syzbot


BUG: unable to handle kernel NULL pointer dereference in qlist_move_cache (2)

Status: closed as invalid on 2018/09/05 11:24
Subsystems: tipc
[Documentation on labels]
Reported-by: syzbot+9cde57aea1fbeb7d3335@syzkaller.appspotmail.com
First crash: 2432d, last: 2427d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: unable to handle kernel NULL pointer dereference in qlist_move_cache tipc 1 2560d 2560d 0/28 closed as invalid on 2017/12/05 10:45

Sample crash report:
ÿÿ: renamed from bcsh0
BUG: unable to handle kernel NULL pointer dereference at 0000000000000016
IP: qlist_put mm/kasan/quarantine.c:63 [inline]
IP: qlist_move_cache+0x4a/0xf0 mm/kasan/quarantine.c:281
PGD 0 P4D 0 
Oops: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 8864 Comm: kworker/u4:7 Not tainted 4.16.0-rc7+ #372
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
RIP: 0010:qlist_put mm/kasan/quarantine.c:63 [inline]
RIP: 0010:qlist_move_cache+0x4a/0xf0 mm/kasan/quarantine.c:281
RSP: 0018:ffff8801caf4f090 EFLAGS: 00010082
RAX: 0000000000000002 RBX: 000077ff80000000 RCX: ffff88017a3fc1c0
RDX: ffff8801d412a200 RSI: ffff8801caf4f0b0 RDI: ffffffff89e08c50
RBP: ffff8801caf4f0a0 R08: 0000000000000000 R09: 0000000080000000
R10: ffff8801b5477c00 R11: ffffea0000000000 R12: ffffea0005eefa1f
R13: ffffffff8861bd40 R14: ffffffff89e0cee0 R15: ffff8801d412a200
FS:  0000000000000000(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000016 CR3: 000000000846a006 CR4: 00000000001606e0
DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 quarantine_remove_cache+0x79/0xf0 mm/kasan/quarantine.c:317
 kasan_cache_shutdown+0x9/0x10 mm/kasan/kasan.c:381
 shutdown_cache+0x15/0x1b0 mm/slab_common.c:577
 kmem_cache_destroy+0x236/0x250 mm/slab_common.c:876
 tipc_server_stop+0x13f/0x190 net/tipc/server.c:708
 tipc_topsrv_stop+0x1fe/0x350 net/tipc/subscr.c:397
 tipc_exit_net+0x15/0x40 net/tipc/core.c:96
 ops_exit_list.isra.6+0xae/0x150 net/core/net_namespace.c:142
 cleanup_net+0x6a1/0xcb0 net/core/net_namespace.c:517
 process_one_work+0xc47/0x1bb0 kernel/workqueue.c:2113
 worker_thread+0x223/0x1990 kernel/workqueue.c:2247
 kthread+0x33c/0x400 kernel/kthread.c:238
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:406
Code: 00 00 00 48 c7 47 10 00 00 00 00 49 bb 00 00 00 00 00 ea ff ff 48 89 e5 41 54 53 48 bb 00 00 00 80 ff 77 00 00 eb 27 48 83 3f 00 <8b> 40 14 74 7f 4c 8b 47 08 49 89 08 48 89 4f 08 48 c7 01 00 00 
RIP: qlist_put mm/kasan/quarantine.c:63 [inline] RSP: ffff8801caf4f090
RIP: qlist_move_cache+0x4a/0xf0 mm/kasan/quarantine.c:281 RSP: ffff8801caf4f090
CR2: 0000000000000016
---[ end trace 25497a96ed376851 ]---

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/03/31 03:46 upstream 9dd2326890d8 8fbce0e4 .config console log report ci-upstream-kasan-gce
2018/03/31 01:10 upstream 9dd2326890d8 8fbce0e4 .config console log report ci-upstream-kasan-gce
2018/03/29 12:20 upstream 0b412605ef5f d47f0ed6 .config console log report ci-upstream-kasan-gce
2018/03/26 07:48 upstream 3eb2ce825ea1 e033c1f1 .config console log report ci-upstream-kasan-gce
* Struck through repros no longer work on HEAD.