syzbot


BUG: unable to handle kernel paging request in gro_cells_destroy (4)

Status: closed as invalid on 2019/05/15 23:07
Subsystems: net
[Documentation on labels]
First crash: 1819d, last: 1819d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: unable to handle kernel paging request in gro_cells_destroy (5) net 2 1784d 1790d 0/26 closed as invalid on 2019/06/15 03:25
upstream BUG: unable to handle kernel paging request in gro_cells_destroy (3) net 3 1851d 1868d 11/26 fixed on 2019/03/28 12:00
upstream BUG: unable to handle kernel paging request in gro_cells_destroy (2) net 2 1912d 1924d 0/26 closed as invalid on 2019/02/06 03:52
upstream BUG: unable to handle kernel paging request in gro_cells_destroy net 5 2054d 2112d 0/26 closed as invalid on 2018/09/05 12:51

Sample crash report:
BUG: unable to handle kernel paging request at ffffffe8ffffd6c0
#PF error: [WRITE]
PGD 8874067 P4D 8874067 PUD 0 
Oops: 0002 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 12501 Comm: kworker/u4:9 Not tainted 5.1.0-rc6+ #184
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
RIP: 0010:__skb_unlink include/linux/skbuff.h:1983 [inline]
RIP: 0010:__skb_dequeue include/linux/skbuff.h:1999 [inline]
RIP: 0010:__skb_queue_purge include/linux/skbuff.h:2710 [inline]
RIP: 0010:gro_cells_destroy net/core/gro_cells.c:103 [inline]
RIP: 0010:gro_cells_destroy+0x1ab/0x360 net/core/gro_cells.c:92
Code: 7a 08 49 8b 47 08 49 c7 07 00 00 00 00 48 89 f9 49 c7 47 08 00 00 00 00 48 c1 e9 03 42 80 3c 21 00 0f 85 10 01 00 00 48 89 c1 <48> 89 42 08 48 c1 e9 03 42 80 3c 21 00 0f 85 dd 00 00 00 48 89 10
RSP: 0018:ffff888061bf79a8 EFLAGS: 00010246
RAX: 0000000000ffffff RBX: ffffe8ffffd6b020 RCX: 0000000000ffffff
RDX: ffffffe8ffffd6b8 RSI: ffffffff858be1da RDI: ffffffe8ffffd6c0
RBP: ffff888061bf7a08 R08: ffff88808544c180 R09: fffffbfff1265745
R10: fffffbfff1265744 R11: ffffffff8932ba23 R12: dffffc0000000000
R13: 0000000000000001 R14: ffffe8ffffd6b030 R15: ffffe8ffffd6b029
FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffe8ffffd6c0 CR3: 000000008ed9d000 CR4: 00000000001406f0
Call Trace:
 ip_tunnel_dev_free+0x19/0x60 net/ipv4/ip_tunnel.c:1013
 netdev_run_todo+0x51c/0x7d0 net/core/dev.c:8986
 rtnl_unlock+0xe/0x10 net/core/rtnetlink.c:116
 ip_tunnel_delete_nets+0x423/0x5f0 net/ipv4/ip_tunnel.c:1127
 ipgre_tap_exit_batch_net+0x23/0x30 net/ipv4/ip_gre.c:1582
 ops_exit_list.isra.0+0x105/0x160 net/core/net_namespace.c:156
 cleanup_net+0x3fb/0x960 net/core/net_namespace.c:552
 process_one_work+0x98e/0x1790 kernel/workqueue.c:2269
 worker_thread+0x98/0xe40 kernel/workqueue.c:2415
 kthread+0x357/0x430 kernel/kthread.c:253
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Modules linked in:
CR2: ffffffe8ffffd6c0
---[ end trace dc64d625d5843733 ]---
RIP: 0010:__skb_unlink include/linux/skbuff.h:1983 [inline]
RIP: 0010:__skb_dequeue include/linux/skbuff.h:1999 [inline]
RIP: 0010:__skb_queue_purge include/linux/skbuff.h:2710 [inline]
RIP: 0010:gro_cells_destroy net/core/gro_cells.c:103 [inline]
RIP: 0010:gro_cells_destroy+0x1ab/0x360 net/core/gro_cells.c:92
Code: 7a 08 49 8b 47 08 49 c7 07 00 00 00 00 48 89 f9 49 c7 47 08 00 00 00 00 48 c1 e9 03 42 80 3c 21 00 0f 85 10 01 00 00 48 89 c1 <48> 89 42 08 48 c1 e9 03 42 80 3c 21 00 0f 85 dd 00 00 00 48 89 10
RSP: 0018:ffff888061bf79a8 EFLAGS: 00010246
RAX: 0000000000ffffff RBX: ffffe8ffffd6b020 RCX: 0000000000ffffff
RDX: ffffffe8ffffd6b8 RSI: ffffffff858be1da RDI: ffffffe8ffffd6c0
RBP: ffff888061bf7a08 R08: ffff88808544c180 R09: fffffbfff1265745
R10: fffffbfff1265744 R11: ffffffff8932ba23 R12: dffffc0000000000
R13: 0000000000000001 R14: ffffe8ffffd6b030 R15: ffffe8ffffd6b029
FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffe8ffffd6c0 CR3: 000000008ed9d000 CR4: 00000000001406f0

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/04/27 23:17 net-old fdfdf86720a3 b617407b .config console log report ci-upstream-net-this-kasan-gce
* Struck through repros no longer work on HEAD.