syzbot


general protection fault in bpf_clone_redirect

Status: auto-closed as invalid on 2019/04/02 02:03
First crash: 2255d, last: 2255d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-414 general protection fault in bpf_clone_redirect (2) C 2 1924d 1924d 0/1 public: reported C repro on 2019/08/30 23:43
linux-4.14 general protection fault in bpf_clone_redirect 2 1849d 1867d 0/1 auto-closed as invalid on 2020/03/12 14:54

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN NOPTI
Modules linked in:
CPU: 0 PID: 30037 Comm: syz-executor3 Not tainted 4.14.73+ #15
task: ffff8801cc1e9780 task.stack: ffff8801a23f8000
RIP: 0010:read_pnet include/net/net_namespace.h:281 [inline]
RIP: 0010:dev_net include/linux/netdevice.h:2012 [inline]
RIP: 0010:____bpf_clone_redirect net/core/filter.c:1767 [inline]
RIP: 0010:bpf_clone_redirect+0x69/0x2b0 net/core/filter.c:1758
RSP: 0018:ffff8801a23ff818 EFLAGS: 00010a03
RAX: dffffc0000000000 RBX: ffff8801ce782e00 RCX: 0000000000000250
RDX: 10000000359d6ea7 RSI: ffffc9000595b000 RDI: 80000001aceb753f
RBP: 80000001aceb7007 R08: ffff8801a2400000 R09: 0000000000000000
R10: 1ffff1003447ff2b R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000001 R14: ffffed003447ff30 R15: ffffc90000533088
FS:  00007f28f8bca700(0000) GS:ffff8801dba00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2f422000 CR3: 00000001cb956002 CR4: 00000000001606b0
DR0: 00000000200001c0 DR1: 00000000200001c0 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 ___bpf_prog_run+0x248e/0x5c70 kernel/bpf/core.c:1012
Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 48 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 10 48 8d bd 38 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2c 02 00 00 48 8b bd 38 05 00 00 44 89 ee e8 
RIP: read_pnet include/net/net_namespace.h:281 [inline] RSP: ffff8801a23ff818
RIP: dev_net include/linux/netdevice.h:2012 [inline] RSP: ffff8801a23ff818
RIP: ____bpf_clone_redirect net/core/filter.c:1767 [inline] RSP: ffff8801a23ff818
RIP: bpf_clone_redirect+0x69/0x2b0 net/core/filter.c:1758 RSP: ffff8801a23ff818
---[ end trace 5b7bbfc1f2eb7482 ]---
Kernel panic - not syncing: Fatal exception
Kernel Offset: 0x21c00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
Rebooting in 86400 seconds..

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/10/04 01:57 android-4.14 cf748a3e868e 8b311eaf .config console log report ci-android-414-kasan-gce-root
* Struck through repros no longer work on HEAD.