general protection fault in icmpv6_sk

Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	KASAN: use-after-free Read in icmpv6_sk_exit (2) net	syz	error	error	5	800d	925d	0/26	auto-obsoleted due to no activity on 2023/01/15 04:48
android-5-10	general protection fault in icmpv6_sk_exit				1	750d	750d	0/2	auto-closed as invalid on 2022/06/28 18:38

general protection fault, probably for non-canonical address 0xdffffc0000000087: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000438-0x000000000000043f] CPU: 0 PID: 371 Comm: kworker/u4:4 Not tainted 5.11.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net RIP: 0010:inet_ctl_sock_destroy include/net/inet_common.h:63 [inline] RIP: 0010:icmpv6_sk_exit+0x105/0x1e0 net/ipv6/icmp.c:1019 Code: 03 80 3c 1a 00 0f 85 87 00 00 00 4c 8b 38 4d 85 ff 0f 84 5b ff ff ff e8 e9 bb be f9 49 8d bf 38 04 00 00 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 b6 00 00 00 49 8b bf 38 04 00 00 e8 a5 06 3b ff RSP: 0018:ffffc9000195fbe0 EFLAGS: 00010216 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000087 RSI: ffffffff87b41a07 RDI: 000000000000043a RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8f8667af R10: ffffffff87b41994 R11: 0000000000000159 R12: 0000000000000007 R13: ffff88801cf0d940 R14: fffffbfff1b47194 R15: 0000000000000002 FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005563fc4d3160 CR3: 000000001290b000 CR4: 0000000000350ef0 Call Trace: ops_exit_list+0xb0/0x160 net/core/net_namespace.c:187 cleanup_net+0x4ea/0xb10 net/core/net_namespace.c:604 process_one_work+0x98d/0x15f0 kernel/workqueue.c:2275 worker_thread+0x64c/0x1120 kernel/workqueue.c:2421 kthread+0x3b1/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296 Modules linked in: ---[ end trace b97873952eb04aeb ]--- RIP: 0010:inet_ctl_sock_destroy include/net/inet_common.h:63 [inline] RIP: 0010:icmpv6_sk_exit+0x105/0x1e0 net/ipv6/icmp.c:1019 Code: 03 80 3c 1a 00 0f 85 87 00 00 00 4c 8b 38 4d 85 ff 0f 84 5b ff ff ff e8 e9 bb be f9 49 8d bf 38 04 00 00 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 b6 00 00 00 49 8b bf 38 04 00 00 e8 a5 06 3b ff RSP: 0018:ffffc9000195fbe0 EFLAGS: 00010216 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000087 RSI: ffffffff87b41a07 RDI: 000000000000043a RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8f8667af R10: ffffffff87b41994 R11: 0000000000000159 R12: 0000000000000007 R13: ffff88801cf0d940 R14: fffffbfff1b47194 R15: 0000000000000002 FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005563fc4d3160 CR3: 000000001313c000 CR4: 0000000000350ef0