syzbot


KASAN: stack-out-of-bounds Read in vmalloc_fault (2)

Status: auto-closed as invalid on 2019/06/16 23:56
Subsystems: x86
[Documentation on labels]
Reported-by: syzbot+0a554a10aa21d20cfe84@syzkaller.appspotmail.com
First crash: 2199d, last: 2164d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: stack-out-of-bounds Read in vmalloc_fault bridge netfilter C 1 2329d 2329d 0/28 closed as dup on 2018/07/07 07:00

Sample crash report:
==================================================================
BUG: KASAN: stack-out-of-bounds in pgd_val arch/x86/include/asm/paravirt.h:414 [inline]
BUG: KASAN: stack-out-of-bounds in p4d_page_vaddr arch/x86/include/asm/pgtable.h:895 [inline]
BUG: KASAN: stack-out-of-bounds in pud_offset arch/x86/include/asm/pgtable.h:907 [inline]
BUG: KASAN: stack-out-of-bounds in vmalloc_fault+0x6d0/0x770 arch/x86/mm/fault.c:397
Read of size 8 at addr ffff8881da96cff8 by task kworker/u4:13/26141

PANIC: double fault, error_code: 0x0
CPU: 1 PID: 26141 Comm: kworker/u4:13 Not tainted 4.20.0-rc6+ #351
CPU: 0 PID: 8108 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #351
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:match_held_lock+0x34/0x8d0 kernel/locking/lockdep.c:3401
Workqueue:  cleanup_net (netns)
Code: 55 48 89 e5 41 57 41 56 4c 8d 75 d8 41 55 49 89 fd 48 83 c7 10 41 54 53 48 8d 9d 38 ff ff ff 48 c1 eb 03 48 81 ec c8 00 00 00 <48> c7 85 38 ff ff ff b3 8a b5 41 48 c7 85 40 ff ff ff 07 c8 11 89
Call Trace:
RSP: 0018:ffff8881d9bfdfd0 EFLAGS: 00010082
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
RAX: 0000000000000000 RBX: 1ffff1103b37fbff RCX: 0000000000000000
RDX: dffffc0000000000 RSI: ffffffff8959bf40 RDI: ffff8881bbda89d0
RBP: ffff8881d9bfe0c0 R08: ffff8881bbda8140 R09: ffffed103b5c5b5f
R10: ffffed103b5c5b5f R11: ffff8881dae2dafb R12: ffff8881bbda8140
R13: ffff8881bbda89c0 R14: ffff8881d9bfe098 R15: 0000000000000000
FS:  00007fde99284700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
kasan: CONFIG_KASAN_INLINE enabled
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8881d9bfdfc8 CR3: 00000001d8728000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
kasan: GPF could be caused by NULL-ptr deref or user memory access
Call Trace:
general protection fault: 0000 [#1] PREEMPT SMP KASAN

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/18 23:55 net-next-old b12c97d45cd0 4edaba93 .config console log report ci-upstream-net-kasan-gce
2018/12/13 15:51 net-next-old 95302c394c3d f3d9d594 .config console log report ci-upstream-net-kasan-gce
2018/12/12 23:28 net-next-old e1a76515b0c2 02613a41 .config console log report ci-upstream-net-kasan-gce
2018/12/12 10:12 net-next-old e1a76515b0c2 c3b10a5d .config console log report ci-upstream-net-kasan-gce
2018/12/07 22:41 net-next-old ef2df7fc11f8 1eb6a7e4 .config console log report ci-upstream-net-kasan-gce
2018/12/05 11:39 net-next-old a74f0fa082b7 ac6c0578 .config console log report ci-upstream-net-kasan-gce
2018/12/03 12:49 net-next-old 97e6c858a26e 819002b0 .config console log report ci-upstream-net-kasan-gce
2018/11/28 05:54 net-next-old 2c30aac50d92 4b6d14f2 .config console log report ci-upstream-net-kasan-gce
2018/11/26 21:58 net-next-old 4afe60a97ba6 ac912200 .config console log report ci-upstream-net-kasan-gce
2018/11/26 16:16 net-next-old 4bffc669d624 ac912200 .config console log report ci-upstream-net-kasan-gce
2018/11/13 12:57 net-next-old 3e536cff3424 5f5f6d14 .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.