syzbot


WARNING in fib6_del (2)

Status: public: reported C repro on 2019/10/30 15:36
Reported-by: syzbot+d1ef6facf9fdae239185@syzkaller.appspotmail.com
First crash: 1585d, last: 1571d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 WARNING in fib6_del 281 2346d 2383d 1/3 fixed on 2017/10/22 12:47
upstream WARNING in fib6_del 24 2370d 2383d 3/26 fixed on 2017/11/06 08:47

Sample crash report:
IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
qtaguid: iface_stat: create6(lo): no inet dev
IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
qtaguid: iface_stat: create6(lo): no inet dev
------------[ cut here ]------------
WARNING: CPU: 1 PID: 2213 at net/ipv6/ip6_fib.c:1477 fib6_del+0x946/0xb10 net/ipv6/ip6_fib.c:1477
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 2213 Comm: syz-executor287 Not tainted 4.9.141+ #1
 ffff8801c59c6928 ffffffff81b42e79 ffffffff82a38ce0 00000000ffffffff
 ffffffff82cc1e00 0000000000000001 0000000000000009 ffff8801c59c69e8
 ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66
Call Trace:
 [<ffffffff81b42e79>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81b42e79>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff813f7125>] panic+0x1bf/0x39f kernel/panic.c:179
 [<ffffffff813f7362>] __warn.cold.8+0x2f/0x2f kernel/panic.c:542
 [<ffffffff810dc02c>] warn_slowpath_null+0x2c/0x40 kernel/panic.c:585
 [<ffffffff826eeeb6>] fib6_del+0x946/0xb10 net/ipv6/ip6_fib.c:1477
 [<ffffffff826ef2a0>] fib6_clean_node+0x220/0x4c0 net/ipv6/ip6_fib.c:1657
 [<ffffffff826e6545>] fib6_walk_continue+0x3e5/0x640 net/ipv6/ip6_fib.c:1583
 [<ffffffff826e6b01>] fib6_walk+0x91/0xf0 net/ipv6/ip6_fib.c:1628
 [<ffffffff826e6c33>] fib6_clean_tree+0xd3/0x110 net/ipv6/ip6_fib.c:1702
 [<ffffffff826e6d69>] __fib6_clean_all+0xf9/0x220 net/ipv6/ip6_fib.c:1718
 [<ffffffff826ef567>] fib6_clean_all+0x27/0x30 net/ipv6/ip6_fib.c:1729
 [<ffffffff826e4b51>] rt6_ifdown+0xa1/0x7f0 net/ipv6/route.c:2719
 [<ffffffff826bf2e0>] addrconf_ifdown+0xd0/0x1420 net/ipv6/addrconf.c:3569
 [<ffffffff826c74be>] addrconf_notify+0x8ee/0x2140 net/ipv6/addrconf.c:3493
 [<ffffffff811478d4>] notifier_call_chain+0xb4/0x1d0 kernel/notifier.c:93
 [<ffffffff81147a5d>] __raw_notifier_call_chain kernel/notifier.c:394 [inline]
 [<ffffffff81147a5d>] raw_notifier_call_chain+0x2d/0x40 kernel/notifier.c:401
 [<ffffffff822f4a45>] call_netdevice_notifiers_info+0x55/0x70 net/core/dev.c:1647
 [<ffffffff82306fbd>] netdev_state_change+0xdd/0x100 net/core/dev.c:1286
 [<ffffffff8234e6d6>] do_setlink+0x2596/0x2ef0 net/core/rtnetlink.c:2199
 [<ffffffff8234f240>] rtnl_setlink+0x210/0x310 net/core/rtnetlink.c:2241
 [<ffffffff8235592c>] rtnetlink_rcv_msg+0x49c/0x650 net/core/rtnetlink.c:4078
 [<ffffffff823d59e5>] netlink_rcv_skb+0x145/0x370 net/netlink/af_netlink.c:2365
 [<ffffffff8234abfa>] rtnetlink_rcv+0x2a/0x40 net/core/rtnetlink.c:4084
 [<ffffffff823d4478>] netlink_unicast_kernel net/netlink/af_netlink.c:1285 [inline]
 [<ffffffff823d4478>] netlink_unicast+0x4d8/0x6d0 net/netlink/af_netlink.c:1311
 [<ffffffff823d4e44>] netlink_sendmsg+0x694/0xc30 net/netlink/af_netlink.c:1859
 [<ffffffff822a063b>] sock_sendmsg_nosec net/socket.c:648 [inline]
 [<ffffffff822a063b>] sock_sendmsg+0xbb/0x110 net/socket.c:658
 [<ffffffff822a08b3>] sock_write_iter+0x223/0x3b0 net/socket.c:856
 [<ffffffff8150770b>] do_iter_readv_writev+0x3cb/0x4b0 fs/read_write.c:695
 [<ffffffff8150b22a>] do_readv_writev+0x2fa/0x7b0 fs/read_write.c:871
 [<ffffffff8150bcc7>] vfs_writev+0x87/0xc0 fs/read_write.c:910
 [<ffffffff8150bde6>] do_writev+0xe6/0x260 fs/read_write.c:943
 [<ffffffff8150f117>] SYSC_writev fs/read_write.c:1016 [inline]
 [<ffffffff8150f117>] SyS_writev+0x27/0x30 fs/read_write.c:1013
 [<ffffffff810056ef>] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285
 [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/11/12 23:39 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 048f2d49 .config console log report syz C ci-android-49-kasan-gce
2019/11/13 00:16 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 048f2d49 .config console log report syz C ci-android-49-kasan-gce-386
2019/11/13 19:49 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 048f2d49 .config console log report ci-android-49-kasan-gce
2019/11/12 22:41 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 048f2d49 .config console log report ci-android-49-kasan-gce
2019/11/04 18:42 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 76630fc9 .config console log report ci-android-49-kasan-gce
2019/10/30 14:36 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 5ea87a66 .config console log report ci-android-49-kasan-gce
* Struck through repros no longer work on HEAD.