syzbot


KASAN: out-of-bounds Read in unwind_get_return_address

Status: public: reported C repro on 2019/04/12 00:00
Reported-by: syzbot+e1743df3e775ccaefe11@syzkaller.appspotmail.com
First crash: 2535d, last: 2121d

Sample crash report:
==================================================================
BUG: KASAN: out-of-bounds in unwind_get_return_address+0x98/0xb0 arch/x86/kernel/unwind_frame.c:17
Read of size 8 at addr ffff8801d8ccf8e0 by task syz-executor806/3800

CPU: 1 PID: 3800 Comm: syz-executor806 Not tainted 4.9.96-g8c01d00 #11
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d8d677c8 ffffffff81eb0b69 ffffea00076333c0 ffff8801d8ccf8e0
 0000000000000000 ffff8801d8ccf8e8 ffff8801d96d48c0 ffff8801d8d67800
 ffffffff8156540b ffff8801d8ccf8e0 0000000000000008 0000000000000000
Call Trace:
 [<ffffffff81eb0b69>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81eb0b69>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff8156540b>] print_address_description+0x6c/0x234 mm/kasan/report.c:256
 [<ffffffff81565815>] kasan_report_error mm/kasan/report.c:355 [inline]
 [<ffffffff81565815>] kasan_report.cold.6+0x242/0x2fe mm/kasan/report.c:412
 [<ffffffff81539494>] __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433
 [<ffffffff810d0c08>] unwind_get_return_address+0x98/0xb0 arch/x86/kernel/unwind_frame.c:17
 [<ffffffff8107addd>] __save_stack_trace+0x8d/0xf0 arch/x86/kernel/stacktrace.c:43
 [<ffffffff8107aea8>] save_stack_trace_tsk+0x48/0x70 arch/x86/kernel/stacktrace.c:71
 [<ffffffff816d5378>] proc_pid_stack+0x148/0x220 fs/proc/base.c:467
 [<ffffffff816d681d>] proc_single_show+0xfd/0x170 fs/proc/base.c:769
 [<ffffffff815eaa16>] seq_read+0x4b6/0x12e0 fs/seq_file.c:240
 [<ffffffff8156cc95>] do_loop_readv_writev.part.18+0xd5/0x280 fs/read_write.c:718
 [<ffffffff81570be5>] do_loop_readv_writev fs/read_write.c:707 [inline]
 [<ffffffff81570be5>] do_readv_writev+0x565/0x7a0 fs/read_write.c:873
 [<ffffffff81570ea4>] vfs_readv+0x84/0xc0 fs/read_write.c:897
 [<ffffffff81570fc6>] do_readv+0xe6/0x260 fs/read_write.c:923
 [<ffffffff81574827>] SYSC_readv fs/read_write.c:1010 [inline]
 [<ffffffff81574827>] SyS_readv+0x27/0x30 fs/read_write.c:1007
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff839f3313>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb

The buggy address belongs to the page:
page:ffffea00076333c0 count:0 mapcount:0 mapping:          (null) index:0x0
flags: 0x8000000000000000()
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff8801d8ccf780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff8801d8ccf800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>ffff8801d8ccf880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                          ^
 ffff8801d8ccf900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff8801d8ccf980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================

Crashes (57):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/04/25 21:04 https://android.googlesource.com/kernel/common android-4.9 8c01d009ed72 73417389 .config console log report syz C ci-android-49-kasan-gce
2018/01/02 17:52 https://android.googlesource.com/kernel/common android-4.9 f3f3457d4582 00193447 .config console log report syz C ci-android-49-kasan-gce-386
2019/02/02 03:54 https://android.googlesource.com/kernel/common android-4.9 f26c1b2bd6fc 564f9a4f .config console log report ci-android-49-kasan-gce-root
2018/10/30 23:40 https://android.googlesource.com/kernel/common android-4.9 4ba3f69128be 8dbb755a .config console log report ci-android-49-kasan-gce-root
2018/10/10 18:08 https://android.googlesource.com/kernel/common android-4.9 7bebf33f9d46 5b11ac2c .config console log report ci-android-49-kasan-gce
2018/10/08 22:56 https://android.googlesource.com/kernel/common android-4.9 7bebf33f9d46 8b311eaf .config console log report ci-android-49-kasan-gce-root
2018/10/06 00:42 https://android.googlesource.com/kernel/common android-4.9 7bebf33f9d46 8b311eaf .config console log report ci-android-49-kasan-gce
2018/10/03 06:42 https://android.googlesource.com/kernel/common android-4.9 35740bcd1107 0f3e0261 .config console log report ci-android-49-kasan-gce
2018/09/26 00:32 https://android.googlesource.com/kernel/common android-4.9 36daaf708bc0 b7e11289 .config console log report ci-android-49-kasan-gce-root
2018/09/21 09:07 https://android.googlesource.com/kernel/common android-4.9 1c57ba4f543b 37079712 .config console log report ci-android-49-kasan-gce
2018/08/27 17:20 https://android.googlesource.com/kernel/common android-4.9 09eb2ba5ed0c 758cd203 .config console log report ci-android-49-kasan-gce
2018/08/26 16:43 https://android.googlesource.com/kernel/common android-4.9 09eb2ba5ed0c 758cd203 .config console log report ci-android-49-kasan-gce
2018/08/23 01:53 https://android.googlesource.com/kernel/common android-4.9 8dd3fc2ed765 95b5c82b .config console log report ci-android-49-kasan-gce
2018/07/30 22:30 https://android.googlesource.com/kernel/common android-4.9 990559158c7b 1a381291 .config console log report ci-android-49-kasan-gce
2018/07/20 10:51 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 49f35839 .config console log report ci-android-49-kasan-gce
2018/07/09 15:26 https://android.googlesource.com/kernel/common android-4.9 03c70feafdb2 f25e5770 .config console log report ci-android-49-kasan-gce
2018/06/30 13:13 https://android.googlesource.com/kernel/common android-4.9 00a0bcbfcfb6 dba0b50e .config console log report ci-android-49-kasan-gce
2018/06/30 10:33 https://android.googlesource.com/kernel/common android-4.9 00a0bcbfcfb6 dba0b50e .config console log report ci-android-49-kasan-gce
2018/06/21 21:50 https://android.googlesource.com/kernel/common android-4.9 e1815b3eba5b 095ef806 .config console log report ci-android-49-kasan-gce-root
2018/06/14 07:49 https://android.googlesource.com/kernel/common android-4.9 b7d377b4640b 27c5f59f .config console log report ci-android-49-kasan-gce
2018/06/08 03:17 https://android.googlesource.com/kernel/common android-4.9 42a730adb6e2 645e75f8 .config console log report ci-android-49-kasan-gce
2018/06/03 15:09 https://android.googlesource.com/kernel/common android-4.9 d7e64f8022e4 2f93b54f .config console log report ci-android-49-kasan-gce
2018/05/16 19:47 https://android.googlesource.com/kernel/common android-4.9 39c856663dcc 75b2448a .config console log report ci-android-49-kasan-gce
2018/05/12 07:24 https://android.googlesource.com/kernel/common android-4.9 c2f9bce9fee8 12c7428a .config console log report ci-android-49-kasan-gce
2018/04/28 11:48 https://android.googlesource.com/kernel/common android-4.9 71fce1edd26d d5a5d045 .config console log report ci-android-49-kasan-gce
2018/04/25 09:27 https://android.googlesource.com/kernel/common android-4.9 320d53a9d07c 73417389 .config console log report ci-android-49-kasan-gce
2018/04/24 05:19 https://android.googlesource.com/kernel/common android-4.9 142d4b530f5a e7e85d36 .config console log report ci-android-49-kasan-gce
2018/04/21 07:39 https://android.googlesource.com/kernel/common android-4.9 13cc54013b24 ca03d688 .config console log report ci-android-49-kasan-gce
2018/04/15 09:24 https://android.googlesource.com/kernel/common android-4.9 8683408f8e81 7a67784c .config console log report ci-android-49-kasan-gce
2018/04/09 15:12 https://android.googlesource.com/kernel/common android-4.9 4fb542f2aa14 f13fb445 .config console log report ci-android-49-kasan-gce
2018/04/06 05:25 https://android.googlesource.com/kernel/common android-4.9 7cd956196346 a932eae6 .config console log report ci-android-49-kasan-gce
2018/03/06 09:15 https://android.googlesource.com/kernel/common android-4.9 b324a701539e aef0b792 .config console log report ci-android-49-kasan-gce
2018/02/25 23:18 https://android.googlesource.com/kernel/common android-4.9 a92bb8d6eac3 9fe8aa42 .config console log report ci-android-49-kasan-gce
2018/02/20 12:49 https://android.googlesource.com/kernel/common android-4.9 cdfc8df1d262 5abac192 .config console log report ci-android-49-kasan-gce
2018/09/17 04:44 https://android.googlesource.com/kernel/common android-4.9 be4935d541ab a343a400 .config console log report ci-android-49-kasan-gce-386
2018/09/13 23:26 https://android.googlesource.com/kernel/common android-4.9 a8c1ea6c63ed 19e9088b .config console log report ci-android-49-kasan-gce-386
2018/07/11 14:39 https://android.googlesource.com/kernel/common android-4.9 03c70feafdb2 2e0e3130 .config console log report ci-android-49-kasan-gce-386
2018/07/06 00:10 https://android.googlesource.com/kernel/common android-4.9 03c70feafdb2 d3b2a0e2 .config console log report ci-android-49-kasan-gce-386
2018/06/01 07:17 https://android.googlesource.com/kernel/common android-4.9 a56900fabe12 2f93b54f .config console log report ci-android-49-kasan-gce-386
2018/06/01 03:40 https://android.googlesource.com/kernel/common android-4.9 a56900fabe12 2f93b54f .config console log report ci-android-49-kasan-gce-386
2018/05/31 05:05 https://android.googlesource.com/kernel/common android-4.9 135beb9cf36c 2f93b54f .config console log report ci-android-49-kasan-gce-386
2018/05/23 13:16 https://android.googlesource.com/kernel/common android-4.9 d054505522c4 f48c20b8 .config console log report ci-android-49-kasan-gce-386
2018/05/03 16:01 https://android.googlesource.com/kernel/common android-4.9 f679e4d9b77a 9ce14f4b .config console log report ci-android-49-kasan-gce-386
2018/04/10 06:03 https://android.googlesource.com/kernel/common android-4.9 eba1ffe631bc b9f65507 .config console log report ci-android-49-kasan-gce-386
2018/04/08 15:16 https://android.googlesource.com/kernel/common android-4.9 4fb542f2aa14 77bd5117 .config console log report ci-android-49-kasan-gce-386
2018/04/08 14:49 https://android.googlesource.com/kernel/common android-4.9 4fb542f2aa14 77bd5117 .config console log report ci-android-49-kasan-gce-386
2018/04/06 05:27 https://android.googlesource.com/kernel/common android-4.9 7cd956196346 a932eae6 .config console log report ci-android-49-kasan-gce-386
2018/03/08 13:24 https://android.googlesource.com/kernel/common android-4.9 00db063b0f88 acd0caa5 .config console log report ci-android-49-kasan-gce-386
* Struck through repros no longer work on HEAD.