kernel panic: audit: backlog limit exceeded

22 views
Skip to first unread message

syzbot

unread,
Feb 22, 2020, 11:58:12 AM2/22/20
to syzkaller...@googlegroups.com
Hello,

syzbot found the following crash on:

HEAD commit: 4fccc250 Linux 4.19.105
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13d36a7ee00000
kernel config: https://syzkaller.appspot.com/x/.config?x=d603c1cf5fa8b03d
dashboard link: https://syzkaller.appspot.com/bug?extid=6ad55874f4c0198b4862
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=16828931e00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=167e4265e00000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+6ad558...@syzkaller.appspotmail.com

audit: type=1305 audit(1582390496.451:41): audit_pid=0 old=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 res=1
audit: type=1305 audit(1582390496.451:42): audit_rate_limit=0 old=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 res=1
audit: audit_backlog=12 > audit_backlog_limit=7
audit: type=1305 audit(1582390496.451:43): audit_backlog_limit=7 old=64 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 res=1
audit: type=1305 audit(1582390496.451:44): audit_backlog_wait_time=0 old=6000 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 res=1
Kernel panic - not syncing: audit: backlog limit exceeded

CPU: 0 PID: 8207 Comm: syz-executor414 Not tainted 4.19.105-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x197/0x210 lib/dump_stack.c:118
panic+0x26a/0x50e kernel/panic.c:186
audit_panic.cold+0x32/0x32 kernel/audit.c:320
audit_log_lost kernel/audit.c:390 [inline]
audit_log_lost+0x8b/0x180 kernel/audit.c:362
audit_log_start kernel/audit.c:1787 [inline]
audit_log_start+0x6f7/0x7a0 kernel/audit.c:1744
audit_log+0x95/0x120 kernel/audit.c:2378
xt_replace_table+0x61d/0x830 net/netfilter/x_tables.c:1418
__do_replace+0x1da/0x930 net/ipv6/netfilter/ip6_tables.c:1087
do_replace net/ipv6/netfilter/ip6_tables.c:1160 [inline]
do_ip6t_set_ctl+0x327/0x498 net/ipv6/netfilter/ip6_tables.c:1684
nf_sockopt net/netfilter/nf_sockopt.c:106 [inline]
nf_setsockopt+0x77/0xd0 net/netfilter/nf_sockopt.c:115
ipv6_setsockopt net/ipv6/ipv6_sockglue.c:938 [inline]
ipv6_setsockopt+0x13e/0x170 net/ipv6/ipv6_sockglue.c:922
tcp_setsockopt net/ipv4/tcp.c:3082 [inline]
tcp_setsockopt+0x8f/0xe0 net/ipv4/tcp.c:3076
sock_common_setsockopt+0x94/0xd0 net/core/sock.c:3046
__sys_setsockopt+0x17a/0x280 net/socket.c:1901
__do_sys_setsockopt net/socket.c:1912 [inline]
__se_sys_setsockopt net/socket.c:1909 [inline]
__x64_sys_setsockopt+0xbe/0x150 net/socket.c:1909
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44720a
Code: 49 89 ca b8 37 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 1a e0 fb ff c3 66 0f 1f 84 00 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fa df fb ff c3 66 0f 1f 84 00 00 00 00 00
RSP: 002b:00007ffcbe99c1d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000044720a
RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
RBP: 00007ffcbe99c300 R08: 00000000000003b8 R09: 0000000000004000
R10: 00000000006d7b40 R11: 0000000000000286 R12: 00007ffcbe99c200
R13: 00000000006d9d60 R14: 0000000000000029 R15: 00000000006d7ba0
Kernel Offset: disabled
Rebooting in 86400 seconds..


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this bug, for details see:
https://goo.gl/tpsmEJ#testing-patches

syzbot

unread,
Feb 24, 2020, 4:05:11 AM2/24/20
to syzkaller...@googlegroups.com
Hello,

syzbot found the following crash on:

HEAD commit: 98db2bf2 Linux 4.14.171
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1066d245e00000
kernel config: https://syzkaller.appspot.com/x/.config?x=365f8162d5a0794b
dashboard link: https://syzkaller.appspot.com/bug?extid=64e7ca138c88d4d4fd45
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=160aea7ee00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1352fde9e00000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+64e7ca...@syzkaller.appspotmail.com

audit: type=1305 audit(1582534915.969:41): audit_pid=0 old=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 res=1
audit: type=1305 audit(1582534915.969:42): audit_rate_limit=0 old=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 res=1
audit: audit_backlog=13 > audit_backlog_limit=7
audit: type=1305 audit(1582534915.969:43): audit_backlog_limit=7 old=64 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 res=1
audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=7
Kernel panic - not syncing: audit: backlog limit exceeded

CPU: 1 PID: 7255 Comm: syz-executor057 Not tainted 4.14.171-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x142/0x197 lib/dump_stack.c:58
panic+0x1f9/0x42d kernel/panic.c:183
audit_panic.cold+0x32/0x32 kernel/audit.c:280
audit_log_lost kernel/audit.c:350 [inline]
audit_log_lost+0x56/0x100 kernel/audit.c:322
audit_log_start kernel/audit.c:1734 [inline]
audit_log_start+0x5e5/0x690 kernel/audit.c:1690
audit_log+0x85/0x100 kernel/audit.c:2336
xt_replace_table+0x446/0x620 net/netfilter/x_tables.c:1266
__do_replace+0x191/0x5b0 net/ipv4/netfilter/ip_tables.c:1069
do_replace net/ipv4/netfilter/ip_tables.c:1142 [inline]
do_ipt_set_ctl+0x296/0x3ee net/ipv4/netfilter/ip_tables.c:1674
nf_sockopt net/netfilter/nf_sockopt.c:106 [inline]
nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:115
ip_setsockopt net/ipv4/ip_sockglue.c:1255 [inline]
ip_setsockopt+0x9b/0xb0 net/ipv4/ip_sockglue.c:1240
tcp_setsockopt net/ipv4/tcp.c:2826 [inline]
tcp_setsockopt+0x84/0xd0 net/ipv4/tcp.c:2820
sock_common_setsockopt+0x94/0xd0 net/core/sock.c:2968
SYSC_setsockopt net/socket.c:1865 [inline]
SyS_setsockopt+0x13c/0x210 net/socket.c:1844
do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x44720a
RSP: 002b:00007ffd8589a678 EFLAGS: 00000202 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000044720a
RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007ffd8589a7a0 R08: 0000000000000408 R09: 0000000000004000
R10: 00000000006daa80 R11: 0000000000000202 R12: 00007ffd8589a6a0
R13: 00000000006dbf20 R14: 0000000000000000 R15: 00000000006daae0
Reply all
Reply to author
Forward
0 new messages