syzbot

 sign-in | mailing list | source | docs
🐞 Open [1651]
≡ Subsystems
🐞 Fixed [6000]
🐞 Invalid [14793]
⬇ Missing Backports [135]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

BUG: unable to handle kernel paging request in smc_ib_remember_port_attr

Status: fixed on 2018/06/07 13:52
Subsystems: net s390
[Documentation on labels]
Reported-by: syzbot+5cd61039dc9b8bfa6e47@syzkaller.appspotmail.com
Fix commit: d49baa7e12ee net/smc: check for missing nlattrs in SMC_PNETID messages
First crash: 2500d, last: 2443d
▶ ▼ Discussions (4)
Title Replies (including bot) Last reply
[PATCH 4.16 000/161] 4.16.12-stable review 171 (171) 2018/05/24 19:47
[PATCH 4.14 000/165] 4.14.44-stable review 176 (176) 2018/05/24 19:46
[PATCH] net/smc: check for missing nlattrs in SMC_PNETID messages 2 (2) 2018/05/14 20:41
BUG: unable to handle kernel paging request in smc_ib_remember_port_attr 0 (1) 2018/03/26 00:01

Sample crash report:
BUG: unable to handle kernel paging request at fffffc0000000000
PGD 0 P4D 0 
Oops: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 4476 Comm: syzkaller625382 Not tainted 4.16.0+ #17
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bytes_is_nonzero mm/kasan/kasan.c:166 [inline]
RIP: 0010:memory_is_nonzero mm/kasan/kasan.c:184 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/kasan.c:210 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/kasan.c:241 [inline]
RIP: 0010:check_memory_region_inline mm/kasan/kasan.c:257 [inline]
RIP: 0010:check_memory_region+0x126/0x1b0 mm/kasan/kasan.c:267
RSP: 0018:ffff8801aedaf2b0 EFLAGS: 00010212
RAX: fffffc0000000000 RBX: fffffc0000000000 RCX: ffffffff87204f5a
RDX: 0000000000000001 RSI: 0000000000000040 RDI: ffffffffffffffd8
RBP: ffff8801aedaf2c8 R08: dffffc0000000003 R09: fffffbfffffffffb
R10: dffffc0000000002 R11: 0000000000000017 R12: dffffc0000000003
R13: 0000000000000000 R14: ffffffffffffffd8 R15: 0000000000000000
FS:  0000000000de8880(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffffc0000000000 CR3: 00000001af794000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 memset+0x23/0x40 mm/kasan/kasan.c:285
 memset include/linux/string.h:330 [inline]
 smc_ib_remember_port_attr+0x8a/0x370 net/smc/smc_ib.c:421
 smc_pnet_add+0xb9b/0xec0 net/smc/smc_pnet.c:354
 genl_family_rcv_msg+0x889/0x1120 net/netlink/genetlink.c:599
 genl_rcv_msg+0xc6/0x170 net/netlink/genetlink.c:624
 netlink_rcv_skb+0x172/0x440 net/netlink/af_netlink.c:2448
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:635
 netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline]
 netlink_unicast+0x58b/0x740 net/netlink/af_netlink.c:1336
 netlink_sendmsg+0x9f0/0xfa0 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:629 [inline]
 sock_sendmsg+0xd5/0x120 net/socket.c:639
 ___sys_sendmsg+0x805/0x940 net/socket.c:2117
 __sys_sendmsg+0x115/0x270 net/socket.c:2155
 SYSC_sendmsg net/socket.c:2164 [inline]
 SyS_sendmsg+0x29/0x30 net/socket.c:2162
 do_syscall_64+0x29e/0x9d0 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x43fd99
RSP: 002b:00007fff486a8c58 EFLAGS: 00000213 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd99
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8
R10: 00000000004002c8 R11: 0000000000000213 R12: 00000000004016c0
R13: 0000000000401750 R14: 0000000000000000 R15: 0000000000000000
Code: ff ff ff 4d 85 c0 74 ba 48 b8 01 00 00 00 00 fc ff df 4d 01 c8 48 01 d8 41 80 39 00 74 08 e9 8c 00 00 00 48 89 d8 4c 39 c0 74 97 <80> 38 00 48 8d 58 01 74 ef eb 87 4c 89 c0 49 39 c2 74 59 e8 12 
RIP: bytes_is_nonzero mm/kasan/kasan.c:166 [inline] RSP: ffff8801aedaf2b0
RIP: memory_is_nonzero mm/kasan/kasan.c:184 [inline] RSP: ffff8801aedaf2b0
RIP: memory_is_poisoned_n mm/kasan/kasan.c:210 [inline] RSP: ffff8801aedaf2b0
RIP: memory_is_poisoned mm/kasan/kasan.c:241 [inline] RSP: ffff8801aedaf2b0
RIP: check_memory_region_inline mm/kasan/kasan.c:257 [inline] RSP: ffff8801aedaf2b0
RIP: check_memory_region+0x126/0x1b0 mm/kasan/kasan.c:267 RSP: ffff8801aedaf2b0
CR2: fffffc0000000000
---[ end trace a142559361da7dc5 ]---

Crashes (112):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/04/11 14:44 upstream b284d4d5a678 8b8de427 .config console log report syz C ci-upstream-kasan-gce-root
2018/04/06 14:53 upstream 38c23685b273 4f1152d4 .config console log report syz C ci-upstream-kasan-gce-root
2018/03/25 20:23 upstream bcfc1f455466 e033c1f1 .config console log report syz C ci-upstream-kasan-gce-root
2018/03/25 18:54 upstream bcfc1f455466 e033c1f1 .config console log report syz ci-upstream-kasan-gce-root
2018/05/21 11:22 upstream 771c577c23ba f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/21 01:30 upstream 771c577c23ba f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/19 22:48 upstream 0b449a441dac f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/19 03:57 upstream 2c71d338bef2 849705db .config console log report ci-upstream-kasan-gce-root
2018/05/18 20:03 upstream 3acf4e395260 849705db .config console log report ci-upstream-kasan-gce-root
2018/05/18 17:24 upstream 3acf4e395260 c992b767 .config console log report ci-upstream-kasan-gce-root
2018/05/18 06:12 upstream 305bb5521282 738d58ad .config console log report ci-upstream-kasan-gce-root
2018/05/17 08:01 upstream e6506eb24187 a367c1d7 .config console log report ci-upstream-kasan-gce-root
2018/05/15 23:53 upstream eeba2dfa6a0d 68ce85f1 .config console log report ci-upstream-kasan-gce-root
2018/05/13 12:21 upstream ccda3c4b7777 c05b619d .config console log report ci-upstream-kasan-gce-root
2018/05/13 03:50 upstream 427fbe89261d e726f42b .config console log report ci-upstream-kasan-gce-root
2018/05/13 00:53 upstream 427fbe89261d e726f42b .config console log report ci-upstream-kasan-gce-root
2018/05/12 21:51 upstream f0ab773f5c96 e726f42b .config console log report ci-upstream-kasan-gce-root
2018/05/12 05:19 upstream 41e3e1082367 12c7428a .config console log report ci-upstream-kasan-gce-root
2018/05/11 18:11 upstream 008464a9360e 12c7428a .config console log report ci-upstream-kasan-gce-root
2018/05/10 21:39 upstream 008464a9360e 12c7428a .config console log report ci-upstream-kasan-gce-root
2018/05/10 19:02 upstream 008464a9360e 12c7428a .config console log report ci-upstream-kasan-gce-root
2018/05/10 10:40 upstream 008464a9360e 12c7428a .config console log report ci-upstream-kasan-gce-root
2018/05/10 08:52 upstream 008464a9360e 12c7428a .config console log report ci-upstream-kasan-gce-root
2018/05/08 05:35 upstream f142f08bf7ec 045bbd4a .config console log report ci-upstream-kasan-gce-root
2018/05/07 09:58 upstream 701e39d05119 a211da1a .config console log report ci-upstream-kasan-gce-root
2018/05/06 20:56 upstream ee946c36be21 6c18ddb0 .config console log report ci-upstream-kasan-gce-root
2018/05/06 16:57 upstream ee946c36be21 6c18ddb0 .config console log report ci-upstream-kasan-gce-root
2018/05/06 08:40 upstream ee946c36be21 78b251cb .config console log report ci-upstream-kasan-gce-root
2018/05/06 01:26 upstream c1c07416cdd4 78b251cb .config console log report ci-upstream-kasan-gce-root
2018/05/05 02:03 upstream 625e2001e99e 9ce14f4b .config console log report ci-upstream-kasan-gce-root
2018/05/04 21:18 upstream 150426981426 9ce14f4b .config console log report ci-upstream-kasan-gce-root
2018/05/04 17:00 upstream 150426981426 9ce14f4b .config console log report ci-upstream-kasan-gce-root
2018/05/04 06:43 upstream c15f6d8d4715 9ce14f4b .config console log report ci-upstream-kasan-gce-root
2018/05/03 23:30 upstream c15f6d8d4715 9ce14f4b .config console log report ci-upstream-kasan-gce-root
2018/05/03 19:39 upstream f4ef6a438cee 9ce14f4b .config console log report ci-upstream-kasan-gce-root
2018/05/03 10:58 upstream f4ef6a438cee 9ce14f4b .config console log report ci-upstream-kasan-gce-root
2018/05/02 19:06 upstream 2d618bdf7163 d5b114b4 .config console log report ci-upstream-kasan-gce-root
2018/05/02 02:09 upstream f2125992e7cb d5b114b4 .config console log report ci-upstream-kasan-gce-root
2018/05/01 13:25 upstream fff75eb2a08c d5b114b4 .config console log report ci-upstream-kasan-gce-root
2018/05/01 10:06 upstream 8188fc8bef8c d5b114b4 .config console log report ci-upstream-kasan-gce-root
2018/04/30 14:22 upstream 6da6c0db5316 06db3cec .config console log report ci-upstream-kasan-gce-root
2018/04/30 12:28 upstream 6da6c0db5316 06db3cec .config console log report ci-upstream-kasan-gce-root
2018/04/30 09:04 upstream 6da6c0db5316 06db3cec .config console log report ci-upstream-kasan-gce-root
2018/04/28 06:58 upstream 46dc111dfe47 d5a5d045 .config console log report ci-upstream-kasan-gce-root
2018/04/27 04:04 upstream 0644f186fc9d 73417389 .config console log report ci-upstream-kasan-gce-root
2018/04/22 07:34 upstream 5e7c7806111a d23fcf6c .config console log report ci-upstream-kasan-gce-root
2018/03/25 18:40 upstream bcfc1f455466 e033c1f1 .config console log report ci-upstream-kasan-gce-root
* Struck through repros no longer work on HEAD.