syzbot

 sign-in | mailing list | source | docs
🐞 Open [196] 🐞 Fixed [42] 🐞 Invalid [470] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in addrconf_rt_table

Status: public: reported C repro on 2019/04/12 00:00
Reported-by: syzbot+30ed7a3c09ba09f97dac@syzkaller.appspotmail.com
First crash: 2261d, last: 1597d
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-414 general protection fault in addrconf_rt_table syz 889 1597d 1834d 0/1 public: reported syz repro on 2019/04/12 00:01
android-44 general protection fault in addrconf_rt_table syz 30 1938d 1832d 0/2 public: reported syz repro on 2019/04/14 00:02

Sample crash report:
random: crng init done
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 64 Comm: kworker/u4:1 Not tainted 4.9.140+ #3
Workqueue: netns cleanup_net
task: ffff8801d786af80 task.stack: ffff8801d79a8000
RIP: 0010:[<ffffffff826bd007>]  [<ffffffff826bd007>] addrconf_rt_table+0x127/0x290 net/ipv6/addrconf.c:2223
RSP: 0018:ffff8801d79af510  EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000200 RCX: 0000000000000004
RDX: 0000000000000056 RSI: 0000000000000004 RDI: 00000000000002b0
RBP: ffff8801d79af540 R08: ffff8801d786b830 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 00000000000000fe R14: ffff8801ce8a2200 R15: ffff8801ce9b2b90
FS:  0000000000000000(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004a20fd CR3: 00000001ce4ce000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffffffff826bcee0 ffff8801ce8a2200 0000000000000000 ffff8801cef01e80
 ffff8801ce748900 ffff8801ce9b2b90 ffff8801d79af588 ffffffff826bd8f3
 00000000ce7487b8 ffff880100000080 ffff8801ce9b2a00 ffff8801ce9b2b90
Call Trace:
 [<ffffffff826bd8f3>] addrconf_get_prefix_route+0x33/0x270 net/ipv6/addrconf.c:2277
 [<ffffffff826be108>] __ipv6_ifa_notify+0x5d8/0x790 net/ipv6/addrconf.c:5496
 [<ffffffff826bfafe>] addrconf_ifdown+0xaae/0x1420 net/ipv6/addrconf.c:3689
 [<ffffffff826c72fe>] addrconf_notify+0x8ee/0x2140 net/ipv6/addrconf.c:3493
 [<ffffffff811478d4>] notifier_call_chain+0xb4/0x1d0 kernel/notifier.c:93
 [<ffffffff81147a5d>] __raw_notifier_call_chain kernel/notifier.c:394 [inline]
 [<ffffffff81147a5d>] raw_notifier_call_chain+0x2d/0x40 kernel/notifier.c:401
 [<ffffffff822f48f5>] call_netdevice_notifiers_info+0x55/0x70 net/core/dev.c:1647
 [<ffffffff82303395>] call_netdevice_notifiers net/core/dev.c:1663 [inline]
 [<ffffffff82303395>] rollback_registered_many+0x6e5/0xb50 net/core/dev.c:6860
 [<ffffffff8230d5a8>] unregister_netdevice_many+0x48/0x220 net/core/dev.c:7907
 [<ffffffff8230dabf>] default_device_exit_batch+0x33f/0x3f0 net/core/dev.c:8365
 [<ffffffff822e3c75>] ops_exit_list.isra.0+0x105/0x160 net/core/net_namespace.c:139
 [<ffffffff822e6982>] cleanup_net+0x3f2/0x8b0 net/core/net_namespace.c:473
 [<ffffffff81131001>] process_one_work+0x831/0x15f0 kernel/workqueue.c:2092
 [<ffffffff81131e96>] worker_thread+0xd6/0x1140 kernel/workqueue.c:2226
 [<ffffffff81142c3d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff8281789c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Code: 82 be 01 00 00 00 48 c7 c7 60 c3 0c 83 e8 92 fb b4 fe 49 8d bc 24 b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 34 01 00 00 45 8b bc 24 b0 
RIP  [<ffffffff826bd007>] addrconf_rt_table+0x127/0x290 net/ipv6/addrconf.c:2223
 RSP <ffff8801d79af510>
---[ end trace 3bbd07baf6f59b6c ]---

Crashes (697):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/11/24 16:57 https://android.googlesource.com/kernel/common android-4.9 f44ed2c9232d ecc7c870 .config console log report syz C ci-android-49-kasan-gce
2018/11/24 16:55 https://android.googlesource.com/kernel/common android-4.9 f44ed2c9232d ecc7c870 .config console log report syz C ci-android-49-kasan-gce-root
2018/05/08 12:33 https://android.googlesource.com/kernel/common android-4.9 a03d0bbacd41 045bbd4a .config console log report syz C ci-android-49-kasan-gce
2018/05/08 12:32 https://android.googlesource.com/kernel/common android-4.9 a03d0bbacd41 045bbd4a .config console log report syz C ci-android-49-kasan-gce-root
2018/05/08 12:15 https://android.googlesource.com/kernel/common android-4.9 a03d0bbacd41 045bbd4a .config console log report syz C ci-android-49-kasan-gce-root
2018/05/08 12:15 https://android.googlesource.com/kernel/common android-4.9 a03d0bbacd41 045bbd4a .config console log report syz C ci-android-49-kasan-gce
2018/11/24 16:51 https://android.googlesource.com/kernel/common android-4.9 f44ed2c9232d ecc7c870 .config console log report syz C ci-android-49-kasan-gce-386
2018/05/08 12:46 https://android.googlesource.com/kernel/common android-4.9 a03d0bbacd41 045bbd4a .config console log report syz ci-android-49-kasan-gce-386
2018/05/08 12:31 https://android.googlesource.com/kernel/common android-4.9 a03d0bbacd41 045bbd4a .config console log report syz ci-android-49-kasan-gce-386
2019/12/04 08:41 android-4.9 a36b5017c810 0ecb9746 .config console log report ci-android-49-kasan-gce-root
2019/12/04 05:25 android-4.9 a36b5017c810 ae13a849 .config console log report ci-android-49-kasan-gce-root
2019/12/03 14:48 android-4.9 a36b5017c810 ab342da3 .config console log report ci-android-49-kasan-gce-root
2019/12/03 08:12 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 ab342da3 .config console log report ci-android-49-kasan-gce
2019/12/03 03:56 android-4.9 a36b5017c810 ab342da3 .config console log report ci-android-49-kasan-gce-root
2019/12/02 20:58 android-4.9 a36b5017c810 ab342da3 .config console log report ci-android-49-kasan-gce-root
2019/12/02 19:48 android-4.9 a36b5017c810 f879db37 .config console log report ci-android-49-kasan-gce-root
2019/12/02 18:02 android-4.9 a36b5017c810 f879db37 .config console log report ci-android-49-kasan-gce-root
2019/12/02 11:07 android-4.9 a36b5017c810 f879db37 .config console log report ci-android-49-kasan-gce-root
2019/12/02 08:08 android-4.9 a36b5017c810 f879db37 .config console log report ci-android-49-kasan-gce-root
2019/12/02 06:04 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 f879db37 .config console log report ci-android-49-kasan-gce
2019/12/01 22:58 android-4.9 a36b5017c810 f879db37 .config console log report ci-android-49-kasan-gce-root
2019/12/01 21:42 android-4.9 a36b5017c810 a76bf83f .config console log report ci-android-49-kasan-gce-root
2019/12/01 20:17 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a76bf83f .config console log report ci-android-49-kasan-gce
2019/12/01 14:02 android-4.9 a36b5017c810 a76bf83f .config console log report ci-android-49-kasan-gce-root
2019/12/01 12:23 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a76bf83f .config console log report ci-android-49-kasan-gce
2019/12/01 08:03 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a76bf83f .config console log report ci-android-49-kasan-gce
2019/12/01 04:05 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a76bf83f .config console log report ci-android-49-kasan-gce
2019/11/30 21:05 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 3a75be00 .config console log report ci-android-49-kasan-gce
2019/11/30 19:04 android-4.9 a36b5017c810 3a75be00 .config console log report ci-android-49-kasan-gce-root
2019/11/30 17:57 android-4.9 a36b5017c810 3a75be00 .config console log report ci-android-49-kasan-gce-root
2019/11/30 16:03 android-4.9 a36b5017c810 3a75be00 .config console log report ci-android-49-kasan-gce-root
2019/11/30 12:25 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 3a75be00 .config console log report ci-android-49-kasan-gce
2019/11/30 09:51 android-4.9 a36b5017c810 3a75be00 .config console log report ci-android-49-kasan-gce-root
2019/11/30 03:33 android-4.9 a36b5017c810 3a75be00 .config console log report ci-android-49-kasan-gce-root
2019/11/30 00:35 android-4.9 a36b5017c810 3a75be00 .config console log report ci-android-49-kasan-gce-root
2019/11/29 14:07 android-4.9 a36b5017c810 d29b9e84 .config console log report ci-android-49-kasan-gce-root
2019/11/29 04:21 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 76357d6f .config console log report ci-android-49-kasan-gce
2019/11/28 13:07 android-4.9 13ff5130ff6e 46869e3e .config console log report ci-android-49-kasan-gce-root
2019/11/27 15:07 android-4.9 13ff5130ff6e 5a38f3f0 .config console log report ci-android-49-kasan-gce-root
2019/11/26 16:23 android-4.9 13ff5130ff6e 1048481f .config console log report ci-android-49-kasan-gce-root
2019/11/26 02:26 android-4.9 13ff5130ff6e f746151a .config console log report ci-android-49-kasan-gce-root
2019/11/25 04:04 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 22:33 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 17:47 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 598ca6c8 .config console log report ci-android-49-kasan-gce
2019/11/24 15:33 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 10:36 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 06:21 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 00:22 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 598ca6c8 .config console log report ci-android-49-kasan-gce
2019/11/22 22:49 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 598ca6c8 .config console log report ci-android-49-kasan-gce
2019/12/01 19:14 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a76bf83f .config console log report ci-android-49-kasan-gce-386
2019/12/01 10:58 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a76bf83f .config console log report ci-android-49-kasan-gce-386
2019/11/30 06:33 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 3a75be00 .config console log report ci-android-49-kasan-gce-386
2019/11/28 00:19 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 0d63f89c .config console log report ci-android-49-kasan-gce-386
2019/11/27 17:22 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 0d63f89c .config console log report ci-android-49-kasan-gce-386
2018/02/08 22:00 https://android.googlesource.com/kernel/common android-4.9 20c8a0089294 9fb5ec43 .config console log report ci-android-49-kasan-gce-386
* Struck through repros no longer work on HEAD.