syzbot


WARNING in pfkey_sock_destruct

Status: auto-closed as invalid on 2019/10/25 08:52
Reported-by: syzbot+af38f8966d90776bd0a8@syzkaller.appspotmail.com
First crash: 2302d, last: 2032d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-44 WARNING in pfkey_sock_destruct (2) 2 1833d 1837d 0/2 auto-closed as invalid on 2020/03/14 09:26
upstream WARNING in pfkey_sock_destruct net 16 2115d 2248d 0/28 auto-closed as invalid on 2019/08/04 21:29
android-44 WARNING in pfkey_sock_destruct 2 2155d 2048d 0/2 auto-closed as invalid on 2019/06/26 05:10

Sample crash report:
audit: type=1400 audit(3448.945:3345): avc:  denied  { write } for  pid=24165 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
------------[ cut here ]------------
WARNING: CPU: 0 PID: 24152 at net/key/af_key.c:111 pfkey_sock_destruct+0x30e/0x350 net/key/af_key.c:111
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 24152 Comm: syz-executor.0 Not tainted 4.9.170+ #48
 ffff8801d5197858 ffffffff81b4fb21 0000000000000000 ffffffff82a39ba0
 00000000ffffffff 0000000000000000 0000000000000009 ffff8801d5197938
 ffffffff813f966a 0000000041b58ab3 ffffffff82e2ef22 ffffffff813f9491
Call Trace:
 [<0000000081592e69>] __dump_stack lib/dump_stack.c:15 [inline]
 [<0000000081592e69>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
 [<000000002a971f56>] panic+0x1d9/0x3bd kernel/panic.c:180
 [<00000000914bf2fa>] __warn.cold+0x2f/0x2f kernel/panic.c:546
 [<00000000099b1ccb>] warn_slowpath_null+0x2d/0x40 kernel/panic.c:589
 [<000000008626bb82>] pfkey_sock_destruct+0x30e/0x350 net/key/af_key.c:111
 [<000000006bc1a7e5>] __sk_destruct+0x51/0x590 net/core/sock.c:1429
 [<00000000d1a22dae>] sk_destruct+0x67/0x80 net/core/sock.c:1464
 [<0000000016dbe951>] __sk_free+0x54/0x230 net/core/sock.c:1472
 [<0000000046ba3237>] sk_free+0x2f/0x40 net/core/sock.c:1483
 [<00000000ee476171>] sock_put include/net/sock.h:1598 [inline]
 [<00000000ee476171>] pfkey_release+0x272/0x300 net/key/af_key.c:194
 [<000000002eb01070>] __sock_release+0xd3/0x2c0 net/socket.c:605
 [<000000004e535da2>] sock_close+0x1b/0x30 net/socket.c:1060
 [<0000000055647914>] __fput+0x274/0x720 fs/file_table.c:208
 [<000000006d07fc49>] ____fput+0x16/0x20 fs/file_table.c:244
 [<000000009e218044>] task_work_run+0x108/0x180 kernel/task_work.c:116
 [<00000000e2ffd100>] get_signal+0x1643/0x1aa0 kernel/signal.c:2193
 [<0000000070fdcab9>] do_signal+0x9c/0x1920 arch/x86/kernel/signal.c:807
 [<0000000017bf9618>] exit_to_usermode_loop+0x11c/0x160 arch/x86/entry/common.c:158
 [<0000000053ddb88a>] prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline]
 [<0000000053ddb88a>] syscall_return_slowpath arch/x86/entry/common.c:263 [inline]
 [<0000000053ddb88a>] do_syscall_64+0x3f7/0x570 arch/x86/entry/common.c:290
 [<000000004b5250e6>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/04/29 23:26 https://android.googlesource.com/kernel/common android-4.9 6cf3205cc803 b617407b .config console log report ci-android-49-kasan-gce-root
2019/04/07 23:26 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 c34fde03 .config console log report ci-android-49-kasan-gce
2019/02/16 15:03 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 f42dee6d .config console log report ci-android-49-kasan-gce
2018/08/28 03:49 https://android.googlesource.com/kernel/common android-4.9 09eb2ba5ed0c 7ef1de9e .config console log report ci-android-49-kasan-gce
2018/08/13 11:27 https://android.googlesource.com/kernel/common android-4.9 9dc978d43ec7 7a88b141 .config console log report ci-android-49-kasan-gce-root
2018/08/07 21:25 https://android.googlesource.com/kernel/common android-4.9 47b77b8d01c4 1beb8136 .config console log report ci-android-49-kasan-gce
2018/08/03 14:12 https://android.googlesource.com/kernel/common android-4.9 8b21e85d919c cc4f6d0a .config console log report ci-android-49-kasan-gce
2018/08/02 19:25 https://android.googlesource.com/kernel/common android-4.9 0137ea2134c0 5b7e23bb .config console log report ci-android-49-kasan-gce
2018/08/02 18:45 https://android.googlesource.com/kernel/common android-4.9 0137ea2134c0 0a7cf4ec .config console log report ci-android-49-kasan-gce
2018/11/29 05:07 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 4b6d14f2 .config console log report ci-android-49-kasan-gce-386
* Struck through repros no longer work on HEAD.