syzbot

 sign-in | mailing list | source | docs
🐞 Open [1165] ≡ Subsystems 🐞 Fixed [4404] 🐞 Invalid [9910] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

kernel panic: stack is corrupted in udp4_lib_lookup2

Status: fixed on 2019/03/06 07:43
Subsystems: net (incorrect?)
Reported-by: syzbot+4ad25edc7a33e4ab91e0@syzkaller.appspotmail.com
Fix commit: 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
First crash: 1547d, last: 1546d
duplicates (23):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
KASAN: stack-out-of-bounds Read in check_stack_object syz 2 1531d 1540d 0/24 closed as dup on 2019/01/06 15:44
KASAN: stack-out-of-bounds Read in process_one_work 1 1535d 1532d 0/24 closed as dup on 2019/01/14 17:06
general protection fault in account_system_index_time (2) C 12 1531d 1585d 0/24 closed as dup on 2019/01/04 11:13
KASAN: stack-out-of-bounds Read in corrupted (3) C 5 1532d 1544d 0/24 closed as dup on 2019/01/04 11:23
kernel panic: stack is corrupted in lock_acquire 2 1540d 1542d 0/24 closed as dup on 2019/01/04 11:23
BUG: unable to handle kernel paging request in free_block (4) 2 1502d 1532d 0/24 closed as dup on 2019/01/14 17:27
kernel panic: stack is corrupted in rb_erase 1 1535d 1535d 0/24 closed as dup on 2019/01/11 08:03
WARNING in mem_cgroup_update_lru_size C 2 1541d 1544d 0/24 closed as dup on 2019/01/05 08:11
general protection fault in cpuacct_charge (2) 1 1532d 1531d 0/24 closed as dup on 2019/01/15 16:59
KASAN: stack-out-of-bounds Read in timerqueue_add (2) C 4 1536d 1542d 0/24 closed as dup on 2019/01/04 16:39
KASAN: stack-out-of-bounds in update_curr syz 1 1542d 1542d 0/24 closed as dup on 2019/01/04 16:37
kernel panic: stack is corrupted in ktime_get 3 1539d 1544d 0/24 closed as dup on 2019/01/04 11:21
BUG: corrupted list in account_entity_enqueue C 9 1539d 1546d 0/24 closed as dup on 2019/01/04 11:12
kernel panic: corrupted stack end detected inside scheduler (3) C 1958 1547d 1697d 0/24 closed as dup on 2019/01/04 11:19
kernel panic: stack is corrupted in perf_prepare_sample 1 1542d 1542d 0/24 closed as dup on 2019/01/06 13:27
kernel panic: stack is corrupted in lock_release 4 1542d 1544d 0/24 closed as dup on 2019/01/04 11:20
KASAN: stack-out-of-bounds Read in swake_up_one syz 1 1534d 1532d 0/24 closed as dup on 2019/01/14 17:27
KASAN: use-after-scope Read in corrupted C 2 1534d 1531d 0/24 closed as dup on 2019/01/15 07:26
kernel panic: stack is corrupted in __lock_acquire 9 1531d 1544d 0/24 closed as dup on 2019/01/04 11:22
general protection fault in timerqueue_add (2) 2 1540d 1542d 0/24 closed as dup on 2019/01/04 16:41
kernel panic: stack is corrupted in rcu_dynticks_curr_cpu_in_eqs syz 156 1531d 1544d 0/24 closed as dup on 2019/01/04 11:13
KASAN: stack-out-of-bounds Read in select_idle_sibling 2 1548d 1545d 0/24 closed as dup on 2019/01/04 11:22
kernel panic: stack is corrupted in trace_hardirqs_off 1 1545d 1544d 0/24 closed as dup on 2019/01/04 11:21

Sample crash report:
Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: udp4_lib_lookup2+0x7ea/0x7f0 net/ipv4/udp.c:455
CPU: 0 PID: 25894 Comm: syz-executor3 Not tainted 4.20.0+ #396
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
kobject: 'loop5' (0000000083e9ff32): kobject_uevent_env
Call Trace:
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (11):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-upstream-kasan-gce-root 2018/12/31 00:38 upstream 195303136f19 2b42fdc8 .config console log report
ci-upstream-kasan-gce-smack-root 2018/12/30 23:54 upstream 195303136f19 2b42fdc8 .config console log report
ci-upstream-kasan-gce 2018/12/30 13:57 upstream 195303136f19 9942de5f .config console log report
ci-upstream-kasan-gce-selinux-root 2018/12/30 12:05 upstream 195303136f19 9942de5f .config console log report
ci-upstream-net-this-kasan-gce 2018/12/31 03:07 net c433570458e4 2b42fdc8 .config console log report
ci-upstream-net-kasan-gce 2018/12/30 14:13 net-next b71acb0e3721 9942de5f .config console log report
ci-upstream-net-kasan-gce 2018/12/30 12:00 net-next b71acb0e3721 9942de5f .config console log report
ci-upstream-net-kasan-gce 2018/12/30 11:45 net-next b71acb0e3721 9942de5f .config console log report
ci-upstream-linux-next-kasan-gce-root 2018/12/31 00:01 linux-next 6a1d293238c1 2b42fdc8 .config console log report
ci-upstream-linux-next-kasan-gce-root 2018/12/30 12:09 linux-next 6a1d293238c1 9942de5f .config console log report
ci-upstream-linux-next-kasan-gce-root 2018/12/30 12:08 linux-next 6a1d293238c1 9942de5f .config console log report
* Struck through repros no longer work on HEAD.