syzbot


general protection fault in sock_sendmsg

Status: auto-closed as invalid on 2021/04/07 03:05
Reported-by: syzbot+71863820355b9dcd3614@syzkaller.appspotmail.com
First crash: 1238d, last: 1229d

Sample crash report:
DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
kasan: GPF could be caused by NULL-ptr deref or user memory access
SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
general protection fault: 0000 [#1] PREEMPT SMP KASAN
FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
Modules linked in:
CPU: 0 PID: 16654 Comm: vhci_tx Not tainted 4.14.210-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff88809378c180 task.stack: ffff88809aa18000
RIP: 0010:sock_sendmsg_nosec net/socket.c:646 [inline]
RIP: 0010:sock_sendmsg+0x60/0x100 net/socket.c:656
RSP: 0018:ffff88809aa1fc20 EFLAGS: 00010206
GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
GDTR:                           limit=0x0000ffff, base=0x0000000000000000
RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000005 RSI: ffff88809aa1fd80 RDI: 0000000000000028
RBP: ffff88809aa1fd80 R08: 0000000000000030 R09: ffffed1013543fab
R10: ffff88809aa1fd5f R11: 0000000000066071 R12: 0000000000000000
R13: 0000000000000000 R14: ffff88809aa1fda0 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff284a7ccc CR3: 0000000096925000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
IDTR:                           limit=0x0000ffff, base=0x0000000000000000
Call Trace:
 vhci_send_cmd_submit+0x50e/0xeb0 drivers/usb/usbip/vhci_tx.c:153
TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
EFER =     0x0000000000000000  PAT = 0x0007040600070406
 vhci_tx_loop+0xc7/0x2d0 drivers/usb/usbip/vhci_tx.c:257
DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
Interruptibility = 00000000  ActivityState = 00000000
 kthread+0x30d/0x420 kernel/kthread.c:232
*** Host State ***
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
RIP = 0xffffffff81162b8e  RSP = 0xffff88805228f9b8
Code: 89 ee 4c 89 ef e8 61 68 
CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
0d 
FSBase=00007f7380df5700 GSBase=ffff8880ba500000 TRBase=fffffe0000034000
fd 85 c0 41 89 c4 75 79 e8 
GDTBase=fffffe0000032000 IDTBase=fffffe0000000000
35 f9 7f fb 49 8d 7d 28 48 b8 00 00 00 00 00 fc 
CR0=0000000080050033 CR3=000000009b317000 CR4=00000000001426e0
ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 
Sysenter RSP=fffffe0000034000 CS:RIP=0010:ffffffff87401690
70 48 b8 00 00 00 00 00 fc ff df 4d 8b 
EFER = 0x0000000000000d01  PAT = 0x0407050600070106
65 28 49 
RIP: sock_sendmsg_nosec net/socket.c:646 [inline] RSP: ffff88809aa1fc20
RIP: sock_sendmsg+0x60/0x100 net/socket.c:656 RSP: ffff88809aa1fc20
---[ end trace 903651fad13bc201 ]---
*** Control State ***

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/12/08 03:04 linux-4.14.y c196b3a9c83a 51a9082e .config console log report info ci2-linux-4-14
2020/12/02 20:46 linux-4.14.y c196b3a9c83a eff43e99 .config console log report info ci2-linux-4-14
2020/11/28 14:31 linux-4.14.y 87335852c5d9 3c7136c0 .config console log report info ci2-linux-4-14
* Struck through repros no longer work on HEAD.