Re: BUG: unable to handle kernel NULL pointer dereference in call_rcu

From: Andrey Konovalov
Date: Wed Feb 24 2021 - 10:41:09 EST


On Wed, Feb 24, 2021 at 1:58 PM syzbot
<syzbot+9d3ede723bdc58553f13@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
>
> syzbot has bisected this issue to:
>
> commit 97593cad003c668e2532cb2939a24a031f8de52d
> Author: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
> Date: Tue Dec 22 20:03:28 2020 +0000
>
> kasan: sanitize objects when metadata doesn't fit
>
> bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=106689b6d00000
> start commit: 614cb589 Merge tag 'acpi-5.11-rc1-2' of git://git.kernel.o..
> git tree: upstream
> final oops: https://syzkaller.appspot.com/x/report.txt?x=126689b6d00000
> console output: https://syzkaller.appspot.com/x/log.txt?x=146689b6d00000
> kernel config: https://syzkaller.appspot.com/x/.config?x=bf519e1e96191576
> dashboard link: https://syzkaller.appspot.com/bug?extid=9d3ede723bdc58553f13
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=11830e93500000
> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=13d92057500000
>
> Reported-by: syzbot+9d3ede723bdc58553f13@xxxxxxxxxxxxxxxxxxxxxxxxx
> Fixes: 97593cad003c ("kasan: sanitize objects when metadata doesn't fit")
>
> For information about bisection process see: https://goo.gl/tpsmEJ#bisection

#syz fix: kasan: fix null pointer dereference in kasan_record_aux_stack