syzbot

 sign-in | mailing list | source | docs
🐞 Open [144] 🐞 Fixed [15] 🐞 Invalid [132] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes

kernel BUG at net/core/skbuff.c:LINE!
Status: upstream: reported C repro on 2020/01/12 09:43
Reported-by: syzbot+d935648ec6304369192d@syzkaller.appspotmail.com
First crash: 865d, last: 1d21h
similar bugs (15):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-44 kernel BUG at net/core/skbuff.c:LINE! C 79 916d 1141d 0/2 public: reported C repro on 2019/04/11 08:44
linux-4.19 kernel BUG at net/core/skbuff.c:LINE! C unreliable 492 123d 1125d 0/1 upstream: reported C repro on 2019/04/27 20:12
android-54 kernel BUG in pfkey_send_acquire syz 32 467d 494d 0/2 upstream: reported syz repro on 2021/01/17 15:19
upstream kernel BUG at net/core/skbuff.c:LINE! (2) C 562 1580d 1669d 4/22 fixed on 2018/01/29 03:39
android-5-10 kernel BUG in add_grec C error 83 59d 133d 2/2 fixed on 2022/03/29 10:01
android-414 kernel BUG at net/core/skbuff.c:LINE! C 2743 904d 1142d 0/1 public: reported C repro on 2019/04/11 00:00
android-5-10 kernel BUG in add_grec (2) 227 4h24m 58d 0/2 premoderation: reported on 2022/03/29 11:58
android-5-10 kernel BUG in cdc_ncm_fill_tx_frame C error 40 152d 217d 1/2 fixed on 2021/12/29 12:20
upstream kernel BUG at net/core/skbuff.c:LINE! (3) C done 4399 458d 1575d 21/22 fixed on 2021/03/10 01:48
upstream kernel BUG at net/core/skbuff.c:LINE! 5 1675d 1746d 3/22 fixed on 2017/10/27 10:10
linux-4.19 kernel BUG in pfkey_send_acquire C done 56 465d 494d 1/1 fixed on 2021/03/18 08:30
linux-4.14 kernel BUG at net/core/skbuff.c:LINE! C 2843 27d 1140d 0/1 upstream: reported C repro on 2019/04/12 15:43
upstream kernel BUG in llc_sap_action_send_xid_c C error 61 198d 412d 22/22 fixed on 2021/11/10 00:50
upstream kernel BUG in pskb_expand_head C done 68 5d20h 192d 16/22 upstream: reported C repro on 2021/11/15 08:38
android-49 kernel BUG at net/core/skbuff.c:LINE! C 391 905d 1141d 0/3 public: reported C repro on 2019/04/12 00:00

Sample crash report:
skbuff: skb_over_panic: text:ffffffff82b1da03 len:184 put:172 head:ffff8881de155800 data:ffff8881de155800 tail:0xb8 end:0x80 dev:<NULL>
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:109!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.4.161-syzkaller-00026-g8a3679a75730 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:skb_panic+0x14d/0x150 net/core/skbuff.c:105
Code: 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 49 89 e9 b8 00 00 00 00 53 41 55 41 54 41 57 e8 73 ba ed fd 48 83 c4 20 <0f> 0b 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 68 4d 89 cd 4c 89
RSP: 0018:ffff8881f6e09460 EFLAGS: 00010286
RAX: 0000000000000087 RBX: ffffffff851bf880 RCX: 14f357df9782d200
RDX: 0000000000000704 RSI: 0000000000000704 RDI: 0000000000000000
RBP: ffff8881de155800 R08: ffffffff814b15ec R09: ffffed103edcaa08
R10: ffffed103edcaa08 R11: 0000000000000000 R12: 00000000000000b8
R13: 0000000000000080 R14: dffffc0000000000 R15: ffff8881de155800
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f91d2c37ff8 CR3: 00000001e052f000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 skb_over_panic+0x25/0x30 net/core/skbuff.c:114
 skb_put+0x1e0/0x1e0 net/core/skbuff.c:1877
 skb_put_zero include/linux/skbuff.h:2251 [inline]
 cdc_ncm_ndp drivers/net/usb/cdc_ncm.c:1104 [inline]
 cdc_ncm_fill_tx_frame+0xcf3/0x2be0 drivers/net/usb/cdc_ncm.c:1211
 cdc_ncm_tx_fixup+0x62/0xa0 drivers/net/usb/cdc_ncm.c:1405
 usbnet_start_xmit+0x107/0x1a40 drivers/net/usb/usbnet.c:1363
 __netdev_start_xmit include/linux/netdevice.h:4510 [inline]
 netdev_start_xmit include/linux/netdevice.h:4524 [inline]
 xmit_one+0xfa/0x470 net/core/dev.c:3209
 dev_hard_start_xmit+0xac/0x1b0 net/core/dev.c:3225
 sch_direct_xmit+0x212/0x930 net/sched/sch_generic.c:336
 qdisc_restart net/sched/sch_generic.c:401 [inline]
 __qdisc_run+0x1ea/0x3a0 net/sched/sch_generic.c:409
 qdisc_run include/net/pkt_sched.h:122 [inline]
 __dev_xmit_skb net/core/dev.c:3401 [inline]
 __dev_queue_xmit+0xc07/0x2c30 net/core/dev.c:3755
 neigh_output include/net/neighbour.h:525 [inline]
 ip6_finish_output2+0xf45/0x1810 net/ipv6/ip6_output.c:144
 NF_HOOK_COND include/linux/netfilter.h:297 [inline]
 ip6_output+0x158/0x380 net/ipv6/ip6_output.c:242
 dst_output include/net/dst.h:444 [inline]
 NF_HOOK include/linux/netfilter.h:308 [inline]
 mld_sendpack+0x540/0xa20 net/ipv6/mcast.c:1679
 mld_send_cr net/ipv6/mcast.c:1975 [inline]
 mld_ifc_timer_expire+0x804/0xb30 net/ipv6/mcast.c:2474
 call_timer_fn+0x30/0x330 kernel/time/timer.c:1418
 expire_timers+0x21e/0x3f0 kernel/time/timer.c:1463
 __run_timers+0x573/0x670 kernel/time/timer.c:1787
 run_timer_softirq+0x46/0x80 kernel/time/timer.c:1800
 __do_softirq+0x23e/0x615 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x195/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:538 [inline]
 smp_apic_timer_interrupt+0x113/0x420 arch/x86/kernel/apic/apic.c:1150
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:831
 </IRQ>
RIP: 0010:default_idle+0x1f/0x30 arch/x86/kernel/process.c:573
Code: 90 90 90 90 90 90 90 90 90 90 90 e8 db 45 fb fd bf 01 00 00 00 89 c6 e8 1f 9b 03 fd e9 07 00 00 00 0f 00 2d 63 50 62 00 fb f4 <e8> bc 45 fb fd bf ff ff ff ff 89 c6 e9 00 9b 03 fd 41 57 41 56 53
RSP: 0018:ffffffff85c07e88 EFLAGS: 00000296 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: ffffffff85c18a40 RCX: ffffffff85c18a40
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
RBP: 0000000000000000 R08: ffffffff821f62c4 R09: fffffbfff0b83149
R10: fffffbfff0b83149 R11: 0000000000000000 R12: 0000000000000000
R13: 1ffffffff0b83148 R14: ffffffff862755e0 R15: dffffc0000000000
 default_idle_call kernel/sched/idle.c:94 [inline]
 cpuidle_idle_call kernel/sched/idle.c:154 [inline]
 do_idle+0x1c3/0x530 kernel/sched/idle.c:264
 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:356
 start_kernel+0x6e0/0x78b init/main.c:1049
 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:241
Modules linked in:
---[ end trace 245e26b37aea60a4 ]---
RIP: 0010:skb_panic+0x14d/0x150 net/core/skbuff.c:105
Code: 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 49 89 e9 b8 00 00 00 00 53 41 55 41 54 41 57 e8 73 ba ed fd 48 83 c4 20 <0f> 0b 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 68 4d 89 cd 4c 89
RSP: 0018:ffff8881f6e09460 EFLAGS: 00010286
RAX: 0000000000000087 RBX: ffffffff851bf880 RCX: 14f357df9782d200
RDX: 0000000000000704 RSI: 0000000000000704 RDI: 0000000000000000
RBP: ffff8881de155800 R08: ffffffff814b15ec R09: ffffed103edcaa08
R10: ffffed103edcaa08 R11: 0000000000000000 R12: 00000000000000b8
R13: 0000000000000080 R14: dffffc0000000000 R15: ffff8881de155800
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f91d2c37ff8 CR3: 00000001e052f000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	90                   	nop
   1:	90                   	nop
   2:	90                   	nop
   3:	90                   	nop
   4:	90                   	nop
   5:	90                   	nop
   6:	90                   	nop
   7:	90                   	nop
   8:	90                   	nop
   9:	90                   	nop
   a:	90                   	nop
   b:	e8 db 45 fb fd       	callq  0xfdfb45eb
  10:	bf 01 00 00 00       	mov    $0x1,%edi
  15:	89 c6                	mov    %eax,%esi
  17:	e8 1f 9b 03 fd       	callq  0xfd039b3b
  1c:	e9 07 00 00 00       	jmpq   0x28
  21:	0f 00 2d 63 50 62 00 	verw   0x625063(%rip)        # 0x62508b
  28:	fb                   	sti
  29:	f4                   	hlt
* 2a:	e8 bc 45 fb fd       	callq  0xfdfb45eb <-- trapping instruction
  2f:	bf ff ff ff ff       	mov    $0xffffffff,%edi
  34:	89 c6                	mov    %eax,%esi
  36:	e9 00 9b 03 fd       	jmpq   0xfd039b3b
  3b:	41 57                	push   %r15
  3d:	41 56                	push   %r14
  3f:	53                   	push   %rbx

Crashes (191):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-android-5-4-kasan 2022/03/08 05:23 android12-5.4 8a3679a75730 7bdd8b2c .config log report syz C kernel BUG in cdc_ncm_fill_tx_frame
ci2-android-5-4-kasan 2022/01/20 10:30 android12-5.4 946eff433f93 5da9499f .config log report syz C kernel BUG in __ip6_append_data
ci2-android-5-4-kasan 2020/09/21 02:56 https://android.googlesource.com/kernel/common android-5.4 63d1c2f0b547 9564d2e9 .config log report syz C
ci2-android-5-4-kasan 2020/01/23 01:30 https://android.googlesource.com/kernel/common android-5.4 8173487568f1 3334d684 .config log report syz C
ci2-android-5-4-kasan 2022/03/09 20:09 android12-5.4 2d28921044b9 9e8eaa75 .config log report syz kernel BUG in cdc_ncm_fill_tx_frame
ci2-android-5-4-kasan 2021/10/21 22:07 android12-5.4 eb4a5a5dbd5b 55f90bc6 .config log report syz kernel BUG in cdc_ncm_fill_tx_frame
ci2-android-5-4-kasan 2022/05/25 09:05 android12-5.4 45f8ea054fd3 647c0e27 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/21 08:36 android12-5.4 4958d038706e 7268fa62 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/20 16:14 android12-5.4 4958d038706e bd37ad7e .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/18 14:30 android12-5.4 7926bf36d5a6 50c53f39 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/17 23:49 android12-5.4 7926bf36d5a6 744a39e2 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/14 10:41 android12-5.4 ee52e8cb3015 744a39e2 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/10 13:42 android12-5.4 9aefe7a546ce 8b277b8e .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/09 09:23 android12-5.4 0e9e1752f526 e60b1103 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/08 12:06 android12-5.4 0e9e1752f526 e60b1103 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/07 23:50 android12-5.4 0e9e1752f526 e60b1103 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/07 06:36 android12-5.4 0e9e1752f526 e60b1103 .config log report info kernel BUG in mld_newpack
ci2-android-5-4-kasan 2022/05/06 22:50 android12-5.4 0e9e1752f526 e60b1103 .config log report info kernel BUG in mld_newpack
ci2-android-5-4-kasan 2022/05/06 18:52 android12-5.4 0e9e1752f526 e60b1103 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/04 21:40 android12-5.4 b0f1cf1c3005 dc9e5259 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/03 04:33 android12-5.4 fef319f43684 2df221f6 .config log report info kernel BUG in mld_newpack
ci2-android-5-4-kasan 2022/05/02 17:12 android12-5.4 fef319f43684 2df221f6 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/02 11:53 android12-5.4 fef319f43684 2df221f6 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/05/01 18:08 android12-5.4 fef319f43684 2df221f6 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/04/28 08:53 android12-5.4 4b9ad0dbd7ec 8a1f1f07 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/04/22 01:43 android12-5.4 cefc335374d2 2738b391 .config log report info kernel BUG in mld_newpack
ci2-android-5-4-kasan 2022/04/21 14:59 android12-5.4 cefc335374d2 2738b391 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/04/20 03:00 android12-5.4 b730087e9a5d 7d7bc738 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/04/19 15:51 android12-5.4 b730087e9a5d 33fc6ed6 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/04/17 20:27 android12-5.4 b730087e9a5d 8bcc32a6 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/04/17 17:57 android12-5.4 b730087e9a5d 8bcc32a6 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/04/15 16:03 android12-5.4 b730087e9a5d 8bcc32a6 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/04/14 10:06 android12-5.4 b730087e9a5d b17b2923 .config log report info kernel BUG in mld_newpack
ci2-android-5-4-kasan 2022/04/11 15:34 android12-5.4 b730087e9a5d af01ee7d .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/04/09 15:47 android12-5.4 b730087e9a5d e22c3da3 .config log report info kernel BUG in mld_newpack
ci2-android-5-4-kasan 2022/04/06 17:48 android12-5.4 61c005f0f166 97582466 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/04/06 09:36 android12-5.4 61c005f0f166 86b4b7f8 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/04/03 05:23 android12-5.4 61c005f0f166 79a2a8fc .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/04/02 14:45 android12-5.4 61c005f0f166 79a2a8fc .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/03/31 11:06 android12-5.4 ed043095f483 c4c32d8c .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/03/30 10:25 android12-5.4 ed043095f483 42718dd6 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/03/24 16:46 android12-5.4 96567233db21 89bc8608 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/03/24 09:40 android12-5.4 f363e4742eff 89bc8608 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/03/23 02:29 android12-5.4 ed3df0226fbf 5ff41e94 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/03/23 01:25 android12-5.4 ed3df0226fbf 5ff41e94 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/03/22 22:04 android12-5.4 ed3df0226fbf d88ef0c5 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/03/21 16:07 android12-5.4 0aab33945203 e2d91b1d .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/03/19 15:21 android12-5.4 49216514f3a3 e2d91b1d .config log report info kernel BUG in mld_newpack
ci2-android-5-4-kasan 2022/03/14 19:52 android12-5.4 db2bb2db5424 9e8eaa75 .config log report info kernel BUG in add_grec
ci2-android-5-4-kasan 2022/03/12 16:33 android12-5.4 db2bb2db5424 9e8eaa75 .config log report info kernel BUG in cdc_ncm_fill_tx_frame
ci2-android-5-4-kasan 2021/02/14 06:18 android12-5.4 dbfedfa31471 98682e5e .config log report info kernel BUG in xfrm_state_find
ci2-android-5-4-kasan 2021/01/17 10:54 android12-5.4 dc04463953b2 813be542 .config log report info
ci2-android-5-4-kasan 2020/01/12 09:42 https://android.googlesource.com/kernel/common android-5.4 f5f770e495ba 4c04afaa .config log report