syzbot


KASAN: slab-out-of-bounds Write in __unwind_start

Status: closed as invalid on 2017/12/05 10:45
Subsystems: hardening
[Documentation on labels]
First crash: 2870d, last: 2870d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: slab-out-of-bounds Write in __unwind_start (2) hardening 23 2 2867d 2864d 0/29 closed as invalid on 2017/12/19 12:34

Sample crash report:
==================================================================
BUG: KASAN: slab-out-of-bounds in memset include/linux/string.h:326 [inline]
BUG: KASAN: slab-out-of-bounds in __unwind_start+0x2d/0x330 arch/x86/kernel/unwind_frame.c:389
Write of size 88 at addr ffff8801d818fe98 by task loop0/4078

CPU: 1 PID: 4078 Comm: loop0 Not tainted 4.15.0-rc2-next-20171204+ #58
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:

Allocated by task 3625515936:
BUG: unable to handle kernel paging request at 000000007c8b2954
IP: depot_fetch_stack+0x11/0x40 lib/stackdepot.c:201
PGD 5e28067 P4D 5e28067 PUD 5e29063 PMD 0 
Thread overran stack, or stack corrupted
Oops: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 4078 Comm: loop0 Not tainted 4.15.0-rc2-next-20171204+ #58
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: 00000000ad16368f task.stack: 00000000e9d18cac
RIP: 0010:depot_fetch_stack+0x11/0x40 lib/stackdepot.c:201
RSP: 0000:ffff8801d818fd48 EFLAGS: 00010006
RAX: 00000000001fffff RBX: ffff8801d818fb80 RCX: 0000000000000000
RDX: 000000000000001d RSI: ffff8801d818fd58 RDI: 0000000000003ff0
RBP: ffff8801d818fd78 R08: 0000000000000001 R09: 1ffff1003b031f45
R10: ffff8801cd246180 R11: 0000000000000001 R12: ffff8801d818fe98
R13: ffff8801db21a780 R14: ffff8801d818eb80 R15: ffff8801d818fb80
FS:  0000000000000000(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffff88cd0078 CR3: 00000001c154f000 CR4: 00000000001406e0
DR0: 0000000020001000 DR1: 0000000020001000 DR2: 0000000020000000
DR3: 0000000000000008 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
Code: 5d c3 e8 d3 d7 15 ff 0f 0b e8 9c 6d 4c ff eb de 90 90 90 90 90 90 90 90 90 90 89 f8 c1 ef 11 55 25 ff ff 1f 00 81 e7 f0 3f 00 00 <48> 03 3c c5 80 00 cd 87 48 89 e5 5d 8b 47 0c 48 83 c7 18 c7 46 
RIP: depot_fetch_stack+0x11/0x40 lib/stackdepot.c:201 RSP: ffff8801d818fd48
CR2: ffffffff88cd0078
---[ end trace ccb5e8e3b6343799 ]---
Kernel panic - not syncing: Fatal exception
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/12/05 01:01 linux-next 7cc61a0a562c 48359b97 .config console log report ci-upstream-next-kasan-gce
* Struck through repros no longer work on HEAD.