syzbot


general protection fault in depot_save_stack

Status: auto-closed as invalid on 2020/08/31 11:55
Reported-by: syzbot+c3bd5eb6d2e9be539e47@syzkaller.appspotmail.com
First crash: 1683d, last: 1683d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in depot_save_stack net 4 2221d 2284d 0/28 auto-closed as invalid on 2019/05/11 10:33

Sample crash report:
Process accounting resumed
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 3969 Comm: syz-executor.3 Not tainted 4.19.120-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:find_stack lib/stackdepot.c:193 [inline]
RIP: 0010:depot_save_stack+0x112/0x444 lib/stackdepot.c:242
Code: 61 01 00 00 41 89 dd 41 81 e5 ff ff 0f 00 4e 8b 24 ed 80 00 b0 8b 4d 85 e4 74 2c 41 8d 48 ff eb 09 4d 8b 24 24 4d 85 e4 74 1d <41> 39 5c 24 08 75 f0 31 c0 45 3b 44 24 0c 0f 84 ec 00 00 00 4d 8b
RSP: 0018:ffff88803c89f430 EFLAGS: 00010206
RAX: 000000006708c26f RBX: 00000000d6621dea RCX: 0000000000000011
RDX: 000000005a88f3e3 RSI: 0000000000489220 RDI: ffff88803c89f488
RBP: ffff88803c89f470 R08: 0000000000000012 R09: 000000000fdeb6fd
R10: 000000007a91525e R11: ffff8880ae723993 R12: 0202020200000000
R13: 0000000000021dea R14: ffff88812c383dc0 R15: ffff88805e20f177
FS:  00007fe2f6a6f700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005568ee5ae288 CR3: 000000009e061000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 save_stack+0x89/0xa0 mm/kasan/kasan.c:454
Process accounting resumed
Process accounting resumed
 set_track mm/kasan/kasan.c:460 [inline]
 kasan_kmalloc mm/kasan/kasan.c:553 [inline]
 kasan_kmalloc+0xbf/0xe0 mm/kasan/kasan.c:531
 slab_post_alloc_hook mm/slab.h:445 [inline]
 slab_alloc mm/slab.c:3397 [inline]
 kmem_cache_alloc+0x114/0x710 mm/slab.c:3557
 kmem_cache_zalloc include/linux/slab.h:699 [inline]
 fill_pool lib/debugobjects.c:134 [inline]
 __debug_object_init+0x742/0xac0 lib/debugobjects.c:379
 debug_timer_init kernel/time/timer.c:704 [inline]
 debug_init kernel/time/timer.c:757 [inline]
 init_timer_key+0x33/0x360 kernel/time/timer.c:806
 sock_init_data+0x68/0xc60 net/core/sock.c:2762
 inet6_create net/ipv6/af_inet6.c:187 [inline]
 inet6_create+0x37c/0xf70 net/ipv6/af_inet6.c:110
 __sock_create+0x3d5/0x740 net/socket.c:1276
 inet_ctl_sock_create+0x8b/0x1e0 net/ipv4/af_inet.c:1605
 igmp6_net_init+0x31/0x3a0 net/ipv6/mcast.c:2963
 ops_init+0xaf/0x410 net/core/net_namespace.c:129
 setup_net+0x2c2/0x6f0 net/core/net_namespace.c:315
 copy_net_ns+0x1d9/0x331 net/core/net_namespace.c:438
 create_new_namespaces+0x3fb/0x7c0 kernel/nsproxy.c:107
 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
 copy_process.part.0+0x39ad/0x7a50 kernel/fork.c:1900
 copy_process kernel/fork.c:1694 [inline]
 _do_fork+0x22f/0xf40 kernel/fork.c:2207
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c829
Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fe2f6a6ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00000000004da8c0 RCX: 000000000045c829
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000064000103
RBP: 000000000078c0e0 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000076 R14: 00000000004c311e R15: 00007fe2f6a6f6d4
Modules linked in:
---[ end trace 09cdd8a5042c86d0 ]---
RIP: 0010:find_stack lib/stackdepot.c:193 [inline]
RIP: 0010:depot_save_stack+0x112/0x444 lib/stackdepot.c:242
Code: 61 01 00 00 41 89 dd 41 81 e5 ff ff 0f 00 4e 8b 24 ed 80 00 b0 8b 4d 85 e4 74 2c 41 8d 48 ff eb 09 4d 8b 24 24 4d 85 e4 74 1d <41> 39 5c 24 08 75 f0 31 c0 45 3b 44 24 0c 0f 84 ec 00 00 00 4d 8b
RSP: 0018:ffff88803c89f430 EFLAGS: 00010206
RAX: 000000006708c26f RBX: 00000000d6621dea RCX: 0000000000000011
RDX: 000000005a88f3e3 RSI: 0000000000489220 RDI: ffff88803c89f488
RBP: ffff88803c89f470 R08: 0000000000000012 R09: 000000000fdeb6fd
R10: 000000007a91525e R11: ffff8880ae723993 R12: 0202020200000000
R13: 0000000000021dea R14: ffff88812c383dc0 R15: ffff88805e20f177
Process accounting resumed
FS:  00007fe2f6a6f700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000021000000 CR3: 000000009e061000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
Process accounting resumed
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/05/03 11:54 linux-4.19.y fdc072324f3c 58ae5e18 .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.