syzbot

 sign-in | mailing list | source | docs
🐞 Open [1222]
≡ Subsystems
🐞 Fixed [5630]
🐞 Invalid [13645]
⬇ Missing Backports [100]
Kernel Health Bugs/Month Bug Lifetimes Fuzzing Crashes
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

general protection fault in addrconf_f6i_alloc

Status: fixed on 2019/10/09 10:54
Subsystems: net
[Documentation on labels]
Fix commit: 8652f17c658d ipv6: addrconf_f6i_alloc - fix non-null pointer check to !IS_ERR()
First crash: 1836d, last: 1825d

Sample crash report:
RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003
RBP: 0000000000000004 R08: 0000000000000014 R09: 0000000000401160
R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000402480
R13: 0000000000402510 R14: 0000000000000000 R15: 0000000000000000
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 9967 Comm: syz-executor461 Not tainted 5.3.0-rc7+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:addrconf_f6i_alloc+0x32d/0x4a0 net/ipv6/route.c:4410
Code: 59 bc ff ff 48 85 c0 49 89 c4 74 3d e8 cc 36 32 fb 49 8d bc 24 86 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 1f 01 00 00
RSP: 0018:ffff8880913af638 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 1ffff11012275ec9 RCX: 1ffffffff134b5d6
RDX: 000000000000000f RSI: ffffffff86403e84 RDI: 000000000000007a
RBP: ffff8880913af7b8 R08: ffff8880922dc240 R09: ffffed1012275e8b
R10: ffffed1012275e8a R11: 0000000000000003 R12: fffffffffffffff4
R13: ffff88809c1f36c0 R14: ffff8880913af9d0 R15: 0000000000000001
FS:  0000555555929940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000200 CR3: 000000008f63e000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __ipv6_dev_ac_inc+0x274/0x9d0 net/ipv6/anycast.c:301
 ipv6_sock_ac_join+0x4bb/0x790 net/ipv6/anycast.c:139
 do_ipv6_setsockopt.isra.0+0x37bb/0x4100 net/ipv6/ipv6_sockglue.c:670
 ipv6_setsockopt+0xf6/0x170 net/ipv6/ipv6_sockglue.c:944
 tcp_setsockopt net/ipv4/tcp.c:3146 [inline]
 tcp_setsockopt+0x8f/0xe0 net/ipv4/tcp.c:3140
 sock_common_setsockopt+0x94/0xd0 net/core/sock.c:3139
 __sys_setsockopt+0x261/0x4c0 net/socket.c:2084
 __do_sys_setsockopt net/socket.c:2100 [inline]
 __se_sys_setsockopt net/socket.c:2097 [inline]
 __x64_sys_setsockopt+0xbe/0x150 net/socket.c:2097
 do_syscall_64+0xfd/0x6a0 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x440b99
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b 14 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffc8bc5ed18 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007ffc8bc5edc0 RCX: 0000000000440b99
RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003
RBP: 0000000000000004 R08: 0000000000000014 R09: 0000000000401160
R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000402480
R13: 0000000000402510 R14: 0000000000000000 R15: 0000000000000000
Modules linked in:
---[ end trace 32c7d1f759ebaf47 ]---
RIP: 0010:addrconf_f6i_alloc+0x32d/0x4a0 net/ipv6/route.c:4410
Code: 59 bc ff ff 48 85 c0 49 89 c4 74 3d e8 cc 36 32 fb 49 8d bc 24 86 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 1f 01 00 00
RSP: 0018:ffff8880913af638 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 1ffff11012275ec9 RCX: 1ffffffff134b5d6
RDX: 000000000000000f RSI: ffffffff86403e84 RDI: 000000000000007a
RBP: ffff8880913af7b8 R08: ffff8880922dc240 R09: ffffed1012275e8b
R10: ffffed1012275e8a R11: 0000000000000003 R12: fffffffffffffff4
R13: ffff88809c1f36c0 R14: ffff8880913af9d0 R15: 0000000000000001
FS:  0000555555929940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000200 CR3: 000000008f63e000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (305):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/09/05 14:18 net-old 7bdf4de12677 040fda58 .config console log report syz C ci-upstream-net-this-kasan-gce
2019/09/05 17:23 net-old 7bdf4de12677 040fda58 .config console log report syz ci-upstream-net-this-kasan-gce
2019/09/16 07:23 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/16 06:10 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/16 02:17 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/16 00:40 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/15 21:04 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/15 19:21 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/15 17:34 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/15 15:10 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/15 13:19 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/15 10:38 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/15 09:47 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/15 08:02 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/15 06:06 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/15 04:35 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/15 02:34 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/15 01:32 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/15 00:24 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/14 23:21 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/14 21:16 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/14 19:51 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/14 18:08 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/14 16:45 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/14 14:54 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/14 13:46 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/14 12:14 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/14 08:09 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/14 06:59 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/14 06:37 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/14 02:11 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/13 23:08 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/13 21:49 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/13 20:21 bpf 2339cd6cd0b5 32d59357 .config console log report ci-upstream-bpf-kasan-gce
2019/09/13 18:44 bpf 2339cd6cd0b5 40fa42bc .config console log report ci-upstream-bpf-kasan-gce
2019/09/13 14:56 bpf 2339cd6cd0b5 40fa42bc .config console log report ci-upstream-bpf-kasan-gce
2019/09/13 13:00 bpf 2339cd6cd0b5 40fa42bc .config console log report ci-upstream-bpf-kasan-gce
2019/09/13 11:53 bpf 2339cd6cd0b5 40fa42bc .config console log report ci-upstream-bpf-kasan-gce
2019/09/13 08:27 bpf 2339cd6cd0b5 40fa42bc .config console log report ci-upstream-bpf-kasan-gce
2019/09/13 06:30 bpf 2339cd6cd0b5 40fa42bc .config console log report ci-upstream-bpf-kasan-gce
2019/09/13 04:41 bpf 2339cd6cd0b5 40fa42bc .config console log report ci-upstream-bpf-kasan-gce
2019/09/13 03:33 bpf 2339cd6cd0b5 40fa42bc .config console log report ci-upstream-bpf-kasan-gce
2019/09/13 02:30 bpf 2339cd6cd0b5 40fa42bc .config console log report ci-upstream-bpf-kasan-gce
2019/09/13 00:32 bpf 2339cd6cd0b5 0b7672ee .config console log report ci-upstream-bpf-kasan-gce
2019/09/07 19:45 net-old 0c04eb72d332 a60cb4cd .config console log report ci-upstream-net-this-kasan-gce
2019/09/05 11:48 net-old 7bdf4de12677 040fda58 .config console log report ci-upstream-net-this-kasan-gce
* Struck through repros no longer work on HEAD.