syzbot


WARNING: refcount bug in netdev_run_todo

Status: fixed on 2022/03/08 16:11
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: 34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
First crash: 263d, last: 254d

Sample crash report:
bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
bond0 (unregistering): Released all slaves
------------[ cut here ]------------
refcount_t: decrement hit 0; leaking memory.
WARNING: CPU: 0 PID: 9181 at lib/refcount.c:31 refcount_warn_saturate+0x17c/0x1a0 lib/refcount.c:31
Modules linked in:
CPU: 0 PID: 9181 Comm: kworker/u4:17 Not tainted 5.16.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
RIP: 0010:refcount_warn_saturate+0x17c/0x1a0 lib/refcount.c:31
Code: d5 8a 31 c0 e8 a5 43 38 fd 0f 0b e9 64 ff ff ff e8 f9 69 6e fd c6 05 74 38 d5 09 01 48 c7 c7 80 02 d5 8a 31 c0 e8 84 43 38 fd <0f> 0b e9 43 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 fe ff
RSP: 0018:ffffc90004277908 EFLAGS: 00010246
RAX: 5d178c2f28f5d200 RBX: 0000000000000004 RCX: ffff88801b32d700
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000004 R08: ffffffff8169fd72 R09: ffffed10173467b1
R10: ffffed10173467b1 R11: 0000000000000000 R12: dffffc0000000000
R13: ffffc900042779c0 R14: ffff8880752585b0 R15: ffff8880752585a0
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f50a5e13710 CR3: 000000000c88e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 netdev_run_todo+0xaa0/0xcf0 net/core/dev.c:10627
 default_device_exit_batch+0x450/0x4b0 net/core/dev.c:11608
 ops_exit_list net/core/net_namespace.c:171 [inline]
 cleanup_net+0x7ec/0xc50 net/core/net_namespace.c:593
 process_one_work+0x853/0x1140 kernel/workqueue.c:2298
 worker_thread+0xac1/0x1320 kernel/workqueue.c:2445
 kthread+0x468/0x490 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30
 </TASK>

Crashes (5):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2021/11/26 06:49 upstream b501b85957de 63eeac02 .config log report info WARNING: refcount bug in netdev_run_todo
ci-upstream-kasan-gce-smack-root 2021/11/21 06:03 upstream 923dcc5eb0c1 4eb20a4e .config log report info WARNING: refcount bug in netdev_run_todo
ci-upstream-kasan-gce-smack-root 2021/11/19 01:38 upstream 6fdf886424cf 31a30fc0 .config log report info WARNING: refcount bug in netdev_run_todo
ci-upstream-kasan-gce-smack-root 2021/11/17 15:44 upstream 8ab774587903 cafff8b6 .config log report info WARNING: refcount bug in netdev_run_todo
ci-upstream-kasan-gce-smack-root 2021/11/16 23:53 upstream 8ab774587903 cafff8b6 .config log report info WARNING: refcount bug in netdev_run_todo