syzbot

 sign-in | mailing list | source | docs
🐞 Open [1570]
≡ Subsystems
🐞 Fixed [6333]
🐞 Invalid [16143]
⬇ Missing Backports [192]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_hist_sample_rtt()

Status: upstream: reported C repro on 2017/11/05 09:05
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+3ca02e1a9272a28e8959b32039154c5605164653@syzkaller.appspotmail.com
First crash: 2866d, last: 1633d
Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: no output from test machine (log)
Repro: C syz .config
  
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Duplicate bugs (5)
duplicates (5):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
BUG: please report to dccp@vger.kernel.org => prev = 2, last = 2 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_his dccp 1 2440d 2440d 0/29 closed as dup on 2019/02/27 00:42
BUG: please report to dccp@vger.kernel.org => prev = 10, last = 10 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_h dccp 1 2386d 2382d 0/29 closed as dup on 2019/02/27 00:42
BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx dccp C unreliable 227 73d 1402d 0/29 closed as dup on 2021/08/30 08:50
BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_his dccp C 7456 1422d 2610d 0/29 closed as dup on 2018/05/09 05:39
BUG: please report to dccp@vger.kernel.org => prev = 5, last = 5 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_his dccp 2 1459d 2451d 0/29 closed as dup on 2019/02/27 00:44
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_hist_sample_rtt() 3 (4) 2018/04/08 21:57
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2025/06/19 12:28 0m retest repro upstream error
2025/06/19 06:42 23m retest repro upstream OK log
2025/06/19 06:42 23m retest repro upstream OK log
2025/06/19 06:42 24m retest repro upstream OK log
2025/05/27 01:35 24m retest repro upstream OK log
2025/05/27 01:35 21m retest repro upstream OK log
2025/05/11 13:05 24m retest repro net-next OK log
2025/04/10 09:45 52m retest repro upstream report log
2025/04/10 05:19 45m retest repro upstream report log
2025/04/10 05:19 34m retest repro upstream report log
▶ ▼ Fix bisection attempts (16)
Created Duration User Patch Repo Result
2021/03/01 06:07 0m bisect fix upstream error job log
2021/02/06 14:29 0m bisect fix upstream error job log
2021/01/07 13:44 12m bisect fix upstream OK (0) job log log
2020/12/07 12:18 12m bisect fix upstream OK (0) job log log
2020/11/07 02:45 12m bisect fix upstream OK (0) job log log
2020/10/07 05:15 13m bisect fix upstream OK (0) job log log
2020/08/27 03:58 13m bisect fix upstream OK (0) job log log
2020/07/26 15:05 14m bisect fix upstream OK (0) job log log
2020/06/15 18:28 15m bisect fix upstream OK (0) job log log
2020/05/16 15:48 13m bisect fix upstream OK (0) job log log
2020/04/16 15:22 14m bisect fix upstream OK (0) job log log
2020/03/17 01:23 15m bisect fix upstream OK (0) job log log
2020/02/12 03:00 15m bisect fix upstream OK (0) job log log
2020/01/13 01:34 14m bisect fix upstream OK (0) job log log
2019/12/11 07:16 14m bisect fix upstream OK (0) job log log
2019/08/01 06:12 16m bisect fix upstream OK (0) job log log

Sample crash report:
netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'.
dccp_close: ABORT with 36 bytes unread
dccp_close: ABORT with 36 bytes unread
BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt()
CPU: 1 PID: 3203 Comm: syz-executor4 Not tainted 4.15.0-rc2-mm1+ #39
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 tfrc_rx_hist_sample_rtt+0x407/0x4d0 net/dccp/ccids/lib/packet_history.c:422
 ccid3_hc_rx_packet_recv+0x690/0xea7 net/dccp/ccids/ccid3.c:765
 ccid_hc_rx_packet_recv net/dccp/ccid.h:185 [inline]
 dccp_deliver_input_to_ccids+0xd9/0x250 net/dccp/input.c:180
 dccp_rcv_established+0x88/0xb0 net/dccp/input.c:378
 dccp_v4_do_rcv+0x12f/0x160 net/dccp/ipv4.c:653
 sk_backlog_rcv include/net/sock.h:907 [inline]
 __sk_receive_skb+0x33e/0xc10 net/core/sock.c:511
 dccp_v4_rcv+0xeeb/0x1bf0 net/dccp/ipv4.c:874
 ip_local_deliver_finish+0x2e2/0xba0 net/ipv4/ip_input.c:216
 NF_HOOK include/linux/netfilter.h:281 [inline]
 ip_local_deliver+0x1ce/0x6e0 net/ipv4/ip_input.c:257
 dst_input include/net/dst.h:449 [inline]
 ip_rcv_finish+0x881/0x19a0 net/ipv4/ip_input.c:397
 NF_HOOK include/linux/netfilter.h:281 [inline]
 ip_rcv+0xc3f/0x1820 net/ipv4/ip_input.c:493
 __netif_receive_skb_core+0x1a3e/0x3450 net/core/dev.c:4461
 __netif_receive_skb+0x2c/0x1b0 net/core/dev.c:4526
 process_backlog+0x203/0x740 net/core/dev.c:5205
 napi_poll net/core/dev.c:5603 [inline]
 net_rx_action+0x792/0x1910 net/core/dev.c:5669
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1133
 </IRQ>
 do_softirq.part.19+0x14d/0x190 kernel/softirq.c:329
 do_softirq kernel/softirq.c:177 [inline]
 __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:182
 local_bh_enable include/linux/bottom_half.h:32 [inline]
 rcu_read_unlock_bh include/linux/rcupdate.h:726 [inline]
 ip_finish_output2+0x8a7/0x1460 net/ipv4/ip_output.c:231
 ip_finish_output+0x85e/0xd10 net/ipv4/ip_output.c:317
 NF_HOOK_COND include/linux/netfilter.h:270 [inline]
 ip_output+0x1cc/0x860 net/ipv4/ip_output.c:405
 dst_output include/net/dst.h:443 [inline]
 ip_local_out+0x95/0x160 net/ipv4/ip_output.c:124
 ip_queue_xmit+0x8c0/0x18e0 net/ipv4/ip_output.c:504
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 inet_sendmsg+0x11f/0x5e0 net/ipv4/af_inet.c:763
 sock_sendmsg_nosec net/socket.c:636 [inline]
 sock_sendmsg+0xca/0x110 net/socket.c:646
 sock_write_iter+0x320/0x5e0 net/socket.c:915
 call_write_iter include/linux/fs.h:1776 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x68a/0x970 fs/read_write.c:482
 vfs_write+0x18f/0x510 fs/read_write.c:544
 SYSC_write fs/read_write.c:589 [inline]
 SyS_write+0xef/0x220 fs/read_write.c:581
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452a39
RSP: 002b:00007f99dda90c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f99dda91700 RCX: 0000000000452a39
RDX: 000000000000005a RSI: 000000002077f000 RDI: 0000000000000005
RBP: 00007ffdf44f9750 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000
R13: 00007ffdf44f96cf R14: 00007f99dda919c0 R15: 000000000000000a
dccp_close: ABORT with 36 bytes unread
dccp_close: ABORT with 36 bytes unread
dccp_close: ABORT with 36 bytes unread
dccp_close: ABORT with 36 bytes unread
dccp_close: ABORT with 36 bytes unread
dccp_close: ABORT with 2 bytes unread
dccp_close: ABORT with 36 bytes unread
dccp_close: ABORT with 36 bytes unread
BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt()
CPU: 0 PID: 3237 Comm: syz-executor4 Not tainted 4.15.0-rc2-mm1+ #39
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 tfrc_rx_hist_sample_rtt+0x407/0x4d0 net/dccp/ccids/lib/packet_history.c:422
 ccid3_hc_rx_packet_recv+0x690/0xea7 net/dccp/ccids/ccid3.c:765
 ccid_hc_rx_packet_recv net/dccp/ccid.h:185 [inline]
 dccp_deliver_input_to_ccids+0xd9/0x250 net/dccp/input.c:180
 dccp_rcv_established+0x88/0xb0 net/dccp/input.c:378
 dccp_v4_do_rcv+0x12f/0x160 net/dccp/ipv4.c:653
 sk_backlog_rcv include/net/sock.h:907 [inline]
 __sk_receive_skb+0x33e/0xc10 net/core/sock.c:511
 dccp_v4_rcv+0xeeb/0x1bf0 net/dccp/ipv4.c:874
 ip_local_deliver_finish+0x2e2/0xba0 net/ipv4/ip_input.c:216
 NF_HOOK include/linux/netfilter.h:281 [inline]
 ip_local_deliver+0x1ce/0x6e0 net/ipv4/ip_input.c:257
 dst_input include/net/dst.h:449 [inline]
 ip_rcv_finish+0x881/0x19a0 net/ipv4/ip_input.c:397
 NF_HOOK include/linux/netfilter.h:281 [inline]
 ip_rcv+0xc3f/0x1820 net/ipv4/ip_input.c:493
 __netif_receive_skb_core+0x1a3e/0x3450 net/core/dev.c:4461
 __netif_receive_skb+0x2c/0x1b0 net/core/dev.c:4526
 process_backlog+0x203/0x740 net/core/dev.c:5205
 napi_poll net/core/dev.c:5603 [inline]
 net_rx_action+0x792/0x1910 net/core/dev.c:5669
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1133
 </IRQ>
 do_softirq.part.19+0x14d/0x190 kernel/softirq.c:329
 do_softirq kernel/softirq.c:177 [inline]
 __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:182
 local_bh_enable include/linux/bottom_half.h:32 [inline]
 rcu_read_unlock_bh include/linux/rcupdate.h:726 [inline]
 ip_finish_output2+0x8a7/0x1460 net/ipv4/ip_output.c:231
 ip_finish_output+0x85e/0xd10 net/ipv4/ip_output.c:317
 NF_HOOK_COND include/linux/netfilter.h:270 [inline]
 ip_output+0x1cc/0x860 net/ipv4/ip_output.c:405
 dst_output include/net/dst.h:443 [inline]
 ip_local_out+0x95/0x160 net/ipv4/ip_output.c:124
 ip_queue_xmit+0x8c0/0x18e0 net/ipv4/ip_output.c:504
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 inet_sendmsg+0x11f/0x5e0 net/ipv4/af_inet.c:763
 sock_sendmsg_nosec net/socket.c:636 [inline]
 sock_sendmsg+0xca/0x110 net/socket.c:646
 sock_write_iter+0x320/0x5e0 net/socket.c:915
 call_write_iter include/linux/fs.h:1776 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x68a/0x970 fs/read_write.c:482
 vfs_write+0x18f/0x510 fs/read_write.c:544
 SYSC_write fs/read_write.c:589 [inline]
 SyS_write+0xef/0x220 fs/read_write.c:581
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452a39
RSP: 002b:00007f99dda90c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f99dda91700 RCX: 0000000000452a39
RDX: 000000000000005a RSI: 000000002077f000 RDI: 0000000000000005
RBP: 00007ffdf44f9750 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000
R13: 00007ffdf44f96cf R14: 00007f99dda919c0 R15: 000000000000000a
BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt()
CPU: 0 PID: 3269 Comm: syz-executor3 Not tainted 4.15.0-rc2-mm1+ #39
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 tfrc_rx_hist_sample_rtt+0x407/0x4d0 net/dccp/ccids/lib/packet_history.c:422
 ccid3_hc_rx_packet_recv+0x690/0xea7 net/dccp/ccids/ccid3.c:765
 ccid_hc_rx_packet_recv net/dccp/ccid.h:185 [inline]
 dccp_deliver_input_to_ccids+0xd9/0x250 net/dccp/input.c:180
 dccp_rcv_established+0x88/0xb0 net/dccp/input.c:378
 dccp_v4_do_rcv+0x12f/0x160 net/dccp/ipv4.c:653
 sk_backlog_rcv include/net/sock.h:907 [inline]
 __sk_receive_skb+0x33e/0xc10 net/core/sock.c:511
 dccp_v4_rcv+0xeeb/0x1bf0 net/dccp/ipv4.c:874
 ip_local_deliver_finish+0x2e2/0xba0 net/ipv4/ip_input.c:216
 NF_HOOK include/linux/netfilter.h:281 [inline]
 ip_local_deliver+0x1ce/0x6e0 net/ipv4/ip_input.c:257
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1133
 </IRQ>
 do_softirq.part.19+0x14d/0x190 kernel/softirq.c:329
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1133
 </IRQ>
 do_softirq.part.19+0x14d/0x190 kernel/softirq.c:329
 do_softirq kernel/softirq.c:177 [inline]
 __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:182
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1133
 </IRQ>
 do_softirq.part.19+0x14d/0x190 kernel/softirq.c:329
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1133
 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1133
 </IRQ>
 do_softirq.part.19+0x14d/0x190 kernel/softirq.c:329
 do_softirq kernel/softirq.c:177 [inline]
 __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:182
 local_bh_enable include/linux/bottom_half.h:32 [inline]
 rcu_read_unlock_bh include/linux/rcupdate.h:726 [inline]
 ip_finish_output2+0x8a7/0x1460 net/ipv4/ip_output.c:231
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 local_bh_enable include/linux/bottom_half.h:32 [inline]
 rcu_read_unlock_bh include/linux/rcupdate.h:726 [inline]
 ip_finish_output2+0x8a7/0x1460 net/ipv4/ip_output.c:231
 ip_finish_output+0x85e/0xd10 net/ipv4/ip_output.c:317
 NF_HOOK_COND include/linux/netfilter.h:270 [inline]
 ip_output+0x1cc/0x860 net/ipv4/ip_output.c:405
 dst_output include/net/dst.h:443 [inline]
 ip_local_out+0x95/0x160 net/ipv4/ip_output.c:124
 ip_queue_xmit+0x8c0/0x18e0 net/ipv4/ip_output.c:504
 dst_output include/net/dst.h:443 [inline]
 ip_local_out+0x95/0x160 net/ipv4/ip_output.c:124
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 inet_sendmsg+0x11f/0x5e0 net/ipv4/af_inet.c:763
 sock_sendmsg_nosec net/socket.c:636 [inline]
 sock_sendmsg+0xca/0x110 net/socket.c:646
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
RSP: 002b:00007f99dda90c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 inet_sendmsg+0x11f/0x5e0 net/ipv4/af_inet.c:763
 sock_sendmsg_nosec net/socket.c:636 [inline]
 sock_sendmsg+0xca/0x110 net/socket.c:646
 sock_write_iter+0x320/0x5e0 net/socket.c:915
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 inet_sendmsg+0x11f/0x5e0 net/ipv4/af_inet.c:763
 sock_sendmsg_nosec net/socket.c:636 [inline]
 sock_sendmsg+0xca/0x110 net/socket.c:646
 sock_write_iter+0x320/0x5e0 net/socket.c:915
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 inet_sendmsg+0x11f/0x5e0 net/ipv4/af_inet.c:763
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 inet_sendmsg+0x11f/0x5e0 net/ipv4/af_inet.c:763
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 inet_sendmsg+0x11f/0x5e0 net/ipv4/af_inet.c:763
 sock_sendmsg_nosec net/socket.c:636 [inline]
 sock_sendmsg+0xca/0x110 net/socket.c:646
 sock_write_iter+0x320/0x5e0 net/socket.c:915
R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000
 NF_HOOK_COND include/linux/netfilter.h:270 [inline]
 ip_output+0x1cc/0x860 net/ipv4/ip_output.c:405
 dst_output include/net/dst.h:443 [inline]
 ip_local_out+0x95/0x160 net/ipv4/ip_output.c:124
 ip_queue_xmit+0x8c0/0x18e0 net/ipv4/ip_output.c:504
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 dccp_transmit_skb+0x9ac/0x10f0 net/dccp/output.c:142
 dccp_xmit_packet+0x20f/0x730 net/dccp/output.c:281
 dccp_write_xmit+0x17d/0x1d0 net/dccp/output.c:363
 dccp_sendmsg+0x6d0/0xa80 net/dccp/proto.c:808
 NF_HOOK_COND include/linux/netfilter.h:270 [inline]
 ip_output+0x1cc/0x860 net/ipv4/ip_output.c:405
 dst_output include/net/dst.h:443 [inline]
 ip_local_out+0x95/0x160 net/ipv4/ip_output.c:124
 ip_queue_xmit+0x8c0/0x18e0 net/ipv4/ip_output.c:504
 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1133
 </IRQ>
 do_softirq.part.19+0x14d/0x190 kernel/softirq.c:329
 do_softirq kernel/softirq.c:177 [inline]
 __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:182
 local_bh_enable include/linux/bottom_half.h:32 [inline]
 rcu_read_unlock_bh include/linux/rcupdate.h:726 [inline]
 ip_finish_output2+0x8a7/0x1460 net/ipv4/ip_output.c:231
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 napi_poll net/core/dev.c:5603 [inline]
 net_rx_action+0x792/0x1910 net/core/dev.c:5669
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 __netif_receive_skb+0x2c/0x1b0 net/core/dev.c:4526
 process_backlog+0x203/0x740 net/core/dev.c:5205
 napi_poll net/core/dev.c:5603 [inline]
 net_rx_action+0x792/0x1910 net/core/dev.c:5669
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 process_backlog+0x203/0x740 net/core/dev.c:5205
 napi_poll net/core/dev.c:5603 [inline]
 net_rx_action+0x792/0x1910 net/core/dev.c:5669
 __netif_receive_skb+0x2c/0x1b0 net/core/dev.c:4526
 process_backlog+0x203/0x740 net/core/dev.c:5205
 napi_poll net/core/dev.c:5603 [inline]
 net_rx_action+0x792/0x1910 net/core/dev.c:5669
 napi_poll net/core/dev.c:5603 [inline]
 net_rx_action+0x792/0x1910 net/core/dev.c:5669
 __netif_receive_skb+0x2c/0x1b0 net/core/dev.c:4526
 process_backlog+0x203/0x740 net/core/dev.c:5205
 napi_poll net/core/dev.c:5603 [inline]
 net_rx_action+0x792/0x1910 net/core/dev.c:5669
 __netif_receive_skb+0x2c/0x1b0 net/core/dev.c:4526
 process_backlog+0x203/0x740 net/core/dev.c:5205
 napi_poll net/core/dev.c:5603 [inline]
 net_rx_action+0x792/0x1910 net/core/dev.c:5669
 __netif_receive_skb+0x2c/0x1b0 net/core/dev.c:4526
 process_backlog+0x203/0x740 net/core/dev.c:5205
 napi_poll net/core/dev.c:5603 [inline]
 net_rx_action+0x792/0x1910 net/core/dev.c:5669
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 __netif_receive_skb+0x2c/0x1b0 net/core/dev.c:4526
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
R13: 00007ffe4a4ec4cf R14: 00007fd7f91a09c0 R15: 000000000000000a

Crashes (281):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/12/09 23:01 mmots 82bcf1def3b5 5ad0ce95 .config console log report syz ci-upstream-mmots-kasan-gce
2018/01/18 09:52 upstream 1d966eb4d632 56cc113a .config console log report syz C ci-upstream-kasan-gce
2018/01/18 09:52 mmots ce3c209f6733 56cc113a .config console log report syz C ci-upstream-mmots-kasan-gce
2018/01/18 09:33 linux-next a362f6d2cdbd 56cc113a .config console log report syz C ci-upstream-next-kasan-gce
2017/12/07 19:36 linux-next e40fd8d6b4d9 5d643f8e .config console log report syz ci-upstream-next-kasan-gce
2017/12/06 21:39 upstream e56d565d67ae 5d643f8e .config console log report syz ci-upstream-kasan-gce
2018/04/04 00:22 upstream f2d285669aae 676bd07e .config console log report ci-upstream-kasan-gce-root
2018/04/03 15:22 upstream 642e7fd23353 676bd07e .config console log report ci-upstream-kasan-gce-root
2018/03/03 09:25 upstream 0573fed92b67 2c6f473e .config console log report ci-upstream-kasan-gce
2018/01/27 09:47 upstream c4e0ca7fa241 1d18b112 .config console log report ci-upstream-kasan-gce-386
2018/01/18 09:53 net-next-old 4f7d58517f46 56cc113a .config console log report syz C ci-upstream-net-kasan-gce
2018/04/13 06:16 net-next-old 17dec0a94915 eb2295de .config console log report ci-upstream-net-kasan-gce
2018/04/13 02:05 net-next-old 17dec0a94915 eb2295de .config console log report ci-upstream-net-kasan-gce
2018/04/11 13:55 net-next-old 17dec0a94915 8b8de427 .config console log report ci-upstream-net-kasan-gce
2018/04/11 07:52 net-next-old 17dec0a94915 8b8de427 .config console log report ci-upstream-net-kasan-gce
2018/04/11 02:20 net-next-old 17dec0a94915 8b8de427 .config console log report ci-upstream-net-kasan-gce
2018/04/10 20:14 net-next-old 17dec0a94915 8b8de427 .config console log report ci-upstream-net-kasan-gce
2018/04/10 07:01 net-next-old 17dec0a94915 b9f65507 .config console log report ci-upstream-net-kasan-gce
2018/04/09 13:36 net-next-old 17dec0a94915 f13fb445 .config console log report ci-upstream-net-kasan-gce
2018/04/09 04:38 net-next-old 17dec0a94915 77bd5117 .config console log report ci-upstream-net-kasan-gce
2018/04/08 23:06 net-next-old 17dec0a94915 77bd5117 .config console log report ci-upstream-net-kasan-gce
2018/04/08 16:28 net-next-old 17dec0a94915 77bd5117 .config console log report ci-upstream-net-kasan-gce
2018/04/08 01:40 net-next-old 17dec0a94915 66f22a7f .config console log report ci-upstream-net-kasan-gce
2018/04/05 11:54 net-next-old 17dec0a94915 5e1ccffc .config console log report ci-upstream-net-kasan-gce
2018/04/05 07:35 net-next-old 17dec0a94915 676bd07e .config console log report ci-upstream-net-kasan-gce
2018/04/04 22:02 net-next-old 17dec0a94915 676bd07e .config console log report ci-upstream-net-kasan-gce
2018/04/04 06:04 net-next-old 4608f064532c 676bd07e .config console log report ci-upstream-net-kasan-gce
2018/04/04 02:34 net-next-old 4608f064532c 676bd07e .config console log report ci-upstream-net-kasan-gce
2018/04/03 02:29 net-next-old 159f02977b2f 676bd07e .config console log report ci-upstream-net-kasan-gce
2018/04/02 14:38 net-next-old 28e9c1d530b4 dc889257 .config console log report ci-upstream-net-kasan-gce
2018/03/23 09:40 net-next-old 6686c459e144 2e9d9054 .config console log report ci-upstream-net-kasan-gce
2018/03/20 10:13 net-next-old c314c7ba4038 7e7d7ed2 .config console log report ci-upstream-net-kasan-gce
2018/03/17 23:18 net-next-old d7cb44496a9b 08dacaa0 .config console log report ci-upstream-net-kasan-gce
2018/03/15 01:10 net-next-old a870a02cc963 08dacaa0 .config console log report ci-upstream-net-kasan-gce
2018/03/14 08:55 net-next-old be9fc0971a5c 08dacaa0 .config console log report ci-upstream-net-kasan-gce
2018/03/10 20:45 net-next-old f44b1886a5f8 36d1c454 .config console log report ci-upstream-net-kasan-gce
2018/03/07 21:16 net-next-old 30855ffc29b9 a5e76540 .config console log report ci-upstream-net-kasan-gce
2018/02/28 01:55 net-next-old 3f5a68300a40 05b5a32c .config console log report ci-upstream-net-kasan-gce
2018/02/18 11:22 net-next-old 1ec010e70593 833f78c7 .config console log report ci-upstream-net-kasan-gce
2018/02/16 12:30 net-next-old 35ed663f5f4f c8b3f7c1 .config console log report ci-upstream-net-kasan-gce
2018/02/14 08:51 net-next-old 77079683617b 88bc17df .config console log report ci-upstream-net-kasan-gce
2018/02/11 11:12 net-next-old 9a61df9e5f74 4e9b726d .config console log report ci-upstream-net-kasan-gce
2018/02/11 05:45 net-next-old 9a61df9e5f74 4e9b726d .config console log report ci-upstream-net-kasan-gce
2018/02/11 04:19 net-next-old 9a61df9e5f74 4e9b726d .config console log report ci-upstream-net-kasan-gce
2018/02/11 01:05 net-next-old 9a61df9e5f74 4e9b726d .config console log report ci-upstream-net-kasan-gce
2018/02/09 22:46 net-next-old 617aebe6a97e 2b6b214c .config console log report ci-upstream-net-kasan-gce
2018/02/09 13:10 net-next-old 617aebe6a97e 9fb5ec43 .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.