syzbot


WARNING in skb_warn_bad_offload

Status: fixed on 2017/11/07 12:35
Fix commit: net: remove open-coded skb_cow_head.
First crash: 2679d, last: 2571d
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 WARNING in skb_warn_bad_offload C inconclusive 81 931d 1792d 0/1 upstream: reported C repro on 2019/12/25 14:39
upstream WARNING in skb_warn_bad_offload (5) net C done 18 95d 128d 28/28 fixed on 2024/10/03 15:25
android-49 WARNING in skb_warn_bad_offload (3) C 2188 1814d 2051d 0/3 public: reported C repro on 2019/04/11 08:44
android-44 WARNING in skb_warn_bad_offload C 2265 1813d 2050d 0/2 public: reported C repro on 2019/04/12 00:00
upstream WARNING in skb_warn_bad_offload (3) net C done 115 636d 773d 22/28 fixed on 2023/02/24 13:50
upstream WARNING in skb_warn_bad_offload net C 6527 2453d 2576d 5/28 fixed on 2018/04/09 09:36
android-49 WARNING in skb_warn_bad_offload (2) C 2630 2401d 2570d 0/3 closed as invalid on 2018/04/25 20:49
upstream WARNING in skb_warn_bad_offload (4) net C done 1763 398d 426d 25/28 fixed on 2023/12/21 03:45
upstream WARNING in skb_warn_bad_offload (2) net C 6 2399d 2399d 8/28 fixed on 2018/07/09 18:05

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3240 at net/core/dev.c:2462 skb_warn_bad_offload+0x2af/0x390 net/core/dev.c:2457
syz0: caps=(0x00000400000058c1, 0x0000000000000000) len=170 data_len=0 gso_size=17408 gso_type=5 ip_summed=0
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 3240 Comm: syzkaller322729 Not tainted 4.9.43-g7073fca #25
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d853f200 ffffffff81d92909 ffffffff83a46b40 ffff8801d853f2d8
 ffffffff83edf700 ffffffff82f292cf 0000000000000009 ffff8801d853f2c8
 ffffffff8142e0e1 0000000041b58ab3 ffffffff84184118 ffffffff8142df25
Call Trace:
 [<ffffffff81d92909>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d92909>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff8142e0e1>] panic+0x1bc/0x3a8 kernel/panic.c:179
 [<ffffffff81131e54>] __warn+0x1c4/0x1e0 kernel/panic.c:542
 [<ffffffff81131f34>] warn_slowpath_fmt+0xc4/0x110 kernel/panic.c:565
 [<ffffffff82f292cf>] skb_warn_bad_offload+0x2af/0x390 net/core/dev.c:2457
 [<ffffffff82f3ce3b>] __skb_gso_segment+0x52b/0x670 net/core/dev.c:2763
 [<ffffffff82f3dcde>] skb_gso_segment include/linux/netdevice.h:3995 [inline]
 [<ffffffff82f3dcde>] validate_xmit_skb+0x44e/0x980 net/core/dev.c:2999
 [<ffffffff82f3e2c7>] validate_xmit_skb_list+0xb7/0x120 net/core/dev.c:3048
 [<ffffffff82fd784a>] sch_direct_xmit+0x34a/0x5d0 net/sched/sch_generic.c:177
 [<ffffffff82f404cd>] __dev_xmit_skb net/core/dev.c:3129 [inline]
 [<ffffffff82f404cd>] __dev_queue_xmit+0x15fd/0x1e60 net/core/dev.c:3389
 [<ffffffff810002b8>] ? 0xffffffff810002b8
 [<ffffffff82f40d47>] dev_queue_xmit+0x17/0x20 net/core/dev.c:3454
 [<ffffffff8354c7f7>] packet_snd net/packet/af_packet.c:2944 [inline]
 [<ffffffff8354c7f7>] packet_sendmsg+0x2d07/0x47e0 net/packet/af_packet.c:2969
 [<ffffffff82ecbb9a>] sock_sendmsg_nosec net/socket.c:635 [inline]
 [<ffffffff82ecbb9a>] sock_sendmsg+0xca/0x110 net/socket.c:645
 [<ffffffff82ecd3a0>] ___sys_sendmsg+0x320/0x7e0 net/socket.c:1968
 [<ffffffff82ecf9e9>] __sys_sendmmsg+0x159/0x3a0 net/socket.c:2058
 [<ffffffff82ecfc65>] SYSC_sendmmsg net/socket.c:2089 [inline]
 [<ffffffff82ecfc65>] SyS_sendmmsg+0x35/0x60 net/socket.c:2084
 [<ffffffff838a6985>] entry_SYSCALL_64_fastpath+0x23/0xc6
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (442):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/08/14 19:01 https://android.googlesource.com/kernel/common android-4.9 7073fca5af57 6a0246bf .config console log report syz C ci-android-49-kasan-gce
2017/10/24 10:22 https://android.googlesource.com/kernel/common android-4.9 27155df9e4e6 9bf63a7b .config console log report ci-android-49-kasan-gce
2017/10/21 20:05 https://android.googlesource.com/kernel/common android-4.9 9eaaf14c7829 ab829b1b .config console log report ci-android-49-kasan-gce
2017/10/05 11:04 https://android.googlesource.com/kernel/common android-4.9 3217cccb8161 c26ea367 .config console log report ci-android-49-kasan-gce
2017/09/14 18:11 https://android.googlesource.com/kernel/common android-4.9 f7d2974f3432 2bab8ad8 .config console log report ci-android-49-kasan-gce
2017/09/13 14:35 https://android.googlesource.com/kernel/common android-4.9 0268f76e4b39 96b8e399 .config console log report ci-android-49-kasan-gce
2017/09/13 05:56 https://android.googlesource.com/kernel/common android-4.9 0268f76e4b39 96b8e399 .config console log report ci-android-49-kasan-gce
2017/09/13 02:04 https://android.googlesource.com/kernel/common android-4.9 0268f76e4b39 96b8e399 .config console log report ci-android-49-kasan-gce
2017/09/07 01:34 https://android.googlesource.com/kernel/common android-4.9 6ec105282807 0ed1da4a .config console log report ci-android-49-kasan-gce
2017/09/06 18:05 https://android.googlesource.com/kernel/common android-4.9 6ec105282807 0ed1da4a .config console log report ci-android-49-kasan-gce
2017/09/05 19:51 https://android.googlesource.com/kernel/common android-4.9 6cd212785150 0ed1da4a .config console log report ci-android-49-kasan-gce
2017/09/04 09:57 https://android.googlesource.com/kernel/common android-4.9 9100442602d8 a54dce00 .config console log report ci-android-49-kasan-gce
2017/09/03 12:48 https://android.googlesource.com/kernel/common android-4.9 9100442602d8 a54dce00 .config console log report ci-android-49-kasan-gce
2017/08/30 09:55 https://android.googlesource.com/kernel/common android-4.9 5731c3033490 1d000225 .config console log report ci-android-49-kasan-gce
2017/08/29 21:58 https://android.googlesource.com/kernel/common android-4.9 5731c3033490 1d000225 .config console log report ci-android-49-kasan-gce
2017/08/28 17:22 https://android.googlesource.com/kernel/common android-4.9 bf7ef8f2d57c be291771 .config console log report ci-android-49-kasan-gce
2017/08/28 16:55 https://android.googlesource.com/kernel/common android-4.9 bf7ef8f2d57c be291771 .config console log report ci-android-49-kasan-gce
2017/08/25 08:33 https://android.googlesource.com/kernel/common android-4.9 34803e7c1c92 c3631fc7 .config console log report ci-android-49-kasan-gce
2017/08/24 08:38 https://android.googlesource.com/kernel/common android-4.9 34803e7c1c92 c3631fc7 .config console log report ci-android-49-kasan-gce
2017/08/23 11:00 https://android.googlesource.com/kernel/common android-4.9 34803e7c1c92 c3631fc7 .config console log report ci-android-49-kasan-gce
2017/08/18 08:44 https://android.googlesource.com/kernel/common android-4.9 6e055356d529 41bbf437 .config console log report ci-android-49-kasan-gce
* Struck through repros no longer work on HEAD.