general protection fault in fib6_purge_rt (2)

Status: auto-closed as invalid on 2019/10/25 08:50
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+d53d5d9b6793dc70eb9d@syzkaller.appspotmail.com
First crash: 2661d, last: 2605d
▶ ▼ Discussions (3)
Title Replies (including bot) Last reply
Reminder: 99 open syzbot bugs in net subsystem 14 (14) 2019/07/31 15:13
Reminder: 94 open syzbot bugs in net subsystem 1 (1) 2019/06/25 05:48
general protection fault in fib6_purge_rt (2) 0 (1) 2019/04/23 16:07
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in fib6_purge_rt net 2 syz, C done 60 2668d 2785d 12/29 fixed on 2019/04/10 16:37

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 18281 Comm: syz-executor.1 Not tainted 5.1.0-rc6+ #188
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:fib6_drop_pcpu_from net/ipv6/ip6_fib.c:924 [inline]
RIP: 0010:fib6_purge_rt+0x4b3/0x670 net/ipv6/ip6_fib.c:960
Code: 0f b6 35 7f c9 43 03 31 ff 44 89 f6 e8 06 d5 59 fb 45 84 f6 0f 84 b3 00 00 00 e8 b8 d3 59 fb 49 8d 7f 70 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 64 01 00 00 48 89 f8 4d 8b 77 70 48 c1 e8 03 80
RSP: 0018:ffff8880681cefa8 EFLAGS: 00010207
RAX: 0000000000000053 RBX: dffffc0000000000 RCX: ffffc9000816c000
RDX: 0000000000040000 RSI: ffffffff8616b938 RDI: 000000000000029c
RBP: ffff8880681cf000 R08: ffff8880a6020040 R09: ffffed1014276506
R10: ffffed1014276505 R11: ffff8880a13b282f R12: 0000000000000001
R13: ffff8880a13b2800 R14: 0000000000000001 R15: 000000000000022c
FS:  00007f23205eb700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000625208 CR3: 000000008ed0b000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 fib6_del_route net/ipv6/ip6_fib.c:1813 [inline]
 fib6_del+0xac2/0x10a0 net/ipv6/ip6_fib.c:1844
 fib6_clean_node+0x3a8/0x590 net/ipv6/ip6_fib.c:2006
 fib6_walk_continue+0x495/0x900 net/ipv6/ip6_fib.c:1928
 fib6_walk+0x9d/0x100 net/ipv6/ip6_fib.c:1976
 fib6_clean_tree+0xe0/0x120 net/ipv6/ip6_fib.c:2055
 __fib6_clean_all+0x118/0x2a0 net/ipv6/ip6_fib.c:2071
 fib6_clean_all+0x2b/0x40 net/ipv6/ip6_fib.c:2082
 rt6_sync_down_dev+0x134/0x150 net/ipv6/route.c:4068
 rt6_disable_ip+0x27/0x5f0 net/ipv6/route.c:4073
 addrconf_ifdown+0xa2/0x1220 net/ipv6/addrconf.c:3705
 addrconf_notify+0x19a/0x2260 net/ipv6/addrconf.c:3630
 notifier_call_chain+0xc7/0x240 kernel/notifier.c:93
 __raw_notifier_call_chain kernel/notifier.c:394 [inline]
 raw_notifier_call_chain+0x2e/0x40 kernel/notifier.c:401
 call_netdevice_notifiers_info+0x3f/0x90 net/core/dev.c:1753
 call_netdevice_notifiers_extack net/core/dev.c:1765 [inline]
 call_netdevice_notifiers net/core/dev.c:1779 [inline]
 __dev_notify_flags+0x1e9/0x2c0 net/core/dev.c:7623
 dev_change_flags+0x10d/0x170 net/core/dev.c:7659
 devinet_ioctl+0xde6/0x1cf0 net/ipv4/devinet.c:1104
 inet_ioctl+0x2d4/0x410 net/ipv4/af_inet.c:954
 sock_do_ioctl+0xde/0x300 net/socket.c:1037
 sock_ioctl+0x32b/0x610 net/socket.c:1168
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:509 [inline]
 do_vfs_ioctl+0xd6e/0x1390 fs/ioctl.c:696
 ksys_ioctl+0xab/0xd0 fs/ioctl.c:713
 __do_sys_ioctl fs/ioctl.c:720 [inline]
 __se_sys_ioctl fs/ioctl.c:718 [inline]
 __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x458da9
Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f23205eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9
RDX: 0000000020000040 RSI: 0000000000008914 RDI: 0000000000000005
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f23205eb6d4
R13: 00000000004c4635 R14: 00000000004d7ec8 R15: 00000000ffffffff
Modules linked in:
---[ end trace 42bec7aed89d5721 ]---
RIP: 0010:fib6_drop_pcpu_from net/ipv6/ip6_fib.c:924 [inline]
RIP: 0010:fib6_purge_rt+0x4b3/0x670 net/ipv6/ip6_fib.c:960
Code: 0f b6 35 7f c9 43 03 31 ff 44 89 f6 e8 06 d5 59 fb 45 84 f6 0f 84 b3 00 00 00 e8 b8 d3 59 fb 49 8d 7f 70 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 64 01 00 00 48 89 f8 4d 8b 77 70 48 c1 e8 03 80
RSP: 0018:ffff8880681cefa8 EFLAGS: 00010207
RAX: 0000000000000053 RBX: dffffc0000000000 RCX: ffffc9000816c000
RDX: 0000000000040000 RSI: ffffffff8616b938 RDI: 000000000000029c
RBP: ffff8880681cf000 R08: ffff8880a6020040 R09: ffffed1014276506
R10: ffffed1014276505 R11: ffff8880a13b282f R12: 0000000000000001
R13: ffff8880a13b2800 R14: 0000000000000001 R15: 000000000000022c
FS:  00007f23205eb700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000625208 CR3: 000000008ed0b000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (36):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/04/30 11:38 net-old 6c0afef5fb0c 20f16bef .config console log report ci-upstream-net-this-kasan-gce
2019/04/30 00:09 net-old 2ae7a39770c7 b617407b .config console log report ci-upstream-net-this-kasan-gce
2019/04/28 15:33 net-old 21f1b8a6636c b617407b .config console log report ci-upstream-net-this-kasan-gce
2019/04/24 23:37 net-old 20ff83f10f11 8e3c52b1 .config console log report ci-upstream-net-this-kasan-gce
2019/04/20 17:18 net-old d1bcf2b65177 b0e8efcb .config console log report ci-upstream-net-this-kasan-gce
2019/04/20 00:02 net-old 9188d5ca454f b0e8efcb .config console log report ci-upstream-net-this-kasan-gce
2019/04/15 08:17 net-old c543cb4a5f07 505ab413 .config console log report ci-upstream-net-this-kasan-gce
2019/06/10 06:49 net-next-old 900d96e418dc 0159583c .config console log report ci-upstream-net-kasan-gce
2019/06/10 04:12 net-next-old 900d96e418dc 0159583c .config console log report ci-upstream-net-kasan-gce
2019/06/09 18:41 net-next-old 8d94a8733c94 0159583c .config console log report ci-upstream-net-kasan-gce
2019/06/09 18:28 net-next-old 8d94a8733c94 0159583c .config console log report ci-upstream-net-kasan-gce
2019/06/08 18:29 net-next-old a6cdeeb16bff 0159583c .config console log report ci-upstream-net-kasan-gce
2019/06/07 09:33 net-next-old 4daa95af7f1c 698773cb .config console log report ci-upstream-net-kasan-gce
2019/06/07 07:15 net-next-old 4daa95af7f1c 698773cb .config console log report ci-upstream-net-kasan-gce
2019/06/07 03:23 net-next-old 4daa95af7f1c 698773cb .config console log report ci-upstream-net-kasan-gce
2019/06/06 21:05 net-next-old 8b5e07d7ee95 698773cb .config console log report ci-upstream-net-kasan-gce
2019/06/06 15:25 net-next-old 8b5e07d7ee95 698773cb .config console log report ci-upstream-net-kasan-gce
2019/06/04 23:01 net-next-old 712246bc93cb e41a20c5 .config console log report ci-upstream-net-kasan-gce
2019/06/04 01:03 net-next-old b7034146756b ce07a7ae .config console log report ci-upstream-net-kasan-gce
2019/06/02 15:12 net-next-old c1e9e01d4233 53c81ea5 .config console log report ci-upstream-net-kasan-gce
2019/06/01 22:26 net-next-old 0462eaacee49 53c81ea5 .config console log report ci-upstream-net-kasan-gce
2019/05/31 23:17 net-next-old c9bb6165a16e 142ce681 .config console log report ci-upstream-net-kasan-gce
2019/05/31 08:40 net-next-old 517f4c49aafc d9aaf3c2 .config console log report ci-upstream-net-kasan-gce
2019/05/30 13:44 net-next-old 7da33a8f87a4 d9aaf3c2 .config console log report ci-upstream-net-kasan-gce
2019/05/29 11:00 net-next-old 36f18439ea16 6bd61501 .config console log report ci-upstream-net-kasan-gce
2019/05/29 03:37 net-next-old c7ae09253cb8 6bd61501 .config console log report ci-upstream-net-kasan-gce
2019/05/27 22:14 net-next-old cec4f328c929 6bd61501 .config console log report ci-upstream-net-kasan-gce
2019/05/27 04:49 net-next-old 9b3c520e9628 85c57315 .config console log report ci-upstream-net-kasan-gce
2019/05/27 02:34 net-next-old 9b3c520e9628 85c57315 .config console log report ci-upstream-net-kasan-gce
2019/05/27 00:36 net-next-old 9b3c520e9628 85c57315 .config console log report ci-upstream-net-kasan-gce
2019/05/26 12:59 net-next-old 22942498cceb 85c57315 .config console log report ci-upstream-net-kasan-gce
2019/05/26 03:43 net-next-old 22942498cceb 85c57315 .config console log report ci-upstream-net-kasan-gce
2019/05/26 02:49 net-next-old 22942498cceb 85c57315 .config console log report ci-upstream-net-kasan-gce
2019/05/25 08:21 net-next-old af5136f95045 85c57315 .config console log report ci-upstream-net-kasan-gce
2019/05/02 06:28 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/04/19 08:30 net-next-old 5e42574b022b b0e8efcb .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.