syzbot


WARNING in xfrm_policy_inexact_gc_tree

Status: fixed on 2019/03/06 07:43
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+0b2f1bc876d301440d44@syzkaller.appspotmail.com
Fix commit: 12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
First crash: 1994d, last: 1941d
Discussions (1)
Title Replies (including bot) Last reply
WARNING in xfrm_policy_inexact_gc_tree 1 (2) 2018/12/10 12:55

Sample crash report:
autofs4:pid:24076:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.16777216), cmd(0x0000937e)
autofs4:pid:24076:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e)
WARNING: CPU: 0 PID: 14735 at net/xfrm/xfrm_policy.c:1066 xfrm_policy_inexact_gc_tree+0x233/0x290 net/xfrm/xfrm_policy.c:1066
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 14735 Comm: kworker/u4:3 Not tainted 5.0.0-rc4+ #50
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1db/0x2d0 lib/dump_stack.c:113
IPVS: ftp: loaded support on port[0] = 21
 panic+0x2cb/0x65c kernel/panic.c:214
kobject: 'lo' (0000000006d64efe): kobject_add_internal: parent: 'net', set: 'devices'
kobject: 'lo' (0000000006d64efe): kobject_uevent_env
 __warn.cold+0x20/0x48 kernel/panic.c:571
kobject: 'lo' (0000000006d64efe): fill_kobj_path: path = '/devices/virtual/net/lo'
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:271
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:290
kobject: 'queues' (00000000f773393f): kobject_add_internal: parent: 'lo', set: '<NULL>'
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973
RIP: 0010:xfrm_policy_inexact_gc_tree+0x233/0x290 net/xfrm/xfrm_policy.c:1066
kobject: 'queues' (00000000f773393f): kobject_uevent_env
Code: 81 c4 a0 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 31 5b c3 fa 31 ff 44 89 fe e8 67 5c c3 fa 45 84 ff 74 99 e8 1d 5b c3 fa <0f> 0b eb 90 48 8d 7d 98 48 89 b5 50 ff ff ff e8 b9 58 07 fb 48 8b
RSP: 0018:ffff888051e2f448 EFLAGS: 00010293
RAX: ffff88804e866540 RBX: 0000000000000000 RCX: ffffffff86bea939
RDX: 0000000000000000 RSI: ffffffff86bea943 RDI: 0000000000000001
RBP: ffff888051e2f510 R08: ffff88804e866540 R09: ffff88804e866e80
R10: ffff88804e866e60 R11: 0000000000000001 R12: ffff888094472580
R13: dffffc0000000000 R14: ffffed100a3c5e95 R15: 0000000000000001
kobject: 'queues' (00000000f773393f): kobject_uevent_env: filter function caused the event to drop!
kobject: 'rx-0' (00000000b882f1ee): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'rx-0' (00000000b882f1ee): kobject_uevent_env
 __xfrm_policy_inexact_prune_bin+0x126/0xa60 net/xfrm/xfrm_policy.c:1078
kobject: 'rx-0' (00000000b882f1ee): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0'
kobject: 'tx-0' (00000000d3403da8): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'tx-0' (00000000d3403da8): kobject_uevent_env
kobject: 'tx-0' (00000000d3403da8): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0'
 xfrm_policy_fini+0x463/0x640 net/xfrm/xfrm_policy.c:3887
kobject: 'tunl0' (00000000addc7091): kobject_add_internal: parent: 'net', set: 'devices'
kobject: 'tunl0' (00000000addc7091): kobject_uevent_env
 xfrm_net_exit+0x1d/0x70 net/xfrm/xfrm_policy.c:3928
kobject: 'tunl0' (00000000addc7091): fill_kobj_path: path = '/devices/virtual/net/tunl0'
 ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:153
 cleanup_net+0x51d/0xb10 net/core/net_namespace.c:551
kobject: 'queues' (000000001c763449): kobject_add_internal: parent: 'tunl0', set: '<NULL>'
kobject: 'queues' (000000001c763449): kobject_uevent_env
 process_one_work+0xd0c/0x1ce0 kernel/workqueue.c:2153
kobject: 'queues' (000000001c763449): kobject_uevent_env: filter function caused the event to drop!
kobject: 'rx-0' (000000004ac6d866): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'rx-0' (000000004ac6d866): kobject_uevent_env
kobject: 'rx-0' (000000004ac6d866): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0'
kobject: 'tx-0' (00000000e1812989): kobject_add_internal: parent: 'queues', set: 'queues'
 worker_thread+0x143/0x14a0 kernel/workqueue.c:2296
kobject: 'tx-0' (00000000e1812989): kobject_uevent_env
kobject: 'tx-0' (00000000e1812989): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0'
kobject: 'gre0' (00000000fcf57751): kobject_add_internal: parent: 'net', set: 'devices'
 kthread+0x357/0x430 kernel/kthread.c:246
kobject: 'gre0' (00000000fcf57751): kobject_uevent_env
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
kobject: 'gre0' (00000000fcf57751): fill_kobj_path: path = '/devices/virtual/net/gre0'
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (645):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/01/29 15:37 upstream 4aa9fc2a435a aa432daf .config console log report ci-upstream-kasan-gce-root
2019/01/29 06:19 upstream 4aa9fc2a435a aa432daf .config console log report ci-upstream-kasan-gce
2019/01/28 23:31 upstream 4aa9fc2a435a aa432daf .config console log report ci-upstream-kasan-gce-smack-root
2019/01/28 09:17 upstream f17b5f06cb92 629c2a27 .config console log report ci-upstream-kasan-gce-root
2019/01/27 21:09 upstream 983542434e6b c73f090a .config console log report ci-upstream-kasan-gce-selinux-root
2019/01/27 15:43 upstream ba6069759381 c73f090a .config console log report ci-upstream-kasan-gce
2019/01/27 12:17 upstream ba6069759381 c73f090a .config console log report ci-upstream-kasan-gce
2019/01/27 01:36 upstream ba6069759381 c73f090a .config console log report ci-upstream-kasan-gce
2019/01/30 00:47 net-old abfd04f738c2 aa432daf .config console log report ci-upstream-net-this-kasan-gce
2019/01/30 00:20 net-old abfd04f738c2 aa432daf .config console log report ci-upstream-net-this-kasan-gce
2019/01/29 21:14 net-old abfd04f738c2 aa432daf .config console log report ci-upstream-net-this-kasan-gce
2019/01/29 19:00 net-old abfd04f738c2 aa432daf .config console log report ci-upstream-net-this-kasan-gce
2019/01/29 16:39 net-old abfd04f738c2 aa432daf .config console log report ci-upstream-net-this-kasan-gce
2019/01/29 02:33 net-old abfd04f738c2 aa432daf .config console log report ci-upstream-net-this-kasan-gce
2019/01/29 00:58 net-old abfd04f738c2 aa432daf .config console log report ci-upstream-net-this-kasan-gce
2019/01/28 21:55 net-old abfd04f738c2 aa432daf .config console log report ci-upstream-net-this-kasan-gce
2019/01/28 20:10 net-old abfd04f738c2 629c2a27 .config console log report ci-upstream-net-this-kasan-gce
2019/01/28 19:05 net-old abfd04f738c2 629c2a27 .config console log report ci-upstream-net-this-kasan-gce
2019/01/28 17:11 net-old abfd04f738c2 629c2a27 .config console log report ci-upstream-net-this-kasan-gce
2019/01/28 13:40 net-old abfd04f738c2 629c2a27 .config console log report ci-upstream-net-this-kasan-gce
2019/01/28 10:17 net-old abfd04f738c2 629c2a27 .config console log report ci-upstream-net-this-kasan-gce
2019/01/28 07:42 net-old abfd04f738c2 c73f090a .config console log report ci-upstream-net-this-kasan-gce
2019/01/28 05:37 net-old abfd04f738c2 c73f090a .config console log report ci-upstream-net-this-kasan-gce
2019/01/27 19:57 net-old abfd04f738c2 c73f090a .config console log report ci-upstream-net-this-kasan-gce
2019/01/27 14:11 net-old abfd04f738c2 c73f090a .config console log report ci-upstream-net-this-kasan-gce
2019/01/27 10:06 net-old abfd04f738c2 c73f090a .config console log report ci-upstream-net-this-kasan-gce
2019/01/27 06:04 net-old abfd04f738c2 c73f090a .config console log report ci-upstream-net-this-kasan-gce
2019/01/27 04:21 net-old abfd04f738c2 c73f090a .config console log report ci-upstream-net-this-kasan-gce
2019/01/30 05:53 net-next-old 085c4c7dd2b6 aa432daf .config console log report ci-upstream-net-kasan-gce
2019/01/30 03:58 net-next-old 085c4c7dd2b6 aa432daf .config console log report ci-upstream-net-kasan-gce
2019/01/29 22:42 net-next-old 085c4c7dd2b6 aa432daf .config console log report ci-upstream-net-kasan-gce
2019/01/29 20:08 net-next-old 085c4c7dd2b6 aa432daf .config console log report ci-upstream-net-kasan-gce
2019/01/29 17:46 net-next-old 085c4c7dd2b6 aa432daf .config console log report ci-upstream-net-kasan-gce
2019/01/29 15:30 net-next-old 085c4c7dd2b6 aa432daf .config console log report ci-upstream-net-kasan-gce
2019/01/29 13:15 net-next-old 085c4c7dd2b6 aa432daf .config console log report ci-upstream-net-kasan-gce
2019/01/29 12:06 net-next-old 085c4c7dd2b6 aa432daf .config console log report ci-upstream-net-kasan-gce
2019/01/29 10:35 net-next-old 085c4c7dd2b6 aa432daf .config console log report ci-upstream-net-kasan-gce
2019/01/29 09:24 net-next-old 085c4c7dd2b6 aa432daf .config console log report ci-upstream-net-kasan-gce
2019/01/29 08:02 net-next-old 085c4c7dd2b6 aa432daf .config console log report ci-upstream-net-kasan-gce
2019/01/29 04:19 net-next-old 085c4c7dd2b6 aa432daf .config console log report ci-upstream-net-kasan-gce
2019/01/28 16:39 net-next-old 085c4c7dd2b6 629c2a27 .config console log report ci-upstream-net-kasan-gce
2019/01/28 04:18 net-next-old 085c4c7dd2b6 c73f090a .config console log report ci-upstream-net-kasan-gce
2019/01/28 02:33 net-next-old 085c4c7dd2b6 c73f090a .config console log report ci-upstream-net-kasan-gce
2019/01/27 23:21 net-next-old 085c4c7dd2b6 c73f090a .config console log report ci-upstream-net-kasan-gce
2019/01/27 17:44 net-next-old 085c4c7dd2b6 c73f090a .config console log report ci-upstream-net-kasan-gce
2019/01/27 11:10 net-next-old a4b829949326 c73f090a .config console log report ci-upstream-net-kasan-gce
2019/01/27 08:52 net-next-old a4b829949326 c73f090a .config console log report ci-upstream-net-kasan-gce
2019/01/26 23:14 net-next-old a4b829949326 c73f090a .config console log report ci-upstream-net-kasan-gce
2019/01/10 06:05 linux-next 6cab33afc3dd 45c0c1b1 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/07 23:03 linux-next 74c4a24df7ca 65ed2472 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.