syzbot


WARNING in pfkey_sock_destruct

Status: auto-closed as invalid on 2019/06/26 05:10
Reported-by: syzbot+44c887b9422bcbb67c36@syzkaller.appspotmail.com
First crash: 2072d, last: 1944d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-44 WARNING in pfkey_sock_destruct (2) 2 1622d 1626d 0/2 auto-closed as invalid on 2020/03/14 09:26
upstream WARNING in pfkey_sock_destruct net 16 1904d 2037d 0/26 auto-closed as invalid on 2019/08/04 21:29
android-49 WARNING in pfkey_sock_destruct 10 1821d 1837d 0/3 auto-closed as invalid on 2019/10/25 08:52

Sample crash report:
WARNING: CPU: 0 PID: 25782 at net/key/af_key.c:111 pfkey_sock_destruct+0x307/0x350 net/key/af_key.c:111()
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53206 sclass=netlink_route_socket
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 25782 Comm: syz-executor0 Not tainted 4.4.169+ #7
 0000000000000000 5563fa526c132579 ffff8801bfaa7bb0 ffffffff81aa635d
 ffffffff828353a0 ffff8801cfb62f80 ffffffff82aad0e0 0000000000000009
 000000000000006f ffff8801bfaa7c70 ffffffff813a22b4 0000000041b58ab3
Call Trace:
 [<ffffffff81aa635d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81aa635d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
 [<ffffffff813a22b4>] panic+0x19e/0x359 kernel/panic.c:112
 [<ffffffff813a24a4>] warn_slowpath_common.cold.6+0x20/0x20 kernel/panic.c:455
 [<ffffffff810d44d9>] warn_slowpath_null+0x29/0x30 kernel/panic.c:492
 [<ffffffff826f13e7>] pfkey_sock_destruct+0x307/0x350 net/key/af_key.c:111
 [<ffffffff821e39cc>] sk_destruct+0x4c/0x4c0 net/core/sock.c:1447
 [<ffffffff821e3e8f>] __sk_free+0x4f/0x220 net/core/sock.c:1480
 [<ffffffff821e4090>] sk_free+0x30/0x40 net/core/sock.c:1491
 [<ffffffff826e2ba3>] sock_put include/net/sock.h:1639 [inline]
 [<ffffffff826e2ba3>] pfkey_release+0x263/0x2f0 net/key/af_key.c:194
 [<ffffffff821cd309>] __sock_release+0xd9/0x260 net/socket.c:592
 [<ffffffff821cd4a9>] sock_close+0x19/0x20 net/socket.c:1050
 [<ffffffff814976b5>] __fput+0x235/0x6f0 fs/file_table.c:208
 [<ffffffff81497bf5>] ____fput+0x15/0x20 fs/file_table.c:244
 [<ffffffff8112f92c>] task_work_run+0x21c/0x2d0 kernel/task_work.c:115
 [<ffffffff81003edd>] tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 [<ffffffff81003edd>] exit_to_usermode_loop+0x13d/0x160 arch/x86/entry/common.c:188
 [<ffffffff81005784>] prepare_exit_to_usermode arch/x86/entry/common.c:221 [inline]
 [<ffffffff81005784>] syscall_return_slowpath+0x254/0x2d0 arch/x86/entry/common.c:286
 [<ffffffff82716421>] int_ret_from_sys_call+0x25/0xa3
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/28 05:09 https://android.googlesource.com/kernel/common android-4.4 dfca92bab267 af317504 .config console log report ci-android-44-kasan-gce
2018/08/21 17:44 https://android.googlesource.com/kernel/common android-4.4 5541782ce2bb 95b5c82b .config console log report ci-android-44-kasan-gce
* Struck through repros no longer work on HEAD.