From mboxrd@z Thu Jan 1 00:00:00 1970 From: syzbot Subject: KASAN: use-after-free Read in sk_psock_unlink Date: Fri, 26 Oct 2018 00:37:01 -0700 Message-ID: <000000000000fd342e05791cc86f@google.com> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes Content-Transfer-Encoding: base64 To: daniel@iogearbox.net, davem@davemloft.net, john.fastabend@gmail.com, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, syzkaller-bugs@googlegroups.com Return-path: Sender: linux-kernel-owner@vger.kernel.org List-Id: netdev.vger.kernel.org SGVsbG8sDQoNCnN5emJvdCBmb3VuZCB0aGUgZm9sbG93aW5nIGNyYXNoIG9uOg0KDQpIRUFEIGNv bW1pdDogICAgOGM2MGMzNmQwYjhjIEFkZCBsaW51eC1uZXh0IHNwZWNpZmljIGZpbGVzIGZvciAy MDE4MTAxOQ0KZ2l0IHRyZWU6ICAgICAgIGxpbnV4LW5leHQNCmNvbnNvbGUgb3V0cHV0OiBodHRw czovL3N5emthbGxlci5hcHBzcG90LmNvbS94L2xvZy50eHQ/eD0xNzM1NmRiZDQwMDAwMA0Ka2Vy bmVsIGNvbmZpZzogIGh0dHBzOi8vc3l6a2FsbGVyLmFwcHNwb3QuY29tL3gvLmNvbmZpZz94PThi NmQ3YzRjODE1MzVlODkNCmRhc2hib2FyZCBsaW5rOiBodHRwczovL3N5emthbGxlci5hcHBzcG90 LmNvbS9idWc/ZXh0aWQ9M2FjZDlmNjdhNmExNTc2NjY4NmUNCmNvbXBpbGVyOiAgICAgICBnY2Mg KEdDQykgOC4wLjEgMjAxODA0MTMgKGV4cGVyaW1lbnRhbCkNCg0KVW5mb3J0dW5hdGVseSwgSSBk b24ndCBoYXZlIGFueSByZXByb2R1Y2VyIGZvciB0aGlzIGNyYXNoIHlldC4NCg0KSU1QT1JUQU5U OiBpZiB5b3UgZml4IHRoZSBidWcsIHBsZWFzZSBhZGQgdGhlIGZvbGxvd2luZyB0YWcgdG8gdGhl IGNvbW1pdDoNClJlcG9ydGVkLWJ5OiBzeXpib3QrM2FjZDlmNjdhNmExNTc2NjY4NmVAc3l6a2Fs bGVyLmFwcHNwb3RtYWlsLmNvbQ0KDQpFWFQ0LWZzIChsb29wNSk6IGNvdWxkbid0IG1vdW50IFJE V1IgYmVjYXVzZSBvZiB1bnN1cHBvcnRlZCBvcHRpb25hbCAgDQpmZWF0dXJlcyAoODApDQpFWFQ0 LWZzIChsb29wNSk6IGNvdWxkbid0IG1vdW50IFJEV1IgYmVjYXVzZSBvZiB1bnN1cHBvcnRlZCBv cHRpb25hbCAgDQpmZWF0dXJlcyAoODApDQppbnB1dDogAiBhcyAvZGV2aWNlcy92aXJ0dWFsL2lu cHV0L2lucHV0MjENCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PQ0KQlVHOiBLQVNBTjogdXNlLWFmdGVyLWZyZWUgaW4gc2tf cHNvY2tfdW5saW5rKzB4NGQ4LzB4NzAwICANCm5ldC9jb3JlL3NvY2tfbWFwLmM6OTkyDQpSZWFk IG9mIHNpemUgNCBhdCBhZGRyIGZmZmY4ODAxYjdmYzEwMTggYnkgdGFzayBzeXotZXhlY3V0b3I0 LzIxNDA5DQoNCkNQVTogMCBQSUQ6IDIxNDA5IENvbW06IHN5ei1leGVjdXRvcjQgTm90IHRhaW50 ZWQgNC4xOS4wLXJjOC1uZXh0LTIwMTgxMDE5KyAgDQojOTgNCkhhcmR3YXJlIG5hbWU6IEdvb2ds ZSBHb29nbGUgQ29tcHV0ZSBFbmdpbmUvR29vZ2xlIENvbXB1dGUgRW5naW5lLCBCSU9TICANCkdv b2dsZSAwMS8wMS8yMDExDQpDYWxsIFRyYWNlOg0KICBfX2R1bXBfc3RhY2sgbGliL2R1bXBfc3Rh Y2suYzo3NyBbaW5saW5lXQ0KICBkdW1wX3N0YWNrKzB4MjQ0LzB4MzlkIGxpYi9kdW1wX3N0YWNr LmM6MTEzDQogIHByaW50X2FkZHJlc3NfZGVzY3JpcHRpb24uY29sZC43KzB4OS8weDFmZiBtbS9r YXNhbi9yZXBvcnQuYzoyNTYNCiAga2FzYW5fcmVwb3J0X2Vycm9yIG1tL2thc2FuL3JlcG9ydC5j OjM1NCBbaW5saW5lXQ0KICBrYXNhbl9yZXBvcnQuY29sZC44KzB4MjQyLzB4MzA5IG1tL2thc2Fu L3JlcG9ydC5jOjQxMg0KICBfX2FzYW5fcmVwb3J0X2xvYWQ0X25vYWJvcnQrMHgxNC8weDIwIG1t L2thc2FuL3JlcG9ydC5jOjQzMg0KICBza19wc29ja191bmxpbmsrMHg0ZDgvMHg3MDAgbmV0L2Nv cmUvc29ja19tYXAuYzo5OTINCiAgdGNwX2JwZl9yZW1vdmUrMHhkMC8weDEzMCBuZXQvaXB2NC90 Y3BfYnBmLmM6NTExDQogIHRjcF9icGZfY2xvc2UrMHgxYzYvMHg0YTAgbmV0L2lwdjQvdGNwX2Jw Zi5jOjU1MQ0KICBpbmV0X3JlbGVhc2UrMHgxMDQvMHgxZjAgbmV0L2lwdjQvYWZfaW5ldC5jOjQy OA0KICBfX3NvY2tfcmVsZWFzZSsweGQ3LzB4MjUwIG5ldC9zb2NrZXQuYzo1ODANCiAgc29ja19j bG9zZSsweDE5LzB4MjAgbmV0L3NvY2tldC5jOjExNDINCiAgX19mcHV0KzB4M2JjLzB4YTcwIGZz L2ZpbGVfdGFibGUuYzoyNzkNCiAgX19fX2ZwdXQrMHgxNS8weDIwIGZzL2ZpbGVfdGFibGUuYzoz MTINCiAgdGFza193b3JrX3J1bisweDFlOC8weDJhMCBrZXJuZWwvdGFza193b3JrLmM6MTEzDQog IGdldF9zaWduYWwrMHgxNTUwLzB4MTk3MCBrZXJuZWwvc2lnbmFsLmM6MjM0Nw0KICBkb19zaWdu YWwrMHg5Yy8weDIxYzAgYXJjaC94ODYva2VybmVsL3NpZ25hbC5jOjgxNg0KICBleGl0X3RvX3Vz ZXJtb2RlX2xvb3ArMHgyZTUvMHgzODAgYXJjaC94ODYvZW50cnkvY29tbW9uLmM6MTYyDQogIHBy ZXBhcmVfZXhpdF90b191c2VybW9kZSBhcmNoL3g4Ni9lbnRyeS9jb21tb24uYzoxOTcgW2lubGlu ZV0NCiAgc3lzY2FsbF9yZXR1cm5fc2xvd3BhdGggYXJjaC94ODYvZW50cnkvY29tbW9uLmM6MjY4 IFtpbmxpbmVdDQogIGRvX3N5c2NhbGxfNjQrMHg2YmUvMHg4MjAgYXJjaC94ODYvZW50cnkvY29t bW9uLmM6MjkzDQogIGVudHJ5X1NZU0NBTExfNjRfYWZ0ZXJfaHdmcmFtZSsweDQ5LzB4YmUNClJJ UDogMDAzMzoweDQ1NzU2OQ0KQ29kZTogZmQgYjMgZmIgZmYgYzMgNjYgMmUgMGYgMWYgODQgMDAg MDAgMDAgMDAgMDAgNjYgOTAgNDggODkgZjggNDggODkgZjcgIA0KNDggODkgZDYgNDggODkgY2Eg NGQgODkgYzIgNGQgODkgYzggNGMgOGIgNGMgMjQgMDggMGYgMDUgPDQ4PiAzZCAwMSBmMCBmZiAg DQpmZiAwZiA4MyBjYiBiMyBmYiBmZiBjMyA2NiAyZSAwZiAxZiA4NCAwMCAwMCAwMCAwMA0KUlNQ OiAwMDJiOjAwMDA3ZmQ4ODk2NWVjNzggRUZMQUdTOiAwMDAwMDI0NiBPUklHX1JBWDogMDAwMDAw MDAwMDAwMDAyYw0KUkFYOiAwMDAwMDAwMDAwMjgwMDAwIFJCWDogMDAwMDAwMDAwMDAwMDAwNiBS Q1g6IDAwMDAwMDAwMDA0NTc1NjkNClJEWDogZmZmZmZmZmZmZmZmZmU2ZSBSU0k6IDAwMDAwMDAw MjBhODhmODggUkRJOiAwMDAwMDAwMDAwMDAwMDAzDQpSQlA6IDAwMDAwMDAwMDA3MmJmMDAgUjA4 OiAwMDAwMDAwMDIwZTY4MDAwIFIwOTogMDAwMDAwMDAwMDAwMDAxMA0KUjEwOiAwMDAwMDAwMDIw MDAwMDAwIFIxMTogMDAwMDAwMDAwMDAwMDI0NiBSMTI6IDAwMDA3ZmQ4ODk2NWY2ZDQNClIxMzog MDAwMDAwMDAwMDRjMzkxNSBSMTQ6IDAwMDAwMDAwMDA0ZDU3YzAgUjE1OiAwMDAwMDAwMGZmZmZm ZmZmDQoNCkFsbG9jYXRlZCBieSB0YXNrIDIxNDIzOg0KICBzYXZlX3N0YWNrKzB4NDMvMHhkMCBt bS9rYXNhbi9rYXNhbi5jOjQ0OA0KICBzZXRfdHJhY2sgbW0va2FzYW4va2FzYW4uYzo0NjAgW2lu bGluZV0NCiAga2FzYW5fa21hbGxvYysweGM3LzB4ZTAgbW0va2FzYW4va2FzYW4uYzo1NTMNCiAg a21lbV9jYWNoZV9hbGxvY190cmFjZSsweDE1Mi8weDc1MCBtbS9zbGFiLmM6MzYyMA0KICBrbWFs bG9jIGluY2x1ZGUvbGludXgvc2xhYi5oOjU0NiBbaW5saW5lXQ0KICBremFsbG9jIGluY2x1ZGUv bGludXgvc2xhYi5oOjc0MSBbaW5saW5lXQ0KICBzb2NrX2hhc2hfYWxsb2MrMHgxZWIvMHg1YTAg bmV0L2NvcmUvc29ja19tYXAuYzo4MDENCiAgZmluZF9hbmRfYWxsb2NfbWFwIGtlcm5lbC9icGYv c3lzY2FsbC5jOjEyOSBbaW5saW5lXQ0KICBtYXBfY3JlYXRlKzB4M2JkLzB4MTEwMCBrZXJuZWwv YnBmL3N5c2NhbGwuYzo1MDkNCiAgX19kb19zeXNfYnBmIGtlcm5lbC9icGYvc3lzY2FsbC5jOjIz OTQgW2lubGluZV0NCiAgX19zZV9zeXNfYnBmIGtlcm5lbC9icGYvc3lzY2FsbC5jOjIzNzEgW2lu bGluZV0NCiAgX194NjRfc3lzX2JwZisweDMwMy8weDUxMCBrZXJuZWwvYnBmL3N5c2NhbGwuYzoy MzcxDQogIGRvX3N5c2NhbGxfNjQrMHgxYjkvMHg4MjAgYXJjaC94ODYvZW50cnkvY29tbW9uLmM6 MjkwDQogIGVudHJ5X1NZU0NBTExfNjRfYWZ0ZXJfaHdmcmFtZSsweDQ5LzB4YmUNCg0KRnJlZWQg YnkgdGFzayAxMDEwOToNCiAgc2F2ZV9zdGFjaysweDQzLzB4ZDAgbW0va2FzYW4va2FzYW4uYzo0 NDgNCiAgc2V0X3RyYWNrIG1tL2thc2FuL2thc2FuLmM6NDYwIFtpbmxpbmVdDQogIF9fa2FzYW5f c2xhYl9mcmVlKzB4MTAyLzB4MTUwIG1tL2thc2FuL2thc2FuLmM6NTIxDQogIGthc2FuX3NsYWJf ZnJlZSsweGUvMHgxMCBtbS9rYXNhbi9rYXNhbi5jOjUyOA0KICBfX2NhY2hlX2ZyZWUgbW0vc2xh Yi5jOjM0OTggW2lubGluZV0NCiAga2ZyZWUrMHhjZi8weDIzMCBtbS9zbGFiLmM6MzgxNw0KICBz b2NrX2hhc2hfZnJlZSsweDQ1MC8weDY0MCBuZXQvY29yZS9zb2NrX21hcC5jOjg2NA0KICBicGZf bWFwX2ZyZWVfZGVmZXJyZWQrMHhkOS8weDExMCBrZXJuZWwvYnBmL3N5c2NhbGwuYzoyOTANCiAg cHJvY2Vzc19vbmVfd29yaysweGM4Yi8weDFjNDAga2VybmVsL3dvcmtxdWV1ZS5jOjIxNTMNCiAg d29ya2VyX3RocmVhZCsweDE3Zi8weDEzOTAga2VybmVsL3dvcmtxdWV1ZS5jOjIyOTYNCiAga3Ro cmVhZCsweDM1YS8weDQ0MCBrZXJuZWwva3RocmVhZC5jOjI0Ng0KICByZXRfZnJvbV9mb3JrKzB4 M2EvMHg1MCBhcmNoL3g4Ni9lbnRyeS9lbnRyeV82NC5TOjM1Mg0KDQpUaGUgYnVnZ3kgYWRkcmVz cyBiZWxvbmdzIHRvIHRoZSBvYmplY3QgYXQgZmZmZjg4MDFiN2ZjMTAwMA0KICB3aGljaCBiZWxv bmdzIHRvIHRoZSBjYWNoZSBrbWFsbG9jLTUxMiBvZiBzaXplIDUxMg0KVGhlIGJ1Z2d5IGFkZHJl c3MgaXMgbG9jYXRlZCAyNCBieXRlcyBpbnNpZGUgb2YNCiAgNTEyLWJ5dGUgcmVnaW9uIFtmZmZm ODgwMWI3ZmMxMDAwLCBmZmZmODgwMWI3ZmMxMjAwKQ0KVGhlIGJ1Z2d5IGFkZHJlc3MgYmVsb25n cyB0byB0aGUgcGFnZToNCnBhZ2U6ZmZmZmVhMDAwNmRmZjA0MCBjb3VudDoxIG1hcGNvdW50OjAg bWFwcGluZzpmZmZmODgwMWRhODAwOTQwIGluZGV4OjB4MA0KZmxhZ3M6IDB4MmZmZmMwMDAwMDAw MjAwKHNsYWIpDQpyYXc6IDAyZmZmYzAwMDAwMDAyMDAgZmZmZmVhMDAwNmVlNTg4OCBmZmZmZWEw MDA3MWZjNmM4IGZmZmY4ODAxZGE4MDA5NDANCnJhdzogMDAwMDAwMDAwMDAwMDAwMCBmZmZmODgw MWI3ZmMxMDAwIDAwMDAwMDAxMDAwMDAwMDYgMDAwMDAwMDAwMDAwMDAwMA0KcGFnZSBkdW1wZWQg YmVjYXVzZToga2FzYW46IGJhZCBhY2Nlc3MgZGV0ZWN0ZWQNCg0KTWVtb3J5IHN0YXRlIGFyb3Vu ZCB0aGUgYnVnZ3kgYWRkcmVzczoNCiAgZmZmZjg4MDFiN2ZjMGYwMDogMDAgMDAgMDAgMDAgMDAg MDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDANCiAgZmZmZjg4MDFiN2ZjMGY4MDogMDAg MDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDANCj4gZmZmZjg4MDFi N2ZjMTAwMDogZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIN CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXg0KICBmZmZmODgwMWI3ZmMxMDgwOiBmYiBm YiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYg0KICBmZmZmODgwMWI3 ZmMxMTAwOiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYiBmYg0K PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09DQoNCg0KLS0tDQpUaGlzIGJ1ZyBpcyBnZW5lcmF0ZWQgYnkgYSBib3QuIEl0IG1h eSBjb250YWluIGVycm9ycy4NClNlZSBodHRwczovL2dvby5nbC90cHNtRUogZm9yIG1vcmUgaW5m b3JtYXRpb24gYWJvdXQgc3l6Ym90Lg0Kc3l6Ym90IGVuZ2luZWVycyBjYW4gYmUgcmVhY2hlZCBh dCBzeXprYWxsZXJAZ29vZ2xlZ3JvdXBzLmNvbS4NCg0Kc3l6Ym90IHdpbGwga2VlcCB0cmFjayBv ZiB0aGlzIGJ1ZyByZXBvcnQuIFNlZToNCmh0dHBzOi8vZ29vLmdsL3Rwc21FSiNidWctc3RhdHVz LXRyYWNraW5nIGZvciBob3cgdG8gY29tbXVuaWNhdGUgd2l0aCAgDQpzeXpib3QuDQo=