Received: by 2002:a05:7412:3b8b:b0:fc:a2b0:25d7 with SMTP id nd11csp1405790rdb; Sat, 10 Feb 2024 00:11:17 -0800 (PST) X-Google-Smtp-Source: AGHT+IGDuW9Twn9x1+21ndhVVslq+ej9VMgbg0MKQ7xt5AMROCOhoiiEKixYORExLyf8tDUW+4E7 X-Received: by 2002:a17:906:358f:b0:a38:16f3:f25 with SMTP id o15-20020a170906358f00b00a3816f30f25mr1041646ejb.14.1707552677053; Sat, 10 Feb 2024 00:11:17 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1707552677; cv=pass; d=google.com; s=arc-20160816; b=boe71w/Uo4H4XJ+cJsc9Xx+YknhSI32zEUuLPvHaQEEAuI8UA3SLAPQR5eqEd77BzA N2Knx+OD27lABVU94DuWEO08aqGGJ2kI0crfBi4t8vL+fSeyKZ6ZPJ11KOTQNVo9LT3N Gol+UMYOOkcAX+z3vurf0MoYEscALzS6iPh598tbADqPUPj3/Cw7//YiULHJz2RKXImF WjKHTTqSBvcq0xnjrAYd1UOzvFrpYXgQTUHWYCrUxchnRjPvmiY9rFKCvvxh5LSVHZKz +yhviUPkEX7TEK7N3pr9ymP+yZG6Ukxyl+MMN6IvPDm8IOKtnWsUnGQI8rOnpRFtizzd X+HA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:references:in-reply-to:message-id :date:subject:cc:to:from:dkim-signature; bh=rYl2d4jg8VGr885odBjyaGJb+lzTLraSiU4iM1Tv/Gk=; fh=X4Ivd3s+4QB1DsK2AkWoWhPG8cBeX8TPmSIhXsi5FDw=; b=Epxa3uoAcZoS8+bd5b/cfowjO0Fnf1wtIusYKlzxcZlCMInrzt/1M98PehKzzQ//K9 OYdDLOULfw/V33ODT9zp941Fi7iy0DH9xgJkaFPgMMMPd2v3HvsBGrHmxW8823fv9iO8 SLGLwDdJqPI3Jkug8gbdO26vpUx4WV8vakeP7QsBDgF+dB17U35V850bnPOv2eexkpbK MuVXOpuGkva2Bv1oNIQDgaSLFSJmk303CvZ/YEmwKOK5jhk/ZV4XPYtDICNOd+bhr5WX 6t4Ji0KshEYdCpPIYFDT1MsmB/Xq8kArSimre9/NcQYvLwqWxOrUC7H3iyTr/MBiEx/V Io9w==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@amazon.com header.s=amazon201209 header.b=uPi8XWBb; arc=pass (i=1 spf=pass spfdomain=amazon.co.jp dkim=pass dkdomain=amazon.com dmarc=pass fromdomain=amazon.com); spf=pass (google.com: domain of linux-kernel+bounces-60347-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.80.249 as permitted sender) smtp.mailfrom="linux-kernel+bounces-60347-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=amazon.com X-Forwarded-Encrypted: i=2; AJvYcCWHLM02E2MYrXl5ZSj11spZyWHU0kg5faXdWpeFJCc7vNzAj8w2EuorhVPB06957mWMzbxBS5Lzg11mFkcXwZ7t785liHiYkBp37mmU2A== Return-Path: Received: from am.mirrors.kernel.org (am.mirrors.kernel.org. [147.75.80.249]) by mx.google.com with ESMTPS id nb32-20020a1709071ca000b00a3bacd6cf47si1749264ejc.73.2024.02.10.00.11.17 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 10 Feb 2024 00:11:17 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel+bounces-60347-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.80.249 as permitted sender) client-ip=147.75.80.249; Authentication-Results: mx.google.com; dkim=pass header.i=@amazon.com header.s=amazon201209 header.b=uPi8XWBb; arc=pass (i=1 spf=pass spfdomain=amazon.co.jp dkim=pass dkdomain=amazon.com dmarc=pass fromdomain=amazon.com); spf=pass (google.com: domain of linux-kernel+bounces-60347-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.80.249 as permitted sender) smtp.mailfrom="linux-kernel+bounces-60347-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=amazon.com Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by am.mirrors.kernel.org (Postfix) with ESMTPS id E26AA1F21201 for ; Sat, 10 Feb 2024 08:11:15 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id ECF8131758; Sat, 10 Feb 2024 08:11:04 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=amazon.com header.i=@amazon.com header.b="uPi8XWBb" Received: from smtp-fw-9105.amazon.com (smtp-fw-9105.amazon.com [207.171.188.204]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 9507F6AB7; Sat, 10 Feb 2024 08:11:02 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=207.171.188.204 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1707552664; cv=none; b=bF34ObFzJo+IGVvofLUBJmcyzJjAqyzXFgg9KisNPICTaCQGngKv7t+0aaLUD4/eXUQIY81tBPlJlp2wDPkV1FdzFQiZm5ktg7aJhhu9M3ButdMRl3tZSlqVSqACNYtmJgDcrIbzMRZ6CKGiMlhUqwOugJXisRzu+g40c/mwi7c= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1707552664; c=relaxed/simple; bh=AbPkgCagtD1y8tlVBlOB0QD3Xfspe8K5xQIIKN6dAOA=; h=From:To:CC:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=SjTUd9lVyfHxHl5y8Wc/1IoE3PSb+I5XCLsSRCs0XgN56b/rq0TBToHV3UFTCyD4weHEQzL7hnegZefsXI/zT67kHMHgcmgKncQTNmIz/X6GvhdVi2fq5k3HID5KpJx5R+7zfC5IiMyGL0om8XeweuyR03n5ZuELtoZah8vlgyI= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amazon.com; spf=pass smtp.mailfrom=amazon.co.jp; dkim=pass (1024-bit key) header.d=amazon.com header.i=@amazon.com header.b=uPi8XWBb; arc=none smtp.client-ip=207.171.188.204 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amazon.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=amazon.co.jp DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1707552662; x=1739088662; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=rYl2d4jg8VGr885odBjyaGJb+lzTLraSiU4iM1Tv/Gk=; b=uPi8XWBbPP/QN33M3JmF1svtCCSFZxqIPKhaZDLu80rkSxQOvc2h5AE/ GVYPrxkl4x+p/Kxvq71nIUa8EBEXulMgGeQoKZStml7lAdu79oRUDk1+X csiXzdaLuDLLxWgN/q/hCIXqjZkFIO3JmJhc/4LLmM8lHkwQCawmCuP87 A=; X-IronPort-AV: E=Sophos;i="6.05,259,1701129600"; d="scan'208";a="704049959" Received: from pdx4-co-svc-p1-lb2-vlan2.amazon.com (HELO smtpout.prod.us-west-2.prod.farcaster.email.amazon.dev) ([10.25.36.210]) by smtp-border-fw-9105.sea19.amazon.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 10 Feb 2024 08:10:57 +0000 Received: from EX19MTAUWA001.ant.amazon.com [10.0.7.35:38610] by smtpin.naws.us-west-2.prod.farcaster.email.amazon.dev [10.0.25.244:2525] with esmtp (Farcaster) id 35e6c251-706a-4da4-a450-c46bb1c47596; Sat, 10 Feb 2024 08:10:56 +0000 (UTC) X-Farcaster-Flow-ID: 35e6c251-706a-4da4-a450-c46bb1c47596 Received: from EX19D004ANA001.ant.amazon.com (10.37.240.138) by EX19MTAUWA001.ant.amazon.com (10.250.64.217) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1118.40; Sat, 10 Feb 2024 08:10:56 +0000 Received: from 88665a182662.ant.amazon.com (10.187.170.24) by EX19D004ANA001.ant.amazon.com (10.37.240.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1118.40; Sat, 10 Feb 2024 08:10:53 +0000 From: Kuniyuki Iwashima To: CC: , , , , , , , , Subject: Re: [syzbot] [kernel?] KASAN: slab-use-after-free Read in __unix_gc Date: Sat, 10 Feb 2024 00:10:45 -0800 Message-ID: <20240210081045.46999-1-kuniyu@amazon.com> X-Mailer: git-send-email 2.30.2 In-Reply-To: <000000000000ee09930610f42470@google.com> References: <000000000000ee09930610f42470@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: EX19D032UWB001.ant.amazon.com (10.13.139.152) To EX19D004ANA001.ant.amazon.com (10.37.240.138) From: syzbot Date: Fri, 09 Feb 2024 06:57:17 -0800 > Hello, > > syzbot found the following issue on: > > HEAD commit: e7689879d14e ethtool: do not use rtnl in ethnl_default_dum.. > git tree: net-next > console+strace: https://syzkaller.appspot.com/x/log.txt?x=1195b6e0180000 > kernel config: https://syzkaller.appspot.com/x/.config?x=ac1116e4986e7570 > dashboard link: https://syzkaller.appspot.com/bug?extid=5a630f8ca0120ab43f55 > compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=121d9b5c180000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=165f9cec180000 > > Downloadable assets: > disk image: https://storage.googleapis.com/syzbot-assets/c5b791d72e1e/disk-e7689879.raw.xz > vmlinux: https://storage.googleapis.com/syzbot-assets/472cf2131e7b/vmlinux-e7689879.xz > kernel image: https://storage.googleapis.com/syzbot-assets/c1e5a4b33244/bzImage-e7689879.xz > > IMPORTANT: if you fix the issue, please add the following tag to the commit: > Reported-by: syzbot+5a630f8ca0120ab43f55@syzkaller.appspotmail.com > > ================================================================== > BUG: KASAN: slab-use-after-free in __unix_gc+0xe0f/0xf70 #syz dup: INFO: task hung in unix_dgram_sendmsg Here's a fix. https://lore.kernel.org/netdev/20240209220453.96053-1-kuniyu@amazon.com/ Thanks!