general protection fault in sock_sendmsg
12 views
Skip to first unread message
syzbot
Nov 28, 2020, 9:32:14 AM11/28/20
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 87335852 Linux 4.14.209
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1757cff1500000
kernel config: https://syzkaller.appspot.com/x/.config?x=a932ed2a762225b
dashboard link: https://syzkaller.appspot.com/bug?extid=71863820355b9dcd3614
compiler: gcc (GCC) 10.1.0-syz 20200507
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+718638...@syzkaller.appspotmail.com
vhci_hcd: release socket
vhci_hcd: unlink cleanup rx 9
vhci_hcd: disconnect device
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 25628 Comm: vhci_tx Not tainted 4.14.209-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff888067a2e5c0 task.stack: ffff888025318000
RIP: 0010:sock_sendmsg_nosec net/socket.c:646 [inline]
RIP: 0010:sock_sendmsg+0x60/0x100 net/socket.c:656
RSP: 0018:ffff88802531fc20 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000005 RSI: ffff88802531fd80 RDI: 0000000000000028
RBP: ffff88802531fd80 R08: 0000000000000030 R09: ffffed1004a63fab
R10: ffff88802531fd5f R11: 0000000000066071 R12: 0000000000000000
R13: 0000000000000000 R14: ffff88802531fda0 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002023b000 CR3: 000000006f88b000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
vhci_send_cmd_submit+0x50e/0xeb0 drivers/usb/usbip/vhci_tx.c:153
vhci_tx_loop+0xc7/0x2d0 drivers/usb/usbip/vhci_tx.c:257
kthread+0x30d/0x420 kernel/kthread.c:232
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Code: 89 ee 4c 89 ef e8 61 65 0d fd 85 c0 41 89 c4 75 79 e8 35 f9 7f fb 49 8d 7d 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 70 48 b8 00 00 00 00 00 fc ff df 4d 8b 65 28 49
RIP: sock_sendmsg_nosec net/socket.c:646 [inline] RSP: ffff88802531fc20
RIP: sock_sendmsg+0x60/0x100 net/socket.c:656 RSP: ffff88802531fc20
---[ end trace 4ba841b853f7731a ]---
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: 87335852 Linux 4.14.209
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1757cff1500000
kernel config: https://syzkaller.appspot.com/x/.config?x=a932ed2a762225b
dashboard link: https://syzkaller.appspot.com/bug?extid=71863820355b9dcd3614
compiler: gcc (GCC) 10.1.0-syz 20200507
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+718638...@syzkaller.appspotmail.com
vhci_hcd: release socket
vhci_hcd: unlink cleanup rx 9
vhci_hcd: disconnect device
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 25628 Comm: vhci_tx Not tainted 4.14.209-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff888067a2e5c0 task.stack: ffff888025318000
RIP: 0010:sock_sendmsg_nosec net/socket.c:646 [inline]
RIP: 0010:sock_sendmsg+0x60/0x100 net/socket.c:656
RSP: 0018:ffff88802531fc20 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000005 RSI: ffff88802531fd80 RDI: 0000000000000028
RBP: ffff88802531fd80 R08: 0000000000000030 R09: ffffed1004a63fab
R10: ffff88802531fd5f R11: 0000000000066071 R12: 0000000000000000
R13: 0000000000000000 R14: ffff88802531fda0 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002023b000 CR3: 000000006f88b000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
vhci_send_cmd_submit+0x50e/0xeb0 drivers/usb/usbip/vhci_tx.c:153
vhci_tx_loop+0xc7/0x2d0 drivers/usb/usbip/vhci_tx.c:257
kthread+0x30d/0x420 kernel/kthread.c:232
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Code: 89 ee 4c 89 ef e8 61 65 0d fd 85 c0 41 89 c4 75 79 e8 35 f9 7f fb 49 8d 7d 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 70 48 b8 00 00 00 00 00 fc ff df 4d 8b 65 28 49
RIP: sock_sendmsg_nosec net/socket.c:646 [inline] RSP: ffff88802531fc20
RIP: sock_sendmsg+0x60/0x100 net/socket.c:656 RSP: ffff88802531fc20
---[ end trace 4ba841b853f7731a ]---
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Apr 6, 2021, 11:05:17 PM4/6/21
to syzkaller...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages