WARNING in fib6_add

Status: fixed on 2017/11/28 03:36
Subsystems: net
[Documentation on labels]
Fix commit: 2ea2352ede9d ipv6: prevent user from adding cached routes
First crash: 3221d, last: 3187d
▶ ▼ Similar bugs (7)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in fib6_add (5) net -1 syz, C done 6 969d 1132d 25/29 fixed on 2024/01/22 01:16
upstream WARNING in fib6_add (4) net -1 2 2283d 2299d 0/29 auto-closed as invalid on 2020/08/31 02:33
linux-6.1 WARNING in fib6_add -1 syz, C done 2 965d 1132d 3/3 fixed on 2024/01/11 06:28
linux-5.15 WARNING in fib6_add -1 syz, C error 4 964d 1132d 0/3 auto-obsoleted due to no activity on 2024/03/22 05:58
upstream WARNING in fib6_add (2) net -1 11 2661d 2802d 0/29 auto-closed as invalid on 2019/10/17 17:19
upstream WARNING in fib6_add (3) net -1 1 2377d 2377d 0/29 closed as invalid on 2020/02/24 20:17
linux-4.19 WARNING in fib6_add -1 1 2550d 2550d 0/1 auto-closed as invalid on 2019/12/07 20:56

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 2988 at net/ipv6/ip6_fib.c:1137 fib6_add+0x20d9/0x2c10 net/ipv6/ip6_fib.c:1137
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 2988 Comm: syzkaller756012 Not tainted 4.14.0-rc5+ #95
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:16 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:52
 panic+0x1e4/0x417 kernel/panic.c:181
 __warn+0x1c4/0x1d9 kernel/panic.c:542
 report_bug+0x211/0x2d0 lib/bug.c:183
 fixup_bug+0x40/0x90 arch/x86/kernel/traps.c:178
 do_trap_no_signal arch/x86/kernel/traps.c:212 [inline]
 do_trap+0x260/0x390 arch/x86/kernel/traps.c:261
 do_error_trap+0x120/0x390 arch/x86/kernel/traps.c:298
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:311
 invalid_op+0x18/0x20 arch/x86/entry/entry_64.S:905
RIP: 0010:fib6_add+0x20d9/0x2c10 net/ipv6/ip6_fib.c:1137
RSP: 0018:ffff8801d223f6a0 EFLAGS: 00010297
RAX: ffff8801d23c2500 RBX: 1ffff1003a447eec RCX: ffff8801c1da12d4
RDX: 0000000000000000 RSI: ffff8801c1da11c0 RDI: ffff8801c1da1240
RBP: ffff8801d223fa08 R08: 0000000000000000 R09: 0000000000000000
R10: ffff8801d223f8d0 R11: ffff8801d477e530 R12: 0000000000000001
R13: dffffc0000000000 R14: ffff8801c1da11c0 R15: ffffffff860443c0
 __ip6_ins_rt+0x6c/0x90 net/ipv6/route.c:1001
 ip6_route_add+0x148/0x1a0 net/ipv6/route.c:2772
 ipv6_route_ioctl+0x4cf/0x690 net/ipv6/route.c:3281
 inet6_ioctl+0xef/0x1e0 net/ipv6/af_inet6.c:521
 sock_do_ioctl+0x65/0xb0 net/socket.c:961
 sock_ioctl+0x2c2/0x440 net/socket.c:1058
 vfs_ioctl fs/ioctl.c:45 [inline]
 do_vfs_ioctl+0x1b1/0x1520 fs/ioctl.c:685
 SYSC_ioctl fs/ioctl.c:700 [inline]
 SyS_ioctl+0x8f/0xc0 fs/ioctl.c:691
 entry_SYSCALL_64_fastpath+0x1f/0xbe
RIP: 0033:0x43ff59
RSP: 002b:00007ffeed37d0c8 EFLAGS: 00000213 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043ff59
RDX: 00000000206bb000 RSI: 000000000000890b RDI: 0000000000000003
RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004018c0
R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004018c0
R13: 0000000000401950 R14: 0000000000000000 R15: 0000000000000000
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (8225):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/10/26 23:03 net-next-old 3fc27b71b894 0a4d6e56 .config console log report syz C ci-upstream-net-kasan-gce
2017/10/07 22:20 net-next-old bdc476413dcd c26ea367 .config console log report syz C ci-upstream-net-kasan-gce
2017/10/29 15:13 linux-next 36ef71cae353 e511d9f8 .config console log report syz C ci-upstream-next-kasan-gce
2017/10/26 23:43 mmots 0f611fb6dcc0 e0a2b195 .config console log report syz C ci-upstream-mmots-kasan-gce
2017/10/26 23:03 linux-next 36ef71cae353 e511d9f8 .config console log report syz C ci-upstream-next-kasan-gce
2017/10/28 03:54 net-next-old c859e21a35ce 80c74880 .config console log report ci-upstream-net-kasan-gce
2017/10/26 17:01 net-next-old 3fc27b71b894 0a4d6e56 .config console log report ci-upstream-net-kasan-gce
2017/10/25 00:37 net-next-old 6a331e1513af 3d7d860f .config console log report ci-upstream-net-kasan-gce
2017/10/24 02:38 net-next-old 058c8d591241 92f543f0 .config console log report ci-upstream-net-kasan-gce
2017/10/23 02:13 net-next-old 33ad61d0f799 632b86c9 .config console log report ci-upstream-net-kasan-gce
2017/10/22 12:56 net-next-old f8ddadc4db6c ab829b1b .config console log report ci-upstream-net-kasan-gce
2017/10/20 01:33 net-next-old 48acc9e847ef 355f57c5 .config console log report ci-upstream-net-kasan-gce
2017/10/18 13:53 net-next-old 833e0e2f24fd 441d64d9 .config console log report ci-upstream-net-kasan-gce
2017/10/16 07:42 net-next-old 833e0e2f24fd 441d64d9 .config console log report ci-upstream-net-kasan-gce
2017/10/10 15:51 net-next-old 0349a86c8582 c26ea367 .config console log report ci-upstream-net-kasan-gce
2017/10/09 05:05 net-next-old 28f50eb20931 c26ea367 .config console log report ci-upstream-net-kasan-gce
2017/10/08 20:11 net-next-old c9f766bc6ee0 c26ea367 .config console log report ci-upstream-net-kasan-gce
2017/10/08 09:50 net-next-old bdc476413dcd c26ea367 .config console log report ci-upstream-net-kasan-gce
2017/10/29 01:53 linux-next 36ef71cae353 e511d9f8 .config console log report ci-upstream-next-kasan-gce
2017/10/25 13:32 linux-next 36ef71cae353 e511d9f8 .config console log report ci-upstream-next-kasan-gce
2017/10/16 12:23 linux-next 49827b977a2e 441d64d9 .config console log report ci-upstream-next-kasan-gce
2017/10/14 22:32 linux-next 49827b977a2e 441d64d9 .config console log report ci-upstream-next-kasan-gce
2017/10/11 22:43 linux-next 49827b977a2e 441d64d9 .config console log report ci-upstream-next-kasan-gce
2017/10/11 22:18 linux-next 49827b977a2e 441d64d9 .config console log report ci-upstream-next-kasan-gce
2017/10/11 06:54 mmots 4eb4a4191fe5 441d64d9 .config console log report ci-upstream-mmots-kasan-gce
* Struck through repros no longer work on HEAD.