syzbot


general protection fault in free_netdev

Status: fixed on 2020/10/01 20:48
Subsystems: net
[Documentation on labels]
Fix commit: 46ef5b89ec0e ip6_gre: fix null-ptr-deref in ip6gre_init_net()
First crash: 1429d, last: 1394d
Cause bisection: failed (error log, bisect log)
  
Fix bisection: fixed by (bisect log) :
commit bb57768215fb6b557a1ef95a3d87b011efe2e267
Author: Lorenzo Bianconi <lorenzo@kernel.org>
Date: Tue Jun 2 20:26:38 2020 +0000

  mt76: add missing lock configuring coverage class

  
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 general protection fault in free_netdev C done 99 1389d 1419d 1/1 fixed on 2020/09/01 18:34
upstream general protection fault in free_netdev (2) net 1 1063d 1063d 0/26 auto-closed as invalid on 2021/09/20 23:14

Sample crash report:
IPVS: ftp: loaded support on port[0] = 21
general protection fault, probably for non-canonical address 0xdffffc0000000080: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000400-0x0000000000000407]
CPU: 0 PID: 13594 Comm: syz-executor046 Not tainted 5.8.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:netif_free_tx_queues net/core/dev.c:9357 [inline]
RIP: 0010:free_netdev+0x41/0x480 net/core/dev.c:10028
Code: d2 be 2b 27 00 00 48 c7 c7 a0 c1 fd 88 e8 27 3f 1c fb 48 8d bd 00 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 03 00 00 48 8b bd 00 04 00 00 e8 d9 b7 69 fb
RSP: 0018:ffffc900073afc10 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff8880a8bcc000 RCX: ffffffff86f97ffb
RDX: 0000000000000080 RSI: ffffffff89bc1100 RDI: 0000000000000400
RBP: 0000000000000000 R08: 0000000000000001 R09: ffff8880a88400e3
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff4
R13: ffff88808fef2410 R14: ffff88809c2a6800 R15: ffff8880a69fd4b8
FS:  00007f739294d700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1f13b2c000 CR3: 0000000073361000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ip6gre_init_net+0x546/0x610 net/ipv6/ip6_gre.c:1595
 ops_init+0xaf/0x470 net/core/net_namespace.c:151
 setup_net+0x2d8/0x850 net/core/net_namespace.c:341
 copy_net_ns+0x2cf/0x5e0 net/core/net_namespace.c:482
 create_new_namespaces+0x3f6/0xb10 kernel/nsproxy.c:110
 unshare_nsproxy_namespaces+0xbd/0x1f0 kernel/nsproxy.c:231
 ksys_unshare+0x36c/0x9a0 kernel/fork.c:2983
 __do_sys_unshare kernel/fork.c:3051 [inline]
 __se_sys_unshare kernel/fork.c:3049 [inline]
 __x64_sys_unshare+0x2d/0x40 kernel/fork.c:3049
 do_syscall_64+0x60/0xe0 arch/x86/entry/common.c:384
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x447229
Code: Bad RIP value.
RSP: 002b:00007f739294cd98 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00000000006dcc28 RCX: 0000000000447229
RDX: 0000000000403004 RSI: d803d3655781a7bc RDI: 0000000040000000
RBP: 00000000006dcc20 R08: 00007f739294d700 R09: 0000000000000000
R10: 00007f739294d700 R11: 0000000000000246 R12: 00000000006dcc2c
R13: 6174657267367069 R14: 0000000000000000 R15: 000000306e616376
Modules linked in:
---[ end trace 700c3fed93c8b0e3 ]---
RIP: 0010:netif_free_tx_queues net/core/dev.c:9357 [inline]
RIP: 0010:free_netdev+0x41/0x480 net/core/dev.c:10028
Code: d2 be 2b 27 00 00 48 c7 c7 a0 c1 fd 88 e8 27 3f 1c fb 48 8d bd 00 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 03 00 00 48 8b bd 00 04 00 00 e8 d9 b7 69 fb
RSP: 0018:ffffc900073afc10 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff8880a8bcc000 RCX: ffffffff86f97ffb
RDX: 0000000000000080 RSI: ffffffff89bc1100 RDI: 0000000000000400
RBP: 0000000000000000 R08: 0000000000000001 R09: ffff8880a88400e3
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff4
R13: ffff88808fef2410 R14: ffff88809c2a6800 R15: ffff8880a69fd4b8
FS:  00007f739294d700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004cdd90 CR3: 0000000073361000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (3605):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/07/15 06:02 upstream e9919e11e219 609fb517 .config console log report syz C ci-upstream-kasan-gce-root
2020/07/10 02:58 upstream 0bddd227f3dc bc238812 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2020/07/08 11:25 upstream 7cc2a8ea1048 51095195 .config console log report syz C ci-upstream-kasan-gce-smack-root
2020/07/08 08:29 upstream 7cc2a8ea1048 51095195 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2020/07/07 15:42 upstream 7cc2a8ea1048 51095195 .config console log report syz C ci-upstream-kasan-gce-smack-root
2020/07/07 07:45 upstream 7cc2a8ea1048 51095195 .config console log report syz C ci-upstream-kasan-gce-root
2020/07/05 20:02 upstream 7cc2a8ea1048 51095195 .config console log report syz C ci-upstream-kasan-gce
2020/07/05 18:37 upstream 7cc2a8ea1048 51095195 .config console log report syz C ci-upstream-kasan-gce-root
2020/07/19 22:10 upstream f932d58abc38 9c812472 .config console log report syz C ci-upstream-kasan-gce-386
2020/07/13 20:26 net-old 1df0d8960499 f90ec899 .config console log report syz C ci-upstream-net-this-kasan-gce
2020/07/08 12:07 net-old 1ca0fafd73c5 51095195 .config console log report syz C ci-upstream-net-this-kasan-gce
2020/07/07 02:15 net-old 1ca0fafd73c5 51095195 .config console log report syz C ci-upstream-net-this-kasan-gce
2020/07/24 20:50 net-next-old 1b6687e31a2d 554af388 .config console log report syz C ci-upstream-net-kasan-gce
2020/07/19 04:39 net-next-old a050d82f5b04 9c812472 .config console log report syz C ci-upstream-net-kasan-gce
2020/07/19 01:40 net-next-old a050d82f5b04 9c812472 .config console log report syz C ci-upstream-net-kasan-gce
2020/07/18 01:13 net-next-old 4291dc1a5608 9c812472 .config console log report syz C ci-upstream-net-kasan-gce
2020/07/17 12:10 net-next-old 632ca50f2cbd 54b3c45e .config console log report syz C ci-upstream-net-kasan-gce
2020/07/08 09:52 net-next-old e44f65fd666c 51095195 .config console log report syz C ci-upstream-net-kasan-gce
2020/07/08 06:32 net-next-old e44f65fd666c 51095195 .config console log report syz C ci-upstream-net-kasan-gce
2020/07/07 17:52 net-next-old e44f65fd666c 51095195 .config console log report syz C ci-upstream-net-kasan-gce
2020/07/15 00:29 linux-next 5fb3d6042387 609fb517 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2020/07/04 23:40 linux-next 9e50b94b3eb0 51095195 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2020/07/17 11:38 upstream f8456690ba8e 54b3c45e .config console log report syz ci-upstream-kasan-gce-root
2020/07/15 10:39 upstream e9919e11e219 609fb517 .config console log report syz ci-upstream-kasan-gce-selinux-root
2020/07/15 00:06 upstream 0dc589da873b 609fb517 .config console log report syz ci-upstream-kasan-gce-smack-root
2020/07/10 19:49 upstream 42f82040ee66 edf162e8 .config console log report syz ci-upstream-kasan-gce-smack-root
2020/07/09 14:48 upstream 0bddd227f3dc bc238812 .config console log report syz ci-upstream-kasan-gce-selinux-root
2020/07/09 06:30 upstream 0bddd227f3dc bc238812 .config console log report syz ci-upstream-kasan-gce-root
2020/07/08 11:47 upstream 7cc2a8ea1048 51095195 .config console log report syz ci-upstream-kasan-gce
2020/07/08 05:09 upstream 7cc2a8ea1048 51095195 .config console log report syz ci-upstream-kasan-gce-root
2020/07/08 00:09 upstream 7cc2a8ea1048 51095195 .config console log report syz ci-upstream-kasan-gce-smack-root
2020/07/07 15:05 upstream 7cc2a8ea1048 51095195 .config console log report syz ci-upstream-kasan-gce-root
2020/07/06 11:52 upstream 7cc2a8ea1048 51095195 .config console log report syz ci-upstream-kasan-gce-selinux-root
2020/07/05 20:20 upstream 7cc2a8ea1048 51095195 .config console log report syz ci-upstream-kasan-gce-root
2020/07/07 17:59 upstream 7cc2a8ea1048 51095195 .config console log report syz ci-upstream-kasan-gce-386
2020/07/05 11:58 upstream 7cc2a8ea1048 51095195 .config console log report syz ci-upstream-kasan-gce-386
2020/07/08 17:04 net-old 1ca0fafd73c5 51095195 .config console log report syz ci-upstream-net-this-kasan-gce
2020/06/28 03:27 net-old 4a21185cda0f ffec44b5 .config console log report syz ci-upstream-net-this-kasan-gce
2020/07/24 09:43 net-next-old 7fc3b978a897 70c104a1 .config console log report syz ci-upstream-net-kasan-gce
2020/07/20 18:20 net-next-old 7dce80c2a526 4285ffa3 .config console log report syz ci-upstream-net-kasan-gce
2020/07/15 00:43 net-next-old 07dd1b7e68e4 609fb517 .config console log report syz ci-upstream-net-kasan-gce
2020/07/05 15:15 net-next-old e44f65fd666c 51095195 .config console log report syz ci-upstream-net-kasan-gce
2020/07/11 02:47 linux-next d31958b30ea3 18d18b59 .config console log report syz ci-upstream-linux-next-kasan-gce-root
2020/07/10 04:28 linux-next 8903263671cb bc238812 .config console log report syz ci-upstream-linux-next-kasan-gce-root
2020/07/26 06:30 upstream 23ee3e4e5bd2 1f7cc1ca .config console log report ci-upstream-kasan-gce
2020/07/26 03:10 upstream 23ee3e4e5bd2 1f7cc1ca .config console log report ci-upstream-kasan-gce-selinux-root
2020/07/25 20:30 upstream 23ee3e4e5bd2 1f7cc1ca .config console log report ci-upstream-kasan-gce
2020/07/25 18:23 upstream 68845a55c31b 1f7cc1ca .config console log report ci-upstream-kasan-gce
2020/07/25 15:03 upstream 68845a55c31b 1f7cc1ca .config console log report ci-upstream-kasan-gce-selinux-root
2020/07/25 12:58 upstream 68845a55c31b 1f7cc1ca .config console log report ci-upstream-kasan-gce-smack-root
2020/07/25 08:48 upstream 68845a55c31b 1f7cc1ca .config console log report ci-upstream-kasan-gce-selinux-root
2020/07/25 07:39 upstream 68845a55c31b 1f7cc1ca .config console log report ci-upstream-kasan-gce-selinux-root
2020/07/25 00:59 upstream f37e99aca03f 554af388 .config console log report ci-upstream-kasan-gce-root
2020/07/24 19:33 upstream f37e99aca03f 554af388 .config console log report ci-upstream-kasan-gce-smack-root
2020/07/24 14:05 upstream f37e99aca03f 554af388 .config console log report ci-upstream-kasan-gce-root
2020/07/24 09:28 upstream f37e99aca03f 70c104a1 .config console log report ci-upstream-kasan-gce-root
2020/07/24 06:58 upstream d15be546031c 70c104a1 .config console log report ci-upstream-kasan-gce-smack-root
2020/07/24 05:54 upstream d15be546031c 70c104a1 .config console log report ci-upstream-kasan-gce
2020/07/23 21:33 upstream d15be546031c 70c104a1 .config console log report ci-upstream-kasan-gce-selinux-root
2020/07/23 18:14 upstream d15be546031c 70c104a1 .config console log report ci-upstream-kasan-gce-root
2020/07/23 16:53 upstream d15be546031c 340ea530 .config console log report ci-upstream-kasan-gce-root
2020/07/23 10:06 upstream 8c26c87b0532 340ea530 .config console log report ci-upstream-kasan-gce
2020/07/23 02:24 upstream 8c26c87b0532 340ea530 .config console log report ci-upstream-kasan-gce-selinux-root
2020/07/19 08:37 upstream f932d58abc38 9c812472 .config console log report ci-qemu-upstream
2020/07/26 00:33 upstream 23ee3e4e5bd2 1f7cc1ca .config console log report ci-upstream-kasan-gce-386
2020/07/25 11:35 upstream 68845a55c31b 1f7cc1ca .config console log report ci-upstream-kasan-gce-386
2020/07/14 17:05 net-old e0484010ec05 ce4c95b3 .config console log report ci-upstream-net-this-kasan-gce
2020/06/21 16:29 net-old 67c20de35a3c 4f2acff9 .config console log report ci-upstream-net-this-kasan-gce
2020/07/25 05:45 net-next-old 1b6687e31a2d 554af388 .config console log report ci-upstream-net-kasan-gce
2020/07/25 04:12 net-next-old 1b6687e31a2d 554af388 .config console log report ci-upstream-net-kasan-gce
2020/07/25 03:37 net-next-old 1b6687e31a2d 554af388 .config console log report ci-upstream-net-kasan-gce
2020/07/25 02:31 net-next-old 1b6687e31a2d 554af388 .config console log report ci-upstream-net-kasan-gce
2020/07/24 23:52 net-next-old 1b6687e31a2d 554af388 .config console log report ci-upstream-net-kasan-gce
2020/07/24 23:06 net-next-old 1b6687e31a2d 554af388 .config console log report ci-upstream-net-kasan-gce
2020/07/24 22:02 net-next-old 1b6687e31a2d 554af388 .config console log report ci-upstream-net-kasan-gce
2020/07/24 20:02 net-next-old 1b6687e31a2d 554af388 .config console log report ci-upstream-net-kasan-gce
2020/07/24 17:22 net-next-old 1b6687e31a2d 554af388 .config console log report ci-upstream-net-kasan-gce
2020/07/24 16:12 net-next-old 1b6687e31a2d 554af388 .config console log report ci-upstream-net-kasan-gce
2020/07/24 11:20 net-next-old 1b6687e31a2d 554af388 .config console log report ci-upstream-net-kasan-gce
2020/07/24 03:31 net-next-old 7fc3b978a897 70c104a1 .config console log report ci-upstream-net-kasan-gce
2020/07/24 02:19 net-next-old 7fc3b978a897 70c104a1 .config console log report ci-upstream-net-kasan-gce
2020/07/24 00:48 net-next-old 7fc3b978a897 70c104a1 .config console log report ci-upstream-net-kasan-gce
2020/07/23 23:47 net-next-old 7fc3b978a897 70c104a1 .config console log report ci-upstream-net-kasan-gce
2020/07/23 20:25 net-next-old 7fc3b978a897 70c104a1 .config console log report ci-upstream-net-kasan-gce
2020/07/23 15:40 net-next-old 7fc3b978a897 340ea530 .config console log report ci-upstream-net-kasan-gce
2020/07/23 14:32 net-next-old 7fc3b978a897 340ea530 .config console log report ci-upstream-net-kasan-gce
2020/07/23 14:13 net-next-old 7fc3b978a897 340ea530 .config console log report ci-upstream-net-kasan-gce
2020/07/23 12:35 net-next-old 7fc3b978a897 340ea530 .config console log report ci-upstream-net-kasan-gce
2020/07/23 11:09 net-next-old a6c0d0934f0d 340ea530 .config console log report ci-upstream-net-kasan-gce
2020/07/23 08:47 net-next-old a6c0d0934f0d 340ea530 .config console log report ci-upstream-net-kasan-gce
2020/07/23 08:23 net-next-old a6c0d0934f0d 340ea530 .config console log report ci-upstream-net-kasan-gce
2020/07/23 07:14 net-next-old a6c0d0934f0d 340ea530 .config console log report ci-upstream-net-kasan-gce
2020/07/23 06:12 net-next-old a6c0d0934f0d 340ea530 .config console log report ci-upstream-net-kasan-gce
2020/07/23 04:52 net-next-old a6c0d0934f0d 340ea530 .config console log report ci-upstream-net-kasan-gce
2020/07/23 03:24 net-next-old a6c0d0934f0d 340ea530 .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.