| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Wed, 23 Aug 2017 14:08:05 +0800
From: kernel test robot <xiaolong.ye@...el.com>
To: Quentin Schulz <quentin.schulz@...e-electrons.com>
Cc: Dmitry Torokhov <dmitry.torokhov@...il.com>,
Chen-Yu Tsai <wens@...e.org>,
LKML <linux-kernel@...r.kernel.org>, linux-input@...r.kernel.org,
lkp@...org
Subject: [lkp-robot] [Input] 2ebdfecef5: BUG:KASAN:global-out-of-bounds
FYI, we noticed the following commit:
commit: 2ebdfecef50840a9c6fd6a2236a1bdf2942dc1a7 ("Input: axp20x-pek - use driver_data of platform_device_id instead of extended attributes")
https://git.kernel.org/cgit/linux/kernel/git/dtor/input.git next
in testcase: boot
on test machine: qemu-system-x86_64 -enable-kvm -smp 2 -m 512M
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+------------------------------------------------------------------+------------+------------+
| | 64954e3442 | 2ebdfecef5 |
+------------------------------------------------------------------+------------+------------+
| boot_successes | 16 | 0 |
| boot_failures | 0 | 14 |
| BUG:KASAN:global-out-of-bounds | 0 | 12 |
| invoked_oom-killer:gfp_mask=0x | 0 | 2 |
| Mem-Info | 0 | 2 |
| Kernel_panic-not_syncing:Out_of_memory_and_no_killable_processes | 0 | 2 |
+------------------------------------------------------------------+------------+------------+
[ 3.472769] BUG: KASAN: global-out-of-bounds in platform_match+0x26b/0x2a3
[ 3.475058] Read of size 1 at addr ffffffff84d9dd00 by task swapper/1
[ 3.477290]
[ 3.479003] CPU: 0 PID: 1 Comm: swapper Not tainted 4.12.0-00069-g2ebdfec #1
[ 3.481349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.9.3-20161025_171302-gandalf 04/01/2014
[ 3.484077] Call Trace:
[ 3.485913] dump_stack+0x19/0x1b
[ 3.487820] print_address_description+0x1d1/0x2aa
[ 3.489872] ? platform_match+0x26b/0x2a3
[ 3.491858] kasan_report+0x212/0x32a
[ 3.493729] __asan_report_load1_noabort+0x14/0x16
[ 3.495745] platform_match+0x26b/0x2a3
[ 3.497671] ? driver_probe_device+0xc7f/0xc7f
[ 3.499682] __driver_attach+0x67/0x1e0
[ 3.501626] bus_for_each_dev+0x114/0x1ae
[ 3.503596] ? bus_remove_file+0xc3/0xc3
[ 3.505535] ? kasan_unpoison_shadow+0x35/0x43
[ 3.507521] driver_attach+0x38/0x49
[ 3.509423] bus_add_driver+0x3dc/0x72b
[ 3.511369] ? regulator_haptic_driver_init+0x14/0x14
[ 3.513483] driver_register+0x187/0x3b5
[ 3.515471] ? regulator_haptic_driver_init+0x14/0x14
[ 3.517597] __platform_driver_register+0xcc/0x119
[ 3.519711] axp20x_pek_driver_init+0x12/0x14
[ 3.521789] do_one_initcall+0x110/0x1df
[ 3.523791] ? start_kernel+0x538/0x538
[ 3.525754] kernel_init_freeable+0x265/0x2f5
[ 3.527796] ? rest_init+0xa2/0xa2
[ 3.529716] kernel_init+0xe/0x115
[ 3.531604] ? rest_init+0xa2/0xa2
[ 3.533465] ret_from_fork+0x25/0x30
[ 3.535305]
[ 3.536862] The buggy address belongs to the variable:
[ 3.538824] 0xffffffff84d9dd00
[ 3.540565]
[ 3.542120] Memory state around the buggy address:
[ 3.544082] ffffffff84d9dc00: 01 fa fa fa fa fa fa fa 00 00 00 00 07 fa fa fa
[ 3.546323] ffffffff84d9dc80: fa fa fa fa 00 fa fa fa fa fa fa fa 00 00 00 00
[ 3.548536] >ffffffff84d9dd00: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00
[ 3.550722] ^
[ 3.552445] ffffffff84d9dd80: 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa fa
[ 3.554648] ffffffff84d9de00: 00 00 00 00 00 fa fa fa fa fa fa fa 00 01 fa fa
[ 3.556827] ==================================================================
[ 3.559008] Disabling lock debugging due to kernel taint
[ 3.561224] usbcore: registered new interface driver yealink
[ 3.563226] ideapad_slidebar: DMI does not match
[ 3.565389] rtc_cmos 00:00: RTC can wake from S4
[ 3.567433] rtc rtc0: alarm rollover: day
[ 3.569376] rtc rtc0: rtc_cmos: dev (251:0)
[ 3.571146] rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0
[ 3.573325] rtc_cmos 00:00: alarms up to one day, y3k, 114 bytes nvram, hpet irqs
[ 3.576273] rtc rtc1: alarm rollover: day
[ 3.578100] rtc rtc1: test: dev (251:1)
[ 3.579747] rtc-test rtc-test.0: rtc core: registered test as rtc1
[ 3.581804] rtc rtc2: alarm rollover: day
[ 3.583634] rtc rtc2: test: dev (251:2)
[ 3.585288] rtc-test rtc-test.1: rtc core: registered test as rtc2
[ 3.587391] i2c /dev entries driver
[ 3.589634] i2c-parport: adapter type unspecified
[ 3.591422] i2c-parport-light: adapter type unspecified
[ 3.593291] usbcore: registered new interface driver RobotFuzz Open Source InterFace, OSIF
[ 3.595572] usbcore: registered new interface driver i2c-tiny-usb
[ 3.597814] saa7146: register extension 'Multimedia eXtension Board'
[ 3.599871] saa7146: register extension 'hexium HV-PCI6 Orion'
[ 3.601859] saa7146: register extension 'hexium gemini'
[ 3.603770] cx25821: driver version 0.0.106 loaded
[ 3.605827] pps pps0: new PPS source ktimer
[ 3.607615] pps pps0: ktimer PPS source registered
[ 3.609427] pps_ldisc: PPS line discipline registered
[ 3.611274] Driver for 1-wire Dallas network protocol.
[ 3.613412] __power_supply_register: Expected proper parent device for 'test_ac'
[ 3.615641] __power_supply_register: Expected proper parent device for 'test_battery'
[ 3.618031] (NULL device *): hwmon_device_register() is deprecated. Please convert the driver to use hwmon_device_register_with_info().
[ 3.622214] __power_supply_register: Expected proper parent device for 'test_usb'
[ 3.625566] applesmc: supported laptop not found!
[ 3.627573] applesmc: driver init failed (ret=-19)!
[ 3.631045] pc87360: PC8736x not detected, module not inserted
[ 3.633253] sch56xx_common: Unsupported device id: 0xff
[ 3.635445] sch56xx_common: Unsupported device id: 0xff
[ 3.638341] ib700wdt: WDT driver for IB700 single board computer initialising
[ 3.640883] wafer5823wdt: WDT driver for Wafer 5823 single board computer initialising
[ 3.643838] wafer5823wdt: I/O address 0x0443 already in use
[ 3.646052] it87_wdt: no device
[ 3.647972] sc1200wdt: build 20020303
[ 3.649909] sc1200wdt: io parameter must be specified
[ 3.652029] sbc60xxwdt: I/O address 0x0443 already in use
[ 3.654212] machzwd: MachZ ZF-Logic Watchdog driver initializing
[ 3.656409] machzwd: no ZF-Logic found
[ 3.658349] sbc_epx_c3: cannot register miscdev on minor=130 (err=-16)
[ 3.661002] CHRDEV "ttySDIO" major number 223 goes below the dynamic allocation range
[ 3.663457] sdhci: Secure Digital Host Controller Interface driver
[ 3.665684] sdhci: Copyright(c) Pierre Ossman
[ 3.667696] wbsd: Winbond W83L51xD SD/MMC card interface driver
[ 3.669890] wbsd: Copyright(c) Pierre Ossman
[ 3.672011] VUB300 Driver rom wait states = 1C irqpoll timeout = 0400
[ 3.672201] usbcore: registered new interface driver vub300
[ 3.676766] usbcore: registered new interface driver ushc
[ 3.678946] sdhci-pltfm: SDHCI platform and OF driver helper
[ 3.682070] ledtrig-cpu: registered to indicate activity on CPUs
[ 3.684771] dcdbas dcdbas: Dell Systems Management Base Driver (version 5.6.0-3.2)
[ 3.688095] CHRDEV "hidraw" major number 222 goes below the dynamic allocation range
To reproduce:
git clone https://github.com/01org/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
Xiaolong
View attachment "config-4.12.0-00069-g2ebdfec" of type "text/plain" (107205 bytes)
View attachment "job-script" of type "text/plain" (3947 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (14316 bytes)
Powered by blists - more mailing lists