syzbot


WARNING in rtnl_stats_get
Status: fixed on 2022/03/08 16:11
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: 0854a0513321 net: bridge: fix under estimation in br_get_linkxstats_size()
First crash: 400d, last: 207d

Cause bisection: introduced by (bisect log) [no-op commit]:
commit aaf1f990aee40bc74b425ef8f51201ae21b85ed7
Author: Miaohe Lin <linmiaohe@huawei.com>
Date: Fri Feb 26 01:17:53 2021 +0000

  mm/rmap: correct some obsolete comments of anon_vma

Crash: WARNING in kvm_wait (log)
Repro: C syz .config

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 21425 at net/core/rtnetlink.c:5388 rtnl_stats_get+0x80f/0x8c0 net/core/rtnetlink.c:5388
Modules linked in:
CPU: 1 PID: 21425 Comm: syz-executor394 Not tainted 5.13.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:rtnl_stats_get+0x80f/0x8c0 net/core/rtnetlink.c:5388
Code: e9 9c fc ff ff 4c 89 e7 89 0c 24 e8 ab 8b a8 fa 8b 0c 24 e9 bc fc ff ff 4c 89 e7 e8 9b 8b a8 fa e9 df fe ff ff e8 61 85 63 fa <0f> 0b e9 f7 fc ff ff 41 be ea ff ff ff e9 f9 fc ff ff 41 be 97 ff
RSP: 0018:ffffc9000cf77688 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 000000000000012c RCX: 0000000000000000
RDX: ffff8880211754c0 RSI: ffffffff8711571f RDI: 0000000000000003
RBP: ffff8880175aa780 R08: 00000000ffffffa6 R09: ffff88823bd5c04f
R10: ffffffff87115413 R11: 0000000000000001 R12: ffff8880175aab74
R13: ffff8880175aab40 R14: 00000000ffffffa6 R15: 0000000000000006
FS:  0000000001ff9300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000005cfd58 CR3: 000000002cd43000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 rtnetlink_rcv_msg+0x44e/0xad0 net/core/rtnetlink.c:5562
 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2504
 netlink_unicast_kernel net/netlink/af_netlink.c:1314 [inline]
 netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1340
 netlink_sendmsg+0x856/0xd90 net/netlink/af_netlink.c:1929
 sock_sendmsg_nosec net/socket.c:654 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:674
 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2350
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2404
 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2433
 do_syscall_64+0x3a/0xb0 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4440d9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00000000005cfd78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004440d9
RDX: 000000000000f000 RSI: 00000000200000c0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00000000005cfda0 R09: 00000000005cfda0
R10: 00000000005cfda0 R11: 0000000000000246 R12: 00000000005cfd9c
R13: 00000000005cfdd0 R14: 00000000005cfdb0 R15: 00000000000031e1

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2021/09/25 15:25 upstream 7d42e9818258 0740de69 .config log report syz C
Crashes (31):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2021/06/03 11:27 upstream 324c92e5e0ee 0740de69 .config log report syz C WARNING in rtnl_stats_get
ci-upstream-net-this-kasan-gce 2021/06/03 13:31 net ab00f3e051e8 0740de69 .config log report syz C WARNING in rtnl_stats_get
ci-upstream-net-kasan-gce 2021/06/03 13:42 net-next 270d47dc1fc4 0740de69 .config log report syz C WARNING in rtnl_stats_get
ci-upstream-kasan-gce 2021/08/04 07:55 upstream d5ad8ec3cfb5 6c236867 .config log report info WARNING in rtnl_stats_get
ci-upstream-kasan-gce-smack-root 2021/07/31 23:32 upstream f3438b4c4e69 6c236867 .config log report info WARNING in rtnl_stats_get
ci-upstream-kasan-gce-smack-root 2021/07/17 21:34 upstream d980cc0620ae f115ae98 .config log report info WARNING in rtnl_stats_get
ci-upstream-kasan-gce 2021/07/11 18:47 upstream 3dbdb38e2869 8f5a7b8c .config log report info WARNING in rtnl_stats_get
ci-upstream-kasan-gce 2021/07/02 12:57 upstream 3dbdb38e2869 658ebc66 .config log report info WARNING in rtnl_stats_get
ci-upstream-kasan-gce 2021/06/03 08:32 upstream 324c92e5e0ee 0740de69 .config log report info WARNING in rtnl_stats_get
ci-upstream-kasan-gce-smack-root 2021/04/23 21:11 upstream 18a3c5f7abfd 17f0b706 .config log report info WARNING in rtnl_stats_get
ci-upstream-kasan-gce 2021/04/23 05:01 upstream 90c911ad7445 590921a5 .config log report info WARNING in rtnl_stats_get
ci-upstream-kasan-gce-root 2021/04/22 08:07 upstream 16fc44d6387e 2bc8999a .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-kasan-gce 2021/08/25 18:14 bpf 5b029a32cfe4 b599f2fc .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-kasan-gce 2021/08/22 08:35 bpf 316749009fdf b599f2fc .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-kasan-gce 2021/08/19 04:39 bpf 3776f3517ed9 a2fe1cb5 .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-kasan-gce 2021/08/08 16:11 bpf c4eb1f403243 6972b106 .config log report info WARNING in rtnl_stats_get
ci-upstream-net-this-kasan-gce 2021/07/13 16:54 net 71ce9d92fc70 fa0594c3 .config log report info WARNING in rtnl_stats_get
ci-upstream-net-this-kasan-gce 2021/07/07 12:43 net ccd27f05ae7b 4846d5c1 .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-kasan-gce 2021/06/24 19:59 bpf c2f5c57d99de 0edbbe31 .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-kasan-gce 2021/06/14 02:30 bpf 11fc79fc9f2e 1ba81399 .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-next-kasan-gce 2021/11/01 15:41 bpf-next f48ad69097fe 098b5d53 .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-next-kasan-gce 2021/10/30 08:48 bpf-next f48ad69097fe 098b5d53 .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-next-kasan-gce 2021/10/26 05:29 bpf-next 57c8d362cefe c1132b49 .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-next-kasan-gce 2021/10/25 17:51 bpf-next c825f5fee19c 4f0000ee .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-next-kasan-gce 2021/10/25 09:55 bpf-next c825f5fee19c 4f0000ee .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-next-kasan-gce 2021/10/24 19:06 bpf-next c825f5fee19c 282f03fb .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-next-kasan-gce 2021/10/24 11:40 bpf-next c825f5fee19c 282f03fb .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-next-kasan-gce 2021/10/23 02:50 bpf-next 29da17c48886 282f03fb .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-next-kasan-gce 2021/10/21 20:11 bpf-next db5b6a46f43a c5cb7da8 .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-next-kasan-gce 2021/08/08 00:37 bpf-next c83ae15dc947 6972b106 .config log report info WARNING in rtnl_stats_get
ci-upstream-bpf-next-kasan-gce 2021/05/06 23:54 bpf-next 3733bfbbdd28 06585184 .config log report info WARNING in rtnl_stats_get