syzbot


WARNING in skb_warn_bad_offload (4)

Status: fixed on 2023/12/21 03:45
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+c99d835ff081ca30f986@syzkaller.appspotmail.com
Fix commit: fc8b2a619469 net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
First crash: 634d, last: 398d
Cause bisection: introduced by (bisect log) :
commit 860b7f27b8f78564ca5a2f607e0820b2d352a562
Author: Andrew Melnychenko <andrew@daynix.com>
Date: Wed Dec 7 11:35:57 2022 +0000

  linux/virtio_net.h: Support USO offload in vnet header.

Crash: WARNING in skb_warn_bad_offload (log)
Repro: C syz .config
  
Discussions (3)
Title Replies (including bot) Last reply
[PATCH 5.15 1/4] net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation 1 (1) 2024/09/09 18:22
[PATCH net] net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation 8 (8) 2023/10/16 06:39
[syzbot] [net?] WARNING in skb_warn_bad_offload (4) 0 (1) 2023/09/22 04:28
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 WARNING in skb_warn_bad_offload C inconclusive 81 931d 1792d 0/1 upstream: reported C repro on 2019/12/25 14:39
upstream WARNING in skb_warn_bad_offload (5) net C done 18 95d 128d 28/28 fixed on 2024/10/03 15:25
android-49 WARNING in skb_warn_bad_offload (3) C 2188 1814d 2051d 0/3 public: reported C repro on 2019/04/11 08:44
android-49 WARNING in skb_warn_bad_offload C 442 2570d 2677d 1/3 fixed on 2017/11/07 12:35
android-44 WARNING in skb_warn_bad_offload C 2265 1813d 2050d 0/2 public: reported C repro on 2019/04/12 00:00
upstream WARNING in skb_warn_bad_offload (3) net C done 115 636d 773d 22/28 fixed on 2023/02/24 13:50
upstream WARNING in skb_warn_bad_offload net C 6527 2452d 2576d 5/28 fixed on 2018/04/09 09:36
android-49 WARNING in skb_warn_bad_offload (2) C 2630 2401d 2570d 0/3 closed as invalid on 2018/04/25 20:49
upstream WARNING in skb_warn_bad_offload (2) net C 6 2398d 2399d 8/28 fixed on 2018/07/09 18:05
Cause bisection attempts (2)
Created Duration User Patch Repo Result
2023/08/03 18:41 7h13m bisect upstream OK (1) job log log
2023/02/25 12:37 0m bisect net-next-old error
marked invalid by nogikh@google.com

Sample crash report:
skb linear:   000000f0: 00 00 00 00 00 00 65 72 73 70 61 6e 30 00 00 00
skb linear:   00000100: 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00
skb linear:   00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
skb linear:   00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
------------[ cut here ]------------
erspan0: caps=(0x0000000000006869, 0x0000000000000000)
WARNING: CPU: 0 PID: 5015 at net/core/dev.c:3257 skb_warn_bad_offload+0x15c/0x190 net/core/dev.c:3255
Modules linked in:
CPU: 0 PID: 5015 Comm: syz-executor144 Not tainted 6.5.0-rc6-syzkaller-00027-g91aa6c412d7f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
RIP: 0010:skb_warn_bad_offload+0x15c/0x190 net/core/dev.c:3255
Code: e7 e8 d8 3c 3d f9 49 8b 04 24 48 8d 88 70 03 00 00 48 85 c0 49 0f 44 ce 48 c7 c7 e0 62 f6 8b 4c 89 fe 48 89 da e8 24 84 ab f8 <0f> 0b 5b 41 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 38 c1 0f 8c
RSP: 0018:ffffc90003b3f470 EFLAGS: 00010246
RAX: e2a24ee93ea5fb00 RBX: ffff888028b820f0 RCX: ffff888020e31dc0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff8152d442 R09: 1ffff92000767e04
R10: dffffc0000000000 R11: fffff52000767e05 R12: ffff88807685ac98
R13: dffffc0000000000 R14: ffffffff8bf662a0 R15: ffff888028b82000
FS:  00005555574b1380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020001000 CR3: 000000002497d000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __skb_gso_segment+0x3bd/0x4c0 net/core/gso.c:127
 skb_gso_segment include/net/gso.h:83 [inline]
 validate_xmit_skb+0x57d/0x11f0 net/core/dev.c:3618
 validate_xmit_skb_list+0x95/0x130 net/core/dev.c:3668
 sch_direct_xmit+0x11a/0x5f0 net/sched/sch_generic.c:327
 __dev_xmit_skb net/core/dev.c:3764 [inline]
 __dev_queue_xmit+0x18d2/0x38b0 net/core/dev.c:4169
 packet_snd net/packet/af_packet.c:3085 [inline]
 packet_sendmsg+0x466c/0x6170 net/packet/af_packet.c:3117
 sock_sendmsg_nosec net/socket.c:725 [inline]
 sock_sendmsg net/socket.c:748 [inline]
 __sys_sendto+0x484/0x640 net/socket.c:2134
 __do_sys_sendto net/socket.c:2146 [inline]
 __se_sys_sendto net/socket.c:2142 [inline]
 __x64_sys_sendto+0xde/0xf0 net/socket.c:2142
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fc0cd9a1499
Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcc1c44ca8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fc0cd9ee390 RCX: 00007fc0cd9a1499
RDX: 0000000000002378 RSI: 0000000020000080 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000000000000 R09: 00000000000002ff
R10: 0000000004000002 R11: 0000000000000246 R12: 00007ffcc1c44d00
R13: 00007ffcc1c44cd0 R14: 0000000000000001 R15: 00007ffcc1c44d00
 </TASK>

Crashes (1763):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/08/15 19:58 upstream 91aa6c412d7f 39990d51 .config strace log report syz C ci-upstream-kasan-gce-smack-root WARNING in skb_warn_bad_offload
2023/06/09 04:16 upstream 25041a4c02c7 7086cdb9 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in skb_warn_bad_offload
2023/05/22 03:57 upstream e2065b8c1b01 4bce1a3e .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in skb_warn_bad_offload
2023/02/25 22:07 upstream 489fa31ea873 ee50e71c .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in skb_warn_bad_offload
2023/07/01 07:17 upstream 3a8a670eeeaa af3053d2 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-mte WARNING in skb_warn_bad_offload
2023/06/09 08:30 net 21225873be14 7086cdb9 .config strace log report syz C ci-upstream-net-this-kasan-gce WARNING in skb_warn_bad_offload
2023/02/25 13:18 net-old fd2a55e74a99 ee50e71c .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in skb_warn_bad_offload
2023/06/09 07:39 net-next 37ff78e977f1 7086cdb9 .config strace log report syz C ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/02/25 12:37 net-next-old 5b7c4cabbb65 ee50e71c .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/08/16 20:54 linux-next ef66bf8aeb91 7773e940 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in skb_warn_bad_offload
2023/06/08 07:04 linux-next 715abedee4cd 7086cdb9 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in skb_warn_bad_offload
2023/10/18 09:32 upstream 06dc10eae55b 342b9c55 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in skb_warn_bad_offload
2023/10/17 02:13 upstream 58720809f527 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in skb_warn_bad_offload
2023/10/16 22:40 upstream 58720809f527 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in skb_warn_bad_offload
2023/10/14 05:49 upstream ad7f1baed071 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in skb_warn_bad_offload
2023/10/12 02:23 upstream 8182d7a3f1b8 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in skb_warn_bad_offload
2023/10/10 02:12 upstream 94f6f0550c62 3c53c7d9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in skb_warn_bad_offload
2023/10/09 04:01 upstream 37faf07bf90a 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in skb_warn_bad_offload
2023/10/09 01:27 upstream 37faf07bf90a 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in skb_warn_bad_offload
2023/10/08 14:15 upstream b9ddbb0cde2a 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in skb_warn_bad_offload
2023/10/08 09:12 upstream b9ddbb0cde2a 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in skb_warn_bad_offload
2023/10/06 13:39 upstream b78b18fb8ee1 db17ad9f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in skb_warn_bad_offload
2023/10/06 04:54 upstream f291209eca5e db17ad9f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in skb_warn_bad_offload
2023/10/06 03:01 upstream f291209eca5e db17ad9f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in skb_warn_bad_offload
2023/10/06 01:32 upstream f291209eca5e db17ad9f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in skb_warn_bad_offload
2023/10/05 05:51 upstream ba7d997a2a29 b7d7ff54 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in skb_warn_bad_offload
2023/09/14 11:26 upstream aed8aee11130 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in skb_warn_bad_offload
2023/10/11 21:15 upstream 1c8b86a3799f 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in skb_warn_bad_offload
2023/10/04 18:41 upstream cbf3a2cb156a b7d7ff54 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in skb_warn_bad_offload
2023/10/17 14:36 upstream 213f891525c2 342b9c55 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in skb_warn_bad_offload
2023/10/05 05:52 upstream ba7d997a2a29 b7d7ff54 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in skb_warn_bad_offload
2023/10/17 02:01 upstream 58720809f527 342b9c55 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 WARNING in skb_warn_bad_offload
2023/10/12 00:19 upstream 8182d7a3f1b8 83165b57 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in skb_warn_bad_offload
2023/09/24 17:43 upstream 3aba70aed91f 0b6a67ac .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64 WARNING in skb_warn_bad_offload
2023/10/15 06:43 net 2d1c882d4434 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in skb_warn_bad_offload
2023/10/14 14:10 net 2d1c882d4434 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in skb_warn_bad_offload
2023/10/13 14:02 net e8c127b05766 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in skb_warn_bad_offload
2023/10/11 21:22 net a950a5921db4 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in skb_warn_bad_offload
2023/10/11 16:25 net 8f8abb863fa5 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in skb_warn_bad_offload
2023/10/08 13:52 net 66cf7435a269 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in skb_warn_bad_offload
2023/10/08 06:04 net a2e52554c710 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in skb_warn_bad_offload
2023/10/07 23:45 net a2e52554c710 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in skb_warn_bad_offload
2023/10/07 22:44 net a2e52554c710 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in skb_warn_bad_offload
2023/10/19 23:37 net-next b91f2e13c972 42e1d524 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/19 09:02 net-next c4eee56e14fe 342b9c55 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/16 19:39 net-next dccce1d7c040 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/16 09:14 net-next c49bba011b51 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/10 01:07 net-next 19537e125cc7 3c53c7d9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/09 06:55 net-next 19537e125cc7 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/08 17:45 net-next 19537e125cc7 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/08 11:49 net-next 48533eca606e 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/08 10:42 net-next 48533eca606e 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/08 07:22 net-next 48533eca606e 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/08 06:19 net-next 48533eca606e 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/08 05:25 net-next 48533eca606e 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/08 02:31 net-next 48533eca606e 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/08 01:57 net-next 48533eca606e 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/06 06:13 net-next 49e7265fd098 db17ad9f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/10/05 07:53 net-next 93e7eca853ca b7d7ff54 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in skb_warn_bad_offload
2023/09/30 13:34 linux-next df964ce9ef9f 8e26a358 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in skb_warn_bad_offload
2023/10/19 10:06 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 78124b0c1d10 342b9c55 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in skb_warn_bad_offload
2023/10/16 11:42 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 249eb8f39efb 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in skb_warn_bad_offload
2023/10/14 16:14 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 249eb8f39efb 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in skb_warn_bad_offload
2023/10/11 23:14 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 19af4a4ed414 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in skb_warn_bad_offload
2023/10/08 19:52 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 19af4a4ed414 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in skb_warn_bad_offload
2023/10/06 00:59 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2e530aeb342b db17ad9f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in skb_warn_bad_offload
2023/10/05 19:58 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2e530aeb342b db17ad9f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in skb_warn_bad_offload
2023/10/05 16:37 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2e530aeb342b b7d7ff54 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in skb_warn_bad_offload
2023/10/04 22:56 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2e530aeb342b b7d7ff54 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in skb_warn_bad_offload
* Struck through repros no longer work on HEAD.