syzbot


general protection fault in nfqnl_nf_hook_drop

Status: fixed on 2018/02/20 22:33
Fix commit: netfilter: nf_queue: Make the queue_handler pernet
First crash: 2345d, last: 2271d

Sample crash report:
 [<ffffffff8151f26a>] vfs_write+0x18a/0x530 fs/read_write.c:538
 [<ffffffff81521959>] SYSC_write fs/read_write.c:585 [inline]
 [<ffffffff81521959>] SyS_write+0xd9/0x1b0 fs/read_write.c:577
 [<ffffffff837744df>] entry_SYSCALL_64_fastpath+0x1c/0x98
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 5467 Comm: syz-executor2 Not tainted 4.4.115-g55a366596 #14
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8800b44be000 task.stack: ffff8800aba28000
RIP: 0010:[<ffffffff82f9d210>]  [<ffffffff82f9d210>] __read_once_size include/linux/compiler.h:218 [inline]
RIP: 0010:[<ffffffff82f9d210>]  [<ffffffff82f9d210>] nfqnl_nf_hook_drop+0x190/0x3a0 net/netfilter/nfnetlink_queue.c:879
RSP: 0018:ffff8800aba2f998  EFLAGS: 00010202
RAX: 0000000000000007 RBX: 0000000000000003 RCX: ffffffff82f9d209
RDX: 0000000000010000 RSI: ffffc90002f2d000 RDI: ffffffff84418180
RBP: ffff8800aba2f9c8 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff83844400 R11: 1ffff10015745efe R12: dffffc0000000000
R13: ffff8800ac299788 R14: 0000000000000038 R15: 00000000000000b8
FS:  00007ff284c7f700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000006fc274 CR3: 00000001d2ac0000 CR4: 0000000000160670
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffffffff82f9d180 ffffffff83cc6720 ffff8800ac328000 ffff8800ac299788
 ffff8800ac299788 ffff8800ac299780 ffff8800aba2f9f8 ffffffff82f950ce
 ffffffff82f95010 ffffffff843e37e0 ffff8800ac328ab8 dffffc0000000000
Call Trace:
 [<ffffffff82f950ce>] nf_queue_nf_hook_drop+0xbe/0x1d0 net/netfilter/nf_queue.c:108
 [<ffffffff82f90e2b>] nf_unregister_net_hook+0x2ab/0x350 net/netfilter/core.c:154
 [<ffffffff82f90f70>] nf_unregister_hook_list net/netfilter/core.c:434 [inline]
 [<ffffffff82f90f70>] netfilter_net_exit+0x40/0xb0 net/netfilter/core.c:466
 [<ffffffff82e2ab3e>] ops_exit_list.isra.4+0xae/0x150 net/core/net_namespace.c:134
 [<ffffffff82e2c821>] setup_net+0x221/0x3e0 net/core/net_namespace.c:303
 [<ffffffff82e2de92>] copy_net_ns+0xd2/0x190 net/core/net_namespace.c:369
 [<ffffffff81192e06>] create_new_namespaces+0x2f6/0x610 kernel/nsproxy.c:95
 [<ffffffff811933b1>] copy_namespaces+0x291/0x320 kernel/nsproxy.c:150
 [<ffffffff811270e8>] copy_process+0x1d98/0x6120 kernel/fork.c:1506
 [<ffffffff8112b891>] _do_fork+0x151/0xe00 kernel/fork.c:1784
 [<ffffffff8112c617>] SYSC_clone kernel/fork.c:1893 [inline]
 [<ffffffff8112c617>] SyS_clone+0x37/0x50 kernel/fork.c:1887
 [<ffffffff837744df>] entry_SYSCALL_64_fastpath+0x1c/0x98
Code: df 83 01 00 0f 84 d8 00 00 00 4d 8d 77 38 49 bc 00 00 00 00 00 fc ff df 49 81 c7 b8 00 00 00 e8 67 3b 3c fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 0f 85 f4 01 00 00 49 8b 1e e8 7d 8c 2e fe 48 85 
RIP  [<ffffffff82f9d210>] __read_once_size include/linux/compiler.h:218 [inline]
RIP  [<ffffffff82f9d210>] nfqnl_nf_hook_drop+0x190/0x3a0 net/netfilter/nfnetlink_queue.c:879
 RSP <ffff8800aba2f998>
---[ end trace 44ffd1831714d1f7 ]---

Crashes (28535):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/02/20 13:05 https://android.googlesource.com/kernel/common android-4.4 55a366596215 5abac192 .config console log report ci-android-44-kasan-gce
2018/02/20 04:32 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c1f526e3 .config console log report ci-android-44-kasan-gce
2018/02/20 01:17 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c1f526e3 .config console log report ci-android-44-kasan-gce
2018/02/20 00:06 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c1f526e3 .config console log report ci-android-44-kasan-gce
2018/02/19 18:58 https://android.googlesource.com/kernel/common android-4.4 55a366596215 833f78c7 .config console log report ci-android-44-kasan-gce
2018/02/18 01:06 https://android.googlesource.com/kernel/common android-4.4 55a366596215 833f78c7 .config console log report ci-android-44-kasan-gce
2018/02/17 18:35 https://android.googlesource.com/kernel/common android-4.4 55a366596215 833f78c7 .config console log report ci-android-44-kasan-gce
2018/02/17 17:23 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c8b3f7c1 .config console log report ci-android-44-kasan-gce
2018/02/17 13:27 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c8b3f7c1 .config console log report ci-android-44-kasan-gce
2018/02/16 21:50 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c8b3f7c1 .config console log report syz C ci-android-44-kasan-gce
2018/02/16 11:20 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c8b3f7c1 .config console log report ci-android-44-kasan-gce
2018/02/15 21:44 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c8b3f7c1 .config console log report ci-android-44-kasan-gce
2018/02/15 16:50 https://android.googlesource.com/kernel/common android-4.4 5e56f242721e 77ed06bf .config console log report ci-android-44-kasan-gce
2018/02/15 12:04 https://android.googlesource.com/kernel/common android-4.4 5e56f242721e 77ed06bf .config console log report ci-android-44-kasan-gce
2018/02/14 10:08 https://android.googlesource.com/kernel/common android-4.4 78d59f1aea62 88bc17df .config console log report ci-android-44-kasan-gce
2018/02/14 06:40 https://android.googlesource.com/kernel/common android-4.4 78d59f1aea62 88bc17df .config console log report ci-android-44-kasan-gce
2018/02/13 11:44 https://android.googlesource.com/kernel/common android-4.4 78d59f1aea62 88bc17df .config console log report ci-android-44-kasan-gce
2018/02/13 05:59 https://android.googlesource.com/kernel/common android-4.4 78d59f1aea62 88bc17df .config console log report ci-android-44-kasan-gce
2018/02/13 02:34 https://android.googlesource.com/kernel/common android-4.4 78d59f1aea62 88bc17df .config console log report ci-android-44-kasan-gce
2018/02/11 23:33 https://android.googlesource.com/kernel/common android-4.4 0e9bcc1e0a16 4e9b726d .config console log report ci-android-44-kasan-gce
2018/02/11 02:06 https://android.googlesource.com/kernel/common android-4.4 0e9bcc1e0a16 4e9b726d .config console log report ci-android-44-kasan-gce
2018/02/10 16:11 https://android.googlesource.com/kernel/common android-4.4 0e9bcc1e0a16 e67d44e0 .config console log report ci-android-44-kasan-gce
2018/02/09 03:14 https://android.googlesource.com/kernel/common android-4.4 6b8924e4899f 9fb5ec43 .config console log report ci-android-44-kasan-gce
2018/02/08 01:59 https://android.googlesource.com/kernel/common android-4.4 6b8924e4899f 9fb5ec43 .config console log report ci-android-44-kasan-gce
2018/02/07 22:42 https://android.googlesource.com/kernel/common android-4.4 810bdaf1dd74 9fb5ec43 .config console log report ci-android-44-kasan-gce
2018/02/06 16:42 https://android.googlesource.com/kernel/common android-4.4 037d2374ce3e 66c15deb .config console log report ci-android-44-kasan-gce
2018/02/06 08:06 https://android.googlesource.com/kernel/common android-4.4 938ae27ff3dd a1bc9d40 .config console log report ci-android-44-kasan-gce
2018/02/06 06:29 https://android.googlesource.com/kernel/common android-4.4 938ae27ff3dd a1bc9d40 .config console log report ci-android-44-kasan-gce
2018/02/06 04:45 https://android.googlesource.com/kernel/common android-4.4 938ae27ff3dd a1bc9d40 .config console log report ci-android-44-kasan-gce
2018/02/05 21:11 https://android.googlesource.com/kernel/common android-4.4 938ae27ff3dd a1bc9d40 .config console log report ci-android-44-kasan-gce
2018/02/05 17:05 https://android.googlesource.com/kernel/common android-4.4 aa856bd83c43 a1bc9d40 .config console log report ci-android-44-kasan-gce
2018/02/05 04:12 https://android.googlesource.com/kernel/common android-4.4 aa856bd83c43 a1bc9d40 .config console log report ci-android-44-kasan-gce
2018/02/05 02:12 https://android.googlesource.com/kernel/common android-4.4 aa856bd83c43 a1bc9d40 .config console log report ci-android-44-kasan-gce
2018/02/05 01:04 https://android.googlesource.com/kernel/common android-4.4 aa856bd83c43 a1bc9d40 .config console log report ci-android-44-kasan-gce
2018/02/04 19:45 https://android.googlesource.com/kernel/common android-4.4 aa856bd83c43 a1bc9d40 .config console log report ci-android-44-kasan-gce
2018/02/04 12:28 https://android.googlesource.com/kernel/common android-4.4 aa856bd83c43 a1bc9d40 .config console log report ci-android-44-kasan-gce
2018/01/27 20:07 https://android.googlesource.com/kernel/common android-4.4 202e079275c6 08146b1a .config console log report syz C ci-android-44-kasan-gce
2018/01/22 14:09 https://android.googlesource.com/kernel/common android-4.4 3fc4284df70b 228e3d95 .config console log report ci-android-44-kasan-gce
2018/01/19 11:48 https://android.googlesource.com/kernel/common android-4.4 52c02cf1b2a2 161c1d64 .config console log report syz C ci-android-44-kasan-gce
2018/01/17 02:56 https://android.googlesource.com/kernel/common android-4.4 c2f631bf4969 a46e5318 .config console log report syz C ci-android-44-kasan-gce-386
2018/01/16 17:05 https://android.googlesource.com/kernel/common android-4.4 c2f631bf4969 4198e588 .config console log report syz C ci-android-44-kasan-gce
2018/01/15 04:33 https://android.googlesource.com/kernel/common android-4.4 1849cd3d301d 66d492a6 .config console log report syz C ci-android-44-kasan-gce-386
2018/01/14 22:08 https://android.googlesource.com/kernel/common android-4.4 1849cd3d301d 66d492a6 .config console log report syz C ci-android-44-kasan-gce
2018/01/13 20:30 https://android.googlesource.com/kernel/common android-4.4 7902639f8133 c9e7aeae .config console log report ci-android-44-kasan-gce
2018/01/13 13:13 https://android.googlesource.com/kernel/common android-4.4 7902639f8133 c9e7aeae .config console log report ci-android-44-kasan-gce
2018/01/13 02:04 https://android.googlesource.com/kernel/common android-4.4 7902639f8133 9dc808a6 .config console log report syz C ci-android-44-kasan-gce-386
2018/01/12 16:15 https://android.googlesource.com/kernel/common android-4.4 3301b5569f27 9dc808a6 .config console log report syz C ci-android-44-kasan-gce-386
2018/01/12 10:00 https://android.googlesource.com/kernel/common android-4.4 3301b5569f27 9dc808a6 .config console log report syz C ci-android-44-kasan-gce
2018/01/10 02:58 https://android.googlesource.com/kernel/common android-4.4 618a5108ea9c 1f60c828 .config console log report syz C ci-android-44-kasan-gce
2018/01/09 01:32 https://android.googlesource.com/kernel/common android-4.4 eb4909b080c4 11dc42f6 .config console log report syz C ci-android-44-kasan-gce
2018/01/03 11:47 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 00193447 .config console log report syz C ci-android-44-kasan-gce-386
2018/01/03 08:42 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 00193447 .config console log report syz C ci-android-44-kasan-gce-386
2018/01/03 03:58 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 00193447 .config console log report syz C ci-android-44-kasan-gce-386
2018/01/03 03:48 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 00193447 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/31 12:40 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 00193447 .config console log report ci-android-44-kasan-gce
2017/12/30 19:54 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/30 19:32 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/30 17:55 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/30 16:46 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/30 16:32 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/30 14:56 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce
2017/12/30 14:33 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce
2017/12/30 12:55 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce
2017/12/30 11:47 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce
2017/12/30 11:31 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report syz C ci-android-44-kasan-gce
2017/12/29 21:46 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 bb6384b8 .config console log report ci-android-44-kasan-gce-386
2017/12/29 08:51 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 7d240098 .config console log report syz C ci-android-44-kasan-gce
2017/12/29 02:25 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 7d240098 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/28 16:43 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 7d240098 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/24 04:15 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 73aba437 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/22 13:48 https://android.googlesource.com/kernel/common android-4.4 610c835673f3 81fe66b4 .config console log report syz C ci-android-44-kasan-gce-386
2017/12/10 04:50 https://android.googlesource.com/kernel/common android-4.4 ed884ebd80a9 5ad0ce95 .config console log report syz C ci-android-44-kasan-gce
2017/12/09 20:33 https://android.googlesource.com/kernel/common android-4.4 ed884ebd80a9 5ad0ce95 .config console log report syz C ci-android-44-kasan-gce
2017/12/09 19:04 https://android.googlesource.com/kernel/common android-4.4 ed884ebd80a9 5ad0ce95 .config console log report syz C ci-android-44-kasan-gce
2017/12/09 07:54 https://android.googlesource.com/kernel/common android-4.4 ed884ebd80a9 5ad0ce95 .config console log report syz C ci-android-44-kasan-gce
2017/12/09 07:23 https://android.googlesource.com/kernel/common android-4.4 ed884ebd80a9 5ad0ce95 .config console log report syz C ci-android-44-kasan-gce
2018/02/16 21:50 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c8b3f7c1 .config console log report syz C ci-android-44-kasan-gce-386
* Struck through repros no longer work on HEAD.