syzbot


kernel BUG in add_grec

Status: fixed on 2022/12/13 18:12
Reported-by: syzbot+a6a3eb29e4bd79f252f6@syzkaller.appspotmail.com
Fix commit: ad3f1d9bf162 ipv6: ensure sane device mtu in tunnels
First crash: 595d, last: 537d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 kernel BUG in add_grec C error 83 790d 864d 2/2 fixed on 2022/03/29 10:01
android-54 kernel BUG at net/core/skbuff.c:LINE! C 267 377d 1597d 0/2 auto-obsoleted due to no activity on 2023/08/22 15:17
android-5-10 kernel BUG in add_grec (2) C error inconclusive 1039 550d 550d 2/2 fixed on 2023/02/24 12:10
android-5-10 kernel BUG in cdc_ncm_fill_tx_frame C error 40 883d 948d 1/2 fixed on 2021/12/29 12:20
Last patch testing requests (17)
Created Duration User Patch Repo Result
2022/12/09 07:46 10m jun.nie@linaro.org patch android13-5.15-lts report log
2022/12/09 06:49 18m jun.nie@linaro.org android13-5.15-lts OK log
2022/12/06 11:52 17m jun.nie@linaro.org patch android13-5.15-lts OK log
2022/12/06 08:32 18m jun.nie@linaro.org https://android.googlesource.com/kernel/common 4154968fe841 OK log
2022/11/30 13:44 15m jun.nie@linaro.org https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 44f1dc2e821d OK log
2022/11/30 04:20 18m jun.nie@linaro.org https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 9233ab8198d8 report log
2022/11/30 01:14 16m jun.nie@linaro.org https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 1454a26cb1ab report log
2022/11/29 03:02 15m jun.nie@linaro.org git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git bd8a595958a5 OK log
2022/11/28 15:35 17m jun.nie@linaro.org git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 4f5365f77018 OK log
2022/11/28 03:20 20m jun.nie@linaro.org git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git a3f2f5ac9d61 report log
2022/11/28 01:24 6m jun.nie@linaro.org git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 8bb7eca972ad5 error OK
2022/11/26 13:51 15m jun.nie@linaro.org git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git linux-5.15.y OK log
2022/11/26 02:54 6m jun.nie@linaro.org git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 0fcfb00b28c0 error OK
2022/11/25 02:58 5m jun.nie@linaro.org git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git linux-5.15.y error OK
2022/11/25 02:24 7m jun.nie@linaro.org git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git df0cc57e057f18e error OK
2022/11/24 07:54 15m jun.nie@linaro.org git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git f443e374ae131 OK log
2022/11/24 04:17 17m jun.nie@linaro.org upstream OK log

Sample crash report:
skbuff: skb_over_panic: text:ffffffff845d9324 len:76 put:20 head:ffff88810e53e400 data:ffff88810e53e440 tail:0x8c end:0x80 dev:syztnl1
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:113!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 423 Comm: kworker/0:2 Not tainted 5.15.74-syzkaller-00001-g4ec71a9ec769 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Workqueue: ipv6_addrconf addrconf_dad_work
RIP: 0010:skb_panic+0x14c/0x150 net/core/skbuff.c:113
Code: c7 a0 70 be 85 48 8b 75 c0 48 8b 55 b8 8b 4d d4 44 8b 45 d0 4c 8b 4d c8 31 c0 53 41 56 41 55 41 54 e8 03 fe dc 00 48 83 c4 20 <0f> 0b 66 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 78 4c
RSP: 0018:ffffc9000033f8c8 EFLAGS: 00010282
RAX: 0000000000000086 RBX: ffff88810b756000 RCX: bea430fce5d36e00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffc9000033f910 R08: ffffffff815838e9 R09: ffffed103ee065e8
R10: ffffed103ee065e8 R11: 1ffff1103ee065e7 R12: ffff88810e53e440
R13: 000000000000008c R14: 0000000000000080 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000010d1b0000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 skb_over_panic net/core/skbuff.c:118 [inline]
 skb_put+0x153/0x210 net/core/skbuff.c:2039
 add_grhead net/ipv6/mcast.c:1855 [inline]
 add_grec+0xf74/0x13d0 net/ipv6/mcast.c:1989
 mld_send_initial_cr net/ipv6/mcast.c:2236 [inline]
 ipv6_mc_dad_complete+0x246/0x5f0 net/ipv6/mcast.c:2247
 addrconf_dad_completed+0x733/0xe20 net/ipv6/addrconf.c:4248
 addrconf_dad_work+0xd8f/0x1680
 process_one_work+0x6db/0xc00 kernel/workqueue.c:2313
 worker_thread+0xb3e/0x1340 kernel/workqueue.c:2460
 kthread+0x41c/0x500 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30
 </TASK>
Modules linked in:
---[ end trace 7e3eaf38d94d6fae ]---
RIP: 0010:skb_panic+0x14c/0x150 net/core/skbuff.c:113
Code: c7 a0 70 be 85 48 8b 75 c0 48 8b 55 b8 8b 4d d4 44 8b 45 d0 4c 8b 4d c8 31 c0 53 41 56 41 55 41 54 e8 03 fe dc 00 48 83 c4 20 <0f> 0b 66 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 78 4c
RSP: 0018:ffffc9000033f8c8 EFLAGS: 00010282
RAX: 0000000000000086 RBX: ffff88810b756000 RCX: bea430fce5d36e00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffc9000033f910 R08: ffffffff815838e9 R09: ffffed103ee065e8
R10: ffffed103ee065e8 R11: 1ffff1103ee065e7 R12: ffff88810e53e440
R13: 000000000000008c R14: 0000000000000080 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000000680f000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (38):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/11/22 20:11 android13-5.15-lts 4ec71a9ec769 9da37ae8 .config strace log report syz C ci2-android-5-15 kernel BUG in add_grec
2022/12/06 21:18 android13-5.15-lts 92f701cae0bc d88f3abb .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 kernel BUG in add_grec
2022/12/02 15:47 android13-5.15-lts 92f701cae0bc e080de16 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 kernel BUG in add_grec
2022/11/29 17:26 android13-5.15-lts d9d889009b78 579a3740 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 kernel BUG in add_grec
2022/11/28 10:23 android13-5.15-lts 4ec71a9ec769 f4470a7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 kernel BUG in add_grec
2022/11/27 12:38 android13-5.15-lts 4ec71a9ec769 f4470a7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 kernel BUG in add_grec
2022/11/27 02:57 android13-5.15-lts 4ec71a9ec769 f4470a7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 kernel BUG in add_grec
2022/11/24 14:08 android13-5.15-lts 4ec71a9ec769 ff68ff8f .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/11/22 16:41 android13-5.15-lts 4ec71a9ec769 9da37ae8 .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/11/20 18:20 android13-5.15-lts 4ec71a9ec769 5bb70014 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 kernel BUG in add_grec
2022/11/20 18:01 android13-5.15-lts 4ec71a9ec769 5bb70014 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 kernel BUG in add_grec
2022/11/20 01:17 android13-5.15-lts 4ec71a9ec769 5bb70014 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 kernel BUG in add_grec
2022/11/18 03:24 android13-5.15-lts 4ec71a9ec769 5bb70014 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 kernel BUG in add_grec
2022/11/11 05:00 android13-5.15-lts 7f2e600bf63a f42ee5d8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 kernel BUG in add_grec
2022/11/11 03:32 android13-5.15-lts 7f2e600bf63a f42ee5d8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 kernel BUG in add_grec
2022/11/11 01:16 android13-5.15-lts 7f2e600bf63a 3ead01ad .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/11/10 18:12 android13-5.15-lts 7f2e600bf63a 3ead01ad .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/11/09 14:39 android13-5.15-lts 7f2e600bf63a bebca8b7 .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/11/09 00:52 android13-5.15-lts 7f2e600bf63a 5fa28208 .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/11/07 11:43 android13-5.15-lts 7f2e600bf63a 6d752409 .config console log report info [disk image] [vmlinux] ci2-android-5-15 kernel BUG in add_grec
2022/11/07 09:41 android13-5.15-lts 7f2e600bf63a 6d752409 .config console log report info [disk image] [vmlinux] ci2-android-5-15 kernel BUG in add_grec
2022/11/04 17:15 android13-5.15-lts 7f2e600bf63a 6d752409 .config console log report info [disk image] [vmlinux] ci2-android-5-15 kernel BUG in add_grec
2022/11/03 23:58 android13-5.15-lts 7f2e600bf63a 6d752409 .config console log report info [disk image] [vmlinux] ci2-android-5-15 kernel BUG in add_grec
2022/11/03 12:01 android13-5.15-lts 7f2e600bf63a 7a2ebf95 .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/11/01 20:37 android13-5.15-lts 7f2e600bf63a 08977f5d .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/10/29 02:24 android13-5.15-lts 7f2e600bf63a 899d812a .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/10/29 01:21 android13-5.15-lts 7f2e600bf63a 899d812a .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/10/28 00:39 android13-5.15-lts 7f2e600bf63a 5c716ff6 .config console log report info [disk image] [vmlinux] ci2-android-5-15 kernel BUG in add_grec
2022/10/26 20:01 android13-5.15-lts 7f2e600bf63a 86777b7f .config console log report info [disk image] [vmlinux] ci2-android-5-15 kernel BUG in add_grec
2022/10/26 02:22 android13-5.15-lts 7f2e600bf63a 2159e4d2 .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/10/25 23:40 android13-5.15-lts 7f2e600bf63a 2159e4d2 .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/10/21 14:38 android13-5.15-lts 7f2e600bf63a 63e790dd .config console log report info [disk image] [vmlinux] ci2-android-5-15 kernel BUG in add_grec
2022/10/21 10:14 android13-5.15-lts 7f2e600bf63a 63e790dd .config console log report info [disk image] [vmlinux] ci2-android-5-15 kernel BUG in add_grec
2022/10/17 03:03 android13-5.15-lts 44b8b2ac1d96 67cb024c .config console log report info [disk image] [vmlinux] ci2-android-5-15 kernel BUG in add_grec
2022/10/14 00:46 android13-5.15-lts 44b8b2ac1d96 4954e4b2 .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/10/13 22:18 android13-5.15-lts 44b8b2ac1d96 adf90437 .config console log report info ci2-android-5-15 kernel BUG in add_grec
2022/10/11 19:27 android13-5.15-lts 43eb03f7ce81 02b6492e .config console log report info [disk image] [vmlinux] ci2-android-5-15 kernel BUG in add_grec
2022/10/10 11:20 android13-5.15-lts 43eb03f7ce81 aea5da89 .config console log report info ci2-android-5-15 kernel BUG in add_grec
* Struck through repros no longer work on HEAD.