syzbot


BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf

Status: closed as dup on 2022/08/30 06:41
Reported-by: syzbot+be4b95faeb7a9073bb88@syzkaller.appspotmail.com
First crash: 102d, last: 88d
Duplicate of (1):
Title Repro Cause bisect Fix bisect Count Last Reported
BUG: unable to handle kernel NULL pointer dereference in gsmld_receive_buf C error 324 90d 117d
Patch testing requests:
Created Duration User Patch Repo Result
2022/08/24 18:54 16m mazinalhaddad05@gmail.com patch upstream OK log

Sample crash report:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000
Mem abort info:
  ESR = 0x0000000086000006
  EC = 0x21: IABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x06: level 2 translation fault
user pgtable: 4k pages, 48-bit VAs, pgdp=000000010b44f000
[0000000000000000] pgd=080000010b5f3003, p4d=080000010b5f3003, pud=080000010b1ce003, pmd=0000000000000000
Internal error: Oops: 86000006 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 28 Comm: kworker/u4:1 Not tainted 6.0.0-rc2-syzkaller-16440-g1c23f9e627a7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/20/2022
Workqueue: events_unbound flush_to_ldisc
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : 0x0
lr : gsmld_receive_buf+0x140/0x214 drivers/tty/n_gsm.c:2861
sp : ffff80000f603c30
x29: ffff80000f603c40 x28: 0000000000000000 x27: 00000000000003d9
x26: 0000000000000000 x25: 0000000000000000 x24: ffff80000d937000
x23: ffff80000d681e40 x22: ffff0000c929b800 x21: 0000000000000000
x20: ffff80000c205988 x19: ffff0000c91cf446 x18: ffff80000d2dec40
x17: 0000000000000008 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000000 x13: 0000000000000004 x12: ffff80000d681e78
x11: ff808000098e7e04 x10: 0000000000000000 x9 : ffff8000098e7e04
x8 : 0000000000000000 x7 : ffff8000098dac3c x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 00000000000003da
x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000c929b800
Call trace:
 0x0
 tty_ldisc_receive_buf+0xb8/0xcc drivers/tty/tty_buffer.c:461
 tty_port_default_receive_buf+0x54/0x8c drivers/tty/tty_port.c:39
 receive_buf drivers/tty/tty_buffer.c:511 [inline]
 flush_to_ldisc+0x150/0x358 drivers/tty/tty_buffer.c:561
 process_one_work+0x2d8/0x504 kernel/workqueue.c:2289
 worker_thread+0x340/0x610 kernel/workqueue.c:2436
 kthread+0x12c/0x158 kernel/kthread.c:376
 ret_from_fork+0x10/0x20
Code: bad PC value
---[ end trace 0000000000000000 ]---

Crashes (26):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-gce-arm64 2022/08/23 13:52 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 1c23f9e627a7 cea8b0f7 .config log report syz C BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/09/05 23:54 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 85413d1e802e 9dcd38fc .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/09/05 23:21 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 85413d1e802e 9dcd38fc .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/09/05 20:15 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 85413d1e802e 922294ab .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/09/05 20:09 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 85413d1e802e 922294ab .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/09/03 12:47 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 85413d1e802e 49e94a20 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/09/03 03:16 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 85413d1e802e 49e94a20 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/09/02 23:48 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 85413d1e802e 25194605 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/31 14:10 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d 51e54e30 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/31 01:28 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d 4a380809 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/31 00:11 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d 4a380809 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/30 19:43 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d 4a380809 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/30 11:35 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d 5b44472d .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/30 04:58 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d 5b44472d .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/30 00:31 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d 5b44472d .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/29 17:59 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d 5b44472d .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/28 18:14 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d 07177916 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/27 19:33 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d 07177916 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/26 18:44 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d e5a303f1 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/25 12:17 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d 514514f6 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/25 11:50 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d 514514f6 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/25 10:22 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a41a877bc12d 514514f6 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/24 12:19 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 1c23f9e627a7 cea8b0f7 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/24 04:33 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 1c23f9e627a7 cea8b0f7 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/23 12:06 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 1c23f9e627a7 cea8b0f7 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
ci-upstream-gce-arm64 2022/08/23 11:36 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 1c23f9e627a7 cea8b0f7 .config log report info BUG: unable to handle kernel NULL pointer dereference in tty_ldisc_receive_buf
* Struck through repros no longer work on HEAD.