syzbot


kernel BUG in pskb_expand_head (5)

Status: auto-obsoleted due to no activity on 2026/05/08 15:21
Subsystems: net
[Documentation on labels]
First crash: 115d, last: 61d
Cause bisection: failed (error log, bisect log)
  
Fix bisection: failed (error log, bisect log)
  
Similar bugs (11)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 kernel BUG in pskb_expand_head (2) -1 2 36d 36d 0/3 upstream: reported on 2026/04/05 20:08
linux-5.15 kernel BUG in pskb_expand_head (2) origin:lts-only -1 C done 7 265d 297d 2/3 upstream: reported C repro on 2025/07/18 14:25
android-5-15 kernel BUG in pskb_expand_head -1 C 17 252d 292d 0/2 auto-obsoleted due to no activity on 2025/11/11 01:09
android-6-1 kernel BUG in pskb_expand_head -1 1 1069d 1069d 0/2 auto-obsoleted due to no activity on 2023/09/05 19:11
upstream kernel BUG in pskb_expand_head (4) intel-wired-lan -1 1 439d 439d 28/29 fixed on 2025/06/10 16:19
upstream kernel BUG in pskb_expand_head (3) net -1 1 688d 688d 0/29 closed as invalid on 2024/09/04 18:07
upstream kernel BUG in pskb_expand_head (2) bpf net -1 10 1082d 1098d 0/29 auto-obsoleted due to no activity on 2023/08/23 09:08
linux-5.15 kernel BUG in pskb_expand_head -1 1 1121d 1121d 0/3 auto-obsoleted due to no activity on 2023/08/14 13:19
upstream kernel BUG in llc_sap_action_send_xid_c net -1 C error 61 1644d 1858d 20/29 fixed on 2021/11/10 00:50
upstream kernel BUG in pskb_expand_head net -1 C done 1600 1188d 1639d 22/29 fixed on 2023/02/25 08:02
linux-6.1 kernel BUG in pskb_expand_head -1 1 1077d 1077d 0/3 auto-obsoleted due to no activity on 2023/09/07 17:22
Last patch testing requests (2)
Created Duration User Patch Repo Result
2026/03/26 03:02 24m retest repro net OK log
2026/03/26 02:46 24m retest repro net OK log

Sample crash report:
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:2306!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 1 UID: 0 PID: 789 Comm: kworker/1:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Workqueue: mld mld_ifc_work
RIP: 0010:pskb_expand_head+0xa08/0xfe0 net/core/skbuff.c:2306
Code: 7e d4 ae f8 be 01 00 00 00 48 89 df e8 31 ec ff ff e9 ea f9 ff ff e8 67 d4 ae f8 90 0f 0b 90 45 31 ed eb 80 e8 59 d4 ae f8 90 <0f> 0b e8 51 d4 ae f8 90 0f 0b e8 49 d4 ae f8 81 cd 00 00 02 00 e9
RSP: 0018:ffffc900037d7620 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff8880292e3a00 RCX: ffffffff8959dcce
RDX: ffff88802688a4c0 RSI: ffffffff8959e607 RDI: ffff88802688a4c0
RBP: 0000000000000820 R08: 0000000000000005 R09: 0000000000000000
R10: 00000000961a7380 R11: 0000000000000000 R12: ffff8880292e3a00
R13: 00000000961a7a40 R14: dffffc0000000000 R15: 00000000961a7380
FS:  0000000000000000(0000) GS:ffff888124447000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe98214da08 CR3: 0000000061f60000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 ipgre_header+0xdd/0x540 net/ipv4/ip_gre.c:900
 dev_hard_header include/linux/netdevice.h:3439 [inline]
 neigh_connected_output+0x34d/0x5d0 net/core/neighbour.c:1643
 neigh_output include/net/neighbour.h:556 [inline]
 ip6_finish_output2+0xb0f/0x1ce0 net/ipv6/ip6_output.c:136
 __ip6_finish_output+0x357/0xdf0 net/ipv6/ip6_output.c:208
 ip6_finish_output net/ipv6/ip6_output.c:219 [inline]
 NF_HOOK_COND include/linux/netfilter.h:307 [inline]
 ip6_output+0x2aa/0xa60 net/ipv6/ip6_output.c:246
 dst_output include/net/dst.h:470 [inline]
 NF_HOOK include/linux/netfilter.h:318 [inline]
 NF_HOOK.constprop.0+0x115/0x5a0 include/linux/netfilter.h:312
 mld_sendpack+0x8f7/0xec0 net/ipv6/mcast.c:1855
 mld_send_cr net/ipv6/mcast.c:2154 [inline]
 mld_ifc_work+0x75a/0xc10 net/ipv6/mcast.c:2693
 process_one_work+0x9d7/0x1920 kernel/workqueue.c:3275
 process_scheduled_works kernel/workqueue.c:3358 [inline]
 worker_thread+0x5da/0xe40 kernel/workqueue.c:3439
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:pskb_expand_head+0xa08/0xfe0 net/core/skbuff.c:2306
Code: 7e d4 ae f8 be 01 00 00 00 48 89 df e8 31 ec ff ff e9 ea f9 ff ff e8 67 d4 ae f8 90 0f 0b 90 45 31 ed eb 80 e8 59 d4 ae f8 90 <0f> 0b e8 51 d4 ae f8 90 0f 0b e8 49 d4 ae f8 81 cd 00 00 02 00 e9
RSP: 0018:ffffc900037d7620 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff8880292e3a00 RCX: ffffffff8959dcce
RDX: ffff88802688a4c0 RSI: ffffffff8959e607 RDI: ffff88802688a4c0
RBP: 0000000000000820 R08: 0000000000000005 R09: 0000000000000000
R10: 00000000961a7380 R11: 0000000000000000 R12: ffff8880292e3a00
R13: 00000000961a7a40 R14: dffffc0000000000 R15: 00000000961a7380
FS:  0000000000000000(0000) GS:ffff888124447000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2fc11ff8 CR3: 0000000080c17000 CR4: 00000000003526f0

Crashes (32):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/10 07:48 upstream 1f318b96cc84 6972f302 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in pskb_expand_head
2026/01/26 05:11 upstream 023777797472 55756628 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in pskb_expand_head
2026/02/25 20:01 upstream d9d32e5bd5a4 c162cde9 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in pskb_expand_head
2026/01/30 13:59 upstream 4d310797262f ea6dba22 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in pskb_expand_head
2026/01/29 10:57 upstream 8dfce8991b95 aeb6fdd5 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in pskb_expand_head
2026/01/28 13:27 upstream 1f97d9dcf536 1f9bbf06 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in pskb_expand_head
2026/01/28 04:25 upstream 1f97d9dcf536 3029c699 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in pskb_expand_head
2026/01/22 18:58 upstream a66191c590b3 a16aed1d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in pskb_expand_head
2026/01/21 12:28 upstream 6c790212c588 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in pskb_expand_head
2026/01/21 02:36 upstream c03e9c42ae8f d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in pskb_expand_head
2026/01/20 02:42 upstream 24d479d26b25 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in pskb_expand_head
2026/01/19 04:34 upstream e84d960149e7 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in pskb_expand_head
2026/01/18 05:18 upstream d12453c7e281 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in pskb_expand_head
2026/03/10 10:41 net 7a85d370bbd0 6972f302 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce kernel BUG in pskb_expand_head
2026/03/07 13:06 net 55f854dd5bdd 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce kernel BUG in pskb_expand_head
2026/03/04 17:29 net fbdfa8da05b6 e6b6b96b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce kernel BUG in pskb_expand_head
2026/03/02 02:42 net 9439a661c2e8 43249bac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce kernel BUG in pskb_expand_head
2026/02/28 21:56 net 101bacb303e8 43249bac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce kernel BUG in pskb_expand_head
2026/02/13 13:38 net 8383522821c6 6a673c50 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce kernel BUG in pskb_expand_head
2026/02/13 12:12 net 8383522821c6 6a673c50 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce kernel BUG in pskb_expand_head
2026/02/07 14:45 net 5d41f95f5d0b f20fc9f9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce kernel BUG in pskb_expand_head
2026/03/12 02:41 net-next 482aac8b56ca 2d88ab01 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce kernel BUG in pskb_expand_head
2026/03/09 21:53 net-next 0bcac7b11262 176bead5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce kernel BUG in pskb_expand_head
2026/03/02 23:14 net-next 01857fc712f6 b9dd6534 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce kernel BUG in pskb_expand_head
2026/03/01 12:36 net-next 01857fc712f6 43249bac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce kernel BUG in pskb_expand_head
2026/02/22 07:41 net-next 8bf22c33e7a1 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce kernel BUG in pskb_expand_head
2026/02/19 12:04 net-next 37a93dd5c49b 746545b8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce kernel BUG in pskb_expand_head
2026/02/17 21:30 net-next 37a93dd5c49b 39751c21 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce kernel BUG in pskb_expand_head
2026/02/16 17:21 net-next 37a93dd5c49b 5d52cba5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce kernel BUG in pskb_expand_head
2026/02/01 21:33 net-next a22f57757f7e 6b8752f2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce kernel BUG in pskb_expand_head
2026/01/19 02:23 net-next b4e486e2c46f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce kernel BUG in pskb_expand_head
2026/01/17 07:48 net-next 74ecff77dace d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce kernel BUG in pskb_expand_head
* Struck through repros no longer work on HEAD.