syzbot


general protection fault in crypto_remove_spawns

Status: fixed on 2018/01/19 01:24
Subsystems: crypto
[Documentation on labels]
Reported-by: syzbot+b6e703f648ebbbf57a4528d4314e0c2a5c893dc2@syzkaller.appspotmail.com
Fix commit: 9a00674213a3 crypto: algapi - fix NULL dereference in crypto_remove_spawns()
First crash: 2566d, last: 2524d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in crypto_remove_spawns (2) crypto 2 2144d 2150d 11/28 fixed on 2019/03/06 07:43

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 27740 Comm: cryptomgr_test Not tainted 4.14.0+ #102
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801c313e4c0 task.stack: ffff8801c4140000
RIP: 0010:crypto_remove_spawns+0x58c/0x1260 crypto/algapi.c:159
RSP: 0018:ffff8801c41479e8 EFLAGS: 00010206
RAX: 0000000000000003 RBX: dffffc0000000000 RCX: ffffffff82252f3b
RDX: 0000000000000000 RSI: 1ffff10038828fa6 RDI: 0000000000000018
RBP: ffff8801c4147dd8 R08: ffff8801c4147d70 R09: 0000000000000004
R10: 0000000000000000 R11: ffffffff8747dd60 R12: 0000000000000000
R13: ffff8801c305bba0 R14: ffffed0038828f4e R15: ffff8801c4147db0
FS:  0000000000000000(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff45f27e30 CR3: 00000001d517b000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 crypto_alg_tested+0x514/0x6f0 crypto/algapi.c:311
 cryptomgr_test+0x17/0x30 crypto/algboss.c:226
 kthread+0x37a/0x440 kernel/kthread.c:238
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:437
Code: 84 e3 01 00 00 e8 a5 c3 4a ff 4c 89 e8 48 c1 e8 03 80 3c 18 00 0f 85 d8 09 00 00 4d 8b 65 00 49 8d 7c 24 18 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 b4 09 00 00 4d 8b 6c 24 18 4c 3b ad 50 fc ff 
RIP: crypto_remove_spawns+0x58c/0x1260 crypto/algapi.c:159 RSP: ffff8801c41479e8
---[ end trace 8a97902cbf4190c4 ]---
Kernel panic - not syncing: Fatal exception
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (85):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/11/24 14:44 net-next-old 1d3b78bbc6e9 deb5f6ae .config console log report syz C ci-upstream-kasan-gce
2017/11/24 14:35 mmots 1ea8d039f9ed deb5f6ae .config console log report syz C ci-upstream-mmots-kasan-gce
2017/11/24 14:06 linux-next 6fc478f80f68 4bd70f88 .config console log report syz ci-upstream-next-kasan-gce
2017/12/28 13:08 upstream 5f520fc31876 7d240098 .config console log report ci-upstream-kasan-gce
2017/12/18 06:38 upstream b9f5fb1800d8 d5beb42a .config console log report ci-upstream-kasan-gce
2017/12/11 18:13 upstream 50c4c4e268a2 27f5dfef .config console log report ci-upstream-kasan-gce
2017/12/11 14:28 upstream 50c4c4e268a2 27f5dfef .config console log report ci-upstream-kasan-gce
2017/12/11 12:52 upstream 50c4c4e268a2 5ad0ce95 .config console log report ci-upstream-kasan-gce
2017/12/25 04:40 upstream 464e1d5f23cc 73aba437 .config console log report ci-upstream-kasan-gce-386
2017/12/26 00:00 net-next-old fba961ab29e5 73aba437 .config console log report ci-upstream-net-kasan-gce
2017/12/18 07:45 net-next-old c30abd5e40dd d5beb42a .config console log report ci-upstream-net-kasan-gce
2017/12/18 03:09 net-next-old c30abd5e40dd d5beb42a .config console log report ci-upstream-net-kasan-gce
2017/12/18 02:27 net-next-old c30abd5e40dd d5beb42a .config console log report ci-upstream-net-kasan-gce
2017/12/18 00:45 net-next-old c30abd5e40dd d5beb42a .config console log report ci-upstream-net-kasan-gce
2017/12/18 00:29 net-next-old c30abd5e40dd d5beb42a .config console log report ci-upstream-net-kasan-gce
2017/12/17 17:05 net-next-old c30abd5e40dd d5beb42a .config console log report ci-upstream-net-kasan-gce
2017/12/17 17:05 net-next-old c30abd5e40dd d5beb42a .config console log report ci-upstream-net-kasan-gce
2017/12/17 17:01 net-next-old c30abd5e40dd d5beb42a .config console log report ci-upstream-net-kasan-gce
2017/12/17 08:35 net-next-old c30abd5e40dd b6f0c91b .config console log report ci-upstream-net-kasan-gce
2017/12/17 03:50 net-next-old 28dc4c8f4557 b6f0c91b .config console log report ci-upstream-net-kasan-gce
2017/12/16 18:11 net-next-old 28dc4c8f4557 b6f0c91b .config console log report ci-upstream-net-kasan-gce
2017/12/16 17:29 net-next-old 28dc4c8f4557 b6f0c91b .config console log report ci-upstream-net-kasan-gce
2017/12/16 14:22 net-next-old 28dc4c8f4557 b6f0c91b .config console log report ci-upstream-net-kasan-gce
2017/12/16 13:25 net-next-old 28dc4c8f4557 b6f0c91b .config console log report ci-upstream-net-kasan-gce
2017/12/16 04:13 net-next-old 3b07d7884ca2 ac20b98c .config console log report ci-upstream-net-kasan-gce
2017/12/15 22:00 net-next-old 3b07d7884ca2 ac20b98c .config console log report ci-upstream-net-kasan-gce
2017/12/15 10:56 net-next-old 5c13e07580c8 ac20b98c .config console log report ci-upstream-net-kasan-gce
2017/12/15 04:11 net-next-old 5c13e07580c8 ac20b98c .config console log report ci-upstream-net-kasan-gce
2017/12/14 08:12 net-next-old 5c13e07580c8 ac20b98c .config console log report ci-upstream-net-kasan-gce
2017/12/13 21:00 net-next-old f93ea3bf151d 06ea774d .config console log report ci-upstream-net-kasan-gce
2017/12/13 15:25 net-next-old 48d79b49e168 ce7f2399 .config console log report ci-upstream-net-kasan-gce
2017/12/13 12:55 net-next-old 48d79b49e168 ce7f2399 .config console log report ci-upstream-net-kasan-gce
2017/12/12 00:07 net-next-old a0b586fa75a6 da131727 .config console log report ci-upstream-net-kasan-gce
2017/12/11 19:56 net-next-old a0b586fa75a6 da131727 .config console log report ci-upstream-net-kasan-gce
2017/12/11 13:24 net-next-old 51e18a453f5f 5ad0ce95 .config console log report ci-upstream-net-kasan-gce
2017/12/10 22:57 net-next-old 51e18a453f5f 5ad0ce95 .config console log report ci-upstream-net-kasan-gce
2017/12/10 17:18 net-next-old 51e18a453f5f 5ad0ce95 .config console log report ci-upstream-net-kasan-gce
2017/12/10 09:37 net-next-old 51e18a453f5f 5ad0ce95 .config console log report ci-upstream-net-kasan-gce
2017/12/10 07:18 net-next-old 51e18a453f5f 5ad0ce95 .config console log report ci-upstream-net-kasan-gce
2018/01/05 02:42 mmots ad036b63ee57 00193447 .config console log report ci-upstream-mmots-kasan-gce
2017/12/26 05:43 mmots 37759fa6d0fa 73aba437 .config console log report ci-upstream-mmots-kasan-gce
2017/12/25 15:14 linux-next 0e08c463db38 73aba437 .config console log report ci-upstream-next-kasan-gce
2017/12/11 14:30 linux-next 153e8244ebcb 27f5dfef .config console log report ci-upstream-next-kasan-gce
* Struck through repros no longer work on HEAD.