syzbot


KASAN: out-of-bounds Read in amd_get_event_constraints_f15h

Status: auto-closed as invalid on 2020/10/09 04:37
Reported-by: syzbot+064f26f2e00a6f6c625d@syzkaller.appspotmail.com
First crash: 1637d, last: 1637d

Sample crash report:
==================================================================
BUG: KASAN: out-of-bounds in amd_get_event_code arch/x86/events/amd/core.c:327 [inline]
BUG: KASAN: out-of-bounds in amd_get_event_constraints_f15h+0x2cf/0x2e0 arch/x86/events/amd/core.c:799
Read of size 8 at addr ffff88804d447208 by task syz-executor.1/30577

CPU: 1 PID: 30577 Comm: syz-executor.1 Not tainted 4.19.128-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
 print_address_description.cold+0x54/0x222 mm/kasan/report.c:256
 kasan_report_error mm/kasan/report.c:354 [inline]
 kasan_report mm/kasan/report.c:412 [inline]
 kasan_report.cold+0x88/0x2b9 mm/kasan/report.c:396
 amd_get_event_code arch/x86/events/amd/core.c:327 [inline]
 amd_get_event_constraints_f15h+0x2cf/0x2e0 arch/x86/events/amd/core.c:799
 </IRQ>

The buggy address belongs to the page:
page:ffffea00013511c0 count:0 mapcount:0 mapping:0000000000000000 index:0x0
flags: 0xfffe0000000000()
raw: 00fffe0000000000 0000000000000000 ffffffff01350101 0000000000000000
raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff88804d447100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff88804d447180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>ffff88804d447200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                         ^
 ffff88804d447280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff88804d447300: 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 f3 f3
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/11 04:36 linux-4.19.y 3fc898571b97 3ab7a05a .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.