syzbot


WARNING in static_key_slow_try_dec

Status: fixed on 2019/08/05 13:45
Subsystems: kernel
[Documentation on labels]
Fix commit: d44e3fa5d7e6 ipv6: fix static key imbalance in fl_create()
First crash: 1724d, last: 1720d
Cause bisection: introduced by (bisect log) :
commit fa8043017cf83427c7e3d7d8defe2c2133edffea
Author: David S. Miller <davem@davemloft.net>
Date: Fri Jul 5 22:22:28 2019 +0000

  Merge branch 'hsr-bug-fixes'

Crash: general protection fault in send_hsr_supervision_frame (log)
Repro: C syz .config
  
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in static_key_slow_try_dec (3) kernel C 26 410d 569d 22/26 fixed on 2023/02/24 13:50
upstream WARNING in static_key_slow_try_dec (2) kernel C unreliable 5417 890d 958d 20/26 fixed on 2022/03/08 16:11

Sample crash report:
------------[ cut here ]------------
jump label: negative count!
WARNING: CPU: 0 PID: 8813 at kernel/jump_label.c:221 static_key_slow_try_dec kernel/jump_label.c:221 [inline]
WARNING: CPU: 0 PID: 8813 at kernel/jump_label.c:221 static_key_slow_try_dec+0x1ab/0x1d0 kernel/jump_label.c:206
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 8813 Comm: syz-executor467 Not tainted 5.2.0-rc6+ #62
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 panic+0x2cb/0x744 kernel/panic.c:219
 __warn.cold+0x20/0x4d kernel/panic.c:576
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 fixup_bug arch/x86/kernel/traps.c:174 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:272
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:291
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:986
RIP: 0010:static_key_slow_try_dec kernel/jump_label.c:221 [inline]
RIP: 0010:static_key_slow_try_dec+0x1ab/0x1d0 kernel/jump_label.c:206
Code: c0 e8 e9 3e e5 ff 83 fb 01 0f 85 32 ff ff ff e8 5b 3d e5 ff 45 31 ff eb a0 e8 51 3d e5 ff 48 c7 c7 40 99 92 87 e8 13 75 b7 ff <0f> 0b eb 8b 4c 89 e7 e8 a9 c0 1e 00 e9 de fe ff ff e8 bf 6d b7 ff
RSP: 0018:ffff888096647450 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff815adb06 RDI: ffffed1012cc8e7c
RBP: ffff8880966474e0 R08: ffff88809f6fa440 R09: ffffed1015d060a9
R10: ffffed1015d060a8 R11: ffff8880ae830547 R12: ffffffff89832ce0
R13: ffff8880966474b8 R14: 1ffff11012cc8e8b R15: 00000000ffffff01
 __static_key_slow_dec_deferred+0x65/0x110 kernel/jump_label.c:272
 fl_free+0xa9/0xe0 net/ipv6/ip6_flowlabel.c:121
 fl_create+0x6af/0x9f0 net/ipv6/ip6_flowlabel.c:457
 ipv6_flowlabel_opt+0x80e/0x2730 net/ipv6/ip6_flowlabel.c:624
 do_ipv6_setsockopt.isra.0+0x2119/0x4100 net/ipv6/ipv6_sockglue.c:825
 ipv6_setsockopt+0xf6/0x170 net/ipv6/ipv6_sockglue.c:944
 tcp_setsockopt net/ipv4/tcp.c:3131 [inline]
 tcp_setsockopt+0x8f/0xe0 net/ipv4/tcp.c:3125
 sock_common_setsockopt+0x94/0xd0 net/core/sock.c:3130
 __sys_setsockopt+0x253/0x4b0 net/socket.c:2080
 __do_sys_setsockopt net/socket.c:2096 [inline]
 __se_sys_setsockopt net/socket.c:2093 [inline]
 __x64_sys_setsockopt+0xbe/0x150 net/socket.c:2093
 do_syscall_64+0xfd/0x680 arch/x86/entry/common.c:301
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x441209
Code: e8 fc ab 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 9b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffdb8b65958 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441209
RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
RBP: 00000000000114aa R08: 000000000000fdf7 R09: 00000000004002c8
R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000402030
R13: 00000000004020c0 R14: 0000000000000000 R15: 0000000000000000
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (58):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/07/09 15:25 net-next-old b14a260e33dd f62e1e85 .config console log report syz C ci-upstream-net-kasan-gce
2019/07/11 03:03 linux-next a77f5c70e3d2 ff7bf04c .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2019/07/12 15:41 upstream d7d170a8e357 baa5258a .config console log report ci-upstream-kasan-gce
2019/07/12 13:50 upstream d7d170a8e357 baa5258a .config console log report ci-upstream-kasan-gce-smack-root
2019/07/12 13:36 upstream d7d170a8e357 baa5258a .config console log report ci-upstream-kasan-gce-smack-root
2019/07/12 02:47 upstream 17a20acaf171 baa5258a .config console log report ci-upstream-kasan-gce-smack-root
2019/07/12 02:42 upstream 17a20acaf171 baa5258a .config console log report ci-upstream-kasan-gce-smack-root
2019/07/12 02:39 upstream 17a20acaf171 baa5258a .config console log report ci-upstream-kasan-gce-smack-root
2019/07/12 02:12 upstream 17a20acaf171 baa5258a .config console log report ci-upstream-kasan-gce
2019/07/12 14:23 upstream d7d170a8e357 baa5258a .config console log report ci-upstream-kasan-gce-386
2019/07/12 02:00 net-old a131c2bf1656 baa5258a .config console log report ci-upstream-net-this-kasan-gce
2019/07/12 01:53 net-old a131c2bf1656 baa5258a .config console log report ci-upstream-net-this-kasan-gce
2019/07/12 01:51 net-old a131c2bf1656 baa5258a .config console log report ci-upstream-net-this-kasan-gce
2019/07/12 01:48 net-old a131c2bf1656 baa5258a .config console log report ci-upstream-net-this-kasan-gce
2019/07/12 01:47 net-old a131c2bf1656 baa5258a .config console log report ci-upstream-net-this-kasan-gce
2019/07/12 01:42 net-old a131c2bf1656 baa5258a .config console log report ci-upstream-net-this-kasan-gce
2019/07/12 01:37 net-old a131c2bf1656 baa5258a .config console log report ci-upstream-net-this-kasan-gce
2019/07/12 01:30 net-old a131c2bf1656 baa5258a .config console log report ci-upstream-net-this-kasan-gce
2019/07/12 01:28 net-old a131c2bf1656 baa5258a .config console log report ci-upstream-net-this-kasan-gce
2019/07/12 01:28 net-old a131c2bf1656 baa5258a .config console log report ci-upstream-net-this-kasan-gce
2019/07/12 01:20 net-old a131c2bf1656 baa5258a .config console log report ci-upstream-net-this-kasan-gce
2019/07/12 00:53 net-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-this-kasan-gce
2019/07/11 20:23 net-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-this-kasan-gce
2019/07/11 20:17 net-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-this-kasan-gce
2019/07/11 20:15 net-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-this-kasan-gce
2019/07/11 20:13 net-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-this-kasan-gce
2019/07/11 20:10 net-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-this-kasan-gce
2019/07/11 20:07 net-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-this-kasan-gce
2019/07/11 20:04 net-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-this-kasan-gce
2019/07/11 20:03 net-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-this-kasan-gce
2019/07/11 19:59 net-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-this-kasan-gce
2019/07/11 19:55 net-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-this-kasan-gce
2019/07/11 19:48 net-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-this-kasan-gce
2019/07/11 19:43 net-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-this-kasan-gce
2019/07/13 17:26 net-next-old a131c2bf1656 e6fb0f13 .config console log report ci-upstream-net-kasan-gce
2019/07/13 15:54 net-next-old a131c2bf1656 e6fb0f13 .config console log report ci-upstream-net-kasan-gce
2019/07/13 12:51 net-next-old a131c2bf1656 e6fb0f13 .config console log report ci-upstream-net-kasan-gce
2019/07/13 05:25 net-next-old a131c2bf1656 baa5258a .config console log report ci-upstream-net-kasan-gce
2019/07/12 18:58 net-next-old a131c2bf1656 baa5258a .config console log report ci-upstream-net-kasan-gce
2019/07/11 20:02 net-next-old a131c2bf1656 186a30b9 .config console log report ci-upstream-net-kasan-gce
2019/07/11 18:37 net-next-old 1ff2f0fa450e 186a30b9 .config console log report ci-upstream-net-kasan-gce
2019/07/11 08:18 net-next-old 1ff2f0fa450e ff7bf04c .config console log report ci-upstream-net-kasan-gce
2019/07/09 14:42 net-next-old b14a260e33dd f62e1e85 .config console log report ci-upstream-net-kasan-gce
2019/07/09 14:37 net-next-old b14a260e33dd f62e1e85 .config console log report ci-upstream-net-kasan-gce
2019/07/09 14:28 net-next-old b14a260e33dd f62e1e85 .config console log report ci-upstream-net-kasan-gce
2019/07/09 14:22 net-next-old b14a260e33dd f62e1e85 .config console log report ci-upstream-net-kasan-gce
2019/07/13 00:48 linux-next 2c51253c1714 baa5258a .config console log report ci-upstream-linux-next-kasan-gce-root
2019/07/12 17:19 linux-next 2c51253c1714 baa5258a .config console log report ci-upstream-linux-next-kasan-gce-root
2019/07/11 01:12 linux-next a77f5c70e3d2 ff7bf04c .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.