syzbot


WARNING in xfrm_state_fini (2)

Status: fixed on 2019/05/27 12:48
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+0bf0519d6e0de15914fe@syzkaller.appspotmail.com
Fix commit: dbb2483b2a46 xfrm: clean up xfrm protocol checks
First crash: 2503d, last: 2048d
Discussions (11)
Title Replies (including bot) Last reply
[PATCH 4.14 00/21] 4.14.144-stable review 27 (27) 2019/09/16 10:55
[PATCH 4.9 00/14] 4.9.193-stable review 29 (29) 2019/09/16 10:45
[PATCH 4.4 0/9] 4.4.193-stable review 15 (15) 2019/09/16 09:16
[PATCH 4.19 000/114] 4.19.46-stable review 127 (127) 2019/05/28 18:47
[PATCH 5.0 000/139] 5.0.19-stable review 144 (144) 2019/05/24 18:54
[PATCH AUTOSEL 4.19 01/25] xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink 25 (25) 2019/05/16 11:40
[PATCH AUTOSEL 5.0 01/34] xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink 34 (34) 2019/05/16 11:39
[PATCH 08/12] xfrm: clean up xfrm protocol checks 1 (1) 2019/04/30 05:30
[Patch net v2] xfrm: clean up xfrm protocol checks 3 (3) 2019/03/27 08:23
[Patch net] xfrm: unify xfrm protocol checks 7 (7) 2019/03/22 04:15
WARNING in xfrm_state_fini (2) 0 (1) 2018/02/04 11:30
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in xfrm_state_fini C done 78 2046d 2070d 1/1 fixed on 2019/11/30 01:15
android-414 WARNING in xfrm_state_fini C 2207 1912d 2071d 0/1 public: reported C repro on 2019/04/11 00:00
linux-4.14 WARNING in xfrm_state_fini C done 193 1914d 2069d 1/1 fixed on 2019/12/06 10:33
upstream WARNING in xfrm_state_fini net C 2231 2521d 2576d 4/28 fixed on 2018/01/31 00:24
android-44 WARNING in xfrm_state_fini C 3175 1860d 2070d 0/2 public: reported C repro on 2019/04/12 00:00
android-49 WARNING in xfrm_state_fini C 21956 1833d 2070d 0/3 public: reported C repro on 2019/04/12 00:00

Sample crash report:
device hsr_slave_0 left promiscuous mode
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
WARNING: CPU: 0 PID: 59 at net/xfrm/xfrm_state.c:2389 xfrm_state_fini+0x218/0x280 net/xfrm/xfrm_state.c:2389
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 59 Comm: kworker/u4:2 Not tainted 5.1.0-rc6+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 panic+0x2cb/0x65c kernel/panic.c:214
 __warn.cold+0x20/0x45 kernel/panic.c:571
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 fixup_bug arch/x86/kernel/traps.c:174 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:272
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:291
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973
RIP: 0010:xfrm_state_fini+0x218/0x280 net/xfrm/xfrm_state.c:2389
Code: 41 5e 5d c3 e8 29 b0 66 fb 0f 0b e9 09 ff ff ff e8 1d b0 66 fb 0f 0b e9 68 ff ff ff e8 11 b0 66 fb 0f 0b eb c6 e8 08 b0 66 fb <0f> 0b e9 52 fe ff ff e8 ec c5 9e fb e9 75 fe ff ff e8 02 c6 9e fb
RSP: 0018:ffff8880a9987bd0 EFLAGS: 00010293
RAX: ffff8880a9970080 RBX: ffff8880a7cd0040 RCX: ffffffff86087e69
RDX: 0000000000000000 RSI: ffffffff8609dce8 RDI: 0000000000000005
RBP: ffff8880a9987bf0 R08: ffff8880a9970080 R09: ffff8880a9970970
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a7cd1a80
R13: ffff8880a9987cc8 R14: ffffffff893ea658 R15: dffffc0000000000
 xfrm_net_exit+0x25/0x70 net/xfrm/xfrm_policy.c:3934
 ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:153
 cleanup_net+0x3fb/0x960 net/core/net_namespace.c:552
 process_one_work+0x98e/0x1790 kernel/workqueue.c:2269
 worker_thread+0x98/0xe40 kernel/workqueue.c:2415
 kthread+0x357/0x430 kernel/kthread.c:253
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (37510):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/04/24 14:16 upstream ba25b50d582f 8e3c52b1 .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/04/24 14:03 upstream ba25b50d582f 8e3c52b1 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/04/24 13:49 upstream ba25b50d582f 8e3c52b1 .config console log report syz C ci-upstream-kasan-gce-root
2019/04/14 18:10 upstream 4443f8e6ac77 505ab413 .config console log report syz C ci-upstream-kasan-gce-root
2019/04/14 18:07 upstream 4443f8e6ac77 505ab413 .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/04/14 18:07 upstream 4443f8e6ac77 505ab413 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/04/02 16:58 upstream 5e7a8ca31926 dfd3394d .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/04/02 16:15 upstream 5e7a8ca31926 dfd3394d .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/04/02 15:22 upstream 5e7a8ca31926 dfd3394d .config console log report syz C ci-upstream-kasan-gce-root
2019/02/17 13:23 upstream 64c0133eb88a f42dee6d .config console log report syz C ci-upstream-kasan-gce-root
2019/02/17 09:37 upstream 64c0133eb88a f42dee6d .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/02/17 08:52 upstream 64c0133eb88a f42dee6d .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/02/16 18:04 upstream 5ded5871030e f42dee6d .config console log report syz C ci-upstream-kasan-gce
2019/01/19 08:07 upstream 2339e91d0e66 2103a236 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/01/19 01:55 upstream d7393226d15a 2103a236 .config console log report syz C ci-upstream-kasan-gce
2019/01/17 01:36 upstream 47bfa6d9dc8c d538790b .config console log report syz C ci-upstream-kasan-gce
2019/01/17 01:35 upstream 47bfa6d9dc8c d538790b .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/01/17 01:34 upstream 47bfa6d9dc8c d538790b .config console log report syz C ci-upstream-kasan-gce-root
2019/01/10 00:22 upstream 4064e47c8281 45c0c1b1 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/01/09 20:32 upstream a88cc8da0279 45c0c1b1 .config console log report syz C ci-upstream-kasan-gce
2019/01/09 20:32 upstream a88cc8da0279 45c0c1b1 .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/01/03 14:48 upstream 645ff1e8e704 66fcd29b .config console log report syz C ci-upstream-kasan-gce-root
2019/01/03 07:47 upstream 85f78456f286 06a2b89f .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/01/03 06:53 upstream 85f78456f286 06a2b89f .config console log report syz C ci-upstream-kasan-gce
2018/12/28 16:16 upstream 00c569b567c7 fc6ae81a .config console log report syz C ci-upstream-kasan-gce-smack-root
2018/12/14 10:22 upstream 65e08c5e8631 fe7127be .config console log report syz C ci-upstream-kasan-gce-root
2018/10/20 01:48 upstream c7b70a641df2 ecb386fe .config console log report syz C ci-upstream-kasan-gce
2018/10/20 01:48 upstream c7b70a641df2 ecb386fe .config console log report syz C ci-upstream-kasan-gce-root
2018/10/14 03:32 upstream 7ec21823634d caf12900 .config console log report syz C ci-upstream-kasan-gce-root
2019/02/17 01:17 net-old 197f9ab7f08c f42dee6d .config console log report syz C ci-upstream-net-this-kasan-gce
2018/02/26 23:07 net-next-old ba6056a41cb0 b370d4a7 .config console log report syz C ci-upstream-net-kasan-gce
2019/02/16 18:05 linux-next 7a92eb7cc1dc f42dee6d .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2019/01/17 09:18 linux-next a37d50ca3b83 c2faf9b2 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/28 22:07 linux-next 6a1d293238c1 fc6ae81a .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/27 22:02 linux-next 6a1d293238c1 43cf01dd .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/02 07:05 linux-next 442b8cea2477 5a581673 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2019/04/17 17:45 upstream 444fe9913539 b0e8efcb .config console log report syz ci-upstream-kasan-gce-selinux-root
2019/01/09 20:25 upstream a88cc8da0279 45c0c1b1 .config console log report syz ci-upstream-kasan-gce-root
2018/12/03 15:25 upstream 2595646791c3 819002b0 .config console log report syz ci-upstream-kasan-gce-selinux-root
2019/01/09 20:25 linux-next d6e77253170d 45c0c1b1 .config console log report syz ci-upstream-linux-next-kasan-gce-root
2018/12/03 19:40 linux-next 442b8cea2477 819002b0 .config console log report syz ci-upstream-linux-next-kasan-gce-root
2019/05/02 21:53 upstream b7a5b22b0547 e9039493 .config console log report ci-upstream-kasan-gce-selinux-root
2019/05/02 16:41 upstream 459e3a21535a 7516d9fa .config console log report ci-upstream-kasan-gce-smack-root
2019/05/01 19:36 upstream 459e3a21535a 7516d9fa .config console log report ci-upstream-kasan-gce
2019/05/01 18:35 upstream f2bc9c908dfe 7516d9fa .config console log report ci-upstream-kasan-gce-selinux-root
2019/05/01 13:34 upstream f2bc9c908dfe 618456b4 .config console log report ci-upstream-kasan-gce-root
2019/05/01 08:47 upstream f2bc9c908dfe 618456b4 .config console log report ci-upstream-kasan-gce
2019/04/30 20:05 upstream bf3bd966dfd7 618456b4 .config console log report ci-upstream-kasan-gce
2019/04/30 14:25 upstream 83a50840e72a 20f16bef .config console log report ci-upstream-kasan-gce-smack-root
2018/03/16 19:01 upstream df09348f78dc 08dacaa0 .config console log report ci-upstream-kasan-gce-386
2018/02/02 12:05 upstream 4bf772b14675 826b35d6 .config console log report ci-upstream-kasan-gce-386
2019/04/30 12:54 net-old 6c0afef5fb0c 20f16bef .config console log report ci-upstream-net-this-kasan-gce
2019/04/30 11:00 net-old 6c0afef5fb0c 20f16bef .config console log report ci-upstream-net-this-kasan-gce
2019/05/03 06:04 net-next-old 26f146ed971c e9039493 .config console log report ci-upstream-net-kasan-gce
2019/05/03 03:16 net-next-old 26f146ed971c e9039493 .config console log report ci-upstream-net-kasan-gce
2019/05/03 01:41 net-next-old 26f146ed971c e9039493 .config console log report ci-upstream-net-kasan-gce
2019/05/03 01:00 net-next-old 26f146ed971c e9039493 .config console log report ci-upstream-net-kasan-gce
2019/05/02 23:14 net-next-old 26f146ed971c e9039493 .config console log report ci-upstream-net-kasan-gce
2019/05/02 19:49 net-next-old 26f146ed971c e9039493 .config console log report ci-upstream-net-kasan-gce
2019/05/02 15:16 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/02 14:13 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/02 13:08 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/02 12:00 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/02 10:48 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/02 09:46 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/02 08:34 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/02 07:11 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/02 05:43 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/02 04:28 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/02 03:29 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/02 01:53 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/02 00:14 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/01 22:56 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/01 20:59 net-next-old cd86972a9fd0 7516d9fa .config console log report ci-upstream-net-kasan-gce
2019/05/01 17:22 net-next-old 2b5bc3c8ebce 618456b4 .config console log report ci-upstream-net-kasan-gce
2019/05/01 16:04 net-next-old 2b5bc3c8ebce 618456b4 .config console log report ci-upstream-net-kasan-gce
2019/05/01 14:36 net-next-old 2b5bc3c8ebce 618456b4 .config console log report ci-upstream-net-kasan-gce
2019/05/01 11:57 net-next-old 2b5bc3c8ebce 618456b4 .config console log report ci-upstream-net-kasan-gce
2019/05/01 10:25 net-next-old 2b5bc3c8ebce 618456b4 .config console log report ci-upstream-net-kasan-gce
2019/05/01 06:15 net-next-old a658a3f2ecba 618456b4 .config console log report ci-upstream-net-kasan-gce
2019/05/01 04:27 net-next-old a658a3f2ecba 618456b4 .config console log report ci-upstream-net-kasan-gce
2019/05/01 03:26 net-next-old a658a3f2ecba 618456b4 .config console log report ci-upstream-net-kasan-gce
2019/05/01 02:20 net-next-old a658a3f2ecba 618456b4 .config console log report ci-upstream-net-kasan-gce
2019/05/01 00:47 net-next-old a658a3f2ecba 618456b4 .config console log report ci-upstream-net-kasan-gce
2019/05/01 00:15 net-next-old a658a3f2ecba 618456b4 .config console log report ci-upstream-net-kasan-gce
2019/04/30 23:05 net-next-old a658a3f2ecba 618456b4 .config console log report ci-upstream-net-kasan-gce
2019/04/30 22:05 net-next-old a658a3f2ecba 618456b4 .config console log report ci-upstream-net-kasan-gce
2019/04/30 17:39 net-next-old 7a1d8390d015 20f16bef .config console log report ci-upstream-net-kasan-gce
2019/04/30 16:23 net-next-old 7a1d8390d015 20f16bef .config console log report ci-upstream-net-kasan-gce
2019/04/30 15:11 net-next-old 7a1d8390d015 20f16bef .config console log report ci-upstream-net-kasan-gce
2019/04/30 09:48 net-next-old 7a1d8390d015 20f16bef .config console log report ci-upstream-net-kasan-gce
2019/03/28 03:35 linux-next a392ee45bae7 f94f56fe .config console log report ci-upstream-linux-next-kasan-gce-root
2018/09/04 10:07 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.