syzbot


general protection fault in put_cmsg
Status: internal: reported C repro on 2020/05/12 22:06
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: ipv6: set msg_control_is_user in do_ipv6_getsockopt
Patched on: [ci-upstream-bpf-next-kasan-gce ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce], missing on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 21d, last: 20d

Cause bisection: introduced by (bisect log):

commit 1f466e1f15cf1dac7c86798d694649fc42cd868a
Author: Christoph Hellwig <hch@lst.de>
Date: Mon May 11 11:59:13 2020 +0000

  net: cleanly handle kernel vs user buffers for ->msg_control

Crash: general protection fault in put_cmsg (log)
Repro: C syz .config

Sample crash report:

Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-net-kasan-gce 2020/05/12 22:30 net-next 51fa960d a44eb8f7 .config log report syz C arnd@arndb.de, davem@davemloft.net, deepa.kernel@gmail.com, gregkh@linuxfoundation.org, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-net-kasan-gce 2020/05/13 06:40 net-next 51fa960d a44eb8f7 .config log report allison@lohutok.net, arnd@arndb.de, davem@davemloft.net, deepa.kernel@gmail.com, gregkh@linuxfoundation.org, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-net-kasan-gce 2020/05/12 22:05 net-next 51fa960d a44eb8f7 .config log report allison@lohutok.net, arnd@arndb.de, davem@davemloft.net, gregkh@linuxfoundation.org, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, tglx@linutronix.de