2022/03/21 14:57
android-5-10	BUG: stack guard page was hit in corrupted (2)	C	error		2	994d	995d	0/2	closed as dup on 2022/03/02 15:48
android-5-10	BUG: stack guard page was hit in corrupted (3)	C	error		1	988d	988d	0/2	closed as dup on 2022/03/09 15:36
android-5-10	BUG: stack guard page was hit in corrupted (11)	C	error		2	979d	979d	0/2	closed as dup on 2022/03/18 21:48
android-5-10	BUG: stack guard page was hit in corrupted (22)	syz	done	done	1	927d	927d	0/2	auto-closed as invalid on 2022/08/31 02:51
android-5-10	BUG: stack guard page was hit in corrupted (23)	syz	error	error	1	527d	527d	0/2	auto-obsoleted due to no activity on 2023/09/30 03:13

Created	Duration	User	Patch	Repo	Result
2022/04/05 20:08	2m	tadeusz.struk@linaro.org		https://android.googlesource.com/kernel/common android13-5.15	error

Created

Duration

User

Patch

Repo

Result

2022/04/05 20:08

tadeusz.struk@linaro.org

https://android.googlesource.com/kernel/common android13-5.15

error

BUG: stack guard page was hit at ffffc90000987fb8 (stack is ffffc90000988000..ffffc9000098ffff) kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 368 Comm: syz-executor496 Not tainted 5.10.109-syzkaller-00693-g414e6c8e941c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__find_get_block+0x1b/0xbd0 fs/buffer.c:1332 Code: 5c 41 5d 41 5e 41 5f 5d c3 e8 91 fe d7 02 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 00 00 00 41 89 d5 <48> 89 34 24 48 89 7c 24 08 65 48 8b 04 25 28 00 00 00 48 89 84 24 RSP: 0018:ffffc90000987fc0 EFLAGS: 00010286 RAX: ffffffff81be3aa1 RBX: 0000000000000008 RCX: ffff888107bb8000 RDX: 0000000000001000 RSI: 00000000000000d8 RDI: ffff88810044bb80 RBP: ffffc900009880a0 R08: ffffffff81e8ca70 R09: ffffc900009881e0 R10: fffff52000131041 R11: 0000000000000000 R12: ffff88810044bb80 R13: 0000000000001000 R14: 0000000000001000 R15: 00000000000000d8 FS: 0000555556cd63c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90000987fb8 CR3: 0000000106d95000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace 68d9209dfe673fa6 ]--- RIP: 0010:__find_get_block+0x1b/0xbd0 fs/buffer.c:1332 Code: 5c 41 5d 41 5e 41 5f 5d c3 e8 91 fe d7 02 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 00 00 00 41 89 d5 <48> 89 34 24 48 89 7c 24 08 65 48 8b 04 25 28 00 00 00 48 89 84 24 RSP: 0018:ffffc90000987fc0 EFLAGS: 00010286 RAX: ffffffff81be3aa1 RBX: 0000000000000008 RCX: ffff888107bb8000 RDX: 0000000000001000 RSI: 00000000000000d8 RDI: ffff88810044bb80 RBP: ffffc900009880a0 R08: ffffffff81e8ca70 R09: ffffc900009881e0 R10: fffff52000131041 R11: 0000000000000000 R12: ffff88810044bb80 R13: 0000000000001000 R14: 0000000000001000 R15: 00000000000000d8 FS: 0000555556cd63c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90000987fb8 CR3: 0000000106d95000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 5c pop %rsp 1: 41 5d pop %r13 3: 41 5e pop %r14 5: 41 5f pop %r15 7: 5d pop %rbp 8: c3 retq 9: e8 91 fe d7 02 callq 0x2d7fe9f e: 90 nop f: 55 push %rbp 10: 48 89 e5 mov %rsp,%rbp 13: 41 57 push %r15 15: 41 56 push %r14 17: 41 55 push %r13 19: 41 54 push %r12 1b: 53 push %rbx 1c: 48 83 e4 e0 and $0xffffffffffffffe0,%rsp 20: 48 81 ec a0 00 00 00 sub $0xa0,%rsp 27: 41 89 d5 mov %edx,%r13d * 2a: 48 89 34 24 mov %rsi,(%rsp) <-- trapping instruction 2e: 48 89 7c 24 08 mov %rdi,0x8(%rsp) 33: 65 48 8b 04 25 28 00 mov %gs:0x28,%rax 3a: 00 00 3c: 48 rex.W 3d: 89 .byte 0x89 3e: 84 .byte 0x84 3f: 24 .byte 0x24