syzbot

 sign-in | mailing list | source | docs
🐞 Open [1032] ≡ Subsystems 🐞 Fixed [5279] 🐞 Invalid [12607] ⬇ Missing Backports [86] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

WARNING in __skb_flow_dissect (3)

Status: fixed on 2019/03/06 07:43
Subsystems: net
[Documentation on labels]
Fix commit: 0b7959b62573 tun: publish tfile after it's fully initialized
First crash: 2031d, last: 1942d
▶ ▼ Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in __skb_flow_dissect net syz 3 2038d 2039d 11/26 fixed on 2018/10/11 18:37
upstream WARNING in __skb_flow_dissect (5) net 1 43d 43d 0/26 closed as invalid on 2024/04/26 11:59
upstream WARNING in __skb_flow_dissect (4) net C error 6 552d 561d 22/26 fixed on 2023/02/24 13:50

Sample crash report:
device nr0 entered promiscuous mode
device nr0 entered promiscuous mode
device nr0 entered promiscuous mode
device nr0 entered promiscuous mode
device nr0 entered promiscuous mode
WARNING: CPU: 1 PID: 7946 at net/core/flow_dissector.c:764 __skb_flow_dissect+0xdc5/0x5c90 net/core/flow_dissector.c:764
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 7946 Comm: syz-executor4 Not tainted 4.20.0-rc4+ #165
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
kobject: 'tx-1' (00000000a32f47fd): kobject_add_internal: parent: 'queues', set: 'queues'
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 panic+0x2ad/0x55c kernel/panic.c:188
kobject: 'tx-1' (00000000a32f47fd): kobject_uevent_env
 __warn.cold.8+0x20/0x45 kernel/panic.c:540
 report_bug+0x254/0x2d0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:271
 do_invalid_op+0x36/0x40 arch/x86/kernel/traps.c:290
kobject: 'tx-1' (00000000a32f47fd): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-1'
kobject: 'rx-1' (000000004a838265): kobject_add_internal: parent: 'queues', set: 'queues'
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:969
RIP: 0010:__skb_flow_dissect+0xdc5/0x5c90 net/core/flow_dissector.c:764
Code: 48 01 d3 c7 03 f8 f8 f8 f8 48 c1 e8 03 66 44 89 73 04 48 01 d0 c7 00 f8 f8 f8 f8 66 44 89 78 04 e9 58 09 00 00 e8 9b 50 53 fb <0f> 0b e8 94 50 53 fb e8 bf 79 3c fb 31 ff 89 c3 89 c6 e8 94 51 53
RSP: 0018:ffff88819dfd6f80 EFLAGS: 00010293
RAX: ffff8881b5922380 RBX: 0000000000000001 RCX: ffffffff862c4e0d
RDX: 0000000000000000 RSI: ffffffff862c3a55 RDI: ffff8881c6af5018
RBP: ffff88819dfd7710 R08: ffff8881b5922380 R09: ffffed103b5e5b67
R10: ffffed103b5e5b67 R11: ffff8881daf2db3b R12: 0000000000000000
R13: ffff8881c6af5000 R14: ffff8881c6af5000 R15: 000000000000ffff
kobject: 'rx-1' (000000004a838265): kobject_uevent_env
kobject: 'rx-1' (000000004a838265): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-1'
kobject: 'nr0' (000000003d0a885c): kobject_add_internal: parent: 'net', set: 'devices'
kobject: 'nr0' (000000003d0a885c): kobject_uevent_env
kobject: 'nr0' (000000003d0a885c): fill_kobj_path: path = '/devices/virtual/net/nr0'
kobject: 'queues' (00000000b98ae821): kobject_add_internal: parent: 'nr0', set: '<NULL>'
kobject: 'queues' (00000000b98ae821): kobject_uevent_env
kobject: 'queues' (00000000b98ae821): kobject_uevent_env: filter function caused the event to drop!
 skb_flow_dissect_flow_keys_basic include/linux/skbuff.h:1248 [inline]
 skb_probe_transport_header include/linux/skbuff.h:2425 [inline]
 tun_get_user+0x2d0e/0x4240 drivers/net/tun.c:1914
kobject: 'rx-0' (0000000057597420): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'rx-0' (0000000057597420): kobject_uevent_env
kobject: 'rx-0' (0000000057597420): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0'
 tun_chr_write_iter+0xb9/0x160 drivers/net/tun.c:2001
 call_write_iter include/linux/fs.h:1857 [inline]
 new_sync_write fs/read_write.c:474 [inline]
 __vfs_write+0x6b8/0x9f0 fs/read_write.c:487
kobject: 'tx-0' (0000000058936530): kobject_add_internal: parent: 'queues', set: 'queues'
 vfs_write+0x1fc/0x560 fs/read_write.c:549
 ksys_write+0x101/0x260 fs/read_write.c:598
kobject: 'tx-0' (0000000058936530): kobject_uevent_env
 __do_sys_write fs/read_write.c:610 [inline]
 __se_sys_write fs/read_write.c:607 [inline]
 __x64_sys_write+0x73/0xb0 fs/read_write.c:607
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
kobject: 'tx-0' (0000000058936530): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0'
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457569
Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fb4a99edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
kobject: 'nr0' (0000000063425c86): kobject_cleanup, parent           (null)
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569
RDX: 000000000000017b RSI: 0000000020000000 RDI: 0000000000000005
RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4a99ee6d4
R13: 00000000004c5d2a R14: 00000000004da0f0 R15: 00000000ffffffff
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (224):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/04 08:42 bpf-next 90b1023f68c7 03f94a45 .config console log report syz ci-upstream-bpf-next-kasan-gce
2018/10/21 17:25 bpf-next c5fa5d602221 ecb386fe .config console log report syz ci-upstream-bpf-next-kasan-gce
2019/01/13 01:40 upstream 66c56cfa64d9 c3f3344c .config console log report ci-upstream-kasan-gce-smack-root
2019/01/09 06:14 upstream 7b5585136713 010ed08b .config console log report ci-upstream-kasan-gce-smack-root
2018/12/24 13:19 upstream 8fe28cb58bcb be79df56 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/17 22:51 upstream 7566ec393f41 def91db3 .config console log report ci-upstream-kasan-gce-root
2019/01/15 07:12 bpf fb4129b9279d ebacf5cb .config console log report ci-upstream-bpf-kasan-gce
2019/01/14 13:53 bpf fb4129b9279d 95485883 .config console log report ci-upstream-bpf-kasan-gce
2019/01/13 21:00 bpf fb4129b9279d c3f3344c .config console log report ci-upstream-bpf-kasan-gce
2019/01/12 09:48 bpf fb4129b9279d c3f3344c .config console log report ci-upstream-bpf-kasan-gce
2019/01/12 08:24 bpf fb4129b9279d c3f3344c .config console log report ci-upstream-bpf-kasan-gce
2019/01/12 03:55 bpf fb4129b9279d c3f3344c .config console log report ci-upstream-bpf-kasan-gce
2019/01/08 18:18 bpf 2dc0f02da14e 37dd2683 .config console log report ci-upstream-bpf-kasan-gce
2019/01/07 09:42 bpf 97274b612619 ee332608 .config console log report ci-upstream-bpf-kasan-gce
2019/01/03 19:16 bpf a67825f51951 66fcd29b .config console log report ci-upstream-bpf-kasan-gce
2019/01/03 06:20 bpf a67825f51951 06a2b89f .config console log report ci-upstream-bpf-kasan-gce
2019/01/03 02:57 bpf a67825f51951 06a2b89f .config console log report ci-upstream-bpf-kasan-gce
2019/01/01 20:10 bpf 8b6b25cf93b7 3d85f48c .config console log report ci-upstream-bpf-kasan-gce
2019/01/01 01:24 bpf b71acb0e3721 3d85f48c .config console log report ci-upstream-bpf-kasan-gce
2018/12/31 17:02 bpf b71acb0e3721 2b42fdc8 .config console log report ci-upstream-bpf-kasan-gce
2018/12/31 06:05 bpf b71acb0e3721 2b42fdc8 .config console log report ci-upstream-bpf-kasan-gce
2018/12/31 03:28 bpf b71acb0e3721 2b42fdc8 .config console log report ci-upstream-bpf-kasan-gce
2018/12/30 19:23 bpf b71acb0e3721 9942de5f .config console log report ci-upstream-bpf-kasan-gce
2018/12/30 18:18 bpf b71acb0e3721 9942de5f .config console log report ci-upstream-bpf-kasan-gce
2018/12/30 10:14 bpf b71acb0e3721 35e3f847 .config console log report ci-upstream-bpf-kasan-gce
2018/12/30 03:16 bpf b71acb0e3721 35e3f847 .config console log report ci-upstream-bpf-kasan-gce
2018/12/29 23:44 bpf b71acb0e3721 35e3f847 .config console log report ci-upstream-bpf-kasan-gce
2018/12/29 20:38 bpf b71acb0e3721 a40793d7 .config console log report ci-upstream-bpf-kasan-gce
2018/12/29 12:46 bpf b71acb0e3721 a40793d7 .config console log report ci-upstream-bpf-kasan-gce
2018/12/29 07:42 bpf b71acb0e3721 e33ad0f1 .config console log report ci-upstream-bpf-kasan-gce
2018/12/29 03:49 bpf b71acb0e3721 e33ad0f1 .config console log report ci-upstream-bpf-kasan-gce
2018/12/28 11:33 bpf b71acb0e3721 fc6ae81a .config console log report ci-upstream-bpf-kasan-gce
2018/12/27 14:42 bpf bcb671c2fa0e 43cf01dd .config console log report ci-upstream-bpf-kasan-gce
2018/12/27 08:46 bpf bcb671c2fa0e e747ec98 .config console log report ci-upstream-bpf-kasan-gce
2019/01/14 21:53 bpf-next b71acb0e3721 ebacf5cb .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/13 06:29 bpf-next b71acb0e3721 c3f3344c .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/11 16:46 bpf-next b71acb0e3721 c3f3344c .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/11 10:00 bpf-next b71acb0e3721 80dde172 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/10 03:30 bpf-next b71acb0e3721 45c0c1b1 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/09 23:58 bpf-next b71acb0e3721 45c0c1b1 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/09 00:16 bpf-next b71acb0e3721 010ed08b .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/08 00:16 bpf-next b71acb0e3721 69d69aa9 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/07 01:33 bpf-next b71acb0e3721 ee332608 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/05 23:52 bpf-next b71acb0e3721 53be0a37 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/05 20:09 bpf-next b71acb0e3721 53be0a37 .config console log report ci-upstream-bpf-next-kasan-gce
2019/01/03 20:53 bpf-next b71acb0e3721 66fcd29b .config console log report ci-upstream-bpf-next-kasan-gce
2018/12/29 00:46 bpf-next b71acb0e3721 e33ad0f1 .config console log report ci-upstream-bpf-next-kasan-gce
2018/12/28 06:45 bpf-next b71acb0e3721 af317504 .config console log report ci-upstream-bpf-next-kasan-gce
2018/12/27 17:41 bpf-next fa2323325e8b 43cf01dd .config console log report ci-upstream-bpf-next-kasan-gce
2018/10/18 00:36 bpf-next 44d520eb17cd b2695b95 .config console log report ci-upstream-bpf-next-kasan-gce
2018/12/26 17:53 linux-next 6a1d293238c1 8a41a0ad .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.