syzbot


WARNING in bpf_xdp_adjust_tail

Status: fixed on 2023/10/09 13:09
Reported-by: syzbot+af559a703a8da2d14308@syzkaller.appspotmail.com
Fix commit: 20acffcdc2b7 net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
First crash: 643d, last: 482d
Fix bisection: fixed by (bisect log) :
commit 20acffcdc2b74fb7dcc4e299f7aca173df89d911
Author: Andrew Kanner <andrew.kanner@gmail.com>
Date: Thu Aug 3 19:03:18 2023 +0000

  net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()

  
Bug presence (1)
Date Name Commit Repro Result
2023/09/17 upstream (ToT) f0b0d403eabb C Didn't crash
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in bpf_xdp_adjust_tail (3) bpf net 1 1098d 1094d 0/28 auto-closed as invalid on 2022/04/07 02:43
upstream WARNING in bpf_xdp_adjust_tail (4) bpf C error 466 490d 700d 23/28 fixed on 2023/10/12 12:48
upstream WARNING in bpf_xdp_adjust_tail bpf net 1 1623d 1619d 0/28 auto-closed as invalid on 2020/10/29 00:20
upstream WARNING in bpf_xdp_adjust_tail (2) bpf net 1 1339d 1339d 0/28 auto-closed as invalid on 2021/07/10 12:40
linux-5.15 WARNING in bpf_xdp_adjust_tail C error 73 494d 643d 0/3 auto-obsoleted due to no activity on 2023/10/12 14:59
Fix bisection attempts (2)
Created Duration User Patch Repo Result
2023/10/08 08:56 3h06m bisect fix linux-6.1.y OK (1) job log
2023/05/25 17:50 1h07m bisect fix linux-6.1.y OK (0) job log log

Sample crash report:
------------[ cut here ]------------
Too BIG xdp->frame_sz = 131072
WARNING: CPU: 0 PID: 3629 at net/core/filter.c:4069 ____bpf_xdp_adjust_tail net/core/filter.c:4069 [inline]
WARNING: CPU: 0 PID: 3629 at net/core/filter.c:4069 bpf_xdp_adjust_tail+0x235/0x250 net/core/filter.c:4051
Modules linked in:
CPU: 0 PID: 3629 Comm: syz-executor410 Not tainted 6.1.18-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
RIP: 0010:____bpf_xdp_adjust_tail net/core/filter.c:4069 [inline]
RIP: 0010:bpf_xdp_adjust_tail+0x235/0x250 net/core/filter.c:4051
Code: ff ff 48 89 ef e8 2b ff 57 f9 e9 64 fe ff ff e8 01 9b 01 f9 c6 05 ba ec b5 05 01 48 c7 c7 c0 5b e1 8b 44 89 ee e8 6b e3 c9 f8 <0f> 0b 48 c7 c0 ea ff ff ff e9 24 ff ff ff 66 2e 0f 1f 84 00 00 00
RSP: 0018:ffffc90003c7f778 EFLAGS: 00010246
RAX: 84987534a0298b00 RBX: ffffc90003c7f940 RCX: ffff888021e4ba80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff8152ac2e R09: ffffed1017304f1c
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003c7f958
R13: 0000000000020000 R14: ffff88807020feef R15: 1ffff9200078ff29
FS:  00005555560d1300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020010000 CR3: 00000000727f7000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 bpf_prog_4add87e5301a4105+0x12/0x14
 __bpf_prog_run include/linux/filter.h:600 [inline]
 bpf_prog_run_xdp include/linux/filter.h:775 [inline]
 bpf_prog_run_generic_xdp+0x572/0x11c0 net/core/dev.c:4761
 netif_receive_generic_xdp net/core/dev.c:4847 [inline]
 do_xdp_generic+0x406/0x6d0 net/core/dev.c:4906
 tun_get_user+0x269f/0x4480 drivers/net/tun.c:1932
 tun_chr_write_iter+0x10c/0x1f0 drivers/net/tun.c:2036
 call_write_iter include/linux/fs.h:2205 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x7ae/0xba0 fs/read_write.c:584
 ksys_write+0x19c/0x2c0 fs/read_write.c:637
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa3b2a8ca73
Code: 5d 41 5c 41 5d 41 5e e9 9b fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18
RSP: 002b:00007ffd49e8aba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007ffd49e8abd0 RCX: 00007fa3b2a8ca73
RDX: 000000000000fdef RSI: 0000000020000300 RDI: 00000000000000c8
RBP: 0000000000000003 R08: bb1414ac49e8abd7 R09: bb1414ac49e8abd7
R10: bb1414ac49e8abd7 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd49e8abc0 R14: 00007ffd49e8abb8 R15: 00007ffd49e8abb4
 </TASK>

Crashes (238):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/03/13 02:24 linux-6.1.y 1cc3fcf63192 5205ef30 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in bpf_xdp_adjust_tail
2023/03/13 01:43 linux-6.1.y 1cc3fcf63192 5205ef30 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in bpf_xdp_adjust_tail
2023/06/17 23:37 linux-6.1.y ca87e77a2ef8 f3921d4d .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/06/17 23:07 linux-6.1.y ca87e77a2ef8 f3921d4d .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/03/09 22:06 linux-6.1.y 42616e0f09fb f08b59ac .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/03/09 21:05 linux-6.1.y 42616e0f09fb f08b59ac .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/03/07 23:35 linux-6.1.y 42616e0f09fb d7ea8bc4 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/12 06:46 linux-6.1.y 61fd484b2cf6 2f19aa4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in bpf_xdp_adjust_tail
2023/08/16 10:42 linux-6.1.y 1321ab403b38 39990d51 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/16 00:35 linux-6.1.y 1321ab403b38 39990d51 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/11 20:49 linux-6.1.y 1321ab403b38 39990d51 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/11 17:48 linux-6.1.y 1321ab403b38 39990d51 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/10 13:32 linux-6.1.y 0a4a7855302d da3c3ef8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/09 22:01 linux-6.1.y 0a4a7855302d 13ca4cd6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/09 18:23 linux-6.1.y 0a4a7855302d 13ca4cd6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/09 07:50 linux-6.1.y 0a4a7855302d 8ad1a287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/09 05:18 linux-6.1.y 0a4a7855302d 8ad1a287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/08 21:17 linux-6.1.y 0a4a7855302d 9552ae77 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/08 16:32 linux-6.1.y 52a953d0934b 9552ae77 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/08 13:36 linux-6.1.y 52a953d0934b 9552ae77 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/07 18:11 linux-6.1.y 52a953d0934b b1b6ae3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/07 14:07 linux-6.1.y 52a953d0934b dda824c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/07 11:31 linux-6.1.y 52a953d0934b 0ef3dfda .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/05 15:39 linux-6.1.y 52a953d0934b 4ffcc9ef .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/04 20:57 linux-6.1.y 52a953d0934b cdae481e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/03 22:34 linux-6.1.y 52a953d0934b 74621247 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/03 12:02 linux-6.1.y 52a953d0934b 39a91c18 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/03 09:31 linux-6.1.y d2a6dc4eaf6d 39a91c18 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/03 08:15 linux-6.1.y d2a6dc4eaf6d 39a91c18 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/02 18:10 linux-6.1.y d2a6dc4eaf6d b178af49 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/01 20:58 linux-6.1.y d2a6dc4eaf6d df07ffe8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/01 19:52 linux-6.1.y d2a6dc4eaf6d df07ffe8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/08/01 13:51 linux-6.1.y d2a6dc4eaf6d 2a0d0f29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/30 21:07 linux-6.1.y d2a6dc4eaf6d 2a0d0f29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/30 19:22 linux-6.1.y d2a6dc4eaf6d 2a0d0f29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/30 18:19 linux-6.1.y d2a6dc4eaf6d 2a0d0f29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/30 13:14 linux-6.1.y d2a6dc4eaf6d 92476829 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/27 17:43 linux-6.1.y d2a6dc4eaf6d 92476829 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/27 13:23 linux-6.1.y d2a6dc4eaf6d 92476829 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/27 12:11 linux-6.1.y d2a6dc4eaf6d 41fe1bae .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/26 20:11 linux-6.1.y 5302e81aa209 41fe1bae .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/26 16:04 linux-6.1.y 5302e81aa209 41fe1bae .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/26 13:53 linux-6.1.y 5302e81aa209 2a509c27 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/26 11:31 linux-6.1.y 5302e81aa209 2a509c27 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/25 19:59 linux-6.1.y 5302e81aa209 6756545c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/25 17:45 linux-6.1.y 5302e81aa209 6756545c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/25 13:49 linux-6.1.y 5302e81aa209 3b91ad04 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/25 11:09 linux-6.1.y 5302e81aa209 3b91ad04 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/25 00:17 linux-6.1.y 5302e81aa209 b03242d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/24 20:41 linux-6.1.y 5302e81aa209 b03242d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/24 11:03 linux-6.1.y 75389113731b b03242d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/24 08:32 linux-6.1.y 75389113731b b03242d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/23 19:48 linux-6.1.y 75389113731b 27cbe77f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/23 17:46 linux-6.1.y 75389113731b 27cbe77f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/22 11:43 linux-6.1.y a456e1743881 27cbe77f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/22 09:22 linux-6.1.y a456e1743881 27cbe77f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/07/21 19:27 linux-6.1.y a456e1743881 abdf9bae .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
2023/03/07 21:59 linux-6.1.y 42616e0f09fb d7ea8bc4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bpf_xdp_adjust_tail
* Struck through repros no longer work on HEAD.