syzbot


general protection fault in sidtab_search_core

Status: closed as invalid on 2019/02/15 20:35
First crash: 2551d, last: 2537d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in sidtab_search_core selinux syz 1306 2540d 2547d 4/28 fixed on 2018/02/01 10:32

Sample crash report:
IPVS: Creating netns size=2536 id=1
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 3284 Comm: syz-executor0 Not tainted 4.9.67-gf26d3c7 #106
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801ce709800 task.stack: ffff8801d8a50000
RIP: 0010:[<ffffffff81c04b4a>]  [<ffffffff81c04b4a>] sidtab_search_core+0x6a/0x320 security/selinux/ss/sidtab.c:94
RSP: 0018:ffff8801d8a57758  EFLAGS: 00010202
RAX: dffffc0000000000 RBX: 0000000000000008 RCX: 1ffff1003b14aec0
RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffffffff8593e620
RBP: ffff8801d8a57788 R08: ffffffff85390610 R09: ffffffff83a5e040
R10: 0000000000000001 R11: ffff8801ce709800 R12: 0000000000000001
R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801ce409990
FS:  00007fc81a014700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc819ff2db8 CR3: 00000001d1464000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000000000001 ffffffff8593e620 0000000000000001 0000000000000001
 0000000000000001 ffff8801ce409990 ffff8801d8a577a8 ffffffff81c0582f
 dffffc0000000000 ffff8801ce409994 ffff8801d8a578d0 ffffffff81c23952
Call Trace:
 [<ffffffff81c0582f>] sidtab_search+0x1f/0x30 security/selinux/ss/sidtab.c:117
 [<ffffffff81c23952>] security_bounded_transition+0xb2/0x3a0 security/selinux/ss/services.c:860
 [<ffffffff81bf5f10>] selinux_setprocattr+0x8b0/0xa80 security/selinux/hooks.c:5941
 [<ffffffff81bd16ad>] security_setprocattr+0x8d/0xc0 security/security.c:1177
 [<ffffffff816c465d>] proc_pid_attr_write+0x1bd/0x270 fs/proc/base.c:2510
 [<ffffffff8156a573>] __vfs_write+0x103/0x680 fs/read_write.c:510
 [<ffffffff8156abe0>] __kernel_write+0xf0/0x340 fs/read_write.c:532
 [<ffffffff8160c319>] write_pipe_buf+0x159/0x1f0 fs/splice.c:816
 [<ffffffff8160d353>] splice_from_pipe_feed fs/splice.c:521 [inline]
 [<ffffffff8160d353>] __splice_from_pipe+0x323/0x730 fs/splice.c:645
 [<ffffffff8160f8a9>] splice_from_pipe+0xf9/0x160 fs/splice.c:680
 [<ffffffff8160f9a0>] default_file_splice_write+0x40/0x90 fs/splice.c:828
 [<ffffffff8161052d>] do_splice_from fs/splice.c:870 [inline]
 [<ffffffff8161052d>] do_splice fs/splice.c:1166 [inline]
 [<ffffffff8161052d>] SYSC_splice fs/splice.c:1416 [inline]
 [<ffffffff8161052d>] SyS_splice+0x7bd/0x1520 fs/splice.c:1399
 [<ffffffff838a9985>] entry_SYSCALL_64_fastpath+0x23/0xc6
Code: ea 03 41 83 e4 7f 80 3c 02 00 0f 85 7d 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 33 4d 63 e4 4b 8d 1c e6 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 41 02 00 00 48 8b 1b 48 85 db 0f 84 8b 00 00 
RIP  [<ffffffff81c04b4a>] sidtab_search_core+0x6a/0x320 security/selinux/ss/sidtab.c:94
 RSP <ffff8801d8a57758>
---[ end trace bec3abaadd0ddbea ]---

Crashes (762):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/12/07 13:29 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5d643f8e .config console log report syz ci-android-49-kasan-gce
2017/12/03 04:27 https://android.googlesource.com/kernel/common android-4.9 b76348094703 48359b97 .config console log report syz ci-android-49-kasan-gce
2017/12/03 04:16 https://android.googlesource.com/kernel/common android-4.9 b76348094703 48359b97 .config console log report syz ci-android-49-kasan-gce
2017/12/03 03:55 https://android.googlesource.com/kernel/common android-4.9 b76348094703 48359b97 .config console log report syz ci-android-49-kasan-gce
2017/12/03 03:43 https://android.googlesource.com/kernel/common android-4.9 b76348094703 48359b97 .config console log report syz ci-android-49-kasan-gce
2017/12/02 02:19 https://android.googlesource.com/kernel/common android-4.9 b76348094703 48359b97 .config console log report syz ci-android-49-kasan-gce
2017/12/02 01:59 https://android.googlesource.com/kernel/common android-4.9 b76348094703 48359b97 .config console log report syz ci-android-49-kasan-gce
2017/12/02 01:37 https://android.googlesource.com/kernel/common android-4.9 b76348094703 48359b97 .config console log report syz ci-android-49-kasan-gce
2017/12/01 18:20 https://android.googlesource.com/kernel/common android-4.9 38884cc22714 2fa91450 .config console log report syz ci-android-49-kasan-gce
2017/12/11 15:51 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 27f5dfef .config console log report ci-android-49-kasan-gce
2017/12/11 15:37 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 27f5dfef .config console log report ci-android-49-kasan-gce
2017/12/11 15:04 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 27f5dfef .config console log report ci-android-49-kasan-gce
2017/12/11 14:50 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 27f5dfef .config console log report ci-android-49-kasan-gce
2017/12/11 14:20 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 27f5dfef .config console log report ci-android-49-kasan-gce
2017/12/11 14:19 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 27f5dfef .config console log report ci-android-49-kasan-gce
2017/12/11 14:05 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 27f5dfef .config console log report ci-android-49-kasan-gce
2017/12/11 13:43 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 13:25 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 13:18 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 13:17 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 12:32 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 12:14 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 10:27 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 10:27 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 10:15 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 09:18 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 08:59 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 07:38 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 07:29 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 07:27 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 07:24 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 06:54 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 06:30 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 06:20 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 05:35 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 05:34 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 05:24 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 05:12 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 05:10 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 04:49 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 04:40 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 04:37 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 04:04 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 03:49 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 02:58 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 02:49 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 02:45 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 02:22 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
2017/12/11 01:55 https://android.googlesource.com/kernel/common android-4.9 f26d3c76d376 5ad0ce95 .config console log report ci-android-49-kasan-gce
* Struck through repros no longer work on HEAD.