general protection fault in bpf_clone

Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
android-414	general protection fault in bpf_clone_redirect (2)	C			2	1909d	1909d	0/1	public: reported C repro on 2019/08/30 23:43
linux-4.14	general protection fault in bpf_clone_redirect				2	1835d	1853d	0/1	auto-closed as invalid on 2020/03/12 14:54

kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN NOPTI Modules linked in: CPU: 0 PID: 30037 Comm: syz-executor3 Not tainted 4.14.73+ #15 task: ffff8801cc1e9780 task.stack: ffff8801a23f8000 RIP: 0010:read_pnet include/net/net_namespace.h:281 [inline] RIP: 0010:dev_net include/linux/netdevice.h:2012 [inline] RIP: 0010:____bpf_clone_redirect net/core/filter.c:1767 [inline] RIP: 0010:bpf_clone_redirect+0x69/0x2b0 net/core/filter.c:1758 RSP: 0018:ffff8801a23ff818 EFLAGS: 00010a03 RAX: dffffc0000000000 RBX: ffff8801ce782e00 RCX: 0000000000000250 RDX: 10000000359d6ea7 RSI: ffffc9000595b000 RDI: 80000001aceb753f RBP: 80000001aceb7007 R08: ffff8801a2400000 R09: 0000000000000000 R10: 1ffff1003447ff2b R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000001 R14: ffffed003447ff30 R15: ffffc90000533088 FS: 00007f28f8bca700(0000) GS:ffff8801dba00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2f422000 CR3: 00000001cb956002 CR4: 00000000001606b0 DR0: 00000000200001c0 DR1: 00000000200001c0 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: ___bpf_prog_run+0x248e/0x5c70 kernel/bpf/core.c:1012 Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 48 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 10 48 8d bd 38 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2c 02 00 00 48 8b bd 38 05 00 00 44 89 ee e8 RIP: read_pnet include/net/net_namespace.h:281 [inline] RSP: ffff8801a23ff818 RIP: dev_net include/linux/netdevice.h:2012 [inline] RSP: ffff8801a23ff818 RIP: ____bpf_clone_redirect net/core/filter.c:1767 [inline] RSP: ffff8801a23ff818 RIP: bpf_clone_redirect+0x69/0x2b0 net/core/filter.c:1758 RSP: ffff8801a23ff818 ---[ end trace 5b7bbfc1f2eb7482 ]--- Kernel panic - not syncing: Fatal exception Kernel Offset: 0x21c00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) Rebooting in 86400 seconds..