syzbot


WARNING in __xlate_proc_name

Status: fixed on 2018/03/23 18:14
Subsystems: netfilter
[Documentation on labels]
Fix commit: b1d0a5d0cba4 netfilter: x_tables: add and use xt_check_proc_name
First crash: 2278d, last: 2242d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in __xlate_proc_name (2) afs C done 36 1549d 1565d 0/26 closed as dup on 2020/01/27 14:16

Sample crash report:
audit: type=1400 audit(1518367978.819:7): avc:  denied  { map } for  pid=4090 comm="syzkaller019634" path="/root/syzkaller019634141" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
------------[ cut here ]------------
name 'sit/€ÿÿÌä'
WARNING: CPU: 0 PID: 4090 at fs/proc/generic.c:163 __xlate_proc_name+0xe6/0x110 fs/proc/generic.c:163
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 4090 Comm: syzkaller019634 Not tainted 4.15.0+ #308
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 panic+0x1e4/0x41c kernel/panic.c:183
 __warn+0x1dc/0x200 kernel/panic.c:547
 report_bug+0x211/0x2d0 lib/bug.c:184
 fixup_bug.part.11+0x37/0x80 arch/x86/kernel/traps.c:178
 fixup_bug arch/x86/kernel/traps.c:247 [inline]
 do_error_trap+0x2d7/0x3e0 arch/x86/kernel/traps.c:296
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:315
 invalid_op+0x22/0x40 arch/x86/entry/entry_64.S:988
RIP: 0010:__xlate_proc_name+0xe6/0x110 fs/proc/generic.c:163
RSP: 0018:ffff8801bf457290 EFLAGS: 00010282
RAX: dffffc0000000008 RBX: 0000000000000003 RCX: ffffffff815aaf3e
RDX: 0000000000000000 RSI: 1ffff10037e8ae02 RDI: 1ffff10037e8add7
RBP: ffff8801bf4572c0 R08: 1ffff10037e8ad99 R09: 0000000000000000
R10: ffff8801bf457188 R11: 0000000000000000 R12: ffff8801bf459440
R13: 0000000000000000 R14: ffff8801bf457458 R15: ffff8801bf459440
 xlate_proc_name fs/proc/generic.c:179 [inline]
 __proc_create+0xcc/0x890 fs/proc/generic.c:349
 proc_create_data+0x76/0x180 fs/proc/generic.c:488
 htable_create net/netfilter/xt_hashlimit.c:333 [inline]
 hashlimit_mt_check_common.isra.9+0xaee/0x1420 net/netfilter/xt_hashlimit.c:900
 hashlimit_mt_check_v1+0x48d/0x640 net/netfilter/xt_hashlimit.c:926
 xt_check_match+0x231/0x7d0 net/netfilter/x_tables.c:470
 check_match net/ipv6/netfilter/ip6_tables.c:492 [inline]
 find_check_match net/ipv6/netfilter/ip6_tables.c:509 [inline]
 find_check_entry.isra.7+0x42d/0xcf0 net/ipv6/netfilter/ip6_tables.c:560
 translate_table+0xf52/0x1690 net/ipv6/netfilter/ip6_tables.c:744
 do_replace net/ipv6/netfilter/ip6_tables.c:1160 [inline]
 do_ip6t_set_ctl+0x370/0x5f0 net/ipv6/netfilter/ip6_tables.c:1686
 nf_sockopt net/netfilter/nf_sockopt.c:106 [inline]
 nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:115
 ipv6_setsockopt+0x10b/0x130 net/ipv6/ipv6_sockglue.c:927
 udpv6_setsockopt+0x45/0x80 net/ipv6/udp.c:1422
 sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2975
 SYSC_setsockopt net/socket.c:1849 [inline]
 SyS_setsockopt+0x189/0x360 net/socket.c:1828
 do_syscall_64+0x282/0x940 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x26/0x9b
RIP: 0033:0x441b99
RSP: 002b:00007fff95634d08 EFLAGS: 00000203 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000441b99
RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
RBP: 00000000006cc018 R08: 0000000000000688 R09: 0000000000000000
R10: 0000000020f2b000 R11: 0000000000000203 R12: 00000000004034c0
R13: 0000000000403550 R14: 0000000000000000 R15: 0000000000000000
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/02/11 16:55 upstream d48fcbd864a0 4e9b726d .config console log report syz C ci-upstream-kasan-gce
2018/01/28 03:42 upstream c4e0ca7fa241 08146b1a .config console log report syz C ci-upstream-kasan-gce
2018/02/11 19:28 net-next-old 9a61df9e5f74 4e9b726d .config console log report syz C ci-upstream-net-kasan-gce
2018/01/28 09:49 net-next-old 6bb46bc57c8e 08d47756 .config console log report syz C ci-upstream-net-kasan-gce
2018/03/02 08:47 upstream 8da5db7ddae1 2c6f473e .config console log report ci-upstream-kasan-gce
2018/03/05 05:15 net-next-old efab163bbc19 2c6f473e .config console log report ci-upstream-net-kasan-gce
2018/03/04 14:06 net-next-old e4e31cf07d0c 2c6f473e .config console log report ci-upstream-net-kasan-gce
2018/03/03 23:02 net-next-old e4e31cf07d0c 2c6f473e .config console log report ci-upstream-net-kasan-gce
2018/03/03 04:33 net-next-old 3c34cb9defb0 2c6f473e .config console log report ci-upstream-net-kasan-gce
2018/02/28 09:11 net-next-old 3f5a68300a40 05b5a32c .config console log report ci-upstream-net-kasan-gce
2018/02/25 21:29 net-next-old f74290fdb363 9fe8aa42 .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.