syzbot


BUG: corrupted list in netdev_unregister_kobject

Status: auto-obsoleted due to no activity on 2022/12/30 17:18
Subsystems: kernel
[Documentation on labels]
First crash: 584d, last: 584d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in netdev_unregister_kobject pm C 127 2h23m 3d09h 0/26 upstream: reported C repro on 2024/04/22 15:35

Sample crash report:
bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
list_del corruption. prev->next should be ffff0000ff6de688, but was ffff0000ff8c0540. (prev=ffff0000ff8c0540)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:61!
Internal error: Oops - BUG: 0 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 3461 Comm: kworker/u4:11 Not tainted 6.0.0-rc4-syzkaller-17255-ga6b443748715 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
Workqueue: netns cleanup_net
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __list_del_entry_valid+0xbc/0xd0 lib/list_debug.c:59
lr : __list_del_entry_valid+0xbc/0xd0 lib/list_debug.c:59
sp : ffff800013b63a90
x29: ffff800013b63a90 x28: 0000000000000000 x27: ffff0000ff6df000
x26: ffff0000ff6de790 x25: ffff0000ff6de7a0 x24: 0000000000000000
x23: ffff0000fe964f80 x22: 0000000004208160 x21: 000000000000000c
x20: ffff0000ff6de688 x19: ffff0000ff6de680 x18: 00000000000000c0
x17: 20747562202c3838 x16: ffff80000db78658 x15: ffff0000fe964f80
x14: 0000000000000000 x13: 00000000ffffffff x12: ffff0000fe964f80
x11: ff808000081c1fa0 x10: 0000000000000000 x9 : 2e1704414ef33f00
x8 : 2e1704414ef33f00 x7 : ffff8000081965e0 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
x2 : ffff0001fefddcd0 x1 : 0000000100000001 x0 : 000000000000006d
Call trace:
 __list_del_entry_valid+0xbc/0xd0 lib/list_debug.c:59
 __list_del_entry include/linux/list.h:134 [inline]
 list_del_init include/linux/list.h:206 [inline]
 kobj_kset_leave lib/kobject.c:175 [inline]
 __kobject_del+0xa8/0x1f8 lib/kobject.c:592
 kobject_del+0x28/0x110 lib/kobject.c:611
 device_del+0x46c/0x5bc drivers/base/core.c:3715
 netdev_unregister_kobject+0x1b4/0x1d4 net/core/net-sysfs.c:1987
 unregister_netdevice_many+0x730/0xa0c net/core/dev.c:10889
 default_device_exit_batch+0x3c0/0x424 net/core/dev.c:11356
 ops_exit_list net/core/net_namespace.c:168 [inline]
 cleanup_net+0x3cc/0x648 net/core/net_namespace.c:595
 process_one_work+0x2d8/0x504 kernel/workqueue.c:2289
 worker_thread+0x340/0x610 kernel/workqueue.c:2436
 kthread+0x12c/0x158 kernel/kthread.c:376
 ret_from_fork+0x10/0x20
Code: d001b4a0 91365000 aa0803e3 94a7897a (d4210000) 
---[ end trace 0000000000000000 ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/09/19 13:02 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a6b443748715 dd9a85ff .config console log report info [disk image] [vmlinux] ci-upstream-gce-arm64 BUG: corrupted list in netdev_unregister_kobject
* Struck through repros no longer work on HEAD.