syzbot


kernel BUG at include/linux/skbuff.h:LINE!

Status: closed as invalid on 2019/04/03 06:33
First crash: 2286d, last: 2282d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG at include/linux/skbuff.h:LINE! net 3 2137d 2146d 11/26 fixed on 2018/10/31 02:03
linux-4.14 kernel BUG at include/linux/skbuff.h:LINE! C 184 453d 1239d 0/1 upstream: reported C repro on 2021/01/06 05:53
upstream kernel BUG in __skb_gso_segment net C done 11 727d 726d 22/26 fixed on 2023/02/24 13:50
upstream kernel BUG at include/linux/skbuff.h:LINE! (2) sctp C done 58 1738d 1748d 13/26 fixed on 2019/10/15 23:40

Sample crash report:
------------[ cut here ]------------
kernel BUG at include/linux/skbuff.h:1824!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 3788 Comm: syzkaller705022 Not tainted 4.4.118-g239a415 #25
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8800ab2cc800 task.stack: ffff8800ab4c8000
RIP: 0010:[<ffffffff8330db4b>]  [<ffffffff8330db4b>] __skb_pull include/linux/skbuff.h:1824 [inline]
RIP: 0010:[<ffffffff8330db4b>]  [<ffffffff8330db4b>] __ip6_make_skb+0x120b/0x1c30 net/ipv6/ip6_output.c:1676
RSP: 0018:ffff8800ab4cf530  EFLAGS: 00010293
RAX: ffff8800ab2cc800 RBX: 00000000000006e0 RCX: ffffffff8330db4b
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8801cdb38b10
RBP: ffff8800ab4cf730 R08: ffff8800ac1d5938 R09: 0000000000000000
R10: 0000000000000599 R11: fd676b049aac0ae7 R12: 00000000000005a1
R13: ffff8800ac1d58c0 R14: ffff8800ac1d593c R15: ffff8801cdb38640
FS:  0000000001352880(0063) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000280 CR3: 00000000ac4fa000 CR4: 0000000000160670
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000059900000118 ffff8800ac1d597c ffff8800ac1d5990 ffff8800ac1d5988
 ffff8801d80dc1c8 1ffff10015699eb8 ffff8801cc3eb340 ffff8800b013aa20
 ffff8801cdb38652 ffff8801cdb38b60 ffff8800bbb58000 ffff8800ac1d5948
Call Trace:
 [<ffffffff8336c1da>] ip6_finish_skb include/net/ipv6.h:872 [inline]
 [<ffffffff8336c1da>] udp_v6_push_pending_frames+0x20a/0x340 net/ipv6/udp.c:1094
 [<ffffffff83371db2>] udpv6_sendmsg+0x1f12/0x2500 net/ipv6/udp.c:1358
 [<ffffffff831d6c7c>] inet_sendmsg+0x2bc/0x4c0 net/ipv4/af_inet.c:755
 [<ffffffff82deb9ba>] sock_sendmsg_nosec net/socket.c:625 [inline]
 [<ffffffff82deb9ba>] sock_sendmsg+0xca/0x110 net/socket.c:635
 [<ffffffff82ded591>] ___sys_sendmsg+0x6c1/0x7c0 net/socket.c:1962
 [<ffffffff82def5e3>] __sys_sendmsg+0xd3/0x190 net/socket.c:1996
 [<ffffffff82def6cd>] SYSC_sendmsg net/socket.c:2007 [inline]
 [<ffffffff82def6cd>] SyS_sendmsg+0x2d/0x50 net/socket.c:2003
 [<ffffffff83772a5f>] entry_SYSCALL_64_fastpath+0x1c/0x98
Code: 08 84 c9 0f 85 c0 08 00 00 41 3b 45 7c 72 17 e8 dc 31 05 fe 45 89 e6 4d 01 f7 4d 89 bd d0 00 00 00 e9 17 f2 ff ff e8 c5 31 05 fe <0f> 0b e8 be 31 05 fe 48 8b 7c 24 50 e8 34 d2 fe ff 41 89 c4 e9 
RIP  [<ffffffff8330db4b>] __skb_pull include/linux/skbuff.h:1824 [inline]
RIP  [<ffffffff8330db4b>] __ip6_make_skb+0x120b/0x1c30 net/ipv6/ip6_output.c:1676
 RSP <ffff8800ab4cf530>
---[ end trace 7880747ca118f920 ]---
Kernel panic - not syncing: Fatal exception
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/02/28 15:56 https://android.googlesource.com/kernel/common android-4.4 239a415f39e0 05b5a32c .config console log report syz C ci-android-44-kasan-gce
2018/02/24 09:01 https://android.googlesource.com/kernel/common android-4.4 17c7c494f718 5c1e0207 .config console log report syz C ci-android-44-kasan-gce
2018/02/24 08:59 https://android.googlesource.com/kernel/common android-4.4 17c7c494f718 5c1e0207 .config console log report syz ci-android-44-kasan-gce-386
* Struck through repros no longer work on HEAD.