syzbot


general protection fault in xfrm_hash_rebuild

Status: public: reported C repro on 2019/04/12 00:00
Reported-by: syzbot+2788c7eaaf99a9d55ec9@syzkaller.appspotmail.com
First crash: 2503d, last: 2335d

Sample crash report:
random: sshd: uninitialized urandom read (32 bytes read, 35 bits of entropy available)
random: nonblocking pool is initialized
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 1843 Comm: kworker/1:2 Not tainted 4.4.138-gcf21a9a #64
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events xfrm_hash_rebuild
task: ffff8801d3fe1800 task.stack: ffff8801d3ab0000
RIP: 0010:[<ffffffff833c7774>]  [<ffffffff833c7774>] xfrm_hash_rebuild+0x4c4/0xae0 net/xfrm/xfrm_policy.c:633
RSP: 0018:ffff8801d3ab7bb8  EFLAGS: 00010246
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000004
RDX: 0000000000000000 RSI: ffffffff833c6482 RDI: ffffffff849190f0
RBP: ffff8801d3ab7c40 R08: ffffffff85378920 R09: 0000000000000000
R10: 0000000000000001 R11: ffff8801d3fe1800 R12: ffff8800bb265500
R13: 0000000000000001 R14: ffffffff849190d8 R15: ffffffff849190a8
FS:  0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004a19a4 CR3: 00000001d8cc2000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffffffff81181f4f ffff8801d3ab7c00 fffffbfff0923219 ffffffff849190cc
 ffffffff84919478 ffffffff84919180 1ffffffff0923280 ffffffff8491911d
 ffffffff84919078 ffffffff84917ac0 ffffffff84919138 0000000000000002
Call Trace:
 [<ffffffff81181f4f>] process_one_work+0x7df/0x1600 kernel/workqueue.c:2064
 [<ffffffff81182e49>] worker_thread+0xd9/0xfc0 kernel/workqueue.c:2196
 [<ffffffff81190958>] kthread+0x268/0x300 kernel/kthread.c:211
 [<ffffffff838c2b55>] ret_from_fork+0x55/0x80 arch/x86/entry/entry_64.S:510
Code: 7c 08 84 d2 0f 85 43 04 00 00 48 8b 7d c0 49 8d b4 24 f4 00 00 00 41 0f b7 94 24 74 02 00 00 e8 23 ec ff ff 49 89 c5 48 c1 e8 03 <80> 3c 18 00 0f 85 eb 03 00 00 49 8b 55 00 49 8d 44 24 08 48 89 
RIP  [<ffffffff833c7774>] xfrm_hash_rebuild+0x4c4/0xae0 net/xfrm/xfrm_policy.c:633
 RSP <ffff8801d3ab7bb8>
---[ end trace b38d7eb8c071067c ]---

Crashes (208):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/06/27 18:49 https://android.googlesource.com/kernel/common android-4.4 cf21a9ac5ee4 43e60f7e .config console log report syz C ci-android-44-kasan-gce
2018/01/13 22:37 https://android.googlesource.com/kernel/common android-4.4 7902639f8133 c9e7aeae .config console log report syz C ci-android-44-kasan-gce
2018/07/01 11:36 https://android.googlesource.com/kernel/common android-4.4 cf21a9ac5ee4 dba0b50e .config console log report ci-android-44-kasan-gce
2018/06/30 16:22 https://android.googlesource.com/kernel/common android-4.4 cf21a9ac5ee4 dba0b50e .config console log report ci-android-44-kasan-gce
2018/06/20 06:35 https://android.googlesource.com/kernel/common android-4.4 226f96b03dc2 095ef806 .config console log report ci-android-44-kasan-gce
2018/06/06 06:16 https://android.googlesource.com/kernel/common android-4.4 7e3a6fc48335 863a24bb .config console log report ci-android-44-kasan-gce
2018/06/05 09:30 https://android.googlesource.com/kernel/common android-4.4 e75204cc0ad5 a316ff92 .config console log report ci-android-44-kasan-gce
2018/06/04 04:37 https://android.googlesource.com/kernel/common android-4.4 e75204cc0ad5 2f93b54f .config console log report ci-android-44-kasan-gce
2018/06/02 21:08 https://android.googlesource.com/kernel/common android-4.4 e75204cc0ad5 2f93b54f .config console log report ci-android-44-kasan-gce
2018/06/02 15:59 https://android.googlesource.com/kernel/common android-4.4 e75204cc0ad5 2f93b54f .config console log report ci-android-44-kasan-gce
2018/05/30 02:34 https://android.googlesource.com/kernel/common android-4.4 54f36eadd123 2f93b54f .config console log report ci-android-44-kasan-gce
2018/05/25 23:57 https://android.googlesource.com/kernel/common android-4.4 4b08356a76b8 f48c20b8 .config console log report ci-android-44-kasan-gce
2018/05/19 07:58 https://android.googlesource.com/kernel/common android-4.4 4f75c34feee6 849705db .config console log report ci-android-44-kasan-gce
2018/05/18 14:36 https://android.googlesource.com/kernel/common android-4.4 46155cc7bd1b c992b767 .config console log report ci-android-44-kasan-gce
2018/05/13 21:04 https://android.googlesource.com/kernel/common android-4.4 aa3863d27614 c05b619d .config console log report ci-android-44-kasan-gce
2018/05/13 18:15 https://android.googlesource.com/kernel/common android-4.4 aa3863d27614 c05b619d .config console log report ci-android-44-kasan-gce
2018/05/13 15:38 https://android.googlesource.com/kernel/common android-4.4 aa3863d27614 c05b619d .config console log report ci-android-44-kasan-gce
2018/05/12 05:39 https://android.googlesource.com/kernel/common android-4.4 3702e76fb6e9 12c7428a .config console log report ci-android-44-kasan-gce
2018/05/12 04:18 https://android.googlesource.com/kernel/common android-4.4 3702e76fb6e9 12c7428a .config console log report ci-android-44-kasan-gce
2018/05/11 22:09 https://android.googlesource.com/kernel/common android-4.4 3702e76fb6e9 12c7428a .config console log report ci-android-44-kasan-gce
2018/05/11 10:49 https://android.googlesource.com/kernel/common android-4.4 3702e76fb6e9 12c7428a .config console log report ci-android-44-kasan-gce
2018/05/11 06:39 https://android.googlesource.com/kernel/common android-4.4 3702e76fb6e9 12c7428a .config console log report ci-android-44-kasan-gce
2018/05/11 02:11 https://android.googlesource.com/kernel/common android-4.4 3702e76fb6e9 12c7428a .config console log report ci-android-44-kasan-gce
2018/05/10 17:02 https://android.googlesource.com/kernel/common android-4.4 3702e76fb6e9 12c7428a .config console log report ci-android-44-kasan-gce
2018/05/10 14:09 https://android.googlesource.com/kernel/common android-4.4 3702e76fb6e9 12c7428a .config console log report ci-android-44-kasan-gce
2018/05/10 04:32 https://android.googlesource.com/kernel/common android-4.4 033c952f2e7d 12c7428a .config console log report ci-android-44-kasan-gce
2018/05/09 22:11 https://android.googlesource.com/kernel/common android-4.4 033c952f2e7d 12c7428a .config console log report ci-android-44-kasan-gce
2018/05/09 17:45 https://android.googlesource.com/kernel/common android-4.4 033c952f2e7d 12c7428a .config console log report ci-android-44-kasan-gce
2018/05/09 15:37 https://android.googlesource.com/kernel/common android-4.4 033c952f2e7d 12c7428a .config console log report ci-android-44-kasan-gce
2018/05/09 03:22 https://android.googlesource.com/kernel/common android-4.4 033c952f2e7d b88872ba .config console log report ci-android-44-kasan-gce
2018/05/09 01:43 https://android.googlesource.com/kernel/common android-4.4 033c952f2e7d b88872ba .config console log report ci-android-44-kasan-gce
2018/05/07 22:41 https://android.googlesource.com/kernel/common android-4.4 6ec0e3f3a946 9e0846e8 .config console log report ci-android-44-kasan-gce
2018/05/07 21:22 https://android.googlesource.com/kernel/common android-4.4 6ec0e3f3a946 9e0846e8 .config console log report ci-android-44-kasan-gce
2018/05/07 11:06 https://android.googlesource.com/kernel/common android-4.4 6ec0e3f3a946 a211da1a .config console log report ci-android-44-kasan-gce
2018/05/07 08:23 https://android.googlesource.com/kernel/common android-4.4 6ec0e3f3a946 a211da1a .config console log report ci-android-44-kasan-gce
2018/05/06 17:34 https://android.googlesource.com/kernel/common android-4.4 6ec0e3f3a946 6c18ddb0 .config console log report ci-android-44-kasan-gce
2018/05/06 14:38 https://android.googlesource.com/kernel/common android-4.4 6ec0e3f3a946 6c18ddb0 .config console log report ci-android-44-kasan-gce
2018/05/06 05:11 https://android.googlesource.com/kernel/common android-4.4 6ec0e3f3a946 78b251cb .config console log report ci-android-44-kasan-gce
2018/05/06 03:13 https://android.googlesource.com/kernel/common android-4.4 6ec0e3f3a946 78b251cb .config console log report ci-android-44-kasan-gce
2018/05/05 21:40 https://android.googlesource.com/kernel/common android-4.4 6ec0e3f3a946 6a0382b5 .config console log report ci-android-44-kasan-gce
2018/05/05 14:33 https://android.googlesource.com/kernel/common android-4.4 6ec0e3f3a946 6a0382b5 .config console log report ci-android-44-kasan-gce
2018/05/05 00:05 https://android.googlesource.com/kernel/common android-4.4 31f312b49b72 9ce14f4b .config console log report ci-android-44-kasan-gce
2018/05/04 18:20 https://android.googlesource.com/kernel/common android-4.4 4fca5a0c008a 9ce14f4b .config console log report ci-android-44-kasan-gce
2018/05/04 13:18 https://android.googlesource.com/kernel/common android-4.4 4fca5a0c008a 9ce14f4b .config console log report ci-android-44-kasan-gce
2018/05/04 06:57 https://android.googlesource.com/kernel/common android-4.4 1fe7e9202e52 9ce14f4b .config console log report ci-android-44-kasan-gce
2018/05/04 04:08 https://android.googlesource.com/kernel/common android-4.4 1fe7e9202e52 9ce14f4b .config console log report ci-android-44-kasan-gce
2018/05/04 02:27 https://android.googlesource.com/kernel/common android-4.4 1fe7e9202e52 9ce14f4b .config console log report ci-android-44-kasan-gce
2018/05/03 22:50 https://android.googlesource.com/kernel/common android-4.4 1fe7e9202e52 9ce14f4b .config console log report ci-android-44-kasan-gce
2018/05/03 20:36 https://android.googlesource.com/kernel/common android-4.4 1fe7e9202e52 9ce14f4b .config console log report ci-android-44-kasan-gce
* Struck through repros no longer work on HEAD.