syzbot


general protection fault in gro_cells_destroy

Status: auto-closed as invalid on 2019/10/25 08:37
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+6fe674089f9deb9f7726@syzkaller.appspotmail.com
First crash: 1930d, last: 1766d
Discussions (4)
Title Replies (including bot) Last reply
Reminder: 99 open syzbot bugs in net subsystem 14 (14) 2019/07/31 15:13
Reminder: 94 open syzbot bugs in net subsystem 1 (1) 2019/06/25 05:48
[PATCH net] gro_cell: add napi_disable in gro_cells_destroy 4 (4) 2019/01/14 17:50
general protection fault in gro_cells_destroy 0 (1) 2019/01/10 17:41
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in gro_cells_destroy (2) net 2 829d 846d 20/26 fixed on 2022/03/08 16:11

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 10368 Comm: kworker/u4:5 Not tainted 5.2.0-rc5+ #32
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
RIP: 0010:__skb_unlink include/linux/skbuff.h:1990 [inline]
RIP: 0010:__skb_dequeue include/linux/skbuff.h:2006 [inline]
RIP: 0010:__skb_queue_purge include/linux/skbuff.h:2717 [inline]
RIP: 0010:gro_cells_destroy net/core/gro_cells.c:103 [inline]
RIP: 0010:gro_cells_destroy+0x19d/0x360 net/core/gro_cells.c:92
Code: 03 42 80 3c 20 00 0f 85 53 01 00 00 48 8d 7a 08 49 8b 47 08 49 c7 07 00 00 00 00 48 89 f9 49 c7 47 08 00 00 00 00 48 c1 e9 03 <42> 80 3c 21 00 0f 85 10 01 00 00 48 89 c1 48 89 42 08 48 c1 e9 03
RSP: 0018:ffff888094d479a8 EFLAGS: 00010202
RAX: 0000000000000000 RBX: ffffe8ffffc7e7a0 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff8595ed4a RDI: 0000000000000008
RBP: ffff888094d47a08 R08: ffff8880773d61c0 R09: fffffbfff12a8e71
R10: fffffbfff12a8e70 R11: ffffffff89547383 R12: dffffc0000000000
R13: 0000000000000000 R14: ffffe8ffffc7e7b0 R15: ffffe8ffffc7e7c3
FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c422a12a00 CR3: 0000000079956000 CR4: 00000000001426e0
Call Trace:
 ip_tunnel_dev_free+0x19/0x60 net/ipv4/ip_tunnel.c:1000
 netdev_run_todo+0x48b/0x7c0 net/core/dev.c:8992
 rtnl_unlock+0xe/0x10 net/core/rtnetlink.c:112
 ip_tunnel_delete_nets+0x423/0x5f0 net/ipv4/ip_tunnel.c:1114
 ipgre_exit_batch_net+0x23/0x30 net/ipv4/ip_gre.c:993
 ops_exit_list.isra.0+0xfc/0x150 net/core/net_namespace.c:157
 cleanup_net+0x3fb/0x960 net/core/net_namespace.c:553
 process_one_work+0x989/0x1790 kernel/workqueue.c:2269
 worker_thread+0x98/0xe40 kernel/workqueue.c:2415
 kthread+0x354/0x420 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Modules linked in:
---[ end trace 8dfe8232e7009f02 ]---
RIP: 0010:__skb_unlink include/linux/skbuff.h:1990 [inline]
RIP: 0010:__skb_dequeue include/linux/skbuff.h:2006 [inline]
RIP: 0010:__skb_queue_purge include/linux/skbuff.h:2717 [inline]
RIP: 0010:gro_cells_destroy net/core/gro_cells.c:103 [inline]
RIP: 0010:gro_cells_destroy+0x19d/0x360 net/core/gro_cells.c:92
Code: 03 42 80 3c 20 00 0f 85 53 01 00 00 48 8d 7a 08 49 8b 47 08 49 c7 07 00 00 00 00 48 89 f9 49 c7 47 08 00 00 00 00 48 c1 e9 03 <42> 80 3c 21 00 0f 85 10 01 00 00 48 89 c1 48 89 42 08 48 c1 e9 03
RSP: 0018:ffff888094d479a8 EFLAGS: 00010202
RAX: 0000000000000000 RBX: ffffe8ffffc7e7a0 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff8595ed4a RDI: 0000000000000008
RBP: ffff888094d47a08 R08: ffff8880773d61c0 R09: fffffbfff12a8e71
R10: fffffbfff12a8e70 R11: ffffffff89547383 R12: dffffc0000000000
R13: 0000000000000000 R14: ffffe8ffffc7e7b0 R15: ffffe8ffffc7e7c3
FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000025d21a0 CR3: 0000000095389000 CR4: 00000000001426e0

Crashes (62):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/06/23 11:37 upstream 241e39004581 34bf9440 .config console log report ci-upstream-kasan-gce-selinux-root
2019/03/28 02:21 upstream 1a9df9e29c2a 4e668495 .config console log report ci-upstream-kasan-gce-smack-root
2019/03/05 08:44 upstream 736706bee329 bb91cf81 .config console log report ci-upstream-kasan-gce
2019/02/27 22:36 upstream 7d762d69145a 34ec456b .config console log report ci-upstream-kasan-gce-root
2019/02/25 05:50 upstream c3619a482e15 7a06e792 .config console log report ci-upstream-kasan-gce
2019/02/18 16:44 upstream 2fee036af043 59f36113 .config console log report ci-upstream-kasan-gce
2019/02/22 06:38 upstream 8a61716ff2ab 7ff74a98 .config console log report ci-upstream-kasan-gce-386
2019/06/14 01:03 net-old b8003cef2e63 a139f92f .config console log report ci-upstream-net-this-kasan-gce
2019/06/13 04:18 net-old b8003cef2e63 3f4e812b .config console log report ci-upstream-net-this-kasan-gce
2019/05/30 11:57 net-old 58e8b37069ff d9aaf3c2 .config console log report ci-upstream-net-this-kasan-gce
2019/05/28 17:43 net-old 3e66b7cc50ef 6bd61501 .config console log report ci-upstream-net-this-kasan-gce
2019/05/15 07:34 net-old 0fe9f173d6cd bd4e3ac7 .config console log report ci-upstream-net-this-kasan-gce
2019/05/14 17:21 net-old 63863ee8e2f6 ada3c44c .config console log report ci-upstream-net-this-kasan-gce
2019/05/01 07:46 net-old 34259977f23c 618456b4 .config console log report ci-upstream-net-this-kasan-gce
2019/04/28 08:27 net-old b2a20fd0725e b617407b .config console log report ci-upstream-net-this-kasan-gce
2019/04/21 10:02 net-old 12c768611132 b0e8efcb .config console log report ci-upstream-net-this-kasan-gce
2019/04/16 13:01 net-old 614c70f35cd7 505ab413 .config console log report ci-upstream-net-this-kasan-gce
2019/04/10 10:26 net-old c03fd0171ba6 65b612b7 .config console log report ci-upstream-net-this-kasan-gce
2019/04/07 15:41 net-old 6491d698396f c34fde03 .config console log report ci-upstream-net-this-kasan-gce
2019/03/26 10:13 net-old 27602e2c44da 55684ce1 .config console log report ci-upstream-net-this-kasan-gce
2019/03/22 18:55 net-old 5f543a54eec0 dce6e62f .config console log report ci-upstream-net-this-kasan-gce
2019/03/19 01:44 net-old 25208dd856e7 46264c32 .config console log report ci-upstream-net-this-kasan-gce
2019/03/13 21:35 net-old 4ec850e5dfec 2881fc25 .config console log report ci-upstream-net-this-kasan-gce
2019/03/09 23:53 net-old 1f5d861f7fef 12365b99 .config console log report ci-upstream-net-this-kasan-gce
2019/03/05 04:24 net-old 822e44b45eb9 7c693b52 .config console log report ci-upstream-net-this-kasan-gce
2019/03/05 02:36 net-old 822e44b45eb9 7c693b52 .config console log report ci-upstream-net-this-kasan-gce
2019/03/04 20:06 net-old 822e44b45eb9 7c693b52 .config console log report ci-upstream-net-this-kasan-gce
2019/02/24 07:28 net-old 61a65d32fe91 7a06e792 .config console log report ci-upstream-net-this-kasan-gce
2019/02/19 21:24 net-old 1f43f400a2cb 4df543c9 .config console log report ci-upstream-net-this-kasan-gce
2019/01/24 21:02 net-old 63530aba7826 ce1ccf97 .config console log report ci-upstream-net-this-kasan-gce
2019/06/16 11:48 net-next-old 930cfe0f129d 442206d7 .config console log report ci-upstream-net-kasan-gce
2019/06/16 05:10 net-next-old 930cfe0f129d 442206d7 .config console log report ci-upstream-net-kasan-gce
2019/06/15 18:40 net-next-old 877cd9ffbc9c 442206d7 .config console log report ci-upstream-net-kasan-gce
2019/06/15 15:49 net-next-old 877cd9ffbc9c 442206d7 .config console log report ci-upstream-net-kasan-gce
2019/06/15 06:25 net-next-old 733f0766c3de 442206d7 .config console log report ci-upstream-net-kasan-gce
2019/06/15 01:35 net-next-old 733f0766c3de 442206d7 .config console log report ci-upstream-net-kasan-gce
2019/06/14 10:55 net-next-old 514fcaac371e 998ccc76 .config console log report ci-upstream-net-kasan-gce
2019/06/11 01:22 net-next-old a248384e6420 0159583c .config console log report ci-upstream-net-kasan-gce
2019/06/10 02:16 net-next-old 900d96e418dc 0159583c .config console log report ci-upstream-net-kasan-gce
2019/06/09 15:43 net-next-old 8d94a8733c94 0159583c .config console log report ci-upstream-net-kasan-gce
2019/06/09 03:03 net-next-old 8d94a8733c94 0159583c .config console log report ci-upstream-net-kasan-gce
2019/05/31 10:55 net-next-old 517f4c49aafc d9aaf3c2 .config console log report ci-upstream-net-kasan-gce
2019/05/30 01:45 net-next-old 7da33a8f87a4 d9aaf3c2 .config console log report ci-upstream-net-kasan-gce
2019/05/29 12:52 net-next-old 36f18439ea16 5457ef34 .config console log report ci-upstream-net-kasan-gce
2019/05/24 19:48 net-next-old dfb569f2b96e 0dadcd9d .config console log report ci-upstream-net-kasan-gce
2019/05/23 13:12 net-next-old 14a1eaa8820e 0dadcd9d .config console log report ci-upstream-net-kasan-gce
2019/03/30 03:25 net-next-old 35f861e3c58e c35ee0ea .config console log report ci-upstream-net-kasan-gce
2019/03/14 16:05 net-next-old d9862cfbe209 d09a902e .config console log report ci-upstream-net-kasan-gce
2019/03/12 05:12 net-next-old d9862cfbe209 12365b99 .config console log report ci-upstream-net-kasan-gce
2019/03/12 02:21 net-next-old d9862cfbe209 12365b99 .config console log report ci-upstream-net-kasan-gce
2019/03/09 19:23 net-next-old d9862cfbe209 12365b99 .config console log report ci-upstream-net-kasan-gce
2019/03/08 23:54 net-next-old d9862cfbe209 12365b99 .config console log report ci-upstream-net-kasan-gce
2019/03/01 09:38 net-next-old be9cefe796f3 8a4b3a6b .config console log report ci-upstream-net-kasan-gce
2019/02/20 20:34 net-next-old d2cf821ff677 c95f0707 .config console log report ci-upstream-net-kasan-gce
2019/02/18 08:05 net-next-old e511f17b1fb4 59f36113 .config console log report ci-upstream-net-kasan-gce
2019/02/10 14:25 net-next-old 99c864667c9f b4f792e4 .config console log report ci-upstream-net-kasan-gce
2019/02/10 10:48 net-next-old 99c864667c9f b4f792e4 .config console log report ci-upstream-net-kasan-gce
2019/01/30 15:04 net-next-old eaf2a47f40f0 aa432daf .config console log report ci-upstream-net-kasan-gce
2019/01/11 12:20 net-next-old b71acb0e3721 80dde172 .config console log report ci-upstream-net-kasan-gce
2019/01/10 00:07 net-next-old b71acb0e3721 45c0c1b1 .config console log report ci-upstream-net-kasan-gce
2019/02/04 01:12 linux-next dc4c89997735 c198d5dd .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.