KASAN: null-ptr-deref Write in corrupted

Status: closed as dup on 2021/01/07 11:42
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+500bfbdf35e54e9b35f7@syzkaller.appspotmail.com
First crash: 2055d, last: 2055d
Cause bisection: failed (error log, bisect log)
  
▶ ▼ Duplicate of
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
KASAN: null-ptr-deref Write in vhci_shutdown_connection usb 12 syz, C unreliable 3322 1983d 2068d
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
KASAN: null-ptr-deref Write in corrupted 0 (1) 2021/01/06 21:20

Sample crash report:
vhci_hcd: stop threads
vhci_hcd: release socket
vhci_hcd: disconnect device
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
BUG: KASAN: null-ptr-deref in atomic_fetch_add_relaxed include/asm-generic/atomic-instrumented.h:142 [inline]
BUG: KASAN: null-ptr-deref in __refcount_add include/linux/refcount.h:193 [inline]
BUG: KASAN: null-ptr-deref in __refcount_inc include/linux/refcount.h:250 [inline]
BUG: KASAN: null-ptr-deref in refcount_inc include/linux/refcount.h:267 [inline]
BUG: KASAN: null-ptr-deref in get_task_struct include/linux/sched/task.h:102 [inline]
BUG: KASAN: null-ptr-deref in kthread_stop+0x90/0x720 kernel/kthread.c:591
Write of size 4 at addr 0000000000000024 by task kworker/u4:11/471

CPU: 0 PID: 471 Comm: kworker/u4:11 Not tainted 5.11.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usbip_event event_handler
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x107/0x163 lib/dump_stack.c:120
 __kasan_report mm/kasan/report.c:400 [inline]
 kasan_report.cold+0x5f/0xd5 mm/kasan/report.c:413

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/01/02 21:17 upstream eda809aef534 79264ae3 .config console log report syz ci-upstream-kasan-gce-selinux-root
* Struck through repros no longer work on HEAD.