syzbot


BUG: unable to handle kernel NULL pointer dereference in kmsan_thread_create

Status: closed as invalid on 2018/09/27 12:53
Subsystems: net
[Documentation on labels]
First crash: 2605d, last: 2539d

Sample crash report:
Free swap  = 0kB
Total swap = 0kB
1965969 pages RAM
0 pages HighMem/MovableOnly
102442 pages reserved
BUG: unable to handle kernel NULL pointer dereference at 00000000000008f4
PGD 8000000079826067 P4D 8000000079826067 PUD 79827067 PMD 0 
Oops: 0002 [#1] SMP PTI
CPU: 0 PID: 31154 Comm: ip Not tainted 4.19.0-rc1+ #40
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:memset_erms+0x9/0x10 arch/x86/lib/memset_64.S:65
Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 <f3> aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01
RSP: 0018:ffff88007987e8e8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: fffffffffffffff4 RCX: 0000000000000fb0
RDX: 0000000000000fb0 RSI: 0000000000000000 RDI: 00000000000008f4
RBP: ffff88007987e8f8 R08: 0000000000000000 R09: 00000000000008f4
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000dda000c5
R13: 0000000000000000 R14: 0000000000000282 R15: fffffffffffffff4
FS:  00007f0d5ee8f700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000000008f4 CR3: 000000007986e000 CR4: 00000000001406f0
Call Trace:
 kmsan_thread_create+0x4b/0x90 mm/kmsan/kmsan_hooks.c:30
 __kthread_create_on_node+0x71b/0x810 kernel/kthread.c:345
 kthread_create_on_node+0x23f/0x270 kernel/kthread.c:381
 init_rescuer+0x334/0x6f0 kernel/workqueue.c:4033
 __alloc_workqueue_key+0x1d90/0x2300 kernel/workqueue.c:4109
 bond_init+0x11d/0x750 drivers/net/bonding/bond_main.c:4734
 register_netdevice+0x2d6/0x2690 net/core/dev.c:8410
 bond_newlink+0x107/0x1c0 drivers/net/bonding/bond_netlink.c:453
 rtnl_newlink+0x26bb/0x39e0 net/core/rtnetlink.c:3099
 rtnetlink_rcv_msg+0xa0b/0x1530 net/core/rtnetlink.c:4711
 netlink_rcv_skb+0x36e/0x5f0 net/netlink/af_netlink.c:2454
 rtnetlink_rcv+0x50/0x60 net/core/rtnetlink.c:4729
 netlink_unicast_kernel net/netlink/af_netlink.c:1317 [inline]
 netlink_unicast+0x1638/0x1720 net/netlink/af_netlink.c:1343
 netlink_sendmsg+0x1205/0x1290 net/netlink/af_netlink.c:1908
 sock_sendmsg_nosec net/socket.c:621 [inline]
 sock_sendmsg net/socket.c:631 [inline]
 ___sys_sendmsg+0xe70/0x1290 net/socket.c:2114
 __sys_sendmsg net/socket.c:2152 [inline]
 __do_sys_sendmsg net/socket.c:2161 [inline]
 __se_sys_sendmsg+0x2a3/0x3d0 net/socket.c:2159
 __x64_sys_sendmsg+0x4a/0x70 net/socket.c:2159
 do_syscall_64+0xb8/0x100 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x7f0d5e5b0320
Code: 02 48 83 c8 ff eb 8d 48 8b 05 14 7b 2a 00 f7 da 64 89 10 48 83 c8 ff eb c9 90 83 3d d5 d2 2a 00 00 75 10 b8 2e 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e ba 00 00 48 89 04 24
RSP: 002b:00007ffea4bda9a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007ffea4bdeaa0 RCX: 00007f0d5e5b0320
RDX: 0000000000000000 RSI: 00007ffea4bda9e0 RDI: 0000000000000003
RBP: 00007ffea4bda9e0 R08: 0000000000000000 R09: 00007f0d5e85f0b0
R10: 0000000000000000 R11: 0000000000000246 R12: 000000005b8c91d5
R13: 0000000000000000 R14: 00000000006395c0 R15: 00007ffea4bdf280
Modules linked in:
Dumping ftrace buffer:
   (ftrace buffer empty)
CR2: 00000000000008f4
---[ end trace 63ed8034835bd25f ]---
RIP: 0010:memset_erms+0x9/0x10 arch/x86/lib/memset_64.S:65
Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 <f3> aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01
RSP: 0018:ffff88007987e8e8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: fffffffffffffff4 RCX: 0000000000000fb0
RDX: 0000000000000fb0 RSI: 0000000000000000 RDI: 00000000000008f4
RBP: ffff88007987e8f8 R08: 0000000000000000 R09: 00000000000008f4
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000dda000c5
R13: 0000000000000000 R14: 0000000000000282 R15: fffffffffffffff4
FS:  00007f0d5ee8f700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000000008f4 CR3: 000000007986e000 CR4: 00000000001406f0

Crashes (47):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/09/03 02:55 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report syz ci-upstream-kmsan-gce
2018/07/19 14:58 https://github.com/google/kmsan.git master cf8cd3cd03e2 49f35839 .config console log report syz ci-upstream-kmsan-gce
2018/09/10 02:31 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/09 00:35 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/08 18:10 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/08 07:37 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/08 06:12 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/08 01:37 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/07 22:52 https://github.com/google/kmsan.git master 42a037ca8d9d 69cfeb80 .config console log report ci-upstream-kmsan-gce
2018/09/07 22:31 https://github.com/google/kmsan.git master 42a037ca8d9d 69cfeb80 .config console log report ci-upstream-kmsan-gce
2018/09/07 15:32 https://github.com/google/kmsan.git master 42a037ca8d9d 69cfeb80 .config console log report ci-upstream-kmsan-gce
2018/09/07 11:35 https://github.com/google/kmsan.git master 42a037ca8d9d e30d3b52 .config console log report ci-upstream-kmsan-gce
2018/09/07 08:21 https://github.com/google/kmsan.git master 43e4752ae5dc e30d3b52 .config console log report ci-upstream-kmsan-gce
2018/09/07 08:18 https://github.com/google/kmsan.git master 43e4752ae5dc e30d3b52 .config console log report ci-upstream-kmsan-gce
2018/09/07 02:12 https://github.com/google/kmsan.git master 43e4752ae5dc e30d3b52 .config console log report ci-upstream-kmsan-gce
2018/09/06 23:08 https://github.com/google/kmsan.git master 43e4752ae5dc e30d3b52 .config console log report ci-upstream-kmsan-gce
2018/09/06 21:53 https://github.com/google/kmsan.git master 43e4752ae5dc 0bb7a7eb .config console log report ci-upstream-kmsan-gce
2018/09/06 19:29 https://github.com/google/kmsan.git master 43e4752ae5dc 0bb7a7eb .config console log report ci-upstream-kmsan-gce
2018/09/06 17:16 https://github.com/google/kmsan.git master 43e4752ae5dc 0bb7a7eb .config console log report ci-upstream-kmsan-gce
2018/09/06 13:41 https://github.com/google/kmsan.git master 43e4752ae5dc 0bb7a7eb .config console log report ci-upstream-kmsan-gce
2018/09/06 10:43 https://github.com/google/kmsan.git master 43e4752ae5dc 0bb7a7eb .config console log report ci-upstream-kmsan-gce
2018/09/06 10:38 https://github.com/google/kmsan.git master 43e4752ae5dc 0bb7a7eb .config console log report ci-upstream-kmsan-gce
2018/09/06 03:43 https://github.com/google/kmsan.git master 43e4752ae5dc 873745f2 .config console log report ci-upstream-kmsan-gce
2018/09/06 02:45 https://github.com/google/kmsan.git master 43e4752ae5dc 873745f2 .config console log report ci-upstream-kmsan-gce
2018/09/06 00:14 https://github.com/google/kmsan.git master 43e4752ae5dc 873745f2 .config console log report ci-upstream-kmsan-gce
2018/09/05 18:04 https://github.com/google/kmsan.git master 43e4752ae5dc 196410e4 .config console log report ci-upstream-kmsan-gce
2018/09/05 09:42 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/05 03:10 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/04 21:33 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/04 19:37 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/04 14:21 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/03 19:04 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/03 17:08 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/03 16:09 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/03 15:17 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/02 23:26 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/08/29 15:01 https://github.com/google/kmsan.git master 2dca2cbde67a 53ff8784 .config console log report ci-upstream-kmsan-gce
2018/08/24 21:56 https://github.com/google/kmsan.git master 0cc51dc9a291 9b0f5c75 .config console log report ci-upstream-kmsan-gce
2018/07/19 13:49 https://github.com/google/kmsan.git master cf8cd3cd03e2 49f35839 .config console log report ci-upstream-kmsan-gce
2018/07/17 06:47 https://github.com/google/kmsan.git master 80ecacc456c1 13761366 .config console log report ci-upstream-kmsan-gce
2018/07/16 16:20 https://github.com/google/kmsan.git master 80ecacc456c1 40cb0c9a .config console log report ci-upstream-kmsan-gce
2018/07/08 21:57 https://github.com/google/kmsan.git master a00de5aa4da3 f25e5770 .config console log report ci-upstream-kmsan-gce
2018/07/08 21:44 https://github.com/google/kmsan.git master a00de5aa4da3 f25e5770 .config console log report ci-upstream-kmsan-gce
2018/07/08 14:00 https://github.com/google/kmsan.git master a00de5aa4da3 c9a7a4dc .config console log report ci-upstream-kmsan-gce
2018/07/07 22:16 https://github.com/google/kmsan.git master a00de5aa4da3 ab89aea9 .config console log report ci-upstream-kmsan-gce
2018/07/06 19:26 https://github.com/google/kmsan.git master a00de5aa4da3 9636bc93 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.