syzbot


KASAN: stack-out-of-bounds Read in __show_regs

Status: upstream: reported C repro on 2021/06/17 03:08
Reported-by: syzbot+b17d3e853d5dce65f981@syzkaller.appspotmail.com
First crash: 470d, last: 2h13m

Cause bisection: introduced by (bisect log) [no-op commit]:
commit b9fc8b4a591811546fec2dbef7e9f809362100c9
Author: Grant Seltzer <grantseltzer@gmail.com>
Date: Mon Feb 22 19:58:46 2021 +0000

  bpf: Add kernel/modules BTF presence checks to bpftool feature command

Crash: KASAN: stack-out-of-bounds Read in __show_regs (log)
Repro: syz .config

Fix bisection: fixed by (bisect log) [no-op commit]:
commit 1328a883258b4507909090ed0a9ad63771f9f780
Author: Vladimir Oltean <vladimir.oltean@nxp.com>
Date: Tue Oct 12 11:40:42 2021 +0000

  net: dsa: felix: purge skb from TX timestamping queue if it cannot be sent

similar bugs (13):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in kobject_set_name_vargs 5 178d 307d 0/24 auto-closed as invalid on 2022/06/30 14:28
upstream KMSAN: kernel-infoleak in _copy_to_iter (7) C 1016 2h19m 201d 23/24 internal: reported C repro on 2022/03/09 07:32
upstream KMSAN: kernel-infoleak in _copy_to_iter (6) C 748 202d 291d 22/24 fixed on 2022/03/08 16:11
upstream KMSAN: uninit-value in snd_pcm_hw_rule_add (2) 18 101d 369d 0/24 auto-closed as invalid on 2022/09/15 02:38
upstream KMSAN: uninit-value in __vmalloc_node_range 5 252d 296d 0/24 auto-closed as invalid on 2022/04/17 19:38
upstream KMSAN: uninit-value in p9pdu_readf 14 237d 351d 22/24 fixed on 2022/03/08 16:11
upstream KMSAN: uninit-value in asix_mdio_read (3) C 1582 132d 197d 23/24 upstream: reported C repro on 2022/03/13 07:35
upstream KMSAN: uninit-value in irqtime_account_irq (2) C 7 150d 283d 0/24 auto-closed as invalid on 2022/09/02 15:33
upstream KMSAN: uninit-value in stack_trace_consume_entry C 706 51d 47d 0/24 upstream: reported C repro on 2022/08/10 06:13
upstream KMSAN: uninit-value in exit_to_user_mode_loop (3) C 2558 104d 362d 0/24 auto-closed as invalid on 2022/09/22 19:06
upstream KMSAN: uninit-value in do_user_addr_fault (3) C 680 137d 186d 2/24 closed as invalid on 2022/05/12 12:08
upstream KMSAN: uninit-value in bcmp C 888 3d15h 1206d 0/24 upstream: reported C repro on 2019/06/08 15:03
upstream KMSAN: uninit-value in tipc_sk_lookup 8 235d 289d 0/24 auto-closed as invalid on 2022/05/03 21:09
Patch testing requests:
Created Duration User Patch Repo Result
2022/06/14 19:53 6m paskripkin@gmail.com patch https://github.com/google/kmsan.git master error
2021/06/18 21:19 16m rajatasthana4@gmail.com upstream OK

Sample crash report:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
Workqueue: events request_firmware_work_func
RIP: 0010:sysfs_remove_group+0x30b/0x540 fs/sysfs/group.c:278
Code: 00 00 00 00 00 4d 85 f6 0f 85 2e 02 00 00 48 85 db 0f 85 36 02 00 00 48 c7 c7 6a de c7 8e 48 8b 75 c8 4c 89 e2 e8 a5 c3 d8 fe <0f> 0b e9 c3 01 00 00 89 df e8 f7 c3 a8 ff e9 2d fe ff ff 44 89 e7
RSP: 0018:ffff8881027b7920 EFLAGS: 00010246
=====================================================
BUG: KMSAN: uninit-value in __show_regs+0xb12/0xc90 arch/x86/kernel/process_64.c:81
 __show_regs+0xb12/0xc90 arch/x86/kernel/process_64.c:81
 show_regs+0x6e/0xd0 arch/x86/kernel/dumpstack.c:469
 __warn+0x242/0x580 kernel/panic.c:621
 report_bug+0x7ff/0xa10 lib/bug.c:198
 handle_bug+0x41/0x70 arch/x86/kernel/traps.c:316
 exc_invalid_op+0x1b/0x50 arch/x86/kernel/traps.c:336
 asm_exc_invalid_op+0x1b/0x20
 sysfs_remove_group+0x30b/0x540 fs/sysfs/group.c:278
 dpm_sysfs_remove+0xc1/0xf0 drivers/base/power/sysfs.c:837
 device_del+0x31b/0x1790 drivers/base/core.c:3681
 fw_load_sysfs_fallback drivers/base/firmware_loader/fallback.c:120 [inline]
 fw_load_from_user_helper drivers/base/firmware_loader/fallback.c:158 [inline]
 firmware_fallback_sysfs+0x1075/0x1150 drivers/base/firmware_loader/fallback.c:234
 _request_firmware+0xab2/0x1370 drivers/base/firmware_loader/main.c:856
 request_firmware_work_func+0xd6/0x240 drivers/base/firmware_loader/main.c:1105
 process_one_work+0xb27/0x13e0 kernel/workqueue.c:2289
 worker_thread+0x1076/0x1d60 kernel/workqueue.c:2436
 kthread+0x31b/0x430 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

Local variable nd created at:
 do_file_open_root+0x4f/0xb80 fs/namei.c:3730
 file_open_root+0x210/0x260 fs/open.c:1293

CPU: 1 PID: 28 Comm: kworker/1:1 Not tainted 6.0.0-rc5-syzkaller-48539-g523d2ce66d07 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
Workqueue: events request_firmware_work_func
=====================================================

Crashes (376):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce 2022/09/25 00:56 https://github.com/google/kmsan.git master 523d2ce66d07 0042f2b4 .config log report syz C KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/14 01:04 https://github.com/google/kmsan.git master faf04f9bcf05 b884348d .config log report syz C KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/13 03:45 https://github.com/google/kmsan.git master 4367d178d9eb f371ed7e .config log report syz C KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/08/12 09:49 https://github.com/google/kmsan.git master 1b070a5d1a2c 402cd70d .config log report syz C KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/08/08 19:27 https://github.com/google/kmsan.git master 168a92de0739 88e3a122 .config log report syz C KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/08/04 16:20 https://github.com/google/kmsan.git master bba47a4b6421 1c9013ac .config log report syz C KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/07/31 20:35 https://github.com/google/kmsan.git master 97117d69c353 fef302b1 .config log report syz C KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/07/21 16:01 https://github.com/google/kmsan.git master 97117d69c353 6e67af9d .config log report syz C KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/07/14 15:27 https://github.com/google/kmsan.git master 97117d69c353 5d921b08 .config log report syz C KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/07/02 12:44 https://github.com/google/kmsan.git master 97117d69c353 1434eec0 .config log report syz C KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/06/14 19:04 https://github.com/google/kmsan.git master 2f3064574275 127d1faf .config log report syz C KMSAN: uninit-value in __show_regs
ci-upstream-kasan-gce 2021/06/13 02:59 upstream ad347abe4a98 1ba81399 .config log report syz KASAN: stack-out-of-bounds Read in __show_regs
ci2-upstream-usb 2022/06/24 12:11 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 508aeb54e4f0 a371c43c .config log report info KASAN: stack-out-of-bounds Read in __show_regs
ci-upstream-kmsan-gce 2022/09/26 18:07 https://github.com/google/kmsan.git master 523d2ce66d07 d59ba983 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/26 05:57 https://github.com/google/kmsan.git master 523d2ce66d07 0042f2b4 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/25 00:34 https://github.com/google/kmsan.git master 523d2ce66d07 0042f2b4 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/24 19:02 https://github.com/google/kmsan.git master 523d2ce66d07 0042f2b4 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/24 05:46 https://github.com/google/kmsan.git master 523d2ce66d07 0042f2b4 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/24 01:07 https://github.com/google/kmsan.git master 523d2ce66d07 0042f2b4 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/21 15:51 https://github.com/google/kmsan.git master 523d2ce66d07 380f82fb .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/19 22:07 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/19 17:37 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/19 09:48 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/19 07:48 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/19 03:19 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/18 14:22 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/18 11:13 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/17 08:48 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/17 04:49 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/16 13:58 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/16 08:02 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/14 11:14 https://github.com/google/kmsan.git master faf04f9bcf05 b884348d .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/11 14:13 https://github.com/google/kmsan.git master 4367d178d9eb 356d8217 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/09 21:54 https://github.com/google/kmsan.git master 4367d178d9eb 356d8217 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/09 18:46 https://github.com/google/kmsan.git master 4367d178d9eb 356d8217 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/09/09 00:08 https://github.com/google/kmsan.git master 4367d178d9eb f3027468 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce 2022/08/02 19:17 https://github.com/google/kmsan.git master 3ea9edba19ef 1c9013ac .config log report info KMSAN: uninit-value in tomoyo_realpath_from_path
ci-upstream-kmsan-gce-386 2022/09/26 08:40 https://github.com/google/kmsan.git master 523d2ce66d07 d59ba983 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/25 09:45 https://github.com/google/kmsan.git master 523d2ce66d07 0042f2b4 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/23 14:20 https://github.com/google/kmsan.git master 523d2ce66d07 0042f2b4 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/23 06:00 https://github.com/google/kmsan.git master 523d2ce66d07 0042f2b4 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/21 20:45 https://github.com/google/kmsan.git master 523d2ce66d07 380f82fb .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/21 14:25 https://github.com/google/kmsan.git master 523d2ce66d07 380f82fb .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/21 10:40 https://github.com/google/kmsan.git master 523d2ce66d07 380f82fb .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/19 12:02 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/17 15:21 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/16 15:45 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/15 04:48 https://github.com/google/kmsan.git master 8f4ae27df775 b884348d .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/15 00:11 https://github.com/google/kmsan.git master 8f4ae27df775 b884348d .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/14 02:09 https://github.com/google/kmsan.git master faf04f9bcf05 b884348d .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/13 16:31 https://github.com/google/kmsan.git master faf04f9bcf05 a08652b0 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/13 10:41 https://github.com/google/kmsan.git master 4367d178d9eb a08652b0 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/12 16:51 https://github.com/google/kmsan.git master 4367d178d9eb f371ed7e .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/10 11:24 https://github.com/google/kmsan.git master 4367d178d9eb 356d8217 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/09 15:39 https://github.com/google/kmsan.git master 4367d178d9eb 356d8217 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/08 09:12 https://github.com/google/kmsan.git master 4367d178d9eb 435aeef7 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/08 04:11 https://github.com/google/kmsan.git master 4367d178d9eb 435aeef7 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/07 16:19 https://github.com/google/kmsan.git master 4367d178d9eb c5b7bc57 .config log report info KMSAN: uninit-value in __show_regs
ci-upstream-kmsan-gce-386 2022/09/07 03:21 https://github.com/google/kmsan.git master 4367d178d9eb 5fc30c37 .config log report info KMSAN: uninit-value in __show_regs
* Struck through repros no longer work on HEAD.