syzbot

 sign-in | mailing list | source | docs
🐞 Open [980] ≡ Subsystems 🐞 Fixed [5236] 🐞 Invalid [12500] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in __skb_flow_dissect (2)

Status: fixed on 2018/11/12 21:25
Subsystems: net
[Documentation on labels]
Fix commit: d0e13a1488ad flow_dissector: lookup netns by skb->sk if skb->dev is NULL
First crash: 2045d, last: 2038d
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in __skb_flow_dissect C 37 2444d 2447d 3/26 fixed on 2017/10/24 06:54

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 5554 Comm: syz-executor144 Not tainted 4.19.0-rc4-next-20180918+ #74
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:dev_net include/linux/netdevice.h:2165 [inline]
RIP: 0010:__skb_flow_dissect+0x3b5/0x5980 net/core/flow_dissector.c:758
Code: 48 c1 ea 03 80 3c 02 00 0f 85 a6 4d 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 77 10 49 8d be 80 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5c 4d 00 00 4d 8b b6 80 05 00 00 48 b8 00 00 00
RSP: 0018:ffff8801d8bced90 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff8801d8bcf160 RCX: ffffffff86124429
RDX: 00000000000000b0 RSI: ffffffff861227d8 RDI: 0000000000000580
RBP: ffff8801d8bcf4f0 R08: ffff8801d8f6e5c0 R09: ffffed003b585b57
R10: ffffed003b585b57 R11: ffff8801dac2dabb R12: ffffffff8a5202a4
R13: ffffffff8a5202a6 R14: 0000000000000000 R15: ffff8801d9700640
FS:  0000000000b74880(0000) GS:ffff8801dac00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002039a000 CR3: 00000001d846a000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 skb_flow_dissect_flow_keys_basic include/linux/skbuff.h:1232 [inline]
 skb_get_poff+0x9b/0x1c0 net/core/flow_dissector.c:1486
 ____bpf_skb_get_pay_offset net/core/filter.c:126 [inline]
 bpf_skb_get_pay_offset+0x15/0x20 net/core/filter.c:124
Modules linked in:
---[ end trace 09dd74c843a08f69 ]---
RIP: 0010:dev_net include/linux/netdevice.h:2165 [inline]
RIP: 0010:__skb_flow_dissect+0x3b5/0x5980 net/core/flow_dissector.c:758
Code: 48 c1 ea 03 80 3c 02 00 0f 85 a6 4d 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 77 10 49 8d be 80 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5c 4d 00 00 4d 8b b6 80 05 00 00 48 b8 00 00 00
RSP: 0018:ffff8801d8bced90 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff8801d8bcf160 RCX: ffffffff86124429
RDX: 00000000000000b0 RSI: ffffffff861227d8 RDI: 0000000000000580
RBP: ffff8801d8bcf4f0 R08: ffff8801d8f6e5c0 R09: ffffed003b585b57
R10: ffffed003b585b57 R11: ffff8801dac2dabb R12: ffffffff8a5202a4
R13: ffffffff8a5202a6 R14: 0000000000000000 R15: ffff8801d9700640
FS:  0000000000b74880(0000) GS:ffff8801dac00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002039a000 CR3: 00000001d846a000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/09/18 12:53 linux-next 3eb5358079d3 7f125108 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/09/25 23:05 linux-next 8b7a6ebdd4a5 b7e11289 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/09/25 10:10 linux-next 8b7a6ebdd4a5 0e7547d7 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/09/25 00:45 linux-next dad486875956 0e7547d7 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/09/23 20:57 linux-next 46c163a036b4 28d9ac76 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/09/21 12:19 linux-next 46c163a036b4 37079712 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/09/20 17:08 linux-next a0cb0cabe4bb 565a5452 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/09/18 08:03 linux-next 3eb5358079d3 7f125108 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/09/18 07:57 linux-next 3eb5358079d3 7f125108 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/09/18 06:49 linux-next 3eb5358079d3 7f125108 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/09/18 06:14 linux-next 3eb5358079d3 7f125108 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.