syzbot

 sign-in | mailing list | source | docs
🐞 Open [1081] ≡ Subsystems 🐞 Fixed [5301] 🐞 Invalid [12651] ⬇ Missing Backports [93] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

kernel BUG at net/ipv6/route.c:LINE!

Status: fixed on 2018/08/08 18:10
Subsystems: net
[Documentation on labels]
Fix commit: e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
First crash: 2136d, last: 2114d
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[PATCH net] ipv6: use fib6_info_hold_safe() when necessary 4 (4) 2018/07/23 18:25
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG at net/ipv6/route.c:LINE! (2) net 82 1794d 1960d 0/26 auto-closed as invalid on 2019/10/25 08:40

Sample crash report:
------------[ cut here ]------------
kernel BUG at net/ipv6/route.c:1268!
invalid opcode: 0000 [#1] SMP KASAN
CPU: 0 PID: 4701 Comm: syz-executor731 Not tainted 4.18.0-rc7+ #174
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:rt6_make_pcpu_route net/ipv6/route.c:1268 [inline]
RIP: 0010:ip6_pol_route+0x9e3/0x1250 net/ipv6/route.c:1925
Code: 31 e4 e8 10 de 04 fc 4c 89 e0 f0 4c 0f b1 33 31 ff 49 89 c4 48 89 c6 e8 fb 12 c7 fb 4d 85 e4 0f 84 0d fa ff ff e8 bd 11 c7 fb <0f> 0b e8 b6 11 c7 fb e8 81 7d b1 fb 31 ff 89 c6 88 85 e0 fd ff ff 
RSP: 0018:ffff8801cf6772a8 EFLAGS: 00010293
RAX: ffff8801cb032500 RBX: ffffe8ffffc5ede0 RCX: ffffffff85b50665
RDX: 0000000000000000 RSI: ffffffff85b50673 RDI: 0000000000000007
RBP: ffff8801cf6774d8 R08: ffff8801cb032500 R09: fffff91ffff8bdbc
R10: fffff91ffff8bdbc R11: ffffe8ffffc5ede7 R12: ffff8801b0a16640
R13: 0000000000000001 R14: ffff8801cc3bad00 R15: 0000000000000001
FS:  00007f74411d0700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000080 CR3: 00000001cc3bb000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ip6_pol_route_output+0x54/0x70 net/ipv6/route.c:2098
 fib6_rule_lookup+0x26e/0x700 net/ipv6/fib6_rules.c:122
 ip6_route_output_flags+0x2c5/0x350 net/ipv6/route.c:2126
 ip6_route_output include/net/ip6_route.h:88 [inline]
 ip6_dst_lookup_tail+0xe3f/0x1da0 net/ipv6/ip6_output.c:951
 ip6_dst_lookup_flow+0xc8/0x270 net/ipv6/ip6_output.c:1079
 ip6_datagram_dst_update+0x75b/0xf80 net/ipv6/datagram.c:91
 __ip6_datagram_connect+0x5fe/0x1470 net/ipv6/datagram.c:250
 ip6_datagram_connect+0x2f/0x50 net/ipv6/datagram.c:273
 inet_dgram_connect+0x154/0x2e0 net/ipv4/af_inet.c:571
 __sys_connect+0x37d/0x4c0 net/socket.c:1674
 __do_sys_connect net/socket.c:1685 [inline]
 __se_sys_connect net/socket.c:1682 [inline]
 __x64_sys_connect+0x73/0xb0 net/socket.c:1682
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x446a29
Code: e8 ac b8 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 
RSP: 002b:00007f74411cfdb8 EFLAGS: 00000297 ORIG_RAX: 000000000000002a
RAX: ffffffffffffffda RBX: 00000000006dcc28 RCX: 0000000000446a29
RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000003
RBP: 00000000006dcc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000297 R12: 00000000006dcc2c
R13: 00007ffd8f84c6ef R14: 00007f74411d09c0 R15: 0000000000000000
Modules linked in:
Dumping ftrace buffer:
   (ftrace buffer empty)
---[ end trace 643531bc965bc360 ]---
RIP: 0010:rt6_make_pcpu_route net/ipv6/route.c:1268 [inline]
RIP: 0010:ip6_pol_route+0x9e3/0x1250 net/ipv6/route.c:1925
Code: 31 e4 e8 10 de 04 fc 4c 89 e0 f0 4c 0f b1 33 31 ff 49 89 c4 48 89 c6 e8 fb 12 c7 fb 4d 85 e4 0f 84 0d fa ff ff e8 bd 11 c7 fb <0f> 0b e8 b6 11 c7 fb e8 81 7d b1 fb 31 ff 89 c6 88 85 e0 fd ff ff 
RSP: 0018:ffff8801cf6772a8 EFLAGS: 00010293
RAX: ffff8801cb032500 RBX: ffffe8ffffc5ede0 RCX: ffffffff85b50665
RDX: 0000000000000000 RSI: ffffffff85b50673 RDI: 0000000000000007
RBP: ffff8801cf6774d8 R08: ffff8801cb032500 R09: fffff91ffff8bdbc
R10: fffff91ffff8bdbc R11: ffffe8ffffc5ede7 R12: ffff8801b0a16640
R13: 0000000000000001 R14: ffff8801cc3bad00 R15: 0000000000000001
FS:  00007f74411d0700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000080 CR3: 00000001cc3bb000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (197):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/08/03 04:10 upstream e30cb13c5a09 5b7e23bb .config console log report syz C ci-upstream-kasan-gce
2018/08/01 19:08 upstream 44960f2a7b63 0a7cf4ec .config console log report syz C ci-upstream-kasan-gce
2018/08/01 06:12 upstream c1d61e7fe376 1477993e .config console log report syz C ci-upstream-kasan-gce-root
2018/07/30 18:18 upstream acb1872577b3 1a381291 .config console log report syz C ci-upstream-kasan-gce
2018/07/30 16:34 upstream acb1872577b3 1a381291 .config console log report syz C ci-upstream-kasan-gce-root
2018/07/15 05:46 upstream c31496dbacc2 92a49505 .config console log report syz C ci-upstream-kasan-gce
2018/08/01 22:12 net-old a94c689e6c9e 0a7cf4ec .config console log report syz C ci-upstream-net-this-kasan-gce
2018/08/01 10:57 net-old cb5c65688673 1477993e .config console log report syz C ci-upstream-net-this-kasan-gce
2018/07/30 17:37 net-old 822fb18a82ab 1a381291 .config console log report syz C ci-upstream-net-this-kasan-gce
2018/08/04 01:28 net-next-old a394b3af206c df7f6947 .config console log report syz C ci-upstream-net-kasan-gce
2018/08/01 06:37 net-next-old d46eeeaf99bc 1477993e .config console log report syz C ci-upstream-net-kasan-gce
2018/07/30 16:58 net-next-old 19725496da56 1a381291 .config console log report syz C ci-upstream-net-kasan-gce
2018/08/03 04:01 linux-next d237c54d5b28 5b7e23bb .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/08/01 06:35 linux-next d1e0b8e0cb7a 1477993e .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/31 03:18 linux-next d1e0b8e0cb7a 1a381291 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/20 22:22 https://github.com/google/kmsan.git master d1c2a46a46f6 af255b09 .config console log report syz C ci-upstream-kmsan-gce
2018/07/18 21:01 linux-next 0b742fe187f7 809256c3 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/08/06 06:38 upstream 1ffaddd029c8 1beb8136 .config console log report ci-upstream-kasan-gce-root
2018/08/05 13:17 upstream 60f5a2173632 1beb8136 .config console log report ci-upstream-kasan-gce-root
2018/08/05 05:35 upstream 60f5a2173632 3476a2df .config console log report ci-upstream-kasan-gce-root
2018/08/05 01:01 upstream 0b5b1f9a78b5 3476a2df .config console log report ci-upstream-kasan-gce-root
2018/08/04 22:02 upstream 0b5b1f9a78b5 3476a2df .config console log report ci-upstream-kasan-gce-root
2018/08/04 07:47 upstream 0b5b1f9a78b5 df7f6947 .config console log report ci-upstream-kasan-gce-root
2018/08/04 04:22 upstream 0b5b1f9a78b5 df7f6947 .config console log report ci-upstream-kasan-gce-root
2018/08/03 22:05 upstream 0585df468e8f cc4f6d0a .config console log report ci-upstream-kasan-gce-root
2018/08/03 20:17 upstream 0585df468e8f cc4f6d0a .config console log report ci-upstream-kasan-gce-root
2018/08/02 07:40 upstream 6b4703768268 0a7cf4ec .config console log report ci-upstream-kasan-gce-root
2018/08/04 20:34 net-old 5607016cd1bb 3476a2df .config console log report ci-upstream-net-this-kasan-gce
2018/08/04 18:22 net-old f664e37dcc52 3476a2df .config console log report ci-upstream-net-this-kasan-gce
2018/08/04 16:31 net-old f664e37dcc52 3476a2df .config console log report ci-upstream-net-this-kasan-gce
2018/08/04 12:54 net-old f664e37dcc52 df7f6947 .config console log report ci-upstream-net-this-kasan-gce
2018/08/04 10:09 net-old f664e37dcc52 df7f6947 .config console log report ci-upstream-net-this-kasan-gce
2018/08/04 05:24 net-old f664e37dcc52 df7f6947 .config console log report ci-upstream-net-this-kasan-gce
2018/08/04 02:29 net-old f664e37dcc52 df7f6947 .config console log report ci-upstream-net-this-kasan-gce
2018/08/04 01:05 net-old f664e37dcc52 df7f6947 .config console log report ci-upstream-net-this-kasan-gce
2018/08/03 18:42 net-old afb41bb03965 cc4f6d0a .config console log report ci-upstream-net-this-kasan-gce
2018/08/03 10:20 net-old afb41bb03965 cc4f6d0a .config console log report ci-upstream-net-this-kasan-gce
2018/08/02 23:04 net-old e30cb13c5a09 5b7e23bb .config console log report ci-upstream-net-this-kasan-gce
2018/08/02 19:47 net-old e30cb13c5a09 5b7e23bb .config console log report ci-upstream-net-this-kasan-gce
2018/08/02 16:35 net-old e6aed040eafb 0a7cf4ec .config console log report ci-upstream-net-this-kasan-gce
2018/08/02 14:56 net-old e6aed040eafb 0a7cf4ec .config console log report ci-upstream-net-this-kasan-gce
2018/08/02 12:29 net-old e6aed040eafb 0a7cf4ec .config console log report ci-upstream-net-this-kasan-gce
2018/08/02 10:36 net-old e6aed040eafb 0a7cf4ec .config console log report ci-upstream-net-this-kasan-gce
2018/08/02 05:48 net-old a94c689e6c9e 0a7cf4ec .config console log report ci-upstream-net-this-kasan-gce
2018/08/01 07:39 net-old 6751e7c66cb8 1477993e .config console log report ci-upstream-net-this-kasan-gce
2018/08/01 05:52 net-old 6751e7c66cb8 1477993e .config console log report ci-upstream-net-this-kasan-gce
2018/08/02 04:46 net-next-old fea49f60c9b7 0a7cf4ec .config console log report ci-upstream-net-kasan-gce
2018/08/02 03:12 net-next-old fea49f60c9b7 0a7cf4ec .config console log report ci-upstream-net-kasan-gce
2018/08/02 02:07 net-next-old fea49f60c9b7 0a7cf4ec .config console log report ci-upstream-net-kasan-gce
2018/08/02 00:23 net-next-old fea49f60c9b7 0a7cf4ec .config console log report ci-upstream-net-kasan-gce
2018/08/01 20:38 net-next-old fea49f60c9b7 0a7cf4ec .config console log report ci-upstream-net-kasan-gce
2018/08/01 17:27 net-next-old e6476c21447c 1477993e .config console log report ci-upstream-net-kasan-gce
2018/08/01 15:39 net-next-old e6476c21447c 1477993e .config console log report ci-upstream-net-kasan-gce
2018/08/01 10:44 net-next-old e6476c21447c 1477993e .config console log report ci-upstream-net-kasan-gce
2018/08/01 08:47 net-next-old e6476c21447c 1477993e .config console log report ci-upstream-net-kasan-gce
2018/08/01 04:41 net-next-old d46eeeaf99bc 1477993e .config console log report ci-upstream-net-kasan-gce
2018/08/01 03:40 net-next-old d46eeeaf99bc 1477993e .config console log report ci-upstream-net-kasan-gce
2018/07/31 23:58 net-next-old d46eeeaf99bc 1477993e .config console log report ci-upstream-net-kasan-gce
2018/07/31 21:52 net-next-old d46eeeaf99bc 1477993e .config console log report ci-upstream-net-kasan-gce
2018/07/31 20:52 net-next-old d46eeeaf99bc 1477993e .config console log report ci-upstream-net-kasan-gce
2018/08/01 01:58 linux-next d1e0b8e0cb7a 1477993e .config console log report ci-upstream-linux-next-kasan-gce-root
2018/07/24 11:57 https://github.com/google/kmsan.git master d1c2a46a46f6 4969639c .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.