syzbot


panic: rtrequest1_fib: locked

Status: fixed on 2019/04/14 22:06
Reported-by: syzbot+65c676f5248a13753ea0@syzkaller.appspotmail.com
Fix commit: e6481fd4c46a When sending a routing message, don't allow the user to set the RTF_RNH_LOCKED flag in rtm_flags, since this flag is used only internally.
First crash: 2106d, last: 2080d

Sample crash report:
login: panic: rtrequest1_fib: locked
cpuid = 0
time = 1552901891
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0020dbb270
vpanic() at vpanic+0x1e0/frame 0xfffffe0020dbb2d0
panic() at panic+0x43/frame 0xfffffe0020dbb330
rtrequest1_fib() at rtrequest1_fib+0x151d/frame 0xfffffe0020dbb450
route_output() at route_output+0x122d/frame 0xfffffe0020dbb6d0
sosend_generic() at sosend_generic+0x73d/frame 0xfffffe0020dbb7a0
sosend() at sosend+0xc6/frame 0xfffffe0020dbb810
kern_sendit() at kern_sendit+0x35e/frame 0xfffffe0020dbb8c0
sendit() at sendit+0x226/frame 0xfffffe0020dbb920
sys_sendto() at sys_sendto+0x5c/frame 0xfffffe0020dbb980
amd64_syscall() at amd64_syscall+0x436/frame 0xfffffe0020dbbab0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0020dbbab0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x41c2ea, rsp = 0x7fffffffead8, rbp = 0x7fffffffeb40 ---
KDB: enter: panic
[ thread pid 759 tid 100080 ]
Stopped at      kdb_enter+0x6a: movq    $0,kdb_why

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/03/18 09:41 freebsd 8b17fbc25c73 f8757044 console log report syz C ci-freebsd-main
2019/04/13 00:01 freebsd 15e5c29caee0 4f421599 console log report ci-freebsd-main
2019/04/12 12:04 freebsd 831bf1a1aa1d 8916f5e1 console log report ci-freebsd-main
2019/04/11 21:42 freebsd bd383e74e5f4 13030ef8 console log report ci-freebsd-main
2019/04/11 21:41 freebsd bd383e74e5f4 13030ef8 console log report ci-freebsd-main
2019/04/11 21:39 freebsd bd383e74e5f4 13030ef8 console log report ci-freebsd-main
2019/04/09 08:38 freebsd 5d511432d607 995065ff console log report ci-freebsd-main
2019/04/02 18:06 freebsd 3fd37b6c9ae1 dfd3394d console log report ci-freebsd-main
2019/03/24 01:37 freebsd 0e6bf0c478cd a2cef203 console log report ci-freebsd-main
2019/03/18 09:27 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
* Struck through repros no longer work on HEAD.