syzbot


BUG: unable to handle kernel paging request in bpf_clone_redirect (2)

Status: auto-closed as invalid on 2019/12/26 17:17
Reported-by: syzbot+468aee0700cb5870fee0@syzkaller.appspotmail.com
First crash: 1696d, last: 1696d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-414 BUG: unable to handle kernel paging request in bpf_clone_redirect 1 2015d 1832d 0/1 auto-closed as invalid on 2019/04/28 00:03

Sample crash report:
BUG: unable to handle kernel paging request at 00000000c5e8d256
IP: read_pnet include/net/net_namespace.h:282 [inline]
IP: dev_net include/linux/netdevice.h:2015 [inline]
IP: ____bpf_clone_redirect net/core/filter.c:1768 [inline]
IP: bpf_clone_redirect+0x6a/0x2b0 net/core/filter.c:1759
PGD 21fff3067 P4D 21fff3067 PUD 21fe67067 PMD 0 
Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI
Modules linked in:
CPU: 1 PID: 31500 Comm: syz-executor.4 Not tainted 4.14.140+ #39
task: 00000000190da29c task.stack: 00000000877c35f4
RIP: 0010:read_pnet include/net/net_namespace.h:282 [inline]
RIP: 0010:dev_net include/linux/netdevice.h:2015 [inline]
RIP: 0010:____bpf_clone_redirect net/core/filter.c:1768 [inline]
RIP: 0010:bpf_clone_redirect+0x6a/0x2b0 net/core/filter.c:1759
RSP: 0018:ffff8881aa437808 EFLAGS: 00010a07
RAX: dffffc0000000000 RBX: ffff8881a494ee00 RCX: 00000000000001db
RDX: 1ffffffff0379d93 RSI: ffffc90003539000 RDI: ffffffff81bcec9d
RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed103b7244fa
R10: ffffed103b7244f9 R11: ffff8881db9227cf R12: ffffffff81bce765
R13: 0000000000000003 R14: ffffffffa83b97e0 R15: ffffc900002eb088
FS:  00007ff6e5e44700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffffbfff0379d93 CR3: 000000019d166005 CR4: 00000000001606a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 ___bpf_prog_run+0x2478/0x5510 kernel/bpf/core.c:1086
Code: 48 c1 ea 03 80 3c 02 00 0f 85 55 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 10 49 8d bc 24 38 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 12 02 00 00 49 8b bc 24 38 05 00 00 44 89 ee 
RIP: read_pnet include/net/net_namespace.h:282 [inline] RSP: ffff8881aa437808
RIP: dev_net include/linux/netdevice.h:2015 [inline] RSP: ffff8881aa437808
RIP: ____bpf_clone_redirect net/core/filter.c:1768 [inline] RSP: ffff8881aa437808
RIP: bpf_clone_redirect+0x6a/0x2b0 net/core/filter.c:1759 RSP: ffff8881aa437808
CR2: fffffbfff0379d93
---[ end trace e4f8a98577aa5601 ]---
ip6_tunnel: j xmit: Local address not yet configured!

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/08/28 17:16 android-4.14 987732fcbbe3 fd37b39e .config console log report ci-android-414-kasan-gce-root
* Struck through repros no longer work on HEAD.