syzbot


WARNING in e1000_rx_checksum

Status: upstream: reported on 2024/12/22 23:55
Subsystems: intel-wired-lan
[Documentation on labels]
Reported-by: syzbot+1bd718f8eea824d2d157@syzkaller.appspotmail.com
First crash: 95d, last: 25d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [intel-wired-lan?] WARNING in e1000_rx_checksum 0 (1) 2024/12/22 23:55

Sample crash report:
lapbether: lapb_data_request error - 4
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5922 at ./include/linux/skbuff.h:5155 skb_checksum_none_assert include/linux/skbuff.h:5155 [inline]
WARNING: CPU: 1 PID: 5922 at ./include/linux/skbuff.h:5155 e1000_rx_checksum.constprop.0+0x176/0x1e0 drivers/net/ethernet/intel/e1000/e1000_main.c:3954
Modules linked in:
CPU: 1 UID: 0 PID: 5922 Comm: sshd Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:skb_checksum_none_assert include/linux/skbuff.h:5155 [inline]
RIP: 0010:e1000_rx_checksum.constprop.0+0x176/0x1e0 drivers/net/ethernet/intel/e1000/e1000_main.c:3954
Code: 00 00 00 00 fc ff df 80 3c 02 00 75 76 48 83 85 b0 04 00 00 01 5b 5d 41 5c 41 5d 41 5e 41 5f e9 40 24 33 fb e8 3b 24 33 fb 90 <0f> 0b 90 e9 e7 fe ff ff e8 2d 24 33 fb 48 8d bd a8 04 00 00 48 b8
RSP: 0018:ffffc900006b0a48 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000007 RCX: ffffffff8686ba9c
RDX: ffff88802b018000 RSI: ffffffff8686bbb5 RDI: 0000000000000001
RBP: ffff888108068d80 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000020 R11: 0000000000000003 R12: ffff88804e1daa00
R13: 0000000000000020 R14: ffff88804e1daa80 R15: 0000000000000000
FS:  00007fe68077dd00(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5e21a30908 CR3: 0000000025a08000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 e1000_clean_jumbo_rx_irq+0xf3e/0x28c0 drivers/net/ethernet/intel/e1000/e1000_main.c:4275
 e1000_clean+0x9d6/0x2700 drivers/net/ethernet/intel/e1000/e1000_main.c:3807
 __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:7194
 napi_poll net/core/dev.c:7263 [inline]
 net_rx_action+0xa94/0x1010 net/core/dev.c:7385
 handle_softirqs+0x213/0x8f0 kernel/softirq.c:561
 do_softirq kernel/softirq.c:462 [inline]
 do_softirq+0xb2/0xf0 kernel/softirq.c:449
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0x100/0x120 kernel/softirq.c:389
 local_bh_enable include/linux/bottom_half.h:33 [inline]
 rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline]
 __dev_queue_xmit+0x8b0/0x43e0 net/core/dev.c:4682
 dev_queue_xmit include/linux/netdevice.h:3313 [inline]
 neigh_hh_output include/net/neighbour.h:523 [inline]
 neigh_output include/net/neighbour.h:537 [inline]
 ip_finish_output2+0xc34/0x2180 net/ipv4/ip_output.c:236
 __ip_finish_output net/ipv4/ip_output.c:314 [inline]
 __ip_finish_output+0x49e/0x950 net/ipv4/ip_output.c:296
 ip_finish_output+0x35/0x380 net/ipv4/ip_output.c:324
 NF_HOOK_COND include/linux/netfilter.h:303 [inline]
 ip_output+0x13b/0x2a0 net/ipv4/ip_output.c:434
 dst_output include/net/dst.h:459 [inline]
 ip_local_out net/ipv4/ip_output.c:130 [inline]
 __ip_queue_xmit+0x1a8d/0x22d0 net/ipv4/ip_output.c:528
 __tcp_transmit_skb+0x2b39/0x3ec0 net/ipv4/tcp_output.c:1471
 tcp_transmit_skb net/ipv4/tcp_output.c:1489 [inline]
 tcp_write_xmit+0x12b1/0x8560 net/ipv4/tcp_output.c:2832
 __tcp_push_pending_frames+0xaf/0x390 net/ipv4/tcp_output.c:3015
 tcp_push_pending_frames include/net/tcp.h:2124 [inline]
 tcp_data_snd_check net/ipv4/tcp_input.c:5753 [inline]
 tcp_rcv_established+0xd86/0x2140 net/ipv4/tcp_input.c:6199
 tcp_v4_do_rcv+0x5ca/0xa90 net/ipv4/tcp_ipv4.c:1918
 sk_backlog_rcv include/net/sock.h:1122 [inline]
 __release_sock+0x31b/0x400 net/core/sock.c:3106
 release_sock+0x5a/0x220 net/core/sock.c:3660
 tcp_recvmsg+0x139/0x680 net/ipv4/tcp.c:2872
 inet_recvmsg+0x12b/0x6a0 net/ipv4/af_inet.c:883
 sock_recvmsg_nosec net/socket.c:1023 [inline]
 sock_recvmsg+0x1b2/0x250 net/socket.c:1045
 sock_read_iter+0x2bb/0x3b0 net/socket.c:1115
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0xa53/0xbf0 fs/read_write.c:565
 ksys_read+0x207/0x250 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe680316b6a
Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007fffdfbafef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fe680316b6a
RDX: 0000000000040000 RSI: 000055c8485df130 RDI: 0000000000000004
RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffdfbaff60 R14: 000055c8484bb3d0 R15: 00007fffdfbaffd8
 </TASK>

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/26 23:05 upstream 5394eea10651 6a8fcbc4 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in e1000_rx_checksum
2025/02/13 13:23 upstream 4dc1d1bec898 7320a65f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in e1000_rx_checksum
2024/12/18 23:52 upstream c061cf420ded 1432fc84 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in e1000_rx_checksum
* Struck through repros no longer work on HEAD.