syzbot


WARNING in nf_reject_fill_skb_dst

Status: upstream: reported C repro on 2025/08/21 09:55
Subsystems: netfilter
[Documentation on labels]
Reported-by: syzbot+b17c05ecb64771a892d1@syzkaller.appspotmail.com
First crash: 1d22h, last: 14m
Cause bisection: introduced by (bisect log) :
commit a890348adcc993f48d1ae38f1174dc8de4c3c5ac
Author: Stanislav Fomichev <sdf@fomichev.me>
Date: Mon Aug 18 15:40:32 2025 +0000

  net: Add skb_dst_check_unset

Crash: WARNING in nf_send_unreach6 (log)
Repro: C syz .config
  
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [netfilter?] WARNING in nf_reject_fill_skb_dst 0 (1) 2025/08/21 09:55

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 12 at ./include/linux/skbuff.h:1165 skb_dst_check_unset include/linux/skbuff.h:1164 [inline]
WARNING: CPU: 0 PID: 12 at ./include/linux/skbuff.h:1165 skb_dst_set include/linux/skbuff.h:1211 [inline]
WARNING: CPU: 0 PID: 12 at ./include/linux/skbuff.h:1165 nf_reject_fill_skb_dst+0x2a4/0x330 net/ipv4/netfilter/nf_reject_ipv4.c:234
Modules linked in:
CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Workqueue: ipv6_addrconf addrconf_dad_work
RIP: 0010:skb_dst_check_unset include/linux/skbuff.h:1164 [inline]
RIP: 0010:skb_dst_set include/linux/skbuff.h:1211 [inline]
RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 net/ipv4/netfilter/nf_reject_ipv4.c:234
Code: 8b 0d 60 6e 8b 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 03 8a 67 01 cc e8 4d ca aa f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe
RSP: 0018:ffffc90000007360 EFLAGS: 00010246
RAX: ffffffff8a14e1e3 RBX: ffff8880580b6c80 RCX: ffff88801ce9da00
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000007490 R08: ffffffff8fa37c37 R09: 1ffffffff1f46f86
R10: dffffc0000000000 R11: fffffbfff1f46f87 R12: ffff888026e24101
R13: dffffc0000000001 R14: 1ffff92000000e70 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c00094bc28 CR3: 000000000df36000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 nf_send_unreach+0x17b/0x6e0 net/ipv4/netfilter/nf_reject_ipv4.c:325
 nft_reject_inet_eval+0x4bc/0x690 net/netfilter/nft_reject_inet.c:27
 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline]
 nft_do_chain+0x40c/0x1920 net/netfilter/nf_tables_core.c:285
 nft_do_chain_inet+0x25d/0x340 net/netfilter/nft_chain_filter.c:161
 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
 nf_hook_slow+0xc5/0x220 net/netfilter/core.c:623
 nf_hook include/linux/netfilter.h:273 [inline]
 NF_HOOK+0x206/0x3a0 include/linux/netfilter.h:316
 __netif_receive_skb_one_core net/core/dev.c:5979 [inline]
 __netif_receive_skb+0x143/0x380 net/core/dev.c:6092
 process_backlog+0x60e/0x14f0 net/core/dev.c:6444

Crashes (116):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/08/21 11:26 net-next c3199adbe4ff 0b9605c8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 07:57 net-next c3199adbe4ff 0b9605c8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 06:20 net-next c3199adbe4ff 0b9605c8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 23:33 net-next 5c69e0b395c1 bd178e57 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 23:23 net-next 5c69e0b395c1 bd178e57 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 18:39 net-next 5c69e0b395c1 bd178e57 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 17:56 net-next 5c69e0b395c1 bd178e57 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 16:32 net-next 5c69e0b395c1 bd178e57 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 10:11 linux-next 7fa4d8dc380f 0b9605c8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 20:04 net-next ae76e8d2c27e 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 18:10 net-next ae76e8d2c27e 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 16:50 net-next ae76e8d2c27e 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 16:50 net-next ae76e8d2c27e 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 15:00 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 13:11 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 08:57 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 07:38 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 06:59 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 06:15 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 06:06 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 04:41 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 04:25 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 03:44 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 03:43 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 03:42 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 02:36 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 02:31 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 02:31 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 02:30 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 02:25 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 02:22 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 01:40 net-next c3199adbe4ff 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 00:05 net-next 5c69e0b395c1 bd178e57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 23:53 net-next 5c69e0b395c1 bd178e57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 22:13 net-next 5c69e0b395c1 bd178e57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 21:59 net-next 5c69e0b395c1 bd178e57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 21:30 net-next 5c69e0b395c1 bd178e57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 21:00 net-next 5c69e0b395c1 bd178e57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 16:52 net-next 5c69e0b395c1 bd178e57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 15:04 net-next 5c69e0b395c1 bd178e57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 14:46 net-next 5c69e0b395c1 bd178e57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 13:31 net-next 5c69e0b395c1 bd178e57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/20 13:28 net-next 5c69e0b395c1 bd178e57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/22 11:12 linux-next 7fa4d8dc380f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/22 03:49 linux-next 7fa4d8dc380f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in nf_reject_fill_skb_dst
2025/08/22 00:53 linux-next 7fa4d8dc380f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in nf_reject_fill_skb_dst
2025/08/21 23:36 linux-next 7fa4d8dc380f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 21:36 linux-next 7fa4d8dc380f 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in nf_reject_fill_skb_dst
2025/08/21 21:23 linux-next 7fa4d8dc380f 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in nf_reject_fill_skb_dst
2025/08/21 09:29 linux-next 7fa4d8dc380f 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in nf_reject_fill_skb_dst
2025/08/21 09:24 linux-next 7fa4d8dc380f 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in nf_reject_fill_skb_dst
2025/08/21 09:22 linux-next 7fa4d8dc380f 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in nf_reject_fill_skb_dst
2025/08/21 09:11 linux-next 7fa4d8dc380f 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 08:31 linux-next 7fa4d8dc380f 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in nf_reject_fill_skb_dst
2025/08/21 08:30 linux-next 7fa4d8dc380f 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in nf_reject_fill_skb_dst
* Struck through repros no longer work on HEAD.