| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Fri, 24 Jun 2016 09:15:49 +0800
From: kernel test robot <xiaolong.ye@...el.com>
To: Zhang Rui <rui.zhang@...el.com>
Cc: Eduardo Valentin <edubezval@...il.com>,
LKML <linux-kernel@...r.kernel.org>,
Stephen Rothwell <sfr@...b.auug.org.au>, lkp@...org
Subject: [lkp] [thermal] 71765b477c: BUG: KASAN: slab-out-of-bounds in
thermal_zone_create_device_groups+0x4c3/0x62a at addr ffff88000883ec20
FYI, we noticed the following commit:
https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master
commit 71765b477ce8a5cf0bc84a870a79835b03401df3 ("thermal: core: move thermal_zone sysfs to thermal_sysfs.c")
on test machine: vm-kbuild-yocto-ia32: 1 threads qemu-system-x86_64 -enable-kvm -cpu Westmere with 320M memory
caused below changes:
+---------------------------------------------------------------------------+------------+------------+
| | 575e51a198 | 71765b477c |
+---------------------------------------------------------------------------+------------+------------+
| boot_successes | 16 | 0 |
| boot_failures | 10 | 44 |
| BUG:kernel_test_oversize | 6 | |
| BUG:kernel_test_crashed | 4 | |
| BUG:KASAN:slab-out-of-bounds_in_thermal_zone_create_device_groups_at_addr | 0 | 44 |
| BUG_kmalloc-#(Not_tainted):kasan:bad_access_detected | 0 | 44 |
| INFO:Allocated_in#age=#cpu=#pid= | 0 | 44 |
| INFO:Freed_in#age=#cpu=#pid= | 0 | 44 |
| INFO:Slab#objects=#used=#fp=#flags= | 0 | 44 |
| INFO:Object#@...set=#fp= | 0 | 44 |
| BUG:KASAN:slab-out-of-bounds_in_internal_create_group_at_addr | 0 | 44 |
| BUG_kmalloc-#(Tainted:G_B):kasan:bad_access_detected | 0 | 44 |
| backtrace:power_supply_register | 0 | 44 |
| backtrace:test_power_init | 0 | 44 |
| backtrace:kernel_init_freeable | 0 | 44 |
+---------------------------------------------------------------------------+------------+------------+
[ 34.228978] power_supply test_battery: uevent
[ 34.229549] power_supply test_battery: POWER_SUPPLY_NAME=test_battery
[ 34.230452] ==================================================================
[ 34.231531] BUG: KASAN: slab-out-of-bounds in thermal_zone_create_device_groups+0x4c3/0x62a at addr ffff88000883ec20
[ 34.233051] Write of size 8 by task swapper/0/1
[ 34.233728] =============================================================================
[ 34.234922] BUG kmalloc-8 (Not tainted): kasan: bad access detected
[ 34.235844] -----------------------------------------------------------------------------
[ 34.235844]
[ 34.237254] Disabling lock debugging due to kernel taint
[ 34.238051] INFO: Allocated in 0xffff88000883f028 age=18446744073709485001 cpu=0 pid=0
[ 34.247240] INFO: Freed in 0xfffefbc9 age=18446744073709485001 cpu=0 pid=0
[ 34.253883] INFO: Slab 0xffffea0000220f80 objects=23 used=19 fp=0xffff88000883f180 flags=0x4080
[ 34.254989] INFO: Object 0xffff88000883ec18 @offset=3096 fp=0xcccccccccccccccc
[ 34.254989]
[ 34.256094] Redzone ffff88000883ec10: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ
[ 34.257193] Object ffff88000883ec18: cc cc cc cc cc cc cc cc ........
[ 34.258278] Redzone ffff88000883ec20: 00 00 00 00 00 00 00 00 ........
[ 34.265807] Padding ffff88000883ed60: c7 fb fe ff 00 00 00 00 ........
[ 34.267083] CPU: 0 PID: 1 Comm: swapper/0 Tainted: G B 4.7.0-rc3-00022-g71765b4 #1
[ 34.268358] ffffea0000220f80 ffff88000f9efab0 ffffffff89e344e1 ffff88000883e000
[ 34.269534] ffff88000883ec18 ffff88000f9efae0 ffffffff89ccb769 ffff880000090300
[ 34.270709] ffffea0000220f80 ffff88000883ec18 ffff88000883ec20 ffff88000f9efb08
[ 34.271881] Call Trace:
[ 34.272261] [<ffffffff89e344e1>] dump_stack+0x86/0xc0
[ 34.272954] [<ffffffff89ccb769>] print_trailer+0x115/0x195
[ 34.273673] [<ffffffff89ccf560>] object_err+0x34/0x3b
[ 34.274332] [<ffffffff89cd49e3>] kasan_report_error+0x213/0x54d
[ 34.275102] [<ffffffff89cd3c43>] ? kasan_unpoison_shadow+0x35/0x43
[ 34.275906] [<ffffffff89cd3c43>] ? kasan_unpoison_shadow+0x35/0x43
[ 34.276714] [<ffffffff89cd4d56>] kasan_report+0x39/0x3b
[ 34.277534] [<ffffffff8a718b56>] ? thermal_zone_create_device_groups+0x4c3/0x62a
[ 34.278495] [<ffffffff89cd46c7>] __asan_store8+0x61/0x6d
[ 34.279189] [<ffffffff8a718b56>] thermal_zone_create_device_groups+0x4c3/0x62a
[ 34.280127] [<ffffffff8a7160d4>] thermal_zone_device_register+0x2ac/0xa61
[ 34.281009] [<ffffffff8a715e28>] ? thermal_notify_framework+0x10/0x10
[ 34.281848] [<ffffffff8a531db9>] ? dev_warn+0xe2/0xe2
[ 34.282514] [<ffffffff89b6366f>] ? lockdep_init_map+0xf7/0x2cc
[ 34.283273] [<ffffffff8a671710>] __power_supply_register+0x5c3/0x7a3
[ 34.284103] [<ffffffff8a671ee8>] power_supply_register+0x13/0x15
[ 34.284892] [<ffffffff8ba8c21e>] test_power_init+0x35/0xe6
[ 34.285654] [<ffffffff8ba8c1e9>] ? max8925_power_driver_init+0x14/0x14
[ 34.286636] [<ffffffff8ba3135d>] do_one_initcall+0xf1/0x1aa
[ 34.287483] [<ffffffff8ba3126c>] ? start_kernel+0x485/0x485
[ 34.288306] [<ffffffff89b25760>] ? parse_args+0x60/0x4d2
[ 34.289005] [<ffffffff8ba30ad4>] ? set_debug_rodata+0x12/0x12
[ 34.289755] [<ffffffff8ba315d3>] kernel_init_freeable+0x1bd/0x24d
[ 34.290546] [<ffffffff8aa29a6e>] kernel_init+0x13/0x125
[ 34.291226] [<ffffffff8aa3542f>] ret_from_fork+0x1f/0x40
[ 34.291917] [<ffffffff8aa29a5b>] ? rest_init+0xd2/0xd2
[ 34.292586] Memory state around the buggy address:
[ 34.293202] ffff88000883eb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 34.294120] ffff88000883eb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
FYI, raw QEMU command line is:
qemu-system-x86_64 -enable-kvm -cpu Westmere -kernel /pkg/linux/x86_64-randconfig-s3-06181227/gcc-6/71765b477ce8a5cf0bc84a870a79835b03401df3/vmlinuz-4.7.0-rc3-00022-g71765b4 -append 'root=/dev/ram0 user=lkp job=/lkp/scheduled/vm-kbuild-yocto-ia32-13/bisect_boot-1-yocto-minimal-i386.cgz-x86_64-randconfig-s3-06181227-71765b477ce8a5cf0bc84a870a79835b03401df3-20160618-30208-1m0tl7f-0.yaml~ ARCH=x86_64 kconfig=x86_64-randconfig-s3-06181227 branch=linux-devel/devel-spot-201606181132 commit=71765b477ce8a5cf0bc84a870a79835b03401df3 BOOT_IMAGE=/pkg/linux/x86_64-randconfig-s3-06181227/gcc-6/71765b477ce8a5cf0bc84a870a79835b03401df3/vmlinuz-4.7.0-rc3-00022-g71765b4 max_uptime=600 RESULT_ROOT=/result/boot/1/vm-kbuild-yocto-ia32/yocto-minimal-i386.cgz/x86_64-randconfig-s3-06181227/gcc-6/71765b477ce8a5cf0bc84a870a79835b03401df3/0 LKP_SERVER=inn earlyprintk=ttyS0,115200 systemd.log_level=err debug apic=debug sysrq_always_enabled rcupdate.rcu_cpu_stall_timeout=100 panic=-1 softlockup_panic=1 nmi_watchdog=panic oops=panic load_ramdisk=2 prompt_ramdisk=0 console=ttyS0,115200 console=tty0 vga=normal rw ip=::::vm-kbuild-yocto-ia32-13::dhcp drbd.minor_count=8' -initrd /fs/sdf1/initrd-vm-kbuild-yocto-ia32-13 -m 320 -smp 1 -device e1000,netdev=net0 -netdev user,id=net0 -boot order=nc -no-reboot -watchdog i6300esb -rtc base=localtime -drive file=/fs/sdf1/disk0-vm-kbuild-yocto-ia32-13,media=disk,if=virtio -pidfile /dev/shm/kboot/pid-vm-kbuild-yocto-ia32-13 -serial file:/dev/shm/kboot/serial-vm-kbuild-yocto-ia32-13 -daemonize -display none -monitor null
Thanks,
Xiaolong
View attachment "config-4.7.0-rc3-00022-g71765b4" of type "text/plain" (79777 bytes)
Download attachment "dmesg.xz" of type "application/octet-stream" (13116 bytes)
Powered by blists - more mailing lists