syzbot


KFENCE: memory corruption in add_sysfs_param

Status: upstream: reported on 2024/10/04 06:32
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+873cb3989e92ad5d796d@syzkaller.appspotmail.com
First crash: 2d13h, last: 15m
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [kernel?] KFENCE: memory corruption in add_sysfs_param 1 (2) 2024/10/04 06:47

Sample crash report:
can: broadcast manager protocol
can: netlink gateway - max_hops=1
can: SAE J1939
can: isotp protocol (max_pdu_size 8300)
Bluetooth: RFCOMM TTY layer initialized
Bluetooth: RFCOMM socket layer initialized
Bluetooth: RFCOMM ver 1.11
Bluetooth: BNEP (Ethernet Emulation) ver 1.3
Bluetooth: BNEP filters: protocol multicast
Bluetooth: BNEP socket layer initialized
Bluetooth: HIDP (Human Interface Emulation) ver 1.2
Bluetooth: HIDP socket layer initialized
NET: Registered PF_RXRPC protocol family
Key type rxrpc registered
Key type rxrpc_s registered
NET: Registered PF_KCM protocol family
lec:lane_module_init: lec.c: initialized
mpoa:atm_mpoa_init: mpc.c: initialized
l2tp_core: L2TP core driver, V2.0
l2tp_ppp: PPPoL2TP kernel driver, V2.0
l2tp_ip: L2TP IP encapsulation support (L2TPv3)
l2tp_netlink: L2TP netlink interface
l2tp_eth: L2TP ethernet pseudowire support (L2TPv3)
l2tp_ip6: L2TP IP encapsulation support for IPv6 (L2TPv3)
NET: Registered PF_PHONET protocol family
8021q: 802.1Q VLAN Support v1.8
DCCP: Activated CCID 2 (TCP-like)
DCCP: Activated CCID 3 (TCP-Friendly Rate Control)
DCCP is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
sctp: Hash tables configured (bind 32/56)
NET: Registered PF_RDS protocol family
Registered RDS/infiniband transport
Registered RDS/tcp transport
tipc: Activated (version 2.0.0)
NET: Registered PF_TIPC protocol family
tipc: Started in single node mode
NET: Registered PF_SMC protocol family
9pnet: Installing 9P2000 support
NET: Registered PF_CAIF protocol family
NET: Registered PF_IEEE802154 protocol family
Key type dns_resolver registered
Key type ceph registered
libceph: loaded (mon/osd proto 15/24)
batman_adv: B.A.T.M.A.N. advanced 2024.2 (compatibility version 15) loaded
openvswitch: Open vSwitch switching datapath
NET: Registered PF_VSOCK protocol family
mpls_gso: MPLS GSO support
IPI shorthand broadcast: enabled
AES CTR mode by8 optimization enabled
==================================================================
BUG: KFENCE: memory corruption in krealloc_noprof+0x160/0x2e0

Corrupted memory at 0xffff88823be7c138 [ 0x0a 0xc2 0x03 0x8d 0xff 0xff 0xff 0xff 0x24 0x01 0x00 0x00 0x00 0x00 0x00 0x00 ] (in kfence-#61):
 krealloc_noprof+0x160/0x2e0
 add_sysfs_param+0xca/0x7f0 kernel/params.c:654
 kernel_add_sysfs_param+0xb4/0x130 kernel/params.c:817
 param_sysfs_builtin+0x16e/0x1f0 kernel/params.c:856
 param_sysfs_builtin_init+0x31/0x40 kernel/params.c:990
 do_one_initcall+0x248/0x880 init/main.c:1266
 do_initcall_level+0x157/0x210 init/main.c:1328
 do_initcalls+0x3f/0x80 init/main.c:1344
 kernel_init_freeable+0x435/0x5d0 init/main.c:1577
 kernel_init+0x1d/0x2b0 init/main.c:1466
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

kfence-#61: 0xffff88823be7c000-0xffff88823be7c137, size=312, cache=kmalloc-512

allocated by task 1 on cpu 0 at 10.943054s (0.009399s ago):
 __do_krealloc mm/slub.c:4784 [inline]
 krealloc_noprof+0xd6/0x2e0 mm/slub.c:4838
 add_sysfs_param+0xca/0x7f0 kernel/params.c:654
 kernel_add_sysfs_param+0xb4/0x130 kernel/params.c:817
 param_sysfs_builtin+0x16e/0x1f0 kernel/params.c:856
 param_sysfs_builtin_init+0x31/0x40 kernel/params.c:990
 do_one_initcall+0x248/0x880 init/main.c:1266
 do_initcall_level+0x157/0x210 init/main.c:1328
 do_initcalls+0x3f/0x80 init/main.c:1344
 kernel_init_freeable+0x435/0x5d0 init/main.c:1577
 kernel_init+0x1d/0x2b0 init/main.c:1466
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

freed by task 1 on cpu 0 at 10.945269s (0.007184s ago):
 krealloc_noprof+0x160/0x2e0
 add_sysfs_param+0xca/0x7f0 kernel/params.c:654
 kernel_add_sysfs_param+0xb4/0x130 kernel/params.c:817
 param_sysfs_builtin+0x16e/0x1f0 kernel/params.c:856
 param_sysfs_builtin_init+0x31/0x40 kernel/params.c:990
 do_one_initcall+0x248/0x880 init/main.c:1266
 do_initcall_level+0x157/0x210 init/main.c:1328
 do_initcalls+0x3f/0x80 init/main.c:1344
 kernel_init_freeable+0x435/0x5d0 init/main.c:1577
 kernel_init+0x1d/0x2b0 init/main.c:1466
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
==================================================================

Crashes (580):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/10/05 18:02 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 16:56 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 15:52 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 15:50 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 14:41 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 13:40 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 12:33 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 11:49 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 10:14 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 09:49 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 08:40 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 08:34 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 07:32 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 06:23 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 06:12 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 05:11 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 04:10 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 03:09 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 02:28 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 01:26 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 01:13 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/05 00:08 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 23:15 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 22:12 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 21:00 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 19:58 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 19:57 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 18:57 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 17:52 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 17:34 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 16:34 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 16:11 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 15:08 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 13:36 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 13:35 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 12:29 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 12:14 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 11:07 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 09:34 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 08:33 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 07:16 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 05:54 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 04:59 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 04:12 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/04 03:52 linux-next c02d24a5af66 d7906eff .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
2024/10/03 04:34 linux-next c02d24a5af66 a4c7fd36 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: memory corruption in add_sysfs_param
* Struck through repros no longer work on HEAD.