syzbot


BUG: unable to handle kernel NULL pointer dereference in kernel_accept

Status: closed as invalid on 2018/09/05 12:51
Subsystems: net s390
[Documentation on labels]
First crash: 2363d, last: 2342d

Sample crash report:
IPVS: ftp: loaded support on port[0] = 21
BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
PGD 800000020009c067 P4D 800000020009c067 PUD 20e3f7067 PMD 0 
Oops: 0000 [#1] SMP PTI
CPU: 1 PID: 4151 Comm: kworker/1:25 Not tainted 4.18.0-rc8+ #32
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events smc_tcp_listen_work
RIP: 0010:kernel_accept+0x1f/0x140 net/socket.c:3246
Code: 5b 41 5e 5d c3 66 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 41 89 d7 49 89 f6 48 89 fb e8 65 2d ec fe 48 8b 43 20 <0f> b7 78 10 8b 80 f8 01 00 00 0f b6 d4 c1 e8 10 89 c6 4c 89 f1 e8 
RSP: 0018:ffff8802087b7de0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff880211c68b00 RCX: ffff88020252a940
RDX: 0000000000000000 RSI: ffff8802087b7e18 RDI: ffff880211c68b00
RBP: ffff8802087b7e08 R08: 0000000000000000 R09: ffff8802040b8a70
R10: ffff8802040b8a00 R11: ffffffff828df9b0 R12: ffff8802087d8e88
R13: ffff88021fd24800 R14: ffff8802087b7e18 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000010 CR3: 0000000202696000 CR4: 00000000001406e0
Call Trace:
 smc_clcsock_accept net/smc/af_smc.c:701 [inline]
 smc_tcp_listen_work+0x85/0x370 net/smc/af_smc.c:1114
 process_one_work+0x28e/0x580 kernel/workqueue.c:2153
 worker_thread+0x317/0x690 kernel/workqueue.c:2296
 kthread+0x127/0x140 kernel/kthread.c:247
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:415
Modules linked in:
Dumping ftrace buffer:
   (ftrace buffer empty)
CR2: 0000000000000010
---[ end trace f5147703759a7dd2 ]---
RIP: 0010:kernel_accept+0x1f/0x140 net/socket.c:3246
Code: 5b 41 5e 5d c3 66 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 41 89 d7 49 89 f6 48 89 fb e8 65 2d ec fe 48 8b 43 20 <0f> b7 78 10 8b 80 f8 01 00 00 0f b6 d4 c1 e8 10 89 c6 4c 89 f1 e8 
RSP: 0018:ffff8802087b7de0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff880211c68b00 RCX: ffff88020252a940
RDX: 0000000000000000 RSI: ffff8802087b7e18 RDI: ffff880211c68b00
RBP: ffff8802087b7e08 R08: 0000000000000000 R09: ffff8802040b8a70
R10: ffff8802040b8a00 R11: ffffffff828df9b0 R12: ffff8802087d8e88
R13: ffff88021fd24800 R14: ffff8802087b7e18 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000010 CR3: 0000000202696000 CR4: 00000000001406e0

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/08/10 05:53 https://github.com/google/kmsan.git master 0cc51dc9a291 1fb62d58 .config console log report syz C ci-upstream-kmsan-gce
2018/08/31 16:26 https://github.com/google/kmsan.git master ab98bd30a4ba a4718693 .config console log report ci-upstream-kmsan-gce
2018/08/26 16:26 https://github.com/google/kmsan.git master 0cc51dc9a291 758cd203 .config console log report ci-upstream-kmsan-gce
2018/08/10 05:17 https://github.com/google/kmsan.git master 0cc51dc9a291 1fb62d58 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.