syzbot


WARNING in pskb_expand_head
Status: upstream: reported C repro on 2021/01/24 20:51
Reported-by: syzbot+a1c17e56a8a62294c714@syzkaller.appspotmail.com
First crash: 490d, last: 2d10h

Cause bisection: introduced by (bisect log) :
commit 3226b158e67cfaa677fd180152bfb28989cb2fac
Author: Eric Dumazet <edumazet@google.com>
Date: Wed Jan 13 16:18:19 2021 +0000

  net: avoid 32 x truesize under-estimation for tiny skbs

Crash: WARNING in pskb_expand_head (log)
Repro: C syz .config

Sample crash report:
RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00000000000f4240 R14: 0000000000020d81 R15: 00007ffdc49a5924
 </TASK>
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3938 at mm/page_alloc.c:5383 current_gfp_context include/linux/sched/mm.h:204 [inline]
WARNING: CPU: 1 PID: 3938 at mm/page_alloc.c:5383 __alloc_pages+0x45d/0x500 mm/page_alloc.c:5395
Modules linked in:
CPU: 1 PID: 3938 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__alloc_pages+0x45d/0x500 mm/page_alloc.c:5383
Code: be c9 00 00 00 48 c7 c7 c0 31 d8 89 c6 05 f1 8e e9 0b 01 e8 ca 26 6e 07 e9 6a ff ff ff 0f 0b e9 a0 fd ff ff 40 80 e5 3f eb 88 <0f> 0b e9 18 ff ff ff 4c 89 ef 44 89 e6 45 31 ed e8 ee 5f ff ff e9
RSP: 0018:ffffc9000344f740 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 1ffff92000689ee9 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000060a20
RBP: 0000000000000000 R08: 00000000000a2a20 R09: 0000000000000001
R10: ffffffff874594ed R11: 0000000000000000 R12: 000000007ffff180
R13: 0000000000060a20 R14: 0000000000000000 R15: 0000000000000000
FS:  00005555570bd300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc6cd2ea540 CR3: 0000000077c10000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 __alloc_pages_node include/linux/gfp.h:587 [inline]
 alloc_pages_node include/linux/gfp.h:610 [inline]
 kmalloc_large_node+0x62/0x130 mm/slub.c:4428
 __kmalloc_node_track_caller+0x2ec/0x360 mm/slub.c:4933
 kmalloc_reserve net/core/skbuff.c:362 [inline]
 pskb_expand_head+0xf23/0x1070 net/core/skbuff.c:1700
 __skb_grow include/linux/skbuff.h:2987 [inline]
 tun_napi_alloc_frags drivers/net/tun.c:1462 [inline]
 tun_get_user+0x1ef9/0x3b00 drivers/net/tun.c:1816
 tun_chr_write_iter+0xdb/0x200 drivers/net/tun.c:2015
 call_write_iter include/linux/fs.h:2050 [inline]
 do_iter_readv_writev+0x3d1/0x640 fs/read_write.c:726
 do_iter_write+0x182/0x700 fs/read_write.c:852
 vfs_writev+0x1aa/0x630 fs/read_write.c:925
 do_writev+0x133/0x2f0 fs/read_write.c:968
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fc6cd2b4c39
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39
RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003
RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00000000000f4240 R14: 0000000000020d81 R15: 00007ffdc49a5924
 </TASK>

Crashes (168):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2022/05/24 08:12 upstream 1e57930e9f40 e7f9308d .config log report syz C WARNING in pskb_expand_head
ci-upstream-bpf-kasan-gce 2022/02/23 07:44 bpf 8940e6b669ca 6e821dbf .config log report syz C WARNING in pskb_expand_head
ci-upstream-net-this-kasan-gce 2022/02/23 07:44 net ef527f968ae0 6e821dbf .config log report syz C WARNING in pskb_expand_head
ci-upstream-net-kasan-gce 2022/02/24 20:49 net-next fee62ea77204 b28851a4 .config log report syz C WARNING in pskb_expand_head
ci-upstream-net-kasan-gce 2022/02/23 07:44 net-next ee8f97efa7a5 6e821dbf .config log report syz C WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2022/02/23 07:43 bpf-next e5313968c41b 6e821dbf .config log report syz C WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2021/01/20 21:48 bpf-next 7d68e3828842 d4f4eca5 .config log report syz C WARNING in pskb_expand_head
ci-upstream-kasan-gce-root 2022/04/26 01:01 upstream d615b5416f8a 152baedd .config log report info WARNING in pskb_expand_head
ci-upstream-kasan-gce-smack-root 2022/04/25 05:46 upstream 5206548f6e67 131df97d .config log report info WARNING in pskb_expand_head
ci-upstream-kasan-gce-smack-root 2022/04/14 04:12 upstream a19944809fe9 b17b2923 .config log report info WARNING in pskb_expand_head
ci-upstream-kasan-gce-smack-root 2022/03/21 23:18 upstream f443e374ae13 e2d91b1d .config log report info WARNING in pskb_expand_head
ci-upstream-kasan-gce-root 2022/03/16 01:13 upstream 56e337f2cf13 9e8eaa75 .config log report info WARNING in pskb_expand_head
ci-upstream-kasan-gce-root 2022/03/14 21:33 upstream 09688c0166e7 9e8eaa75 .config log report info WARNING in pskb_expand_head
ci-upstream-kasan-gce-smack-root 2022/03/13 10:48 upstream aad611a868d1 9e8eaa75 .config log report info WARNING in pskb_expand_head
ci-upstream-kasan-gce-root 2022/03/13 06:28 upstream aad611a868d1 9e8eaa75 .config log report info WARNING in pskb_expand_head
ci-upstream-kasan-gce-root 2022/03/10 20:54 upstream 3bf7edc84a9e 9e8eaa75 .config log report info WARNING in pskb_expand_head
ci-upstream-kasan-gce-root 2022/02/28 12:34 upstream 52a025546731 45a13a73 .config log report info WARNING in pskb_expand_head
ci-upstream-kasan-gce-root 2022/02/06 10:35 upstream 90c9e950c0de a7dab638 .config log report info WARNING in pskb_expand_head
ci-upstream-kasan-gce-root 2022/02/01 07:16 upstream 26291c54e111 6b7c57fe .config log report info WARNING in pskb_expand_head
ci-qemu-upstream-386 2021/11/24 13:53 upstream 5d9f4cf36721 545ab074 .config log report info WARNING in pskb_expand_head
ci-upstream-net-this-kasan-gce 2022/03/09 02:05 net e5417cbf7ab5 9e8eaa75 .config log report info WARNING in pskb_expand_head
ci-upstream-net-this-kasan-gce 2022/03/04 02:52 net b949c21fc23e 45a13a73 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-kasan-gce 2022/02/24 23:34 bpf 8940e6b669ca b28851a4 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-kasan-gce 2022/02/21 12:02 bpf 8940e6b669ca 3cd800e4 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-kasan-gce 2022/02/18 01:49 bpf 45ce4b4f9009 3cd800e4 .config log report info WARNING in pskb_expand_head
ci-upstream-net-this-kasan-gce 2022/02/06 09:07 net 59085208e4a2 a7dab638 .config log report info WARNING in pskb_expand_head
ci-upstream-net-this-kasan-gce 2022/01/19 16:58 net 99845220d3c3 0620189b .config log report info WARNING in pskb_expand_head
ci-upstream-net-this-kasan-gce 2022/01/15 06:44 net 9d6d7f1cb67c 723cfaf0 .config log report info WARNING in pskb_expand_head
ci-upstream-net-this-kasan-gce 2022/01/15 01:19 net fb80445c438c 53e00b45 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-kasan-gce 2022/01/04 15:11 bpf d6d86830705f 7f723fbe .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-kasan-gce 2021/12/31 08:31 bpf 819d11507f66 36bd2e48 .config log report info WARNING in pskb_expand_head
ci-upstream-net-this-kasan-gce 2021/12/30 08:31 net f7397cd24c59 6cc879d4 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-kasan-gce 2021/12/27 16:02 bpf 819d11507f66 5140bd58 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-kasan-gce 2021/12/20 10:31 bpf 819d11507f66 021b36cb .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-kasan-gce 2021/12/20 09:20 bpf 819d11507f66 021b36cb .config log report info WARNING in pskb_expand_head
ci-upstream-net-this-kasan-gce 2021/12/15 20:39 net 1d1c950faa81 572bcb40 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-kasan-gce 2021/12/14 04:39 bpf 0be2516f865f 5d14b1ea .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-kasan-gce 2021/12/10 19:07 bpf 0be2516f865f 49ca1f59 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2022/05/21 10:41 bpf-next 7aa424e02a04 7268fa62 .config log report info WARNING in pskb_expand_head
ci-upstream-net-kasan-gce 2022/04/05 02:50 net-next 2975dbdc3989 5915c2cb .config log report info WARNING in pskb_expand_head
ci-upstream-net-kasan-gce 2022/03/11 17:47 net-next 59d5923536ac 9e8eaa75 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2022/03/11 07:03 bpf-next 6789ab9668d9 9e8eaa75 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2022/03/06 04:14 bpf-next caec54953482 7bdd8b2c .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2022/02/18 23:16 bpf-next e5313968c41b 3cd800e4 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2022/02/05 12:38 bpf-next 0908a66ad112 a7dab638 .config log report info WARNING in pskb_expand_head
ci-upstream-net-kasan-gce 2022/01/25 06:22 net-next de8a820df2ac 2cbffd88 .config log report info WARNING in pskb_expand_head
ci-upstream-net-kasan-gce 2022/01/21 20:48 net-next fe8152b38d3a 214351e1 .config log report info WARNING in pskb_expand_head
ci-upstream-net-kasan-gce 2022/01/21 13:37 net-next fe8152b38d3a ab3d9f17 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2022/01/10 20:15 bpf-next 775a64e3845c ddb0ab8c .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2022/01/08 07:57 bpf-next 8134b5063264 2ca0d385 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2022/01/07 15:48 bpf-next e4a3d6a6a19a 2ca0d385 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2021/12/31 10:42 bpf-next 4b443bc1785f 36bd2e48 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2021/12/13 12:35 bpf-next 4b443bc1785f 49ca1f59 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2021/12/08 15:30 bpf-next fda684fb5ec9 a4a2a501 .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2021/12/07 07:42 bpf-next d5284dedccdb 0230ba3e .config log report info WARNING in pskb_expand_head
ci-upstream-bpf-next-kasan-gce 2021/01/20 20:42 bpf-next 7d68e3828842 d4f4eca5 .config log report info WARNING in pskb_expand_head
ci-upstream-linux-next-kasan-gce-root 2022/04/20 19:19 linux-next f1244c81da13 160a3f31 .config log report info WARNING in pskb_expand_head
ci-upstream-linux-next-kasan-gce-root 2022/03/17 08:58 linux-next 91265a6da44d dfa9a8ed .config log report info WARNING in pskb_expand_head
ci-upstream-linux-next-kasan-gce-root 2022/03/16 02:31 linux-next 91265a6da44d 9e8eaa75 .config log report info WARNING in pskb_expand_head
ci-upstream-linux-next-kasan-gce-root 2022/03/11 20:06 linux-next 91265a6da44d 9e8eaa75 .config log report info WARNING in pskb_expand_head
ci-upstream-linux-next-kasan-gce-root 2022/03/02 23:36 linux-next e6ada6df471f 45a13a73 .config log report info WARNING in pskb_expand_head