syzbot

 sign-in | mailing list | source | docs
🐞 Open [1483]
≡ Subsystems
🐞 Fixed [5855]
🐞 Invalid [14285]
⬇ Missing Backports [94]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

kernel BUG at net/ipv4/ip_output.c:LINE!

Status: fixed on 2019/11/08 07:00
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+90d5ec0c05e708f3b66d@syzkaller.appspotmail.com
Fix commit: e7c87bd6cc4e bpf: in __bpf_redirect_no_mac pull mac only if present
First crash: 2330d, last: 2139d
Fix bisection: fixed by (bisect log) :
commit e7c87bd6cc4ec7b0ac1ed0a88a58f8206c577488
Author: Willem de Bruijn <willemb@google.com>
Date: Wed Jan 16 01:19:22 2019 +0000

  bpf: in __bpf_redirect_no_mac pull mac only if present

  
▶ ▼ Discussions (3)
Title Replies (including bot) Last reply
kernel BUG at net/ipv4/ip_output.c:LINE! 1 (5) 2019/11/07 16:58
Reminder: 99 open syzbot bugs in net subsystem 14 (14) 2019/07/31 15:13
Reminder: 94 open syzbot bugs in net subsystem 1 (1) 2019/06/25 05:48

Sample crash report:
------------[ cut here ]------------
kernel BUG at net/ipv4/ip_output.c:776!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 6028 Comm: syz-executor129 Not tainted 4.19.0-rc4+ #27
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:ip_do_fragment+0x246d/0x2ae0 net/ipv4/ip_output.c:776
Code: 8b 8d 70 fe ff ff e9 3a e8 ff ff 4c 89 ef e8 0a 9f 3d fb e9 1c e9 ff ff 4c 89 f7 e8 fd 9e 3d fb e9 94 e5 ff ff e8 43 3e fa fa <0f> 0b 4c 89 e7 e8 e9 9e 3d fb e9 58 e8 ff ff 4c 89 f7 89 8d 70 fe
RSP: 0018:ffff8801c1dd67d0 EFLAGS: 00010293
RAX: ffff8801c24f4680 RBX: ffff8801c64c4800 RCX: ffffffff86847f8e
RDX: 0000000000000000 RSI: ffffffff8684963d RDI: 0000000000000005
RBP: ffff8801c1dd69a8 R08: ffff8801c24f4680 R09: ffffed0037fd6018
R10: ffffed0037fd601a R11: ffff8801bfeb00d3 R12: ffff8801c64c48c4
R13: 00000000fffffff2 R14: ffff8801c64c48d0 R15: dffffc0000000000
FS:  0000000001ee2880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000006cc090 CR3: 00000001c812e000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ip_fragment.constprop.49+0x179/0x240 net/ipv4/ip_output.c:549
 ip_finish_output+0x6b4/0xf60 net/ipv4/ip_output.c:315
 NF_HOOK_COND include/linux/netfilter.h:276 [inline]
 ip_output+0x21d/0x8d0 net/ipv4/ip_output.c:405
 dst_output include/net/dst.h:444 [inline]
 ip_local_out+0xc5/0x1b0 net/ipv4/ip_output.c:124
 iptunnel_xmit+0x56a/0x8d0 net/ipv4/ip_tunnel_core.c:91
 ip_tunnel_xmit+0x1586/0x3ac3 net/ipv4/ip_tunnel.c:778
 __gre_xmit+0x5e1/0x980 net/ipv4/ip_gre.c:454
 ipgre_xmit+0x3e7/0xba0 net/ipv4/ip_gre.c:708
 __netdev_start_xmit include/linux/netdevice.h:4287 [inline]
 netdev_start_xmit include/linux/netdevice.h:4296 [inline]
 xmit_one net/core/dev.c:3216 [inline]
 dev_hard_start_xmit+0x27f/0xc70 net/core/dev.c:3232
 __dev_queue_xmit+0x2f3b/0x3980 net/core/dev.c:3802
 dev_queue_xmit+0x17/0x20 net/core/dev.c:3835
 __bpf_tx_skb net/core/filter.c:2012 [inline]
 __bpf_redirect_common net/core/filter.c:2050 [inline]
 __bpf_redirect+0x5cf/0xb20 net/core/filter.c:2057
 ____bpf_clone_redirect net/core/filter.c:2090 [inline]
 bpf_clone_redirect+0x2f6/0x490 net/core/filter.c:2062
 bpf_prog_bebbfe2050753572+0x23d/0x1000
Modules linked in:
---[ end trace 5178dd7eb0e3f9ee ]---
RIP: 0010:ip_do_fragment+0x246d/0x2ae0 net/ipv4/ip_output.c:776
Code: 8b 8d 70 fe ff ff e9 3a e8 ff ff 4c 89 ef e8 0a 9f 3d fb e9 1c e9 ff ff 4c 89 f7 e8 fd 9e 3d fb e9 94 e5 ff ff e8 43 3e fa fa <0f> 0b 4c 89 e7 e8 e9 9e 3d fb e9 58 e8 ff ff 4c 89 f7 89 8d 70 fe
RSP: 0018:ffff8801c1dd67d0 EFLAGS: 00010293
RAX: ffff8801c24f4680 RBX: ffff8801c64c4800 RCX: ffffffff86847f8e
RDX: 0000000000000000 RSI: ffffffff8684963d RDI: 0000000000000005
RBP: ffff8801c1dd69a8 R08: ffff8801c24f4680 R09: ffffed0037fd6018
R10: ffffed0037fd601a R11: ffff8801bfeb00d3 R12: ffff8801c64c48c4
R13: 00000000fffffff2 R14: ffff8801c64c48d0 R15: dffffc0000000000
FS:  0000000001ee2880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000006cc090 CR3: 00000001c812e000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (28225):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/09/21 08:40 upstream 234b69e3e089 37079712 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2018/09/21 05:48 upstream ae596de1a0c8 6cee973c .config console log report syz C ci-upstream-kasan-gce-root
2018/09/21 02:05 upstream ae596de1a0c8 6cee973c .config console log report syz C ci-upstream-kasan-gce-smack-root
2018/08/09 20:01 upstream 112cbae26d18 1fb62d58 .config console log report syz C ci-upstream-kasan-gce-root
2018/09/19 12:03 net-old 5211da9ca526 7f125108 .config console log report syz C ci-upstream-net-this-kasan-gce
2018/09/19 09:18 bpf 4c3d795cb012 7f125108 .config console log report syz C ci-upstream-bpf-kasan-gce
2018/09/19 10:27 net-next-old e366fa435032 7f125108 .config console log report syz C ci-upstream-net-kasan-gce
2018/08/09 20:13 net-next-old 82b94f5d6891 1fb62d58 .config console log report syz C ci-upstream-net-kasan-gce
2018/09/21 05:29 linux-next a0cb0cabe4bb 6cee973c .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/29 12:40 upstream a26fb01c2879 0824d7a1 .config console log report syz ci-upstream-kasan-gce-root
2018/08/31 18:16 net-old dc6417949297 a4718693 .config console log report syz ci-upstream-net-this-kasan-gce
2018/07/29 11:11 bpf 71eb5255f55b 0824d7a1 .config console log report syz ci-upstream-bpf-kasan-gce
2018/07/29 12:21 net-next-old 19725496da56 0824d7a1 .config console log report syz ci-upstream-net-kasan-gce
2018/07/29 11:34 bpf-next 2e96187b6967 0824d7a1 .config console log report syz ci-upstream-bpf-next-kasan-gce
2018/09/01 09:50 linux-next a880148cb2af a4718693 .config console log report syz ci-upstream-linux-next-kasan-gce-root
2018/08/14 11:22 linux-next 4e8b38549b50 7a88b141 .config console log report syz ci-upstream-linux-next-kasan-gce-root
2018/07/29 13:00 linux-next d1e0b8e0cb7a 0824d7a1 .config console log report syz ci-upstream-linux-next-kasan-gce-root
2018/12/02 17:06 upstream 4b78317679c4 e0d8c853 .config console log report ci-upstream-kasan-gce-root
2018/11/20 23:46 upstream 06e68fed3282 9aca6b52 .config console log report ci-upstream-kasan-gce-smack-root
2018/11/20 21:05 upstream 06e68fed3282 9aca6b52 .config console log report ci-upstream-kasan-gce-selinux-root
2018/07/12 21:59 upstream c25c74b7476e 06c33b3a .config console log report ci-upstream-kasan-gce-root
2019/01/16 05:41 bpf 6bf3bbe1f4d4 b47fa78d .config console log report ci-upstream-bpf-kasan-gce
2019/01/15 23:31 net-old 7939f8beecf1 79cb1a7c .config console log report ci-upstream-net-this-kasan-gce
2019/01/13 12:00 bpf fb4129b9279d c3f3344c .config console log report ci-upstream-bpf-kasan-gce
2019/01/12 21:36 bpf fb4129b9279d c3f3344c .config console log report ci-upstream-bpf-kasan-gce
2019/01/12 15:12 bpf fb4129b9279d c3f3344c .config console log report ci-upstream-bpf-kasan-gce
2019/01/11 09:23 bpf beaf3d1901f4 80dde172 .config console log report ci-upstream-bpf-kasan-gce
2019/01/10 06:11 bpf d972f3dce8d1 45c0c1b1 .config console log report ci-upstream-bpf-kasan-gce
2019/01/05 22:02 bpf 466f89e9ec8c 53be0a37 .config console log report ci-upstream-bpf-kasan-gce
2019/01/04 05:58 bpf a67825f51951 7da23925 .config console log report ci-upstream-bpf-kasan-gce
2019/01/03 05:13 net-old d63967e475ae 06a2b89f .config console log report ci-upstream-net-this-kasan-gce
2019/01/01 05:14 bpf b71acb0e3721 3d85f48c .config console log report ci-upstream-bpf-kasan-gce
2018/12/31 15:57 bpf b71acb0e3721 2b42fdc8 .config console log report ci-upstream-bpf-kasan-gce
2018/12/30 22:27 bpf b71acb0e3721 9942de5f .config console log report ci-upstream-bpf-kasan-gce
2018/12/30 02:23 bpf b71acb0e3721 35e3f847 .config console log report ci-upstream-bpf-kasan-gce
2018/12/29 18:15 bpf b71acb0e3721 a40793d7 .config console log report ci-upstream-bpf-kasan-gce
2018/12/28 17:16 bpf b71acb0e3721 fc6ae81a .config console log report ci-upstream-bpf-kasan-gce
2018/12/28 03:31 bpf b71acb0e3721 af317504 .config console log report ci-upstream-bpf-kasan-gce
2018/12/27 21:56 bpf bcb671c2fa0e 43cf01dd .config console log report ci-upstream-bpf-kasan-gce
2018/12/27 18:59 bpf bcb671c2fa0e 43cf01dd .config console log report ci-upstream-bpf-kasan-gce
2018/12/27 05:29 bpf bcb671c2fa0e e747ec98 .config console log report ci-upstream-bpf-kasan-gce
2018/12/27 02:24 bpf bcb671c2fa0e e747ec98 .config console log report ci-upstream-bpf-kasan-gce
2018/12/26 13:10 bpf bcb671c2fa0e 8a41a0ad .config console log report ci-upstream-bpf-kasan-gce
2018/12/26 00:45 net-old 38355a5f9a22 8a41a0ad .config console log report ci-upstream-net-this-kasan-gce
2018/12/25 22:33 bpf bcb671c2fa0e 8a41a0ad .config console log report ci-upstream-bpf-kasan-gce
2018/12/25 14:50 bpf bcb671c2fa0e 8a41a0ad .config console log report ci-upstream-bpf-kasan-gce
2018/12/25 04:04 bpf bcb671c2fa0e 8a41a0ad .config console log report ci-upstream-bpf-kasan-gce
2018/12/24 16:12 bpf bcb671c2fa0e be79df56 .config console log report ci-upstream-bpf-kasan-gce
2018/12/23 07:07 bpf bcb671c2fa0e e3bd7ab8 .config console log report ci-upstream-bpf-kasan-gce
2018/12/22 23:29 bpf bcb671c2fa0e e3bd7ab8 .config console log report ci-upstream-bpf-kasan-gce
2019/01/20 08:46 bpf-next d0b2818efbe2 353f32ea .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/19 08:55 bpf-next d0b2818efbe2 2103a236 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/13 09:41 bpf-next b71acb0e3721 c3f3344c .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/11 11:45 bpf-next b71acb0e3721 80dde172 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/10 01:58 bpf-next b71acb0e3721 45c0c1b1 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/08 01:21 bpf-next b71acb0e3721 69d69aa9 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/06 18:51 bpf-next b71acb0e3721 94f8adb5 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/06 06:57 bpf-next b71acb0e3721 53be0a37 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/05 06:36 bpf-next b71acb0e3721 53be0a37 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/05 01:11 bpf-next b71acb0e3721 0127e3ba .config console log report ci-upstream-bpf-next-kasan-gce
2018/12/30 19:29 bpf-next b71acb0e3721 9942de5f .config console log report ci-upstream-bpf-next-kasan-gce
2018/12/30 18:10 bpf-next b71acb0e3721 9942de5f .config console log report ci-upstream-bpf-next-kasan-gce
2018/12/30 08:20 bpf-next b71acb0e3721 35e3f847 .config console log report ci-upstream-bpf-next-kasan-gce
2018/12/29 11:59 bpf-next b71acb0e3721 a40793d7 .config console log report ci-upstream-bpf-next-kasan-gce
2018/12/27 03:52 bpf-next fa2323325e8b e747ec98 .config console log report ci-upstream-bpf-next-kasan-gce
2018/12/25 09:24 bpf-next fa2323325e8b 8a41a0ad .config console log report ci-upstream-bpf-next-kasan-gce
2018/12/24 09:05 bpf-next fa2323325e8b be79df56 .config console log report ci-upstream-bpf-next-kasan-gce
2018/12/23 02:21 bpf-next fa2323325e8b e3bd7ab8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/11/27 06:23 net-next-old 4afe60a97ba6 ac912200 .config console log report ci-upstream-net-kasan-gce
2018/11/13 10:56 linux-next 442b8cea2477 5f5f6d14 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.