syzbot


BUG: unable to handle kernel NULL pointer dereference in inet_accept

Status: closed as invalid on 2018/09/05 12:51
Subsystems: net
[Documentation on labels]
First crash: 2420d, last: 2420d

Sample crash report:
BUG: unable to handle kernel NULL pointer dereference at 0000000000000028
PGD 80000001a2ab2067 P4D 80000001a2ab2067 PUD 1a0939067 PMD 0 
Oops: 0000 [#1] SMP PTI
CPU: 1 PID: 4862 Comm: kworker/1:36 Not tainted 4.18.0-rc8+ #34
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events smc_tcp_listen_work
RIP: 0010:inet_accept+0xc6/0x8e0 net/ipv4/af_inet.c:734
Code: 44 8b 2a 48 8d 7d cc e8 68 69 8e fa c7 00 00 00 00 00 c7 45 cc ea ff ff ff 4c 89 75 c0 4d 8d 76 28 4d 85 e4 0f 85 6e 05 00 00 <49> 8b 1e 4c 89 f7 e8 5f 69 8e fa 48 83 c3 20 48 83 38 00 0f 85 62 
RSP: 0018:ffff88019bdcfa70 EFLAGS: 00010246
RAX: ffff88019bddfacc RBX: ffff8801c3cc18e0 RCX: ffff88019ba6facc
RDX: ffff88019ba6facc RSI: aaaaaaaaaaaab000 RDI: ffffea0009a72da0
RBP: ffff88019bdcfb00 R08: 0000000000480020 R09: 0000000000000002
R10: 0000000000000000 R11: ffffffff87306c60 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000028 R15: ffff8801b213a678
FS:  0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000028 CR3: 00000001b7b6a000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 kernel_accept+0x1e9/0x700 net/socket.c:3254
 smc_clcsock_accept net/smc/af_smc.c:701 [inline]
 smc_tcp_listen_work+0x2a1/0x13b0 net/smc/af_smc.c:1114
 process_one_work+0x1605/0x1f40 kernel/workqueue.c:2153
 worker_thread+0x11a2/0x2590 kernel/workqueue.c:2296
 kthread+0x44d/0x480 kernel/kthread.c:247
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:415
Modules linked in:
Dumping ftrace buffer:
   (ftrace buffer empty)
CR2: 0000000000000028
---[ end trace 837376647a02de27 ]---
RIP: 0010:inet_accept+0xc6/0x8e0 net/ipv4/af_inet.c:734
Code: 44 8b 2a 48 8d 7d cc e8 68 69 8e fa c7 00 00 00 00 00 c7 45 cc ea ff ff ff 4c 89 75 c0 4d 8d 76 28 4d 85 e4 0f 85 6e 05 00 00 <49> 8b 1e 4c 89 f7 e8 5f 69 8e fa 48 83 c3 20 48 83 38 00 0f 85 62 
RSP: 0018:ffff88019bdcfa70 EFLAGS: 00010246
RAX: ffff88019bddfacc RBX: ffff8801c3cc18e0 RCX: ffff88019ba6facc
RDX: ffff88019ba6facc RSI: aaaaaaaaaaaab000 RDI: ffffea0009a72da0
RBP: ffff88019bdcfb00 R08: 0000000000480020 R09: 0000000000000002
R10: 0000000000000000 R11: ffffffff87306c60 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000028 R15: ffff8801b213a678
FS:  0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000028 CR3: 00000001b7b6a000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/08/16 03:58 https://github.com/google/kmsan.git master 0cc51dc9a291 9ccc1d45 .config console log report syz C ci-upstream-kmsan-gce
2018/08/16 03:25 https://github.com/google/kmsan.git master 0cc51dc9a291 9ccc1d45 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.