WARNING in skb_warn_bad_offload

Status: upstream: reported C repro on 2019/12/25 14:39
Reported-by: syzbot+c75af286bcfa9fb5ac5b@syzkaller.appspotmail.com
First crash: 2418d, last: 1557d
Fix bisection the fix commit could be any of (bisect log):
  e1f7d50ae3a3 Linux 4.14.160
  56dfe6252c68 Linux 4.14.188
   
▶ ▼ Similar bugs (9)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in skb_warn_bad_offload (5) net -1 syz, C done 18 721d 754d 28/29 fixed on 2024/10/03 15:25
android-49 WARNING in skb_warn_bad_offload (3) -1 syz, C 2188 2440d 2677d 0/3 public: reported C repro on 2019/04/11 08:44
android-49 WARNING in skb_warn_bad_offload -1 syz, C 442 3196d 3303d 1/3 fixed on 2017/11/07 12:35
android-44 WARNING in skb_warn_bad_offload -1 syz, C 2265 2439d 2676d 0/2 public: reported C repro on 2019/04/12 00:00
upstream WARNING in skb_warn_bad_offload (3) net -1 syz, C done 115 1262d 1399d 22/29 fixed on 2023/02/24 13:50
upstream WARNING in skb_warn_bad_offload net -1 syz, C 6527 3078d 3202d 5/29 fixed on 2018/04/09 09:36
android-49 WARNING in skb_warn_bad_offload (2) -1 syz, C 2630 3027d 3196d 0/3 closed as invalid on 2018/04/25 20:49
upstream WARNING in skb_warn_bad_offload (4) net -1 syz, C done 1763 1024d 1052d 25/29 fixed on 2023/12/21 03:45
upstream WARNING in skb_warn_bad_offload (2) net -1 syz, C 6 3024d 3025d 8/29 fixed on 2018/07/09 18:05
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2023/02/27 17:32 12m retest repro linux-4.14.y report log
2023/02/27 14:32 13m retest repro linux-4.14.y report log
2023/02/27 08:32 14m retest repro linux-4.14.y report log
2023/02/27 07:32 14m retest repro linux-4.14.y report log
2023/02/27 06:32 10m retest repro linux-4.14.y report log
2022/11/09 00:30 9m retest repro linux-4.14.y report log
2022/11/08 23:30 10m retest repro linux-4.14.y report log
2022/11/08 22:30 10m retest repro linux-4.14.y report log
2022/11/08 21:30 14m retest repro linux-4.14.y report log
2022/11/08 20:30 14m retest repro linux-4.14.y report log
▶ ▼ Fix bisection attempts (3)
Created Duration User Patch Repo Result
2020/07/12 03:40 30m bisect fix linux-4.14.y OK (2) job log
2020/02/23 23:48 24m bisect fix linux-4.14.y OK (0) job log log
2020/01/24 23:22 25m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
ip_tables: iptables: counters copy to user failed while replacing table
lo: caps=(0x00000144401d7c69, 0x00000144401d7c69) len=2552 data_len=1092 gso_size=500 gso_type=1 ip_summed=3
IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
------------[ cut here ]------------
WARNING: CPU: 0 PID: 7986 at net/core/dev.c:2609 skb_warn_bad_offload.cold+0x1d1/0x44d net/core/dev.c:2609
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 7986 Comm: syz-executor318 Not tainted 4.14.213-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x283 lib/dump_stack.c:58
 panic+0x1f9/0x42d kernel/panic.c:183
 __warn.cold+0x20/0x4b kernel/panic.c:547
 report_bug+0x208/0x249 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 fixup_bug arch/x86/kernel/traps.c:172 [inline]
 do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:skb_warn_bad_offload.cold+0x1d1/0x44d net/core/dev.c:2609
RSP: 0018:ffff88809cf3f340 EFLAGS: 00010282
RAX: 000000000000006c RBX: ffff88809c0b5828 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff878bbac0 RDI: ffffed10139e7e5e
RBP: ffff8880a4ddc7d0 R08: 000000000000006c R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a4ddc700
R13: 00000000000001f4 R14: 0000000000000444 R15: 00000000000009f8
 skb_checksum_help+0x627/0x7d0 net/core/dev.c:2630
 checksum_tg+0x52/0x65 net/netfilter/xt_CHECKSUM.c:29
 ipt_do_table+0xa9a/0x16f0 net/ipv4/netfilter/ip_tables.c:353
 iptable_mangle_hook+0x9c/0x560 net/ipv4/netfilter/iptable_mangle.c:90
 nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
 nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:467
 nf_hook include/linux/netfilter.h:205 [inline]
 NF_HOOK_COND include/linux/netfilter.h:238 [inline]
 ip_output+0x2e7/0x510 net/ipv4/ip_output.c:406
 dst_output include/net/dst.h:470 [inline]
 ip_local_out+0x93/0x170 net/ipv4/ip_output.c:125
 ip_queue_xmit+0x7d3/0x1a80 net/ipv4/ip_output.c:505
 __tcp_transmit_skb+0x17e2/0x2cb0 net/ipv4/tcp_output.c:1133
 tcp_transmit_skb net/ipv4/tcp_output.c:1149 [inline]
 tcp_write_xmit+0x654/0x5570 net/ipv4/tcp_output.c:2394
 tcp_sendmsg_locked+0x14e6/0x2ef0 net/ipv4/tcp.c:1406
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 sock_write_iter+0x22c/0x370 net/socket.c:925
 call_write_iter include/linux/fs.h:1778 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x44c/0x630 fs/read_write.c:482
 vfs_write+0x17f/0x4d0 fs/read_write.c:544
 SYSC_write fs/read_write.c:590 [inline]
 SyS_write+0xf2/0x210 fs/read_write.c:582
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x444479
RSP: 002b:00007ffd59e6b9e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000444479
RDX: 0000000100000530 RSI: 0000000020000300 RDI: 0000000000000005
RBP: 00007ffd59e6ba00 R08: 0000000000000014 R09: 0000000000000010
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd59e6ba10
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (81):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/12/30 04:39 linux-4.14.y 1752938529c6 0fa352f2 .config console log report syz C ci2-linux-4-14
2020/12/24 19:27 linux-4.14.y 3f2ecb86cb90 c2c1d1dd .config console log report syz C ci2-linux-4-14
2020/12/19 10:55 linux-4.14.y 3f2ecb86cb90 04201c06 .config console log report syz C ci2-linux-4-14
2020/08/28 20:10 linux-4.14.y d7e78d08fa77 d5a3ae1f .config console log report syz C ci2-linux-4-14
2019/12/25 15:15 linux-4.14.y e1f7d50ae3a3 be5c2c81 .config console log report syz C ci2-linux-4-14
2022/05/04 19:29 linux-4.14.y e3a56aaade89 dc9e5259 .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2022/02/26 16:24 linux-4.14.y fa33f9094f36 45a13a73 .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2022/01/16 22:49 linux-4.14.y 4ba8e26127c3 723cfaf0 .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2022/01/15 12:05 linux-4.14.y 4ba8e26127c3 723cfaf0 .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2021/12/06 04:04 linux-4.14.y 66722c42ec91 a617004c .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2021/11/14 05:32 linux-4.14.y 5f9f3b0057d5 75b04091 .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2021/05/19 00:53 linux-4.14.y 7d7d1c0ab3eb a343ba6b .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2021/05/02 00:00 linux-4.14.y 7d7d1c0ab3eb 77e2b668 .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2021/04/25 07:24 linux-4.14.y cf256fbcbe34 36c88236 .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2021/04/09 11:18 linux-4.14.y 0cc244011f40 6a81331a .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2021/04/06 19:59 linux-4.14.y bd634aa64163 6a81331a .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2021/03/28 20:38 linux-4.14.y 670d6552eda8 a8529b82 .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2021/02/10 21:55 linux-4.14.y 2c8a3fceddf0 a52ee10a .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2021/02/05 04:45 linux-4.14.y 2c8a3fceddf0 23a562df .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2021/01/26 17:14 linux-4.14.y 2d2791fce891 55a7d4df .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2021/01/26 00:53 linux-4.14.y 2d2791fce891 52e37319 .config console log report info ci2-linux-4-14 WARNING in skb_warn_bad_offload
2021/01/14 21:50 linux-4.14.y f79dc86058bc 468dbb55 .config console log report info ci2-linux-4-14
2021/01/02 22:01 linux-4.14.y 1752938529c6 79264ae3 .config console log report info ci2-linux-4-14
2020/12/25 22:14 linux-4.14.y 3f2ecb86cb90 821e0b09 .config console log report info ci2-linux-4-14
2020/12/24 21:05 linux-4.14.y 3f2ecb86cb90 c2c1d1dd .config console log report info ci2-linux-4-14
2020/12/24 10:11 linux-4.14.y 3f2ecb86cb90 c2c1d1dd .config console log report info ci2-linux-4-14
2020/12/18 16:00 linux-4.14.y 3f2ecb86cb90 04201c06 .config console log report info ci2-linux-4-14
2020/11/12 14:33 linux-4.14.y 27ce4f2a6817 77a55c8e .config console log report info ci2-linux-4-14
2020/11/09 15:32 linux-4.14.y 6b6446efedb2 cba33199 .config console log report info ci2-linux-4-14
2020/11/06 06:31 linux-4.14.y 6b6446efedb2 cba33199 .config console log report info ci2-linux-4-14
2020/08/27 00:16 linux-4.14.y d7e78d08fa77 318430cb .config console log report ci2-linux-4-14
2020/08/21 14:03 linux-4.14.y 6a24ca2506d6 1d75fe45 .config console log report ci2-linux-4-14
2020/08/18 11:40 linux-4.14.y 14b58326976d 5ce13532 .config console log report ci2-linux-4-14
2020/08/17 06:26 linux-4.14.y 14b58326976d 5ce13532 .config console log report ci2-linux-4-14
2020/08/16 04:49 linux-4.14.y 14b58326976d 5ce13532 .config console log report ci2-linux-4-14
2020/08/14 21:59 linux-4.14.y 14b58326976d 5ce13532 .config console log report ci2-linux-4-14
2020/08/06 05:14 linux-4.14.y ca4f2c56d416 0487ea6f .config console log report ci2-linux-4-14
2020/08/03 19:02 linux-4.14.y 7f2c5eb458b8 96dd3623 .config console log report ci2-linux-4-14
2020/07/27 17:07 linux-4.14.y 69b94dd6dcd1 cb93dc6a .config console log report ci2-linux-4-14
2020/07/26 08:46 linux-4.14.y 69b94dd6dcd1 51265195 .config console log report ci2-linux-4-14
2020/07/23 15:55 linux-4.14.y 69b94dd6dcd1 70c104a1 .config console log report ci2-linux-4-14
2020/07/21 14:11 linux-4.14.y b850307b279c e562dd8a .config console log report ci2-linux-4-14
2020/07/19 18:39 linux-4.14.y b850307b279c 9c812472 .config console log report ci2-linux-4-14
2020/07/19 08:23 linux-4.14.y b850307b279c 9c812472 .config console log report ci2-linux-4-14
2020/07/19 08:15 linux-4.14.y b850307b279c 9c812472 .config console log report ci2-linux-4-14
2020/06/12 03:40 linux-4.14.y b850307b279c 1beaee21 .config console log report ci2-linux-4-14
2020/06/10 13:49 linux-4.14.y c6db52a88798 5caaad3a .config console log report ci2-linux-4-14
2020/06/09 00:10 linux-4.14.y c6db52a88798 0d60b78a .config console log report ci2-linux-4-14
2020/05/02 09:46 linux-4.14.y 050272a0423e bc734e7a .config console log report ci2-linux-4-14
2020/04/25 05:35 linux-4.14.y 050272a0423e 03d97a1b .config console log report ci2-linux-4-14
2020/04/17 02:39 linux-4.14.y c10b57a567e4 c743fcb3 .config console log report ci2-linux-4-14
2020/04/14 23:30 linux-4.14.y c10b57a567e4 3f3c5574 .config console log report ci2-linux-4-14
2020/04/11 20:08 linux-4.14.y 4520f06b03ae a8c6a3f8 .config console log report ci2-linux-4-14
2020/04/03 19:37 linux-4.14.y 4520f06b03ae 5ed396e6 .config console log report ci2-linux-4-14
2020/03/05 11:03 linux-4.14.y 78d697fc93f9 b655d91b .config console log report ci2-linux-4-14
2020/03/04 20:53 linux-4.14.y 78d697fc93f9 712198ac .config console log report ci2-linux-4-14
2020/03/02 13:25 linux-4.14.y 78d697fc93f9 4a4e0509 .config console log report ci2-linux-4-14
2020/03/01 21:33 linux-4.14.y 78d697fc93f9 4a4e0509 .config console log report ci2-linux-4-14
2019/12/25 23:22 linux-4.14.y e1f7d50ae3a3 be5c2c81 .config console log report ci2-linux-4-14
2019/12/25 14:38 linux-4.14.y e1f7d50ae3a3 be5c2c81 .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.