syzbot


divide error in netem_enqueue

Status: upstream: reported C repro on 2019/12/26 23:17
Reported-by: syzbot+fdfb67fdb9be00877d3b@syzkaller.appspotmail.com
First crash: 1791d, last: 899d
Fix bisection: failed (error log, bisect log)
  
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream divide error in netem_enqueue C done done 332 841d 1854d 0/28 closed as invalid on 2022/11/15 21:20
android-5-10 divide error in netem_enqueue 2 906d 917d 0/2 auto-closed as invalid on 2022/08/28 08:54
android-5-10 divide error in netem_enqueue (2) 1 798d 798d 0/2 auto-obsoleted due to no activity on 2022/12/14 01:50
linux-4.19 divide error in netem_enqueue C error 55 672d 1457d 0/1 upstream: reported C repro on 2020/11/25 15:52
Last patch testing requests (6)
Created Duration User Patch Repo Result
2023/02/28 15:32 11m retest repro linux-4.14.y report log
2023/02/28 12:32 12m retest repro linux-4.14.y report log
2023/02/28 10:32 10m retest repro linux-4.14.y report log
2022/11/09 11:30 9m retest repro linux-4.14.y report log
2022/11/09 10:30 9m retest repro linux-4.14.y report log
2022/11/09 09:30 9m retest repro linux-4.14.y report log
Fix bisection attempts (6)
Created Duration User Patch Repo Result
2020/06/24 02:05 0m (4) bisect fix linux-4.14.y error job log
2020/05/25 01:41 23m bisect fix linux-4.14.y OK (0) job log log
2020/04/25 01:16 24m bisect fix linux-4.14.y OK (0) job log log
2020/03/26 00:51 24m bisect fix linux-4.14.y OK (0) job log log
2020/02/25 00:18 27m bisect fix linux-4.14.y OK (0) job log log
2020/01/25 23:52 25m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
divide error: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 8253 Comm: syz-executor770 Not tainted 4.14.212-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8880afbce540 task.stack: ffff8880af948000
RIP: 0010:netem_enqueue+0x1364/0x2dec net/sched/sch_netem.c:511
RSP: 0018:ffff8880af94f750 EFLAGS: 00010246
RAX: 00000000ccdcdd6a RBX: ffff8880b16bdcc0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8880a8fb0300 RDI: ffff8880a8fb0384
RBP: 0000000000000020 R08: ffff8880a8fb03d8 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001
R13: ffff8880aff30fa0 R14: 0000000000000000 R15: ffff8880aff30d80
FS:  00007f51342a1700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000200000c0 CR3: 00000000b4890000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 netem_enqueue+0x889/0x2dec net/sched/sch_netem.c:475
 __dev_xmit_skb net/core/dev.c:3225 [inline]
 __dev_queue_xmit+0x121d/0x2480 net/core/dev.c:3489
 __netlink_deliver_tap_skb net/netlink/af_netlink.c:273 [inline]
 __netlink_deliver_tap net/netlink/af_netlink.c:291 [inline]
 netlink_deliver_tap+0x60c/0x7d0 net/netlink/af_netlink.c:302
 netlink_deliver_tap_kernel net/netlink/af_netlink.c:311 [inline]
 netlink_unicast_kernel net/netlink/af_netlink.c:1286 [inline]
 netlink_unicast+0x485/0x610 net/netlink/af_netlink.c:1313
 netlink_sendmsg+0x62e/0xb80 net/netlink/af_netlink.c:1878
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 ___sys_sendmsg+0x6c8/0x800 net/socket.c:2062
 __sys_sendmsg+0xa3/0x120 net/socket.c:2096
 SYSC_sendmsg net/socket.c:2107 [inline]
 SyS_sendmsg+0x27/0x40 net/socket.c:2103
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x44a7d9
RSP: 002b:00007f51342a0ce8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00000000006e0c48 RCX: 000000000044a7d9
RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004
RBP: 00000000006e0c40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006e0c4c
R13: 00007fff25679ddf R14: 00007f51342a19c0 R15: 0000000000000000
Code: 4c 89 44 24 20 89 4c 24 18 89 44 24 10 e8 25 c4 8a fb 4c 8b 44 24 20 8b 4c 24 18 8b 44 24 10 48 8b 34 24 31 d2 2b 8e 84 00 00 00 <f7> f1 48 b8 00 00 00 00 00 fc ff df 48 01 d3 48 89 d9 48 c1 e9 
RIP: netem_enqueue+0x1364/0x2dec net/sched/sch_netem.c:511 RSP: ffff8880af94f750
---[ end trace 32748f232e869aa3 ]---

Crashes (32):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/12/19 12:46 linux-4.14.y 3f2ecb86cb90 04201c06 .config console log report syz C ci2-linux-4-14
2020/12/17 23:49 linux-4.14.y 3f2ecb86cb90 04201c06 .config console log report syz C ci2-linux-4-14
2019/12/26 23:51 linux-4.14.y e1f7d50ae3a3 be5c2c81 .config console log report syz C ci2-linux-4-14
2022/06/06 07:44 linux-4.14.y b8f3be299d51 c8857892 .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/12/15 17:57 linux-4.14.y 9dfbac0e6b86 572bcb40 .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/12/15 01:37 linux-4.14.y 9dfbac0e6b86 f752fb53 .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/11/05 05:03 linux-4.14.y 0447aa205abe 4c1be0be .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/09/13 05:11 linux-4.14.y f96eb53cbd76 3ce60af8 .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/08/21 09:19 linux-4.14.y 162b95d01320 b599f2fc .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/08/10 04:00 linux-4.14.y 46914f96189b 6972b106 .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/06/14 05:34 linux-4.14.y 3d3abdc8ebd3 1ba81399 .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/06/11 00:44 linux-4.14.y 3d3abdc8ebd3 1ba81399 .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/05/15 12:04 linux-4.14.y 7d7d1c0ab3eb 93f844de .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/05/12 07:02 linux-4.14.y 7d7d1c0ab3eb 86294427 .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/04/13 01:01 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/04/08 07:42 linux-4.14.y 0cc244011f40 6a81331a .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/04/07 14:35 linux-4.14.y 0cc244011f40 6a81331a .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/03/15 16:48 linux-4.14.y c7150cd2fa8c fdb2bb2c .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/02/14 01:47 linux-4.14.y 2c8a3fceddf0 98682e5e .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/02/02 08:33 linux-4.14.y 2c8a3fceddf0 19e09687 .config console log report info ci2-linux-4-14 divide error in netem_enqueue
2021/01/06 10:17 linux-4.14.y 1752938529c6 fff20c29 .config console log report info ci2-linux-4-14
2021/01/04 06:52 linux-4.14.y 1752938529c6 79264ae3 .config console log report info ci2-linux-4-14
2020/12/29 04:01 linux-4.14.y 3f2ecb86cb90 8259d56c .config console log report info ci2-linux-4-14
2020/12/28 21:00 linux-4.14.y 3f2ecb86cb90 8259d56c .config console log report info ci2-linux-4-14
2020/12/27 23:15 linux-4.14.y 3f2ecb86cb90 2242f77f .config console log report info ci2-linux-4-14
2020/12/25 22:11 linux-4.14.y 3f2ecb86cb90 821e0b09 .config console log report info ci2-linux-4-14
2020/12/19 14:28 linux-4.14.y 3f2ecb86cb90 04201c06 .config console log report info ci2-linux-4-14
2020/12/04 19:01 linux-4.14.y c196b3a9c83a 20366b87 .config console log report info ci2-linux-4-14
2020/11/28 06:58 linux-4.14.y 87335852c5d9 486f93ef .config console log report info ci2-linux-4-14
2020/11/22 10:15 linux-4.14.y 0df445b0f0da 0d27f508 .config console log report info ci2-linux-4-14
2020/11/07 07:23 linux-4.14.y 6b6446efedb2 cba33199 .config console log report info ci2-linux-4-14
2019/12/26 23:16 linux-4.14.y e1f7d50ae3a3 be5c2c81 .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.