syzbot


kernel BUG at ./include/linux/skbuff.h:LINE!

Status: closed as invalid on 2019/03/06 00:11
First crash: 2620d, last: 2464d
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-414 kernel BUG at ./include/linux/skbuff.h:LINE! syz 27 1906d 1932d 0/1 public: reported syz repro on 2019/08/10 08:48
upstream kernel BUG at ./include/linux/skbuff.h:LINE! (2) net C 5 2460d 2437d 5/28 fixed on 2018/04/06 16:37
linux-4.14 kernel BUG at ./include/linux/skbuff.h:LINE! C done 16 1906d 1932d 1/1 fixed on 2019/12/05 10:31
upstream kernel BUG at ./include/linux/skbuff.h:LINE! net C 4502 2502d 2515d 4/28 fixed on 2018/01/22 13:19
android-49 kernel BUG at ./include/linux/skbuff.h:LINE! (2) syz 16 1906d 1926d 0/3 public: reported syz repro on 2019/08/16 10:13

Sample crash report:
------------[ cut here ]------------
kernel BUG at ./include/linux/skbuff.h:1935!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 3803 Comm: syzkaller156190 Not tainted 4.9.83-g72766d7 #42
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801bc9b3000 task.stack: ffff8801d7638000
RIP: 0010:[<ffffffff8342a7bc>]  [<ffffffff8342a7bc>] __skb_pull include/linux/skbuff.h:1935 [inline]
RIP: 0010:[<ffffffff8342a7bc>]  [<ffffffff8342a7bc>] __ip6_make_skb+0x121c/0x1c20 net/ipv6/ip6_output.c:1700
RSP: 0018:ffff8801d763f420  EFLAGS: 00010293
RAX: ffff8801bc9b3000 RBX: 0000000000000738 RCX: ffffffff8342a7bc
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8801d74b84e0
RBP: ffff8801d763f640 R08: ffff8801c55f8938 R09: 0000000000000000
R10: 0000000000001100 R11: ffffed003af539b6 R12: 00000000000000d6
R13: ffff8801c55f88c0 R14: ffff8801c55f893c R15: ffff8801d74b8000
FS:  0000000001ee7880(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002000b000 CR3: 00000001da372000 CR4: 0000000000160670
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801c55f8ac8 ffff8801c55f897c ffff8801c55f8990 ffff8801c55f8988
 ffff8801d7a9e3c8 1ffff1003aec7e96 ffff8801c4601500 ffff8801d0340d20
 ffff8801d74b8012 ffff8801d74b8540 ffffffff84933a80 ffff8801c55f8948
Call Trace:
 [<ffffffff8348ce6a>] ip6_finish_skb include/net/ipv6.h:911 [inline]
 [<ffffffff8348ce6a>] udp_v6_push_pending_frames+0x20a/0x340 net/ipv6/udp.c:1003
 [<ffffffff83491cb8>] udpv6_sendmsg+0x1f38/0x2540 net/ipv6/udp.c:1273
 [<ffffffff832f269c>] inet_sendmsg+0x2bc/0x4c0 net/ipv4/af_inet.c:770
 [<ffffffff82ed8baa>] sock_sendmsg_nosec net/socket.c:635 [inline]
 [<ffffffff82ed8baa>] sock_sendmsg+0xca/0x110 net/socket.c:645
 [<ffffffff82eda410>] ___sys_sendmsg+0x320/0x7e0 net/socket.c:1969
 [<ffffffff82edca59>] __sys_sendmmsg+0x159/0x3a0 net/socket.c:2059
 [<ffffffff82edccd5>] SYSC_sendmmsg net/socket.c:2090 [inline]
 [<ffffffff82edccd5>] SyS_sendmmsg+0x35/0x60 net/socket.c:2085
 [<ffffffff81006504>] do_syscall_64+0x1a4/0x490 arch/x86/entry/common.c:282
 [<ffffffff838b4e7d>] entry_SYSCALL_64_after_swapgs+0x47/0xc5
Code: 08 84 c9 0f 85 9f 08 00 00 41 3b 45 7c 72 17 e8 7b 0c f4 fd 45 89 e6 4d 01 f7 4d 89 bd d0 00 00 00 e9 0d f2 ff ff e8 64 0c f4 fd <0f> 0b e8 5d 0c f4 fd 48 8b 7c 24 50 e8 c3 cd fe ff 41 89 c4 e9 
RIP  [<ffffffff8342a7bc>] __skb_pull include/linux/skbuff.h:1935 [inline]
RIP  [<ffffffff8342a7bc>] __ip6_make_skb+0x121c/0x1c20 net/ipv6/ip6_output.c:1700
 RSP <ffff8801d763f420>
---[ end trace 516dd4911c28aca7 ]---
Kernel panic - not syncing: Fatal exception
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/02/24 09:02 https://android.googlesource.com/kernel/common android-4.9 72766d75b085 5c1e0207 .config console log report syz C ci-android-49-kasan-gce
2018/02/24 09:00 https://android.googlesource.com/kernel/common android-4.9 72766d75b085 5c1e0207 .config console log report syz ci-android-49-kasan-gce-386
2017/09/21 12:29 https://android.googlesource.com/kernel/common android-4.9 70b8b076f7bb 653022e6 .config console log report ci-android-49-kasan-gce
* Struck through repros no longer work on HEAD.