general protection fault in refcount_sub_and_test_checked

Status: auto-closed as invalid on 2019/10/25 08:45
Subsystems: x25
[Documentation on labels]
Reported-by: syzbot+31b6a0f5d6d5c3b75948@syzkaller.appspotmail.com
First crash: 2699d, last: 2644d
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
Reminder: 5 open syzbot bugs in "net/x25" subsystem 1 (1) 2019/07/24 02:28
general protection fault in refcount_sub_and_test_checked 0 (1) 2019/04/01 17:36

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 1560 Comm: syz-executor.2 Not tainted 5.2.0-rc1+ #26
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__read_once_size include/linux/compiler.h:194 [inline]
RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:31 [inline]
RIP: 0010:atomic_read include/asm-generic/atomic-instrumented.h:27 [inline]
RIP: 0010:refcount_sub_and_test_checked+0x8e/0x200 lib/refcount.c:182
Code: f3 f3 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 26 75 3c fe be 04 00 00 00 48 89 df e8 99 e7 74 fe 48 89 d8 48 c1 e8 03 <42> 0f b6 14 20 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85
RSP: 0018:ffff888068cb7bc8 EFLAGS: 00010202
RAX: 0000000000000019 RBX: 00000000000000c8 RCX: ffffffff83342f57
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000000000c8
RBP: ffff888068cb7c60 R08: 1ffffffff12c8ca4 R09: fffffbfff12c8ca5
R10: fffffbfff12c8ca4 R11: ffffffff89646523 R12: dffffc0000000000
R13: 0000000000000000 R14: ffff888068cb7c38 R15: 1ffff1100d196f7b
FS:  00007f6d5fe6f700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000001572ec0 CR3: 000000006861b000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 refcount_dec_and_test_checked+0x1b/0x20 lib/refcount.c:220
 x25_neigh_put include/net/x25.h:252 [inline]
 x25_connect+0x8d8/0xea0 net/x25/af_x25.c:825
 __sys_connect+0x264/0x330 net/socket.c:1840
 __do_sys_connect net/socket.c:1851 [inline]
 __se_sys_connect net/socket.c:1848 [inline]
 __x64_sys_connect+0x73/0xb0 net/socket.c:1848
 do_syscall_64+0xfd/0x680 arch/x86/entry/common.c:301
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x459279
Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f6d5fe6ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459279
RDX: 0000000000000012 RSI: 0000000020000100 RDI: 0000000000000004
RBP: 000000000075c100 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d5fe6f6d4
R13: 00000000004bf854 R14: 00000000004d0dc8 R15: 00000000ffffffff
Modules linked in:

Crashes (19):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/05/25 05:54 net-old ce8d24f9a596 85c57315 .config console log report ci-upstream-net-this-kasan-gce
2019/05/20 06:48 net-old 5a35c8ea7c40 5a4461b0 .config console log report ci-upstream-net-this-kasan-gce
2019/05/11 09:15 net-old daf3ddbe11a2 46caad94 .config console log report ci-upstream-net-this-kasan-gce
2019/05/07 14:35 net-old 9b3040a6aafd d28f4ce5 .config console log report ci-upstream-net-this-kasan-gce
2019/05/03 16:27 net-old ea9866793d1e 1bfa09b9 .config console log report ci-upstream-net-this-kasan-gce
2019/05/03 11:03 net-old ea9866793d1e 1bfa09b9 .config console log report ci-upstream-net-this-kasan-gce
2019/04/23 14:28 net-old acced9d2b4df 53199d6e .config console log report ci-upstream-net-this-kasan-gce
2019/05/16 15:48 net-next-old 35c99ffa20ed f59a9cb5 .config console log report ci-upstream-net-kasan-gce
2019/05/14 15:43 net-next-old 63863ee8e2f6 ada3c44c .config console log report ci-upstream-net-kasan-gce
2019/05/13 05:39 net-next-old b970afcfcabd 5f302c04 .config console log report ci-upstream-net-kasan-gce
2019/05/10 05:35 net-next-old 601e6bcc4ef0 018207ef .config console log report ci-upstream-net-kasan-gce
2019/05/09 09:57 net-next-old 80f232121b69 1ab4c999 .config console log report ci-upstream-net-kasan-gce
2019/05/09 05:05 net-next-old 80f232121b69 1ab4c999 .config console log report ci-upstream-net-kasan-gce
2019/04/28 20:24 net-next-old b1a79360ee86 b617407b .config console log report ci-upstream-net-kasan-gce
2019/04/20 07:00 net-next-old d7cc399e1227 b0e8efcb .config console log report ci-upstream-net-kasan-gce
2019/04/13 14:20 net-next-old 5fa7d3f9d318 c402d8f1 .config console log report ci-upstream-net-kasan-gce
2019/04/09 08:52 net-next-old 7f301cff1fc2 995065ff .config console log report ci-upstream-net-kasan-gce
2019/04/08 20:30 net-next-old 1f17f7742eeb 0dfb0452 .config console log report ci-upstream-net-kasan-gce
2019/03/31 05:10 net-next-old 35f861e3c58e 0c624d4d .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.