linux-4.14.y test error: UBSAN: undefined-behaviour in handle_null_ptr_deref

Status: auto-closed as invalid on 2020/12/30 08:32
Reported-by: syzbot+66d122c50345437470f1@syzkaller.appspotmail.com
First crash: 2171d, last: 2156d

Sample crash report:
audit: type=1400 audit(1601541106.992:8): avc:  denied  { execmem } for  pid=6383 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
IPVS: ftp: loaded support on port[0] = 21
================================================================================
UBSAN: Undefined behaviour in ./include/crypto/hash.h:686:9
member access within null pointer of type 'struct crypto_shash'
CPU: 1 PID: 2529 Comm: kworker/u4:4 Not tainted 4.14.199-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x21b/0x32e lib/dump_stack.c:58
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:166
 handle_null_ptr_deref+0x78/0x80 lib/ubsan.c:279
 ubsan_type_mismatch_common lib/ubsan.c:321 [inline]
 __ubsan_handle_type_mismatch_v1+0x81/0xb0 lib/ubsan.c:353
 crypto_shash_tfm include/crypto/hash.h:686 [inline]
 crypto_free_shash include/crypto/hash.h:695 [inline]
 sctp_destruct_sock+0x70/0x80 net/sctp/socket.c:4504
 __sk_destruct+0x93/0x8e0 net/core/sock.c:1557
 sk_destruct net/core/sock.c:1597 [inline]
 __sk_free+0xf4/0x370 net/core/sock.c:1605
 sk_free+0x30/0x50 net/core/sock.c:1616
 sock_put include/net/sock.h:1662 [inline]
 sctp_close+0x667/0x940 net/sctp/socket.c:1604
 inet_release+0xfe/0x230 net/ipv4/af_inet.c:425
 inet6_release+0x51/0x80 net/ipv6/af_inet6.c:450
 __sock_release+0x236/0x330 net/socket.c:602
 inet_ctl_sock_destroy include/net/inet_common.h:52 [inline]
 sctp_ctrlsock_exit+0x67/0x90 net/sctp/protocol.c:1366
 ops_exit_list+0x9a/0x190 net/core/net_namespace.c:142
 cleanup_net+0x4a3/0xd30 net/core/net_namespace.c:484
 process_one_work+0x7ac/0x1890 kernel/workqueue.c:2116
 worker_thread+0x6c1/0x1330 kernel/workqueue.c:2250
 kthread+0x35e/0x530 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
================================================================================
can: request_module (can-proto-0) failed.
can: request_module (can-proto-0) failed.
can: request_module (can-proto-0) failed.
audit: type=1400 audit(1601541108.333:9): avc:  denied  { create } for  pid=6368 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1

Crashes (57):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/10/01 08:31 linux-4.14.y ca87c8281190 4103fce0 .config console log report ci2-linux-4-14
2020/09/30 18:42 linux-4.14.y ca87c8281190 a9767fb2 .config console log report ci2-linux-4-14
2020/09/30 06:39 linux-4.14.y ca87c8281190 8516f6d3 .config console log report ci2-linux-4-14
2020/09/29 13:58 linux-4.14.y ca87c8281190 5abc3f1a .config console log report ci2-linux-4-14
2020/09/28 23:05 linux-4.14.y ca87c8281190 1b88c6d5 .config console log report ci2-linux-4-14
2020/09/28 08:01 linux-4.14.y ca87c8281190 6bfdbe89 .config console log report ci2-linux-4-14
2020/09/28 08:01 linux-4.14.y ca87c8281190 6bfdbe89 .config console log report ci2-linux-4-14
2020/09/26 23:16 linux-4.14.y ca87c8281190 5dd8aee8 .config console log report ci2-linux-4-14
2020/09/26 23:16 linux-4.14.y ca87c8281190 5dd8aee8 .config console log report ci2-linux-4-14
2020/09/26 23:16 linux-4.14.y ca87c8281190 5dd8aee8 .config console log report ci2-linux-4-14
2020/09/26 11:13 linux-4.14.y ca87c8281190 2d5ea0cb .config console log report ci2-linux-4-14
2020/09/26 11:13 linux-4.14.y ca87c8281190 2d5ea0cb .config console log report ci2-linux-4-14
2020/09/26 11:13 linux-4.14.y ca87c8281190 2d5ea0cb .config console log report ci2-linux-4-14
2020/09/25 12:57 linux-4.14.y ca87c8281190 4a006f63 .config console log report ci2-linux-4-14
2020/09/25 12:57 linux-4.14.y ca87c8281190 4a006f63 .config console log report ci2-linux-4-14
2020/09/25 12:57 linux-4.14.y ca87c8281190 4a006f63 .config console log report ci2-linux-4-14
2020/09/23 19:04 linux-4.14.y ca87c8281190 54289b08 .config console log report ci2-linux-4-14
2020/09/23 19:04 linux-4.14.y ca87c8281190 54289b08 .config console log report ci2-linux-4-14
2020/09/23 19:04 linux-4.14.y ca87c8281190 54289b08 .config console log report ci2-linux-4-14
2020/09/23 10:52 linux-4.14.y ca87c8281190 287cd75a .config console log report ci2-linux-4-14
2020/09/23 10:52 linux-4.14.y ca87c8281190 287cd75a .config console log report ci2-linux-4-14
2020/09/23 10:52 linux-4.14.y ca87c8281190 287cd75a .config console log report ci2-linux-4-14
2020/09/23 07:17 linux-4.14.y cbfa1702aaf6 287cd75a .config console log report ci2-linux-4-14
2020/09/23 07:17 linux-4.14.y cbfa1702aaf6 287cd75a .config console log report ci2-linux-4-14
2020/09/23 07:17 linux-4.14.y cbfa1702aaf6 287cd75a .config console log report ci2-linux-4-14
2020/09/22 08:34 linux-4.14.y cbfa1702aaf6 3e8f6c27 .config console log report ci2-linux-4-14
2020/09/22 08:34 linux-4.14.y cbfa1702aaf6 3e8f6c27 .config console log report ci2-linux-4-14
2020/09/22 08:34 linux-4.14.y cbfa1702aaf6 3e8f6c27 .config console log report ci2-linux-4-14
2020/09/21 20:10 linux-4.14.y cbfa1702aaf6 9e1fa68e .config console log report ci2-linux-4-14
2020/09/21 20:10 linux-4.14.y cbfa1702aaf6 9e1fa68e .config console log report ci2-linux-4-14
2020/09/21 20:10 linux-4.14.y cbfa1702aaf6 9e1fa68e .config console log report ci2-linux-4-14
2020/09/21 08:07 linux-4.14.y cbfa1702aaf6 c81d99c8 .config console log report ci2-linux-4-14
2020/09/21 08:07 linux-4.14.y cbfa1702aaf6 c81d99c8 .config console log report ci2-linux-4-14
2020/09/21 08:07 linux-4.14.y cbfa1702aaf6 c81d99c8 .config console log report ci2-linux-4-14
2020/09/20 13:32 linux-4.14.y cbfa1702aaf6 9564d2e9 .config console log report ci2-linux-4-14
2020/09/20 13:32 linux-4.14.y cbfa1702aaf6 9564d2e9 .config console log report ci2-linux-4-14
2020/09/20 13:32 linux-4.14.y cbfa1702aaf6 9564d2e9 .config console log report ci2-linux-4-14
2020/09/18 19:37 linux-4.14.y cbfa1702aaf6 53ce8104 .config console log report ci2-linux-4-14
2020/09/18 19:37 linux-4.14.y cbfa1702aaf6 53ce8104 .config console log report ci2-linux-4-14
2020/09/18 19:37 linux-4.14.y cbfa1702aaf6 53ce8104 .config console log report ci2-linux-4-14
2020/09/18 07:34 linux-4.14.y cbfa1702aaf6 38962c8b .config console log report ci2-linux-4-14
2020/09/18 07:34 linux-4.14.y cbfa1702aaf6 38962c8b .config console log report ci2-linux-4-14
2020/09/18 07:34 linux-4.14.y cbfa1702aaf6 38962c8b .config console log report ci2-linux-4-14
2020/09/17 01:43 linux-4.14.y cbfa1702aaf6 8247808b .config console log report ci2-linux-4-14
2020/09/17 01:43 linux-4.14.y cbfa1702aaf6 8247808b .config console log report ci2-linux-4-14
2020/09/17 01:43 linux-4.14.y cbfa1702aaf6 8247808b .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.