syzbot


general protection fault in strlen
Status: fixed on 2018/01/22 13:19
Reported-by: syzbot+6e1398cbaa90b7432d38@syzkaller.appspotmail.com
Fix commit: cd443f1e91ca netlink: reset extack earlier in netlink_rcv_skb
First crash: 1589d, last: 1586d

Sample crash report:
audit: type=1400 audit(1516307237.824:7): avc:  denied  { map } for  pid=3650 comm="syzkaller270719" path="/root/syzkaller270719833" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 3650 Comm: syzkaller270719 Not tainted 4.15.0-rc8+ #268
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:strlen+0x1f/0xa0 lib/string.c:479
RSP: 0018:ffff8801bbe5f768 EFLAGS: 00010292
RAX: 0000000041b58ab3 RBX: ffff8801bcb05640 RCX: 000000000836b156
RDX: dffffc0000000000 RSI: ffff8801bc3657c0 RDI: 0000000041b58ab3
RBP: ffff8801bbe5f780 R08: 1ffff100377cbe55 R09: 0000000000000000
R10: ffff8801bbe5f770 R11: ffffed00377cbe40 R12: ffff8801bbe5f8a0
R13: 0000000041b58ab3 R14: 0000000000000040 R15: 1ffff100377cbef8
FS:  00000000024ed880(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020007000 CR3: 00000001bc3ca003 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 strlen include/linux/string.h:266 [inline]
 netlink_ack+0x120/0xa10 net/netlink/af_netlink.c:2324
 netlink_rcv_skb+0x2d1/0x400 net/netlink/af_netlink.c:2415
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:635
 netlink_unicast_kernel net/netlink/af_netlink.c:1275 [inline]
 netlink_unicast+0x4ee/0x700 net/netlink/af_netlink.c:1301
 netlink_sendmsg+0xa4a/0xe60 net/netlink/af_netlink.c:1864
 sock_sendmsg_nosec net/socket.c:638 [inline]
 sock_sendmsg+0xca/0x110 net/socket.c:648
 ___sys_sendmsg+0x767/0x8b0 net/socket.c:2028
 __sys_sendmsg+0xe5/0x210 net/socket.c:2062
 SYSC_sendmsg net/socket.c:2073 [inline]
 SyS_sendmsg+0x2d/0x50 net/socket.c:2069
 entry_SYSCALL_64_fastpath+0x29/0xa0
RIP: 0033:0x43fdc9
RSP: 002b:00007ffddb0aa848 EFLAGS: 00000217 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fdc9
RDX: 0000000000000000 RSI: 0000000020008000 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000004 R11: 0000000000000217 R12: 00000000004016f0
R13: 0000000000401780 R14: 0000000000000000 R15: 0000000000000000
Code: 37 ff ff ff 0f 1f 84 00 00 00 00 00 55 48 89 f9 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 48 89 f8 48 89 e5 41 54 53 48 83 ec 08 <0f> b6 14 11 48 89 f9 83 e1 07 38 ca 7f 04 84 d2 75 4b 80 38 00 
RIP: strlen+0x1f/0xa0 lib/string.c:479 RSP: ffff8801bbe5f768
---[ end trace 05c364607f75beaf ]---
Kernel panic - not syncing: Fatal exception
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (53):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2018/01/18 20:29 upstream dda3e15231b3 161c1d64 .config log report syz C
ci-upstream-kasan-gce 2018/01/17 16:10 upstream 8cbab92dff77 a46e5318 .config log report syz C
ci-upstream-kasan-gce-386 2018/01/18 20:48 upstream dda3e15231b3 161c1d64 .config log report syz C
ci-upstream-net-kasan-gce 2018/01/18 20:19 net-next d680b3524cd2 161c1d64 .config log report syz C
ci-upstream-net-kasan-gce 2018/01/17 15:41 net-next c02b3741eb99 a46e5318 .config log report syz C
ci-upstream-next-kasan-gce 2018/01/18 20:15 linux-next a362f6d2cdbd 161c1d64 .config log report syz C
ci-upstream-next-kasan-gce 2018/01/17 16:43 linux-next 1fec57a31e56 a46e5318 .config log report syz C
ci-upstream-kasan-gce 2018/01/19 06:32 upstream dda3e15231b3 161c1d64 .config log report
ci-upstream-kasan-gce-386 2018/01/19 07:18 upstream dda3e15231b3 161c1d64 .config log report
ci-upstream-kasan-gce-386 2018/01/19 06:33 upstream dda3e15231b3 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/20 07:41 net-next 43dd7512b51c fbbdcd92 .config log report
ci-upstream-net-kasan-gce 2018/01/20 06:34 net-next 43dd7512b51c fbbdcd92 .config log report
ci-upstream-net-kasan-gce 2018/01/20 05:58 net-next 43dd7512b51c fbbdcd92 .config log report
ci-upstream-net-kasan-gce 2018/01/20 05:03 net-next 43dd7512b51c fbbdcd92 .config log report
ci-upstream-net-kasan-gce 2018/01/20 02:00 net-next 43dd7512b51c fbbdcd92 .config log report
ci-upstream-net-kasan-gce 2018/01/20 01:00 net-next 43dd7512b51c fbbdcd92 .config log report
ci-upstream-net-kasan-gce 2018/01/19 21:25 net-next 43dd7512b51c fbbdcd92 .config log report
ci-upstream-net-kasan-gce 2018/01/19 17:51 net-next ef58ca38dbda 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/19 17:22 net-next ef58ca38dbda 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/19 15:48 net-next ef58ca38dbda 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/19 13:26 net-next ef58ca38dbda 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/19 13:21 net-next ef58ca38dbda 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/19 07:21 net-next d680b3524cd2 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/19 06:49 net-next d680b3524cd2 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/19 06:34 net-next d680b3524cd2 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/19 06:33 net-next d680b3524cd2 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/19 06:17 net-next d680b3524cd2 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/19 04:51 net-next d680b3524cd2 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/19 03:30 net-next d680b3524cd2 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/19 01:56 net-next d680b3524cd2 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/19 00:22 net-next d680b3524cd2 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/18 23:16 net-next d680b3524cd2 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/18 22:09 net-next d680b3524cd2 161c1d64 .config log report
ci-upstream-net-kasan-gce 2018/01/18 18:06 net-next 4f7d58517f46 56cc113a .config log report
ci-upstream-net-kasan-gce 2018/01/18 14:55 net-next 4f7d58517f46 56cc113a .config log report
ci-upstream-net-kasan-gce 2018/01/18 13:42 net-next 4f7d58517f46 56cc113a .config log report
ci-upstream-net-kasan-gce 2018/01/18 06:34 net-next 2d83619de8a6 b8970f31 .config log report
ci-upstream-net-kasan-gce 2018/01/18 04:00 net-next 2d83619de8a6 b8970f31 .config log report
ci-upstream-net-kasan-gce 2018/01/18 03:31 net-next 2d83619de8a6 b8970f31 .config log report
ci-upstream-net-kasan-gce 2018/01/18 01:59 net-next 2d83619de8a6 b8970f31 .config log report
ci-upstream-net-kasan-gce 2018/01/18 00:33 net-next 2d83619de8a6 b8970f31 .config log report
ci-upstream-net-kasan-gce 2018/01/18 00:18 net-next 2d83619de8a6 b8970f31 .config log report
ci-upstream-net-kasan-gce 2018/01/17 23:26 net-next 2d83619de8a6 b8970f31 .config log report
ci-upstream-net-kasan-gce 2018/01/17 20:16 net-next 2d83619de8a6 b8970f31 .config log report
ci-upstream-net-kasan-gce 2018/01/17 18:38 net-next c02b3741eb99 a46e5318 .config log report
ci-upstream-net-kasan-gce 2018/01/17 16:40 net-next c02b3741eb99 a46e5318 .config log report
ci-upstream-net-kasan-gce 2018/01/17 15:57 net-next c02b3741eb99 a46e5318 .config log report