syzbot


kernel BUG in __nf_conntrack_confirm (2)

Status: upstream: reported on 2024/11/24 21:07
Reported-by: syzbot+d9f0333db477af76d04d@syzkaller.appspotmail.com
First crash: 26d, last: 5d12h
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 kernel BUG in __nf_conntrack_confirm 1 325d 325d 0/3 auto-obsoleted due to no activity on 2024/05/10 11:41

Sample crash report:
------------[ cut here ]------------
kernel BUG at net/netfilter/nf_conntrack_core.c:570!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 5.15.174-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : nf_ct_del_from_dying_or_unconfirmed_list net/netfilter/nf_conntrack_core.c:570 [inline]
pc : __nf_conntrack_confirm+0xd2c/0xd98 net/netfilter/nf_conntrack_core.c:1207
lr : nf_ct_del_from_dying_or_unconfirmed_list net/netfilter/nf_conntrack_core.c:570 [inline]
lr : __nf_conntrack_confirm+0xd2c/0xd98 net/netfilter/nf_conntrack_core.c:1207
sp : ffff80001bd47400
x29: ffff80001bd47470 x28: dfff800000000000 x27: fffffbffeff7c190
x26: ffff0000caa748d0 x25: 0000000000000000 x24: ffff0000caa74890
x23: ffff0000caa74858 x22: 0000000000014991 x21: 0000000000000000
x20: ffff800014b71008 x19: ffff0000caa748c0 x18: 0000000000000100
x17: 0000000000000000 x16: ffff800008305354 x15: 0000000000000003
x14: 1ffff0000296e06c x13: dfff800000000000 x12: ffff7000037a8e64
x11: 0000000000000303 x10: 0000000000000000 x9 : ffff0000c0951b40
x8 : ffff800010364848 x7 : ffff800010363dd4 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800008305484
x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 nf_ct_del_from_dying_or_unconfirmed_list net/netfilter/nf_conntrack_core.c:570 [inline]
 __nf_conntrack_confirm+0xd2c/0xd98 net/netfilter/nf_conntrack_core.c:1207
 nf_conntrack_confirm include/net/netfilter/nf_conntrack_core.h:62 [inline]
 nf_confirm+0x37c/0x50c net/netfilter/nf_conntrack_proto.c:154
 ipv4_confirm+0xec/0x1d4 net/netfilter/nf_conntrack_proto.c:169
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_slow+0xc8/0x1f4 net/netfilter/core.c:584
 nf_hook include/linux/netfilter.h:257 [inline]
 NF_HOOK+0x228/0x3d0 include/linux/netfilter.h:300
 ip_local_deliver+0x11c/0x190 net/ipv4/ip_input.c:252
 dst_input include/net/dst.h:453 [inline]
 ip_rcv_finish+0x22c/0x264 net/ipv4/ip_input.c:447
 NF_HOOK+0x324/0x3d0 include/linux/netfilter.h:302
 ip_rcv+0x78/0x98 net/ipv4/ip_input.c:566
 __netif_receive_skb_one_core net/core/dev.c:5493 [inline]
 __netif_receive_skb+0x18c/0x400 net/core/dev.c:5607
 process_backlog+0x3ec/0x7e0 net/core/dev.c:6484
 __napi_poll+0xb4/0x624 net/core/dev.c:7043
 napi_poll net/core/dev.c:7110 [inline]
 net_rx_action+0x500/0xc10 net/core/dev.c:7200
 handle_softirqs+0x384/0xdbc kernel/softirq.c:558
 run_ksoftirqd+0x6c/0x29c kernel/softirq.c:925
 smpboot_thread_fn+0x4b0/0x920 kernel/smpboot.c:164
 kthread+0x37c/0x45c kernel/kthread.c:334
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
Code: aa1903e2 96a0d408 17fffd3e 96057eeb (d4210000) 
---[ end trace c445fc89faacf3ce ]---

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/16 03:47 linux-5.15.y 963e654022cc 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in __nf_conntrack_confirm
2024/11/24 21:06 linux-5.15.y 0a51d2d4527b 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in __nf_conntrack_confirm
* Struck through repros no longer work on HEAD.