syzbot
general protection fault in __list_add_valid
Status:
closed as invalid on 2017/11/07 16:20
Reported-by: syzbot+adce1283493f742bf7e53b4acdc21071ab1b2488@syzkaller.appspotmail.com
First crash: 3277d, last: 3221d
Sample crash report:
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
(ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 3129 Comm: syzkaller411275 Not tainted 4.13.0-rc7+ #40
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801d242c140 task.stack: ffff8801d2980000
RIP: 0010:__list_add_valid+0x46/0xd0 lib/list_debug.c:26
RSP: 0018:ffff8801d29873d0 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffff8801d2573e40 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801d2573e48
RBP: ffff8801d29873e8 R08: 0000000000000001 R09: 1ffff1003a530de4
R10: 00000000d37513e9 R11: 00000000ba06fc39 R12: ffff8801d2717ec0
R13: ffff8801d6be0e00 R14: ffff8801d2573e40 R15: 0000000000000000
FS: 00007f574b2b9700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020eb1000 CR3: 00000001cfe8d000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__list_add include/linux/list.h:59 [inline]
list_add_tail include/linux/list.h:92 [inline]
sock_map_ctx_update_elem.isra.11+0x9e9/0x1a00 kernel/bpf/sockmap.c:768
sock_map_update_elem+0x145/0x2d0 kernel/bpf/sockmap.c:843
map_update_elem kernel/bpf/syscall.c:588 [inline]
SYSC_bpf kernel/bpf/syscall.c:1469 [inline]
SyS_bpf+0x20c5/0x4c40 kernel/bpf/syscall.c:1444
entry_SYSCALL_64_fastpath+0x1f/0xbe
RIP: 0033:0x445de9
RSP: 002b:00007f574b2b8dc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000445de9
RDX: 0000000000000020 RSI: 00000000204eefe0 RDI: 0000000000000002
RBP: 0000000000000086 R08: 00007f574b2b9700 R09: 00007f574b2b9700
R10: 00007f574b2b9700 R11: 0000000000000202 R12: 0000000000000000
R13: 00007ffe3e9ff68f R14: 00007f574b2b99c0 R15: 0000000000000000
Code: 48 89 fa 48 83 ec 08 48 c1 ea 03 80 3c 02 00 75 7c 48 8b 53 08 48 39 f2 75 37 48 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 6e 48 8b 16 48 39 da 75 29 49 39 f4 74 38 49 39
RIP: __list_add_valid+0x46/0xd0 lib/list_debug.c:26 RSP: ffff8801d29873d0
---[ end trace d44da805c6361654 ]---
Kernel panic - not syncing: Fatal exception in interrupt
Dumping ftrace buffer:
(ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..
* Struck through repros no longer work on HEAD.