syzbot


KASAN: stack-out-of-bounds Read in may_expand_vm

Status: closed as invalid on 2018/07/07 06:58
Subsystems: mm
[Documentation on labels]
First crash: 2598d, last: 2598d

Sample crash report:
==================================================================
PANIC: double fault, error_code: 0x0
BUG: KASAN: stack-out-of-bounds in __read_once_size include/linux/compiler.h:188 [inline]
BUG: KASAN: stack-out-of-bounds in task_rlimit include/linux/sched/signal.h:622 [inline]
BUG: KASAN: stack-out-of-bounds in rlimit include/linux/sched/signal.h:633 [inline]
BUG: KASAN: stack-out-of-bounds in may_expand_vm+0x756/0x8d0 mm/mmap.c:3249
CPU: 0 PID: 10311 Comm: syz-executor1 Not tainted 4.18.0-rc3+ #48
Read of size 8 at addr ffff8801d96a2390 by task modprobe/10324
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:strlen+0xa/0xa0 lib/string.c:482

Code: 
CPU: 1 PID: 10324 Comm: modprobe Not tainted 4.18.0-rc3+ #48
75 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
c8 48 
Call Trace:
89 45 
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113
d0 e8 
65 0f 
28 fa 
48 8b 
75 c8 
 print_address_description+0x6c/0x20b mm/kasan/report.c:256
48 8b 
45 d0 
 kasan_report_error mm/kasan/report.c:354 [inline]
 kasan_report.cold.7+0x242/0x2fe mm/kasan/report.c:412
e9 
 __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433
37 ff 
 __read_once_size include/linux/compiler.h:188 [inline]
 task_rlimit include/linux/sched/signal.h:622 [inline]
 rlimit include/linux/sched/signal.h:633 [inline]
 may_expand_vm+0x756/0x8d0 mm/mmap.c:3249
ff ff 
0f 1f 
84 00 
00 00 
00 00 
48 
b8 00 
00 00 
00 
00 fc 
ff df 
 mmap_region+0x119/0x1890 mm/mmap.c:1688
<55> 48 89 fa 
48 c1 
ea 03 
48 89 
e5 41 
54 49 
89 fc 
53 48 
83 ec 
 do_mmap+0xa06/0x1320 mm/mmap.c:1535
08 0f 
RSP: 0018:ffff8801d9486000 EFLAGS: 00010086
RAX: dffffc0000000000 RBX: 1ffff1003b290c0b RCX: 0000000000000000
RDX: dffffc0000000000 RSI: ffffffff88f92620 RDI: ffffffff87ebd260
RBP: ffff8801d94861e0 R08: 0000000000000002 R09: ffffffff88f92620
R10: ffffffff815dfe10 R11: dffffc0000000000 R12: ffff8801d94861b8
 do_mmap_pgoff include/linux/mm.h:2287 [inline]
 vm_mmap_pgoff+0x213/0x2c0 mm/util.c:357
R13: 0000000000000002 R14: 0000000000000000 R15: ffffffff88f7b740
FS:  00007fe404130700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8801d9485ff8 CR3: 000000019fab1000 CR4: 00000000001406f0
DR0: 00000000200001c0 DR1: 00000000200001c0 DR2: 0000000000000000
 ksys_mmap_pgoff+0x4da/0x660 mm/mmap.c:1585
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/07/07 03:18 bpf-next d90c936fb318 6c0c0099 .config console log report ci-upstream-bpf-next-kasan-gce
* Struck through repros no longer work on HEAD.