general protection fault in __sock_release (2)

Status: auto-closed as invalid on 2019/10/25 08:42
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+38b29941610a1cc735dc@syzkaller.appspotmail.com
First crash: 2741d, last: 2599d
▶ ▼ Discussions (3)
Title Replies (including bot) Last reply
Reminder: 99 open syzbot bugs in net subsystem 14 (14) 2019/07/31 15:13
Reminder: 94 open syzbot bugs in net subsystem 1 (1) 2019/06/25 05:48
general protection fault in __sock_release (2) 0 (1) 2019/01/30 14:03
▶ ▼ Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 general protection fault in __sock_release 2 syz done 8 2149d 2161d 1/1 fixed on 2020/10/09 08:27
linux-4.14 general protection fault in __sock_release 2 syz done 12 2149d 2161d 1/1 fixed on 2020/10/09 20:44
upstream general protection fault in __sock_release net 2 1 2931d 2931d 8/29 fixed on 2018/08/07 13:43
upstream general protection fault in __sock_release (3) net 2 syz done unreliable 21 2154d 2157d 0/29 auto-obsoleted due to no activity on 2022/12/17 04:12

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 25985 Comm: kworker/u4:3 Not tainted 5.2.0-rc3+ #56
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
RIP: 0010:__sock_release+0x2d/0x2a0 net/socket.c:596
Code: e5 41 57 41 56 41 55 41 54 49 89 f4 53 48 89 fb e8 78 9c f7 fb 4c 8d 73 28 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 f5 01 00 00 4c 8b 6b 28 4d 85 ed 0f 84 e9 00 00
RSP: 0018:ffff8880796afb70 EFLAGS: 00010207
RAX: dffffc0000000000 RBX: 00000000000000ff RCX: 1ffffffff10e9e4d
RDX: 0000000000000024 RSI: ffffffff85790a08 RDI: 00000000000000ff
RBP: ffff8880796afb98 R08: ffff8880726ae4c0 R09: ffffed1015d26c70
R10: ffffed1015d26c6f R11: ffff8880ae93637b R12: 0000000000000000
R13: 0000000000000007 R14: 0000000000000127 R15: ffff888067fde387
FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c425403728 CR3: 000000009ec27000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 sock_release+0x18/0x20 net/socket.c:621
 inet_ctl_sock_destroy include/net/inet_common.h:56 [inline]
 icmpv6_sk_exit+0x11f/0x1c0 net/ipv6/icmp.c:975
 ops_exit_list.isra.0+0xaa/0x150 net/core/net_namespace.c:154
 cleanup_net+0x3fb/0x960 net/core/net_namespace.c:553
 process_one_work+0x989/0x1790 kernel/workqueue.c:2269
 worker_thread+0x98/0xe40 kernel/workqueue.c:2415
 kthread+0x354/0x420 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Modules linked in:
---[ end trace 166b90ca8c6e905d ]---
RIP: 0010:__sock_release+0x2d/0x2a0 net/socket.c:596
Code: e5 41 57 41 56 41 55 41 54 49 89 f4 53 48 89 fb e8 78 9c f7 fb 4c 8d 73 28 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 f5 01 00 00 4c 8b 6b 28 4d 85 ed 0f 84 e9 00 00
RSP: 0018:ffff8880796afb70 EFLAGS: 00010207
RAX: dffffc0000000000 RBX: 00000000000000ff RCX: 1ffffffff10e9e4d
RDX: 0000000000000024 RSI: ffffffff85790a08 RDI: 00000000000000ff
RBP: ffff8880796afb98 R08: ffff8880726ae4c0 R09: ffffed1015d26c70
R10: ffffed1015d26c6f R11: ffff8880ae93637b R12: 0000000000000000
R13: 0000000000000007 R14: 0000000000000127 R15: ffff888067fde387
FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c425403728 CR3: 000000009ec27000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (20):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/06/17 15:03 net-old 6be8e297f9bc 442206d7 .config console log report ci-upstream-net-this-kasan-gce
2019/06/16 23:05 net-old 1eb4169c1e6b 442206d7 .config console log report ci-upstream-net-this-kasan-gce
2019/05/30 02:10 net-old 58e8b37069ff d9aaf3c2 .config console log report ci-upstream-net-this-kasan-gce
2019/05/28 12:23 net-old 3e66b7cc50ef 6bd61501 .config console log report ci-upstream-net-this-kasan-gce
2019/05/24 21:16 net-old ce8d24f9a596 85c57315 .config console log report ci-upstream-net-this-kasan-gce
2019/04/24 12:09 net-old 1c5c12ee308a 8e3c52b1 .config console log report ci-upstream-net-this-kasan-gce
2019/04/08 14:52 net-old 5055376a3b44 0dfb0452 .config console log report ci-upstream-net-this-kasan-gce
2019/03/17 21:11 net-old 517ccc2aa50d ba18afea .config console log report ci-upstream-net-this-kasan-gce
2019/06/15 20:34 net-next-old 877cd9ffbc9c 442206d7 .config console log report ci-upstream-net-kasan-gce
2019/06/15 15:57 net-next-old 877cd9ffbc9c 442206d7 .config console log report ci-upstream-net-kasan-gce
2019/05/29 21:55 net-next-old 36f18439ea16 5457ef34 .config console log report ci-upstream-net-kasan-gce
2019/05/29 02:55 net-next-old c7ae09253cb8 6bd61501 .config console log report ci-upstream-net-kasan-gce
2019/05/26 16:09 net-next-old 22942498cceb 85c57315 .config console log report ci-upstream-net-kasan-gce
2019/05/20 01:35 net-next-old 35c99ffa20ed 5a4461b0 .config console log report ci-upstream-net-kasan-gce
2019/03/27 03:40 net-next-old be67101fbf27 55684ce1 .config console log report ci-upstream-net-kasan-gce
2019/03/16 11:41 net-next-old 3b319ee220a8 bab43553 .config console log report ci-upstream-net-kasan-gce
2019/03/09 04:58 net-next-old d9862cfbe209 12365b99 .config console log report ci-upstream-net-kasan-gce
2019/03/03 22:57 net-next-old 41bc0ddb80e0 1c0e457a .config console log report ci-upstream-net-kasan-gce
2019/02/27 11:44 net-next-old ff8285f81822 083cfd0e .config console log report ci-upstream-net-kasan-gce
2019/01/26 01:31 net-next-old 30e5c2c6bf28 ebf7a37c .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.