syzbot


WARNING in netlink_ack

Status: fixed on 2017/12/27 08:45
Subsystems: net
[Documentation on labels]
Fix commit: 48044eb490be netlink: fix netlink_ack() extack race
First crash: 2341d, last: 2340d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in netlink_ack (2) net C 6 2322d 2322d 4/26 fixed on 2018/01/22 13:19

Sample crash report:
audit: type=1400 audit(1513974445.389:7): avc:  denied  { map } for  pid=3143 comm="syzkaller066378" path="/root/syzkaller066378579" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
netlink: 'syzkaller066378': attribute type 5 has an invalid length.
WARNING: CPU: 1 PID: 3143 at net/netlink/af_netlink.c:2365 netlink_ack+0x625/0xa10 net/netlink/af_netlink.c:2363
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 3143 Comm: syzkaller066378 Not tainted 4.15.0-rc4+ #234
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 panic+0x1e4/0x41c kernel/panic.c:183
 __warn+0x1dc/0x200 kernel/panic.c:547
 report_bug+0x211/0x2d0 lib/bug.c:184
 fixup_bug.part.11+0x37/0x80 arch/x86/kernel/traps.c:177
 fixup_bug arch/x86/kernel/traps.c:246 [inline]
 do_error_trap+0x2d7/0x3e0 arch/x86/kernel/traps.c:295
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
 invalid_op+0x22/0x40 arch/x86/entry/entry_64.S:1061
RIP: 0010:netlink_ack+0x625/0xa10 net/netlink/af_netlink.c:2363
RSP: 0018:ffff8801c978f848 EFLAGS: 00010293
RAX: ffff8801cabf4000 RBX: ffff8801c9c69bc0 RCX: ffffffff84369d25
RDX: 0000000000000000 RSI: ffff8801c8e4ce50 RDI: ffff8801c9c69c90
RBP: ffff8801c978f900 R08: ffffed003938d558 R09: ffffed003938d558
R10: 000000000000000e R11: ffffed003938d557 R12: ffff8801c8e4cddc
R13: ffff8801c9c6aa40 R14: ffff8801cc16b140 R15: 1ffff100392f1f0f
 netlink_rcv_skb+0x369/0x460 net/netlink/af_netlink.c:2414
 rtnetlink_rcv+0x1c/0x20 net/core/rtnetlink.c:4423
 netlink_unicast_kernel net/netlink/af_netlink.c:1275 [inline]
 netlink_unicast+0x4e8/0x6f0 net/netlink/af_netlink.c:1301
 netlink_sendmsg+0xa4a/0xe60 net/netlink/af_netlink.c:1864
 sock_sendmsg_nosec net/socket.c:636 [inline]
 sock_sendmsg+0xca/0x110 net/socket.c:646
 sock_write_iter+0x31a/0x5d0 net/socket.c:915
 call_write_iter include/linux/fs.h:1772 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x684/0x970 fs/read_write.c:482
 vfs_write+0x189/0x510 fs/read_write.c:544
 SYSC_write fs/read_write.c:589 [inline]
 SyS_write+0xef/0x220 fs/read_write.c:581
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x43fcd9
RSP: 002b:00007ffca4ac8d48 EFLAGS: 00000217 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fcd9
RDX: 00000000000001a9 RSI: 0000000020800e57 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000004 R11: 0000000000000217 R12: 0000000000401640
R13: 00000000004016d0 R14: 0000000000000000 R15: 0000000000000000
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/12/22 20:29 upstream ead68f216110 8e409090 .config console log report syz C ci-upstream-kasan-gce
2017/12/22 20:07 upstream ead68f216110 8e409090 .config console log report syz C ci-upstream-kasan-gce-386
2017/12/22 23:31 net-next-old fba961ab29e5 8e409090 .config console log report syz C ci-upstream-net-kasan-gce
2017/12/23 21:36 linux-next 0e08c463db38 73aba437 .config console log report syz C ci-upstream-next-kasan-gce
2017/12/22 19:55 mmots 37759fa6d0fa 8e409090 .config console log report syz C ci-upstream-mmots-kasan-gce
2017/12/22 19:40 mmots 37759fa6d0fa 8e409090 .config console log report ci-upstream-mmots-kasan-gce
* Struck through repros no longer work on HEAD.