syzbot


general protection fault in addrconf_rt_table

Status: public: reported syz repro on 2019/04/12 00:01
Reported-by: syzbot+ddfea31ae481ea039147@syzkaller.appspotmail.com
First crash: 2065d, last: 1605d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 general protection fault in addrconf_rt_table C 697 1605d 1841d 0/3 public: reported C repro on 2019/04/12 00:00
android-44 general protection fault in addrconf_rt_table syz 30 1945d 1839d 0/2 public: reported syz repro on 2019/04/14 00:02

Sample crash report:
audit: type=1400 audit(1543078772.570:9): avc:  denied  { map } for  pid=1837 comm="syz-execprog" path="/root/syzkaller-shm822419332" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN NOPTI
Modules linked in:
CPU: 1 PID: 64 Comm: kworker/u4:1 Not tainted 4.14.83+ #9
Workqueue: netns cleanup_net
task: ffff8801d9125e00 task.stack: ffff8801d91a0000
RIP: 0010:addrconf_rt_table+0x126/0x2a0 net/ipv6/addrconf.c:2292
RSP: 0018:ffff8801d91a76b8 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff1003b224cc4
RDX: 000000000000004d RSI: 0000000000000005 RDI: 0000000000000268
RBP: ffff8801d91a76e0 R08: 0000000000000001 R09: 0000000000000000
R10: ffff8801d91266d0 R11: 0000000000000001 R12: ffff8801c7e75500
R13: ffff8801c89c4000 R14: 00000000000001b8 R15: 00000000000000fe
FS:  0000000000000000(0000) GS:ffff8801db900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004d96d0 CR3: 0000000038022006 CR4: 00000000001606a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 addrconf_get_prefix_route+0x30/0x2f0 net/ipv6/addrconf.c:2346
 __ipv6_ifa_notify+0x6b6/0x860 net/ipv6/addrconf.c:5597
 addrconf_ifdown+0xa20/0x12e0 net/ipv6/addrconf.c:3721
 addrconf_notify+0x8f1/0x1b30 net/ipv6/addrconf.c:3525
 notifier_call_chain+0x114/0x1b0 kernel/notifier.c:93
 call_netdevice_notifiers net/core/dev.c:1687 [inline]
 rollback_registered_many+0x6b5/0xac0 net/core/dev.c:7210
 unregister_netdevice_many+0x43/0x210 net/core/dev.c:8259
 default_device_exit_batch+0x313/0x3d0 net/core/dev.c:8718
 ops_exit_list.isra.3+0xfd/0x150 net/core/net_namespace.c:145
 cleanup_net+0x3e9/0x880 net/core/net_namespace.c:483
 process_one_work+0x86e/0x1670 kernel/workqueue.c:2114
 worker_thread+0xdc/0x1000 kernel/workqueue.c:2248
 kthread+0x348/0x420 kernel/kthread.c:232
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402
Code: 6d 8f be 01 00 00 00 48 c7 c7 a0 e8 4c 90 e8 12 91 b2 fe 48 8d bb 68 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 3f 01 00 00 44 8b ab 68 02 
RIP: addrconf_rt_table+0x126/0x2a0 net/ipv6/addrconf.c:2292 RSP: ffff8801d91a76b8
---[ end trace 800bd0a1576fd8e9 ]---

Crashes (889):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/11/24 17:03 android-4.14 ea91d158d712 ecc7c870 .config console log report syz ci-android-414-kasan-gce-root
2019/12/04 10:42 android-4.14 b7f8d9ba4f3e 0ecb9746 .config console log report ci-android-414-kasan-gce-root
2019/12/04 08:47 android-4.14 b7f8d9ba4f3e 0ecb9746 .config console log report ci-android-414-kasan-gce-root
2019/12/04 03:18 android-4.14 b7f8d9ba4f3e ae13a849 .config console log report ci-android-414-kasan-gce-root
2019/12/04 01:13 android-4.14 e6b1fb0e83b2 ae13a849 .config console log report ci-android-414-kasan-gce-root
2019/12/03 23:29 android-4.14 e6b1fb0e83b2 ae13a849 .config console log report ci-android-414-kasan-gce-root
2019/12/03 22:17 android-4.14 e6b1fb0e83b2 ae13a849 .config console log report ci-android-414-kasan-gce-root
2019/12/03 17:40 android-4.14 e6b1fb0e83b2 ae13a849 .config console log report ci-android-414-kasan-gce-root
2019/12/03 15:59 android-4.14 e6b1fb0e83b2 ab342da3 .config console log report ci-android-414-kasan-gce-root
2019/12/03 13:53 android-4.14 e6b1fb0e83b2 ab342da3 .config console log report ci-android-414-kasan-gce-root
2019/12/03 12:33 android-4.14 e6b1fb0e83b2 ab342da3 .config console log report ci-android-414-kasan-gce-root
2019/12/03 10:33 android-4.14 e6b1fb0e83b2 ab342da3 .config console log report ci-android-414-kasan-gce-root
2019/12/03 07:47 android-4.14 e6b1fb0e83b2 ab342da3 .config console log report ci-android-414-kasan-gce-root
2019/12/03 06:20 android-4.14 e6b1fb0e83b2 ab342da3 .config console log report ci-android-414-kasan-gce-root
2019/12/02 23:15 android-4.14 e6b1fb0e83b2 ab342da3 .config console log report ci-android-414-kasan-gce-root
2019/12/02 22:08 android-4.14 e6b1fb0e83b2 ab342da3 .config console log report ci-android-414-kasan-gce-root
2019/12/02 17:16 android-4.14 13855a652bd5 f879db37 .config console log report ci-android-414-kasan-gce-root
2019/12/02 13:48 android-4.14 13855a652bd5 f879db37 .config console log report ci-android-414-kasan-gce-root
2019/12/02 11:55 android-4.14 13855a652bd5 f879db37 .config console log report ci-android-414-kasan-gce-root
2019/12/01 22:32 android-4.14 13855a652bd5 a76bf83f .config console log report ci-android-414-kasan-gce-root
2019/12/01 20:40 android-4.14 13855a652bd5 a76bf83f .config console log report ci-android-414-kasan-gce-root
2019/12/01 11:35 android-4.14 714ada7cabc7 a76bf83f .config console log report ci-android-414-kasan-gce-root
2019/12/01 07:21 android-4.14 714ada7cabc7 a76bf83f .config console log report ci-android-414-kasan-gce-root
2019/12/01 05:04 android-4.14 714ada7cabc7 a76bf83f .config console log report ci-android-414-kasan-gce-root
2019/12/01 02:18 android-4.14 714ada7cabc7 a76bf83f .config console log report ci-android-414-kasan-gce-root
2019/11/30 20:06 android-4.14 714ada7cabc7 3a75be00 .config console log report ci-android-414-kasan-gce-root
2019/11/30 18:39 android-4.14 714ada7cabc7 3a75be00 .config console log report ci-android-414-kasan-gce-root
2019/11/30 17:05 android-4.14 714ada7cabc7 3a75be00 .config console log report ci-android-414-kasan-gce-root
2019/11/30 16:19 android-4.14 714ada7cabc7 3a75be00 .config console log report ci-android-414-kasan-gce-root
2019/11/30 15:00 android-4.14 714ada7cabc7 3a75be00 .config console log report ci-android-414-kasan-gce-root
2019/11/30 12:01 android-4.14 714ada7cabc7 3a75be00 .config console log report ci-android-414-kasan-gce-root
2019/11/30 10:00 android-4.14 714ada7cabc7 3a75be00 .config console log report ci-android-414-kasan-gce-root
2019/11/30 08:54 android-4.14 714ada7cabc7 3a75be00 .config console log report ci-android-414-kasan-gce-root
2019/11/30 04:26 android-4.14 714ada7cabc7 3a75be00 .config console log report ci-android-414-kasan-gce-root
2019/11/30 02:05 android-4.14 714ada7cabc7 3a75be00 .config console log report ci-android-414-kasan-gce-root
2019/11/29 23:28 android-4.14 714ada7cabc7 d29b9e84 .config console log report ci-android-414-kasan-gce-root
2019/11/29 20:51 android-4.14 714ada7cabc7 d29b9e84 .config console log report ci-android-414-kasan-gce-root
2019/11/29 16:44 android-4.14 714ada7cabc7 d29b9e84 .config console log report ci-android-414-kasan-gce-root
2019/11/29 14:14 android-4.14 714ada7cabc7 d29b9e84 .config console log report ci-android-414-kasan-gce-root
2019/11/29 09:25 android-4.14 714ada7cabc7 76357d6f .config console log report ci-android-414-kasan-gce-root
2019/11/29 05:36 android-4.14 714ada7cabc7 76357d6f .config console log report ci-android-414-kasan-gce-root
2019/11/29 04:46 android-4.14 714ada7cabc7 76357d6f .config console log report ci-android-414-kasan-gce-root
2019/11/28 23:46 android-4.14 714ada7cabc7 76357d6f .config console log report ci-android-414-kasan-gce-root
2019/11/28 22:08 android-4.14 714ada7cabc7 46869e3e .config console log report ci-android-414-kasan-gce-root
2019/11/28 13:07 android-4.14 714ada7cabc7 46869e3e .config console log report ci-android-414-kasan-gce-root
2019/11/25 09:54 android-4.14 437a2a739c5f 598ca6c8 .config console log report ci-android-414-kasan-gce-root
2018/08/31 14:54 android-4.14 47350a9f13c6 a4718693 .config console log report ci-android-414-kasan-gce-root
* Struck through repros no longer work on HEAD.