syzbot

 sign-in | mailing list | source | docs
🐞 Open [977] ≡ Subsystems 🐞 Fixed [5207] 🐞 Invalid [12453] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

BUG: corrupted list in neigh_mark_dead

Status: fixed on 2019/01/11 01:22
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+6cc2fd1d3bdd2e007363@syzkaller.appspotmail.com
Fix commit: 8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
First crash: 1955d, last: 1950d
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
[PATCH net-next] neighbor: gc_list changes should be protected by table lock 2 (2) 2018/12/11 01:42
BUG: corrupted list in neigh_mark_dead 0 (1) 2018/12/10 05:41

Sample crash report:
list_del corruption. prev->next should be ffff8881cc2b4ff0, but was ffff8881cd58a730
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:53!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 22 Comm: kworker/1:1 Not tainted 4.20.0-rc6+ #337
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_power_efficient neigh_periodic_work
RIP: 0010:__list_del_entry_valid.cold.1+0x48/0x4a lib/list_debug.c:51
Code: d9 60 88 e8 f2 6e d2 fd 0f 0b 48 89 de 48 c7 c7 80 da 60 88 e8 e1 6e d2 fd 0f 0b 48 89 de 48 c7 c7 20 da 60 88 e8 d0 6e d2 fd <0f> 0b 48 89 d9 48 c7 c7 e0 da 60 88 e8 bf 6e d2 fd 0f 0b 48 89 f1
RSP: 0018:ffff8881d945f440 EFLAGS: 00010282
RAX: 0000000000000054 RBX: ffff8881cc2b4ff0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8165e485 RDI: 0000000000000005
cgroup: fork rejected by pids controller in /syz0
RBP: ffff8881d945f458 R08: ffff8881d94505c0 R09: ffffed103b5e5020
R10: ffffed103b5e5020 R11: ffff8881daf28107 R12: ffff8881cc720730
R13: ffffffff89fd1320 R14: ffff8881d945f560 R15: 1ffff1103b28be94
FS:  0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004c4ed8 CR3: 00000001c30f5000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __list_del_entry include/linux/list.h:117 [inline]
 list_del_init include/linux/list.h:159 [inline]
 neigh_mark_dead+0x13b/0x410 net/core/neighbour.c:125
 neigh_periodic_work+0x89a/0xc30 net/core/neighbour.c:905
 process_one_work+0xc90/0x1c40 kernel/workqueue.c:2153
cgroup: fork rejected by pids controller in /syz2
cgroup: fork rejected by pids controller in /syz4
 worker_thread+0x17f/0x1390 kernel/workqueue.c:2296
 kthread+0x35a/0x440 kernel/kthread.c:246
cgroup: fork rejected by pids controller in /syz1
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Modules linked in:
cgroup: fork rejected by pids controller in /syz5
---[ end trace ebf74c0e943e2b32 ]---
RIP: 0010:__list_del_entry_valid.cold.1+0x48/0x4a lib/list_debug.c:51
Code: d9 60 88 e8 f2 6e d2 fd 0f 0b 48 89 de 48 c7 c7 80 da 60 88 e8 e1 6e d2 fd 0f 0b 48 89 de 48 c7 c7 20 da 60 88 e8 d0 6e d2 fd <0f> 0b 48 89 d9 48 c7 c7 e0 da 60 88 e8 bf 6e d2 fd 0f 0b 48 89 f1
RSP: 0018:ffff8881d945f440 EFLAGS: 00010282
RAX: 0000000000000054 RBX: ffff8881cc2b4ff0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8165e485 RDI: 0000000000000005
RBP: ffff8881d945f458 R08: ffff8881d94505c0 R09: ffffed103b5e5020
R10: ffffed103b5e5020 R11: ffff8881daf28107 R12: ffff8881cc720730
R13: ffffffff89fd1320 R14: ffff8881d945f560 R15: 1ffff1103b28be94
FS:  0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004c4ed8 CR3: 000000000946a000 CR4: 00000000001406e0
cgroup: fork rejected by pids controller in /syz3
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (4117):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/11 07:45 net-next-old d8ed257f313f 4093e33b .config console log report syz C ci-upstream-net-kasan-gce
2018/12/10 19:21 net-next-old 4cc1feeb6ffc 6565f24d .config console log report syz C ci-upstream-net-kasan-gce
2018/12/10 18:55 net-next-old 4cc1feeb6ffc 6565f24d .config console log report syz C ci-upstream-net-kasan-gce
2018/12/10 18:30 net-next-old 4cc1feeb6ffc 6565f24d .config console log report syz C ci-upstream-net-kasan-gce
2018/12/10 16:32 net-next-old 4cc1feeb6ffc 6565f24d .config console log report syz C ci-upstream-net-kasan-gce
2018/12/10 04:59 net-next-old a60956ed72f7 96cc4c50 .config console log report syz C ci-upstream-net-kasan-gce
2018/12/09 21:41 net-next-old a60956ed72f7 979179d6 .config console log report syz C ci-upstream-net-kasan-gce
2018/12/09 20:15 net-next-old a60956ed72f7 979179d6 .config console log report syz C ci-upstream-net-kasan-gce
2018/12/09 18:22 net-next-old a60956ed72f7 979179d6 .config console log report syz C ci-upstream-net-kasan-gce
2018/12/09 15:35 net-next-old a60956ed72f7 979179d6 .config console log report syz C ci-upstream-net-kasan-gce
2018/12/09 10:41 net-next-old 97ef7b4c5501 c7918378 .config console log report syz C ci-upstream-net-kasan-gce
2018/12/08 16:48 net-next-old 83af01ba1c2d 60562a1d .config console log report syz C ci-upstream-net-kasan-gce
2018/12/13 03:08 linux-next 14cf8c1d5b90 02613a41 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/13 02:38 linux-next 14cf8c1d5b90 02613a41 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/12 20:04 linux-next 14cf8c1d5b90 c3b10a5d .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/12 15:24 linux-next 14cf8c1d5b90 c3b10a5d .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/12 14:00 linux-next 14cf8c1d5b90 c3b10a5d .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/12 08:49 linux-next 14cf8c1d5b90 7795ae03 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/12 06:31 linux-next 14cf8c1d5b90 7795ae03 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/12 05:56 linux-next 14cf8c1d5b90 7795ae03 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/12 03:14 linux-next 14cf8c1d5b90 7795ae03 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/12 02:09 linux-next 14cf8c1d5b90 7795ae03 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/12 01:06 linux-next 14cf8c1d5b90 7795ae03 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/11 22:52 linux-next 14cf8c1d5b90 7795ae03 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/11 21:20 linux-next 14cf8c1d5b90 7795ae03 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/11 20:58 linux-next 14cf8c1d5b90 7795ae03 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/11 19:43 linux-next 14cf8c1d5b90 7795ae03 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/11 18:40 linux-next 14cf8c1d5b90 7795ae03 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/11 16:43 linux-next 14cf8c1d5b90 7795ae03 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/11 09:58 linux-next 14cf8c1d5b90 4093e33b .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/11 05:15 linux-next 14cf8c1d5b90 4093e33b .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/11 03:58 linux-next 14cf8c1d5b90 4093e33b .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/10 22:54 linux-next 14cf8c1d5b90 6565f24d .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/10 21:46 linux-next 14cf8c1d5b90 6565f24d .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/10 19:49 linux-next 14cf8c1d5b90 6565f24d .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/10 12:55 net-next-old 4cc1feeb6ffc 6565f24d .config console log report syz ci-upstream-net-kasan-gce
2018/12/10 08:19 net-next-old 4cc1feeb6ffc 96cc4c50 .config console log report syz ci-upstream-net-kasan-gce
2018/12/09 20:13 net-next-old a60956ed72f7 979179d6 .config console log report syz ci-upstream-net-kasan-gce
2018/12/09 17:56 net-next-old a60956ed72f7 979179d6 .config console log report syz ci-upstream-net-kasan-gce
2018/12/09 17:14 net-next-old a60956ed72f7 979179d6 .config console log report syz ci-upstream-net-kasan-gce
2018/12/11 10:44 linux-next 14cf8c1d5b90 4093e33b .config console log report syz ci-upstream-linux-next-kasan-gce-root
2018/12/11 11:12 net-next-old d8ed257f313f 4093e33b .config console log report ci-upstream-net-kasan-gce
2018/12/08 12:15 net-next-old 83af01ba1c2d 60562a1d .config console log report ci-upstream-net-kasan-gce
2018/12/13 06:48 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 06:27 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 06:01 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 05:33 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 05:06 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 04:43 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 04:24 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 04:00 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 03:25 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 02:48 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 02:03 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 01:20 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 00:56 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 00:30 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/13 00:02 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 23:34 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 23:06 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 22:42 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 22:23 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 22:06 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 21:50 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 21:49 linux-next 14cf8c1d5b90 02613a41 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 20:48 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 20:00 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 19:14 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 18:43 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 18:20 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 18:01 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 17:31 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 17:06 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 16:37 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 16:14 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 15:53 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 15:10 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 14:08 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 13:30 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 12:52 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 12:24 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 11:54 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 11:32 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/12 11:12 linux-next 14cf8c1d5b90 c3b10a5d .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.