syzbot


kernel panic: stack is corrupted in printk

Status: fixed on 2019/03/06 07:43
Subsystems: kernel
[Documentation on labels]
Fix commit: 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
First crash: 1931d, last: 1931d

Sample crash report:
8021q: adding VLAN 0 to HW filter on device batadv0
8021q: adding VLAN 0 to HW filter on device batadv0
kasan: CONFIG_KASAN_INLINE enabled
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: printk+0xde/0xed kernel/printk/printk.c:1995
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.20.0+ #9
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1db/0x2d0 lib/dump_stack.c:113
 panic+0x2cb/0x589 kernel/panic.c:189
 put_dec+0x3b/0xd0 lib/vsprintf.c:259
 number+0x956/0xc80 lib/vsprintf.c:531
==================================================================
BUG: KASAN: use-after-scope in __read_once_size include/linux/compiler.h:191 [inline]
BUG: KASAN: use-after-scope in update_stack_state+0x62d/0x680 arch/x86/kernel/unwind_frame.c:270
Read of size 8 at addr ffff8880a94651c8 by task ksoftirqd/0/9

CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.20.0+ #9
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1db/0x2d0 lib/dump_stack.c:113
 print_address_description.cold+0x7c/0x20d mm/kasan/report.c:187
 kasan_report.cold+0x1b/0x40 mm/kasan/report.c:317
 __asan_report_load8_noabort+0x14/0x20 mm/kasan/generic_report.c:135
 __read_once_size include/linux/compiler.h:191 [inline]
 update_stack_state+0x62d/0x680 arch/x86/kernel/unwind_frame.c:270
 unwind_next_frame.part.0+0x1ae/0xa90 arch/x86/kernel/unwind_frame.c:329
 unwind_next_frame+0x3b/0x50 arch/x86/kernel/unwind_frame.c:287
 show_trace_log_lvl+0x1f6/0x28c arch/x86/kernel/dumpstack.c:269
 show_stack+0x39/0x3b arch/x86/kernel/dumpstack.c:293
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1db/0x2d0 lib/dump_stack.c:113
 panic+0x2cb/0x589 kernel/panic.c:189
 put_dec+0x3b/0xd0 lib/vsprintf.c:259
 number+0x956/0xc80 lib/vsprintf.c:531
 vsnprintf+0x368/0x1b10 lib/vsprintf.c:2469
 ? check_preemption_disa
Lost 83 message(s)!
Kernel Offset: disabled

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/01/05 00:03 upstream 96d4f267e40f 0127e3ba .config console log report syz C ci-upstream-kasan-gce-smack-root
* Struck through repros no longer work on HEAD.