WARNING in nsim_fib6_rt_nh

WARNING in nsim_fib6_rt_nh_del
Status: upstream: reported on 2020/01/30 09:54
Reported-by: syzbot+63abe9d5f32ff88090eb@syzkaller.appspotmail.com
First crash: 22d, last: 1d06h

Sample crash report:

------------[ cut here ]------------
WARNING: CPU: 1 PID: 8428 at drivers/net/netdevsim/fib.c:448 nsim_fib6_rt_nh_find drivers/net/netdevsim/fib.c:417 [inline]
WARNING: CPU: 1 PID: 8428 at drivers/net/netdevsim/fib.c:448 nsim_fib6_rt_nh_del+0x18f/0x2e0 drivers/net/netdevsim/fib.c:447
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 8428 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fb/0x318 lib/dump_stack.c:118
 panic+0x264/0x7a9 kernel/panic.c:221
 __warn+0x209/0x210 kernel/panic.c:582
 report_bug+0x1b6/0x2f0 lib/bug.c:195
 fixup_bug arch/x86/kernel/traps.c:174 [inline]
 do_error_trap+0xcf/0x1c0 arch/x86/kernel/traps.c:267
 do_invalid_op+0x36/0x40 arch/x86/kernel/traps.c:286
 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1027
RIP: 0010:nsim_fib6_rt_nh_del+0x18f/0x2e0 drivers/net/netdevsim/fib.c:417
Code: 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 4c 70 90 fc 4d 89 2c 24 eb 11 e8 71 49 53 fc <0f> 0b e9 f5 00 00 00 e8 65 49 53 fc 48 89 d8 48 c1 e8 03 48 b9 00
RSP: 0018:ffffc900055473e0 EFLAGS: 00010246
RAX: ffffffff8523c98f RBX: ffff8880958d9b38 RCX: 0000000000040000
RDX: ffffc9000fde3000 RSI: 000000000003ffff RDI: 0000000000040000
RBP: ffffc90005547410 R08: ffffffff85235ea6 R09: fffffbfff12d36e5
R10: fffffbfff12d36e5 R11: 0000000000000000 R12: ffff8880942eaa00
R13: ffff8880958d9b38 R14: 1ffff11014fc6c6a R15: ffff8880a7e36350
 nsim_fib6_rt_remove drivers/net/netdevsim/fib.c:688 [inline]
 nsim_fib6_event drivers/net/netdevsim/fib.c:725 [inline]
 nsim_fib_event drivers/net/netdevsim/fib.c:744 [inline]
 nsim_fib_event_nb+0x1a82/0x3750 drivers/net/netdevsim/fib.c:772
 notifier_call_chain kernel/notifier.c:83 [inline]
 __atomic_notifier_call_chain+0x18a/0x2f0 kernel/notifier.c:173
 atomic_notifier_call_chain+0x2d/0x40 kernel/notifier.c:183
 call_fib_notifiers+0x34/0x60 net/core/fib_notifier.c:35
 call_fib6_notifiers+0x43/0x60 net/ipv6/fib6_notifier.c:22
 fib6_del_route net/ipv6/ip6_fib.c:399 [inline]
 fib6_del+0xf7c/0x13b0 net/ipv6/ip6_fib.c:2016
 fib6_clean_node+0x2a6/0x4f0 net/ipv6/ip6_fib.c:2178
 fib6_walk_continue+0x650/0x8a0 net/ipv6/ip6_fib.c:2100
 fib6_walk net/ipv6/ip6_fib.c:2148 [inline]
 fib6_clean_tree net/ipv6/ip6_fib.c:2228 [inline]
 __fib6_clean_all+0x3ef/0x700 net/ipv6/ip6_fib.c:2244
 fib6_clean_all+0x2a/0x40 net/ipv6/ip6_fib.c:2255
 rt6_sync_down_dev net/ipv6/route.c:4755 [inline]
 rt6_disable_ip+0x10a/0x5d0 net/ipv6/route.c:4760
 addrconf_ifdown+0xb1/0x16c0 net/ipv6/addrconf.c:3708
 addrconf_notify+0x454/0x3bd0 net/ipv6/addrconf.c:3633
 notifier_call_chain kernel/notifier.c:83 [inline]
 __raw_notifier_call_chain kernel/notifier.c:361 [inline]
 raw_notifier_call_chain+0xe3/0x190 kernel/notifier.c:368
 __dev_notify_flags+0x24a/0x4d0 net/core/dev.c:1943
 dev_change_flags+0xec/0x190 net/core/dev.c:8229
 dev_ifsioc+0xc5/0x9f0 net/core/dev_ioctl.c:238
 dev_ioctl+0x534/0xcd0 net/core/dev_ioctl.c:490
 sock_do_ioctl+0x16b/0x260 net/socket.c:1076
 sock_ioctl+0x464/0x690 net/socket.c:1204
 vfs_ioctl fs/ioctl.c:47 [inline]
 ksys_ioctl fs/ioctl.c:763 [inline]
 __do_sys_ioctl fs/ioctl.c:772 [inline]
 __se_sys_ioctl+0x113/0x190 fs/ioctl.c:770
 __x64_sys_ioctl+0x7b/0x90 fs/ioctl.c:770
 do_syscall_64+0xf7/0x1c0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c449
Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f58f302ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f58f302b6d4 RCX: 000000000045c449
RDX: 0000000020000040 RSI: 0000000000008914 RDI: 0000000000000010
RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000417 R14: 00000000004d2d98 R15: 000000000076bf2c
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (19):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Maintainers
ci-upstream-kasan-gce-smack-root	2020/02/20 18:19	upstream	ca7e1fd1	81230308	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce	2020/02/18 15:38	upstream	b1da3acc	012fbc32	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root	2020/02/17 13:33	upstream	11a48a5a	2b411596	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root	2020/02/16 23:27	upstream	11a48a5a	1f448cd6	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce	2020/02/14 23:43	upstream	2019fc96	5d7b90f1	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce	2020/02/13 21:45	upstream	0bf999f9	c5ed587f	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root	2020/02/10 17:09	upstream	bb6d3fb3	18847f55	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce	2020/02/10 14:35	upstream	bb6d3fb3	18847f55	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-smack-root	2020/02/09 10:35	upstream	fdfa3a67	6ece2ea5	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce	2020/02/05 13:03	upstream	6992ca0d	93e5e335	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce	2020/02/02 11:39	upstream	94f2630b	2274ad39	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce	2020/02/01 21:44	upstream	94f2630b	2274ad39	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce	2020/01/31 12:57	upstream	ccaaaf6f	5ed23f9a	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce	2020/01/30 23:51	upstream	9f68e365	5ed23f9a	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-386	2020/02/12 16:15	upstream	359c92c0	84f4fc8a	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-386	2020/02/10 02:32	upstream	d1ea35f4	35f5e45e	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-bpf-next-kasan-gce	2020/01/31 14:39	bpf-next	b3a60822	5ed23f9a	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-net-kasan-gce	2020/01/30 00:57	net-next	b3a60822	5ed23f9a	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-linux-next-kasan-gce-root	2020/02/07 02:52	linux-next	6dff1565	06150bf1	.config	log	report	davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org