syzbot


invalid opcode in rxrpc_disconnect_client_call

Status: auto-closed as invalid on 2020/10/22 20:59
Reported-by: syzbot+0253e5416b33ecd3b5fb@syzkaller.appspotmail.com
First crash: 1596d, last: 1596d

Sample crash report:
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 4799 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8880636d0400 task.stack: ffff88803f860000
RIP: 0010:rxrpc_disconnect_client_call.cold+0x78/0x7a net/rxrpc/conn_client.c:792
RSP: 0018:ffff88803f867720 EFLAGS: 00010286
RAX: 0000000000000077 RBX: ffff888066720140 RCX: 0000000000000000
RDX: 00000000000008b8 RSI: ffffffff81499420 RDI: ffffed1007f0ceda
RBP: ffff8880853f0040 R08: 0000000000000077 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8880853f0090 R14: ffff888063859c00 R15: ffff8880853f00e0
FS:  00007f4361934700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c0101cc087 CR3: 0000000057164000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 rxrpc_connect_call+0x1fa0/0x3e50 net/rxrpc/conn_client.c:701
 rxrpc_new_client_call+0x8d3/0x1400 net/rxrpc/call_object.c:276
 rxrpc_new_client_call_for_sendmsg net/rxrpc/sendmsg.c:525 [inline]
 rxrpc_do_sendmsg+0x8a1/0x1023 net/rxrpc/sendmsg.c:577
 rxrpc_sendmsg+0x47d/0x5a0 net/rxrpc/af_rxrpc.c:543
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 ___sys_sendmsg+0x349/0x840 net/socket.c:2062
 __sys_sendmmsg+0x129/0x330 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0x2f/0x50 net/socket.c:2178
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x45cb09
RSP: 002b:00007f4361933c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00000000004fd620 RCX: 000000000045cb09
RDX: 0000000000000001 RSI: 0000000020005c00 RDI: 0000000000000003
RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000901 R14: 00000000004cbdc5 R15: 00007f43619346d4
Code: 0f 0b 48 89 34 24 e8 2a 6f a2 fb 48 8b 34 24 4d 89 f1 4d 89 f0 48 c7 c1 40 26 26 87 48 c7 c7 80 26 26 87 48 89 f2 e8 95 4d 91 fb <0f> 0b e8 03 6f a2 fb 44 89 f6 45 31 c9 45 31 c0 48 c7 c1 40 26 
RIP: rxrpc_disconnect_client_call.cold+0x78/0x7a net/rxrpc/conn_client.c:792 RSP: ffff88803f867720
---[ end trace b62e97b2b4d0d5f4 ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/24 20:58 linux-4.14.y b850307b279c 9d60b18e .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.