syzbot


WARNING in __nf_unregister_net_hook (6)

Status: upstream: reported C repro on 2023/10/17 18:04
Subsystems: netfilter
[Documentation on labels]
Reported-by: syzbot+de4025c006ec68ac56fc@syzkaller.appspotmail.com
Fix commit: bccebf647017 netfilter: nf_tables: set dormant flag on hook register failure
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-net-next-test-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64 ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64]
First crash: 282d, last: 15d
Cause bisection: failed (error log, bisect log)
  
Discussions (9)
Title Replies (including bot) Last reply
[PATCH net 1/5] netfilter: nf_tables: set dormant flag on hook register failure 1 (1) 2024/02/22 00:08
[PATCH nf] netfilter: nf_tables: set dormant flag on hook register failure 1 (1) 2024/02/19 15:58
[syzbot] [netfilter?] WARNING in __nf_unregister_net_hook (6) 0 (3) 2024/02/19 14:04
[syzbot] Monthly netfilter report (Jan 2024) 0 (1) 2024/01/03 10:47
Re: [syzbot] [PATCH] Test for 6465e260f487 0 (1) 2023/11/20 10:56
Re: [syzbot] [PATCH] Test for 6465e260f487 0 (1) 2023/11/20 03:07
Re: [syzbot] [PATCH] Test for 6465e260f487 0 (1) 2023/11/19 10:32
Re: [syzbot] [PATCH] Test for 6465e260f487 0 (1) 2023/11/19 05:15
Re: [syzbot] [PATCH] Test for 6465e260f487 0 (1) 2023/11/05 05:00
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in __nf_unregister_net_hook (4) netfilter C error 66 722d 1052d 20/26 fixed on 2022/03/08 16:11
upstream WARNING in __nf_unregister_net_hook netfilter 1 1404d 1400d 0/26 auto-closed as invalid on 2020/06/22 17:41
upstream WARNING in __nf_unregister_net_hook (5) netfilter 183 635d 719d 0/26 auto-closed as invalid on 2022/07/31 13:33
upstream WARNING in __nf_unregister_net_hook (2) netfilter C done 9 1324d 1323d 15/26 fixed on 2020/09/16 22:51
upstream WARNING in __nf_unregister_net_hook (3) netfilter 1 1257d 1257d 0/26 auto-closed as invalid on 2020/12/16 11:13
Last patch testing requests (19)
Created Duration User Patch Repo Result
2024/02/19 14:04 23m fw@strlen.de https://git.kernel.org/pub/scm/linux/kernel/git/fwestphal/nf.git dormant-reset OK log
2024/02/17 12:38 16m fw@strlen.de https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git main report log
2023/12/26 15:37 20m retest repro linux-next report log
2023/11/20 10:56 18m eadavis@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6465e260f487 report log
2023/11/20 03:07 34m eadavis@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6465e260f487 report log
2023/11/19 10:32 18m eadavis@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6465e260f487 report log
2023/11/19 05:15 41m eadavis@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6465e260f487 error OK
2023/11/05 05:00 14m eadavis@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6465e260f487 report log
2023/10/23 02:33 21m eadavis@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6465e260f487 report log
2023/10/22 04:50 1h07m eadavis@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6465e260f487 report log
2023/10/21 13:14 23m twuufnxlz@gmail.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6465e260f487 report log
2023/10/21 02:48 14m eadavis@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6465e260f487 report log
2023/10/21 02:28 12m twuufnxlz@gmail.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6465e260f487 error OK
2023/10/19 07:05 23m twuufnxlz@gmail.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6465e260f487 report log
2023/10/19 06:37 15m twuufnxlz@gmail.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6465e260f487 report log
2023/10/19 03:13 14m twuufnxlz@gmail.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6465e260f487 report log
2023/10/12 00:15 16m retest repro upstream report log
2023/10/10 18:10 20m retest repro linux-next error OK
2023/07/30 07:08 23m retest repro linux-next report log
Fix bisection attempts (3)
Created Duration User Patch Repo Result
2024/02/11 10:00 3h16m bisect fix upstream job log (0) log
2023/12/12 12:28 3h07m bisect fix upstream job log (0) log
2023/11/11 01:06 1h51m bisect fix upstream job log (0) log

Sample crash report:
------------[ cut here ]------------
hook not found, pf 2 num 1
WARNING: CPU: 1 PID: 5062 at net/netfilter/core.c:517 __nf_unregister_net_hook+0x1de/0x670 net/netfilter/core.c:517
Modules linked in:
CPU: 1 PID: 5062 Comm: syz-executor417 Not tainted 6.6.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
RIP: 0010:__nf_unregister_net_hook+0x1de/0x670 net/netfilter/core.c:517
Code: 14 02 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 7a 04 00 00 8b 53 1c 48 c7 c7 c0 d4 a8 8b 8b 74 24 04 e8 b2 ce dc f8 <0f> 0b e9 ec 00 00 00 e8 46 a5 16 f9 48 89 e8 48 c1 e0 04 49 8d 7c
RSP: 0018:ffffc9000355f2b8 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff8880218dde00 RCX: 0000000000000000
RDX: ffff888019aee000 RSI: ffffffff814cf016 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff92611690
R13: ffff888016fff020 R14: ffff888016fff000 R15: ffff8880218dde1c
FS:  00007f76ca1526c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f76ca1e86b8 CR3: 0000000020292000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 nf_unregister_net_hook+0xd5/0x110 net/netfilter/core.c:539
 __nf_tables_unregister_hook net/netfilter/nf_tables_api.c:361 [inline]
 __nf_tables_unregister_hook+0x1a0/0x220 net/netfilter/nf_tables_api.c:340
 nf_tables_unregister_hook net/netfilter/nf_tables_api.c:368 [inline]
 nf_tables_commit+0x410f/0x59f0 net/netfilter/nf_tables_api.c:9992
 nfnetlink_rcv_batch+0xf36/0x2500 net/netfilter/nfnetlink.c:569
 nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:639 [inline]
 nfnetlink_rcv+0x3bf/0x430 net/netfilter/nfnetlink.c:657
 netlink_unicast_kernel net/netlink/af_netlink.c:1342 [inline]
 netlink_unicast+0x536/0x810 net/netlink/af_netlink.c:1368
 netlink_sendmsg+0x93c/0xe40 net/netlink/af_netlink.c:1910
 sock_sendmsg_nosec net/socket.c:730 [inline]
 sock_sendmsg+0xd9/0x180 net/socket.c:753
 ____sys_sendmsg+0x6ac/0x940 net/socket.c:2541
 ___sys_sendmsg+0x135/0x1d0 net/socket.c:2595
 __sys_sendmsg+0x117/0x1e0 net/socket.c:2624
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f76ca192059
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f76ca152208 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f76ca21c3e8 RCX: 00007f76ca192059
RDX: 0000000000000000 RSI: 000000002000c2c0 RDI: 0000000000000004
RBP: 00007f76ca21c3e0 R08: 0000000000000003 R09: 0000000000000000
R10: 0000000000000a00 R11: 0000000000000246 R12: 00007f76ca1e917c
R13: 0000000000000001 R14: 0000000000000008 R15: 0200000000000000
 </TASK>

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/09/26 06:04 upstream 6465e260f487 0b6a67ac .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in __nf_unregister_net_hook
2023/05/21 06:57 linux-next 715abedee4cd 4bce1a3e .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in __nf_unregister_net_hook
* Struck through repros no longer work on HEAD.