syzbot


BUG: unable to handle kernel NULL pointer dereference in rpcauth_wrap_req

Status: closed as invalid on 2018/09/05 12:51
Subsystems: net nfs
[Documentation on labels]
First crash: 2417d, last: 2416d

Sample crash report:
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004410b9
RDX: 000000002015bffc RSI: 0000000020343ff8 RDI: 0000000020000040
RBP: 00007fff63d07d70 R08: 000000002000a000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff
R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000
BUG: unable to handle kernel NULL pointer dereference at 0000000000000000
PGD 80000001ffe50067 P4D 80000001ffe50067 PUD 1ffe06067 PMD 0 
Oops: 0000 [#1] SMP PTI
CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 4.18.0-rc8+ #31
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: rpciod rpc_async_schedule
RIP: 0010:strlen+0x10/0x20 lib/string.c:484
Code: 00 00 43 c6 04 3e 00 48 89 d8 5b 41 5e 41 5f 5d c3 66 0f 1f 84 00 00 00 00 00 48 8d 47 ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 <80> 78 01 00 48 8d 40 01 75 f6 48 29 f8 c3 66 90 41 56 53 48 c7 c0 
RSP: 0018:ffff880216967cf8 EFLAGS: 00010293
RAX: ffffffffffffffff RBX: 0000000000000004 RCX: ffff88021693d280
RDX: 0000000000000000 RSI: ffffffff832b341e RDI: 0000000000000000
RBP: ffff880216967d28 R08: ffff8801ffc87680 R09: ffff88020c180039
R10: fefefefefefefeff R11: ffffffff826e4ad0 R12: 0000000000000000
R13: 0000000000000004 R14: ffff880216967d38 R15: ffff8801ffc87680
FS:  0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000021208c000 CR4: 00000000001406e0
Call Trace:
 rpcauth_wrap_req_encode net/sunrpc/auth.c:777 [inline]
 rpcauth_wrap_req+0x8a/0xa0 net/sunrpc/auth.c:791
 rpc_xdr_encode net/sunrpc/clnt.c:1755 [inline]
 call_transmit+0x1a4/0x2a0 net/sunrpc/clnt.c:1950
 __rpc_execute+0x130/0x480 net/sunrpc/sched.c:784
 rpc_async_schedule+0x19/0x20 net/sunrpc/sched.c:857
 process_one_work+0x28e/0x580 kernel/workqueue.c:2153
 worker_thread+0x317/0x690 kernel/workqueue.c:2296
 kthread+0x127/0x140 kernel/kthread.c:247
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:415
Modules linked in:
Dumping ftrace buffer:
   (ftrace buffer empty)
CR2: 0000000000000000
---[ end trace 58b097d048d2e157 ]---
RIP: 0010:strlen+0x10/0x20 lib/string.c:484
Code: 00 00 43 c6 04 3e 00 48 89 d8 5b 41 5e 41 5f 5d c3 66 0f 1f 84 00 00 00 00 00 48 8d 47 ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 <80> 78 01 00 48 8d 40 01 75 f6 48 29 f8 c3 66 90 41 56 53 48 c7 c0 
RSP: 0018:ffff880216967cf8 EFLAGS: 00010293
RAX: ffffffffffffffff RBX: 0000000000000004 RCX: ffff88021693d280
RDX: 0000000000000000 RSI: ffffffff832b341e RDI: 0000000000000000
RBP: ffff880216967d28 R08: ffff8801ffc87680 R09: ffff88020c180039
R10: fefefefefefefeff R11: ffffffff826e4ad0 R12: 0000000000000000
R13: 0000000000000004 R14: ffff880216967d38 R15: ffff8801ffc87680
FS:  0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000021208c000 CR4: 00000000001406e0

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/08/08 11:52 https://github.com/google/kmsan.git master b40e5df03d2d ddeb9f8d .config console log report syz C ci-upstream-kmsan-gce
2018/08/09 15:24 https://github.com/google/kmsan.git master 0cc51dc9a291 1fb62d58 .config console log report ci-upstream-kmsan-gce
2018/08/08 19:56 https://github.com/google/kmsan.git master 0cc51dc9a291 ddeb9f8d .config console log report ci-upstream-kmsan-gce
2018/08/08 19:40 https://github.com/google/kmsan.git master 0cc51dc9a291 ddeb9f8d .config console log report ci-upstream-kmsan-gce
2018/08/08 11:38 https://github.com/google/kmsan.git master b40e5df03d2d ddeb9f8d .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.