syzbot


general protection fault in netlink_unicast

Status: closed as invalid on 2019/01/01 20:10
First crash: 2450d, last: 2450d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-44 general protection fault in netlink_unicast C 24574 1601d 1838d 0/2 public: reported C repro on 2019/04/12 00:00

Sample crash report:
audit: netlink_unicast sending to audit_pid=393216 returned error: -111
audit: netlink_unicast sending to audit_pid=393216 returned error: -111
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 13321 Comm: syz-executor7 Not tainted 4.9.40-g7b2727c #16
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801d5b4b000 task.stack: ffff8801d6be8000
RIP: 0010:[<ffffffff83082ecd>]  [<ffffffff83082ecd>] sock_sndtimeo include/net/sock.h:2082 [inline]
RIP: 0010:[<ffffffff83082ecd>]  [<ffffffff83082ecd>] netlink_unicast+0xcd/0x750 net/netlink/af_netlink.c:1249
RSP: 0018:ffff8801d6bef660  EFLAGS: 00010206
RAX: 0000000000000069 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 00000000024000c0 RDI: 0000000000000348
RBP: ffff8801d6bef720 R08: ffffed0039deb0a3 R09: ffffed0039deb0a3
R10: 0000000000000001 R11: ffffed0039deb0a2 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8801cea61640 R15: 0000000000000000
FS:  00007fc097a3f700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020f01fe1 CR3: 00000001d0309000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801cea61640 ffffffff81538961 ffff8801cef58500 0000000000000004
 1ffff1003ad7ded3 ffff8801d6bef6d0 ffffffff000033ec 0000000041b58ab3
 ffffffff841de6ba ffffffff83082e00 ffffffff81538a05 ffff8801cea61640
Call Trace:
 [<ffffffff8134705c>] audit_replace kernel/audit.c:817 [inline]
 [<ffffffff8134705c>] audit_receive_msg+0x164c/0x1b40 kernel/audit.c:894
 [<ffffffff81347680>] audit_receive_skb kernel/audit.c:1120 [inline]
 [<ffffffff81347680>] audit_receive+0x130/0x220 kernel/audit.c:1133
 [<ffffffff83083311>] netlink_unicast_kernel net/netlink/af_netlink.c:1231 [inline]
 [<ffffffff83083311>] netlink_unicast+0x511/0x750 net/netlink/af_netlink.c:1257
 [<ffffffff83083e38>] netlink_sendmsg+0x8e8/0xc50 net/netlink/af_netlink.c:1803
 [<ffffffff82ec7b9a>] sock_sendmsg_nosec net/socket.c:635 [inline]
 [<ffffffff82ec7b9a>] sock_sendmsg+0xca/0x110 net/socket.c:645
 [<ffffffff82ec7e06>] sock_write_iter+0x226/0x3b0 net/socket.c:843
 [<ffffffff8156763f>] new_sync_write fs/read_write.c:499 [inline]
 [<ffffffff8156763f>] __vfs_write+0x4bf/0x680 fs/read_write.c:512
 [<ffffffff8156b3b0>] vfs_write+0x170/0x4e0 fs/read_write.c:560
 [<ffffffff8156eda9>] SYSC_write fs/read_write.c:607 [inline]
 [<ffffffff8156eda9>] SyS_write+0xd9/0x1b0 fs/read_write.c:599
 [<ffffffff838a26c5>] entry_SYSCALL_64_fastpath+0x23/0xc6
Code: 41 81 c6 20 00 08 02 44 89 f6 e8 5f 4e ff ff 45 85 ff 49 89 c6 75 26 e8 52 40 2e fe 49 8d bc 24 48 03 00 00 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 25 06 00 00 4d 8b ac 24 48 03 00 00 e8 2c 40 
RIP  [<ffffffff83082ecd>] sock_sndtimeo include/net/sock.h:2082 [inline]
RIP  [<ffffffff83082ecd>] netlink_unicast+0xcd/0x750 net/netlink/af_netlink.c:1249
 RSP <ffff8801d6bef660>
---[ end trace 64a27aa7e48a5ffe ]---
Kernel panic - not syncing: Fatal exception
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/08/08 00:29 https://android.googlesource.com/kernel/common android-4.9 7b2727c68878 77a9ec9b .config console log report syz ci-android-49-kasan-gce
* Struck through repros no longer work on HEAD.