WARNING in xfrm_state_fini
17 views
Skip to first unread message
syzbot
Apr 11, 2019, 7:14:13 AM4/11/19
to syzkaller...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: 4d552acf Linux 4.19.34
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=14051a9f200000
kernel config: https://syzkaller.appspot.com/x/.config?x=c95a88291f095edd
dashboard link: https://syzkaller.appspot.com/bug?extid=a92feaebeca6bf1f6815
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+a92fea...@syzkaller.appspotmail.com
WARNING: CPU: 1 PID: 361 at net/xfrm/xfrm_state.c:2383
xfrm_state_fini+0x213/0x280 net/xfrm/xfrm_state.c:2383
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 361 Comm: kworker/u4:7 Not tainted 4.19.34 #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x172/0x1f0 lib/dump_stack.c:113
panic+0x263/0x51d kernel/panic.c:185
__warn.cold+0x20/0x54 kernel/panic.c:540
report_bug+0x263/0x2b0 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:178 [inline]
fixup_bug arch/x86/kernel/traps.c:173 [inline]
do_error_trap+0x204/0x360 arch/x86/kernel/traps.c:296
do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316
invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:997
RIP: 0010:xfrm_state_fini+0x213/0x280 net/xfrm/xfrm_state.c:2383
Code: 41 5e 5d c3 e8 ce 3e 7c fb 0f 0b e9 09 ff ff ff e8 c2 3e 7c fb 0f 0b
e9 68 ff ff ff e8 b6 3e 7c fb 0f 0b eb c6 e8 ad 3e 7c fb <0f> 0b e9 52 fe
ff ff e8 61 9c b2 fb e9 75 fe ff ff e8 77 9c b2 fb
RSP: 0018:ffff88808096fbd0 EFLAGS: 00010293
RAX: ffff88808ae58200 RBX: ffff88809678c3c0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff85eef893 RDI: 0000000000000001
RBP: ffff88808096fbf0 R08: ffff88808ae58200 R09: ffff88808ae58af0
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809678df00
R13: ffff88808096fcc8 R14: ffffffff891b6138 R15: dffffc0000000000
xfrm_net_exit+0x25/0x70 net/xfrm/xfrm_policy.c:2948
ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:153
cleanup_net+0x3fb/0x960 net/core/net_namespace.c:551
process_one_work+0x98e/0x1760 kernel/workqueue.c:2153
worker_thread+0x98/0xe40 kernel/workqueue.c:2296
kthread+0x357/0x430 kernel/kthread.c:246
ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413
Kernel Offset: disabled
Rebooting in 86400 seconds..
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following crash on:
HEAD commit: 4d552acf Linux 4.19.34
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=14051a9f200000
kernel config: https://syzkaller.appspot.com/x/.config?x=c95a88291f095edd
dashboard link: https://syzkaller.appspot.com/bug?extid=a92feaebeca6bf1f6815
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+a92fea...@syzkaller.appspotmail.com
WARNING: CPU: 1 PID: 361 at net/xfrm/xfrm_state.c:2383
xfrm_state_fini+0x213/0x280 net/xfrm/xfrm_state.c:2383
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 361 Comm: kworker/u4:7 Not tainted 4.19.34 #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x172/0x1f0 lib/dump_stack.c:113
panic+0x263/0x51d kernel/panic.c:185
__warn.cold+0x20/0x54 kernel/panic.c:540
report_bug+0x263/0x2b0 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:178 [inline]
fixup_bug arch/x86/kernel/traps.c:173 [inline]
do_error_trap+0x204/0x360 arch/x86/kernel/traps.c:296
do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316
invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:997
RIP: 0010:xfrm_state_fini+0x213/0x280 net/xfrm/xfrm_state.c:2383
Code: 41 5e 5d c3 e8 ce 3e 7c fb 0f 0b e9 09 ff ff ff e8 c2 3e 7c fb 0f 0b
e9 68 ff ff ff e8 b6 3e 7c fb 0f 0b eb c6 e8 ad 3e 7c fb <0f> 0b e9 52 fe
ff ff e8 61 9c b2 fb e9 75 fe ff ff e8 77 9c b2 fb
RSP: 0018:ffff88808096fbd0 EFLAGS: 00010293
RAX: ffff88808ae58200 RBX: ffff88809678c3c0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff85eef893 RDI: 0000000000000001
RBP: ffff88808096fbf0 R08: ffff88808ae58200 R09: ffff88808ae58af0
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809678df00
R13: ffff88808096fcc8 R14: ffffffff891b6138 R15: dffffc0000000000
xfrm_net_exit+0x25/0x70 net/xfrm/xfrm_policy.c:2948
ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:153
cleanup_net+0x3fb/0x960 net/core/net_namespace.c:551
process_one_work+0x98e/0x1760 kernel/workqueue.c:2153
worker_thread+0x98/0xe40 kernel/workqueue.c:2296
kthread+0x357/0x430 kernel/kthread.c:246
ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413
Kernel Offset: disabled
Rebooting in 86400 seconds..
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Apr 12, 2019, 11:54:13 AM4/12/19
to syzkaller...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: 1ec8f1f0 Linux 4.14.111
syzbot found the following crash on:
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=10bc7c2d200000
kernel config: https://syzkaller.appspot.com/x/.config?x=fdadf290ea9fc6f9
dashboard link: https://syzkaller.appspot.com/bug?extid=9c5d791e3a8e4d8e5e8a
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+9c5d79...@syzkaller.appspotmail.com
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
audit: type=1400 audit(1555080834.295:577): avc: denied { map } for
pid=9856 comm="syz-executor.4" path="/sys/kernel/debug/kcov" dev="debugfs"
ino=82 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
------------[ cut here ]------------
WARNING: CPU: 0 PID: 43 at net/xfrm/xfrm_state.c:2337
xfrm_state_fini+0x1f1/0x260 net/xfrm/xfrm_state.c:2337
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 43 Comm: kworker/u4:2 Not tainted 4.14.111 #1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
dump_stack+0x138/0x19c lib/dump_stack.c:53
panic+0x1f2/0x438 kernel/panic.c:182
__warn.cold+0x2f/0x34 kernel/panic.c:546
report_bug+0x216/0x254 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x1bb/0x310 arch/x86/kernel/traps.c:295
do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:944
RIP: 0010:xfrm_state_fini+0x1f1/0x260 net/xfrm/xfrm_state.c:2337
RSP: 0018:ffff8880a9f3fbe0 EFLAGS: 00010297
RAX: ffff8880a9f54380 RBX: ffff88806b3d8180 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8880a9f54c50 RDI: 0000000000000001
RBP: ffff8880a9f3fbf8 R08: ffff8880a9f54380 R09: ffff8880a9f54c70
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806b3d9dc0
R13: ffff8880a9f3fcf0 R14: ffffffff880b06b8 R15: dffffc0000000000
xfrm_net_exit+0x25/0x70 net/xfrm/xfrm_policy.c:2984
ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:142
cleanup_net+0x3ba/0x870 net/core/net_namespace.c:483
process_one_work+0x868/0x1610 kernel/workqueue.c:2114
worker_thread+0x5d9/0x1050 kernel/workqueue.c:2248
kthread+0x31c/0x430 kernel/kthread.c:232
ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402
syzbot
Apr 14, 2019, 1:48:06 PM4/14/19
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following crash on:
HEAD commit: 4d552acf Linux 4.19.34
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=14dc768f200000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14936d87200000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+a92fea...@syzkaller.appspotmail.com
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
WARNING: CPU: 1 PID: 7 at net/xfrm/xfrm_state.c:2383
xfrm_state_fini+0x213/0x280 net/xfrm/xfrm_state.c:2383
kobject: 'gretap0' (00000000df193772): kobject_add_internal: parent: 'net',
set: 'devices'
= '/devices/virtual/net/gretap0'
parent: 'gretap0', set: '<NULL>'
RSP: 0018:ffff8880aa21fbd0 EFLAGS: 00010293
RAX: ffff8880aa2061c0 RBX: ffff8880a8c98040 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff85eef893 RDI: ffff8880aa206a3c
RBP: ffff8880aa21fbf0 R08: ffff8880aa2061c0 R09: ffff8880aa206ab0
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a8c99b80
R13: ffff8880aa21fcc8 R14: ffffffff891b6138 R15: dffffc0000000000
caused the event to drop!
HEAD commit: 4d552acf Linux 4.19.34
git tree: linux-4.19.y
kernel config: https://syzkaller.appspot.com/x/.config?x=c95a88291f095edd
dashboard link: https://syzkaller.appspot.com/bug?extid=a92feaebeca6bf1f6815
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10d18423200000
dashboard link: https://syzkaller.appspot.com/bug?extid=a92feaebeca6bf1f6815
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14936d87200000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+a92fea...@syzkaller.appspotmail.com
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
WARNING: CPU: 1 PID: 7 at net/xfrm/xfrm_state.c:2383
xfrm_state_fini+0x213/0x280 net/xfrm/xfrm_state.c:2383
kobject: 'gretap0' (00000000df193772): kobject_add_internal: parent: 'net',
set: 'devices'
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.34 #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x172/0x1f0 lib/dump_stack.c:113
panic+0x263/0x51d kernel/panic.c:185
__warn.cold+0x20/0x54 kernel/panic.c:540
kobject: 'gretap0' (00000000df193772): kobject_uevent_env
Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x172/0x1f0 lib/dump_stack.c:113
panic+0x263/0x51d kernel/panic.c:185
__warn.cold+0x20/0x54 kernel/panic.c:540
report_bug+0x263/0x2b0 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:178 [inline]
fixup_bug arch/x86/kernel/traps.c:173 [inline]
do_error_trap+0x204/0x360 arch/x86/kernel/traps.c:296
kobject: 'gretap0' (00000000df193772): fill_kobj_path: path
fixup_bug arch/x86/kernel/traps.c:178 [inline]
fixup_bug arch/x86/kernel/traps.c:173 [inline]
do_error_trap+0x204/0x360 arch/x86/kernel/traps.c:296
= '/devices/virtual/net/gretap0'
do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316
invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:997
kobject: 'queues' (000000009ce8e809): kobject_add_internal:
invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:997
parent: 'gretap0', set: '<NULL>'
RIP: 0010:xfrm_state_fini+0x213/0x280 net/xfrm/xfrm_state.c:2383
Code: 41 5e 5d c3 e8 ce 3e 7c fb 0f 0b e9 09 ff ff ff e8 c2 3e 7c fb 0f 0b
e9 68 ff ff ff e8 b6 3e 7c fb 0f 0b eb c6 e8 ad 3e 7c fb <0f> 0b e9 52 fe
ff ff e8 61 9c b2 fb e9 75 fe ff ff e8 77 9c b2 fb
kobject: 'queues' (000000009ce8e809): kobject_uevent_env
Code: 41 5e 5d c3 e8 ce 3e 7c fb 0f 0b e9 09 ff ff ff e8 c2 3e 7c fb 0f 0b
e9 68 ff ff ff e8 b6 3e 7c fb 0f 0b eb c6 e8 ad 3e 7c fb <0f> 0b e9 52 fe
ff ff e8 61 9c b2 fb e9 75 fe ff ff e8 77 9c b2 fb
RSP: 0018:ffff8880aa21fbd0 EFLAGS: 00010293
RAX: ffff8880aa2061c0 RBX: ffff8880a8c98040 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff85eef893 RDI: ffff8880aa206a3c
RBP: ffff8880aa21fbf0 R08: ffff8880aa2061c0 R09: ffff8880aa206ab0
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a8c99b80
R13: ffff8880aa21fcc8 R14: ffffffff891b6138 R15: dffffc0000000000
xfrm_net_exit+0x25/0x70 net/xfrm/xfrm_policy.c:2948
ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:153
cleanup_net+0x3fb/0x960 net/core/net_namespace.c:551
process_one_work+0x98e/0x1760 kernel/workqueue.c:2153
kobject: 'queues' (000000009ce8e809): kobject_uevent_env: filter function
ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:153
cleanup_net+0x3fb/0x960 net/core/net_namespace.c:551
process_one_work+0x98e/0x1760 kernel/workqueue.c:2153
caused the event to drop!
syzbot
Apr 17, 2019, 12:49:09 PM4/17/19
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following crash on:
HEAD commit: 58b454eb Linux 4.14.112
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=16c13787200000
kernel config: https://syzkaller.appspot.com/x/.config?x=8b0e7ab7678533ab
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+9c5d79...@syzkaller.appspotmail.com
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
------------[ cut here ]------------
WARNING: CPU: 0 PID: 44 at net/xfrm/xfrm_state.c:2337
RAX: ffff8880a9f703c0 RBX: ffff8880a534c040 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8880a9f70c90 RDI: 0000000000000001
RBP: ffff8880a9f7fbf8 R08: ffff8880a9f703c0 R09: ffff8880a9f70cb0
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a534dc80
R13: ffff8880a9f7fcf0 R14: ffffffff880b0b78 R15: dffffc0000000000
HEAD commit: 58b454eb Linux 4.14.112
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=16c13787200000
kernel config: https://syzkaller.appspot.com/x/.config?x=8b0e7ab7678533ab
dashboard link: https://syzkaller.appspot.com/bug?extid=9c5d791e3a8e4d8e5e8a
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13e4b3fd200000
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+9c5d79...@syzkaller.appspotmail.com
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
------------[ cut here ]------------
WARNING: CPU: 0 PID: 44 at net/xfrm/xfrm_state.c:2337
xfrm_state_fini+0x1f1/0x260 net/xfrm/xfrm_state.c:2337
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 44 Comm: kworker/u4:2 Not tainted 4.14.112 #2
Kernel panic - not syncing: panic_on_warn set ...
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x138/0x19c lib/dump_stack.c:53
panic+0x1f2/0x438 kernel/panic.c:182
__warn.cold+0x2f/0x34 kernel/panic.c:546
report_bug+0x216/0x254 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x1bb/0x310 arch/x86/kernel/traps.c:295
do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:944
RIP: 0010:xfrm_state_fini+0x1f1/0x260 net/xfrm/xfrm_state.c:2337
RSP: 0018:ffff8880a9f7fbe0 EFLAGS: 00010297
Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x138/0x19c lib/dump_stack.c:53
panic+0x1f2/0x438 kernel/panic.c:182
__warn.cold+0x2f/0x34 kernel/panic.c:546
report_bug+0x216/0x254 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x1bb/0x310 arch/x86/kernel/traps.c:295
do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:944
RIP: 0010:xfrm_state_fini+0x1f1/0x260 net/xfrm/xfrm_state.c:2337
RAX: ffff8880a9f703c0 RBX: ffff8880a534c040 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8880a9f70c90 RDI: 0000000000000001
RBP: ffff8880a9f7fbf8 R08: ffff8880a9f703c0 R09: ffff8880a9f70cb0
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a534dc80
R13: ffff8880a9f7fcf0 R14: ffffffff880b0b78 R15: dffffc0000000000
xfrm_net_exit+0x25/0x70 net/xfrm/xfrm_policy.c:2984
ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:142
cleanup_net+0x3ba/0x880 net/core/net_namespace.c:484
ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:142
syzbot
Apr 24, 2019, 8:58:06 AM4/24/19
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following crash on:
HEAD commit: 68d7a45e Linux 4.14.113
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=17f31990a00000
kernel config: https://syzkaller.appspot.com/x/.config?x=dbf1fde4d7489e1c
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=146f8b6ca00000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+9c5d79...@syzkaller.appspotmail.com
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
8021q: adding VLAN 0 to HW filter on device batadv0
------------[ cut here ]------------
WARNING: CPU: 0 PID: 65 at net/xfrm/xfrm_state.c:2337
RAX: ffff8880a98481c0 RBX: ffff8880a17f4040 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8880a9848a90 RDI: 0000000000000001
RBP: ffff8880a9857bf8 R08: ffff8880a98481c0 R09: ffff8880a9848ab0
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a17f5c80
R13: ffff8880a9857cf0 R14: ffffffff880b1338 R15: dffffc0000000000
HEAD commit: 68d7a45e Linux 4.14.113
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=17f31990a00000
kernel config: https://syzkaller.appspot.com/x/.config?x=dbf1fde4d7489e1c
dashboard link: https://syzkaller.appspot.com/bug?extid=9c5d791e3a8e4d8e5e8a
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10cc277b200000
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=146f8b6ca00000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+9c5d79...@syzkaller.appspotmail.com
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
------------[ cut here ]------------
WARNING: CPU: 0 PID: 65 at net/xfrm/xfrm_state.c:2337
xfrm_state_fini+0x1f1/0x260 net/xfrm/xfrm_state.c:2337
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 65 Comm: kworker/u4:2 Not tainted 4.14.113 #3
Kernel panic - not syncing: panic_on_warn set ...
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x138/0x19c lib/dump_stack.c:53
panic+0x1f2/0x438 kernel/panic.c:182
__warn.cold+0x2f/0x34 kernel/panic.c:546
report_bug+0x216/0x254 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x1bb/0x310 arch/x86/kernel/traps.c:295
do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:944
RIP: 0010:xfrm_state_fini+0x1f1/0x260 net/xfrm/xfrm_state.c:2337
RSP: 0018:ffff8880a9857be0 EFLAGS: 00010297
Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x138/0x19c lib/dump_stack.c:53
panic+0x1f2/0x438 kernel/panic.c:182
__warn.cold+0x2f/0x34 kernel/panic.c:546
report_bug+0x216/0x254 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x1bb/0x310 arch/x86/kernel/traps.c:295
do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:944
RIP: 0010:xfrm_state_fini+0x1f1/0x260 net/xfrm/xfrm_state.c:2337
RAX: ffff8880a98481c0 RBX: ffff8880a17f4040 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8880a9848a90 RDI: 0000000000000001
RBP: ffff8880a9857bf8 R08: ffff8880a98481c0 R09: ffff8880a9848ab0
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a17f5c80
R13: ffff8880a9857cf0 R14: ffffffff880b1338 R15: dffffc0000000000
xfrm_net_exit+0x25/0x70 net/xfrm/xfrm_policy.c:2984
ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:142
cleanup_net+0x3ba/0x880 net/core/net_namespace.c:484
ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:142
syzbot
Nov 29, 2019, 3:44:00 PM11/29/19
to syzkaller...@googlegroups.com
syzbot suspects this bug was fixed by commit:
commit ab69a230421065b48ef93d3e6daf332e71c931dc
Author: David S. Miller <da...@davemloft.net>
Date: Fri May 17 19:15:05 2019 +0000
Revert "tipc: fix modprobe tipc failed after switch order of device
registration"
bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=120ce4a2e00000
start commit: 4d552acf Linux 4.19.34
git tree: linux-4.19.y
#syz fix: Revert "tipc: fix modprobe tipc failed after switch order of
device registration"
For information about bisection process see: https://goo.gl/tpsmEJ#bisection
commit ab69a230421065b48ef93d3e6daf332e71c931dc
Author: David S. Miller <da...@davemloft.net>
Date: Fri May 17 19:15:05 2019 +0000
Revert "tipc: fix modprobe tipc failed after switch order of device
registration"
bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=120ce4a2e00000
start commit: 4d552acf Linux 4.19.34
git tree: linux-4.19.y
kernel config: https://syzkaller.appspot.com/x/.config?x=c95a88291f095edd
dashboard link: https://syzkaller.appspot.com/bug?extid=a92feaebeca6bf1f6815
dashboard link: https://syzkaller.appspot.com/bug?extid=a92feaebeca6bf1f6815
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10d18423200000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14936d87200000
If the result looks correct, please mark the bug fixed by replying with:
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14936d87200000
#syz fix: Revert "tipc: fix modprobe tipc failed after switch order of
device registration"
For information about bisection process see: https://goo.gl/tpsmEJ#bisection
syzbot
Dec 6, 2019, 2:52:01 AM12/6/19
to syzkaller...@googlegroups.com
syzbot suspects this bug was fixed by commit:
commit cd393b38514dc3caa916db3b4405d592bfd3c9ea
Author: Cong Wang <xiyou.w...@gmail.com>
Date: Fri Mar 22 23:26:19 2019 +0000
xfrm: clean up xfrm protocol checks
bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=15f59aeae00000
start commit: 68d7a45e Linux 4.14.113
git tree: linux-4.14.y
kernel config: https://syzkaller.appspot.com/x/.config?x=dbf1fde4d7489e1c
dashboard link: https://syzkaller.appspot.com/bug?extid=9c5d791e3a8e4d8e5e8a
dashboard link: https://syzkaller.appspot.com/bug?extid=9c5d791e3a8e4d8e5e8a
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10cc277b200000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=146f8b6ca00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=146f8b6ca00000
If the result looks correct, please mark the bug fixed by replying with:
#syz fix: xfrm: clean up xfrm protocol checks
Reply all
Reply to author
Forward
0 new messages