syzbot

 sign-in | mailing list | source | docs
🐞 Open [980] ≡ Subsystems 🐞 Fixed [4543] 🐞 Invalid [10482] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

WARNING in __skb_flow_dissect (4)

Status: fixed on 2023/02/24 13:50
Labels: net (incorrect?)
Fix commit: 9f225444467b ppp: associate skb with a device at tx
First crash: 214d, last: 205d

Cause bisection: failed (error log, bisect log)
▶ ▼ Discussions (9)
Title Replies (including bot) Last reply
[PATCH AUTOSEL 6.0 01/73] drm/etnaviv: add missing quirks for GC300 75 (75) 2022/12/24 00:35
[PATCH AUTOSEL 5.15 01/46] drm/etnaviv: add missing quirks for GC300 48 (48) 2022/12/24 00:29
[PATCH AUTOSEL 6.1 01/85] drm/etnaviv: add missing quirks for GC300 86 (86) 2022/12/19 01:08
[PATCH AUTOSEL 4.9 01/20] wifi: ath9k: verify the expected usb_endpoints are present 20 (20) 2022/12/18 16:23
[PATCH AUTOSEL 4.14 01/23] wifi: ath9k: verify the expected usb_endpoints are present 23 (23) 2022/12/18 16:21
[PATCH AUTOSEL 4.19 01/26] wifi: ath9k: verify the expected usb_endpoints are present 26 (26) 2022/12/18 16:20
[PATCH AUTOSEL 5.4 01/30] drm/etnaviv: add missing quirks for GC300 30 (30) 2022/12/18 16:18
[PATCH AUTOSEL 5.10 01/39] drm/etnaviv: add missing quirks for GC300 39 (39) 2022/12/18 16:15
[PATCH net-next] ppp: associate skb with a device at tx 2 (2) 2022/11/23 13:00
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in __skb_flow_dissect net syz 3 1691d 1692d 12/24 fixed on 2018/10/11 18:37
upstream WARNING in __skb_flow_dissect (3) net syz 224 1595d 1684d 12/24 fixed on 2019/03/06 07:43

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3606 at net/core/flow_dissector.c:1016 __skb_flow_dissect+0x947/0x5920 net/core/flow_dissector.c:1016
Modules linked in:
CPU: 1 PID: 3606 Comm: syz-executor376 Not tainted 6.1.0-rc3-syzkaller-00239-g10d916c86eca #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
RIP: 0010:__skb_flow_dissect+0x947/0x5920 net/core/flow_dissector.c:1016
Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7f 47 00 00 48 8b 9b 50 06 00 00 e8 97 66 26 fa 48 85 db 0f 85 84 f8 ff ff e8 89 66 26 fa <0f> 0b e9 56 fa ff ff 66 83 fb 08 0f 85 ea 0e 00 00 e8 73 66 26 fa
RSP: 0018:ffffc90003e9f628 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888026b73a80 RSI: ffffffff87564607 RDI: ffff88801c329c98
RBP: ffffffff8de29206 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8de29204
R13: 0000000000000000 R14: ffffffff8de29200 R15: ffff88801c329c80
FS:  000055555728f300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000005d84c8 CR3: 000000007ac41000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 skb_flow_dissect_flow_keys_basic include/linux/skbuff.h:1507 [inline]
 skb_get_poff+0x99/0x1a0 net/core/flow_dissector.c:1843
 ____bpf_skb_get_pay_offset net/core/filter.c:164 [inline]
 bpf_skb_get_pay_offset+0x11/0x20 net/core/filter.c:162
 </TASK>
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 3606 Comm: syz-executor376 Not tainted 6.1.0-rc3-syzkaller-00239-g10d916c86eca #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
 panic+0x2c8/0x622 kernel/panic.c:274
 __warn.cold+0x25c/0x350 kernel/panic.c:621
 report_bug+0x1bc/0x210 lib/bug.c:198
 handle_bug+0x3c/0x70 arch/x86/kernel/traps.c:317
 exc_invalid_op+0x14/0x40 arch/x86/kernel/traps.c:338
 asm_exc_invalid_op+0x16/0x20 arch/x86/include/asm/idtentry.h:568
RIP: 0010:__skb_flow_dissect+0x947/0x5920 net/core/flow_dissector.c:1016
Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7f 47 00 00 48 8b 9b 50 06 00 00 e8 97 66 26 fa 48 85 db 0f 85 84 f8 ff ff e8 89 66 26 fa <0f> 0b e9 56 fa ff ff 66 83 fb 08 0f 85 ea 0e 00 00 e8 73 66 26 fa
RSP: 0018:ffffc90003e9f628 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888026b73a80 RSI: ffffffff87564607 RDI: ffff88801c329c98
RBP: ffffffff8de29206 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8de29204
R13: 0000000000000000 R14: ffffffff8de29200 R15: ffff88801c329c80
 skb_flow_dissect_flow_keys_basic include/linux/skbuff.h:1507 [inline]
 skb_get_poff+0x99/0x1a0 net/core/flow_dissector.c:1843
 ____bpf_skb_get_pay_offset net/core/filter.c:164 [inline]
 bpf_skb_get_pay_offset+0x11/0x20 net/core/filter.c:162
 </TASK>
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Manager Title
2022/11/05 16:04 upstream 10d916c86eca 6d752409 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in __skb_flow_dissect
2022/10/27 09:44 upstream 98555239e4c3 86777b7f .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in __skb_flow_dissect
2022/10/27 09:49 net-old c5f0a1728874 86777b7f .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __skb_flow_dissect
2022/10/27 09:24 net-next-old 34e0b9452030 86777b7f .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __skb_flow_dissect
2022/10/27 12:24 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci bbed346d5a96 86777b7f .config console log report syz C [disk image] [vmlinux] ci-upstream-gce-arm64 WARNING in __skb_flow_dissect
2022/10/27 09:07 net-next-old 34e0b9452030 86777b7f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __skb_flow_dissect
* Struck through repros no longer work on HEAD.