syzbot


UBSAN: object-size-mismatch in wg_xmit

Status: auto-closed as invalid on 2021/04/13 23:53
Subsystems: wireguard
[Documentation on labels]
Reported-by: syzbot+8f90d005ab2d22342b6d@syzkaller.appspotmail.com
First crash: 1188d, last: 1160d
Discussions (4)
Title Replies (including bot) Last reply
Re: UBSAN: object-size-mismatch in wg_xmit 6 (6) 2021/01/12 09:54
Re: UBSAN: object-size-mismatch in wg_xmit 4 (4) 2021/01/08 20:54
Re: UBSAN: object-size-mismatch in wg_xmit 1 (1) 2021/01/08 09:30
UBSAN: object-size-mismatch in wg_xmit 5 (6) 2021/01/07 17:01

Sample crash report:
================================================================================
UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2021:28
member access within address 000000002ecd4b9a with insufficient space
for an object of type 'struct sk_buff'
CPU: 1 PID: 3080 Comm: kworker/1:2 Not tainted 5.10.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x137/0x1be lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:148 [inline]
 handle_object_size_mismatch lib/ubsan.c:297 [inline]
 ubsan_type_mismatch_common+0x1e2/0x390 lib/ubsan.c:310
 __ubsan_handle_type_mismatch_v1+0x41/0x50 lib/ubsan.c:339
 __skb_queue_before include/linux/skbuff.h:2021 [inline]
 __skb_queue_tail include/linux/skbuff.h:2054 [inline]
 wg_xmit+0x45d/0xdf0 drivers/net/wireguard/device.c:182
 __netdev_start_xmit include/linux/netdevice.h:4775 [inline]
 netdev_start_xmit+0x7b/0x140 include/linux/netdevice.h:4789
 xmit_one net/core/dev.c:3556 [inline]
 dev_hard_start_xmit+0x182/0x2e0 net/core/dev.c:3572
 __dev_queue_xmit+0x1229/0x1e60 net/core/dev.c:4133
 neigh_output include/net/neighbour.h:510 [inline]
 ip6_finish_output2+0xe8d/0x11e0 net/ipv6/ip6_output.c:117
 dst_output include/net/dst.h:441 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 ndisc_send_skb+0x85b/0xc70 net/ipv6/ndisc.c:508
 addrconf_dad_completed+0x5ef/0x990 net/ipv6/addrconf.c:4192
 addrconf_dad_work+0xb92/0x1480 net/ipv6/addrconf.c:3959
 process_one_work+0x471/0x830 kernel/workqueue.c:2275
 worker_thread+0x757/0xb10 kernel/workqueue.c:2421
 kthread+0x39a/0x3c0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296
================================================================================

Crashes (172293):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/01/13 23:50 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 23:45 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 23:40 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 23:36 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 23:29 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 23:24 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 23:20 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 23:15 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 23:10 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 23:06 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 23:01 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 22:56 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 22:51 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 22:47 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 22:42 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 22:38 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 22:33 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 22:28 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 22:23 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 22:19 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 22:14 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 22:09 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 22:04 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 22:00 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 21:55 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 21:51 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 21:46 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 21:41 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 21:37 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 21:32 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 21:27 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 21:22 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 21:17 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 21:13 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 21:08 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 21:03 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 20:59 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 20:54 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 20:49 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 20:45 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/13 20:40 upstream 5e60366d56c6 a945f0a3 .config console log report info ci-upstream-kasan-gce-smack-root
2020/12/20 16:51 upstream 5e60366d56c6 04201c06 .config console log report info ci-upstream-kasan-gce-smack-root
2020/12/16 16:51 upstream 5e60366d56c6 f213e07e .config console log report info ci-upstream-kasan-gce-smack-root
* Struck through repros no longer work on HEAD.