syzbot


general protection fault in netlink_unicast

Status: public: reported C repro on 2019/04/12 00:00
Reported-by: syzbot+97e8c9fb55c1a6d0b72f@syzkaller.appspotmail.com
First crash: 2323d, last: 1598d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 general protection fault in netlink_unicast syz 1 2446d 2446d 0/3 closed as invalid on 2019/01/01 20:10

Sample crash report:
audit: type=1400 audit(1546751542.626:6): avc:  denied  { write } for  pid=2074 comm="syz-executor832" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 2074 Comm: syz-executor832 Not tainted 4.4.169+ #2
task: ffff8801d4dbc740 task.stack: ffff8800b68d8000
RIP: 0010:[<ffffffff822ebb0b>]  [<ffffffff822ebb0b>] netlink_getsockbyportid net/netlink/af_netlink.c:1112 [inline]
RIP: 0010:[<ffffffff822ebb0b>]  [<ffffffff822ebb0b>] netlink_unicast+0x1cb/0x700 net/netlink/af_netlink.c:1297
RSP: 0018:ffff8800b68df7b8  EFLAGS: 00010293
RAX: dffffc0000000048 RBX: 0000000000000000 RCX: 0000000000000030
RDX: 0000000000000000 RSI: ffffffff822ebb04 RDI: ffff8801d48fc218
RBP: ffff8800b68df870 R08: 1ffff1003ac78a32 R09: ffffed003ac78a37
R10: ffffed003ac78a36 R11: ffff8801d63c51b7 R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff8801d48fc140 R15: 000000000000081a
FS:  0000000001065880(0063) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffebec34b20 CR3: 00000001d5fca000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801d63c5240 0000000000000030 0000000000000240 1ffff10016d1befd
 dffffc0000000006 dffffc0000000048 0000000041b58ab3 ffffffff82c9ea90
 ffffffff822eb940 ffffffff821f4e2c 0000000000000000 ffff8801d63c5180
Call Trace:
 [<ffffffff822ed066>] netlink_ack+0x236/0x4c0 net/netlink/af_netlink.c:2334
 [<ffffffff822fc2ed>] nfnetlink_rcv_batch net/netfilter/nfnetlink.c:319 [inline]
 [<ffffffff822fc2ed>] nfnetlink_rcv+0xbdd/0x12b0 net/netfilter/nfnetlink.c:477
 [<ffffffff822ebe17>] netlink_unicast_kernel net/netlink/af_netlink.c:1277 [inline]
 [<ffffffff822ebe17>] netlink_unicast+0x4d7/0x700 net/netlink/af_netlink.c:1303
 [<ffffffff822ec866>] netlink_sendmsg+0x6b6/0xc80 net/netlink/af_netlink.c:1859
 [<ffffffff821d50de>] sock_sendmsg_nosec net/socket.c:638 [inline]
 [<ffffffff821d50de>] sock_sendmsg+0xbe/0x110 net/socket.c:648
 [<ffffffff821d6fb9>] ___sys_sendmsg+0x769/0x890 net/socket.c:1975
 [<ffffffff821d9e15>] __sys_sendmsg+0xc5/0x160 net/socket.c:2009
 [<ffffffff821d9edd>] SYSC_sendmsg net/socket.c:2020 [inline]
 [<ffffffff821d9edd>] SyS_sendmsg+0x2d/0x50 net/socket.c:2016
 [<ffffffff827153a1>] entry_SYSCALL_64_fastpath+0x1e/0x9a
Code: 1c d9 01 ff 48 8d 55 98 48 89 d9 4c 89 f6 4c 89 e7 e8 fa f6 ff ff 83 f8 01 0f 85 e6 03 00 00 e8 fc d8 01 ff 48 8b 85 70 ff ff ff <0f> b6 00 84 c0 74 08 3c 03 0f 8e 16 04 00 00 48 8b 85 68 ff ff 
RIP  [<ffffffff822ebb0b>] netlink_getsockbyportid net/netlink/af_netlink.c:1112 [inline]
RIP  [<ffffffff822ebb0b>] netlink_unicast+0x1cb/0x700 net/netlink/af_netlink.c:1297
 RSP <ffff8800b68df7b8>
---[ end trace 2921284bf1a142cd ]---

Crashes (24574):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/01/06 05:14 https://android.googlesource.com/kernel/common android-4.4 d08574b6f0ae 53be0a37 .config console log report syz C ci-android-44-kasan-gce
2018/11/11 02:28 https://android.googlesource.com/kernel/common android-4.4 0ca3fcabdc05 f3c4e618 .config console log report syz C ci-android-44-kasan-gce
2018/10/09 06:01 https://android.googlesource.com/kernel/common android-4.4 ea3a6005d280 8b311eaf .config console log report syz C ci-android-44-kasan-gce
2018/03/22 19:03 https://android.googlesource.com/kernel/common android-4.4 d63fdf61a4dc 2e9d9054 .config console log report syz C ci-android-44-kasan-gce
2018/03/18 19:50 https://android.googlesource.com/kernel/common android-4.4 d63fdf61a4dc 08dacaa0 .config console log report syz C ci-android-44-kasan-gce
2018/03/17 11:06 https://android.googlesource.com/kernel/common android-4.4 d63fdf61a4dc 08dacaa0 .config console log report syz C ci-android-44-kasan-gce
2018/02/23 03:03 https://android.googlesource.com/kernel/common android-4.4 17c7c494f718 8d8e2494 .config console log report syz C ci-android-44-kasan-gce
2018/01/07 13:41 https://android.googlesource.com/kernel/common android-4.4 dac143966992 19c05fff .config console log report syz C ci-android-44-kasan-gce-386
2018/01/03 10:03 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 00193447 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/23 04:20 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 8e409090 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/23 00:08 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 8e409090 .config console log report syz C ci-android-44-kasan-gce
2017/12/19 15:09 https://android.googlesource.com/kernel/common android-4.4 170051828437 af9163c7 .config console log report syz C ci-android-44-kasan-gce
2017/12/09 21:37 https://android.googlesource.com/kernel/common android-4.4 ed884ebd80a9 5ad0ce95 .config console log report syz C ci-android-44-kasan-gce
2019/01/06 03:35 https://android.googlesource.com/kernel/common android-4.4 d08574b6f0ae 53be0a37 .config console log report syz C ci-android-44-kasan-gce-386
2018/11/11 02:09 https://android.googlesource.com/kernel/common android-4.4 0ca3fcabdc05 f3c4e618 .config console log report syz C ci-android-44-kasan-gce-386
2018/10/09 06:00 https://android.googlesource.com/kernel/common android-4.4 ea3a6005d280 8b311eaf .config console log report syz C ci-android-44-kasan-gce-386
2018/02/23 03:02 https://android.googlesource.com/kernel/common android-4.4 17c7c494f718 8d8e2494 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/09 21:16 https://android.googlesource.com/kernel/common android-4.4 ed884ebd80a9 5ad0ce95 .config console log report syz ci-android-44-kasan-gce
2017/12/09 20:51 https://android.googlesource.com/kernel/common android-4.4 ed884ebd80a9 5ad0ce95 .config console log report syz ci-android-44-kasan-gce
2018/03/22 20:09 https://android.googlesource.com/kernel/common android-4.4 d63fdf61a4dc 2e9d9054 .config console log report syz ci-android-44-kasan-gce-386
2018/03/18 19:10 https://android.googlesource.com/kernel/common android-4.4 d63fdf61a4dc 08dacaa0 .config console log report syz ci-android-44-kasan-gce-386
2018/03/17 10:43 https://android.googlesource.com/kernel/common android-4.4 d63fdf61a4dc 08dacaa0 .config console log report syz ci-android-44-kasan-gce-386
2019/12/04 04:00 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ae13a849 .config console log report ci-android-44-kasan-gce
2019/12/04 02:37 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ae13a849 .config console log report ci-android-44-kasan-gce
2019/12/03 09:56 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ab342da3 .config console log report ci-android-44-kasan-gce
2019/12/03 04:40 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ab342da3 .config console log report ci-android-44-kasan-gce
2019/12/02 22:41 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ab342da3 .config console log report ci-android-44-kasan-gce
2019/12/02 22:33 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ab342da3 .config console log report ci-android-44-kasan-gce
2019/12/02 06:10 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f879db37 .config console log report ci-android-44-kasan-gce
2019/12/02 04:53 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f879db37 .config console log report ci-android-44-kasan-gce
2019/12/02 02:53 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f879db37 .config console log report ci-android-44-kasan-gce
2019/12/02 01:38 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f879db37 .config console log report ci-android-44-kasan-gce
2019/12/01 16:34 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b a76bf83f .config console log report ci-android-44-kasan-gce
2019/12/01 06:13 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b a76bf83f .config console log report ci-android-44-kasan-gce
2019/12/01 00:22 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b a76bf83f .config console log report ci-android-44-kasan-gce
2019/11/30 11:36 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 3a75be00 .config console log report ci-android-44-kasan-gce
2019/11/30 04:06 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 3a75be00 .config console log report ci-android-44-kasan-gce
2019/12/04 11:38 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 0ecb9746 .config console log report ci-android-44-kasan-gce-386
2019/12/04 07:02 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ae13a849 .config console log report ci-android-44-kasan-gce-386
2019/12/04 04:00 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ae13a849 .config console log report ci-android-44-kasan-gce-386
2019/12/04 02:27 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ae13a849 .config console log report ci-android-44-kasan-gce-386
2019/12/03 23:25 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ae13a849 .config console log report ci-android-44-kasan-gce-386
2019/12/03 21:48 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ae13a849 .config console log report ci-android-44-kasan-gce-386
2019/12/03 20:01 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ae13a849 .config console log report ci-android-44-kasan-gce-386
2019/12/03 19:25 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ae13a849 .config console log report ci-android-44-kasan-gce-386
2019/12/03 14:45 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ab342da3 .config console log report ci-android-44-kasan-gce-386
2019/12/03 13:28 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ab342da3 .config console log report ci-android-44-kasan-gce-386
2019/12/03 11:56 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ab342da3 .config console log report ci-android-44-kasan-gce-386
2019/12/03 00:24 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ab342da3 .config console log report ci-android-44-kasan-gce-386
2019/12/02 19:31 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f879db37 .config console log report ci-android-44-kasan-gce-386
2019/12/02 14:27 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f879db37 .config console log report ci-android-44-kasan-gce-386
2019/12/02 10:39 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f879db37 .config console log report ci-android-44-kasan-gce-386
2019/12/02 09:55 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f879db37 .config console log report ci-android-44-kasan-gce-386
2019/12/02 01:14 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f879db37 .config console log report ci-android-44-kasan-gce-386
2019/12/01 13:12 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b a76bf83f .config console log report ci-android-44-kasan-gce-386
2019/12/01 11:23 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b a76bf83f .config console log report ci-android-44-kasan-gce-386
2019/12/01 09:47 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b a76bf83f .config console log report ci-android-44-kasan-gce-386
2019/12/01 08:00 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b a76bf83f .config console log report ci-android-44-kasan-gce-386
2019/11/30 19:32 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 3a75be00 .config console log report ci-android-44-kasan-gce-386
2019/11/30 18:04 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 3a75be00 .config console log report ci-android-44-kasan-gce-386
2019/11/30 15:02 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 3a75be00 .config console log report ci-android-44-kasan-gce-386
2019/11/30 09:40 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 3a75be00 .config console log report ci-android-44-kasan-gce-386
2019/11/30 07:41 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 3a75be00 .config console log report ci-android-44-kasan-gce-386
2019/11/30 06:13 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 3a75be00 .config console log report ci-android-44-kasan-gce-386
2019/11/30 04:06 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 3a75be00 .config console log report ci-android-44-kasan-gce-386
2019/11/30 02:59 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 3a75be00 .config console log report ci-android-44-kasan-gce-386
2019/11/30 02:51 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 3a75be00 .config console log report ci-android-44-kasan-gce-386
2019/11/30 01:13 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 3a75be00 .config console log report ci-android-44-kasan-gce-386
* Struck through repros no longer work on HEAD.