syzbot


WARNING in xfrm_alloc_compat

Status: fixed on 2021/03/10 01:48
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+a7e701c8385bd8543074@syzkaller.appspotmail.com
Fix commit: dbd7ae5154d5 xfrm/compat: Translate by copying XFRMA_UNSPEC attribute
First crash: 1504d, last: 1380d
Cause bisection: introduced by (bisect log) :
commit 5f3eea6b7e8f58cf5c8a9d4b9679dc19e9e67ba3
Author: Dmitry Safonov <dima@arista.com>
Date: Mon Sep 21 14:36:53 2020 +0000

  xfrm/compat: Attach xfrm dumps to 64=>32 bit translator

Crash: WARNING in xfrm_alloc_compat (log)
Repro: C syz .config
  
Discussions (4)
Title Replies (including bot) Last reply
[PATCH 1/4] xfrm/compat: Translate by copying XFRMA_UNSPEC attribute 1 (1) 2020/12/07 09:39
[PATCH v2 0/3] xfrm/compat: syzbot-found fixes 5 (5) 2020/11/10 06:35
[PATCH 0/3] xfrm/compat: syzbot-found fixes 5 (5) 2020/11/02 08:21
WARNING in xfrm_alloc_compat 2 (5) 2020/10/31 16:24
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in xfrm_alloc_compat (2) net C done 47 1338d 1348d 20/28 fixed on 2021/11/10 00:50

Sample crash report:
------------[ cut here ]------------
unsupported nla_type 0
WARNING: CPU: 0 PID: 8490 at net/xfrm/xfrm_compat.c:279 xfrm_xlate64_attr net/xfrm/xfrm_compat.c:279 [inline]
WARNING: CPU: 0 PID: 8490 at net/xfrm/xfrm_compat.c:279 xfrm_xlate64 net/xfrm/xfrm_compat.c:300 [inline]
WARNING: CPU: 0 PID: 8490 at net/xfrm/xfrm_compat.c:279 xfrm_alloc_compat+0xf39/0x10d0 net/xfrm/xfrm_compat.c:327
Modules linked in:
CPU: 0 PID: 8490 Comm: syz-executor372 Not tainted 5.10.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:xfrm_xlate64_attr net/xfrm/xfrm_compat.c:279 [inline]
RIP: 0010:xfrm_xlate64 net/xfrm/xfrm_compat.c:300 [inline]
RIP: 0010:xfrm_alloc_compat+0xf39/0x10d0 net/xfrm/xfrm_compat.c:327
Code: de e8 db 8c d2 f9 84 db 0f 85 b0 f8 ff ff e8 be 94 d2 f9 8b 74 24 08 48 c7 c7 c0 f7 51 8a c6 05 de 32 3b 05 01 e8 63 03 0f 01 <0f> 0b e9 8d f8 ff ff e8 9b 94 d2 f9 8b 14 24 48 c7 c7 80 f7 51 8a
RSP: 0018:ffffc90000f8f378 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888023fe9a40 RSI: ffffffff8158c835 RDI: fffff520001f1e61
RBP: 000000000000000c R08: 0000000000000001 R09: ffff8880b9e2011b
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffa1
R13: ffff8880188b00f8 R14: ffff88801328a140 R15: ffff888022341640
FS:  0000000001447880(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000180 CR3: 000000001ca3c000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 xfrm_alloc_userspi+0x66a/0xa30 net/xfrm/xfrm_user.c:1388
 xfrm_user_rcv_msg+0x42f/0x8b0 net/xfrm/xfrm_user.c:2752
 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2494
 xfrm_netlink_rcv+0x6b/0x90 net/xfrm/xfrm_user.c:2764
 netlink_unicast_kernel net/netlink/af_netlink.c:1304 [inline]
 netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1330
 netlink_sendmsg+0x856/0xd90 net/netlink/af_netlink.c:1919
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:671
 ____sys_sendmsg+0x331/0x810 net/socket.c:2353
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2407
 __sys_sendmmsg+0x195/0x470 net/socket.c:2497
 __do_sys_sendmmsg net/socket.c:2526 [inline]
 __se_sys_sendmmsg net/socket.c:2523 [inline]
 __x64_sys_sendmmsg+0x99/0x100 net/socket.c:2523
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x440339
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffc12f49848 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440339
RDX: 00000000000000f1 RSI: 0000000020000180 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401b40
R13: 0000000000401bd0 R14: 0000000000000000 R15: 0000000000000000

Crashes (130):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/12/09 15:59 upstream 7d8761ba27fc 40cc414d .config console log report syz C ci-upstream-kasan-gce
2020/12/09 13:47 upstream 7d8761ba27fc 40cc414d .config console log report syz C ci-upstream-kasan-gce
2020/10/31 11:28 net-old 2b94f5266c84 18e33098 .config console log report syz C ci-upstream-net-this-kasan-gce
2020/10/31 11:07 net-old 2b94f5266c84 18e33098 .config console log report syz C ci-upstream-net-this-kasan-gce
2020/10/31 09:42 net-next-old 1fb74191988f 18e33098 .config console log report syz C ci-upstream-net-kasan-gce
2020/10/31 09:21 net-next-old 1fb74191988f 18e33098 .config console log report syz C ci-upstream-net-kasan-gce
2020/10/31 09:15 linux-next 4e78c578cb98 18e33098 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2021/02/20 08:20 upstream f40ddce88593 f689d40a .config console log report info ci-upstream-kasan-gce-smack-root WARNING in xfrm_alloc_compat
2021/02/16 13:04 upstream f40ddce88593 98682e5e .config console log report info ci-upstream-kasan-gce-smack-root WARNING in xfrm_alloc_compat
2021/01/30 11:03 upstream 0e9bcda5d286 fc9fd31e .config console log report info ci-upstream-kasan-gce WARNING in xfrm_alloc_compat
2021/01/26 15:50 upstream 13391c60da33 52e37319 .config console log report info ci-upstream-kasan-gce-root WARNING in xfrm_alloc_compat
2021/02/01 07:36 upstream 1048ba83fb1c fc9fd31e .config console log report info ci-upstream-kasan-gce-386 WARNING in xfrm_alloc_compat
2021/01/31 19:11 upstream 6642d600b541 fc9fd31e .config console log report info ci-upstream-kasan-gce-386 WARNING in xfrm_alloc_compat
2021/01/18 20:00 upstream 19c329f68089 63631df1 .config console log report info ci-upstream-kasan-gce-386 WARNING in xfrm_alloc_compat
2021/02/25 12:17 net-old 6fbd15c09691 fcc6d71b .config console log report info ci-upstream-net-this-kasan-gce WARNING in xfrm_alloc_compat
2021/01/18 04:54 net-old 66c556025d68 fd103621 .config console log report info ci-upstream-net-this-kasan-gce WARNING in xfrm_alloc_compat
2021/02/21 05:22 net-next-old 38b5133ad607 3e5ed8b4 .config console log report info ci-upstream-net-kasan-gce WARNING in xfrm_alloc_compat
2021/02/10 00:13 net-next-old fc1a8db3d560 2bd9619f .config console log report info ci-upstream-net-kasan-gce WARNING in xfrm_alloc_compat
2021/02/08 12:09 net-next-old badc6ac32122 2ce644fc .config console log report info ci-upstream-net-kasan-gce WARNING in xfrm_alloc_compat
2021/02/02 05:51 net-next-old 1a2b60f6f165 e6b95f32 .config console log report info ci-upstream-net-kasan-gce WARNING in xfrm_alloc_compat
2021/01/31 17:40 net-next-old 14e8e0f60088 fc9fd31e .config console log report info ci-upstream-net-kasan-gce WARNING in xfrm_alloc_compat
2021/01/26 14:09 net-next-old 02c26940908f 52e37319 .config console log report info ci-upstream-net-kasan-gce WARNING in xfrm_alloc_compat
2021/01/26 12:47 net-next-old 24f97b6af9a0 52e37319 .config console log report info ci-upstream-net-kasan-gce WARNING in xfrm_alloc_compat
2021/01/25 20:37 net-next-old a61e4b60761f 52e37319 .config console log report info ci-upstream-net-kasan-gce WARNING in xfrm_alloc_compat
2021/01/25 06:06 net-next-old a61e4b60761f 52e37319 .config console log report info ci-upstream-net-kasan-gce WARNING in xfrm_alloc_compat
2021/01/22 20:37 net-next-old 43e5763152e2 4080af96 .config console log report info ci-upstream-net-kasan-gce WARNING in xfrm_alloc_compat
2021/01/22 16:16 net-next-old fdb6b338d2e5 d4f4eca5 .config console log report info ci-upstream-net-kasan-gce WARNING in xfrm_alloc_compat
2021/01/22 11:07 net-next-old fdb6b338d2e5 d4f4eca5 .config console log report info ci-upstream-net-kasan-gce WARNING in xfrm_alloc_compat
2020/11/30 22:07 upstream b65054597872 78d50c1d .config console log report info ci-upstream-kasan-gce-root
2020/11/30 22:02 upstream b65054597872 78d50c1d .config console log report info ci-upstream-kasan-gce
2020/11/26 06:48 upstream fa02fcd94b0c 2f1cec62 .config console log report info ci-upstream-kasan-gce
2020/11/26 01:15 upstream fa02fcd94b0c 2f1cec62 .config console log report info ci-upstream-kasan-gce
2020/11/24 00:26 upstream 418baf2c28f3 878fb17a .config console log report info ci-upstream-kasan-gce
2020/11/21 23:35 upstream 27bba9c532a8 68068804 .config console log report info ci-upstream-kasan-gce
2020/11/19 08:12 upstream c2e7554e1b85 0767f13f .config console log report info ci-upstream-kasan-gce
2020/11/17 23:24 upstream 111e91a6df50 bd2a760b .config console log report info ci-upstream-kasan-gce-smack-root
2020/11/13 11:26 upstream af5043c89a8e 16fca0c8 .config console log report info ci-upstream-kasan-gce-selinux-root
2020/10/24 11:21 upstream f11901ed723d 2bb6666c .config console log report info ci-upstream-kasan-gce
2020/12/27 07:20 upstream f838f8d2b694 821e0b09 .config console log report info ci-upstream-kasan-gce-386
2020/12/23 15:58 upstream 614cb5894306 c2c1d1dd .config console log report info ci-upstream-kasan-gce-386
2020/12/17 20:58 upstream accefff5b547 04201c06 .config console log report info ci-upstream-kasan-gce-386
2020/12/07 01:45 upstream 7059c2c00a21 c521566d .config console log report info ci-upstream-kasan-gce-386
2020/12/06 05:06 upstream b3298500b23f 50503117 .config console log report info ci-upstream-kasan-gce-386
2020/12/06 04:03 upstream b3298500b23f 50503117 .config console log report info ci-upstream-kasan-gce-386
2020/12/02 00:36 upstream b65054597872 07bfe8a5 .config console log report info ci-upstream-kasan-gce-386
2020/12/01 05:58 upstream b65054597872 b3a34598 .config console log report info ci-upstream-kasan-gce-386
2020/11/30 16:49 upstream b65054597872 78d50c1d .config console log report info ci-upstream-kasan-gce-386
2020/11/29 20:37 upstream aae5ab854e38 a0092f9d .config console log report info ci-upstream-kasan-gce-386
2020/11/26 16:54 upstream fa02fcd94b0c 1d2b823e .config console log report info ci-upstream-kasan-gce-386
2020/11/26 02:46 upstream fa02fcd94b0c 2f1cec62 .config console log report info ci-upstream-kasan-gce-386
2020/11/23 12:41 upstream d5530d82efc8 0d27f508 .config console log report info ci-qemu-upstream-386
2020/11/22 01:32 upstream 27bba9c532a8 2f4d85f4 .config console log report info ci-qemu-upstream-386
2021/01/11 06:15 net-old f97844f9c518 2c1f2513 .config console log report info ci-upstream-net-this-kasan-gce
2021/01/10 17:15 net-old f97844f9c518 2c1f2513 .config console log report info ci-upstream-net-this-kasan-gce
2021/01/04 09:53 net-old 4bfc4714849d 79264ae3 .config console log report info ci-upstream-net-this-kasan-gce
2020/12/23 05:02 net-old 2575bc1aa9d5 04201c06 .config console log report info ci-upstream-net-this-kasan-gce
2020/12/13 00:16 net-old 7f376f1917d7 bca53db9 .config console log report info ci-upstream-net-this-kasan-gce
2020/10/24 11:16 net-old 3cb12d27ff65 2bb6666c .config console log report info ci-upstream-net-this-kasan-gce
2021/01/16 21:26 net-next-old 9ab7e76aefc9 65a7a854 .config console log report info ci-upstream-net-kasan-gce
2021/01/02 23:10 net-next-old 3db1a3fa9880 79264ae3 .config console log report info ci-upstream-net-kasan-gce
2021/01/02 17:50 net-next-old 3db1a3fa9880 79264ae3 .config console log report info ci-upstream-net-kasan-gce
2020/12/06 07:18 net-next-old 00649542f1ba f12ba0c5 .config console log report info ci-upstream-net-kasan-gce
2020/12/03 10:31 net-next-old cec85994c6b4 e6b0d314 .config console log report info ci-upstream-net-kasan-gce
2020/12/01 09:09 net-next-old be5724240b39 b3a34598 .config console log report info ci-upstream-net-kasan-gce
2020/11/24 12:54 net-next-old 5112cf59d76d 1ab681a4 .config console log report info ci-upstream-net-kasan-gce
2020/11/23 10:35 net-next-old f9e425e99b07 0d27f508 .config console log report info ci-upstream-net-kasan-gce
2020/11/22 23:31 net-next-old f9e425e99b07 0d27f508 .config console log report info ci-upstream-net-kasan-gce
2020/11/11 08:32 linux-next 6dd65e60af98 cca87986 .config console log report info ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.