syzbot


general protection fault in nfulnl_recv_config

Status: public: reported C repro on 2019/04/12 00:00
Reported-by: syzbot+2cd228603e3c98b6fd91@syzkaller.appspotmail.com
First crash: 2259d, last: 1602d

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 3701 Comm: syzkaller654406 Not tainted 4.4.115-g810bdaf #9
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801cf480000 task.stack: ffff8801cba90000
RIP: 0010:[<ffffffff81246c95>]  [<ffffffff81246c95>] debug_spin_lock_before kernel/locking/spinlock_debug.c:83 [inline]
RIP: 0010:[<ffffffff81246c95>]  [<ffffffff81246c95>] do_raw_spin_lock+0x25/0x2c0 kernel/locking/spinlock_debug.c:135
RSP: 0018:ffff8801cba97660  EFLAGS: 00010203
RAX: dffffc0000000000 RBX: 0000000000000010 RCX: 0000000000000000
RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000014
RBP: ffff8801cba97688 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff838443e0 R11: 1ffff10039752e9e R12: 0000000000000000
R13: 00000000fffffdf4 R14: 000000000000007d R15: ffff8801cba97728
FS:  000000000228b880(0063) GS:ffff8801db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002023df9c CR3: 00000001cf6ca000 CR4: 0000000000160670
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000000000010 0000000000000000 00000000fffffdf4 000000000000007d
 ffff8801cba97728 ffff8801cba976a8 ffffffff83773762 ffffffff82fa5269
 0000000000000010 ffff8801cba97710 ffffffff82fa5269 ffffffff82fa4cdf
Call Trace:
 [<ffffffff83773762>] __raw_spin_lock_bh include/linux/spinlock_api_smp.h:138 [inline]
 [<ffffffff83773762>] _raw_spin_lock_bh+0x42/0x50 kernel/locking/spinlock.c:175
 [<ffffffff82fa5269>] spin_lock_bh include/linux/spinlock.h:307 [inline]
 [<ffffffff82fa5269>] nfulnl_set_mode net/netfilter/nfnetlink_log.c:250 [inline]
 [<ffffffff82fa5269>] nfulnl_recv_config+0x609/0x1430 net/netfilter/nfnetlink_log.c:909
 [<ffffffff82f99153>] nfnetlink_rcv_msg+0xa63/0xbc0 net/netfilter/nfnetlink.c:215
 [<ffffffff82f8a50e>] netlink_rcv_skb+0x13e/0x370 net/netlink/af_netlink.c:2349
 [<ffffffff82f976ce>] nfnetlink_rcv+0x29e/0x1070 net/netfilter/nfnetlink.c:479
 [<ffffffff82f89092>] netlink_unicast_kernel net/netlink/af_netlink.c:1267 [inline]
 [<ffffffff82f89092>] netlink_unicast+0x522/0x760 net/netlink/af_netlink.c:1293
 [<ffffffff82f89bb8>] netlink_sendmsg+0x8e8/0xc50 net/netlink/af_netlink.c:1847
 [<ffffffff82deb94a>] sock_sendmsg_nosec net/socket.c:625 [inline]
 [<ffffffff82deb94a>] sock_sendmsg+0xca/0x110 net/socket.c:635
 [<ffffffff82ded521>] ___sys_sendmsg+0x6c1/0x7c0 net/socket.c:1962
 [<ffffffff82def573>] __sys_sendmsg+0xd3/0x190 net/socket.c:1996
 [<ffffffff82def65d>] SYSC_sendmsg net/socket.c:2007 [inline]
 [<ffffffff82def65d>] SyS_sendmsg+0x2d/0x50 net/socket.c:2003
 [<ffffffff8377449f>] entry_SYSCALL_64_fastpath+0x1c/0x98
Code: 84 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 89 fb 48 83 c7 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 
RIP  [<ffffffff81246c95>] debug_spin_lock_before kernel/locking/spinlock_debug.c:83 [inline]
RIP  [<ffffffff81246c95>] do_raw_spin_lock+0x25/0x2c0 kernel/locking/spinlock_debug.c:135
 RSP <ffff8801cba97660>
---[ end trace 42fa85ae219459ba ]---

Crashes (559):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/02/07 19:07 https://android.googlesource.com/kernel/common android-4.4 810bdaf1dd74 9fb5ec43 .config console log report syz C ci-android-44-kasan-gce
2018/02/07 19:08 https://android.googlesource.com/kernel/common android-4.4 810bdaf1dd74 9fb5ec43 .config console log report syz C ci-android-44-kasan-gce-386
2019/08/02 09:58 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 835dffe7 .config console log report ci-android-44-kasan-gce
2019/07/23 22:40 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b de453f34 .config console log report ci-android-44-kasan-gce
2019/07/17 08:16 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 0d10349c .config console log report ci-android-44-kasan-gce
2019/06/23 05:57 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 34bf9440 .config console log report ci-android-44-kasan-gce
2019/06/22 21:39 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 34bf9440 .config console log report ci-android-44-kasan-gce
2019/06/18 16:46 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b e3f76baa .config console log report ci-android-44-kasan-gce
2019/06/07 21:37 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ce9107d0 .config console log report ci-android-44-kasan-gce
2019/04/24 07:43 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 4d3d6a50 .config console log report ci-android-44-kasan-gce
2019/04/20 17:49 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b b0e8efcb .config console log report ci-android-44-kasan-gce
2019/04/17 13:45 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b b0e8efcb .config console log report ci-android-44-kasan-gce
2019/04/12 11:28 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 8916f5e1 .config console log report ci-android-44-kasan-gce
2019/04/05 21:36 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 40f2363e .config console log report ci-android-44-kasan-gce
2019/04/05 00:01 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b e5d1b3ac .config console log report ci-android-44-kasan-gce
2019/04/03 03:30 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b dfd3394d .config console log report ci-android-44-kasan-gce
2019/04/02 21:58 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b dfd3394d .config console log report ci-android-44-kasan-gce
2019/03/31 11:38 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 0c624d4d .config console log report ci-android-44-kasan-gce
2019/03/21 12:35 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 427ea487 .config console log report ci-android-44-kasan-gce
2019/03/19 15:36 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b e4549234 .config console log report ci-android-44-kasan-gce
2019/11/26 19:09 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 1048481f .config console log report ci-android-44-kasan-gce-386
2019/11/26 10:30 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f746151a .config console log report ci-android-44-kasan-gce-386
2019/11/25 02:27 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 598ca6c8 .config console log report ci-android-44-kasan-gce-386
2019/11/13 02:55 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 048f2d49 .config console log report ci-android-44-kasan-gce-386
2019/11/03 18:40 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b c9610487 .config console log report ci-android-44-kasan-gce-386
2019/10/30 23:41 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b a41ca8fa .config console log report ci-android-44-kasan-gce-386
2019/09/23 17:59 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 1e9788a0 .config console log report ci-android-44-kasan-gce-386
2019/08/03 18:15 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 6affd8e8 .config console log report ci-android-44-kasan-gce-386
2019/07/27 18:16 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b c85e1c5b .config console log report ci-android-44-kasan-gce-386
2019/07/27 14:35 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b c85e1c5b .config console log report ci-android-44-kasan-gce-386
2019/07/27 04:17 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b c85e1c5b .config console log report ci-android-44-kasan-gce-386
2019/07/25 13:41 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 32329ceb .config console log report ci-android-44-kasan-gce-386
2019/07/24 04:19 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b de453f34 .config console log report ci-android-44-kasan-gce-386
2019/07/23 18:15 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b de453f34 .config console log report ci-android-44-kasan-gce-386
2019/07/23 00:52 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 55e0c077 .config console log report ci-android-44-kasan-gce-386
2019/07/18 11:45 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 7bb222f7 .config console log report ci-android-44-kasan-gce-386
2019/07/02 07:04 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b cccc4302 .config console log report ci-android-44-kasan-gce-386
2019/06/08 21:46 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 0159583c .config console log report ci-android-44-kasan-gce-386
2019/06/07 22:55 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ce9107d0 .config console log report ci-android-44-kasan-gce-386
2019/05/11 17:33 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 46caad94 .config console log report ci-android-44-kasan-gce-386
2019/05/08 18:16 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b a7383bfa .config console log report ci-android-44-kasan-gce-386
2019/05/02 10:39 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 7516d9fa .config console log report ci-android-44-kasan-gce-386
2019/05/01 02:35 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 618456b4 .config console log report ci-android-44-kasan-gce-386
2019/04/05 21:36 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 40f2363e .config console log report ci-android-44-kasan-gce-386
2019/03/26 17:57 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 55684ce1 .config console log report ci-android-44-kasan-gce-386
2019/03/17 18:29 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ba18afea .config console log report ci-android-44-kasan-gce-386
2019/03/13 21:12 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 2881fc25 .config console log report ci-android-44-kasan-gce-386
2019/03/08 22:05 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 12365b99 .config console log report ci-android-44-kasan-gce-386
2019/03/02 02:49 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 68d9e495 .config console log report ci-android-44-kasan-gce-386
2019/03/01 20:19 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 68d9e495 .config console log report ci-android-44-kasan-gce-386
* Struck through repros no longer work on HEAD.