syzbot


kernel BUG at net/core/skbuff.c:LINE!

Status: public: reported C repro on 2019/04/12 00:00
Reported-by: syzbot+948bff2aeebe1d375087@syzkaller.appspotmail.com
First crash: 2250d, last: 1598d
Similar bugs (16)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-44 kernel BUG at net/core/skbuff.c:LINE! C 79 1609d 1834d 0/2 public: reported C repro on 2019/04/11 08:44
linux-4.19 kernel BUG at net/core/skbuff.c:LINE! C unreliable 494 599d 1818d 0/1 upstream: reported C repro on 2019/04/27 20:12
android-54 kernel BUG in pfkey_send_acquire C 278 523d 1187d 0/2 auto-obsoleted due to no activity on 2023/04/19 14:24
upstream kernel BUG at net/core/skbuff.c:LINE! (2) net C 562 2273d 2362d 4/26 fixed on 2018/01/29 03:39
android-5-10 kernel BUG in add_grec C error 83 752d 826d 2/2 fixed on 2022/03/29 10:01
android-54 kernel BUG at net/core/skbuff.c:LINE! C 267 338d 1558d 0/2 auto-obsoleted due to no activity on 2023/08/22 15:17
android-414 kernel BUG at net/core/skbuff.c:LINE! C 2743 1597d 1835d 0/1 public: reported C repro on 2019/04/11 00:00
android-5-10 kernel BUG in add_grec (2) C error inconclusive 1039 512d 512d 2/2 fixed on 2023/02/24 12:10
upstream kernel BUG in netem_enqueue net 9 490d 715d 22/26 fixed on 2023/02/24 13:50
android-5-10 kernel BUG in cdc_ncm_fill_tx_frame C error 40 845d 910d 1/2 fixed on 2021/12/29 12:20
upstream kernel BUG at net/core/skbuff.c:LINE! (3) C done 4399 1151d 2268d 19/26 fixed on 2021/03/10 01:48
upstream kernel BUG at net/core/skbuff.c:LINE! sctp 5 2368d 2439d 3/26 fixed on 2017/10/27 10:10
linux-4.19 kernel BUG in pfkey_send_acquire C done 56 1158d 1187d 1/1 fixed on 2021/03/18 08:30
linux-4.14 kernel BUG at net/core/skbuff.c:LINE! C 3066 414d 1833d 0/1 upstream: reported C repro on 2019/04/12 15:43
upstream kernel BUG in llc_sap_action_send_xid_c net C error 61 891d 1105d 20/26 fixed on 2021/11/10 00:50
upstream kernel BUG in pskb_expand_head net C done 1600 434d 885d 22/26 fixed on 2023/02/25 08:02

Sample crash report:
random: sshd: uninitialized urandom read (32 bytes read)
random: crng init done
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:1208!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 2056 Comm: syz-executor722 Not tainted 4.9.148+ #3
task: ffff8801cfec8000 task.stack: ffff8801d6ed8000
RIP: 0010:[<ffffffff822c4b22>]  [<ffffffff822c4b22>] pskb_expand_head+0x842/0x8b0 net/core/skbuff.c:1208
RSP: 0018:ffff8801d6edf880  EFLAGS: 00010293
RAX: ffff8801cfec8000 RBX: ffff8801d2911640 RCX: 0000000002080020
RDX: 0000000000000000 RSI: ffffffff822c4b22 RDI: ffff8801d291171c
RBP: ffff8801d6edf8f8 R08: 0000000000000018 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000002080020
R13: ffff8801d2911704 R14: 0000000000000000 R15: 00000000000000c0
FS:  00007f8e88ec2700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000300 CR3: 00000001ce888000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000000000000 ffffffff822d7d80 ffff8801cfec88a8 ffff8801cfec8000
 ffffffff82812a9a ffff8801d29116c6 0000000000000000 0000000000000004
 ffff8801d6edf8e0 0000000081207265 ffff8801ced1f680 0000000000000040
Call Trace:
 [<ffffffff822c5bf8>] __pskb_pull_tail+0xc8/0xf50 net/core/skbuff.c:1630
 [<ffffffff8274ff46>] pskb_may_pull include/linux/skbuff.h:1971 [inline]
 [<ffffffff8274ff46>] ip6_datagram_recv_specific_ctl+0x1396/0x1580 net/ipv6/datagram.c:702
 [<ffffffff82751374>] ip6_datagram_recv_ctl+0x34/0x40 net/ipv6/datagram.c:726
 [<ffffffff8270c0ca>] rawv6_recvmsg+0x8da/0xac0 net/ipv6/raw.c:516
 [<ffffffff822a78c0>] sock_common_recvmsg+0x110/0x200 net/core/sock.c:2690
 [<ffffffff822a1918>] sock_recvmsg_nosec net/socket.c:750 [inline]
 [<ffffffff822a1918>] sock_recvmsg net/socket.c:757 [inline]
 [<ffffffff822a1918>] sock_recvmsg+0xc8/0x110 net/socket.c:753
 [<ffffffff822a5240>] SYSC_recvfrom net/socket.c:1735 [inline]
 [<ffffffff822a5240>] SyS_recvfrom+0x1f0/0x350 net/socket.c:1707
 [<ffffffff810056bd>] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285
 [<ffffffff82813393>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: ff 48 8b 7d a0 e8 0f fa 22 ff e9 65 fb ff ff 4c 89 ff e8 02 fa 22 ff e9 25 fe ff ff e8 f8 f9 22 ff e9 95 fc ff ff e8 0e 68 05 ff <0f> 0b 48 8b 7d a0 e8 e3 f9 22 ff e9 09 f9 ff ff 48 8b 7d a0 e8 
RIP  [<ffffffff822c4b22>] pskb_expand_head+0x842/0x8b0 net/core/skbuff.c:1208
 RSP <ffff8801d6edf880>
---[ end trace 027b6d34850535ab ]---

Crashes (391):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/01/07 05:03 https://android.googlesource.com/kernel/common android-4.9 043c92bd0517 ee332608 .config console log report syz C ci-android-49-kasan-gce-root
2018/12/23 04:06 https://android.googlesource.com/kernel/common android-4.9 a2f9236e8131 e3bd7ab8 .config console log report syz C ci-android-49-kasan-gce-root
2018/09/01 17:17 https://android.googlesource.com/kernel/common android-4.9 a06ea261bc2a a4718693 .config console log report syz C ci-android-49-kasan-gce-root
2018/08/07 10:39 https://android.googlesource.com/kernel/common android-4.9 47b77b8d01c4 1beb8136 .config console log report syz C ci-android-49-kasan-gce-root
2018/05/24 18:56 https://android.googlesource.com/kernel/common android-4.9 c5aceac71b68 f48c20b8 .config console log report syz C ci-android-49-kasan-gce-root
2018/05/24 18:11 https://android.googlesource.com/kernel/common android-4.9 c5aceac71b68 f48c20b8 .config console log report syz C ci-android-49-kasan-gce
2019/04/30 00:37 https://android.googlesource.com/kernel/common android-4.9 6cf3205cc803 b617407b .config console log report syz ci-android-49-kasan-gce-root
2018/05/24 18:34 https://android.googlesource.com/kernel/common android-4.9 c5aceac71b68 f48c20b8 .config console log report syz ci-android-49-kasan-gce-386
2019/12/03 20:28 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 ae13a849 .config console log report ci-android-49-kasan-gce
2019/12/03 18:00 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 ae13a849 .config console log report ci-android-49-kasan-gce
2019/12/03 14:57 android-4.9 a36b5017c810 ab342da3 .config console log report ci-android-49-kasan-gce-root
2019/12/03 08:30 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 ab342da3 .config console log report ci-android-49-kasan-gce
2019/11/30 10:38 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 3a75be00 .config console log report ci-android-49-kasan-gce
2019/11/30 09:28 android-4.9 a36b5017c810 3a75be00 .config console log report ci-android-49-kasan-gce-root
2019/11/29 13:59 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 d29b9e84 .config console log report ci-android-49-kasan-gce
2019/11/29 11:39 android-4.9 a36b5017c810 d29b9e84 .config console log report ci-android-49-kasan-gce-root
2019/11/29 10:30 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 76357d6f .config console log report ci-android-49-kasan-gce
2019/11/28 08:54 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 0d63f89c .config console log report ci-android-49-kasan-gce
2019/11/28 04:31 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 0d63f89c .config console log report ci-android-49-kasan-gce
2019/11/27 03:22 android-4.9 13ff5130ff6e 1048481f .config console log report ci-android-49-kasan-gce-root
2019/11/24 20:39 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 09:27 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 598ca6c8 .config console log report ci-android-49-kasan-gce
2019/11/23 10:38 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/23 08:22 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 598ca6c8 .config console log report ci-android-49-kasan-gce
2019/11/22 21:35 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 598ca6c8 .config console log report ci-android-49-kasan-gce
2019/11/21 23:33 android-4.9 258971b8e1ac 8098ea0f .config console log report ci-android-49-kasan-gce-root
2019/11/20 06:15 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 f4b7ed07 .config console log report ci-android-49-kasan-gce
2019/11/19 16:18 android-4.9 258971b8e1ac 5bc70212 .config console log report ci-android-49-kasan-gce-root
2019/11/19 12:24 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 5bc70212 .config console log report ci-android-49-kasan-gce
2019/11/19 07:24 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 5bc70212 .config console log report ci-android-49-kasan-gce
2019/11/18 04:26 android-4.9 258971b8e1ac d5696d51 .config console log report ci-android-49-kasan-gce-root
2019/11/18 00:02 android-4.9 258971b8e1ac d5696d51 .config console log report ci-android-49-kasan-gce-root
2019/11/17 08:45 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 d5696d51 .config console log report ci-android-49-kasan-gce
2019/11/17 04:32 android-4.9 258971b8e1ac d5696d51 .config console log report ci-android-49-kasan-gce-root
2019/11/16 03:11 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 cdac920b .config console log report ci-android-49-kasan-gce
2019/11/14 22:13 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a24fe792 .config console log report ci-android-49-kasan-gce
2019/11/14 13:48 https://android.googlesource.com/kernel/common android-4.9 7fe05eede1c8 5d15a967 .config console log report ci-android-49-kasan-gce-root
2019/11/14 03:31 https://android.googlesource.com/kernel/common android-4.9 7fe05eede1c8 048f2d49 .config console log report ci-android-49-kasan-gce-root
2019/11/13 23:26 https://android.googlesource.com/kernel/common android-4.9 7fe05eede1c8 048f2d49 .config console log report ci-android-49-kasan-gce-root
2019/11/13 12:22 https://android.googlesource.com/kernel/common android-4.9 7fe05eede1c8 048f2d49 .config console log report ci-android-49-kasan-gce-root
2019/11/12 19:37 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 048f2d49 .config console log report ci-android-49-kasan-gce
2019/11/12 13:25 https://android.googlesource.com/kernel/common android-4.9 7fe05eede1c8 048f2d49 .config console log report ci-android-49-kasan-gce-root
2019/11/12 07:29 https://android.googlesource.com/kernel/common android-4.9 7fe05eede1c8 048f2d49 .config console log report ci-android-49-kasan-gce-root
2019/11/11 13:06 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 dc438b91 .config console log report ci-android-49-kasan-gce
2019/11/09 13:29 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 dc438b91 .config console log report ci-android-49-kasan-gce
2019/11/08 06:03 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 f39aff9e .config console log report ci-android-49-kasan-gce
2019/12/03 21:58 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 ae13a849 .config console log report ci-android-49-kasan-gce-386
2019/11/21 11:17 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 8098ea0f .config console log report ci-android-49-kasan-gce-386
2019/11/13 05:42 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 048f2d49 .config console log report ci-android-49-kasan-gce-386
2019/11/12 03:09 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 048f2d49 .config console log report ci-android-49-kasan-gce-386
2019/11/10 09:12 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 dc438b91 .config console log report ci-android-49-kasan-gce-386
2018/02/20 00:07 https://android.googlesource.com/kernel/common android-4.9 cdfc8df1d262 c1f526e3 .config console log report ci-android-49-kasan-gce-386
* Struck through repros no longer work on HEAD.