syzbot


kernel BUG at security/selinux/avc.c:LINE!

Status: closed as invalid on 2018/02/01 12:08
Subsystems: selinux
[Documentation on labels]
Reported-by: syzbot+0ce802646d51c7fb40a19eee4ad7f2830d493b27@syzkaller.appspotmail.com
First crash: 2597d, last: 2597d

Sample crash report:
dccp_invalid_packet: P.Data Offset(0) too small
dccp_invalid_packet: P.Data Offset(0) too small
------------[ cut here ]------------
kernel BUG at security/selinux/avc.c:119!
invalid opcode: 0000 [#1] SMP
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 25743 Comm: syz-executor3 Not tainted 4.15.0-rc3-next-20171214+ #67
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:avc_dump_av security/selinux/avc.c:119 [inline]
RIP: 0010:avc_audit_pre_callback+0x176/0x180 security/selinux/avc.c:712
RSP: 0018:ffffc90001707bb0 EFLAGS: 00010216
RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffffff81646dd6
RDX: 000000000000031e RSI: ffffc90004753000 RDI: ffff8802150f7500
RBP: ffffc90001707be0 R08: 0000000000001392 R09: 0000000000000000
R10: ffffc90001707c80 R11: 0000000000000000 R12: ffffc90001707db0
R13: 0000000000000008 R14: ffffffff81646c60 R15: ffff880214fcdcd8
FS:  00007efd4c213700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000040199a CR3: 00000001fc3fa003 CR4: 00000000001606f0
DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 common_lsm_audit+0x7f/0x8b0 security/lsm_audit.c:457
 slow_avc_audit+0x90/0xc0 security/selinux/avc.c:771
 avc_audit security/selinux/include/avc.h:141 [inline]
 avc_has_perm+0x263/0x300 security/selinux/avc.c:1146
 ipc_has_perm.isra.28+0x5a/0x70 security/selinux/hooks.c:5522
 selinux_shm_shmctl+0x38/0x80 security/selinux/hooks.c:5753
 security_shm_shmctl+0x49/0x70 security/security.c:1215
 shmctl_down+0xba/0x250 ipc/shm.c:838
 SYSC_shmctl+0xd9/0x1c0 ipc/shm.c:1088
 SyS_shmctl+0x24/0x30 ipc/shm.c:1043
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452a09
RSP: 002b:00007efd4c212c58 EFLAGS: 00000212 ORIG_RAX: 000000000000001f
RAX: ffffffffffffffda RBX: 00007efd4c213700 RCX: 0000000000452a09
RDX: 0000000020000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000
R13: 0000000000a2f7ff R14: 00007efd4c2139c0 R15: 0000000000000000
Code: c7 c6 48 57 f1 82 4c 89 ff e8 07 32 c6 ff eb b0 e8 80 35 c7 ff 48 c7 c6 00 ac e7 82 4c 89 ff e8 f1 31 c6 ff eb ae e8 6a 35 c7 ff <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 55 41 54 53 48 89 
RIP: avc_dump_av security/selinux/avc.c:119 [inline] RSP: ffffc90001707bb0
RIP: avc_audit_pre_callback+0x176/0x180 security/selinux/avc.c:712 RSP: ffffc90001707bb0
---[ end trace 55e655189a217aae ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/12/19 13:29 linux-next 6084b576dca2 af9163c7 .config console log report ci-upstream-next-kasan-gce
* Struck through repros no longer work on HEAD.